last executing test programs: 41.370188804s ago: executing program 0 (id=1135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, &(0x7f0000000400)) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000038b22f0ed47f6110326be75367", @ANYRES16=r3, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r5, @ANYBLOB="06000600fe00000006000400fdff0000"], 0x50}, 0x4, 0x700000000000000}, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) close_range(r8, 0xffffffffffffffff, 0x0) unshare(0x28000600) r10 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r10, 0x409, 0x3f) r11 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) openat$cgroup_procs(r12, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x38, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x68983d32, 0x0, 0x0, 0x0, 0xd666}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x21a, 0x0, 0x0, 0x0, 0x10001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @alu={0x4, 0x0, 0x0, 0xb, 0xb, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff8722, 0x0, 0x0, 0x0, 0x800}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x6, 0x79, &(0x7f0000000380)=""/121, 0x40f00, 0x51, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000600)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x5, 0xfffffffd, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r2, r2, r2], 0x0, 0x10, 0x1}, 0x94) ioctl$VT_GETSTATE(r7, 0x5603, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x3a4203c, &(0x7f0000003380)=ANY=[@ANYRES32=0x0, @ANYBLOB="a896d44fd53af3d30254681655f993970ab2a8d1becc96d1ce863510ad6cd4257ee6c85ffbc665a33f530f4ab9e2826f28c3ad609221553fc59a7dcbc223b95c26fab1b3322b740220f47df00805c1e849af1d75c553d684f42339006e6d8c38fcf4d026be471998c8c1c2b6105f6246479079488725c3b0cb707eb8afc024bd7a944a53e883795d5bafcc6837f78ed3133256647dc775507fcd0eef684692e43f7feac9e80636715372c6b3468ea973e07ed64bb01d4317b53c6fa13e3ba90157f8f271847b9cd8469102a8", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESDEC=r6, @ANYBLOB="e486301f94ddf2a3c6e9c6a4598fef2f7853d743f4831d65b415af9ec7dbc191ae080a134bb75d703b909f2312a98aee8b0f9b0db8e7ed2462a00363dad1638b2153b8042adc1cad959cd28efb4c8408de3df91b02cf343ff378c71b87fe090000000000000013d306913a737be0e0af9d7310bf01ca4a8807b84427333d19419f24196d806ff138823247a8bf660b3819db5bbac9a3d8c83bbc03f79dd97f2a3ceb4e16d6a19e70233dd475778c5a2ff5143c51b6058a6effbef0ad0e432f91e823", @ANYBLOB="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", @ANYBLOB="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", @ANYRESHEX, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000100)) lgetxattr(&(0x7f00000001c0)='./file2/file0\x00', &(0x7f0000000200)=@known='security.selinux\x00', 0x0, 0x0) 40.272380486s ago: executing program 0 (id=1138): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$key(0xf, 0x3, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000800000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) 40.222575326s ago: executing program 0 (id=1141): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000240)=r1, 0x4) sendmsg$inet6(r0, &(0x7f0000003100)={&(0x7f0000000080)={0xa, 0x4e21, 0x74, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xc1a}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="8000e859667fbc13", 0x8}], 0x1}, 0x8050) 40.168510116s ago: executing program 0 (id=1142): membarrier(0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_clone(0x80000, &(0x7f0000000040)="dc17cd", 0x3, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="7279aa4c2278b857f79515272aad1d00e08d2d552cdd2c64765fc44105a46e2dbbee78560df0723d21f8f59f088427575fd94464a4573737278f85969aa9ff6f0367d779a85096f020af839ea4641a4a511df49a4e6e39033f6e86f91ff3eeabcf60ff94dbcf16e56cdb9ba84668c1a615d3") renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x5) 40.011957646s ago: executing program 0 (id=1143): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014990580700036010bab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e800ef52a98516237ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92d54b43370e9701", 0xd8}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 39.318260215s ago: executing program 0 (id=1148): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x2, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="089900050200", &(0x7f0000001200)=""/4115, 0x0, 0x10010, 0x1, 0x0}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_enter(r2, 0x33f8, 0xceca, 0x7f, &(0x7f0000000000), 0x8) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 39.217964695s ago: executing program 32 (id=1148): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x2, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="089900050200", &(0x7f0000001200)=""/4115, 0x0, 0x10010, 0x1, 0x0}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_enter(r2, 0x33f8, 0xceca, 0x7f, &(0x7f0000000000), 0x8) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) 24.813364981s ago: executing program 4 (id=1263): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00100000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000480), 0x5, 0xbd1, &(0x7f0000001f40)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r3, 0x400, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xbc, 0x12, 0x200, 0x70bd2c, 0x25dfdbfe, {0x1, 0xfd, 0xa, 0x0, {0x4e24, 0x4e20, [0xfff, 0x7, 0x3, 0x258], [0x6, 0x200, 0x10000, 0x10002], r1, [0x8, 0x6]}, 0x4, 0x30}, [@INET_DIAG_REQ_BYTECODE={0x28, 0x1, "96da6ac6b4b4cd650a39ea98964805ea6f3c3f2f8994e9be52554c96b8b8abf27293a449"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "2514a694eaae1e099436a8ca361ff091e6def355fca68bf2f69a9c966789c3bfcfc1ccbcf6ac8f16bbd08ce36ae036788707ffc29df42366aafc0962c529f73e43ec"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x4048040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000000b050000000000000000000300000d080001007533320008000240000005"], 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0xcb, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LABEL={0x14}]}, 0x34}}, 0x0) 24.648126889s ago: executing program 4 (id=1264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x22, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa000004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "d803c00c"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "b0b46fa64c"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x4020940d, &(0x7f0000000480)={0x0, 0x0}) r8 = syz_usb_connect(0x1, 0x9a7, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x9e, 0x8f, 0x30, 0x10, 0x421, 0x508, 0xd65, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x995, 0x4, 0x5, 0xe, 0x10, 0x6, [{{0x9, 0x4, 0xdd, 0x3, 0xf, 0x2, 0x2, 0xff, 0x80, [@hid_hid={0x9, 0x21, 0x6, 0x33, 0x1, {0x22, 0xdec}}], [{{0x9, 0x5, 0x8, 0x2, 0x40, 0x4, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf8, 0x40}, @generic={0xb9, 0x22, "97186ae0c7f704267ca2b3f70c8f549a49cd0db0cf2d01c912c779c1b8579ce296d1bb51d05324c6d75c67a298b39f5a79b811df5f26f94512071e3e1d62a6c354c01119b752b14782394ec5aba7a3caf9aaa9efd1a5cc3c4a614d9ac930d71eeefea031270c43bf6107e27b23c750f1182d73b0e30dc2623950a380e46876444a375496ed66ad35f4d03087eafa1f9452a117a7f96fce76b0f384a4f280cb56be912b29b238c380a23254bbfc14b2224d88bdc0e34aed"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x7f7, 0x1, 0xd, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x7}]}}, {{0x9, 0x5, 0xd, 0x4, 0x0, 0xfb, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x9}]}}, {{0x9, 0x5, 0x38028f90b1ed386f, 0xc, 0x40, 0xc8, 0x5, 0x11, [@generic={0x9d, 0x6, "df01d466098baa07387828ccdb8fb71f82e55640d3e46dcb12bfc1473d82b2dddeff580d1eba78017c2584413d36997d77fd6a948f2036866793aadfdebec4d25800096f716ee24cfea90ff27bf6f1dc4815edd63af1a6ea8d2bbe832b859e5d34a1445a871431a35e57f2c17b4e324a163f7319d001f75d9e1e2cfd7f0ae6a54a1c6ce31977283a7f7940461bc1a03efc4e2e5176805afc2f60b6"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xcb64}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x9, 0x4, 0x8, [@generic={0xf, 0xf, "5bd1cfbf24fb95d44744bb7d38"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x2, 0x9, 0x2, [@generic={0xd, 0x21, "9e805bf36ae432f10a04bc"}]}}, {{0x9, 0x5, 0x6e2ad9ba66a0ed6b, 0x0, 0x20, 0x7f, 0x11, 0x0, [@generic={0x79, 0x11, "41cd446bfac7283091596b8e779f9fc1b6eceac5678c3c9a91c9babcfda81f56e73564491eff67f5ff579cc753f1e615b2a4c53b3afb12a7197fdc28504a3c55ea2798e451dd7b7cddd7413a541697889c40fd645fbe099818c46c77401121910599920fbe2f8fc1d21566defbe086690e48ebee773b8f"}]}}, {{0x9, 0x5, 0x3, 0x11, 0x8, 0x4, 0x40, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x2}]}}, {{0x9, 0x5, 0x1f, 0x0, 0x200, 0xf7, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x10}]}}, {{0x9, 0x5, 0xf, 0xc, 0x250, 0x9, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x9, 0x3}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x0, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x7}, @generic={0xd7, 0x4, "e0e27fc0f6f8e71807fd07cc390a32945aaf6ebaffc4655271c7d72b003b0b06d35485c8d701878b0264de982b028521c18b66d0ebd05c88f3998331e9776a3e54b8933a7c8d84e5a6f5b63356da12ba40bf42a1f255d869d849e8514b4ac25c16486039e0dcf3ac76a2020c511d5f0464bb95880cde8b179f9d129a25c429a55390c236ef9aba0de79d389584fad0968245f812d293ee8350ff624c35a1ea4c7973a912de0b1da197742b80d4867133c441e01b5cd5dd2f5a810d002ca5fac43ab7ee11aa4c9ee138fa7bd950202fd030342ecc36"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x7, 0x46, 0x0, [@generic={0x2a, 0x11, "56efac567341e5ae9afc246785ecaa99b631175ec8289f7e0b2b1fd5ab1d91cc69e57984aa114b6d"}, @uac_iso={0x7, 0x25, 0x1, 0x4037df477535d1a2, 0x2, 0x18}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x3, 0x8, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0x22, 0x4c, [@generic={0x6c, 0x21, "6b064f9fadc4f81f3d12e0cbc650cf4f2cecaba6af5268488011b748ae8c97aba352398d8d876842aec90b2187c0b0a6eddbf2d09d01cd0673f17befe74f7ae56cad6216ac99b978ce824ce0284fb089f672f8cee03ebda3b7eef96c0ec0d45a5ee2cdf5bc9649cda020"}]}}]}}, {{0x9, 0x4, 0x49, 0x5, 0x5, 0x8b, 0x7d, 0x7b, 0x6, [@hid_hid={0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xb84}}], [{{0x9, 0x5, 0x8, 0x4, 0x400, 0x22, 0x3, 0xd, [@generic={0x40, 0x23, "719c7626dbb0434d30ff88b2b61ad457a984dbaaa6dde8538873a16f745ab43cb0f34fb7ded238da68da911ea9a706fec5f735d7d385b2225654f11d7478"}, @generic={0x66, 0xe, "e8e7fef53c07f0bf132e4a49dda219a785ef27e61fb17554f77bd080f4ee38391618024dd8d04c5c584b357545e3200181c20da907c2b3a99e86f670f58ba385d84fe37f8b0e03ebfd7a6c2649efe744eefc0632c2087a87ce736619837f4788dad53f0d"}]}}, {{0x9, 0x5, 0x86, 0x3, 0x20, 0xc1, 0xc, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x9, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0xb, [@generic={0xcb, 0x23, "6fc6d7fa465ed566256715a7fbd7597305b0f454c497cb2fddaf5b7e96fe9040c53915cbb87275a9293a3b44bf8f6a44dab21ebd30a7c5947cd14185e8ee53448831805489b4c6d0b01d64bde610c6a13689dd640a4883067c918b0fc37c04bd6380aef94d2729e945ee387f7cf93765a77320aaa944f430a7c572514a139150d72b2f99cf5ccdd120d21ef54cd3f57c20e85b7e8d4a328a83d2d6b7cf31f95551a0f9b05998a7e776934fbb8a00e9918b4b6ab9930121b18e5f9c051fb9f45a97d2652715db19beca"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x4, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x5, 0x1, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf7, 0x4}]}}]}}, {{0x9, 0x4, 0x87, 0x0, 0x5, 0xff, 0xff, 0xff, 0xe, [@uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x8, 0x2, "f5"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x4, 0x1, "6d973234d9f38e"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0xc, 0x8, "", 'E'}, @as_header={0x7, 0x24, 0x1, 0x40, 0x5, 0x4}]}], [{{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x9, 0x2, 0x3, [@generic={0x8b, 0x9, "9a7cf59c3d12d0faf64d8ee55088c43c30c9e10a76dd5c5f59fadd513c00fea9c75b1d388800fffd9fc0b5daba4ecf167f59184eaf5a6ab19eb3e23e1ffb309afee3d5402fea316fcf387f8bd65bfeabebb9d434e91ca305707de912a5207c118110bec04427f0be9b455ce0b7cfcf55f8f835114b041e4451a4888ea16bffc2ea40d9a0273f3ccef7"}, @generic={0x29, 0x31, "669fcd7d9d36eb75f0c3f009b434f57a2eff1e683acfad3cc15a962ef0a4b0d21aee4bcdef89a8"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x43, 0x6}, @generic={0x90, 0x6, "384d8bab99952143d427e8c139e0ac2930cf3113c7ee9e9476c3e292ab2a90684d156f5b071ccdeccaaeceac065187625364dd4d952c9153502ef235b057416e4294cbd8bc89fe8852412625086317a10ba6ad4c608a6b930d7a108522467518a1a0884f0c3fefacf74e1398a86af5cd00aa1480c5c9a3d808e7434eea940a5fd790bcaa20cdb135b678dc7cd465"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x4, 0x9, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x6, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x6}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x7, 0x14, 0x6, [@generic={0xde, 0x4, "e4b2a57475187a26a2dde1f4ec9374cb00100fb741bf1bf513d43afa03919e0b08609844780f61bac1ca6d2a0e6e7b90156beeb9171b1360d01447dac008b1a50f086c5468333ccee7a74a0bb5afe400c8f87ffdf2d05d8d3d633f0cac1c51d763b0584a708c6bb9bdc26ab5dfb35849038d7d9248d6d8d5d834d6d8778770df1fc4802a44e842f8b2ef28986091bba8bf8d661070c7ac9354bfd2288b83c9c2549e63786d40287434734f8696398e3f7abb7fd3a624b2790919181471112da9b95eae62fd46930634ed81ce4810b83aa48a6cf6af52c38ff95211f3"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x4, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x57f5}]}}]}}, {{0x9, 0x4, 0xf0, 0x4, 0x1, 0xff, 0xba, 0xda, 0xcd, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "1d1c7b"}, {0x5, 0x24, 0x0, 0x987a}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0xe, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x6, 0x3, 0x0, 0xe, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xf5}]}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x1, 0xf, 0xc, [@generic={0x8b, 0x30, "3a2131bc63394e44a748dfa73796d00faaf5ca79d6d7e4532ee7abdd88f2636fe94c15f00ee645ce2f27b3cee73ecc1c6fd719c228f2d6f74c916796a54c31271094c5128af33085ebd940e5d32c262849d32e39516279597df90e64c54057ea30ae11640537b2ed207cc822cc1315d7852c1fd6db13e0338287f72c362a17484097650924eaeaa1dc"}]}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x0, 0x2, 0xd, 0x10, 0x4}, 0x31, &(0x7f0000000380)={0x5, 0xf, 0x31, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9e, 0x5, 0x8606}, @wireless={0xb, 0x10, 0x1, 0xc, 0x93, 0x6e, 0x1, 0x9ea8, 0x4}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x34, "852ce76b4839163c2646d27894230d72"}]}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x62, &(0x7f0000000400)=@string={0x62, 0x3, "1b69f4ac20325402f5a3672f495badb9fba5bf14a55146af904a99d2f5bbcdbbab7fe845e316392c26a3469bf01252eab1ac7fbf7ae81cfbb9bd1a25cdf7e1717ba5eeb48b5e8034a89d93772ca89f506e467e8d1ef09d4191e808bc9a9131e9"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x820}}]}) syz_usb_disconnect(r8) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x48005}, 0x20044044) 23.252602314s ago: executing program 4 (id=1275): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x2040d0, &(0x7f0000000300), 0xf3, 0x481, &(0x7f0000000900)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8800, 0xe9) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x691, &(0x7f0000000400)={0x0, 0x7866, 0x800, 0x1, 0x1b6}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x30a, &(0x7f0000000680)={0x0, 0x80334c, 0x400, 0x2, 0x3d3, 0x0, r2}, &(0x7f0000000240)=0x0, &(0x7f0000000300)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x20, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x40, 0x185100, 0x12345}) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f000000a2c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000055b9495f0000840000000500000030000000000000003000000000000000848000000000000081ffffff7c0b000000100000ff7fffff00"/72, @ANYRES32=0x0], 0x48, 0x40481d0}], 0x1, 0x2000c000) getdents(r1, &(0x7f0000000080)=""/43, 0x2b) getdents(r1, 0xfffffffffffffffd, 0xbb) r8 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001580)={0x1, 0x2000000, 0x0, &(0x7f00000014c0)=[{0x0}], 0x0}, 0x20) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000500)=0x9) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000040)=@id, 0x10) shutdown(r9, 0x2) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x50f0}, {0xffffffffffffffff, 0x400}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007514feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639", @ANYRES16=r1, @ANYRES64=r0], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x30}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r11, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 22.865084831s ago: executing program 4 (id=1282): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x11e, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x3010018, &(0x7f00000003c0), 0x5, 0x4c3, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000fc0)=""/4093, 0xffd}], 0x2}}], 0x1, 0x102, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000fc0)=""/4093, 0xffd}], 0x2}}], 0x1, 0x102, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="53fb1cf2ff7544"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000000000000000b00020018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000a500f4fffcfffcff180000000600000000000000090000004d90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000000000000000b00020018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000a500f4fffcfffcff180000000600000000000000090000004d90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x100000, 0x7fff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r2, 0x0, 0x800, 0x8000c62) 22.636149808s ago: executing program 4 (id=1289): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0xc, 0x0, 0x8a}, 0xffffffffffffff25) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = io_uring_setup(0x263a, &(0x7f0000000980)={0x0, 0x7340, 0x408, 0x4, 0x80000053}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000dc0)={0x5, 0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001380)={0x4, 0x0, &(0x7f0000001300)=[{&(0x7f00000012c0)=""/59, 0x3b}], &(0x7f0000001340)=[0x7], 0x1}, 0x20) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) (async) syz_emit_ethernet(0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c20000010800478000300000000000069078ac1e0001ac1e100107030844040000004e220000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780080720adf2901b8f7cc37dc011c4cf64197c4ec6b4f8f30c450dbedda449e9fd62fa5ac48113242ce3ce94b3018e41585cf720f02e9abcef0622470ce7ce6e1fcceea3ce0"], 0x0) syz_open_procfs$pagemap(r4, &(0x7f0000000140)) (async) sendto$inet6(r0, &(0x7f0000000940)='X', 0x1, 0x0, &(0x7f0000000900)={0xa, 0x4e23, 0xfffffffe, @mcast2, 0x10000000}, 0x1c) (async) r5 = socket$inet6(0xa, 0x809, 0xffffffff) (async) r6 = socket(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x3002, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f00000000c0)={[{@nobarrier}, {@quota}, {@norecovery}, {@block_validity}, {@nombcache}]}, 0x8, 0x611, &(0x7f0000000200)="$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") (async) pipe(0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa097}, {0xa, 0x4e21, 0x9, @local, 0x9}, r8, 0x8001}}, 0x48) (async) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) getsockopt(r6, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) sendto$inet6(r6, &(0x7f0000000300)="179efd7d77d95b5e5f7a7e2fc2c6ba41289ecdad2f74501bee612cc5f69a7bc2d3b6277f25d57dfea2eed8c5fadd9467a85dfde50f042bcdc0cbe2b416f22ba33dcadfe632a32c61d8", 0x49, 0x40820, &(0x7f0000000380)={0xa, 0x4e22, 0x3, @private1, 0x9}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x360, 0x2e8, 0x2e8, 0x360, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x4000}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xff], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@icmp6={{0x28}, {0x8, "9c20"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', [0x0, 0xff], 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) dup(r5) 22.321866428s ago: executing program 4 (id=1299): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000024c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000002500)=@gcm_128={{0x304}, "e71304649a00f30b", "41bd5cc451051259139684e71856271a", "ee3ded99", "ab0b47ebbb9e30e8"}, 0x28) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002440)=ANY=[@ANYBLOB="8e780393b1abc54e5d0500d1fba89a7e1d00002f00ed821a787d8a5562c92c2ecca402881be50aa09aea85651751fb6c2db54234cc6dfc2fa3c058f8", @ANYRES32=r2, @ANYBLOB="010000000000ffffffff2a00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000001"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) recvmmsg(r1, &(0x7f00000022c0)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000180)=""/131, 0x83}, {&(0x7f0000000240)=""/68, 0x44}], 0x3, &(0x7f0000000300)=""/163, 0xa3}, 0x3}, {{&(0x7f00000003c0)=@xdp, 0x80, &(0x7f0000000500)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000440)=""/152, 0x98}], 0x2, &(0x7f0000000540)=""/246, 0xf6}, 0x2}, {{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/53, 0x35}, {&(0x7f0000000700)=""/129, 0x81}, {&(0x7f00000007c0)=""/80, 0x50}, {&(0x7f0000000840)=""/146, 0x92}, {&(0x7f0000000900)=""/93, 0x5d}], 0x5}, 0xfff}, {{&(0x7f0000000a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000a80)=""/83, 0x53}], 0x1, &(0x7f0000002080)=""/78, 0x4e}, 0x3}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)=""/238, 0xee}], 0x1, &(0x7f0000002240)=""/79, 0x4f}, 0x7}], 0x5, 0x40000021, &(0x7f0000002400)) (async) socketpair(0x2, 0x6, 0x6, &(0x7f0000002540)={0xffffffffffffffff}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002580)={'team0\x00', 0x0}) (rerun: 32) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000025c0)={@local, 0x38, r4}) 22.321324438s ago: executing program 33 (id=1299): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000024c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000002500)=@gcm_128={{0x304}, "e71304649a00f30b", "41bd5cc451051259139684e71856271a", "ee3ded99", "ab0b47ebbb9e30e8"}, 0x28) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$eJzs3e9rI2kdAPDvTJped7dncyqyHnh3uCe7h26yvXp3VeRuBdFXB+r5fi1tWkrTpjTpuS2H9vCFLwURFfwDfCP4Bwhyf4IIB/peVBTRPX2pO5Jkgv2RNKFNN73084Fpnmcm83y/z9BMZiYPMwFcWS9ExP2IKETESxExl89P8ykOOlPrfR88eme5NSWRZW/9I4kkn9dtq1Wfiogb+WozEfHNr0XcSk/GbeztbyzVatWdvF5pbm5XGnv7d9c3l9aqa9WthYX5VxdfW3xl8V6WO1c/SxHx+lf+8pMf/uKrr//mc9/544O/3fluK98vfaKTd0QsnytAH522i+1t0dXaRjsXEWxMWv0pFsadBQAAw2gdmn80Ij7dPv6fi0L7aA4AAACYJNkbs/GfJCIDAAAAJlYaEbORpOV8LMBspGm53BnD+/G4ntbqjeZnV+u7WyutZRGlKKar67XqvXyscCmKSas+n4+x7dZfPlZfiIhnIuLHc9fa9fJyvbYy7osfAAAAcEXceP7o+f+/59J2GQAAAJgwpb4VAAAAYFI45QcAAIDJ5/wfAAAAJtrX33yzNWXd53ivvL23u1F/++5KtbFR3txdLi/Xd7bLa/X6WvuefZuD2qvV69ufj63dh5VmtdGsNPb2H2zWd7eaD9aPPAIbAAAAeIKeef69PyQRcfDFa+0p8vsADjJ94ZkBl8qfx50AMEqFcScAjM3UuBMAxqY48B32EDDpkgHLTw7e6VwrjN9eTD4AAMDo3f7kyd//u7/tD742AHyYDTPWBwCYLH7dg6ureNYRgDdHnQkwLh/pvDzVb3nfm3cM8ft/5xpDlp0pMQAAYGRm21OSlvPj9NlI03I54un2YwGKyep6rXovPz/4/VzxqVZ9vr1mMnDMMAAAAAAAAAAAAAAAAAAAAAAAAADQkWVJZAAAAMBEi0j/mrTv5h9xe+7F2aNXB4499evnb/304VKzuTMfMZ38c641azoimj/L57+ceSQAAAAAXAKd8/T8dX7c2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwaT549M5yd3qScf/+5Ygo9Yo/FTPt15koRsT1fyUxdWi9JCIKI4h/8G5E3OwVP4nHWZaV8ix6xb92wfFL7U0zkyX5ew/HTyPixgjiw1X2Xmv/c7/X5y+NF9qvvT//U8c+j2fV3f9N5/XD8bv7v0Kf/c/Th+tp/xjPvv+rSt/470Y8O9WJez+O7n+68ZNO/CSOxb81ZB+//a39/Z4LDjXZa/93OFalubldaezt313fXFqrrlW3FhbmX118bfGVxXuV1fVaNf/bM8yPPvXrx6f1/3qf+KWj/T+x/V8cqvdZ/Pf9h48+1qkUe8W/c6v39+/NPvHT/LvvM3m5tfx2t3zQKR/23C9/99xp/V/p0/+ZAf2/M1T/4wsvfeP7f+q55MTWAACehMbe/sZSrVbdOaUwM8R7hi4URtLOGyPL57IU4nKkMa5C9r3O/+P52jnn6icKWfUHZ199KkaQxvSJz2khztpgEnHQamvIf0gAAGDC/P+gPxl3KgAAAAAAAAAAAAAAAAAAAHBlnfG2ZDMR0ZlTHHw7seMxD8bTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAU/0vAAD//xluyPE=") (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002440)=ANY=[@ANYBLOB="8e780393b1abc54e5d0500d1fba89a7e1d00002f00ed821a787d8a5562c92c2ecca402881be50aa09aea85651751fb6c2db54234cc6dfc2fa3c058f8", @ANYRES32=r2, @ANYBLOB="010000000000ffffffff2a00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000001"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) recvmmsg(r1, &(0x7f00000022c0)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000180)=""/131, 0x83}, {&(0x7f0000000240)=""/68, 0x44}], 0x3, &(0x7f0000000300)=""/163, 0xa3}, 0x3}, {{&(0x7f00000003c0)=@xdp, 0x80, &(0x7f0000000500)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000440)=""/152, 0x98}], 0x2, &(0x7f0000000540)=""/246, 0xf6}, 0x2}, {{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/53, 0x35}, {&(0x7f0000000700)=""/129, 0x81}, {&(0x7f00000007c0)=""/80, 0x50}, {&(0x7f0000000840)=""/146, 0x92}, {&(0x7f0000000900)=""/93, 0x5d}], 0x5}, 0xfff}, {{&(0x7f0000000a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000a80)=""/83, 0x53}], 0x1, &(0x7f0000002080)=""/78, 0x4e}, 0x3}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)=""/238, 0xee}], 0x1, &(0x7f0000002240)=""/79, 0x4f}, 0x7}], 0x5, 0x40000021, &(0x7f0000002400)) (async) socketpair(0x2, 0x6, 0x6, &(0x7f0000002540)={0xffffffffffffffff}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002580)={'team0\x00', 0x0}) (rerun: 32) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000025c0)={@local, 0x38, r4}) 21.847695978s ago: executing program 2 (id=1311): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x8f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000000), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr/prev\x00') writev(r2, &(0x7f0000000240)=[{&(0x7f00000012c0)="c3", 0x1}], 0x1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x4, 0x6, 0x4}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000280)={r7}, &(0x7f00000002c0)=0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000800000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) 21.622427345s ago: executing program 2 (id=1314): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="0bc3ff", 0x1d}, {&(0x7f0000000540)='G', 0x1}, {&(0x7f0000000240)="6200bd750a5c01000000", 0xa}], 0x3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x2000cc0, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106204, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x0, 0x1a0, 0xfeffffff, 0x270, 0x270, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket(0x10, 0x3, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000100)={0x7, 0x7, 0x400, 0xe0, 0x3}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023892) write(r5, &(0x7f0000000080)="1400000052004f030e78", 0xa) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="911051000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) 19.042688525s ago: executing program 2 (id=1343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0xffffffffffffff2a) readv(r0, &(0x7f0000000a40)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/71, 0x47}, {&(0x7f0000000100)=""/92, 0x5c}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000980)=""/157, 0x9d}], 0x5) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000bc0)={0x9, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)=""/81, 0x51}, {&(0x7f0000000040)=""/22, 0x16}], &(0x7f0000000b40)=[0xff, 0xc8, 0xfffffffffffffffe, 0x2, 0x7, 0x41e25e3a, 0x1, 0x3, 0xd61], 0x2}, 0x20) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x220, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000c00), {[{{@arp={@empty, @remote, 0xffffff00, 0xff000000, 0x2, 0x1, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x40, 0x2, 0x7384, 0x9, 0x5b5, 'veth0_to_batadv\x00', 'wg2\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @local, 0x2, 0x1}}}, {{@arp={@private=0xa010101, @multicast2, 0x0, 0xffffffff, 0xb5, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x81, 0x6, 0x2, 0x0, 0xdcc9, 0xcf4d, 'bridge_slave_1\x00', 'lo\x00', {0xff}, {0xff}, 0x0, 0x30}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @private=0xa010102, @multicast2, 0x8, 0xffffffff}}}, {{@arp={@loopback, @empty, 0xffffffff, 0xff, 0x8, 0x9, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x1, 0xb, 0x7, 0x6, 0x7f, 0xffff, 'veth0_to_team\x00', 'pimreg1\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @loopback, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 18.9637939s ago: executing program 2 (id=1346): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106202, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") capset(&(0x7f0000000400)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0xd7, 0x0, 0x8, 0x7fffffff}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0xe8, &(0x7f0000000780)=""/232, 0x40f00, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xb, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000440)=[{0x0, 0x5, 0x2, 0x3}, {0x4, 0x1, 0xe, 0x25d56146a70ffeae}, {0x5, 0x3, 0xe, 0x7}, {0x3, 0x5, 0x7, 0x1}, {0x3, 0x4, 0x7, 0x6}, {0x5, 0x2, 0x3, 0xc}, {0x2, 0x1, 0x3, 0x2}, {0x0, 0x1, 0xf, 0x5}, {0x0, 0x3, 0xc, 0xb}], 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000080)='stat\x00') pread64(r4, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r6, r5, 0x0, 0x578410eb) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 18.834469986s ago: executing program 2 (id=1350): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$key(0xf, 0x3, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000008000000800000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) 18.299419154s ago: executing program 2 (id=1362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710426000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$kcm(0xa, 0x922000000003, 0x11) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000380)='\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r4 = syz_io_uring_setup(0x3c2a, &(0x7f00000003c0)={0x0, 0x575c, 0x1, 0x1, 0x334, 0x0, r1}, &(0x7f0000000080), &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6d4c, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20) setxattr$incfs_metadata(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0), 0x0, 0x0, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001300000000000000002e008500000000000000000000000051aa9e10cfb9"], 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000086d0978a5dff1dca9f6d0000000000000001000004d46c00000020010000000000000000000000000002000000000000000092010000000000000600000000000000ffff0000000000001c25080000000000020000000000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f0000000000000081000000000000000900000000008763228e61542c19f555d1d8eab1ba27e3798ef13539d8f5581bbadca9d0b5b93fbce4e53586"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) io_submit(0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0xfffffffffffffffd, 0x2) bind$rds(r8, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, 0x0, 0x0, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000ac1414bb000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000ff8000000000000000000001000004d46c000000fc02000000000000000000000000000108000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000520000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007d00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00"], 0x140}}, 0x844) 18.282961021s ago: executing program 34 (id=1362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710426000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$kcm(0xa, 0x922000000003, 0x11) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000380)='\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r4 = syz_io_uring_setup(0x3c2a, &(0x7f00000003c0)={0x0, 0x575c, 0x1, 0x1, 0x334, 0x0, r1}, &(0x7f0000000080), &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x6d4c, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20) setxattr$incfs_metadata(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0), 0x0, 0x0, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001300000000000000002e008500000000000000000000000051aa9e10cfb9"], 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) io_submit(0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0xfffffffffffffffd, 0x2) bind$rds(r8, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, 0x0, 0x0, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000ac1414bb000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000ff8000000000000000000001000004d46c000000fc02000000000000000000000000000108000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000520000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007d00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00"], 0x140}}, 0x844) 3.261465359s ago: executing program 3 (id=1529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000978000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xd, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000d203000000000000a49495"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000d203000000000000a49495"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0xc) (async) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r5, 0x2) (async) listen(r5, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x81, 0xfffffe00}, {0x3ff, 0x3}]}, 0x18, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_config_ext={0x7, 0x7}, 0x0, 0x10000, 0xa, 0x5, 0x8, 0x20005, 0xac9c, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, r1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.031799815s ago: executing program 1 (id=1534): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000280)="88ec85f3886547386a92cfe5bf2c225c663cf80608a07f994e16a5c0cfabf756beb57402b5645f83cca316cfe2b018548dd27157f0cb9c7fa5e6c2e86c9749e944e6686210d264fc21b2c4b51b8a05508f425c0087b6b034954af111499660b8777b9c7522850c5025119f2a483630c68c5de4c1783257d6afb35963164dc728e78d24843627364473acf10fe48ee8087b7a901005f6794ebeaeb70894ef73140b1670bcf908049b0db52f4f5ecd1ad7febc36c2b7fc6feaf019095dc9dd77e62e4e610b90b320a5ce70f66bf9a30e0590a901853abe0016f91bae", 0xdb, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000380)=@keyring={'key_or_keyring:', r2}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0xd, 0x80, 0x9, 0x7, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_address={0x5, 0x17, 0x2b, 0x10, 0x0, @in6={0xa, 0x4e23, 0xa761, @mcast1, 0x29}}]}, 0x38}}, 0x40040) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000020", @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32=r1, @ANYBLOB="1c001280090001007866726d000000000c4002800800020003000000"], 0x44}, 0x1, 0x0, 0x0, 0x2004d848}, 0x0) 2.879696956s ago: executing program 1 (id=1536): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x3) r1 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) (async) r2 = epoll_create1(0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async) unshare(0x22020600) (async) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x80) io_uring_setup(0x3f1e, &(0x7f0000000080)={0x0, 0x239f, 0x20, 0x0, 0x95, 0x0, r5}) (async) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x448}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000017}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x20, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) unshare(0x20040600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.859255843s ago: executing program 1 (id=1537): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0d00000000000000040000000240000005"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400000039000701000000000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0xe0442, 0x0) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000080)={'\x00', 0x800, 0x1, 0x92}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x12080, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @qipcrtr={0x2a, 0x3, 0x7fff}, @ethernet={0x6, @remote}, @phonet={0x23, 0x9, 0x1, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='gre0\x00', 0xabb6, 0x8, 0x6}) 2.824350296s ago: executing program 1 (id=1538): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') close(0x3) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.47738771s ago: executing program 5 (id=1541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010000100000000000000feff0100000a4c000000090a010400000000000000000500000008000a40000000000900020073797a31000000000900010073797a3000000000080005400019001d080003407a9aa37c080004"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x20044000) 2.376555881s ago: executing program 5 (id=1542): pipe2$9p(&(0x7f0000002980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) sendfile(r0, r1, 0x0, 0x6) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x2}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 2.326220581s ago: executing program 3 (id=1543): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000480)={0xffffffffffffffff}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)={[{@utf8}, {@uid}, {@map_normal}, {@nocompress}, {@showassoc}, {@map_acorn}, {@map_normal}, {@block={'block', 0x3d, 0x800}}, {@utf8}, {@map_off}, {@dmode={'dmode', 0x3d, 0x9fbc}}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa1a, &(0x7f0000000380)="$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") (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = fspick(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, 0x0, 0x8) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) (async) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) gettid() 2.219253441s ago: executing program 6 (id=1546): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={0x0, 0x9, 0x3}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000040)={0x0, 0x9, 0x3}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={r1, 0x401, 0xd93700000000}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000440)={r1, 0x401, 0xd93700000000}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x80e2b8c40c3c2a27, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000940)={'veth1_to_bond\x00', &(0x7f0000000880)=@ethtool_rxnfc={0x2d, 0xa, 0xff, {0x11, @tcp_ip4_spec={@local, @empty, 0x4e23, 0x4e23, 0x3}, {0x0, @empty, 0x262e, 0x8001, [0x0, 0x2]}, @udp_ip4_spec={@private=0xa010102, @broadcast, 0x4e20, 0x4e22, 0x8}, {0x0, @broadcast, 0xffff, 0x9, [0x400, 0x1000]}, 0x4, 0x5}}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)={'#! ', './file0', [{0x20, '\xff\xff\xff\xff\xff\xff'}], 0xa, "061cd0151756849ecdf8bf887547304820217611459685e51167d97525fd4c9dedeb7e4a042805a71ce7fd93c8b17e8b0adfc92c9ecc1f9b6791ca793aa38a7236bff50c470623b974b893ae00e5c6c7f5f88c8d45b0371e6f303cb44c86f2bce7f8d9ce4febe46e3be5f455cffeb024a26e7f141602fca3a08f99f565b09a5bf843b4a7ab7f1aed7491da14bff8e00d5cff36b6befaf8d6165ffb527bd848320050fe3584a9e75f0e8ee779c54f00c65d582ae81d03da821e894080abea035ffca7abed2958d2c26466de746a9d1eeebaa3a6f9be705b7d4d780999721c586e85edb995ab8b89aad287e1f3494b8ce45c135a9c618f"}, 0x108) ustat(0x2, &(0x7f0000000ac0)) ustat(0x5b, &(0x7f0000000b00)) (async) ustat(0x5b, &(0x7f0000000b00)) execve(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000bc0)={[&(0x7f0000000b80)='(\x00']}, &(0x7f0000000c80)={[&(0x7f0000000c00)='\x00', &(0x7f0000000c40)='+,\x00']}) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000cc0)={@loopback, @loopback, @broadcast}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000d40), 0x800000) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getxattr(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)=@random={'osx.', '(\x00'}, &(0x7f0000000e00)=""/205, 0xcd) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008) ustat(0x538, &(0x7f0000000f00)) write$cgroup_int(r2, &(0x7f0000000f40)=0xfffffffffffffffc, 0x12) write$cgroup_int(r0, &(0x7f0000000f80)=0xebbb, 0x12) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000fc0)) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000fc0)) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000001000), &(0x7f0000001040)=0x8) (async) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000001000), &(0x7f0000001040)=0x8) openat(r2, &(0x7f0000001080)='./file0\x00', 0x400003, 0x0) syz_clone(0xc000, &(0x7f00000010c0)="c2cb2884b29df1ab543db0669328af13ab6a7a801b7ea1b36279466b063fbf9bf120be75afba6e1ab733e44009456f03a8915bf991b80750d0f6ed16c1f9e37f24ecec383ab28c9dcb9302a6605a4ab912c1dd04c25c6a34eb3a9ee3ab9662266cc717c44892505dd1ca28603d0785d542db41a6ea600d119ba6129c21d5a95c56386b24adc067f86851e8346fe1ad8193553622e06f8e82e03f4c1415bee413e62375982c0b4dd2497f041aee63", 0xae, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)="a97c1552f54b256bbc3c96c62f1cd542e29ff23350cdb106b0854c3c66") ustat(0xb, &(0x7f0000001240)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001280)={0x0, @in6={{0xa, 0x4e22, 0xff, @empty, 0x1}}, 0x3, 0x30, 0x8, 0x0, 0x12, 0x8, 0x1}, &(0x7f0000001340)=0x9c) open(&(0x7f0000001380)='./file0\x00', 0x82000, 0x0) open(&(0x7f00000013c0)='./file0\x00', 0xc0000, 0x157) 2.185070995s ago: executing program 1 (id=1547): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB="0a0001"], 0x48}}, 0x22000000) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={0x0, 0x0, 0x18}, 0x18) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x812, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) recvmmsg$unix(r2, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000140, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x14) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x1001) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="050427c67002fcdbdf250100000008000100", @ANYRES32=r9, @ANYRES16=r3], 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20004080) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.182008024s ago: executing program 3 (id=1548): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xfffffffffffffeca, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x84f, 0x1, 0x6}, {0x0, 0x4, 0x7, 0x3, 0x2, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, 0x1}, 0xc) 2.145669857s ago: executing program 6 (id=1549): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = gettid() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000000c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x108}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.995495179s ago: executing program 3 (id=1550): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x7f, 0x2, 0xca}, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.881087017s ago: executing program 1 (id=1551): openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xd0000, 0x3) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00', 0x3a, 0x4, 0x15}, 0x2c) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xf5, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$sock_bt_hci(r4, 0x800448f0, &(0x7f0000000100)) 1.242338006s ago: executing program 5 (id=1556): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x85) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) getpid() madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r4, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) 1.147671568s ago: executing program 6 (id=1557): r0 = socket$netlink(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/mdstat\x00', 0x0, 0x0) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r4, 0xb15, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10041}, 0x4004044) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000240)=0x100, 0x4) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000800000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) 983.245556ms ago: executing program 3 (id=1558): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x18, &(0x7f0000000100), 0x120) r1 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365747466382c73686f72746e616d653d6d697865642c75740048451600000000000000", @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYRES16=r0], 0x1, 0x2c3, &(0x7f0000000180)="$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") r2 = dup2(r1, r1) sendto$inet6(r2, &(0x7f0000000480)="03fb6ad953d49f6b8007923bb4c2dced7900f1f9705de3b77a60debcca365416c78a40641b4469e4fc29393331b1e2b47d52720216b3b81c43d156657274512e96a84472e4b948bbe5d6bcb4f4c87d416fadb431bf6307c853718cd0cb168578fa59b00a223c7427d9536e473b9cfce668c7fa3ccdde9e9a529dcd09622272dac5ec4b", 0x83, 0x4000, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 751.103732ms ago: executing program 3 (id=1563): socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffef4}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='aufs\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = fcntl$dupfd(r3, 0x406, r5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r6, &(0x7f0000000340)="1afeb09ba866a466a02af47ad4279848e54020a2cc3bc6fe1fb22b3d5f71994b8194c55b1739ac3891abb5cfe8c87ba736d8b75a691adcae0a26cf0c10878a7702f3a9e719682275a7daf401cde346f61b039023cf5219824c947c27eedd9704059389dd876f6d1949cf6d7ccc28f754d6a2fd8f9b8fff", &(0x7f0000000240)=@tcp6=r0, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000700000000031400000045f0002800000000002f907800000000ffffffffa20022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1000000090efd249b5dbeb622b3f780000"], 0xfdef) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004c000044000000000006907864010101ac1414aa01071b19ac1414aaffffffffac1414aae0000002ac1e0101ac1e000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c12ac634d35a70df37fff61"], 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x6) fchdir(r8) (async) fchdir(r8) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0xa) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0xa) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0xdc) write(r10, &(0x7f0000000a00)="c7", 0x1) sendfile(r10, r9, 0x0, 0x3ffff) (async) sendfile(r10, r9, 0x0, 0x3ffff) 690.259341ms ago: executing program 7 (id=1564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010000100000000000000000001feff0a4c000000090a010400000000000000000500000008000a40000000000900020073797a31000000000900010073797a3000000000080005400019001d080003407a9aa37c080004"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x20044000) 608.483915ms ago: executing program 7 (id=1565): r0 = syz_io_uring_setup(0x6225, &(0x7f0000000340)={0x0, 0x5cb1, 0x402, 0x80002, 0x17b}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x1e76, 0xf728, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/19], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040), 0x4) recvmmsg(r4, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(r2, 0x800) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r6 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xb673, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) io_setup(0x8, 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c", 0x11, 0x8004, &(0x7f0000000480)={0x11, 0x86dd, r10, 0x1, 0x9, 0x6, @multicast}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240)=0x20000006, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x1bb, &(0x7f0000000100)="$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") 330.988443ms ago: executing program 5 (id=1566): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000700142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000b, 0x1, @perf_bp={0x0, 0xf}, 0x104101, 0x4, 0x9, 0x8, 0xe, 0x4, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x8000000001, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) mknod(0x0, 0x7e, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x50) read(r3, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 307.457468ms ago: executing program 7 (id=1567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x81) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000300)='\x00\x00\x16\x00', &(0x7f0000000340)='^', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) acct(&(0x7f00000001c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000000008025bd7000376029bdca69eac4", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setgid(0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="14a9f53b8237fbefb783f1c9517519df000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) capset(&(0x7f0000000400)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0xd7, 0x0, 0x8, 0x7fffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r8 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r8, &(0x7f0000000140)='environ\x00') syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 202.300878ms ago: executing program 6 (id=1568): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0xfffd, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x2d9, {[@timestamp={0x8, 0xa, 0x29, 0xfffffaa4}]}}}}}}}, 0x0) 152.426669ms ago: executing program 5 (id=1569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x24}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000c80)='syzkaller\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x120c042, &(0x7f0000000180)={[{@nodelalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@grpquota}, {@debug}, {}, {@nodiscard}, {@noauto_da_alloc}]}, 0x1, 0x5fd, &(0x7f00000005c0)="$eJzs3c9vVNUeAPDvnf6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oLIAA2t0aIJJcGNiboxxsSlEf8LJbJlpSsXblwZEqKGpQlj7vROO23vDHT64zbczyeZ9t5z5s45t9PvnDNnzrkTQGkNpz8qEfsjYiaJGEwWlvK6I8scXrzfg78+OpvekqjVXvsjiSRLa9w/yX4PZAf3RcRPPyaxr2ttubPz1y5OVqvTV7P90blLM6Oz89cOX7g0eX76/PTl8RfGTxw/dvzE2MGOzut6Ttrpm+++P/jJxJvffv13MvbdrxNJnIyXszs2n8dmGY7h+t8kWZs1cGKzCytIV/Z/0vwUJ90FVoh1aTx/PRHxvxiMrlh+8gbj41cKrRywpWpJRA0oqUT8Q0k1+gGN9/ar3wdXCumVANvh/qnFAYC18d+9ODYYffWxgd0Pkmge1kki4sgmlL8nIu7embh57s7EzdiicTgg38KNiPh/Xvwn9fgfir4Yqsd/ZUX8p/2CM9nvNP3VDstfPVQs/mH7LMZ/X9v4jxbx/1ZT/L/dYfnDy5vv9K+I//5OTwkAAAAAAABK6/apiHg+7/P/ytL8n8iZ/zMQESc3ofzhVftrP/+v3NuEYoAc909FvNQ8/zcqS/Gfzf4d6sq2/lWfD9CTnLtQnT4SEf+OiEPRsyvdH2tTxuFP933VKm84m//XuKV1uJvNBczqca9718pjpibnJjd63kDE/RsRT+XO/02W2v8kp/1PXw9m2jxu83rwfc/eOtPqfo+O/1TvN52dHdBOLVmIg7nrf5avWpG0vT7HkdF6f2C00StY6+kPP/++VfmPF/9rucQEbFza/u9uH/9DSfP1embXX8bR+e5aq7xO+/+9yev1LkZvlvbB5Nzc1bGI3uR0V5q6In18/XWGJ07Pcjw04iWN/0PPtB//y+v/90fEwqqHT/5cuaa44b8PB35rVaVO239g49L4n1pX+7/+jfFbQz+0Kv/x2v9j9bb+UJZi/A8WfdkI096V6Tnh2J2Xtd31BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQSUi9kRSGVnarlRGRiIGIuI/sbtSvTI799y5K+9dnkrz6t//X2l80+/g4n7S+P7/oab98VX7RyNib0R80dVf3x85e6U6VfTJAwAAAAAAAAAAAAAAAAAAwA4x0GL9f+r3rqJrB2y57qIrABQmJ/5/LqIewPbT/kN5iX8oL/EP5SX+obzEP5SX+IfyEv9QXp3Ev7mBAAAAAACwY+09cPuXJCIWXuyv31K9WV5PoTUDtlql6AoAhfExPpSXqX9QXt7jA8kj8vtaHvSoI9uZObuBgwEAAAAAAAAAAACgdA7ut/4fysr6fygv6/+hvBrr/w8UXA9g+3mPD0TOSv7m14bc9f+5RwEAAAAAAAAAAAAAW2V2/trFyWp1+qqNN3ZGNbZzo1arXU//C4qqRs8mPc5nD2u1wv+Y1enGVPid8eSu2Wis9Xu8o4p7TQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFb6JwAA//+3OCUv") (async) r1 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000bc0)=0x80, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@initdev, @in6=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000c00)=0xe8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000dc0)=@o_path={&(0x7f0000000300)='./file0\x00', r0}, 0x18) (async, rerun: 64) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0xc7, 0xf, 0x2, 0xc5, 0x4, 0x0, 0x3}) (rerun: 64) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0xee01) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) listen(r2, 0x6d5) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e0, 0x7, 0xa, 0x301, 0x0, 0x0, {0xb, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c4, 0x4, 0x0, 0x1, [{0x8c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x76}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x20009}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xffffffffffffff62, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x17f}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUOTA_BYTES={0xea, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6e}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x73}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, 0x1e0}}, 0x4000) 146.298477ms ago: executing program 6 (id=1570): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e63, 0xe7, @mcast2, 0x7daa}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f00000006c0)="ce72b87933cd647cc75bd60bc595b60315992b48cdec021023816b76b1bfac56d77d32bf53af59bdb3e0593854d5cb5a0a0c5dc0b21ba66330a5754267d10f2a4ed0224e4dfe3bef0fd9c3ca8f1424e231a7a2efe6e1a7f9aa4410fc11eb73b97dcc9c332f1e97c798d3585ad9b2910654f6aec362e8bcd96abae6de60b634785c814144a118c71fcb589edc65a759e0abe8f9a9494941cc887f", 0x9a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @rand_addr=0x64010100}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)="0cd0d175dd7cd47ab4c8254cbfeea016052e4c8e45f2302ba44b9f67358c20e4cc992edca0d939c3", 0x28}, {&(0x7f0000000240)="b5eb5c0e26a41be93c180de5fc61f5e5875c663dfbb0c5b8e02618c5e7859798f96969df5d89057ec58249b6a8c75253e4e68928fc95415f98181ecc51cc90132669123e26bb6c4bfd2f4c14dca4009b2fc0e6bfdcc8849c2daf8e4f3616b606c89537db72d385963f4a4f7273c831573647cca6df7676dc633f0b6f9eb2a3c988d282260def5a7684789ec6c1568c5a36dd95b38fd6f73a6d454305e025e41bc2603851f7b319d2aa8e047af630fa7a12e68a70300bc4e0dc37721f53e492b0db2946ccf505132e11ec08c69e6a863308", 0xd1}, {&(0x7f0000000340)="7d02f1ddba9093898b6ac2045358c349f18b55bcac274a5d4f77d88e641df466591c5393ac040793bea97a8e3726d63e029c4bec8148aa04211745e50f92454002ef027ea2edd17ae4d6c2b40f7ceffcd11d6b55a9bb4fea00bedc987e7e6fc1f0066d9bf2ef37cb1f79e03cc507c47807be4c578d0d20f1725af523df440db1ab09eda54d356c3c914bceec3bccf230493cac949c3e5bc1fdbdf41826e05e8d87819a2593bfae69a7ef7e21eee0b478176ac3688621fb64ebfe69accbd5f784e2a6f39aaaa299", 0xc7}, {&(0x7f0000000440)="0bf9c206645f792bdf6e68823c7c23574c9342a90f0972248d527e3f26fa1843388929772ed654af695e411f146d0ca5f5b2568100e96d9d58cadd3db37afadeffb0266747caee151abbf0288fc48de040f304c545969eaa85c04c0dbec343bcafdcd5d2bbb967657a8b6bbd31662e85121e5e88e42a8daf35fc676ea8da011053ccf5b61d774775eb07db8809870fe82ae8dfed181709a2efe032268fca9fc9e328576d1f86c61f53fbe0e520626f6a1947725227a844a0ed28f86647e409df2cab0e3c523356c7f22abd5b1a689e87315549a209ede10ff58dbab40443479555ed818fbf", 0xe5}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000540)="23658a8230dd12a2b4bcc725b2b4f57cbc5a95c9cc3507cf3eed7a74ad14919103467593c7f7a5b59586d9c61c821aa29548740ef8dd609d84d62b08e9877b4ac5b19d7f9964ecb5a8abf7b33d98fc8ef8667b2c94ad86b05d1ea38b539c97ad4c803c316a3008a7ce61b3c99d7f8cdca46553bbe91afa1b80de9c58be5a69739996b40a18d6c67bbe38c9318d2e8abe791577209e9ad87a23b8931017c6a43c00154a3f5ef14e7cb2dafcccda4ee3bccab8317bb54485e033dc75003ebfe7f5", 0xc0}], 0x6}, 0x24000000) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000cf6028005001b00de200000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 121.484032ms ago: executing program 7 (id=1571): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)={[{@subsystem='perf_event'}]}) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0xa0042, 0x0) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) socket$kcm(0xa, 0x2, 0x3a) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002a80)=""/4091, 0xffb}], 0x1}, 0x10020) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r7, 0x0) 92.148627ms ago: executing program 5 (id=1572): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000000)={[{@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") r1 = open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, &(0x7f0000000300)='trans=rdma,') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x8000, 0x4}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={r2, 0x5}, 0x8) setresuid(0xee00, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x4000000a, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x19) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x32ee40, 0x0) ioctl$TUNSETIFF(r4, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'ip_vti0\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000200)={0x18, 0x0, {0x4, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'ip_vti0\x00'}}, 0x1e) setxattr$security_capability(&(0x7f0000000440)='./file2\x00', &(0x7f0000000480), &(0x7f0000000540)=@v1={0x1000000, [{0x978e, 0x8}]}, 0xc, 0x3) close(0x3) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000140)=0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0xc6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r7]}, 0x94) 65.687682ms ago: executing program 7 (id=1573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2000}) (async) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7580) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffe0, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x18}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x20004008) (async) syz_clone(0xe30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0xdc, 0x24, 0x4, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x5eeae90608746a06}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x623e}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0x10, 0xf}}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x8, 0x4, 0x1, 0x1, 0x81, 0x1, 0x7}}, {0x12, 0x2, [0x81, 0x6, 0x9, 0xb809, 0x4, 0x5, 0xb]}}, {{0x1c, 0x1, {0xf2, 0x8, 0xbee, 0x4, 0x2, 0x8001, 0x8, 0x8}}, {0x14, 0x2, [0x4, 0xffff, 0x7407, 0x75, 0x30c, 0x6, 0x0, 0x5]}}, {{0x1c, 0x1, {0xe9, 0x6, 0x1ff, 0xf21, 0x1, 0xeb5, 0x8, 0x3}}, {0xa, 0x2, [0x0, 0x8000, 0x40]}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4010}, 0x20040080) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$inet6(0xa, 0xa, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x1a, &(0x7f0000000000)=0x80000000, 0x3) (async) r11 = dup(r9) r12 = open(&(0x7f00000000c0)='./file0\x00', 0x200200, 0x0) ftruncate(r12, 0x200004) (async) sendfile(r11, r8, 0x0, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x5c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r13, {0x2}, {0xffff}, {0xfff2, 0xffe1}}, [@TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xff, 0x1e68, 0x7, 0x2, 0x11, 0x6bc7, 0x9}}, {0x16, 0x2, [0x600, 0x4, 0x8000, 0x1ff, 0xa2ed, 0xce0, 0x101, 0x1, 0x3]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110b80000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) keyctl$clear(0x3, 0xfffffffffffffffc) (async) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 365.26µs ago: executing program 6 (id=1574): syz_io_uring_setup(0x10a, 0x0, 0x0, 0x0) (async) unshare(0x6a040000) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5000002, 0x11, r0, 0x0) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000000a0a00000180000002b6974f334e5058", @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x4000020}, 0x41) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x9, 0x3, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0xfda}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffff7ffffc, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x10000, 0x0, 0x5, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r1, 0xc, 0xffffffffffffffff, 0x2) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x4}, 0x50) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) (async) ptrace$peek(0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000100)={[{@debug}, {@init_itable}]}, 0x1, 0x5a2, &(0x7f0000000180)="$eJzs3U9sG1UaAPBvxnbTP9lNVtqVdlc9VLtIRarqJP0DhVN7RVSq1AMSF4gcN6rixFWcQBNFIr1XiB4QoF7KDQ4cQRw4IC4cuXIBcUaqaARS0wMYOR6naeoUJ8RxiX8/yfF788b+3pvx9+IZzcgB9K1jjT9pxH8i4lISMbShLR9Z47HmeqsrS6UHK0ulJOr1yz8lkUTE/ZWlUmv9JHs+EhHLEfHviPiqEHEiXX/LA61CbWFxarxSKc9m9ZG56WsjtYXFk1enxyfLk+WZ08+/cPbcmbNjp8Y2dvdBfWOtsL2x3vz+1ts3v3npzq2PPzm6XHp3PInzMZi1bRzHbmpuk0Kc37T8TDeC9VDS6w6wI7kszxup9K8YilyW9e3UN04OA3vSPaCL6gMR9XUbikAfSCQ99KnW94DG8W/rsZffP+5eaB6ANOKuriyV3oql4WZLvnluIg6uHZsc/jl55Mikcbw5vJcdZV9avhERo/n845//JPv87dzobnSQrvryQnNHPb7/0/X5J9rMP4Otc6d/Umv+W83mv9U28XNbzH+XOozx66s/fLBl/BsD8d+28ZP1+Emb+GlEvN5h/NuvfH5uq7b6hxHHo338luTJ54dHrlytlEebf9vG+OL40Re3Hn/E4S3iN8/ZHlzryMbxH8j6lHY4/s++/vR/y0+I/+z/n7z/223/QxHxTofx/3H/o5e3art7I7nX+Baw3f2fRCHudBj/ufPHvsuKzhoCAAAAAAAAAMAuSteuZUvS4no5TYvF5j28/4zDaaVamztxpTo/M9G85m04CmnrSquhZj1p1Mey63Fb9VOb6qdzWcDcobV6sVStTPR47AAAAAAAAAAAAAAAAAAAAPC0OLLp/v9fcmv3/2/+uWpgv9r6J7+B/U7+Q/96NP+TnvUD2Hv+/0Pfqst/6F/yH/qX/If+Jf+hf8l/6F/yH/qX/AcAAAAAAAAAAAAAAAAAAAAAAAAAgK64dPFi41F/sLJUatQn8gvzU9U3Tk6Ua1PF6flSsVSdvVacrFYnK+ViqTr9R++XVKvXRmNm/vrIXLk2N1JbWHxtujo/0/pN0XKh6yMCAAAAAAAAAAAAAAAAAACAv57BtUeSFiMKzXqaFosRf4uI4SSSK1cr5dGI+HtEfJsrDDTqY73uNAAAAAAAAAAAAAAAAAAAAOwztYXFqfFKpTzbvUI+C9XFEJ0X8ttZOSKWd7cbjXfc9qsK2Qbs8abbH4Xc0/E5fPoLPZyUAAAAAAAAAAAAAAAAAACgTz286bfTV/zW3Q4BAAAAAAAAAAAAAAAAAABAX0p/TCKi8Tg+9Mzg5tYDyWpu7Tki3rx9+b3r43Nzs2ON5ffWl8+9ny0/tf6y/N6OAehEK0/TiGjkMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBQbWFxarxSKc/usDDQwTq9HiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADATvweAAD//7M9zgI=") (async) bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, &(0x7f0000001f40)=""/4105, 0x0, 0x1009, 0x8}, 0x28) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x210002, &(0x7f0000000780)={[{@dioread_nolock}, {@noload}, {@noblock_validity}, {@nombcache}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 7 (id=1575): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) r2 = syz_open_dev$vcsa(0x0, 0xfffffffffffffe00, 0x4501) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) accept4(r2, 0x0, &(0x7f0000000040), 0x80800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) dup(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x60, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x2a, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1}]}}}}}}, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) kernel console output (not intermixed with test programs): z.2.963: iget: bad extra_isize 90 (inode size 256) [ 140.935680][ T6866] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 140.940594][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 140.956203][ C1] EXT4-fs (loop2): initial error at time 1772240379: ext4_xattr_inode_iget:441: inode 18 [ 140.966089][ C1] EXT4-fs (loop2): last error at time 1772240379: ext4_xattr_inode_iget:441: inode 18 [ 140.978886][ T6866] EXT4-fs (loop2): Remounting filesystem read-only [ 140.989118][ T6866] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -30) [ 141.000697][ T6866] EXT4-fs (loop2): 1 orphan inode deleted [ 141.011001][ T6866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.110925][ T6874] ip6_vti0 speed is unknown, defaulting to 1000 [ 141.118180][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.211186][ T6888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=6888 comm=syz.4.971 [ 141.261754][ T6893] netlink: 108 bytes leftover after parsing attributes in process `syz.1.972'. [ 141.309065][ T6897] loop4: detected capacity change from 0 to 1024 [ 141.317909][ T6897] EXT4-fs: inline encryption not supported [ 141.363444][ T6897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.409279][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.414617][ T6906] xt_hashlimit: size too large, truncated to 1048576 [ 141.465016][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.977'. [ 141.496544][ T6886] loop0: detected capacity change from 0 to 512 [ 141.536500][ T6920] loop4: detected capacity change from 0 to 256 [ 141.608380][ T6886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.649168][ T6913] loop2: detected capacity change from 0 to 512 [ 141.649175][ T6886] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.745540][ T6886] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 141.760238][ T6913] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.813420][ T6913] EXT4-fs (loop2): 1 truncate cleaned up [ 141.821675][ T6934] netlink: 108 bytes leftover after parsing attributes in process `syz.3.984'. [ 141.865686][ T6913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.055011][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.068447][ T6939] loop3: detected capacity change from 0 to 1024 [ 142.166923][ T6948] loop0: detected capacity change from 0 to 512 [ 142.224874][ T6948] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 142.261716][ T6955] EXT4-fs: Ignoring removed nobh option [ 142.270083][ T6948] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.989: bg 0: block 104: invalid block bitmap [ 142.289443][ T6948] loop0: lost filesystem error report for type 5 error -117 [ 142.289829][ T6948] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 142.297216][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 142.297234][ C1] EXT4-fs (loop0): initial error at time 1772240380: ext4_validate_block_bitmap:432 [ 142.297258][ C1] EXT4-fs (loop0): last error at time 1772240380: ext4_validate_block_bitmap:432 [ 142.342047][ T6955] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.355911][ T6948] loop0: lost filesystem error report for type 5 error -117 [ 142.356109][ T6948] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.989: invalid indirect mapped block 1 (level 1) [ 142.377272][ T6960] EXT4-fs: dax option not supported [ 142.386042][ T6948] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.387893][ T6955] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.409078][ T6960] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 142.409110][ T6948] EXT4-fs (loop0): 1 truncate cleaned up [ 142.409462][ T6948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.415626][ T6960] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 142.416556][ T6960] vhci_hcd vhci_hcd.0: Device attached [ 142.448834][ T6248] udevd[6248]: incorrect ext4dev checksum on /dev/loop3 [ 142.451076][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.493751][ T6955] FAULT_INJECTION: forcing a failure. [ 142.493751][ T6955] name failslab, interval 1, probability 0, space 0, times 0 [ 142.506899][ T6955] CPU: 0 UID: 0 PID: 6955 Comm: syz.4.992 Tainted: G W syzkaller #0 PREEMPT(full) [ 142.506998][ T6955] Tainted: [W]=WARN [ 142.507002][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.507017][ T6955] Call Trace: [ 142.507022][ T6955] [ 142.507027][ T6955] __dump_stack+0x1d/0x30 [ 142.507044][ T6955] dump_stack_lvl+0x95/0xd0 [ 142.507130][ T6955] dump_stack+0x15/0x1b [ 142.507142][ T6955] should_fail_ex+0x263/0x280 [ 142.507155][ T6955] ? alloc_pipe_info+0xad/0x340 [ 142.507173][ T6955] should_failslab+0x8c/0xb0 [ 142.507184][ T6955] __kmalloc_cache_noprof+0x5f/0x410 [ 142.507221][ T6955] alloc_pipe_info+0xad/0x340 [ 142.507275][ T6955] splice_direct_to_actor+0x591/0x670 [ 142.507289][ T6955] ? __pfx_direct_splice_actor+0x10/0x10 [ 142.507309][ T6955] ? selinux_file_permission+0x633/0x690 [ 142.507331][ T6955] do_splice_direct+0x119/0x1a0 [ 142.507360][ T6955] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 142.507545][ T6955] do_sendfile+0x382/0x650 [ 142.507609][ T6955] __x64_sys_sendfile64+0x105/0x150 [ 142.507622][ T6955] x64_sys_call+0x2dc4/0x3020 [ 142.507637][ T6955] do_syscall_64+0x12c/0x370 [ 142.507705][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.507721][ T6955] RIP: 0033:0x7f3c26a2c799 [ 142.507731][ T6955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.507742][ T6955] RSP: 002b:00007f3c2547f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 142.507754][ T6955] RAX: ffffffffffffffda RBX: 00007f3c26ca5fa0 RCX: 00007f3c26a2c799 [ 142.507763][ T6955] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 142.507792][ T6955] RBP: 00007f3c2547f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.507799][ T6955] R10: 00000000578410eb R11: 0000000000000246 R12: 0000000000000001 [ 142.507807][ T6955] R13: 00007f3c26ca6038 R14: 00007f3c26ca5fa0 R15: 00007ffe388b9708 [ 142.507858][ T6955] [ 142.716600][ T6961] vhci_hcd: connection closed [ 142.716819][ T12] vhci_hcd vhci_hcd.3: stop threads [ 142.726377][ T6966] EXT4-fs: Ignoring removed nobh option [ 142.736764][ T12] vhci_hcd vhci_hcd.3: release socket [ 142.743672][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.743859][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 142.753308][ T6966] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.801449][ T6966] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.818282][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.858343][ T6974] netlink: 108 bytes leftover after parsing attributes in process `syz.0.995'. [ 142.958432][ T6996] vfat: Unknown parameter '00000000000000000000ÿÿÿÿ' [ 142.972010][ T6998] program syz.0.1002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.016685][ T7000] EXT4-fs: dax option not supported [ 143.422629][ T7024] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 143.437169][ T7024] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 143.447695][ T7024] JBD2: no valid journal superblock found [ 143.454315][ T7024] EXT4-fs (loop0): Could not load journal inode [ 143.619972][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.648830][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 143.722809][ T7049] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 143.723028][ T7049] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.1018: iget: bad i_size value: 12154757448730 [ 143.723054][ T7049] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 143.723170][ T7049] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1018: couldn't read orphan inode 13 (err -117) [ 143.723191][ T7049] loop2: lost filesystem error report for type 5 error -117 [ 143.740981][ T7049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.936001][ T7063] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 143.960867][ T7047] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 143.960893][ T7047] System zones: 0-2, 18-18, 34-34 [ 144.041364][ T7047] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 144.041503][ T7047] EXT4-fs (loop3): Remounting filesystem read-only [ 144.041863][ T7047] EXT4-fs (loop3): 1 truncate cleaned up [ 144.042311][ T7047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.042384][ T7047] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.066356][ T5596] __quota_error: 86 callbacks suppressed [ 144.066370][ T5596] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 144.066420][ T5596] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 144.066436][ T5596] Quota error (device loop3): write_blk: dquota write failed [ 144.066510][ T5596] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 144.066593][ T5596] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 144.066608][ T5596] Quota error (device loop3): write_blk: dquota write failed [ 144.066618][ T5596] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 144.066692][ T5596] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 144.066702][ T5596] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 144.066711][ T5596] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 144.066732][ T5596] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 144.067082][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.440869][ T7082] batadv_slave_1: entered promiscuous mode [ 144.456639][ T7082] pimreg: entered allmulticast mode [ 144.462875][ T7082] pimreg: left allmulticast mode [ 144.473249][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.501992][ T7084] set_capacity_and_notify: 9 callbacks suppressed [ 144.502008][ T7084] loop3: detected capacity change from 0 to 1024 [ 144.522490][ T7084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.536707][ T7081] batadv_slave_1: left promiscuous mode [ 144.577470][ T7084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.916439][ T7098] ip6_vti0 speed is unknown, defaulting to 1000 [ 144.930978][ T28] audit: type=1326 audit(1772240383.247:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89defc799 code=0x7ffc0000 [ 144.967895][ T28] audit: type=1326 audit(1772240383.277:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89defc799 code=0x7ffc0000 [ 144.978967][ T7100] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1034'. [ 145.181556][ T7084] ip6_vti0 speed is unknown, defaulting to 1000 [ 145.333343][ T7120] loop0: detected capacity change from 0 to 512 [ 145.389606][ T7120] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.447064][ T7120] EXT4-fs (loop0): 1 truncate cleaned up [ 145.472626][ T7120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.543940][ T7131] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1040'. [ 145.575597][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.591054][ T7131] hub 8-0:1.0: USB hub found [ 145.595886][ T7131] hub 8-0:1.0: 8 ports detected [ 145.614558][ T7131] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 145.624516][ T7131] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 146.023489][ T7138] netlink: 'syz.3.1041': attribute type 4 has an invalid length. [ 146.082281][ T7138] ip6_vti0 speed is unknown, defaulting to 1000 [ 146.094610][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.151269][ T7140] ip6_vti0 speed is unknown, defaulting to 1000 [ 146.217239][ T7143] loop0: detected capacity change from 0 to 512 [ 146.324951][ T7143] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 146.379975][ T7143] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 146.389616][ T7156] ip6_vti0 speed is unknown, defaulting to 1000 [ 146.420014][ T7161] loop3: detected capacity change from 0 to 128 [ 146.427476][ T7161] EXT4-fs: Ignoring removed nobh option [ 146.441687][ T7161] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.454177][ T7161] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.590176][ T7165] loop4: detected capacity change from 0 to 8192 [ 146.607734][ T7177] loop0: detected capacity change from 0 to 512 [ 146.714886][ T7180] netlink: 'syz.0.1055': attribute type 8 has an invalid length. [ 146.736085][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'. [ 146.748107][ T7185] loop4: detected capacity change from 0 to 512 [ 146.758648][ T7180] bond0: entered promiscuous mode [ 146.766432][ T7185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.779681][ T7185] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.792663][ T7180] gretap0: entered promiscuous mode [ 146.813337][ T7192] loop2: detected capacity change from 0 to 256 [ 146.817587][ T7180] bond_slave_0: entered promiscuous mode [ 146.826865][ T7185] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 146.846388][ T7180] hsr1: entered promiscuous mode [ 146.954483][ T7198] program syz.2.1061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.044283][ T7204] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 147.296093][ T7218] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1063'. [ 147.740015][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1072'. [ 148.025325][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.062084][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.178801][ T7235] loop0: detected capacity change from 0 to 1024 [ 148.286162][ T7235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.405798][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1076'. [ 148.522515][ T7252] netlink: 'syz.3.1076': attribute type 2 has an invalid length. [ 148.582715][ T7254] loop3: detected capacity change from 0 to 256 [ 148.607627][ T7254] FAT-fs (loop3): Directory bread(block 64) failed [ 148.614219][ T7254] FAT-fs (loop3): Directory bread(block 65) failed [ 148.621454][ T7254] FAT-fs (loop3): Directory bread(block 66) failed [ 148.627977][ T7254] FAT-fs (loop3): Directory bread(block 67) failed [ 148.634561][ T7254] FAT-fs (loop3): Directory bread(block 68) failed [ 148.641106][ T7254] FAT-fs (loop3): Directory bread(block 69) failed [ 148.647619][ T7254] FAT-fs (loop3): Directory bread(block 70) failed [ 148.654869][ T7254] FAT-fs (loop3): Directory bread(block 71) failed [ 148.661550][ T7254] FAT-fs (loop3): Directory bread(block 72) failed [ 148.668085][ T7254] FAT-fs (loop3): Directory bread(block 73) failed [ 149.068587][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.407479][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.414792][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.454611][ T7273] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.475862][ T7273] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.562670][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.573055][ T7243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.608026][ T7291] netlink: 'syz.0.1083': attribute type 2 has an invalid length. [ 149.640633][ T7291] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 149.686793][ T7276] syz1: Port: 1 Link DOWN [ 149.686822][ T3959] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.700139][ T3959] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.730406][ T3959] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.767883][ T3959] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.851539][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 149.851611][ T28] audit: type=1400 audit(1772240388.177:1851): avc: denied { accept } for pid=7294 comm="syz.0.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.925220][ T7307] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1087'. [ 150.036279][ T7317] set_capacity_and_notify: 1 callbacks suppressed [ 150.036293][ T7317] loop3: detected capacity change from 0 to 512 [ 150.565987][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 150.587486][ T7342] loop2: detected capacity change from 0 to 512 [ 150.625833][ T28] audit: type=1400 audit(1772240388.877:1852): avc: denied { create } for pid=7339 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.666084][ T28] audit: type=1400 audit(1772240388.887:1853): avc: denied { setopt } for pid=7339 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.679538][ T7342] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 150.685784][ T28] audit: type=1400 audit(1772240388.887:1854): avc: denied { bind } for pid=7339 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.685915][ T28] audit: type=1400 audit(1772240388.887:1855): avc: denied { write } for pid=7339 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.784052][ T28] audit: type=1400 audit(1772240389.107:1856): avc: denied { associate } for pid=7347 comm="syz.4.1101" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 150.814685][ T7346] 9p: Bad value for 'rfdno' [ 150.820263][ T7346] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1100'. [ 150.832012][ T7342] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1098: bg 0: block 288: padding at end of block bitmap is not set [ 150.846437][ T7342] loop2: lost filesystem error report for type 5 error -117 [ 150.850597][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 150.864356][ C1] EXT4-fs (loop2): initial error at time 1772240389: ext4_validate_block_bitmap:441 [ 150.873752][ C1] EXT4-fs (loop2): last error at time 1772240389: ext4_validate_block_bitmap:441 [ 150.883042][ T7342] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 150.892875][ T28] audit: type=1326 audit(1772240389.217:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7347 comm="syz.4.1101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c26a2c799 code=0x0 [ 150.947000][ T7342] loop2: lost filesystem error report for type 5 error -117 [ 150.947407][ T7342] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1098: attempt to clear invalid blocks 1024 len 1 [ 151.010061][ T7342] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 151.010513][ T7342] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1098: invalid indirect mapped block 1819239214 (level 0) [ 151.059781][ T28] audit: type=1400 audit(1772240389.377:1858): avc: denied { mount } for pid=7353 comm="syz.4.1103" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 151.065787][ T7342] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 151.084291][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1105'. [ 151.179655][ T28] audit: type=1400 audit(1772240389.487:1859): avc: denied { connect } for pid=7367 comm="syz.4.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.181669][ T7342] EXT4-fs (loop2): 1 truncate cleaned up [ 151.370816][ T7373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1107'. [ 151.996613][ T7397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7397 comm=syz.0.1112 [ 152.100532][ T7399] netlink: 'syz.4.1113': attribute type 11 has an invalid length. [ 152.139091][ T7399] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1113'. [ 152.181276][ T7402] netlink: 484 bytes leftover after parsing attributes in process `syz.4.1113'. [ 152.290032][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 152.330469][ T7408] loop4: detected capacity change from 0 to 1024 [ 152.369873][ T7406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.382582][ T7408] EXT4-fs: Ignoring removed bh option [ 152.392260][ T7411] xt_hashlimit: size too large, truncated to 1048576 [ 152.536087][ T7408] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.554145][ T7406] ipvlan2: entered promiscuous mode [ 152.559364][ T7406] ipvlan2: entered allmulticast mode [ 152.559484][ T7408] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.578793][ T7406] bond1: entered allmulticast mode [ 152.584650][ T7408] EXT4-fs (loop4): orphan cleanup on readonly fs [ 152.591228][ T7408] EXT4-fs error (device loop4): ext4_quota_enable:7192: comm syz.4.1115: inode #2304: comm syz.4.1115: iget: illegal inode # [ 152.604366][ T7408] loop4: lost filesystem error report for type 5 error -117 [ 152.604538][ T7408] EXT4-fs error (device loop4): ext4_quota_enable:7195: comm syz.4.1115: Bad quota inode: 2304, type: 2 [ 152.612021][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 152.612044][ C1] EXT4-fs (loop4): initial error at time 1772240390: ext4_quota_enable:7192 [ 152.612050][ T7411] loop0: detected capacity change from 0 to 256 [ 152.612079][ C1] [ 152.612085][ C1] EXT4-fs (loop4): last error at time 1772240390: ext4_quota_enable:7192 [ 152.641381][ T7411] FAT-fs (loop0): Directory bread(block 64) failed [ 152.645276][ T7408] loop4: lost filesystem error report for type 5 error -117 [ 152.646925][ T7411] FAT-fs (loop0): Directory bread(block 65) failed [ 152.646953][ T7411] FAT-fs (loop0): Directory bread(block 66) failed [ 152.661069][ T7406] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 152.662354][ T7411] FAT-fs (loop0): Directory bread(block 67) failed [ 152.690306][ T7406] team0: Device ipvlan2 failed to register rx_handler [ 152.696462][ T7411] FAT-fs (loop0): Directory bread(block 68) failed [ 152.709877][ T7411] FAT-fs (loop0): Directory bread(block 69) failed [ 152.717073][ T7411] FAT-fs (loop0): Directory bread(block 70) failed [ 152.723658][ T7411] FAT-fs (loop0): Directory bread(block 71) failed [ 152.730175][ T7411] FAT-fs (loop0): Directory bread(block 72) failed [ 152.736762][ T7411] FAT-fs (loop0): Directory bread(block 73) failed [ 152.759545][ T7408] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 152.790770][ T7408] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 152.907155][ T7426] loop4: detected capacity change from 0 to 2048 [ 152.923395][ T7426] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.983238][ T7426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.542574][ T7433] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 153.570477][ T7433] EXT4-fs (loop4): Remounting filesystem read-only [ 153.606886][ T7439] loop0: detected capacity change from 0 to 512 [ 153.628363][ T7439] EXT4-fs (loop0): orphan cleanup on readonly fs [ 153.649954][ T7439] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #11: block 1: comm syz.0.1122: lblock 0 mapped to illegal pblock 1 (length 1) [ 153.691580][ T7439] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.691815][ T7439] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 153.700996][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 153.701013][ C1] EXT4-fs (loop0): initial error at time 1772240392: ext4_map_blocks:776: inode 11: block 1 [ 153.701046][ C1] EXT4-fs (loop0): last error at time 1772240392: ext4_map_blocks:776: inode 11: block 1 [ 153.740842][ T7439] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.1122: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 153.756072][ T7439] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.756663][ T7439] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.1122: ea_inode dec ref err=-117 [ 153.779216][ T7439] EXT4-fs (loop0): 1 orphan inode deleted [ 153.798223][ T7443] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1123'. [ 153.825964][ T7442] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1123'. [ 153.876721][ T28] audit: type=1400 audit(1772240392.197:1860): avc: denied { read } for pid=7452 comm="syz.0.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.969731][ T7460] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7460 comm=syz.0.1127 [ 154.227507][ T7467] loop2: detected capacity change from 0 to 512 [ 154.415112][ T7469] loop4: detected capacity change from 0 to 1024 [ 154.450043][ T7467] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.823581][ T7469] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1130: bad orphan inode 134217728 [ 154.854181][ T7469] loop4: lost filesystem error report for type 5 error -117 [ 154.871678][ T7467] EXT4-fs (loop2): 1 truncate cleaned up [ 154.891356][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 154.891368][ T28] audit: type=1400 audit(1772240393.217:1862): avc: denied { create } for pid=7465 comm="syz.4.1130" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 155.140409][ T7485] loop0: detected capacity change from 0 to 512 [ 155.257369][ T7485] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 155.299357][ T7485] EXT4-fs (loop0): orphan cleanup on readonly fs [ 155.393831][ T7485] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 155.423876][ T7485] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 155.454817][ T7485] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1135: Failed to acquire dquot type 1 [ 155.490597][ T7485] loop0: lost filesystem error report for type 5 error -5 [ 155.491109][ T7485] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1135: bg 0: block 40: padding at end of block bitmap is not set [ 155.513044][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 155.513066][ C0] EXT4-fs (loop0): initial error at time 1772240393: ext4_acquire_dquot:7001 [ 155.513104][ C0] EXT4-fs (loop0): last error at time 1772240393: ext4_acquire_dquot:7001 [ 155.658499][ T7485] loop0: lost filesystem error report for type 5 error -117 [ 155.658686][ T7485] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 155.681530][ T7491] netlink: 'syz.4.1136': attribute type 39 has an invalid length. [ 155.709424][ T7485] loop0: lost filesystem error report for type 5 error -117 [ 155.709660][ T7485] EXT4-fs (loop0): 1 truncate cleaned up [ 155.761308][ T28] audit: type=1400 audit(1772240394.087:1863): avc: denied { mount } for pid=7483 comm="syz.0.1135" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 155.791610][ T7485] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.1135: corrupted xattr block 31: invalid header [ 155.830917][ T7485] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 155.855719][ T7485] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.1135: corrupted xattr block 31: invalid header [ 155.896309][ T7485] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 155.924735][ T7485] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.1135: bad symlink. [ 155.936001][ T28] audit: type=1400 audit(1772240394.247:1864): avc: denied { read } for pid=7483 comm="syz.0.1135" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 155.979984][ T7485] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #16: comm syz.0.1135: corrupted xattr block 31: invalid header [ 156.022988][ T7485] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 156.053006][ T7485] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz.0.1135: bad symlink. [ 156.186941][ T7494] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1137'. [ 156.245274][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1137'. [ 156.248056][ T7504] loop0: detected capacity change from 0 to 512 [ 156.261625][ T7504] EXT4-fs: Ignoring removed bh option [ 156.300866][ T7504] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 156.344549][ T7504] EXT4-fs (loop0): 1 truncate cleaned up [ 156.344687][ T28] audit: type=1400 audit(1772240394.647:1865): avc: denied { connect } for pid=7493 comm="syz.1.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.401312][ T28] audit: type=1400 audit(1772240394.727:1866): avc: denied { rename } for pid=7503 comm="syz.0.1142" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.431291][ T28] audit: type=1400 audit(1772240394.727:1867): avc: denied { reparent } for pid=7503 comm="syz.0.1142" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.437679][ T3317] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 156.472607][ T28] audit: type=1400 audit(1772240394.727:1868): avc: denied { add_name } for pid=7503 comm="syz.0.1142" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 156.493003][ T28] audit: type=1400 audit(1772240394.757:1869): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file0" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 156.538560][ T3317] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 157.019231][ T3311] EXT4-fs unmount: 15 callbacks suppressed [ 157.019251][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.081605][ T3374] IPVS: starting estimator thread 0... [ 157.130216][ T3960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.181465][ T7520] IPVS: using max 2544 ests per chain, 127200 per kthread [ 157.235780][ T3960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.366263][ T3960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.466515][ T3960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.013210][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 158.051738][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 158.076488][ T3960] gretap0 (unregistering): left promiscuous mode [ 158.142074][ T3960] dvmrp0 (unregistering): left allmulticast mode [ 158.241416][ T3960] bond0 (unregistering): left promiscuous mode [ 158.248649][ T3960] bond0 (unregistering): Released all slaves [ 158.285312][ T7522] ip6_vti0 speed is unknown, defaulting to 1000 [ 158.422070][ T7564] xt_hashlimit: size too large, truncated to 1048576 [ 159.500280][ T7522] chnl_net:caif_netlink_parms(): no params data found [ 159.653085][ T7522] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.684221][ T7522] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.700201][ T7522] bridge_slave_0: entered allmulticast mode [ 159.715054][ T7522] bridge_slave_0: entered promiscuous mode [ 159.741585][ T3960] bond_slave_0: left promiscuous mode [ 159.750710][ T3960] hsr_slave_0: left promiscuous mode [ 159.756588][ T3960] hsr_slave_1: left promiscuous mode [ 159.795287][ T3960] veth1_macvtap: left promiscuous mode [ 159.807443][ T3960] veth0_macvtap: left promiscuous mode [ 159.814110][ T3960] veth1_vlan: left promiscuous mode [ 159.819490][ T3960] veth0_vlan: left promiscuous mode [ 159.925394][ T7522] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.932894][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.946609][ T7522] bridge_slave_1: entered allmulticast mode [ 159.961210][ T7609] loop3: detected capacity change from 0 to 512 [ 159.965658][ T7522] bridge_slave_1: entered promiscuous mode [ 159.968378][ T28] audit: type=1400 audit(1772240398.287:1870): avc: denied { getopt } for pid=7608 comm="syz.3.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.007554][ T7609] ext4: Bad value for 'max_batch_time' [ 160.055738][ T7522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.068744][ T7616] loop2: detected capacity change from 0 to 1024 [ 160.076941][ T7522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.143275][ T28] audit: type=1400 audit(1772240398.317:1871): avc: denied { getopt } for pid=7608 comm="syz.3.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 160.143618][ T7616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.163673][ T28] audit: type=1400 audit(1772240398.447:1872): avc: denied { relabelfrom } for pid=7623 comm="syz.4.1165" name="" dev="pipefs" ino=18810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 160.199530][ T28] audit: type=1401 audit(1772240398.447:1873): op=setxattr invalid_context="system_u:object_r:audisp_exec_t:s0" [ 160.212829][ T7522] team0: Port device team_slave_0 added [ 160.219203][ T7522] team0: Port device team_slave_1 added [ 160.274171][ T28] audit: type=1400 audit(1772240398.597:1874): avc: denied { read write } for pid=7629 comm="syz.3.1167" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 160.294954][ T7522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.333123][ T7633] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1166'. [ 160.350721][ T7522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.356772][ T28] audit: type=1400 audit(1772240398.597:1875): avc: denied { open } for pid=7629 comm="syz.3.1167" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 160.398164][ T7616] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 160.435142][ T7522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.468275][ T7522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.486596][ T7522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.527291][ T7522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.557250][ T7522] hsr_slave_0: entered promiscuous mode [ 160.563344][ T7522] hsr_slave_1: entered promiscuous mode [ 160.569121][ T7522] debugfs: 'hsr0' already exists in 'hsr' [ 160.586553][ T28] audit: type=1400 audit(1772240398.847:1876): avc: denied { getopt } for pid=7642 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.690357][ T7522] Cannot create hsr debugfs directory [ 160.937161][ T7661] netlink: 'syz.1.1170': attribute type 27 has an invalid length. [ 161.030597][ T28] audit: type=1400 audit(1772240399.307:1877): avc: denied { shutdown } for pid=7660 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 161.362991][ T3960] IPVS: stop unused estimator thread 0... [ 161.377594][ T7636] ip6_vti0 speed is unknown, defaulting to 1000 [ 161.396283][ T7661] veth0_to_bridge: left promiscuous mode [ 161.409544][ T7661] veth0_to_bridge: left allmulticast mode [ 161.426269][ T7661] macvlan2: left promiscuous mode [ 161.446440][ T7661] macvlan2: left allmulticast mode [ 161.456499][ T7661] bond1: left allmulticast mode [ 161.462094][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.481904][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.491309][ T7663] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.516205][ T7663] net_ratelimit: 56 callbacks suppressed [ 161.516214][ T7663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.533135][ T7675] loop2: detected capacity change from 0 to 512 [ 161.560073][ T7675] EXT4-fs: Ignoring removed bh option [ 161.562086][ T3395] ip6_vti0 speed is unknown, defaulting to 1000 [ 161.573237][ T7659] ip6_vti0 speed is unknown, defaulting to 1000 [ 161.582502][ T3395] syz2: Port: 1 Link ACTIVE [ 161.585062][ T7675] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.587090][ T3395] ip6_vti0 speed is unknown, defaulting to 1000 [ 161.593940][ T7675] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 161.610798][ T7675] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 161.618933][ T7675] EXT4-fs (loop2): orphan cleanup on readonly fs [ 161.626326][ T7675] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 161.636179][ T7675] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 161.649693][ T7675] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1171: Failed to acquire dquot type 1 [ 161.661797][ T7675] loop2: lost filesystem error report for type 5 error -5 [ 161.666634][ T7675] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1171: Invalid block bitmap block 0 in block_group 0 [ 161.673836][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 161.673853][ C0] EXT4-fs (loop2): last error at time 1772240399: ext4_acquire_dquot:7001 [ 161.703521][ T7675] loop2: lost filesystem error report for type 5 error -117 [ 161.726097][ T7675] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1171: Invalid block bitmap block 0 in block_group 0 [ 161.758647][ T7675] loop2: lost filesystem error report for type 5 error -117 [ 161.870714][ T7675] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1171: Invalid block bitmap block 0 in block_group 0 [ 161.942198][ T7675] loop2: lost filesystem error report for type 5 error -117 [ 161.975367][ T7695] loop4: detected capacity change from 0 to 256 [ 161.992023][ T7692] IPVS: length: 34 != 8 [ 162.034431][ T7686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.156916][ T7695] FAT-fs (loop4): Directory bread(block 64) failed [ 162.163591][ T7695] FAT-fs (loop4): Directory bread(block 65) failed [ 162.170254][ T7695] FAT-fs (loop4): Directory bread(block 66) failed [ 162.177607][ T7695] FAT-fs (loop4): Directory bread(block 67) failed [ 162.184370][ T7695] FAT-fs (loop4): Directory bread(block 68) failed [ 162.190984][ T7695] FAT-fs (loop4): Directory bread(block 69) failed [ 162.197598][ T7695] FAT-fs (loop4): Directory bread(block 70) failed [ 162.204968][ T7695] FAT-fs (loop4): Directory bread(block 71) failed [ 162.211958][ T7695] FAT-fs (loop4): Directory bread(block 72) failed [ 162.218581][ T7695] FAT-fs (loop4): Directory bread(block 73) failed [ 162.273539][ T7675] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1171: Failed to acquire dquot type 1 [ 162.296340][ T7695] team0: Port device dummy0 removed [ 162.305357][ T7695] bridge_slave_0: left allmulticast mode [ 162.320370][ T7695] bridge_slave_0: left promiscuous mode [ 162.327593][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.352212][ T7695] bridge_slave_1: left allmulticast mode [ 162.358502][ T7695] bridge_slave_1: left promiscuous mode [ 162.366048][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.391033][ T7695] bond0: (slave bond_slave_0): Releasing backup interface [ 162.408465][ T7695] bond0: (slave bond_slave_1): Releasing backup interface [ 162.437199][ T7695] team0: Port device team_slave_0 removed [ 162.452897][ T7695] team0: Port device team_slave_1 removed [ 162.460659][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.473376][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.491600][ T7695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 162.566014][ T7675] loop2: lost filesystem error report for type 5 error -28 [ 162.566583][ T7675] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1171: Failed to acquire dquot type 1 [ 162.650014][ T7522] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.719843][ T7522] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.741331][ T7675] loop2: lost filesystem error report for type 5 error -28 [ 162.741841][ T7675] EXT4-fs (loop2): 1 orphan inode deleted [ 162.816446][ T7522] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.869094][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'. [ 162.879062][ T7522] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.887610][ T7675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.050121][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.144069][ T7522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.199869][ T7522] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.253381][ T7723] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:0 [ 163.281680][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.288833][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.363318][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.370496][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.582349][ T7522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.654120][ T7735] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1185'. [ 163.703781][ T7522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.850073][ T7522] veth0_vlan: entered promiscuous mode [ 163.858122][ T7522] veth1_vlan: entered promiscuous mode [ 163.888402][ T7522] veth0_macvtap: entered promiscuous mode [ 163.909596][ T7522] veth1_macvtap: entered promiscuous mode [ 163.928957][ T7522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.940060][ T7522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.951676][ T3959] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.969923][ T3959] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.987623][ T3959] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.005551][ T3959] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.147435][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 164.174399][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1149'. [ 164.272266][ T7790] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 164.284449][ T7790] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 164.462658][ T7806] loop5: detected capacity change from 0 to 256 [ 164.478930][ T7806] FAT-fs (loop5): codepage cp857 not found [ 164.587053][ T7819] sctp: [Deprecated]: syz.5.1203 (pid 7819) Use of int in maxseg socket option. [ 164.587053][ T7819] Use struct sctp_assoc_value instead [ 164.714295][ T7824] loop3: detected capacity change from 0 to 1024 [ 164.733891][ T7824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.753268][ T7824] program syz.3.1205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.807962][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.845822][ T7834] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.875066][ T7834] vhci_hcd vhci_hcd.0: invalid port number 253 [ 164.883117][ T7834] vhci_hcd vhci_hcd.0: default hub control req: 400f v000b i00fd l0 [ 165.420629][ T3634] Bluetooth: hci0: command 0x1003 tx timeout [ 165.426697][ T4236] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.450649][ T7726] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 165.755591][ T7840] syz.1.1209 (7840) used greatest stack depth: 5336 bytes left [ 165.890472][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 165.890508][ T28] audit: type=1400 audit(1772240404.207:1961): avc: denied { ioctl } for pid=7846 comm="syz.5.1210" path="socket:[19298]" dev="sockfs" ino=19298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.061283][ T28] audit: type=1400 audit(1772240404.387:1962): avc: denied { read } for pid=7846 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.317722][ T7853] loop3: detected capacity change from 0 to 256 [ 166.437763][ T7853] FAT-fs (loop3): Directory bread(block 64) failed [ 166.444550][ T7853] FAT-fs (loop3): Directory bread(block 65) failed [ 166.451238][ T7853] FAT-fs (loop3): Directory bread(block 66) failed [ 166.457909][ T7853] FAT-fs (loop3): Directory bread(block 67) failed [ 166.464596][ T7853] FAT-fs (loop3): Directory bread(block 68) failed [ 166.471215][ T7853] FAT-fs (loop3): Directory bread(block 69) failed [ 166.477873][ T7853] FAT-fs (loop3): Directory bread(block 70) failed [ 166.484527][ T7853] FAT-fs (loop3): Directory bread(block 71) failed [ 166.491389][ T7853] FAT-fs (loop3): Directory bread(block 72) failed [ 166.497932][ T7853] FAT-fs (loop3): Directory bread(block 73) failed [ 166.544620][ T7853] syz_tun: left allmulticast mode [ 166.550093][ T7853] syz_tun: left promiscuous mode [ 166.556721][ T7853] bridge0: port 3(syz_tun) entered disabled state [ 166.614956][ T7853] team0: Port device dummy0 removed [ 166.622915][ T7853] bridge_slave_0: left allmulticast mode [ 166.628868][ T7853] bridge_slave_0: left promiscuous mode [ 166.636037][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.656502][ T7853] bridge_slave_1: left allmulticast mode [ 166.662869][ T7853] bridge_slave_1: left promiscuous mode [ 166.669794][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.692389][ T7853] bond0: (slave bond_slave_0): Releasing backup interface [ 166.722862][ T7853] bond0: (slave bond_slave_1): Releasing backup interface [ 166.741870][ T7853] team0: Port device team_slave_0 removed [ 166.756099][ T7853] team0: Port device team_slave_1 removed [ 166.764956][ T7853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.777648][ T7853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.789523][ T7853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.055963][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1215'. [ 167.228590][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1215'. [ 167.577273][ T7872] delete_channel: no stack [ 167.604317][ T7872] delete_channel: no stack [ 167.626764][ T7872] delete_channel: no stack [ 167.645211][ T7872] delete_channel: no stack [ 167.661734][ T7872] delete_channel: no stack [ 167.691676][ T7872] delete_channel: no stack [ 167.714383][ T7862] loop4: detected capacity change from 0 to 128 [ 167.723994][ T7872] delete_channel: no stack [ 167.742079][ T7872] delete_channel: no stack [ 167.771756][ T7872] delete_channel: no stack [ 167.789115][ T7862] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.815580][ T7872] delete_channel: no stack [ 167.835864][ T7872] delete_channel: no stack [ 167.848949][ T7862] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.864556][ T7872] delete_channel: no stack [ 167.894778][ T7872] delete_channel: no stack [ 167.907131][ T7879] wireguard0: entered promiscuous mode [ 167.913248][ T7872] delete_channel: no stack [ 167.927460][ T7872] delete_channel: no stack [ 167.932572][ T7879] wireguard0: entered allmulticast mode [ 167.950836][ T7872] delete_channel: no stack [ 167.955483][ T7872] delete_channel: no stack [ 167.959955][ T7872] delete_channel: no stack [ 167.975752][ T7872] delete_channel: no stack [ 167.986052][ T7872] delete_channel: no stack [ 167.996158][ T7872] delete_channel: no stack [ 168.006075][ T7872] delete_channel: no stack [ 168.006345][ T7885] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 168.016182][ T7872] delete_channel: no stack [ 168.021808][ T28] audit: type=1400 audit(1772240406.337:1963): avc: denied { create } for pid=7884 comm="syz.1.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 168.030775][ T7872] delete_channel: no stack [ 168.048415][ T7872] delete_channel: no stack [ 168.053281][ T7872] delete_channel: no stack [ 168.057728][ T7872] delete_channel: no stack [ 168.066990][ T7872] delete_channel: no stack [ 168.081735][ T7872] delete_channel: no stack [ 168.087900][ T28] audit: type=1400 audit(1772240406.367:1964): avc: denied { write } for pid=7884 comm="syz.1.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 168.141918][ T7872] delete_channel: no stack [ 168.153267][ T7872] delete_channel: no stack [ 168.160163][ T7872] delete_channel: no stack [ 168.164946][ T7872] delete_channel: no stack [ 168.184047][ T28] audit: type=1400 audit(1772240406.507:1965): avc: denied { mount } for pid=7892 comm="syz.2.1222" name="/" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 168.225062][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.236148][ T7889] dvmrp0: entered allmulticast mode [ 168.259137][ T28] audit: type=1400 audit(1772240406.577:1966): avc: denied { search } for pid=7892 comm="syz.2.1222" name="/" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.286459][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 168.298779][ T7894] vlan2: entered promiscuous mode [ 168.302342][ T7889] Invalid ELF header magic: != ELF [ 168.306976][ T7894] bond0: entered promiscuous mode [ 168.312867][ T7904] netlink: 'syz.4.1224': attribute type 1 has an invalid length. [ 168.321936][ T28] audit: type=1400 audit(1772240406.577:1967): avc: denied { search } for pid=7892 comm="syz.2.1222" name="/" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.322029][ T28] audit: type=1400 audit(1772240406.577:1968): avc: denied { search } for pid=7892 comm="syz.2.1222" name="/" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.322101][ T28] audit: type=1400 audit(1772240406.577:1969): avc: denied { add_name } for pid=7892 comm="syz.2.1222" name="freezer.parent_freezing" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.322126][ T28] audit: type=1400 audit(1772240406.577:1970): avc: denied { create } for pid=7892 comm="syz.2.1222" name="freezer.parent_freezing" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 168.421691][ T7904] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1224'. [ 168.452113][ T7904] ip6_vti0 speed is unknown, defaulting to 1000 [ 168.488352][ T7918] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1229'. [ 168.498863][ T7918] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1229'. [ 168.562357][ T7904] netlink: 'syz.4.1224': attribute type 21 has an invalid length. [ 168.569801][ T7925] veth1_to_team: entered allmulticast mode [ 168.577144][ T7904] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1224'. [ 168.600074][ T7926] delete_channel: no stack [ 168.616184][ T7928] netlink: 'syz.2.1233': attribute type 10 has an invalid length. [ 168.641924][ T7932] 9p: Bad value for 'rfdno' [ 168.743338][ T7955] loop2: detected capacity change from 0 to 164 [ 168.767379][ T7951] ip6_vti0 speed is unknown, defaulting to 1000 [ 168.941747][ T7951] loop5: detected capacity change from 0 to 512 [ 168.981074][ T7961] loop4: detected capacity change from 0 to 512 [ 169.043172][ T7966] loop2: detected capacity change from 0 to 256 [ 169.075004][ T7966] FAT-fs (loop2): Directory bread(block 64) failed [ 169.081716][ T7966] FAT-fs (loop2): Directory bread(block 65) failed [ 169.088630][ T7966] FAT-fs (loop2): Directory bread(block 66) failed [ 169.095891][ T7966] FAT-fs (loop2): Directory bread(block 67) failed [ 169.102791][ T7966] FAT-fs (loop2): Directory bread(block 68) failed [ 169.109436][ T7966] FAT-fs (loop2): Directory bread(block 69) failed [ 169.116081][ T7966] FAT-fs (loop2): Directory bread(block 70) failed [ 169.123436][ T7966] FAT-fs (loop2): Directory bread(block 71) failed [ 169.130116][ T7966] FAT-fs (loop2): Directory bread(block 72) failed [ 169.136740][ T7966] FAT-fs (loop2): Directory bread(block 73) failed [ 169.213840][ T7951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.320535][ T7966] team0: Port device dummy0 removed [ 169.434013][ T7966] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.489660][ T7961] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.774110][ T7951] __find_get_block_slow() failed. block=144115188075855873, b_blocknr=1, b_state=0x00000019, b_size=4096, device loop5 blocksize: 4096 [ 169.920385][ T7979] loop3: detected capacity change from 0 to 512 [ 169.929524][ T7961] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 169.952442][ T7951] grow_buffers: requested out-of-range block 144115188075855873 for device loop5 [ 169.967298][ T7977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1245'. [ 169.992688][ T7979] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #11: block 530: comm syz.3.1246: lblock 4 mapped to illegal pblock 530 (length 1) [ 170.027467][ T7951] EXT4-fs warning (device loop5): ext4_resize_fs:2018: can't read last block, resize aborted [ 170.132181][ T7979] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.133685][ T7979] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 170.143283][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 170.143300][ C0] EXT4-fs (loop3): initial error at time 1772240664: ext4_map_blocks:776: inode 11: block 530 [ 170.143351][ C0] EXT4-fs (loop3): last error at time 1772240664: ext4_map_blocks:776: inode 11: block 530 [ 170.199398][ T7961] EXT4-fs (loop4): 1 truncate cleaned up [ 170.244635][ T7961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.382331][ T7522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.435584][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.503458][ T7979] EXT4-fs (loop3): 1 orphan inode deleted [ 170.548325][ T7979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.602797][ T7977] ip6_vti0 speed is unknown, defaulting to 1000 [ 170.692262][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.726378][ T7993] IPv6: NLM_F_REPLACE set, but no existing node found! [ 170.781552][ T8000] loop5: detected capacity change from 0 to 1024 [ 171.002134][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 171.002217][ T28] audit: type=1400 audit(1772240665.326:2018): avc: denied { append } for pid=8017 comm="syz.4.1260" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 171.095251][ T28] audit: type=1400 audit(1772240665.416:2019): avc: denied { read } for pid=8015 comm="syz.3.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 171.121526][ T8018] loop4: detected capacity change from 0 to 512 [ 171.127928][ T8000] loop5: detected capacity change from 0 to 512 [ 171.134893][ T8000] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 171.149105][ T8018] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.1260: ea_inode with extended attributes [ 171.183512][ T8000] EXT4-fs (loop5): 1 truncate cleaned up [ 171.203653][ T8018] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 171.203875][ T8018] EXT4-fs (loop4): Remounting filesystem read-only [ 171.213045][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 171.213064][ C0] EXT4-fs (loop4): initial error at time 1772240665: ext4_xattr_inode_iget:441: inode 11 [ 171.213092][ C0] EXT4-fs (loop4): last error at time 1772240665: ext4_xattr_inode_iget:441: inode 11 [ 171.253713][ T8000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.304847][ T8018] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -30) [ 171.318822][ T8018] EXT4-fs (loop4): 1 orphan inode deleted [ 171.325947][ T8018] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.352385][ T3314] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 171.666213][ T8035] loop4: detected capacity change from 0 to 4096 [ 171.680512][ T8035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.705206][ T28] audit: type=1400 audit(1772240666.026:2020): avc: denied { lock } for pid=8034 comm="syz.4.1263" path="/254/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.743854][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.811534][ T7522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.874589][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.883786][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.118242][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1265'. [ 172.595656][ T28] audit: type=1400 audit(1772240666.906:2021): avc: denied { ioctl } for pid=8056 comm="syz.3.1269" path="socket:[20917]" dev="sockfs" ino=20917 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 172.926130][ T8061] set_capacity_and_notify: 1 callbacks suppressed [ 172.926145][ T8061] loop5: detected capacity change from 0 to 4096 [ 173.026321][ T8061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.128921][ T8071] loop3: detected capacity change from 0 to 256 [ 173.172821][ T8073] loop2: detected capacity change from 0 to 512 [ 173.186278][ T8073] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.206812][ T8077] loop4: detected capacity change from 0 to 512 [ 173.297469][ T8077] EXT4-fs (loop4): 1 truncate cleaned up [ 173.309968][ T8077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.366199][ T3311] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 173.385209][ T8084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1276'. [ 173.413857][ T8077] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1275: bg 0: block 7: invalid block bitmap [ 173.491938][ T8093] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1278'. [ 173.518784][ T8101] geneve2: entered promiscuous mode [ 173.530749][ T28] audit: type=1400 audit(1772240667.826:2022): avc: denied { shutdown } for pid=8076 comm="syz.4.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 173.585879][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.645189][ T8122] team0: Port device syz_tun added [ 173.665908][ T8124] loop4: detected capacity change from 0 to 512 [ 173.674870][ T8122] team0: Port device syz_tun removed [ 173.680529][ T8122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.713426][ T8124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.788977][ T7522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.810943][ T8122] loop3: detected capacity change from 0 to 128 [ 173.818400][ T28] audit: type=1400 audit(1772240668.136:2023): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 173.848302][ T8122] FAT-fs (loop3): bogus number of reserved sectors [ 173.854972][ T8122] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 173.864593][ T8122] FAT-fs (loop3): Can't find a valid FAT filesystem [ 173.876560][ T8152] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1290'. [ 173.983548][ T8146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.018074][ T8176] tipc: Started in network mode [ 174.024376][ T8176] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 174.044227][ T8176] tipc: Enabled bearer , priority 28 [ 174.102756][ T28] audit: type=1400 audit(1772240668.426:2024): avc: denied { create } for pid=8183 comm="syz.3.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 174.150033][ T8184] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1298'. [ 174.249152][ T8205] loop5: detected capacity change from 0 to 1024 [ 174.261164][ T8205] EXT4-fs: inline encryption not supported [ 174.302299][ T28] audit: type=1326 audit(1772240668.626:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8206 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5d3dc799 code=0x7ffc0000 [ 174.306317][ T8197] ip6_vti0 speed is unknown, defaulting to 1000 [ 174.352727][ T28] audit: type=1326 audit(1772240668.656:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8206 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5d3dc799 code=0x7ffc0000 [ 174.377101][ T28] audit: type=1326 audit(1772240668.656:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8206 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5d3dc799 code=0x7ffc0000 [ 174.378259][ T8205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.425380][ T8213] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1304'. [ 174.454412][ T8190] loop2: detected capacity change from 0 to 32768 [ 174.515302][ T8220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.526189][ T8220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.536607][ T8197] chnl_net:caif_netlink_parms(): no params data found [ 174.656221][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.680753][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.693562][ T8236] netlink: 'syz.1.1312': attribute type 1 has an invalid length. [ 174.712262][ T8197] bridge_slave_0: entered allmulticast mode [ 174.722025][ T8197] bridge_slave_0: entered promiscuous mode [ 174.730104][ T8236] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1312'. [ 174.750967][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.764517][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.780748][ T8197] bridge_slave_1: entered allmulticast mode [ 174.788744][ T8197] bridge_slave_1: entered promiscuous mode [ 174.808045][ T8197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.833258][ T8197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.872039][ T8197] team0: Port device team_slave_0 added [ 174.888491][ T8197] team0: Port device team_slave_1 added [ 174.912114][ T8251] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1316'. [ 174.926330][ T8197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.934100][ T8197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.986430][ T8197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.001594][ T8197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.012556][ T7522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.022558][ T8197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.050623][ T8197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.111121][ T8197] hsr_slave_0: entered promiscuous mode [ 175.130740][ T8197] hsr_slave_1: entered promiscuous mode [ 175.136899][ T8197] debugfs: 'hsr0' already exists in 'hsr' [ 175.143080][ T8197] Cannot create hsr debugfs directory [ 175.160623][ T1031] tipc: Node number set to 8432298 [ 175.222957][ T8197] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.231977][ T8197] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 175.242035][ T8197] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 175.259804][ T8197] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 175.297119][ T8296] loop3: detected capacity change from 0 to 1024 [ 175.315502][ T8197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.339533][ T8197] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.353237][ T8296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.354284][ T8300] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1326'. [ 175.375246][ T8296] ext4 filesystem being mounted at /211/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.388117][ T3957] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.395208][ T3957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.418277][ T3957] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.418425][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.425360][ T3957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.437585][ T8197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.452964][ T8197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.551973][ T8315] loop5: detected capacity change from 0 to 128 [ 175.558635][ T8315] EXT4-fs: Ignoring removed nobh option [ 175.577699][ T8315] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.602248][ T8315] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.670243][ T8197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.284971][ T8197] veth0_vlan: entered promiscuous mode [ 176.304788][ T8197] veth1_vlan: entered promiscuous mode [ 176.368143][ T8197] veth0_macvtap: entered promiscuous mode [ 176.377212][ T8197] veth1_macvtap: entered promiscuous mode [ 176.388647][ T8197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.400296][ T8197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.418050][ T8349] netlink: 'syz.1.1334': attribute type 18 has an invalid length. [ 176.431731][ T3960] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.441189][ T3960] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.460987][ T3960] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.472369][ T8197] audit_log_start: 27 callbacks suppressed [ 176.472381][ T8197] audit: audit_backlog=65 > audit_backlog_limit=64 [ 176.491522][ T3960] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.500371][ T8197] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 176.508394][ T8197] audit: backlog limit exceeded [ 176.524775][ T28] audit: type=1326 audit(1772240670.156:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8310 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5d3dc799 code=0x7ffc0000 [ 176.570685][ T28] audit: type=1326 audit(1772240670.156:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8310 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5d3dc799 code=0x7ffc0000 [ 176.627329][ T28] audit: type=1326 audit(1772240670.156:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8310 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5d3dc799 code=0x7ffc0000 [ 176.678027][ T28] audit: type=1326 audit(1772240670.156:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8310 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5d3dc799 code=0x7ffc0000 [ 176.739362][ T28] audit: type=1326 audit(1772240670.156:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8310 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f5d39cfce code=0x7ffc0000 [ 176.803437][ T8315] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.834751][ T28] audit: type=1326 audit(1772240670.156:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8310 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f5d39cfce code=0x7ffc0000 [ 176.864993][ T28] audit: type=1326 audit(1772240670.156:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8310 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f5d3dc799 code=0x7ffc0000 [ 176.945641][ T8358] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1337'. [ 177.127227][ T8372] bond3: (slave gretap0): Device is not bonding slave [ 177.154293][ T8372] bond3: option active_slave: invalid value (gretap0) [ 177.161699][ T8372] bond3 (unregistering): Released all slaves [ 177.418996][ T8378] x_tables: duplicate underflow at hook 1 [ 177.426178][ T8380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.466542][ T8380] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 177.487552][ T8385] EXT4-fs: Ignoring removed nobh option [ 177.497237][ T8380] JBD2: no valid journal superblock found [ 177.505728][ T8380] EXT4-fs (loop5): Could not load journal inode [ 177.517285][ T8385] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.529814][ T8385] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.580373][ T3311] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /315/mnt/lost+found: directory fails checksum at offset 1024 [ 177.620731][ T3311] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 177.620832][ T8399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.634133][ T3311] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /315/mnt/lost+found: directory fails checksum at offset 1024 [ 177.666020][ T8403] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1351'. [ 177.669314][ T3311] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 177.675609][ T8399] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.694470][ T8399] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 177.714650][ T3311] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /315/mnt/lost+found: directory fails checksum at offset 1024 [ 177.737100][ T3311] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 177.743515][ T8399] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 177.762737][ T8399] EXT4-fs (loop6): This should not happen!! Data will be lost [ 177.762737][ T8399] [ 177.762892][ T3311] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /315/mnt/lost+found: directory fails checksum at offset 1024 [ 177.772916][ T8399] EXT4-fs (loop6): Total free blocks count 0 [ 177.772983][ T8399] EXT4-fs (loop6): Free/Dirty block details [ 177.801800][ T3311] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 177.805760][ T8399] EXT4-fs (loop6): free_blocks=65280 [ 177.823496][ T8399] EXT4-fs (loop6): dirty_blocks=31 [ 177.825777][ T8406] vlan2: entered promiscuous mode [ 177.828885][ T3311] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /315/mnt/lost+found: directory fails checksum at offset 1024 [ 177.850486][ T8406] macvlan1: entered promiscuous mode [ 177.856200][ T3311] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 177.861273][ T8410] Invalid argument reading file caps for ./file0 [ 177.875660][ T8399] EXT4-fs (loop6): Block reservation details [ 177.882980][ T8399] EXT4-fs (loop6): i_reserved_data_blocks=31 [ 177.898001][ T8413] geneve2: entered promiscuous mode [ 177.905408][ T8415] ext4: block size(65536) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 177.926263][ T8415] EXT4-fs (loop5): bad block size 65536 [ 177.957064][ T8415] set_capacity_and_notify: 4 callbacks suppressed [ 177.957078][ T8415] loop5: detected capacity change from 0 to 164 [ 177.972590][ T8197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.991373][ T35] IPVS: starting estimator thread 0... [ 178.065682][ T5873] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.080606][ T8419] IPVS: using max 2688 ests per chain, 134400 per kthread [ 178.114891][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1359'. [ 178.324393][ T8437] ip6_vti0 speed is unknown, defaulting to 1000 [ 178.337361][ T8463] loop3: detected capacity change from 0 to 1024 [ 178.410155][ T8473] xt_policy: output policy not valid in PREROUTING and INPUT [ 178.410738][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 178.466811][ T8470] loop3: detected capacity change from 0 to 128 [ 178.475384][ T8440] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 178.494370][ T8469] netlink: 'syz.3.1370': attribute type 18 has an invalid length. [ 178.500792][ T8470] FAT-fs (loop3): bogus number of reserved sectors [ 178.503548][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 178.517852][ T8470] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 178.530270][ T8470] FAT-fs (loop3): Can't find a valid FAT filesystem [ 178.539468][ T8440] loop6: detected capacity change from 0 to 512 [ 178.565949][ T8440] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 178.573420][ T8437] chnl_net:caif_netlink_parms(): no params data found [ 178.587511][ T8440] System zones: 0-2, 18-18, 34-35 [ 178.593889][ T8440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.607055][ T8440] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.652480][ T8490] 9p: Bad value for 'rfdno' [ 178.659095][ T8490] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1374'. [ 178.668498][ T8479] ip6_vti0 speed is unknown, defaulting to 1000 [ 178.720220][ T8197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.726090][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.736375][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.746641][ T8437] bridge_slave_0: entered allmulticast mode [ 178.753421][ T8437] bridge_slave_0: entered promiscuous mode [ 178.790830][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.798003][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.805570][ T8437] bridge_slave_1: entered allmulticast mode [ 178.812924][ T8437] bridge_slave_1: entered promiscuous mode [ 178.827270][ T8505] sctp: [Deprecated]: syz.6.1378 (pid 8505) Use of int in max_burst socket option deprecated. [ 178.827270][ T8505] Use struct sctp_assoc_value instead [ 178.842618][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.856584][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.864487][ T8509] netlink: 65173 bytes leftover after parsing attributes in process `syz.3.1379'. [ 178.937699][ T8437] team0: Port device team_slave_0 added [ 178.945422][ T8437] team0: Port device team_slave_1 added [ 178.963787][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.970876][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.006589][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.019968][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.027711][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.057889][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.112846][ T8437] hsr_slave_0: entered promiscuous mode [ 179.119115][ T8437] hsr_slave_1: entered promiscuous mode [ 179.126250][ T8437] debugfs: 'hsr0' already exists in 'hsr' [ 179.132108][ T8437] Cannot create hsr debugfs directory [ 179.246839][ T8437] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 179.254609][ T8518] loop5: detected capacity change from 0 to 1024 [ 179.278384][ T8437] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 179.295731][ T8531] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1385'. [ 179.298993][ T8437] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 179.327862][ T8437] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 179.406497][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 179.435516][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.481143][ T8437] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.495942][ T3960] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.503116][ T3960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.519050][ T8544] bridge1: entered promiscuous mode [ 179.524854][ T8544] bridge1: entered allmulticast mode [ 179.586707][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.593789][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.675032][ T8437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.688200][ T8437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.826650][ T8548] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20001 [ 179.967206][ T8567] loop3: detected capacity change from 0 to 512 [ 180.012138][ T8567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.024744][ T8567] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.273310][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.283924][ T1671] bond0 (unregistering): Released all slaves [ 180.292681][ T1671] bond1 (unregistering): Released all slaves [ 180.317115][ T8589] loop3: detected capacity change from 0 to 512 [ 180.338711][ T8437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.351519][ T8589] EXT4-fs (loop3): 1 truncate cleaned up [ 180.363181][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 180.368247][ T1671] tipc: Disabling bearer [ 180.386465][ T8589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.405551][ T1671] tipc: Left network mode [ 180.492943][ T1671] hsr_slave_0: left promiscuous mode [ 180.501393][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.513180][ T1671] hsr_slave_1: left promiscuous mode [ 180.521976][ T1671] veth1_macvtap: left promiscuous mode [ 180.527459][ T1671] veth0_macvtap: left promiscuous mode [ 180.541318][ T1671] veth1_vlan: left promiscuous mode [ 180.566490][ T1671] veth0_vlan: left promiscuous mode [ 180.584987][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1397'. [ 180.983955][ T8619] vlan2: entered allmulticast mode [ 181.012315][ T8619] macsec0: entered allmulticast mode [ 181.139979][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1401'. [ 181.159537][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1401'. [ 181.169208][ T8437] veth0_vlan: entered promiscuous mode [ 181.186129][ T8437] veth1_vlan: entered promiscuous mode [ 181.207528][ T8437] veth0_macvtap: entered promiscuous mode [ 181.219783][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.229785][ T8437] veth1_macvtap: entered promiscuous mode [ 181.243740][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.257852][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.272460][ T1671] IPVS: stop unused estimator thread 0... [ 181.278329][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.293195][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.305905][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.359994][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.386444][ T8668] ip6_vti0 speed is unknown, defaulting to 1000 [ 181.496324][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 181.496339][ T28] audit: type=1400 audit(1772240675.816:2137): avc: denied { accept } for pid=8679 comm="syz.7.1405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 181.528756][ T8680] loop7: detected capacity change from 0 to 512 [ 181.561151][ T8680] /dev/loop7: Can't open blockdev [ 181.587135][ T8693] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1405'. [ 181.616391][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1405'. [ 181.635036][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1408'. [ 181.820423][ T8721] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1411'. [ 182.565335][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1409'. [ 182.860696][ T8732] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1413'. [ 182.869675][ T28] audit: type=1400 audit(1772240677.176:2138): avc: denied { connect } for pid=8729 comm="syz.5.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 183.199135][ T8742] loop5: detected capacity change from 0 to 1024 [ 183.231148][ T8742] EXT4-fs: Invalid want_extra_isize 5 [ 183.250857][ T3634] Bluetooth: hci0: command 0x1003 tx timeout [ 183.295068][ T4236] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.305873][ T8663] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 183.799338][ T40] Bluetooth: hci0: Frame reassembly failed (-84) [ 183.869892][ T8759] SELinux: failed to load policy [ 183.875644][ T28] audit: type=1400 audit(1772240678.186:2139): avc: denied { load_policy } for pid=8758 comm="syz.5.1420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 183.899603][ T8759] loop5: detected capacity change from 0 to 512 [ 183.907434][ T8759] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 183.926527][ T8759] EXT4-fs (loop5): 1 truncate cleaned up [ 183.933504][ T8759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.953401][ T8759] program syz.5.1420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.976537][ T8766] loop6: detected capacity change from 0 to 128 [ 183.985286][ T8766] EXT4-fs: Ignoring removed nobh option [ 183.997893][ T7522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.021403][ T8766] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 184.091803][ T8770] loop5: detected capacity change from 0 to 128 [ 184.102345][ T8770] EXT4-fs: Ignoring removed nobh option [ 184.139063][ T8770] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.156666][ T8770] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.740772][ T28] audit: type=1400 audit(1772240679.056:2140): avc: denied { listen } for pid=8788 comm="syz.1.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 184.912706][ T8808] FAULT_INJECTION: forcing a failure. [ 184.912706][ T8808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.926750][ T8808] CPU: 0 UID: 0 PID: 8808 Comm: syz.6.1431 Tainted: G W syzkaller #0 PREEMPT(full) [ 184.926784][ T8808] Tainted: [W]=WARN [ 184.926791][ T8808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.926846][ T8808] Call Trace: [ 184.926851][ T8808] [ 184.926858][ T8808] __dump_stack+0x1d/0x30 [ 184.926885][ T8808] dump_stack_lvl+0x95/0xd0 [ 184.926905][ T8808] dump_stack+0x15/0x1b [ 184.927055][ T8808] should_fail_ex+0x263/0x280 [ 184.927079][ T8808] should_fail+0xb/0x20 [ 184.927098][ T8808] should_fail_usercopy+0x1a/0x20 [ 184.927118][ T8808] _copy_from_user+0x1c/0xb0 [ 184.927139][ T8808] do_replace+0x8a/0x360 [ 184.927218][ T8808] do_ebt_set_ctl+0x12e/0xcd0 [ 184.927261][ T8808] ? _parse_integer_limit+0x170/0x190 [ 184.927290][ T8808] ? _raw_spin_lock_bh+0x56/0xb0 [ 184.927309][ T8808] ? _raw_spin_unlock_bh+0x18/0x20 [ 184.927399][ T8808] ? _raw_spin_lock_bh+0x56/0xb0 [ 184.927421][ T8808] ? _raw_spin_unlock_bh+0x18/0x20 [ 184.927444][ T8808] ? release_sock+0x116/0x150 [ 184.927465][ T8808] ? sockopt_release_sock+0x41/0x50 [ 184.927566][ T8808] ? do_ip_setsockopt+0x1af1/0x2290 [ 184.927587][ T8808] nf_setsockopt+0x199/0x1b0 [ 184.927655][ T8808] ip_setsockopt+0x102/0x110 [ 184.927724][ T8808] udp_setsockopt+0x99/0xb0 [ 184.927744][ T8808] sock_common_setsockopt+0x69/0x80 [ 184.927776][ T8808] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 184.927886][ T8808] __sys_setsockopt+0x184/0x200 [ 184.927912][ T8808] __x64_sys_setsockopt+0x64/0x80 [ 184.928001][ T8808] x64_sys_call+0x2327/0x3020 [ 184.928027][ T8808] do_syscall_64+0x12c/0x370 [ 184.928054][ T8808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.928117][ T8808] RIP: 0033:0x7f9ee778c799 [ 184.928139][ T8808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.928158][ T8808] RSP: 002b:00007f9ee61df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.928183][ T8808] RAX: ffffffffffffffda RBX: 00007f9ee7a05fa0 RCX: 00007f9ee778c799 [ 184.928197][ T8808] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 184.928208][ T8808] RBP: 00007f9ee61df090 R08: 0000000000000108 R09: 0000000000000000 [ 184.928233][ T8808] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 184.928245][ T8808] R13: 00007f9ee7a06038 R14: 00007f9ee7a05fa0 R15: 00007ffc3c05f6a8 [ 184.928262][ T8808] [ 185.176586][ T7522] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.224894][ T8817] loop6: detected capacity change from 0 to 1024 [ 185.253818][ T8817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.285348][ T8826] loop5: detected capacity change from 0 to 512 [ 185.292311][ T8826] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 185.305883][ T8826] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1437: bad orphan inode 131083 [ 185.316543][ T8826] loop5: lost filesystem error report for type 5 error -117 [ 185.317041][ T8826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.418623][ T8834] __nla_validate_parse: 1 callbacks suppressed [ 185.418637][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 185.485176][ T8826] 9pnet_fd: Insufficient options for proto=fd [ 185.493693][ T28] audit: type=1400 audit(1772240679.806:2141): avc: denied { mounton } for pid=8825 comm="syz.5.1437" path="/57/bus" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.622775][ T7522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.811297][ T3634] Bluetooth: hci0: command 0x1003 tx timeout [ 185.818362][ T4236] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 185.824864][ T8753] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 185.865003][ T8859] ip6_vti0 speed is unknown, defaulting to 1000 [ 185.945719][ T8197] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.592218][ T8872] loop3: detected capacity change from 0 to 1024 [ 186.866218][ T28] audit: type=1400 audit(1772240681.166:2142): avc: denied { unmount } for pid=8889 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 186.928145][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1461'. [ 186.959718][ T8897] FAULT_INJECTION: forcing a failure. [ 186.959718][ T8897] name failslab, interval 1, probability 0, space 0, times 0 [ 186.986317][ T8900] netlink: 'syz.1.1463': attribute type 1 has an invalid length. [ 187.034656][ T8897] CPU: 0 UID: 0 PID: 8897 Comm: syz.3.1462 Tainted: G W syzkaller #0 PREEMPT(full) [ 187.034739][ T8897] Tainted: [W]=WARN [ 187.034746][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.034759][ T8897] Call Trace: [ 187.034765][ T8897] [ 187.034771][ T8897] __dump_stack+0x1d/0x30 [ 187.034831][ T8897] dump_stack_lvl+0x95/0xd0 [ 187.034850][ T8897] dump_stack+0x15/0x1b [ 187.034868][ T8897] should_fail_ex+0x263/0x280 [ 187.034887][ T8897] should_failslab+0x8c/0xb0 [ 187.034904][ T8897] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 187.034973][ T8897] ? alloc_vmap_area+0x1b6/0xe30 [ 187.034997][ T8897] alloc_vmap_area+0x1b6/0xe30 [ 187.035066][ T8897] ? __kmalloc_cache_node_noprof+0x3a1/0x480 [ 187.035088][ T8897] __get_vm_area_node+0x173/0x1d0 [ 187.035155][ T8897] __vmalloc_node_range_noprof+0x291/0x12b0 [ 187.035176][ T8897] ? do_replace+0x1b4/0x360 [ 187.035248][ T8897] ? avc_has_perm+0x101/0x190 [ 187.035275][ T8897] ? avc_has_perm_noaudit+0xab/0x130 [ 187.035353][ T8897] ? do_replace+0x1b4/0x360 [ 187.035380][ T8897] __vmalloc_noprof+0xa4/0xf0 [ 187.035422][ T8897] ? do_replace+0x1b4/0x360 [ 187.035488][ T8897] do_replace+0x1b4/0x360 [ 187.035518][ T8897] do_ebt_set_ctl+0x12e/0xcd0 [ 187.035546][ T8897] ? _parse_integer_limit+0x170/0x190 [ 187.035648][ T8897] ? _raw_spin_lock_bh+0x56/0xb0 [ 187.035674][ T8897] ? _raw_spin_unlock_bh+0x18/0x20 [ 187.035692][ T8897] ? _raw_spin_lock_bh+0x56/0xb0 [ 187.035710][ T8897] ? _raw_spin_unlock_bh+0x18/0x20 [ 187.035738][ T8897] ? release_sock+0x116/0x150 [ 187.035836][ T8897] ? sockopt_release_sock+0x41/0x50 [ 187.035859][ T8897] ? do_ip_setsockopt+0x1af1/0x2290 [ 187.035878][ T8897] nf_setsockopt+0x199/0x1b0 [ 187.035909][ T8897] ip_setsockopt+0x102/0x110 [ 187.035958][ T8897] udp_setsockopt+0x99/0xb0 [ 187.036020][ T8897] sock_common_setsockopt+0x69/0x80 [ 187.036051][ T8897] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 187.036107][ T8897] __sys_setsockopt+0x184/0x200 [ 187.036129][ T8897] __x64_sys_setsockopt+0x64/0x80 [ 187.036153][ T8897] x64_sys_call+0x2327/0x3020 [ 187.036182][ T8897] do_syscall_64+0x12c/0x370 [ 187.036204][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.036229][ T8897] RIP: 0033:0x7f0f5d3dc799 [ 187.036246][ T8897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.036261][ T8897] RSP: 002b:00007f0f5be37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.036284][ T8897] RAX: ffffffffffffffda RBX: 00007f0f5d655fa0 RCX: 00007f0f5d3dc799 [ 187.036338][ T8897] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 187.036352][ T8897] RBP: 00007f0f5be37090 R08: 0000000000000108 R09: 0000000000000000 [ 187.036363][ T8897] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 187.036374][ T8897] R13: 00007f0f5d656038 R14: 00007f0f5d655fa0 R15: 00007ffddfc6f238 [ 187.036391][ T8897] [ 187.329949][ T8897] syz.3.1462: vmalloc error: size 128, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 187.361275][ T8897] CPU: 0 UID: 0 PID: 8897 Comm: syz.3.1462 Tainted: G W syzkaller #0 PREEMPT(full) [ 187.361351][ T8897] Tainted: [W]=WARN [ 187.361359][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.361372][ T8897] Call Trace: [ 187.361378][ T8897] [ 187.361386][ T8897] __dump_stack+0x1d/0x30 [ 187.361488][ T8897] dump_stack_lvl+0x95/0xd0 [ 187.361507][ T8897] dump_stack+0x15/0x1b [ 187.361525][ T8897] warn_alloc+0x145/0x1c0 [ 187.361602][ T8897] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 187.361644][ T8897] ? avc_has_perm+0x101/0x190 [ 187.361676][ T8897] ? avc_has_perm_noaudit+0xab/0x130 [ 187.361701][ T8897] ? do_replace+0x1b4/0x360 [ 187.361730][ T8897] __vmalloc_noprof+0xa4/0xf0 [ 187.361803][ T8897] ? do_replace+0x1b4/0x360 [ 187.361826][ T8897] do_replace+0x1b4/0x360 [ 187.361862][ T8897] do_ebt_set_ctl+0x12e/0xcd0 [ 187.361917][ T8897] ? _parse_integer_limit+0x170/0x190 [ 187.361951][ T8897] ? _raw_spin_lock_bh+0x56/0xb0 [ 187.362011][ T8897] ? _raw_spin_unlock_bh+0x18/0x20 [ 187.362034][ T8897] ? _raw_spin_lock_bh+0x56/0xb0 [ 187.362056][ T8897] ? _raw_spin_unlock_bh+0x18/0x20 [ 187.362215][ T8897] ? release_sock+0x116/0x150 [ 187.362255][ T8897] ? sockopt_release_sock+0x41/0x50 [ 187.362273][ T8897] ? do_ip_setsockopt+0x1af1/0x2290 [ 187.362296][ T8897] nf_setsockopt+0x199/0x1b0 [ 187.362324][ T8897] ip_setsockopt+0x102/0x110 [ 187.362369][ T8897] udp_setsockopt+0x99/0xb0 [ 187.362389][ T8897] sock_common_setsockopt+0x69/0x80 [ 187.362489][ T8897] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 187.362527][ T8897] __sys_setsockopt+0x184/0x200 [ 187.362549][ T8897] __x64_sys_setsockopt+0x64/0x80 [ 187.362570][ T8897] x64_sys_call+0x2327/0x3020 [ 187.362591][ T8897] do_syscall_64+0x12c/0x370 [ 187.362672][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.362691][ T8897] RIP: 0033:0x7f0f5d3dc799 [ 187.362707][ T8897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.362723][ T8897] RSP: 002b:00007f0f5be37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.362743][ T8897] RAX: ffffffffffffffda RBX: 00007f0f5d655fa0 RCX: 00007f0f5d3dc799 [ 187.362814][ T8897] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 187.362827][ T8897] RBP: 00007f0f5be37090 R08: 0000000000000108 R09: 0000000000000000 [ 187.362921][ T8897] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 187.362933][ T8897] R13: 00007f0f5d656038 R14: 00007f0f5d655fa0 R15: 00007ffddfc6f238 [ 187.363003][ T8897] [ 187.365687][ T8897] Mem-Info: [ 187.755822][ T8904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8904 comm=syz.6.1466 [ 187.798931][ T8897] active_anon:11888 inactive_anon:2151 isolated_anon:0 [ 187.798931][ T8897] active_file:23955 inactive_file:3160 isolated_file:0 [ 187.798931][ T8897] unevictable:0 dirty:197 writeback:0 [ 187.798931][ T8897] slab_reclaimable:3840 slab_unreclaimable:21820 [ 187.798931][ T8897] mapped:29405 shmem:4784 pagetables:3537 [ 187.798931][ T8897] sec_pagetables:0 bounce:0 [ 187.798931][ T8897] kernel_misc_reclaimable:0 [ 187.798931][ T8897] free:1827999 free_pcp:18602 free_cma:0 [ 187.847356][ T8897] Node 0 active_anon:47520kB inactive_anon:8520kB active_file:95852kB inactive_file:12640kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117576kB dirty:816kB writeback:16kB shmem:19136kB kernel_stack:4320kB pagetables:14344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 187.911942][ T8915] random: crng reseeded on system resumption [ 187.918461][ T28] audit: type=1400 audit(1772240682.236:2143): avc: denied { write } for pid=8914 comm="syz.6.1468" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 187.921614][ T8897] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 187.961777][ T28] audit: type=1400 audit(1772240682.276:2144): avc: denied { mount } for pid=8920 comm="syz.5.1467" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 187.996312][ T8897] lowmem_reserve[]: 0 2879 7857 7857 [ 188.019807][ T8897] Node 0 DMA32 free:2944668kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948192kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 188.061031][ T8897] lowmem_reserve[]: 0 0 4978 4978 [ 188.066427][ T8897] Node 0 Normal free:4449052kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47752kB inactive_anon:8520kB active_file:95852kB inactive_file:12640kB unevictable:0kB writepending:832kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:63620kB local_pcp:47656kB free_cma:0kB [ 188.112595][ T8897] lowmem_reserve[]: 0 0 0 0 [ 188.117189][ T8897] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 188.143533][ T8897] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 6*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944668kB [ 188.160185][ T8897] Node 0 Normal: 2655*4kB (UME) 1512*8kB (UME) 671*16kB (UME) 708*32kB (UM) 471*64kB (UME) 439*128kB (UME) 362*256kB (UME) 272*512kB (UME) 179*1024kB (UME) 82*2048kB (UME) 909*4096kB (UM) = 4448876kB [ 188.172959][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1475'. [ 188.181595][ T8897] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 188.193717][ T8941] netlink: 182 bytes leftover after parsing attributes in process `syz.7.1475'. [ 188.198766][ T8897] 32452 total pagecache pages [ 188.213029][ T8897] 565 pages in swap cache [ 188.217405][ T8897] Free swap = 62716kB [ 188.221545][ T8897] Total swap = 124996kB [ 188.226435][ T8897] 2097051 pages RAM [ 188.230318][ T8897] 0 pages HighMem/MovableOnly [ 188.242672][ T8897] 81603 pages reserved [ 188.299970][ T28] audit: type=1400 audit(1772240682.616:2145): avc: denied { connect } for pid=8938 comm="syz.6.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.746144][ T28] audit: type=1400 audit(1772240683.066:2146): avc: denied { map } for pid=8968 comm="syz.1.1484" path="socket:[25826]" dev="sockfs" ino=25826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 188.787364][ T28] audit: type=1400 audit(1772240683.066:2147): avc: denied { accept } for pid=8968 comm="syz.1.1484" path="socket:[25826]" dev="sockfs" ino=25826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 188.832150][ T8976] loop3: detected capacity change from 0 to 128 [ 188.860367][ T8976] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 188.879172][ T8976] FAT-fs (loop3): Filesystem has been set read-only [ 188.893582][ T8976] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 188.913439][ T8976] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 189.005056][ T28] audit: type=1400 audit(1772240683.326:2148): avc: denied { name_bind } for pid=8980 comm="syz.6.1488" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 189.010686][ T8984] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1488'. [ 189.214075][ T28] audit: type=1400 audit(1772240683.536:2149): avc: denied { setattr } for pid=8979 comm="syz.3.1487" name="NETLINK" dev="sockfs" ino=24820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.315193][ T8991] loop6: detected capacity change from 0 to 128 [ 189.347130][ T8991] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.390109][ T8991] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.642951][ T28] audit: type=1400 audit(1772240683.566:2150): avc: denied { setopt } for pid=8979 comm="syz.3.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 189.662773][ T28] audit: type=1400 audit(1772240683.736:2151): avc: denied { watch_reads } for pid=8988 comm="syz.6.1489" path="/30/bus" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 189.687555][ T9001] netlink: 'syz.3.1492': attribute type 1 has an invalid length. [ 189.799370][ T9001] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 189.854335][ T9009] loop7: detected capacity change from 0 to 128 [ 190.040968][ T9009] EXT4-fs: Ignoring removed nobh option [ 190.064127][ T9009] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.508649][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1496'. [ 190.527897][ T9009] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.816648][ T8437] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.878484][ T9049] lo speed is unknown, defaulting to 1000 [ 190.884321][ T9049] lo speed is unknown, defaulting to 1000 [ 190.890755][ T9049] lo speed is unknown, defaulting to 1000 [ 190.898177][ T9049] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 190.914985][ T9049] lo speed is unknown, defaulting to 1000 [ 190.921381][ T9049] lo speed is unknown, defaulting to 1000 [ 190.927894][ T9049] lo speed is unknown, defaulting to 1000 [ 190.934503][ T9049] lo speed is unknown, defaulting to 1000 [ 190.941088][ T9049] lo speed is unknown, defaulting to 1000 [ 190.947470][ T9049] lo speed is unknown, defaulting to 1000 [ 190.973069][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1500'. [ 191.147653][ T9053] loop6: detected capacity change from 0 to 128 [ 191.253817][ T9046] delete_channel: no stack [ 191.263929][ T9046] delete_channel: no stack [ 191.266953][ T9057] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1505'. [ 191.318665][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'. [ 191.370162][ T9064] can0: slcan on ttyS3. [ 191.554901][ T9072] can0 (unregistered): slcan off ttyS3. [ 191.623698][ T9086] loop3: detected capacity change from 0 to 512 [ 191.673543][ T9086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.689428][ T9057] Set syz1 is full, maxelem 65536 reached [ 191.699610][ T9086] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.736172][ T9063] syz.6.1507 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 191.770798][ T9063] CPU: 1 UID: 0 PID: 9063 Comm: syz.6.1507 Tainted: G W syzkaller #0 PREEMPT(full) [ 191.770901][ T9063] Tainted: [W]=WARN [ 191.770908][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.770947][ T9063] Call Trace: [ 191.770954][ T9063] [ 191.770962][ T9063] __dump_stack+0x1d/0x30 [ 191.770989][ T9063] dump_stack_lvl+0x95/0xd0 [ 191.771009][ T9063] dump_stack+0x15/0x1b [ 191.771072][ T9063] dump_header+0x80/0x240 [ 191.771095][ T9063] oom_kill_process+0x295/0x350 [ 191.771117][ T9063] out_of_memory+0x97d/0xb80 [ 191.771186][ T9063] try_charge_memcg+0x62e/0xa10 [ 191.771256][ T9063] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 191.771287][ T9063] __swap_cache_prepare_and_add+0x386/0x530 [ 191.771319][ T9063] swap_cache_alloc_folio+0xa2/0x120 [ 191.771420][ T9063] swap_cluster_readahead+0x26e/0x3d0 [ 191.771572][ T9063] swapin_readahead+0xde/0x840 [ 191.771611][ T9063] ? _raw_spin_unlock+0x9/0x30 [ 191.771630][ T9063] ? swap_put_entries_cluster+0x385/0x3a0 [ 191.771723][ T9063] ? swap_put_entries_cluster+0x91/0x3a0 [ 191.771809][ T9063] ? __rcu_read_unlock+0x4e/0x70 [ 191.771831][ T9063] ? swap_cache_get_folio+0x26f/0x280 [ 191.771890][ T9063] do_swap_page+0x309/0x2210 [ 191.771917][ T9063] ? css_rstat_updated+0xbb/0x280 [ 191.772005][ T9063] ? __rcu_read_lock+0x36/0x50 [ 191.772022][ T9063] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 191.772044][ T9063] handle_mm_fault+0xb40/0x3020 [ 191.772098][ T9063] ? vma_start_read+0x1c7/0x2c0 [ 191.772124][ T9063] do_user_addr_fault+0x62f/0x1050 [ 191.772155][ T9063] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 191.772180][ T9063] ? trace_page_fault_user+0x1f/0xe0 [ 191.772208][ T9063] exc_page_fault+0x62/0xa0 [ 191.772271][ T9063] asm_exc_page_fault+0x26/0x30 [ 191.772368][ T9063] RIP: 0033:0x7f9ee765a14c [ 191.772386][ T9063] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 191.772438][ T9063] RSP: 002b:00007ffc3c05f810 EFLAGS: 00010202 [ 191.772523][ T9063] RAX: 0000000000000000 RBX: 00007f9ee7a06090 RCX: 0000555579e5e808 [ 191.772538][ T9063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.772551][ T9063] RBP: 00007f9ee7a07da0 R08: 0000000000000000 R09: 0000000000000000 [ 191.772580][ T9063] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002eeb3 [ 191.772594][ T9063] R13: 00007f9ee7a0609c R14: 000000000002ebef R15: 00007ffc3c05f910 [ 191.772614][ T9063] [ 192.024616][ T9063] memory: usage 307200kB, limit 307200kB, failcnt 198 [ 192.032536][ T9063] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 192.040435][ T9063] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 192.080713][ T9063] Memory cgroup stats for /syz6: [ 192.080991][ T9063] cache 0 [ 192.089256][ T9063] rss 0 [ 192.092671][ T9063] shmem 0 [ 192.095609][ T9063] mapped_file 0 [ 192.099504][ T9063] dirty 0 [ 192.102742][ T9063] writeback 0 [ 192.106041][ T9063] workingset_refault_anon 18 [ 192.110818][ T9063] workingset_refault_file 0 [ 192.115314][ T9063] swap 196608 [ 192.115517][ T9108] loop5: detected capacity change from 0 to 128 [ 192.118584][ T9063] swapcached 204800 [ 192.118594][ T9063] pgpgin 24519 [ 192.132480][ T9063] pgpgout 24519 [ 192.136119][ T9063] pgfault 10601 [ 192.139577][ T9063] pgmajfault 11 [ 192.143600][ T9063] inactive_anon 0 [ 192.147236][ T9063] active_anon 0 [ 192.151579][ T9063] inactive_file 0 [ 192.155326][ T9063] active_file 0 [ 192.158775][ T9063] unevictable 0 [ 192.162482][ T9063] hierarchical_memory_limit 314572800 [ 192.168021][ T9063] hierarchical_memsw_limit 9223372036854771712 [ 192.168223][ T9109] loop7: detected capacity change from 0 to 512 [ 192.193464][ T9063] total_cache 0 [ 192.195424][ T9108] EXT4-fs: Ignoring removed nobh option [ 192.204844][ T9109] EXT4-fs warning (device loop7): read_mmp_block:111: Error -117 while reading MMP block 0 [ 192.227930][ T9063] total_rss 0 [ 192.240192][ T9063] total_shmem 0 [ 192.249515][ T9063] total_mapped_file 0 [ 192.253888][ T9063] total_dirty 0 [ 192.255141][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 192.257469][ T9063] total_writeback 0 [ 192.270897][ T9063] total_workingset_refault_anon 18 [ 192.277558][ T9063] total_workingset_refault_file 0 [ 192.285882][ T9063] total_swap 196608 [ 192.286310][ T9108] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.289964][ T9063] total_swapcached 204800 [ 192.303113][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.304094][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 192.331294][ T9108] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.365285][ T9063] total_pgpgin 24519 [ 192.391355][ T9063] total_pgpgout 24519 [ 192.395382][ T9063] total_pgfault 10601 [ 192.399347][ T9063] total_pgmajfault 11 [ 192.404638][ T9063] total_inactive_anon 0 [ 192.410634][ T9063] total_active_anon 0 [ 192.421253][ T9063] total_inactive_file 0 [ 192.422307][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 192.422318][ T28] audit: type=1400 audit(1772240688.748:2155): avc: denied { watch watch_reads } for pid=9107 comm="syz.5.1513" path="/68/mnt" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.425423][ T9063] total_active_file 0 [ 192.425500][ T9063] total_unevictable 0 [ 192.457957][ T9123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1516'. [ 192.482353][ T28] audit: type=1400 audit(1772240688.798:2156): avc: denied { getopt } for pid=9124 comm="syz.3.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.520820][ T9063] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1507,pid=9063,uid=0 [ 192.536271][ T9063] Memory cgroup out of memory: Killed process 9063 (syz.6.1507) total-vm:94160kB, anon-rss:1228kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 192.554181][ T9130] loop7: detected capacity change from 0 to 512 [ 192.577400][ T9130] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 192.610816][ T9130] EXT4-fs error (device loop7): ext4_get_journal_inode:5863: inode #3: comm syz.7.1518: iget: special inode unallocated [ 192.675066][ T9130] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 192.675321][ T9130] EXT4-fs (loop7): no journal found [ 192.684399][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 192.684426][ C0] EXT4-fs (loop7): initial error at time 1772240688: ext4_get_journal_inode:5863: inode 3 [ 192.684468][ C0] EXT4-fs (loop7): last error at time 1772240688: ext4_get_journal_inode:5863: inode 3 [ 192.748979][ T9130] EXT4-fs (loop7): can't get journal size [ 192.768130][ T9130] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 192.777771][ T9130] EXT4-fs error (device loop7): ext4_protect_reserved_inode:160: inode #3: comm syz.7.1518: iget: special inode unallocated [ 192.791752][ T9130] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 192.800761][ T9130] EXT4-fs (loop7): failed to initialize system zone (-117) [ 192.817050][ T9130] EXT4-fs (loop7): mount failed [ 192.862336][ T28] audit: type=1400 audit(1772240689.168:2157): avc: denied { append } for pid=9153 comm="syz.7.1523" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 192.958645][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 192.970988][ T3395] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.987610][ T7522] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.042385][ T9160] fido_id[9160]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.109409][ T28] audit: type=1400 audit(1772240689.428:2158): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 193.154240][ T9170] tap0: tun_chr_ioctl cmd 35108 [ 193.156083][ T28] audit: type=1400 audit(1772240689.428:2159): avc: denied { mount } for pid=9168 comm="syz.7.1528" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 193.200626][ T28] audit: type=1400 audit(1772240689.428:2160): avc: denied { bpf } for pid=9168 comm="syz.7.1528" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 193.231661][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1529'. [ 193.260679][ T28] audit: type=1400 audit(1772240689.428:2161): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.305765][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1529'. [ 193.314953][ T28] audit: type=1400 audit(1772240689.428:2162): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.347975][ T9190] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.350652][ T28] audit: type=1400 audit(1772240689.428:2163): avc: denied { ioctl } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.424762][ T9197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1534'. [ 193.474880][ T9206] loop5: detected capacity change from 0 to 1024 [ 193.502145][ T9206] EXT4-fs: inline encryption not supported [ 193.571510][ T9206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.601102][ T9208] loop7: detected capacity change from 0 to 4096 [ 193.646029][ T9206] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.1535: Allocating blocks 497-513 which overlap fs metadata [ 193.662966][ T9224] netlink: 'syz.1.1538': attribute type 1 has an invalid length. [ 193.733027][ T9206] EXT4-fs (loop5): Remounting filesystem read-only [ 193.782137][ T9208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.804350][ T9206] EXT4-fs (loop5): pa ffff888107a8a4d0: logic 64, phys. 449, len 4 [ 193.831959][ T9224] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.859301][ T7522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.902791][ T9233] vlan3: entered promiscuous mode [ 193.907847][ T9233] bond4: entered promiscuous mode [ 193.929141][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.981582][ T9233] vlan3: entered allmulticast mode [ 194.025149][ T9233] bond4: entered allmulticast mode [ 194.064723][ T9238] bond4: (slave bridge1): making interface the new active one [ 194.073729][ T9238] bridge1: entered promiscuous mode [ 194.079083][ T9238] bridge1: entered allmulticast mode [ 194.091361][ T9238] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 194.100870][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.109276][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.192327][ T9249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9249 comm=syz.7.1540 [ 194.212368][ T9249] netlink: 'syz.7.1540': attribute type 15 has an invalid length. [ 194.432994][ T9276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2066 sclass=netlink_route_socket pid=9276 comm=syz.1.1547 [ 194.859367][ T9316] netlink: 'syz.7.1553': attribute type 10 has an invalid length. [ 194.871802][ T9316] team0: Port device dummy0 added [ 194.978614][ T9320] loop7: detected capacity change from 0 to 512 [ 195.038742][ T9320] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 195.048859][ T9320] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 195.111566][ T9320] EXT4-fs (loop7): 1 truncate cleaned up [ 195.117682][ T9320] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.211071][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.424075][ T9331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.506459][ T9337] netlink: 'syz.7.1559': attribute type 83 has an invalid length. [ 195.517300][ T9337] __nla_validate_parse: 8 callbacks suppressed [ 195.517316][ T9337] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 195.539555][ T9335] loop3: detected capacity change from 0 to 128 [ 195.580190][ T9335] vfat: Unknown parameter 'iocharsettf8' [ 195.884144][ T9354] loop3: detected capacity change from 0 to 8192 [ 195.902555][ T9368] loop7: detected capacity change from 0 to 128 [ 195.913058][ T9368] FAT-fs (loop7): bogus number of directory entries (65286) [ 195.927281][ T9368] FAT-fs (loop7): Can't find a valid FAT filesystem [ 196.145018][ T9372] netlink: 'syz.5.1566': attribute type 21 has an invalid length. [ 196.197329][ T9374] ip6_vti0 speed is unknown, defaulting to 1000 [ 196.271393][ T9374] lo speed is unknown, defaulting to 1000 [ 196.286424][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1570'. [ 196.382017][ T9394] loop5: detected capacity change from 0 to 512 [ 196.426444][ T9394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.470676][ T9394] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.488894][ T9402] ip6_vti0 speed is unknown, defaulting to 1000 [ 196.497532][ T9394] cgroup2: Unknown parameter 'trans' [ 196.503437][ T9359] ================================================================== [ 196.511504][ T9359] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 196.519568][ T9359] [ 196.521880][ T9359] write to 0xffff88812cb9b228 of 8 bytes by task 9354 on cpu 0: [ 196.529495][ T9359] filemap_splice_read+0x523/0x780 [ 196.534600][ T9359] splice_direct_to_actor+0x26e/0x670 [ 196.539961][ T9359] do_splice_direct+0x119/0x1a0 [ 196.544800][ T9359] do_sendfile+0x382/0x650 [ 196.549211][ T9359] __x64_sys_sendfile64+0x105/0x150 [ 196.554406][ T9359] x64_sys_call+0x2dc4/0x3020 [ 196.559082][ T9359] do_syscall_64+0x12c/0x370 [ 196.563663][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.569563][ T9359] [ 196.571881][ T9359] write to 0xffff88812cb9b228 of 8 bytes by task 9359 on cpu 1: [ 196.579502][ T9359] filemap_splice_read+0x523/0x780 [ 196.584611][ T9359] splice_direct_to_actor+0x26e/0x670 [ 196.589971][ T9359] do_splice_direct+0x119/0x1a0 [ 196.594808][ T9359] do_sendfile+0x382/0x650 [ 196.599217][ T9359] __x64_sys_sendfile64+0x105/0x150 [ 196.604408][ T9359] x64_sys_call+0x2dc4/0x3020 [ 196.609084][ T9359] do_syscall_64+0x12c/0x370 [ 196.613659][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.619550][ T9359] [ 196.621858][ T9359] value changed: 0x00000000000037f7 -> 0x00000000000037fe [ 196.628950][ T9359] [ 196.631259][ T9359] Reported by Kernel Concurrency Sanitizer on: [ 196.637399][ T9359] CPU: 1 UID: 0 PID: 9359 Comm: syz.3.1563 Tainted: G W syzkaller #0 PREEMPT(full) [ 196.648237][ T9359] Tainted: [W]=WARN [ 196.652027][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.662069][ T9359] ================================================================== [ 196.692669][ T9408] netlink: 'syz.7.1575': attribute type 13 has an invalid length. [ 197.013977][ T7522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.029848][ T9408] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.037049][ T9408] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.152865][ T9408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.165111][ T9408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.345534][ T9402] lo speed is unknown, defaulting to 1000 [ 197.351926][ T1671] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.361540][ T1671] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.370461][ T1671] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.393988][ T1671] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.488327][ T28] kauditd_printk_skb: 243 callbacks suppressed [ 197.488352][ T28] audit: type=1400 audit(1772240693.808:2399): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1