last executing test programs: 1m10.092048127s ago: executing program 4 (id=2435): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da288a8", 0x12, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 1m10.037199894s ago: executing program 4 (id=2438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0x400}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001980)={0x11, 0x0, 0x0}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000380)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r0, 0x0) 1m9.925722908s ago: executing program 4 (id=2439): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r4 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_io_uring_setup(0x46b3, &(0x7f0000000140)={0x0, 0xbee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, 0x0, 0x64, 0x183000, 0x12345}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@setneightbl={0x0, 0x43, 0x200, 0x70bd28, 0x25dfdbfe, {0x2}, [@NDTA_NAME={0x0, 0x1, '\x00'}]}, 0x48}}, 0x4040004) 1m9.666630642s ago: executing program 4 (id=2440): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109091, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000001c0)='m', 0x1, 0x1}]) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r3, &(0x7f0000000180)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x401, @mcast1, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xdffffffb}}], 0x18}, 0x8000) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') setxattr$incfs_metadata(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)="1762ddc0197c403fa56b9362a0068c59ddb87c73d345f73cf1d35df92b823cf6a7", 0x21, 0x0) 1m9.37394592s ago: executing program 4 (id=2443): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x60842, 0x0) pwritev2(r0, &(0x7f0000000240), 0x0, 0x29b0cfbd, 0x41001, 0x0) 1m9.186864694s ago: executing program 4 (id=2445): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x8000000, 0x0, 0x1, r0}]) 1m9.102823875s ago: executing program 32 (id=2445): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x8000000, 0x0, 0x1, r0}]) 29.70646763s ago: executing program 1 (id=3101): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pwrite64(r1, &(0x7f0000000100)="a3ead14127b5b5284b8d9182ebcd0432079a4e7a6f360582d6f81f55ed3047044c9513478226fb2e2127aad72948e7d59713304eaba2bbf75b8a6a", 0x3b, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x2e, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x404ffa1, 0x100000001}) 29.481805339s ago: executing program 1 (id=3105): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d2, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r3 = syz_io_uring_setup(0xcd, &(0x7f0000000340)={0x0, 0xfffffffc, 0x400, 0x0, 0xdc}, &(0x7f00000004c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) io_uring_setup(0x6ff3, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x2}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001600)=ANY=[@ANYBLOB="1201000002000020ec350600000000000001090224000108000000092100000001229803090581031000731a2f0885a167042713c7c368b540fc64dc42ec2c6da42db855137e0a70df95cc4752467b064e7a251c494a6d75f95f2e1f2131d496958cc817c4b591bba41850ca40b07d579d4664ea52ee90cd0a512f51a9335279ddf65c30b67a"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) readv(r6, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/4101, 0x1005}, {0x0}], 0x2) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)) 26.390058747s ago: executing program 1 (id=3156): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xb400, 0x61, 0x10, 0xb0}, [@ldst={0x4, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 26.088724326s ago: executing program 1 (id=3158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf253e000000b6eaa995dfe15d2f60532caef1fa180e0001006e657464657673696d000000160001de6e657464657673696d3000001c00825a0f815ee8087e3b5f46a9d800736f7263655f6d61635f69735f6d756c74696361737400050083000000000000314888e2d5ace65853d06465cb016fc1c3739c06183be629397cff4e94425dbc2d617c72b1b82d89a88f8efbea015a3dc6f2b40ae8cab05603a024"], 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") truncate(0x0, 0x3000000) sendfile(r3, r3, 0x0, 0x2) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r8, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x0, r6}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a1ab23bd7000fdffffff32000000080017015900000008000300", @ANYRES32=0x0, @ANYBLOB="9e87232071ec9a511291b2be7fec5a1333208f55fbfef30cb20174a0d89309f0a2d4cfad668340b9951d1472518bb61288039503dc2f81e9d1763aeb09b5d2b43177246ba0fc4d9e475dba2bbdc6f7f7d7cadd7e199e3ccef26892bcd1ecb10e972ba1"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="e91acb96b020000000", @ANYRES16=r5, @ANYBLOB="08002dbd7000fcdbdf256a0000000a0006000802110000010000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x42010, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x41, 0x0, 0x78) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 25.323630434s ago: executing program 1 (id=3166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000940)={&(0x7f0000000800), 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x38}}, 0x20000811) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000003c0)={[{@barrier_val={'barrier', 0x3d, 0x6e02}}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@minixdf}, {@resgid}, {@nobarrier}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$eJzs3U1rXFUfAPD/nUzSNu3zNIVS1IUUurBSO2kSXyoI1pWIFgu6r0MyDSWTTslMShMLtgu7cSNFELEgfgD3LotfwE9R0EKREnQhQuRO7qTTZCavE2fS+f3gtufMuTfn/nPuOTln7gw3gL51Mv0nF/FiRHydRBxtKstHVnhyZb+lJ7cm0y2J5eVP/kgiyV5r7J9k/x/OMi9ExC9fRpzJra+3urA4UyyXS3NZfrQ2e320urB49upscbo0Xbo2PjFx/o2J8bfferNjsb566a/vPn7wwfmvTi19+9OjY/eSuBBHsrLmOHbhdnPmZPGfLDUYF9bsONaBynpJ0u0TYEcGsn4+GOkYcDQGsl4PPP++iIhloE8l+j/0qcY8oLG279A6eN94/N7KAqge+1Bz/PmV90biYH1tNLyUPLMySte7Ix2oP63j59/v30u32Ph9iEOb5AG25fadiDiXz68f/5Ns/Nu5c/U3jze2to5++/sD3fQgnf+81mr+l1ud/0SL+c/hFn13Jzbv/7lHHaimrXT+907L+e/q0DUykOX+V5/zDSZXrpZL5yLi/xFxOgYPpPmN7uecX3q43K6sef6Xbmn9jblgdh6P8geePWaqWCtGxNBu4m54fCfipXyr+JPV9k9atH/6+7i0xTpOlO6/3K5s8/j31vKPEa+0bP+nd7SSje9Pjtavh9HGVbHen3dP/Nqu/m7Hn7b/8MbxjyTN92ur26/jh4N/l9qVpfEP7+D6H0o+racbneBmsVabG4sYSj5a//r402Mb+cb+afynT63E/+xkJbfh9Z8uvj7bYvx3j99tu2svtP/Uttp/+4mHH37+fbv6tzb+vV5Pnc5eyca/1rJrZasnuNvfHwAAAAAAAPSSXEQciSRXWE3ncoXCyuc7jsdwrlyp1s5cqcxfm4r6d2VHYjDXuNN9tOnzEGPZ52Eb+fE1+YmIOBYR3wwcqucLk5XyVLeDBwAAAAAAAAAAAAAAAAAAgB5xuM33/1O/DXT77IA9V3+wwYFunwXQDZs+8r8TT3oCetKm/R94bun/0L/0f+hfa/t/R54sDOwL/v5D/9L/oX/p/9C/9H8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqEsXL6bb8tKTW5NpfurGwvxM5cbZqVJ1pjA7P1mYrMxdL0xXKtPlUmGyMrvZzytXKtfHxmP+5mitVK2NVhcWL89W5q/VLl+dLU6XLpcG/5OoAAAAAAAAAAAAAAAAAAAAYH+pLizOFMvl0txqIp+VzK0v6tPEu9ETp7GXAa7Y0eH5XolibxLvD/TEaewmcSdr3u0d1aUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa+DcAAP//Rm0oPg==") sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0209010800a8fdb00000000000c185a38100053e0e54adb9a9e696cb5fdce6099db875242d05861d65375980e380772960a36c8adc426e64f60debfb064fb28727de229c9ac445e9d5b3c6fd065d2c117672a3b12d4100a7e810ef4666877ce661e8bbbfb38ffe4aa4ae94a558cefdb744594ac88ffb194f6ed294d02c9b82424b3480d26a14c62a131f1aefeb71a6d60c5a1610bf557f61028fb8e4b7bd8911b8ec31b9ba7eefb812feed5e3cbd798e9735634ed1daa428af3adb7084a7fd35f38d6531e256ee1cb9bc72"], 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x20000014) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000001c0), 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x9d, 0x30, 0x0, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000980)="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", 0x180}, {&(0x7f0000000440)="d2e9c101ba5753dc4313fb4d3a5f8b712c3616aa3cf6009dbed255e194f40573b25e840481563be6593c2232ca3627cc59b42a600a5d8fdbf643226a0c34b6c33c3f6980732551c32ddc66436b3c976387a5fd6db54d41793ee8ebc2665c17b3b94a082f815306796a7375816a3b58b04d91413a154f426112500c7c664a4f75800da04a21ffc5f72d3cdae59e6da1fc5d0cc2f49ee76c8694eb0ebdf4281753b11540c2bad595cf299bfde2d395cd84226684cde5948aa20c6b18f339b0783855f96a9c340da794db3451131d9e20b1539cce6a84855c8e05", 0xd9}, {&(0x7f0000000b00)="e507bed8d1c2d65d5ad0c18d30f06a3434c3932f0b24f02c9a136b2995100795df3c3aa57066187c6c449e5988a68d1ccb6ecd2902e1606c65ac870cf6db04bb8c1f44220a4b466ca469bf556d9a9c8b69a6807df08399aabaee2f55a4f5773bc7fc35ad4a95906628707fbe56d393197f31f4ff9402270e293db47452e35c1cc8356bddf3e5df908793ee2fe85d54fc5c81904b37f151bfcba95c665f96a3673522c7da7d35231b66f5fe763d5f26df516eaf361cc33eaa3781e65f77e0d989b6f1228f5afb2f880d50539b8440181cbe81bce916d8e48395454b24d043f986ce236db6a1c3364ebb30043722fce8a1711adf68ddb95a47b525ffba2967f853ec84", 0x102}, {&(0x7f0000000640)="5e8cc8d64794ba4aa7f6fe5ca37af75dd7cd7666926ab140649f107a62733471e781055e2376b29f324be91398e7e5079e52bf111bfdea80d67bde41eb547cef5f78d1dea32f097a8c47d66c285b8059a5ae9c180e9a7e", 0x57}, {&(0x7f0000000740)="74403778a9c5ebc0cd78c839b9685fb3d70240", 0x13}], 0x5}, 0x400c040) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r6, 0x180000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0xe, 0x5, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r7, &(0x7f0000000100), 0x0}, 0x20) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r3) lsetxattr$trusted_overlay_origin(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r8, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r8, &(0x7f00000007c0)="b77974", 0x3, 0x3b00, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000032c0)={0x5d2, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x28, 0x3f7, 0x100, 0x70bd2a, 0x25dfdbfc, {0x7, 0x7, './file1', './file1'}, [""]}, 0xffffffffffffff79}}, 0x200c8090) 24.618677285s ago: executing program 1 (id=3179): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[], [{@dont_appraise}, {@context={'context', 0x3d, 'root'}}, {@audit}, {@flag='nomand'}, {@smackfsfloor={'smackfsfloor', 0x3d, '[{$:*'}}]}, 0x51, 0x59c, &(0x7f0000001840)="$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") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x23, 0x80805, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080001000000000066"], 0x50) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @private=0xa010100}, 0x10) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) shmctl$IPC_RMID(0x0, 0x13) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(&(0x7f000000cffc)=0xfffffffd, 0x80000000000b, 0x1, 0x0, &(0x7f0000048000), 0xffffffff) futex(&(0x7f000000cffc), 0x6, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000)=0xfffffffd, 0x0) recvfrom$inet_nvme(r2, &(0x7f00000001c0)=""/13, 0xd, 0x1000, &(0x7f0000000300)=@ax25={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000c8000000c8"], 0x0, 0xe2, 0x0, 0x0, 0x8000}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r5, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20000002) r8 = socket(0x2, 0x3, 0xff) shutdown(r8, 0x1) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="64b61067501a1ae39230a1b3ef1b84094e3a6cc5", 0x14}], 0x1}}], 0x1, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454d1, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') setuid(0xee01) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 24.560703862s ago: executing program 33 (id=3179): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[], [{@dont_appraise}, {@context={'context', 0x3d, 'root'}}, {@audit}, {@flag='nomand'}, {@smackfsfloor={'smackfsfloor', 0x3d, '[{$:*'}}]}, 0x51, 0x59c, &(0x7f0000001840)="$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") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x23, 0x80805, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080001000000000066"], 0x50) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @private=0xa010100}, 0x10) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) shmctl$IPC_RMID(0x0, 0x13) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(&(0x7f000000cffc)=0xfffffffd, 0x80000000000b, 0x1, 0x0, &(0x7f0000048000), 0xffffffff) futex(&(0x7f000000cffc), 0x6, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000)=0xfffffffd, 0x0) recvfrom$inet_nvme(r2, &(0x7f00000001c0)=""/13, 0xd, 0x1000, &(0x7f0000000300)=@ax25={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000c8000000c8"], 0x0, 0xe2, 0x0, 0x0, 0x8000}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r5, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20000002) r8 = socket(0x2, 0x3, 0xff) shutdown(r8, 0x1) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="64b61067501a1ae39230a1b3ef1b84094e3a6cc5", 0x14}], 0x1}}], 0x1, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454d1, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') setuid(0xee01) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 9.300259595s ago: executing program 6 (id=3426): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0xa, 0xfffffffffffffffc}, 0x0, 0x35e, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x4, 0x0, 0x2000000020000006}, 0x0, 0x2, 0xffffffffffffffff, 0xb) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, r0, 0x0, 0x3, &(0x7f0000000040)=']$\x00'}, 0x30) 9.209763986s ago: executing program 6 (id=3428): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/14, 0x0, 0x1c00, 0x7ff, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 9.019629131s ago: executing program 6 (id=3430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001000010000000000000000000001000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c0002400000000000000001090001"], 0xf4}}, 0x10) 8.952354419s ago: executing program 6 (id=3432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x34}}, 0x40000c0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x9, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x114) unlinkat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000eb03010000000000000000000a00000a14000000f603010000000000000000000000000abfb2099c"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) fallocate(r5, 0x0, 0xbf5, 0x2000402) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.733887947s ago: executing program 6 (id=3436): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setreuid(0x0, 0xee00) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000040)) 8.561319309s ago: executing program 6 (id=3438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000008050001000700000014000300686173683a69702c706f72742c69700011000300686173683a69702c706f72740000000044000780080008400000008108000a400000000508000a400000000505001500030000001800018014000240ff010000000000000000000000000001050003000500000005000100070000000500050001000000"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x48015) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000300142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfd78}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000100db0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100"], 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x74, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0xffffffff, 0x1}, @generic={0x4, 0x2}, @md5sig={0x13, 0x12, "0f6f61715d3c4fd74c82cc0700c100"}, @sack={0x5, 0x26, [0xe584, 0x5b9, 0x2, 0x9, 0x5ee, 0x9c67, 0x5, 0x3, 0x6]}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 8.530248173s ago: executing program 34 (id=3438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000008050001000700000014000300686173683a69702c706f72742c69700011000300686173683a69702c706f72740000000044000780080008400000008108000a400000000508000a400000000505001500030000001800018014000240ff010000000000000000000000000001050003000500000005000100070000000500050001000000"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x48015) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000300142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfd78}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000100db0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100"], 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x74, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0xffffffff, 0x1}, @generic={0x4, 0x2}, @md5sig={0x13, 0x12, "0f6f61715d3c4fd74c82cc0700c100"}, @sack={0x5, 0x26, [0xe584, 0x5b9, 0x2, 0x9, 0x5ee, 0x9c67, 0x5, 0x3, 0x6]}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 2.679954906s ago: executing program 7 (id=3546): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000000640)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24689f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb6121e63f45f3dceb6e1c0c410d799168ffc4b64675af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xf2}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000a00)="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", 0x13f}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a3", 0x63}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebd", 0x28}], 0x6}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958761a4d", 0x78}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd", 0x4b}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.890500837s ago: executing program 2 (id=3567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000143, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="30be3600", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000018000180060001000200000008000300ac1414aa0800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1.71380303s ago: executing program 7 (id=3569): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000380)={{{@in=@private, @in6=@remote}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x2, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x39000, 0x0) r9 = memfd_create(&(0x7f0000000080), 0x0) splice(r7, 0x0, r9, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0xfffffe3e) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.64017465s ago: executing program 5 (id=3572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000023000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0xff, 0x2}, {&(0x7f0000000340)=""/163, 0xa3}, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x60, 0xfffffffefffffffe}}, @cswp={0x58, 0x114, 0x7, {{0x88, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x21, 0x9}}], 0xa0, 0x8004}, 0x0) 1.534170283s ago: executing program 2 (id=3573): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x2d2, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r3 = syz_io_uring_setup(0xcd, &(0x7f0000000340)={0x0, 0xfffffffc, 0x400, 0x0, 0xdc}, &(0x7f00000004c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) io_uring_setup(0x6ff3, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x2}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001600)=ANY=[@ANYBLOB="1201000002000020ec350600000000000001090224000108000000092100000001229803090581031000731a2f0885a167042713c7c368b540fc64dc42ec2c6da42db855137e0a70df95cc4752467b064e7a251c494a6d75f95f2e1f2131d496958cc817c4b591bba41850ca40b07d579d4664ea52ee90cd0a512f51a9335279ddf65c30b67a"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) readv(r6, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/4101, 0x1005}, {0x0}], 0x2) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)) 1.381063213s ago: executing program 5 (id=3575): socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/138, 0x8a}], 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="000829bd7000fddbdf2504000000040006801c00098008000200f10b00000800020005000000080001002700000020000280040004000800010001"], 0xdc}}, 0x24000840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.334744039s ago: executing program 2 (id=3577): unshare(0x28000600) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.271908747s ago: executing program 5 (id=3579): socket$packet(0x11, 0x2, 0x300) unshare(0x2c020400) r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) setrlimit(0x0, &(0x7f0000001ac0)={0x8001, 0xec9b}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ttl\x00'}, @NFTA_MATCH_INFO={0x6, 0x3, "7acc"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x355c32cef104cbbc}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1) r7 = socket(0x10, 0x803, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x20008884) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2d, 0x0, @empty}}, 0x24) 1.161502211s ago: executing program 2 (id=3580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8018008}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r1, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1a60f2bb1635e21c}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8bf43ec7fc373c5c19e602f711"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5cc2c84206"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "75aa3f9c03"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "527e8d541f97ad83342a7835f5"}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, 'W+'}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "6ea55e43f76da1845d9f82ee3a"}]}, 0xc8}}, 0x9) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000200)={0x1, [0x0]}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = accept4$inet6(r3, &(0x7f0000000240), &(0x7f0000000280)=0x1c, 0x80000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x9) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[r5], 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, &(0x7f0000000340)={0x2, r2, 'id1\x00'}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x5, 0x9c0, 0x11, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x8, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x9, 0xe08, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8, 0x1, 0x48}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000001b80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b40)={&(0x7f0000000680)={0x14ac, r7, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x100c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0x380, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "a8ba2a94d511ede29557275617fcdb7ef4ff35d6486d1cfcb7b69b77c1d8660f26ae3b7cbb76eb03775a938be0362a9fd1fb078893af59066d3dee1f1a7668e536012764748d6be8d957473ed9dc7a147739a99bb40e7dd6bea8118624ac61cc4dfe15e99136e28eb9a4fb642bbe5d9127f11467c73b44a8980c785d2de265a1eaf85031326e0f2aa3ee348c6947134d4fe23d63cd0b4c80b544ec4a26188ed661026836f2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x99, 0x5, "afa0a50fc3c7cd14c9208537ea8fa54257ee61223b734f689e9d9344960920c2220a5082ea1144abcb06c06e2721f49298b9a73553aae0a49aad1ada277eab8b17a6b98b799a93589c06b23739a129c43bc004b25f223d3c530eeacdeab7f6623ea7ab978480afbb1ea946f9c4dcef53bae44fdc0022183453a79a2b72f8d58da5058b92bdc60f6c2607929dac2642b1ae6fed8909"}, @ETHTOOL_A_BITSET_VALUE={0x9e, 0x4, "71540e32d645633b35054c9627da3c9ae74a764e2ec6fe9c27a710ad6e692e570183823d921c5f687b6a6c075f5e5aaafc46fd3358d41596a1142903e4f21a923fd2b6fd31e4d15a091d71064d4be2848261b54e2aee281bce81b1948b901b75f484fd0d9dc3ce70339edc7998b5f8d59077341d3cd453aebd3f3d667a37febf3b6769ddfea982b48f4bde85c48d1793e8a94c57aa4a922f0dbb"}, @ETHTOOL_A_BITSET_BITS={0x170, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffc0}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[}\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@-\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'id1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{!]]&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[]\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x84e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd5d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x159}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6b27}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xdc#.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf0}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x3e, 0x3, "3ca31c69bc3cf96ba4b3dbda8346ff8ae60f35c03c189cd57ac05b84231cbd29e61e2d22fda3270b90ffc61dbcc65354e3d95b3f89fc094e50c0"}]}, 0x14ac}}, 0x40001) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x44, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x20000041) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0xb0, 0x1403, 0x100, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8c4}, 0x17860f1862a78d69) sendmsg$inet6(r4, &(0x7f00000020c0)={&(0x7f0000001e80)={0xa, 0x4e24, 0x80000000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001ec0)="c102e09477aa5178848d731e61a8d8e00ce1e8bcadd894c6c217291b201d392ad5f4c0bf2c188b88b8b60d8c3d5ce1075e403245dcd8032d45930526222b1ed54b7fcfa34422d3b7d37df7b83d99c772bce4a7f8de4223eb83a2e8", 0x5b}, {&(0x7f0000001f40)="c161067d1c6fa443dcba5fccf7a26e5379ae6082c3f0c6da1bd260afcff72dd18b8e134354dbae2e61f40e5aeb5cdd9e74061efb9c7755ddd139a753db160ce5f04e5ec77171219a9087ea2fc2646224a19bef496449f6a0ff724c8bd26dde0d4a9b780f3b3b4f35dbc331ebc6676eeabd822eb9beb1c755d74a03cbdd2296d4825c4ae3356523f541a798ea71fea83b81b3f7da9f2b519870415031429b12c17e1454aa5deccd8f4346598958", 0xad}, {&(0x7f0000002000)="eea3a911", 0x4}], 0x3, &(0x7f0000002080)}, 0x800) r13 = syz_open_procfs(0x0, &(0x7f0000002100)='net/llc/core\x00') sendmsg$NL80211_CMD_SET_KEY(r13, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x8001, '\x00', r11, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) r14 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f00000022c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x200, 0x4, 0x5, 0xe0}, {0x9, 0x5, 0x8, 0x2, 0x20, 0x3, 0x0, 0x2}, {0x9, 0x5, 0x8, 0x3, 0x20, 0xd7, 0x78}}}}}}]}}, 0x0) syz_usb_disconnect(r14) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002340), r13) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000024c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002480)={&(0x7f0000002380)={0xf0, r15, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) pwritev(r4, &(0x7f0000002740)=[{&(0x7f0000002500)}, {&(0x7f0000002540)="96d0ebda38e618b44559c8ce80fa1547ef9aadb1a26e79bab122d184a9bfabf8474cc50a1bdd9914931eed221de8acf885a7d71e46cdfe98691099613678e359389ef7a2839bca7765a504fee77387b8ca7f6d3f1c5e6b18ca89986359bf74a5894dac79b211553a6e878817d4641ab6288e2fb7ec2d200b5b4ff3ff2368b49a780adf30cae3322fae87863c96a2fdf0ae68a46f332fdce88969ce5cd5b380c21f4943863a143538195f1650a6ece7bf7237100c57ed76867b557001a93a63b5f5b8a3a6860996a5175bff4f024a4251232e087a", 0xd4}, {&(0x7f0000002640)="b1538e39637050d6ad6fc757fedda8d0841aa8f6610776c599", 0x19}, {&(0x7f0000002680)="28cd8a5a29a9a23b2859503484bf208e8acd22efe3a1059b64eb3b6dbc4a13b083dea279f1d975e8dbb5171f4e2c2acc1a48d8578388627f0b78cc4b59bf71f2c67ce23bddad33664d10f8fc6e7e8b95a74133aef04e10d6f1e2088d7bba12d113ca121bac4ead6daba8be7c731f3010609fcd3b1ff8746df3105e5a0e6dc82104b2a8f5c42364cd3d97be", 0x8b}], 0x4, 0x6, 0x6) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000002780)={0x7, 0x8, 0x1, 0x555f, 0x3, 0x0, [{0xffff, 0xffffffffffffff7f, 0x1ac00000000}, {0x6, 0x6, 0x5, '\x00', 0x1100}, {0x4, 0x6, 0x2, '\x00', 0x70c}]}) 890.102556ms ago: executing program 7 (id=3586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8000, 0x47}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="00020000", @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf25010000000800028004000180440001801400020070696d72656700000000000000000000140002006261746164765f736c6176655f3000000800030001000000080003000100000008000300020000004c0002801400018008000100020000000800010007000000340001800800010000000000080001000300000008000100070000000800010002000000080001000600000008000100030000000c0001800800030002000000bc0002805400018008000100050000000800010006000000080001000500000008000102030000000800010000000000080001000300000008000100030000000800010001000000080001000400000008000100030000002400018008000100040000000800010005000000080001000800000008000100030000001c0001800800010000000000080001000400000008000100030000002400018008000100080000000800010007000000080001000500000008000100030000008c00028014000180080001000000000008000100e3bbf4232c000180080001000700000008000100050000000800010002000000080001000000000008000100020000000400018044000180"], 0x200}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) 812.632556ms ago: executing program 3 (id=3589): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) prctl$PR_MCE_KILL(0x21, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000240)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000280), 0x4) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1) r5 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$BTRFS_IOC_DEFRAG(r5, 0x4c06, 0x3) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = fsopen(&(0x7f0000000180)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0/../file0\x00', r8, &(0x7f0000000140)='./file0\x00') syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x30, 0x0, @fd=r8, 0x20000000000003be, 0x0, 0x11cb, 0x4, 0x0, {0x0, r6}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000008000000010000000100001302000000060000f10000000003000000006161"], &(0x7f0000001f40)=""/4079, 0x38, 0xfef, 0x8}, 0x28) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 812.250416ms ago: executing program 7 (id=3590): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x400, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x1000) chown(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 798.882428ms ago: executing program 0 (id=3591): r0 = socket$inet_sctp(0x2, 0x5, 0x84) fstatfs(r0, &(0x7f0000000bc0)=""/178) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) (async) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af144ca5418ad9fa255600"}, 0x48, 0xffffffffffffffff) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000480)=""/68, 0x44) (async) preadv(r2, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2, 0x0, @void}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x0, 0x86, 0xc7, &(0x7f0000000d00)="08352b1f68e7ac1e65ea2b074aa7959101927d427119b5abf14643571b79cb7826db39f18afc0071c85b09843e0617550126dbffd25a5fd0996207546b1c71d0d14b09b120b9aa0a94b815a0341d5460cab5269f9e78ca0a86f99ca7ec7fe98ddec7df5b1baedbdb6cf5947b6ada119fa8da88176af68fce2a1fc6a0a9b93d256b821434c836", &(0x7f0000000dc0)=""/199, 0x81, 0x0, 0x6d, 0xd8, &(0x7f0000000ec0)="c765c60b30a6428cb2fd2939fd9e8114b625593f0690f08dd4030ae51ade422c8d7b95bc7cd4a80a4e86b7187cce8042e1d8c7fbaf6b64558c410be65973c9d4dd865bb84319a67618bc0d2ab0a36ac277de53d3421195c63e15f5c0150914399bff5712efc276dd2b44c12ffa", &(0x7f0000000f40)="0d6b5f1a97ee9b872108aa92060dc67e007203e2c34b26c0bae2cfe5dfa66d6b3f2808d884f83e3b70713a5e4e1d446fa4060d7071b48f7378fbaa7a9cd07bf89785996b134118d600fd5a558a7b5428e14566fec238ce1ec95c9acfb98a58f9155d40caed0b62cff46b64c6c6155d8bb0d54aa2c7ea4ef57ceabf722d13fb9279f5d07796f31deebfb6e388f211ee6635f11f3b61d912662a201323c96ec129face04d9c6f975609dbe75c9bdd1e6052afc5669f726d368d5ea05c6fb759cf64ffc2fc14528e6e30645200cfaafd94e692032ac8c750bee", 0x6, 0x0, 0x7}, 0x50) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r3) (async) request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000c80)='\x00', 0xfffffffffffffffd) 710.479979ms ago: executing program 3 (id=3592): fcntl$getflags(0xffffffffffffffff, 0x408) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8084) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r0 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000300)={0x0, 0x200, 0x10, 0x8aa, 0x5}, &(0x7f00000010c0)=0x18) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x101868f, &(0x7f0000000240), 0xfe, 0x552, &(0x7f0000001080)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf2502"], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x48}}, 0x181243e958591463) getdents(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x8000, 0x1}, @window={0x3, 0xd5, 0x4}, @sack_perm], 0x3) 710.074109ms ago: executing program 0 (id=3593): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bsdgroups}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000045bc613900000000000000000000000000000000000000ffffffff00000000"]}, 0x108) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000180), &(0x7f0000000240)=ANY=[], 0x835, 0x1) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000427bd7000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ffff6450ffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000801) fchdir(r2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r6, 0x2}}, 0x18) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000340)={0x23, 0x5, 0x8, 0x2}, 0xa) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x200, 0x70bd2a, 0x25dfdbfd, {0x7, 0x7, './file0', './file1'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8080) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) 62.366132ms ago: executing program 0 (id=3594): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$unix(0x1, 0x1, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x40a941, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20000004) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000002060104"], 0x58}, 0x1, 0x0, 0x0, 0x22004004}, 0x0) 61.471122ms ago: executing program 7 (id=3595): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x199202, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file2\x00', 0x18000, &(0x7f0000000a80)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000704fcff", 0x7d}], 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x240000d4}, 0x400c0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r8, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000001c80)={0xdc, r6, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f0000000080), 0x4) 47.400414ms ago: executing program 3 (id=3596): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x2e}, {&(0x7f00000000c0)="42bdabd8976e9d0b1b781d82eb1d91418dc8353c66d3d8ff00f9db73cdf19faa63", 0x21}, {&(0x7f0000000100)="bb3c9886a2c855633ac2492c599b31f5cd8f8a1edbc15e20d5a6a5ef465c0b06ccc1705ea8e24ce0576ab265c5d9719abad30dd57a00335ece59bcc93169ecfd098526c1726d32cd87f2ecfc24305bac031d3efd83b36c524805cb5504894f270df3bff754cae6d331949828498f5a", 0x6f}], 0x3}, 0x0) 12.485789ms ago: executing program 3 (id=3597): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}, 0x2}]}, &(0x7f00000002c0)=0x10) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000280)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000880)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0x595}, &(0x7f0000000380)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x10000, @private0, 0xe915}}, 0x0, 0x0, 0x0, 0x1000, 0x38fa8b00d923dd68, 0x2}, 0x9c) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18080, &(0x7f0000003b40)=ANY=[@ANYRES32=r2, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)) (async) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) (async) r6 = io_uring_setup(0x37d4, &(0x7f00000003c0)={0x0, 0x1e3b, 0x1000, 0x2, 0x22d, 0x0, r5}) io_uring_enter(r6, 0x51a3, 0xf8a6, 0x10, &(0x7f0000000440)={[0x7e8]}, 0x8) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0xfd, 0x0, 0x7, 0x6cc45b9df838559b, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xfffffffffffeffff, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x120005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r5, 0x2) (async) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r7, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) fdatasync(r5) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 11.891229ms ago: executing program 2 (id=3598): r0 = getuid() syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000480)=ANY=[@ANYBLOB='cruft,dmode=0x0000000000000002,session=0x000000000000d,unnhide,mode=0x0000000000000009,dmode=0x0001000000000007,dmode=0x0000000000000002,nocompress,uid=\x00'/171, @ANYRESHEX=r0, @ANYBLOB=',hide,utf8,uid=', @ANYRESHEX=r0, @ANYBLOB=',\x00'], 0x81, 0xa4f, &(0x7f0000000a80)="$eJzs3U9sXVdeB/DvfbYTxzMkmU4opWqbl5RkPB3j2M40IepiSOyX1IP/INuRGrGYzDQOCjEUGpDaCCnphhUVSCAWsKtYwYJK3dAN6g52sGKBVHXFvmIVVh7dd5/jZ/s9vzh17CT9fKznd++5v3vO79537zt+f3xPeLasHtkwt7ravD3K/EdtZS1X/2kPMuYpdmnqq08+/bi8fXQ/B9KXN4t/TQaT1JP+JC8lA5NTC/OzB7ev6HZyPckXSZGkDC4eNYfrKf4q312f/yLFP5TtdnXgUWuml1W+1fb7+AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKdRMTk1NjZeHMj03NV36pWkvsXk1MJ8kdXVrUvW1ql83hz1u/i8Z7tJUd4yOLg21PdLx9YXv5ikfjKvVHOvNAckz2DufufFo299v7+2tn63bL6Rg49UbWpVbrd/vrKy/H73uNV7VdwuJvj0uNKYm16cn569eKVRn16cr184d27szNuXF+uXp2cai9cWlxqz9cmFxsWl+YX68OQP6+MXLpytN0avzV+duzI1OtNYKzz/mxNjY+fqPx393cbFhcX5uTM/HV2cfHt6ZmZ67kozplxcxpwvD8TfmV6qLzUuztbrN2+tLJ/dlFPf5p1dBo332pIyaKJHTH/GJibGxycmxj9qjZ49sVZw7s0Lb54fG+sf2yRbIp7QQcvT5VD3h3k3n77hG6lV/X/+YCbTmcvVvJN6x5/JTGUh85ntsrxlrf8/daaxbbvt/X+rl+9vW/xy+etkXmvNDrb6/19J0t7/d8ll737u5MPcze38PCtZyXLe3/eM9vbnShqZy3QWM5/pzOZis6TeKqnnQs7lXMbys7yd41lMPZcznZk0sphrWcxSGs0jajILaeRiljKfhdQznMn8MPWM50Iu5GzqaWQ01zKfq5nLlUzlYrOWm7nV3O9nt8nxYdB496Dyj7kqaGKbmjZ35uWxvrP+v/G8/iXII9v9J3F4TKut/v/ApvK+raHDk3uVFAAAALCrfv0/cvjYC//+ZVLk1eb78penZxo/2e+0AAAAgF3U/LreK+XdQDn16mDz9f/YfqcFAAAA7KKi+T92RZKhHK+m1v5dypsAAAAA8Jxofv7/Worj6wVe/wMAAMBzpvc19ntGFCNrl/+t36jub7QiqrmiyPRMY3Ryfuat8ZxuXmUgyatttc0kqTWvOVgMNP/94I2cqKJODFX3Q+s1lm0OllHjo2+N542cbG3I8Ovl3evDHSInqsgfVJE/aI/sy4bIs2UkADzvTnbqj3fY/7+RkSpi5OVml9//coc+eEzPCgBPi4dj7Px/a0izDv1/K+K1bv3/j7d5/V9GvJCbx6uvFIzm3byXldzISFrfODjeqdYDrdH1qq8hjPR4N2Co9ZWF/zpfy8iW9wMGH25re+xyJjKy/o7AL1rvVWyst1jL4Wy1tMOgCADwLDq5bT/8aP3/SI/X/0O+UggAT5U7H96tRrC/8+Hd1XutiYcl6xNDbSX3usR0m9jvbQQANtJLAwAAAAAAAAAAAAAAAAAAAAAAAAAAwO7bcLn+Q63CzRfw/8/TycrKcrKjy/5/w4nBThk+3kQte5Tzvk/0JdmdCsvdv7O1fpIdtzXY4WDbwcQ/H2qt/r/7v+f3eyK7XiEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADfAkXS16m8lhxMMpbkzN5n9eTc3+8Edkv9wGOtVjzIg3yQw7ueDwAAAAAAAAAAAAAAAAAAAAAAAAAAAADAt1zr+v+1VPffqYrSX0tOJbme5Pf2O8fd9GC/E3gyit4hf1gFrl//v5YMZLVIf/WwpxiYnFqYny2rKg6Wy7/65NOPy1vvureOqlBWULZQHlQLD7OsWmgLG9i41veaa/13a64+dal5YF5aujwzNXtl4bfXA18sPqvGrai3rb2W75+f+re/bis+UGVRfFZuaWdVu0NTy3du/+l7f1yfutxsd2pru7+2cb1iu3Yfwa2V5YmypaXGO0t/9ke3Pmhb9EJOJK8PJ8Mbt/D3y1uXlk5s3p+bsv26+IvicP4u13O4dcAUq0W5c440t//QzVsry6Pvvrdy42FO9zbkdDTHk9xIBjvk9C+dczre/dhsHnW1gbLVsWZQ+etYj23cVluN41326/eah8xQ523o0ma9x/nVY7+3MjrbMaO/+ZPv5/SOH+nTPVrsqPi6+J9i89la+zLVU32Hs7NDFc3ItiOlfdmG06tWRTa3fKJ9wc8219n1rOQJ+Mv8Ir/1cPyXWtvzf+ux2pvno7YWO58Xyc7Pi388sqVHWdfskY5tGu6o9ezTbZ1WnseqqC55/mp+VNW5g2eUH/XqsZ/Q+f/3xXD+L/eN/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADz9iqQvyerBTeW15FSSo0mOlPP1ZHXzuvcfo73aUPHYue6Gx8n52VN03dDiQR7kgxze64wAAAAAAAAAeDIuTX31yacfl7fm5/F9+Y1akh9Xn/T3Jzla/O3A5NTC/GyPigaS62sf6Q/uLIfr5a/vrs9/Uc691GOl/f36AAA8034ZAAD//+b1YfU=") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r4, 0x6, 0x180000}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0xb0, 0xb0, 0x1a8, 0x0, 0xb0, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0xfffff1b2, 0x5, 0x2c6, {0x8}}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'sit0\x00', 'wg2\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 7.577389ms ago: executing program 0 (id=3599): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000640)={0x60, 0x0, &(0x7f0000112000/0x1000)=nil, &(0x7f0000422000/0x4000)=nil, 0x6, &(0x7f00000002c0)=[{0x3, 0x7fffffff, 0x5}, {0x6, 0x5, 0x1}, {0xd, 0x6, 0x2}], 0x3, 0x7fffffff, 0x0, 0x0, 0x40, 0x20}) syz_io_uring_setup(0x1539, &(0x7f0000000700)={0x0, 0x0, 0x1000, 0x3, 0x2d8}, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fadvise64(r0, 0x2, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000880)=0x2, 0x4) 6.955269ms ago: executing program 5 (id=3600): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r1, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x40, 0x116, 0x10}, 0x18) r2 = syz_io_uring_setup(0x801325, &(0x7f0000000100)={0x0, 0x712, 0x10100, 0x3, 0x2, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r7 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 6.589439ms ago: executing program 3 (id=3601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4cba8f2ff6b55e8d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000b0000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 5.98568ms ago: executing program 5 (id=3602): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x64041, 0x1e2) unshare(0x40600) fcntl$setlease(r0, 0x400, 0x0) r1 = socket(0xa, 0x5, 0x0) listen(r1, 0x100) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000084"], 0x18, 0x4855}, 0x4008850) fcntl$setlease(r0, 0x400, 0x0) 5.52519ms ago: executing program 0 (id=3603): ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000010c0)={0x0, "b5681866245f06df22ca7e59080ed312"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$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") 5.33859ms ago: executing program 7 (id=3604): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000000640)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24689f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb6121e63f45f3dceb6e1c0c410d799168ffc4b64675af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xf2}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000a00)="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", 0x174}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a3", 0x63}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebd", 0x28}], 0x6}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958761a4d", 0x78}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd", 0x4b}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.16375ms ago: executing program 2 (id=3605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x2, 0x4, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x65, 0x0, 0x8, 0x0, 0x0, @empty, @local, {[@timestamp={0x44, 0x24, 0x45, 0x0, 0xd, [0x3, 0xb0c4, 0x8, 0xffff, 0x6, 0x8, 0x200, 0x6]}, @timestamp_addr={0x44, 0x2c, 0x20, 0x1, 0x4, [{@loopback, 0xe}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xffa}, {@loopback, 0x1c}, {@local, 0x40006}, {@remote, 0x7}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x9, 0x9, 0xc, @empty, @dev={0xfe, 0x80, '\x00', 0x40}, 0x700, 0x8, 0x5, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x10, 0x7, 0xe, 0x7, {{0x16, 0x4, 0x0, 0x15, 0x58, 0x68, 0x0, 0x0, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xd3, 0x1, 0x1, [{@loopback, 0x4}, {@rand_addr=0x64010101, 0x1}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x80, 0x1, 0x1, [{@loopback, 0x2}, {@multicast2, 0x6e98}, {@private=0xa010100, 0x4}, {@rand_addr=0x64010101, 0x1000}, {@remote, 0x8000}]}]}}}}}) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$sock(r4, &(0x7f0000000300)={&(0x7f0000000d00)=@ll={0x11, 0x4, r6, 0x1, 0x1, 0x6, @multicast}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffde9}, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x80, 0x40, 0x1, 0xfff, {{0xb, 0x4, 0x1, 0x0, 0x2c, 0x67, 0x0, 0xc4, 0x2f, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0x17, 0xe0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2, @empty]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x20, 0x40, 0x8, 0x5, {{0x12, 0x4, 0x3, 0x9, 0x48, 0x65, 0x0, 0xac, 0x2f, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0x7, 0x55, [@private=0xa010101]}, @cipso={0x86, 0x28, 0x2, [{0x5, 0x7, "22498ef049"}, {0x2, 0x5, "5fd543"}, {0x6, 0x5, '^a$'}, {0x7, 0x9, "8a9aa5cf4fe12d"}, {0x7, 0x8, "9434eed900f6"}]}, @generic={0x83, 0x4, "af3e"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x20, 0x40, 0x2, 0x8b7, {{0x9, 0x4, 0x3, 0x1c, 0x24, 0x64, 0x0, 0xab, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb0}, {[@end, @timestamp={0x44, 0x4, 0x75, 0x0, 0x7}, @end, @generic={0x89, 0x9, "9f5e9f1bdeb060"}]}}}}}) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) r13 = socket(0x1d, 0x2, 0x6) r14 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000000380)={0x1d, r15, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x3ff, 0x7, {{0x1d, 0x4, 0x1, 0x1c, 0x74, 0x64, 0x0, 0x80, 0x29, 0x0, @private=0xa010100, @loopback, {[@timestamp_addr={0x44, 0x2c, 0xdf, 0x1, 0xb, [{@multicast1, 0x74bce18e}, {@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1, 0x1}, {@rand_addr=0x64010102, 0xa}]}, @ssrr={0x89, 0x1b, 0xac, [@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010102, @broadcast]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xc4, [@rand_addr=0x64010100, @rand_addr=0x64010101, @rand_addr=0x64010100, @rand_addr=0x64010102]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000980)=ANY=[@ANYBLOB="54030000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f64696e6b757000000000000000000000000000000000000092010000000000000800060000000000000000", @ANYRES32=r1, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ed2affff08000600", @ANYRES32=r2, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="dc01028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRESOCT=r16, @ANYBLOB="04000280"], 0x354}, 0x1, 0x0, 0x0, 0x8040}, 0x40844) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r18, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x11}, 0x4000000) 663.38µs ago: executing program 0 (id=3606): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44044}, 0x4048884) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x573, &(0x7f0000000a40)="$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") lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='user.incfs.id\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x7) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r5 = syz_clone(0x1c250a00, &(0x7f0000000600)="c70612af4afbf90270be2b54aad114cc65fe1cb95a5d56be2503951f6c7e9ebfff120a64797f23118ca48754ea8e0ba24ae2f9f77c35a3a0a758611086c229eb3f24deea42cec48fabb60f2fa7caecfda0803f55bafaae95bdc24f85210000000095e90000000000005552e503e3b7c5b2e119a6c8bd791f488850d380d98fb228eba6934e2d6c6fba84710000000000004a271672501535d0de631c1fcd7bf80f308fce01cd44741d4ec37c55403237bfb80dbc0da7a73647be61d347a31bb7d4dceaf55b2b9b1a1d5c2114244d31c755f971cad8296e869fef6678", 0xdc, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000fc0)="8337f953293bc67f624fb700c0416aca49feff9091e2ea80b2a0c3f9c5beee1cd1beade6e249d2a613f8aa63977d3022d10b25c91ea8ec2fbfded6cf81d39436755d4dec31f460ab35c26f7c15d78212a76cfc8b49a88f858534742729a012cb7cb09c79b25abc92ad2ead52316ff8f280eef51b6cfb654e8e9fb8a95f0f6a2094cd49be7ff74a96db5c5125ad165d28bef989e834285b17c6c8815020e831bc06a7c4bf2397ea3a4b93b63619c5e65bf5a0e6825c6e7c7de092b5ef87751bd05ec3362e952f469cf34e39a22134f1d7cab2d6e0a0e4d9b68cbe8f3a13521e6c46400c2db1a1cfed360ba6f882f56c7e81cd468af8fc93e283d7651524616f52b0fe3e8188c15edd5f0335b4c0203ca44b11b8891f18ad02cf34f1b37bcad2633caf8644ebbcb9e7e0f6e4a2517593e6cd5928230624160a2e5343309be91991a9448148e15b5d1c4f5507745c54af58adcff85f87976e3ec373cde328807b36c635aac0a498d1b46aa024459879f186fbd328f35e79ffcf42f829a754a12e24462bc009e7d2f98208e8fd0f6885130040014ce77e7e0a55fa54dc743739bbe47d568015ca4932820154d3249a03e129393c4a64667cf9fac10d4321e1fbeed18b9d6ad380fcefbcd29b8d638444386a56804a90c1b9c52f75b0e595b53a8d16831f05bce3839b9f696dd8e9ff0612859d9f4adf3a92853747c5e372785b841ea76c43efd41f0a063385a4a98a42b033ce053e70b947796b9a6cabdceb08de9d7793b5d341f3f598f72a40f67ba666ec8098d19a6939ee813cd968ae7b7be31985bdbfa0f1d9ebe2d2c29160df003048bf09bbc0590e484857495c875340d83290a622219b4e16d08e7a738e24934ac534c6c63ba28e1884552e99ea048796c344a8b90a3c312013c8ec5bc12485c4002f6cf5deb2d401b960deb87ee2fcbc885e8ded7ddbdf2a3f176ad1f24cb94c635179e1cabe5aceb7b6757cfdc4adce5ed9d5b5fcbe220fa6296e607491daed6fbf81b8d7cee54a7d5b8a44ec73ef64cd389f3eca880b50a08cc7d592ab12624c100d0839e53e9a6267ebbdf8d131c3192c625f6d7625ccd1cafdfcfc375fb77abe8eefa05e519deb98e8742b1ea6130ff70433d4a000e36cbad30ecd10dddfa8504e7355b81aaa8156876554499912ac2d8cc6823c3827258ce3d2eaa3e7f964e7cb47b89d85bc6fb937d7b6c24f52e046fe8a4381b7eca84c8cfe1da88fe423444830423a4950e505802eee59f7f68775ba0bb2f85c76f87b39d1eb5f986d641c6dccbf2f533b4e660b1df7aa3d166e44b0b5d6390ff0510f675314d39254695756ed74144a1deeb2e54dfa72c8f01298fc398563900e3858dbbb1476b633c93101c91476bef2519e5215b416bffe349b7f8ba0a9c86752665999ad7186efa4ce8587bd4892604bf5683c0ccc66f7e0a29022d28217c19cb63b0f58fbb35afc5577c6c5ea70208ddf0d1edef72630431729616f9d4d0d6f86254cf9705711698f4195f58d652f581d9f69c3079ef363c8550b56d954b914ee2f71645a5b1fb04c776c0015c16f6eeb70554a452806a1d12bbb1cd8a78beff45ee062f8738320e6856f448afb238614f769e925862d5cb6f91b71352fe148104576a995bfe3771f465574ebe7ddb3d2e3e74c6643b2f221dc0ebe981a350d10f86cfdf7db86d577ff710ee58258489a6befa655abc4e5107a7889c32b1bac692673728dbd8e24d95f37dc137b156367f2c5bf9c0c797872ea0c054597d1ba3ef9133a39dabf2da1905e3d74aa81c8311ed77ca92d0e4e32bb02639c73d178b5c65a88c618c94859835be12c50cf78113338d406c91233d20b7485e8f91649fc3f81afb8e595f0c4d0002f55e8cb69f9cb12bfe8d5244909ce0c1d01de05bb20f33114d66aeb0370d08ef09574b621ffac2742961e754c12abe5e326e1933a6be76c8da9fda2c52fc1cb1a6d759324d76989ff080c827a251a590f446e67dd5a23c479c6052f7daa2a4ed48ce0b037d07599c043a86c1104e6c991ac120c6a96a4cd8b3460a899bd6994ab435589ee45e8af2e4c49bbcdd40243f3c6d12ba4d49988973539cf082d41bcb2d21310212c9715cc69844403dfe41130398a74909d38dd2557097196e63faa3b5881e538c55cf0be77504803de5667984d65fb90308433aa0efe9766a41f3017adba61835d02c1cd51b62b62449309be713b892853cd47ae8a3a9344359b20ea43da4bb49b12f4986eb71930704f70a9f8bc3b31c293788446d879f2cf908b55af622afa245cfffe7bcd4a8d9493a3110857106d5c0f0423f6f01acbc4d971cf53466f724789c664b3da41baee903069677be41a4a2362fa56197511bcbb0fe77574c7857cc3e7cb18ba68f8d3b681272846f49f6641daf41b6359b98870e6de531c81f8daecef13b43a0179c479866d53cf447e4c254ba7a2cf6aa1524346cdeee9573f9b3d83ad1e6396850249b2f2e2b35c2166a341aa8c4cfb644a3559fd18173d4773848444680afb9373f4fd43568d8ff6313259e799fd25bf034f644c1ba5ad96fc1f2a8856d3e3a8e01ca8f342c967cba9d0744e8adfdb04c27c701c3a879ff01a198de4bb04b2062f41a06682159589aeaf4d2e722ee4bbc0ce8de5547a846c509a0f22b15526abaed2f428c881dadfc17fe5c6164516a411f074d062d8cf22a095e30aed0923ecd6385e5ac9698f6cb1c9397f4949ca068aeec0855133e5dee55ce34bcf7b637edfc8d811c67b30e778aed7be3603bed8c962a6169cdf67f44b8e84701291b06b656e530cc0e656ece0477a991056ff313a9093f3e2e6f41ce7d62554b3244a90bcac538b3c56c7b16360b74ab24ee141b0501e3fd293eb2c9600638453f95e004a13c605102582d3ec4010b8a410a3b9fc08a04198e07cd4dee061a63155cafac246422b1d464a813084b760c225db11e99dcf7a0753ea9362be9dded3cee3bbe9d4ada9a7af173c28f73ee4ed2d9b9945da7df9e7674e5be59f6ec47ebb32c3112866da4b4f0bb4f183441e2149bccacbdfe9a2e32a0437e2834c367c42a85b381aafe60beb0023efe8446d44814d5987f723a235141e2b7fa662a73663793b55fb97b8428d65a7715ee02a23496e320f6b1d8873f076544478ac538c8191526b6c73ae6eac4cc4034fb27a602d5c7445d63ea75330589e76a6ab2e735211eec16bf9fb6fc7003e3f4ad17c6e2935064bcc93c8ff03db44744b2bcf041b46b4f731784685c732526e70f57fe8acb2e77031f21922911d5dc0db53c4f3a68a68338375f310dd5fc9fa2a8803769bf71d3d081331157586e6bfb332d6c458abde5b9c8fb12e64745136a3692a2bce332df042d2c5c0e4f68ac1ad3ba6eee8c00e8d431dd487775e7f8d3f8708c2a47b351376748180f8e607d41b0b9bf105f19de773d32c6b4af5ae0857d2d61658476ad8a837e96dabdc1b3d7ccc0072f7887c9b285da6b8ca9eccdbccd4d4d61b1e3a09e3e1eb33c7f9b5418181928049f41d050394e60a4dcf38d3293ec398a225a243e03cd5873ecfed59e65a9f83841a32ada3310711e29c0a68af25f5773e589cdc81f14b2f54a5e69b2395a0f7d1a815cf24dd594430eb53f24c0962d3c2f310169d481525edbc7ee1f2e1081098181755c43eb200797efda43a75641bf3d7c4f8c67758da05f946a01f7e3c27c02bb3c990945087dc26e94677fde525a5995b2e79db614419910a529a28bc2389cf7d41b748e2ea42b8e2cbd266e0b792a2bd162e84b6b5034b3d60eee6b85d8d9e3d7b56a191c8ca7a168c8c7ccec0cc17db3ab6eedb7f56de576da635a5a5f914303e8551de9985e805127b61b92d0d90cd561822440d0625846c4991528f08de2f6270bd2c3b3e7bea39869fa2dc3c14c0fceea577100f85b2bb1f5fbb0540fe5dbdf2c748c18762bfd59e549e21d1dda22ad146661c2f0d1cb1ca565c58f17aae98743a33d894fc17457b4eb8e96504b880edad5049ba842fcb9fa095e364155f7c894cb6c272b2c0cd936d41356c0d5dee936b91e35818f4a44f68e9b62de19930f2c2e61fda443990719bec655dc7777f5c59945462219b35724702006c59918da7c06129776cff7b47191069d6703fae34d16b74089f78be1f975a8641fad5408b22959314cd4567e8f15c5455aadb468f87b7074eb03acabf6340266caa7277c9681c3ff3a814fbd6d06074d8270473114b12c28f10aab24e2250a2ed1b1e1074eda9bb6b86b3c4f35153f60b3df2a5d7f23e2422465006442290a7ced9fc34cf1a11c206bd8e098df676134dabd606f4dc35f49da29f3ca19ec696a94d78ca8777fe31bbfce8e8859f2d77772c839179606efad24a3d99c60ece02de8209bb14d3b79e19f358580a63383809075840b95fd4f4915f0ca72833f1c64f9fbb01209b7c73806381a3ca44e0280fc9be1a213ef13ac5c1df5d251293be0e72979b5db69dc43fb614e83ed41ac5f47c6f2fd5bde64fe6f54df25c4f29a982eec504ece6d1e4f30544b33383b34d5e06f39cb7e4fc9a8d5a6e65e625191d8008746bdadf0e932d37f7b1c7a488e6c0c7d9eb532bac36d0fefaaf2393f4e9435569bcbcf436547b72db7c192fd9e344ab314c942ba2ad07a9e7a1aaacafe19548b8484769ba099f38d3dc8312e35dbea913b222aa9a68a05e2a343f329b70287eea5c57d375badca2b51b9e5bcbd32677a491eccc8505573f683279d82f3556a68ff44fa69bad76bc83c43869ea0a179e7ff8618ce3c624cbae78b8c569793666c44a0701205b575134aafbc754c2a3f1c98d4886b8ac819c144cfa269dd2a2bd61325555168537dd065babdefbf9c3c6f38448ae0058496f82b388d4b77fda54f8f97b8c7f5801a6c3e05f9e8595b7e0dc59707dca2afde7aa931c1c3ae02ef736e65e9d03d7dec6ebdf01d38b76e5f788d1c56f3371b5c96c69f8caa5f43f525581acb55423a3d07a42c834fdca5a83039d8d27683ef4f331fb1373b61ade1aebbc6e2abfb67a4d10d0920700048b708e47cffe7008bad902923fc4394f083121dc1a3fea8d10b55901059fa774972cf1fba76a9605ca8655043deffeb9ee4488197e9688f18c0a035c84cdcf3a73484c66e68dcbbdf3c6c3c8e6c911b8e313d24f13734eea84b2d53c6e2ed9b6250d6db9273cf5befef68dd649c25dfd101cbc500546b873a86a849aeb279e14fe254edb92c44fe9cf7576cc6979e1d97bcd820857004d194ba1c88c17c10cc1863394b1584f8010b80e4deb135064d43472e2fdf5ecf14a8e7e8b74d8fc444aa9ec1258254fd8c998be2311f1949199e97c93e58762337328c9b1ab3d128f9970af812a3e92053b19f0c2d692f1dd7fb82087f0845f0b5c4338a6647fc6c01420d2b6a3a06bc44c11e9b2f6f5ac24810d00dc6927de929e40b18aca36c7aafa17e21d7508c776bb8c0b647d95fa89eaca01e9adefddbe1178a6036e3417d2436420911d4421438f9a73abae0833ae64822b9193cfa0966af6c6a347dbc927d062f7c6f5f9addbee48afe7146f0a9e01340f69c48c9cf7d260b4112b3214968374b4ada81c8a4c0fb2119cfe721b5df5bb8d199e812e71c5a55339af355484f878fbc5e4943bc671e5fa1a8152803a43274a7e9cb379abd861ecb949b2681308c5fe002a83ad9972e6a3ca859a76cfe6070b1f68ad3cd510a79e19cef0ed8d555fdc01dc9488bb7ce3aa7d3980f5916aee68a9fdb6bdea07e1dcd12275178694609579f76d4e890943edccc381b9a7ef0c57b9") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a41000000000900030073797a300000000058000000060a010400000000000000000500400008000b4000000000300004802c0002800b00010074756e6e656c00001c000280080001400000000008000340000000f5080002400000000c0900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x8080}, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0xdf8, &(0x7f0000ff9000/0x1000)=nil, 0x2) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000160a01080000000000000000070000031400038008000240fffffff508000240000000060800074000000002080007400000000148000000030a010400000000000000000100ffff0900030073797a31000000001c00048008000240000000000800014000000005080002400e9371f70900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900030073797a3100000000140000001100010000000300000000000100000a"], 0xd4}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="00003e0003040600000000000000000000004d61463679e1db7053f6a42472147dec2c7160eaf84db86f8fda85920baa3c283423aeae62e770436bb90de402db175352f5906c45971d50586c67a05b0e76e8243994c42bcd4534d1d8ad216e170000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002b000300000005002c0000000000"], 0x44}, 0x1, 0xffffffea}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000480)="bedcab433eb508373ad5117361923fa95043f959e30b15192f0184d4e134e43beca3a2b0edb3167f362e260a112e23a2c158b6b94f1a30ce85c8fccd2c3fa47cd819b66d20cb4255d03d08f4002b4cec658c691b2079460d670b4b4ad857e2254b24ba3688b02c375f509504a5d9a837aaceefc3020c0f652325814e05703c2142dc6b3db6ad398bcd0c56e6b12cfd25a5851d6b8348d1c70922e2e458dce1a1071eac3794fa8db6189e821a024d37cea2152ec7e572daebbb0742926fe45f981887cf62a5c0c60450dc1eafde64196edb61360fba475b19", 0xd8, r2}, 0x68) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) sendmmsg$unix(r1, &(0x7f0000002500)=[{{&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000780)="71c7af5e2f55ded56e2a591b8c4e91890f98f72a8bc7d3186b0f5665585ec3087d5ef075e67ce2933b2933194454d199ce79ab245160ea2b2564d5f8648a076a8de6d12851aad7ec21e57601c66c6511e9a063c9eef408d1ee2d64097053e23415c9a015be721b34e237ed0f5b20c788177c2ff1e2bfbe5c", 0x78}, {&(0x7f0000000800)="74bb76e8fefa2f730797229a19cdb5f1b84dec4423e22aef37edae9900d73bea14c8e36bb02e7fe50bcae7fe5493a8cb9247522d27e8830fde552ce3b905dccef804c9f04b03be3949e8261c8d81db5d739e999e12132753a9da0c64edb8e057a98d501c0bd76e", 0x67}, {&(0x7f0000001fc0)="199aaee3bb23467568430ac8e08be4388337e4a148067dc110935f791a20230d691193193420bd0a4e5d8833c41cac7abe03e9316ab1b635c678a7038a9df6d260784d01f3f8664618e7762b0bb1cac40c0a46297ef4807b8a8a4b7aa9eafe1bf6855d40a3500269c47400b845556003d63ce3965e0daa24751bc8f959e3cf82fbd80bacfa81b6fe00bf27cc321af981251377d1591f1149f0e5f2565cb100c98fe02c73930210c7c61823c103a27adf30c16b9c501051ce742e55e5722e09b6796215ea466c181812f6668cb392a117cfb81748c6", 0xd5}, {&(0x7f00000020c0)="0872a237937d929b68b1404d7fa857ace95bc4991cee6f70ce4e786427dac783aa2f049cd5c1889c02e7d03c0807775e5a526c3fec4e486dba4d7039317d41a22f56ba4c01a2689b85195858090bfff375b4717ecdeba5acc01219c62242fd11480e0b722ccc1ee2211bbd4b7317641075a527dbe788eac7413e4ba9cdd5bd57cadf8ed4862dff30c94b372dd9c40b05aa74d7f3236acd2bfd56b211e790218d733ce6c767a485b6e1acab0ef0799af8b5fe2a61f0846e96561444", 0xbb}, {&(0x7f0000002180)="d914c2093c86bda8007663b94ea0057363651a89b46c01810261b4bb0691498c669bce31a509932cf324b71ce3501351d6be348517f6493b1dfdbe4a50424e4fdd6cfa470c2f2dc8501332039b4e35d6b76182918a1f67845f5159c46fb3b4", 0x5f}, {&(0x7f0000002200)="95e756f30d2385920ae71c2d55df28b4c7ce112f8c0dae363502be0c261ccf5bc90b81ec25f719306b0fe01804c4c494d0573f3d5ce0f8947f3f1e35260110c8e4c0b730b816d4ccc94e93f42395e097af5a2233c5d6a72a460ed39ea31da5b42d807d95dc6d5d0362f02107cc134a259bd4a86f5f6a668367aeed7f3356861c990aedf2144678373c9170e632a49a70eafb70aae4141e43bacadd15bfa6af60705d02b5fee657cf0ea315381269a6f1fb38344738876c0d80a9e2cd9485eeeef065045d56ff9df9e712fba9e1", 0xcd}, {&(0x7f00000003c0)}], 0x7, &(0x7f00000024c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x48844}}], 0x1, 0x8000) 496.1µs ago: executing program 3 (id=3607): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff00c}, {0x6, 0x0, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x11000000) 0s ago: executing program 5 (id=3608): set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f0000000080)}, 0x7, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000120a0003000000000000000007000006080003400000000a60000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000308000640ffffff00080003400000000808000f"], 0x210}}, 0x0) pipe(&(0x7f0000000300)) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x2) signalfd4(r1, &(0x7f0000000040)={[0x5]}, 0x8, 0x40800) (async) signalfd4(r1, &(0x7f0000000040)={[0x5]}, 0x8, 0x40800) r2 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r2) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000840)={0xa, 0x4e20, 0x80000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = io_uring_setup(0x471b, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ptrace(0x10, r7) ptrace$getregs(0xc, r7, 0x800005, &(0x7f0000000100)=""/62) accept4$nfc_llcp(r5, &(0x7f0000000400), &(0x7f0000000240)=0x60, 0x80800) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x3, &(0x7f0000000540)=ANY=[@ANYRESHEX=r4], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x41000}, 0x94) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000200)={r8, 0x38, "4de1d2744cf7d9c0500f26ce7c7ba190a43990ddbdddefc6a10e2aefa495ed74f50f40e08bb850c1da320f047f5d69620bd63fc4edf5b8a6"}, &(0x7f0000000040)=0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @broadcast, @loopback}, &(0x7f0000000480)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @broadcast, @loopback}, &(0x7f0000000480)=0xc) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x210cb}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x18}, @IFLA_IPTUN_LINK={0x0, 0x1, r9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x6}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0xfe}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) kernel console output (not intermixed with test programs): 1625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.724688][T12288] EXT4-fs (loop2): Invalid log block size: 18 [ 178.739218][T12292] x_tables: duplicate underflow at hook 1 [ 178.811169][ T1625] team0 (unregistering): Port device team_slave_1 removed [ 178.822689][ T1625] team0 (unregistering): Port device team_slave_0 removed [ 178.859656][T12198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.884067][T12198] team0: Port device team_slave_0 added [ 178.892448][T12198] team0: Port device team_slave_1 added [ 178.910553][T12198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.917688][T12198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.943621][T12198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.955075][T12198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.962051][T12198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.988106][T12198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.030929][T12310] loop2: detected capacity change from 0 to 1024 [ 179.052739][T12198] hsr_slave_0: entered promiscuous mode [ 179.058873][T12310] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.065898][T12198] hsr_slave_1: entered promiscuous mode [ 179.076149][T12198] debugfs: 'hsr0' already exists in 'hsr' [ 179.082018][T12198] Cannot create hsr debugfs directory [ 179.088408][T12310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.199392][T12014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.351256][T12348] loop2: detected capacity change from 0 to 2048 [ 179.396089][ T3310] Alternate GPT is invalid, using primary GPT. [ 179.402510][ T3310] loop2: p2 p3 p7 [ 179.426551][T12198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.440425][T12348] Alternate GPT is invalid, using primary GPT. [ 179.446966][T12348] loop2: p2 p3 p7 [ 179.453344][T12198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.466581][T12198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.491126][T12198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.568365][T12370] loop3: detected capacity change from 0 to 512 [ 179.584205][T12370] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.606148][T12198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.636213][T12198] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.645774][T12370] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 179.648332][ T1625] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.660830][ T1625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.664104][T12370] EXT4-fs (loop3): orphan cleanup on readonly fs [ 179.677280][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.684439][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.692612][T12370] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (4398046510080 > 6144). [ 179.706299][T12370] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 179.723085][T12370] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 179.733131][T12370] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.3078: corrupted inode contents [ 179.747535][T12370] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.3078: mark_inode_dirty error [ 179.760301][T12370] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.3078: corrupted inode contents [ 179.772566][T12370] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3078: mark_inode_dirty error [ 179.785469][T12370] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.3078: corrupted inode contents [ 179.797839][T12370] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 179.806909][T12370] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.3078: corrupted inode contents [ 179.820126][T12370] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.3078: mark_inode_dirty error [ 179.832040][T12370] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 179.841505][T12370] EXT4-fs (loop3): 1 truncate cleaned up [ 179.848742][T12370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.864122][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3078'. [ 179.895495][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.909935][T12198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.950747][T12396] loop3: detected capacity change from 0 to 512 [ 179.965486][T12396] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.3079: corrupted in-inode xattr: invalid ea_ino [ 179.983662][T12396] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3079: couldn't read orphan inode 15 (err -117) [ 180.006133][T12396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.059811][T12198] veth0_vlan: entered promiscuous mode [ 180.077550][T12198] veth1_vlan: entered promiscuous mode [ 180.098099][T12198] veth0_macvtap: entered promiscuous mode [ 180.112508][T12198] veth1_macvtap: entered promiscuous mode [ 180.140620][T12198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.160352][T12198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.181955][ T1625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.206038][ T1625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.233155][ T1625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.246856][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.265832][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.302818][T12429] tipc: Enabling of bearer rejected, failed to enable media [ 180.339218][T12434] loop0: detected capacity change from 0 to 512 [ 180.356945][T12434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.370525][T12434] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.383289][ T29] audit: type=1400 audit(1768627600.910:1949): avc: denied { unlink } for pid=12433 comm="syz.0.3082" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.408560][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 180.416533][ T3553] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 180.435153][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.459685][T12438] loop2: detected capacity change from 0 to 1024 [ 180.479047][T12440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.491866][T12440] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.518184][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.528325][T12438] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.552074][T12446] x_tables: duplicate underflow at hook 2 [ 180.560123][T12442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.560400][T12446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=12446 comm=syz.0.3084 [ 180.614667][T12438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.641703][T12450] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.653479][T12453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.679420][T12450] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 9: comm syz.0.3084: lblock 0 mapped to illegal pblock 9 (length 1) [ 180.696194][T10057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.704950][T12453] ext4 filesystem being mounted at /551/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.721215][T12450] EXT4-fs (loop0): mount failed [ 180.814067][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.880294][T12468] EXT4-fs: Ignoring removed i_version option [ 180.921207][T12468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.928991][T12014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.944990][T12468] ext4 filesystem being mounted at /552/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.977855][T12475] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 181.015035][ C0] I/O error, dev loop7, sector 10240 op 0x0:(READ) flags 0x80700 phys_seg 24 prio class 2 [ 181.072427][T12481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3096'. [ 181.086979][T12479] netlink: 'syz.3.3091': attribute type 3 has an invalid length. [ 181.113820][T12485] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3098: corrupted in-inode xattr: invalid ea_ino [ 181.133716][T12485] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3098: couldn't read orphan inode 15 (err -117) [ 181.149412][T12485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.156923][T12488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3096'. [ 181.191733][T12489] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3099: corrupted in-inode xattr: invalid ea_ino [ 181.212829][T12489] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3099: couldn't read orphan inode 15 (err -117) [ 181.225880][T12489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.241029][T12491] vlan2: entered promiscuous mode [ 181.246823][T12491] gretap0: entered promiscuous mode [ 181.288790][T12495] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.344315][T12495] EXT4-fs (loop1): 1 truncate cleaned up [ 181.347866][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.375048][T12495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.403241][T12014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.459172][T12504] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.471193][T10499] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.487540][T12504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.517369][T12508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.526040][T12508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.559588][T12510] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 181.695853][T12014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.715669][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.734697][ T3310] udevd[3310]: rename '/dev/disk/by-label/syzkaller.tmp-b7:2' '/dev/disk/by-label/syzkaller' failed: No such file or directory [ 181.798625][T12525] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.840271][T12525] EXT4-fs (loop3): orphan cleanup on readonly fs [ 181.848112][T12527] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.3113: corrupted in-inode xattr: invalid ea_ino [ 181.855675][T12525] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.3111: Allocating blocks 41-42 which overlap fs metadata [ 181.876203][T12527] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3113: couldn't read orphan inode 15 (err -117) [ 181.895893][ T6866] kernel read not supported for file /48/cgroup (pid: 6866 comm: kworker/0:8) [ 181.908862][T12525] Quota error (device loop3): write_blk: dquota write failed [ 181.912330][T12527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.917871][T12525] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 181.955319][T12525] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.3111: Allocating blocks 41-42 which overlap fs metadata [ 181.985454][T12525] Quota error (device loop3): write_blk: dquota write failed [ 182.003367][T12525] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 182.023741][T12525] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3111: Failed to acquire dquot type 1 [ 182.052752][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.062282][T12525] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 182.099060][ T29] audit: type=1400 audit(1768627602.630:1950): avc: denied { setattr } for pid=12539 comm="syz.0.3117" name="PACKET" dev="sockfs" ino=36559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.110057][T12525] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.3111: corrupted inode contents [ 182.174871][T12525] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.3111: mark_inode_dirty error [ 182.204732][T12525] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.3111: corrupted inode contents [ 182.230232][T12525] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.3111: mark_inode_dirty error [ 182.243168][T12525] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.3111: corrupted inode contents [ 182.256140][T12525] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 182.265307][T12525] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.3111: corrupted inode contents [ 182.277484][T12525] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.3111: mark_inode_dirty error [ 182.289918][T12525] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 182.299196][T12525] EXT4-fs (loop3): 1 truncate cleaned up [ 182.305416][T12525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.350810][T12547] xt_TCPMSS: Only works on TCP SYN packets [ 182.389847][T12549] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.411519][T12550] 9pnet_fd: p9_fd_create_unix (12550): problem connecting socket: ./file0: -30 [ 182.448865][T12538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.460758][T12549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.490770][T12538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.517316][T12538] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.581839][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.619231][T12566] syzkaller1: entered promiscuous mode [ 182.624816][T12566] syzkaller1: entered allmulticast mode [ 182.655445][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.709076][T12014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.721461][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3127'. [ 182.731558][T12575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3127'. [ 182.740633][T12575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3127'. [ 182.750386][T12575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3127'. [ 182.762054][ T29] audit: type=1400 audit(1768627603.290:1951): avc: denied { validate_trans } for pid=12576 comm="syz.3.3129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 182.870176][T12583] FAULT_INJECTION: forcing a failure. [ 182.870176][T12583] name failslab, interval 1, probability 0, space 0, times 0 [ 182.883084][T12583] CPU: 0 UID: 0 PID: 12583 Comm: syz.0.3130 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.883117][T12583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.883133][T12583] Call Trace: [ 182.883141][T12583] [ 182.883149][T12583] __dump_stack+0x1d/0x30 [ 182.883251][T12583] dump_stack_lvl+0x95/0xd0 [ 182.883278][T12583] dump_stack+0x15/0x1b [ 182.883379][T12583] should_fail_ex+0x263/0x280 [ 182.883408][T12583] should_failslab+0x8c/0xb0 [ 182.883436][T12583] kmem_cache_alloc_noprof+0x68/0x490 [ 182.883536][T12583] ? security_file_alloc+0x32/0xf0 [ 182.883569][T12583] security_file_alloc+0x32/0xf0 [ 182.883597][T12583] init_file+0x5c/0x1c0 [ 182.883679][T12583] alloc_empty_file+0x8b/0x200 [ 182.883703][T12583] path_openat+0x62/0x23c0 [ 182.883741][T12583] ? _parse_integer_limit+0x170/0x190 [ 182.883762][T12583] ? _parse_integer+0x27/0x40 [ 182.883805][T12583] ? kstrtoull+0x111/0x140 [ 182.883839][T12583] ? kstrtouint+0x76/0xc0 [ 182.883866][T12583] do_filp_open+0x15d/0x280 [ 182.883915][T12583] do_sys_openat2+0xa6/0x150 [ 182.883986][T12583] __x64_sys_openat+0xf2/0x120 [ 182.884023][T12583] x64_sys_call+0x2b07/0x3000 [ 182.884086][T12583] do_syscall_64+0xc0/0x2a0 [ 182.884112][T12583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.884137][T12583] RIP: 0033:0x7f38eef4acb9 [ 182.884162][T12583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.884225][T12583] RSP: 002b:00007f38ed9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.884323][T12583] RAX: ffffffffffffffda RBX: 00007f38ef1c5fa0 RCX: 00007f38eef4acb9 [ 182.884341][T12583] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 182.884367][T12583] RBP: 00007f38ed9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.884380][T12583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.884391][T12583] R13: 00007f38ef1c6038 R14: 00007f38ef1c5fa0 R15: 00007ffd5a5a9b08 [ 182.884410][T12583] [ 183.088776][T12590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12590 comm=syz.2.3134 [ 183.102361][T12590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12590 comm=syz.2.3134 [ 183.115855][T12566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.127132][T12566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.135849][T12590] netlink: 'syz.2.3134': attribute type 1 has an invalid length. [ 183.149599][T12592] set_capacity_and_notify: 16 callbacks suppressed [ 183.149619][T12592] loop3: detected capacity change from 0 to 764 [ 183.175996][T12592] rock: directory entry would overflow storage [ 183.182217][T12592] rock: sig=0x5245, size=8, remaining=5 [ 183.300364][ T29] audit: type=1400 audit(1768627603.830:1952): avc: denied { read } for pid=12600 comm="syz.0.3139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.473756][T12613] netlink: 'syz.0.3143': attribute type 10 has an invalid length. [ 183.486270][T12613] team0: Failed to send options change via netlink (err -105) [ 183.493970][T12613] team0: Port device dummy0 added [ 183.503193][T12613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64784 sclass=netlink_route_socket pid=12613 comm=syz.0.3143 [ 183.526881][T12615] loop2: detected capacity change from 0 to 2048 [ 183.617392][T12615] loop2: p3 p4 < > [ 183.621660][T12615] loop2: p3 start 11362048 is beyond EOD, truncated [ 183.715075][ T29] audit: type=1326 audit(1768627604.250:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.2.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 183.770727][ T29] audit: type=1326 audit(1768627604.250:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.2.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 183.794424][ T29] audit: type=1326 audit(1768627604.270:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.2.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 183.818012][ T29] audit: type=1326 audit(1768627604.270:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.2.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 183.841619][ T29] audit: type=1326 audit(1768627604.270:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.2.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 183.865141][ T29] audit: type=1326 audit(1768627604.270:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.2.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 183.888807][ T29] audit: type=1326 audit(1768627604.270:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.2.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 183.912626][ T29] audit: type=1326 audit(1768627604.270:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.2.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 183.936309][ T29] audit: type=1326 audit(1768627604.270:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.2.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 184.061025][T12638] loop2: detected capacity change from 0 to 256 [ 184.078936][T12643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.087558][T12067] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.095900][T12638] msdos: Unknown parameter 'nodotSnfs' [ 184.122018][T12639] FAULT_INJECTION: forcing a failure. [ 184.122018][T12639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.135257][T12639] CPU: 0 UID: 0 PID: 12639 Comm: syz.3.3149 Not tainted syzkaller #0 PREEMPT(voluntary) [ 184.135319][T12639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.135337][T12639] Call Trace: [ 184.135347][T12639] [ 184.135357][T12639] __dump_stack+0x1d/0x30 [ 184.135386][T12639] dump_stack_lvl+0x95/0xd0 [ 184.135415][T12639] dump_stack+0x15/0x1b [ 184.135459][T12639] should_fail_ex+0x263/0x280 [ 184.135484][T12639] should_fail+0xb/0x20 [ 184.135510][T12639] should_fail_usercopy+0x1a/0x20 [ 184.135543][T12639] _copy_to_user+0x20/0xa0 [ 184.135604][T12639] __se_sys_mincore+0x357/0x480 [ 184.135667][T12639] __x64_sys_mincore+0x43/0x50 [ 184.135693][T12639] x64_sys_call+0x2970/0x3000 [ 184.135726][T12639] do_syscall_64+0xc0/0x2a0 [ 184.135756][T12639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.135784][T12639] RIP: 0033:0x7f45d270acb9 [ 184.135872][T12639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.135896][T12639] RSP: 002b:00007f45d1146028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 184.135923][T12639] RAX: ffffffffffffffda RBX: 00007f45d2986090 RCX: 00007f45d270acb9 [ 184.135942][T12639] RDX: 0000200000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 184.135957][T12639] RBP: 00007f45d1146090 R08: 0000000000000000 R09: 0000000000000000 [ 184.135971][T12639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.135988][T12639] R13: 00007f45d2986128 R14: 00007f45d2986090 R15: 00007ffc90c51398 [ 184.136063][T12639] [ 184.148474][T12643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.317678][T12644] xt_hashlimit: size too large, truncated to 1048576 [ 184.407648][T12645] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3151'. [ 184.961125][T12652] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3158'. [ 185.065917][T12652] loop1: detected capacity change from 0 to 128 [ 185.083118][T12655] FAULT_INJECTION: forcing a failure. [ 185.083118][T12655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.097003][T12655] CPU: 1 UID: 0 PID: 12655 Comm: syz.3.3159 Not tainted syzkaller #0 PREEMPT(voluntary) [ 185.097031][T12655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.097047][T12655] Call Trace: [ 185.097053][T12655] [ 185.097061][T12655] __dump_stack+0x1d/0x30 [ 185.097128][T12655] dump_stack_lvl+0x95/0xd0 [ 185.097156][T12655] dump_stack+0x15/0x1b [ 185.097208][T12655] should_fail_ex+0x263/0x280 [ 185.097305][T12655] should_fail+0xb/0x20 [ 185.097347][T12655] should_fail_usercopy+0x1a/0x20 [ 185.097371][T12655] _copy_from_user+0x1c/0xb0 [ 185.097455][T12655] do_mcast_group_source+0x123/0x420 [ 185.097519][T12655] ? _parse_integer_limit+0x170/0x190 [ 185.097542][T12655] ? _raw_spin_lock_bh+0x56/0xb0 [ 185.097605][T12655] ? _raw_spin_unlock_bh+0x36/0x40 [ 185.097633][T12655] ? lock_sock_nested+0x132/0x160 [ 185.097653][T12655] ? __rcu_read_unlock+0x4e/0x70 [ 185.097682][T12655] do_ip_setsockopt+0x175a/0x2290 [ 185.097788][T12655] ip_setsockopt+0x58/0x110 [ 185.097886][T12655] udp_setsockopt+0x99/0xb0 [ 185.097925][T12655] sock_common_setsockopt+0x69/0x80 [ 185.097956][T12655] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 185.098011][T12655] __sys_setsockopt+0x184/0x200 [ 185.098050][T12655] __x64_sys_setsockopt+0x64/0x80 [ 185.098088][T12655] x64_sys_call+0x21d5/0x3000 [ 185.098115][T12655] do_syscall_64+0xc0/0x2a0 [ 185.098177][T12655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.098206][T12655] RIP: 0033:0x7f45d270acb9 [ 185.098226][T12655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.098250][T12655] RSP: 002b:00007f45d1167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.098270][T12655] RAX: ffffffffffffffda RBX: 00007f45d2985fa0 RCX: 00007f45d270acb9 [ 185.098337][T12655] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000003 [ 185.098353][T12655] RBP: 00007f45d1167090 R08: 0000000000000108 R09: 0000000000000000 [ 185.098370][T12655] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 185.098447][T12655] R13: 00007f45d2986038 R14: 00007f45d2985fa0 R15: 00007ffc90c51398 [ 185.098472][T12655] [ 185.465940][T12662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=12662 comm=syz.2.3162 [ 185.507431][T12667] gre1: entered promiscuous mode [ 185.512539][T12667] gre1: entered allmulticast mode [ 185.535161][T12652] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.559536][T12652] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.645025][T12673] loop3: detected capacity change from 0 to 512 [ 185.665487][T10499] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 1024 [ 185.689038][T12673] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.3164: corrupted in-inode xattr: invalid ea_ino [ 185.724254][T12673] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3164: couldn't read orphan inode 15 (err -117) [ 185.742512][T10499] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 8192 [ 185.772436][T12673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.803448][T10499] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 185.826341][T12673] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.3164: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 185.878148][T10499] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 1024 [ 185.918771][T10499] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 8192 [ 185.943087][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.968941][T10499] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 186.018309][T10499] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 1024 [ 186.040537][T10499] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 8192 [ 186.056562][T10499] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 186.070145][T10499] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 1024 [ 186.154538][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 186.154780][ T3553] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.198767][T12696] loop0: detected capacity change from 0 to 512 [ 186.207505][T12698] loop3: detected capacity change from 0 to 1024 [ 186.214305][T12698] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.222119][T12696] msdos: Unknown parameter 'ch' [ 186.253661][T10906] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.297910][T12698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.339142][T12710] loop2: detected capacity change from 0 to 512 [ 186.353546][T12067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.378898][T12710] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.457778][T12067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.465942][T12721] program syz.5.3182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.474058][T12710] EXT4-fs (loop2): 1 truncate cleaned up [ 186.494931][T12710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.549896][T12722] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.557191][T12722] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.588684][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.599929][T12014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.630934][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 186.679767][T12735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12735 comm=syz.5.3186 [ 186.699055][T12722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.710606][T12722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.751775][T12067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.777758][ T1682] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.805903][T12731] bond2: Removing last ns target with arp_interval on [ 186.825518][ T1682] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.844961][ T1682] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.853982][ T1682] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.890958][T12067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.946534][T12749] loop2: detected capacity change from 0 to 7 [ 187.002988][T12759] netlink: 'syz.5.3189': attribute type 21 has an invalid length. [ 187.093988][T12067] bridge_slave_1: left allmulticast mode [ 187.094049][T12067] bridge_slave_1: left promiscuous mode [ 187.094150][T12067] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.095608][T12067] bridge_slave_0: left allmulticast mode [ 187.095627][T12067] bridge_slave_0: left promiscuous mode [ 187.095937][T12067] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.142662][T12764] loop2: detected capacity change from 0 to 2048 [ 187.179765][ T3310] Alternate GPT is invalid, using primary GPT. [ 187.179995][ T3310] loop2: p2 p3 p7 [ 187.203667][T12764] Alternate GPT is invalid, using primary GPT. [ 187.203820][T12764] loop2: p2 p3 p7 [ 187.228269][T12067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.229226][T12067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.229938][T12067] bond0 (unregistering): Released all slaves [ 187.236318][T12772] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3194: invalid indirect mapped block 256 (level 2) [ 187.236509][T12772] EXT4-fs (loop5): 2 truncates cleaned up [ 187.237034][T12772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.240419][T12772] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3194: bg 0: block 5: invalid block bitmap [ 187.240741][T12772] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 187.240764][T12772] EXT4-fs (loop5): This should not happen!! Data will be lost [ 187.240764][T12772] [ 187.240819][T12772] EXT4-fs (loop5): Total free blocks count 0 [ 187.240882][T12772] EXT4-fs (loop5): Free/Dirty block details [ 187.240897][T12772] EXT4-fs (loop5): free_blocks=0 [ 187.240912][T12772] EXT4-fs (loop5): dirty_blocks=66 [ 187.240927][T12772] EXT4-fs (loop5): Block reservation details [ 187.240940][T12772] EXT4-fs (loop5): i_reserved_data_blocks=66 [ 187.263909][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 187.266213][ T7320] udevd[7320]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 187.266469][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 187.286890][T12067] hsr_slave_0: left promiscuous mode [ 187.287381][T12067] hsr_slave_1: left promiscuous mode [ 187.287682][T12067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.288120][T12067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.309548][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 187.309734][ T7320] udevd[7320]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 187.330986][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 187.610178][T12067] team0 (unregistering): Port device team_slave_1 removed [ 187.636085][T12067] team0 (unregistering): Port device team_slave_0 removed [ 187.688494][T12067] team0 (unregistering): Port device dummy0 removed [ 187.764398][T12723] chnl_net:caif_netlink_parms(): no params data found [ 187.792717][T12803] lo speed is unknown, defaulting to 1000 [ 187.798875][T12803] lo speed is unknown, defaulting to 1000 [ 187.805082][T12803] lo speed is unknown, defaulting to 1000 [ 187.815367][T12803] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 187.827442][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 187.901485][T12803] lo speed is unknown, defaulting to 1000 [ 187.907934][T12723] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.915982][T12723] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.936938][T12723] bridge_slave_0: entered allmulticast mode [ 187.954225][T12723] bridge_slave_0: entered promiscuous mode [ 187.983645][T12067] IPVS: stop unused estimator thread 0... [ 187.989769][T12723] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.996960][T12723] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.016546][T12723] bridge_slave_1: entered allmulticast mode [ 188.043322][T12825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.053098][T12723] bridge_slave_1: entered promiscuous mode [ 188.066807][T12825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.079563][T12803] lo speed is unknown, defaulting to 1000 [ 188.098987][T12723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.108572][T12825] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.119889][T12803] lo speed is unknown, defaulting to 1000 [ 188.127936][T12723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.139207][T12803] lo speed is unknown, defaulting to 1000 [ 188.147587][ T1682] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 188.192689][T12803] lo speed is unknown, defaulting to 1000 [ 188.214230][T12723] team0: Port device team_slave_0 added [ 188.223191][T12803] lo speed is unknown, defaulting to 1000 [ 188.235766][T12198] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.242667][T12723] team0: Port device team_slave_1 added [ 188.274932][T12803] lo speed is unknown, defaulting to 1000 [ 188.290876][T12832] --map-set only usable from mangle table [ 188.316248][T12723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.323274][T12723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.349373][T12723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.376517][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 188.376535][ T29] audit: type=1326 audit(1768627608.910:2025): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.2.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 188.406579][ T29] audit: type=1326 audit(1768627608.910:2026): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.2.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 188.430505][ T29] audit: type=1326 audit(1768627608.910:2027): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.2.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 188.454511][ T29] audit: type=1326 audit(1768627608.910:2028): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.2.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 188.478450][ T29] audit: type=1326 audit(1768627608.910:2029): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.2.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 188.502468][ T29] audit: type=1326 audit(1768627608.910:2030): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.2.3207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 188.530400][T12723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.537611][T12723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.563590][T12723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.593276][T12723] hsr_slave_0: entered promiscuous mode [ 188.599796][T12723] hsr_slave_1: entered promiscuous mode [ 188.606026][T12723] debugfs: 'hsr0' already exists in 'hsr' [ 188.611805][T12723] Cannot create hsr debugfs directory [ 188.661410][T12852] set_capacity_and_notify: 2 callbacks suppressed [ 188.661429][T12852] loop2: detected capacity change from 0 to 512 [ 188.687422][T12852] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.699700][T12852] EXT4-fs (loop2): orphan cleanup on readonly fs [ 188.719211][T12852] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.3210: Allocating blocks 41-42 which overlap fs metadata [ 188.751199][ T29] audit: type=1400 audit(1768627609.280:2031): avc: denied { remount } for pid=12848 comm="syz.0.3209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 188.781251][T12723] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 188.783728][T12852] Quota error (device loop2): write_blk: dquota write failed [ 188.795467][T12852] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 188.807391][T12723] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 188.816688][T12723] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 188.826488][T12723] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 188.884721][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3212'. [ 188.900905][T12852] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.3210: Allocating blocks 41-42 which overlap fs metadata [ 188.922446][T12866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.957876][T12852] Quota error (device loop2): write_blk: dquota write failed [ 188.971566][T12852] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3210: Failed to acquire dquot type 1 [ 188.992436][T12852] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 189.008496][T12852] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3210: corrupted inode contents [ 189.013009][T12723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.034920][T12852] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.3210: mark_inode_dirty error [ 189.073264][T12852] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3210: corrupted inode contents [ 189.095364][T12852] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.3210: mark_inode_dirty error [ 189.116572][T12723] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.137527][T12852] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3210: corrupted inode contents [ 189.148192][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.156635][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.171714][T12879] loop3: detected capacity change from 0 to 512 [ 189.181404][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.188585][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.197669][T12879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.221787][T12723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.232436][T12723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.256106][T12852] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 189.278525][T12879] ext4 filesystem being mounted at /574/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.286105][T12852] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3210: corrupted inode contents [ 189.301733][T12852] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.3210: mark_inode_dirty error [ 189.306743][T12884] loop5: detected capacity change from 0 to 1024 [ 189.315229][T12852] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 189.355015][T12852] EXT4-fs (loop2): 1 truncate cleaned up [ 189.367244][T12852] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.3210: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 189.415160][T12884] EXT4-fs: Ignoring removed nobh option [ 189.420862][T12884] EXT4-fs: inline encryption not supported [ 189.472360][T12723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.613954][T12915] loop3: detected capacity change from 0 to 512 [ 189.617141][T12918] FAULT_INJECTION: forcing a failure. [ 189.617141][T12918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.633449][T12918] CPU: 0 UID: 0 PID: 12918 Comm: syz.5.3220 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.633482][T12918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.633498][T12918] Call Trace: [ 189.633505][T12918] [ 189.633556][T12918] __dump_stack+0x1d/0x30 [ 189.633583][T12918] dump_stack_lvl+0x95/0xd0 [ 189.633604][T12918] dump_stack+0x15/0x1b [ 189.633629][T12918] should_fail_ex+0x263/0x280 [ 189.633662][T12918] should_fail+0xb/0x20 [ 189.633682][T12918] should_fail_usercopy+0x1a/0x20 [ 189.633708][T12918] _copy_from_user+0x1c/0xb0 [ 189.633791][T12918] ___sys_sendmsg+0xc1/0x1e0 [ 189.633877][T12918] __x64_sys_sendmsg+0xd4/0x160 [ 189.633910][T12918] x64_sys_call+0x17ba/0x3000 [ 189.634019][T12918] do_syscall_64+0xc0/0x2a0 [ 189.634048][T12918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.634104][T12918] RIP: 0033:0x7fcb3b69acb9 [ 189.634123][T12918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.634145][T12918] RSP: 002b:00007fcb3a0f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.634168][T12918] RAX: ffffffffffffffda RBX: 00007fcb3b915fa0 RCX: 00007fcb3b69acb9 [ 189.634185][T12918] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 189.634200][T12918] RBP: 00007fcb3a0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.634243][T12918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.634258][T12918] R13: 00007fcb3b916038 R14: 00007fcb3b915fa0 R15: 00007ffc38ae7998 [ 189.634277][T12918] [ 189.876700][T12915] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.892235][T12723] veth0_vlan: entered promiscuous mode [ 189.902103][T12723] veth1_vlan: entered promiscuous mode [ 189.919032][T12723] veth0_macvtap: entered promiscuous mode [ 189.934304][T12723] veth1_macvtap: entered promiscuous mode [ 189.952124][T12723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.982882][T12941] sctp: [Deprecated]: syz.3.3226 (pid 12941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.982882][T12941] Use struct sctp_sack_info instead [ 189.995918][T12723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.013190][T12933] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 190.017654][T12944] FAULT_INJECTION: forcing a failure. [ 190.017654][T12944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.032252][T12944] CPU: 1 UID: 0 PID: 12944 Comm: syz.5.3225 Not tainted syzkaller #0 PREEMPT(voluntary) [ 190.032287][T12944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.032300][T12944] Call Trace: [ 190.032307][T12944] [ 190.032315][T12944] __dump_stack+0x1d/0x30 [ 190.032416][T12944] dump_stack_lvl+0x95/0xd0 [ 190.032483][T12944] dump_stack+0x15/0x1b [ 190.032502][T12944] should_fail_ex+0x263/0x280 [ 190.032531][T12944] should_fail+0xb/0x20 [ 190.032555][T12944] should_fail_usercopy+0x1a/0x20 [ 190.032582][T12944] _copy_to_user+0x20/0xa0 [ 190.032631][T12944] simple_read_from_buffer+0xb5/0x130 [ 190.032673][T12944] proc_fail_nth_read+0x10e/0x150 [ 190.032743][T12944] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.032779][T12944] vfs_read+0x1ab/0x7f0 [ 190.032834][T12944] ? __schedule+0x82d/0xc90 [ 190.032879][T12944] ? __rcu_read_unlock+0x4e/0x70 [ 190.032951][T12944] ? __fget_files+0x184/0x1c0 [ 190.032975][T12944] ? mutex_lock+0x57/0x90 [ 190.033053][T12944] ksys_read+0xdc/0x1a0 [ 190.033078][T12944] __x64_sys_read+0x40/0x50 [ 190.033228][T12944] x64_sys_call+0x2889/0x3000 [ 190.033252][T12944] do_syscall_64+0xc0/0x2a0 [ 190.033273][T12944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.033295][T12944] RIP: 0033:0x7fcb3b65b58e [ 190.033314][T12944] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 190.033477][T12944] RSP: 002b:00007fcb3a0d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.033502][T12944] RAX: ffffffffffffffda RBX: 00007fcb3a0d66c0 RCX: 00007fcb3b65b58e [ 190.033519][T12944] RDX: 000000000000000f RSI: 00007fcb3a0d60a0 RDI: 0000000000000004 [ 190.033535][T12944] RBP: 00007fcb3a0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.033550][T12944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.033565][T12944] R13: 00007fcb3b916128 R14: 00007fcb3b916090 R15: 00007ffc38ae7998 [ 190.033655][T12944] [ 190.243368][T12948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12948 comm=syz.0.3228 [ 190.310920][ T53] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.327881][ T53] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.350248][T12954] loop6: detected capacity change from 0 to 512 [ 190.360148][T12954] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.3180: corrupted in-inode xattr: invalid ea_ino [ 190.378954][ T53] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.388065][ T53] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.424811][T12954] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3180: couldn't read orphan inode 15 (err -117) [ 190.473689][T12954] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.3180: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 190.507066][T12963] FAULT_INJECTION: forcing a failure. [ 190.507066][T12963] name failslab, interval 1, probability 0, space 0, times 0 [ 190.519864][T12963] CPU: 0 UID: 0 PID: 12963 Comm: syz.3.3233 Not tainted syzkaller #0 PREEMPT(voluntary) [ 190.519897][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.519913][T12963] Call Trace: [ 190.519922][T12963] [ 190.519943][T12963] __dump_stack+0x1d/0x30 [ 190.519973][T12963] dump_stack_lvl+0x95/0xd0 [ 190.519996][T12963] dump_stack+0x15/0x1b [ 190.520038][T12963] should_fail_ex+0x263/0x280 [ 190.520069][T12963] should_failslab+0x8c/0xb0 [ 190.520135][T12963] kmem_cache_alloc_noprof+0x68/0x490 [ 190.520157][T12963] ? getname_flags+0x7f/0x3b0 [ 190.520214][T12963] getname_flags+0x7f/0x3b0 [ 190.520244][T12963] __x64_sys_mknodat+0x4f/0x70 [ 190.520284][T12963] x64_sys_call+0x2b33/0x3000 [ 190.520308][T12963] do_syscall_64+0xc0/0x2a0 [ 190.520331][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.520430][T12963] RIP: 0033:0x7f45d270acb9 [ 190.520449][T12963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.520470][T12963] RSP: 002b:00007f45d1167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 190.520490][T12963] RAX: ffffffffffffffda RBX: 00007f45d2985fa0 RCX: 00007f45d270acb9 [ 190.520537][T12963] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000003 [ 190.520553][T12963] RBP: 00007f45d1167090 R08: 0000000000000000 R09: 0000000000000000 [ 190.520569][T12963] R10: 0000000000000707 R11: 0000000000000246 R12: 0000000000000001 [ 190.520585][T12963] R13: 00007f45d2986038 R14: 00007f45d2985fa0 R15: 00007ffc90c51398 [ 190.520663][T12963] [ 190.768494][T12973] netlink: 'syz.5.3235': attribute type 4 has an invalid length. [ 190.839560][T12981] netlink: 'syz.3.3239': attribute type 1 has an invalid length. [ 190.855206][T12981] 8021q: adding VLAN 0 to HW filter on device bond8 [ 190.880672][T12981] 8021q: adding VLAN 0 to HW filter on device bond8 [ 190.888408][T12981] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 190.900257][T12981] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 190.921099][T12986] gretap2: entered promiscuous mode [ 190.926441][T12984] loop6: detected capacity change from 0 to 512 [ 190.931611][T12986] bond8: (slave gretap2): making interface the new active one [ 190.940883][T12986] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 190.953524][T12989] loop5: detected capacity change from 0 to 2048 [ 190.963233][T12984] EXT4-fs: Ignoring removed oldalloc option [ 190.993343][T12984] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.3240: Parent and EA inode have the same ino 15 [ 191.008761][T12984] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.3240: Parent and EA inode have the same ino 15 [ 191.021625][T12984] EXT4-fs (loop6): 1 orphan inode deleted [ 191.029603][ T3308] Alternate GPT is invalid, using primary GPT. [ 191.035975][ T3308] loop5: p2 p3 p7 [ 191.073625][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 191.085121][ T7320] udevd[7320]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 191.094777][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 191.184376][T13007] loop5: detected capacity change from 0 to 512 [ 191.197644][T13007] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.3246: corrupted in-inode xattr: invalid ea_ino [ 191.222838][T13007] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3246: couldn't read orphan inode 15 (err -117) [ 191.237063][T13007] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.3246: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 191.600462][T13027] loop2: detected capacity change from 0 to 1024 [ 191.614890][T13027] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.002346][T13060] loop6: detected capacity change from 0 to 1024 [ 192.010129][T13060] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.132481][T13064] lo speed is unknown, defaulting to 1000 [ 192.355207][T13079] tipc: Started in network mode [ 192.360149][T13079] tipc: Node identity , cluster identity 4711 [ 192.366434][T13079] tipc: Failed to obtain node identity [ 192.371957][T13079] tipc: Enabling of bearer rejected, failed to enable media [ 192.434818][T13086] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 192.434818][T13086] [ 192.445611][T13086] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 192.466604][T13086] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3270'. [ 192.497829][T13088] lo speed is unknown, defaulting to 1000 [ 192.539748][T13096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3274'. [ 192.548904][T13096] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3274'. [ 192.560454][T13096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3274'. [ 192.573987][T13083] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3267'. [ 192.586433][T13090] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3271'. [ 192.628095][T13090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3271'. [ 192.668725][T13108] IPv6: Can't replace route, no match found [ 192.688604][T13106] FAULT_INJECTION: forcing a failure. [ 192.688604][T13106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.701754][T13106] CPU: 0 UID: 0 PID: 13106 Comm: syz.0.3276 Not tainted syzkaller #0 PREEMPT(voluntary) [ 192.701833][T13106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.701850][T13106] Call Trace: [ 192.701858][T13106] [ 192.701868][T13106] __dump_stack+0x1d/0x30 [ 192.701911][T13106] dump_stack_lvl+0x95/0xd0 [ 192.701936][T13106] dump_stack+0x15/0x1b [ 192.702031][T13106] should_fail_ex+0x263/0x280 [ 192.702059][T13106] should_fail+0xb/0x20 [ 192.702082][T13106] should_fail_usercopy+0x1a/0x20 [ 192.702172][T13106] _copy_from_user+0x1c/0xb0 [ 192.702205][T13106] ___sys_sendmsg+0xc1/0x1e0 [ 192.702321][T13106] __x64_sys_sendmsg+0xd4/0x160 [ 192.702361][T13106] x64_sys_call+0x17ba/0x3000 [ 192.702463][T13106] do_syscall_64+0xc0/0x2a0 [ 192.702489][T13106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.702514][T13106] RIP: 0033:0x7f38eef4acb9 [ 192.702532][T13106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.702633][T13106] RSP: 002b:00007f38ed9a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.702657][T13106] RAX: ffffffffffffffda RBX: 00007f38ef1c5fa0 RCX: 00007f38eef4acb9 [ 192.702673][T13106] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 192.702688][T13106] RBP: 00007f38ed9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 192.702703][T13106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.702787][T13106] R13: 00007f38ef1c6038 R14: 00007f38ef1c5fa0 R15: 00007ffd5a5a9b08 [ 192.702810][T13106] [ 192.882930][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 192.889308][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 192.906235][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 192.912573][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 192.922475][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 192.928707][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 192.943910][T13118] netlink: 'syz.0.3281': attribute type 1 has an invalid length. [ 192.949215][T13116] usb usb7: usbfs: process 13116 (syz.6.3280) did not claim interface 0 before use [ 192.979977][T13120] FAULT_INJECTION: forcing a failure. [ 192.979977][T13120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.993293][T13120] CPU: 0 UID: 0 PID: 13120 Comm: syz.5.3282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 192.993323][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.993334][T13120] Call Trace: [ 192.993340][T13120] [ 192.993347][T13120] __dump_stack+0x1d/0x30 [ 192.993369][T13120] dump_stack_lvl+0x95/0xd0 [ 192.993387][T13120] dump_stack+0x15/0x1b [ 192.993465][T13120] should_fail_ex+0x263/0x280 [ 192.993560][T13120] should_fail+0xb/0x20 [ 192.993577][T13120] should_fail_usercopy+0x1a/0x20 [ 192.993599][T13120] _copy_to_user+0x20/0xa0 [ 192.993666][T13120] simple_read_from_buffer+0xb5/0x130 [ 192.993706][T13120] proc_fail_nth_read+0x10e/0x150 [ 192.993769][T13120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.993793][T13120] vfs_read+0x1ab/0x7f0 [ 192.993821][T13120] ? __rcu_read_unlock+0x4e/0x70 [ 192.993841][T13120] ? __fget_files+0x184/0x1c0 [ 192.993911][T13120] ? mutex_lock+0x57/0x90 [ 192.993986][T13120] ksys_read+0xdc/0x1a0 [ 192.994002][T13120] __x64_sys_read+0x40/0x50 [ 192.994018][T13120] x64_sys_call+0x2889/0x3000 [ 192.994039][T13120] do_syscall_64+0xc0/0x2a0 [ 192.994057][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.994113][T13120] RIP: 0033:0x7fcb3b65b58e [ 192.994134][T13120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 192.994150][T13120] RSP: 002b:00007fcb3a0f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.994167][T13120] RAX: ffffffffffffffda RBX: 00007fcb3a0f76c0 RCX: 00007fcb3b65b58e [ 192.994207][T13120] RDX: 000000000000000f RSI: 00007fcb3a0f70a0 RDI: 0000000000000004 [ 192.994218][T13120] RBP: 00007fcb3a0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 192.994229][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.994240][T13120] R13: 00007fcb3b916038 R14: 00007fcb3b915fa0 R15: 00007ffc38ae7998 [ 192.994300][T13120] [ 193.186642][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3281'. [ 193.196469][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.202737][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.213001][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.219220][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.225572][T13110] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 193.240905][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.247203][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.249866][T13118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.259963][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.269724][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.279426][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.286359][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.296142][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.302410][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.312106][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.319038][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.328787][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.335029][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.345467][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.351647][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.363293][T13118] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 193.387276][T13121] bond1 (unregistering): Released all slaves [ 193.400867][T13118] vhci_hcd vhci_hcd.2: invalid port number 96 [ 193.407307][T13118] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 193.419832][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.426271][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.439208][T13130] siw: device registration error -23 [ 193.447582][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.453855][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.464128][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 193.464154][ T29] audit: type=1326 audit(1768627613.970:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.2.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 193.493884][ T29] audit: type=1326 audit(1768627613.970:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.2.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 193.517421][ T29] audit: type=1326 audit(1768627613.970:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.2.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 193.528700][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.540990][ T29] audit: type=1326 audit(1768627613.970:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.2.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 193.548800][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.570682][ T29] audit: type=1326 audit(1768627613.970:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.2.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 193.603839][ T29] audit: type=1326 audit(1768627613.970:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.2.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 193.627426][ T29] audit: type=1326 audit(1768627613.970:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.2.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 193.650933][ T29] audit: type=1326 audit(1768627613.970:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.2.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 193.674513][ T29] audit: type=1326 audit(1768627613.980:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.2.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 193.698050][ T29] audit: type=1326 audit(1768627613.980:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.2.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f97ba51acb9 code=0x7ffc0000 [ 193.734408][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3287'. [ 193.762831][T13114] vhci_hcd vhci_hcd.4: invalid port number 249 [ 193.769079][T13114] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.822595][T13143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3288'. [ 193.896576][T13148] FAULT_INJECTION: forcing a failure. [ 193.896576][T13148] name failslab, interval 1, probability 0, space 0, times 0 [ 193.909312][T13148] CPU: 0 UID: 0 PID: 13148 Comm: syz.2.3292 Not tainted syzkaller #0 PREEMPT(voluntary) [ 193.909340][T13148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.909352][T13148] Call Trace: [ 193.909359][T13148] [ 193.909367][T13148] __dump_stack+0x1d/0x30 [ 193.909396][T13148] dump_stack_lvl+0x95/0xd0 [ 193.909560][T13148] dump_stack+0x15/0x1b [ 193.909589][T13148] should_fail_ex+0x263/0x280 [ 193.909611][T13148] should_failslab+0x8c/0xb0 [ 193.909695][T13148] __kmalloc_cache_noprof+0x64/0x4a0 [ 193.909716][T13148] ? alloc_tty_struct+0x4c/0x3c0 [ 193.909735][T13148] alloc_tty_struct+0x4c/0x3c0 [ 193.909793][T13148] tty_init_dev+0x39/0x320 [ 193.909809][T13148] tty_open+0x6c6/0xaf0 [ 193.909946][T13148] chrdev_open+0x2eb/0x3a0 [ 193.909965][T13148] ? __pfx_chrdev_open+0x10/0x10 [ 193.910001][T13148] do_dentry_open+0x54b/0xa60 [ 193.910085][T13148] vfs_open+0x37/0x1e0 [ 193.910107][T13148] path_openat+0x1de9/0x23c0 [ 193.910216][T13148] ? _parse_integer_limit+0x170/0x190 [ 193.910239][T13148] ? kstrtouint+0x76/0xc0 [ 193.910257][T13148] do_filp_open+0x15d/0x280 [ 193.910293][T13148] do_sys_openat2+0xa6/0x150 [ 193.910367][T13148] __x64_sys_openat+0xf2/0x120 [ 193.910393][T13148] x64_sys_call+0x2b07/0x3000 [ 193.910415][T13148] do_syscall_64+0xc0/0x2a0 [ 193.910451][T13148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.910471][T13148] RIP: 0033:0x7f97ba4db58e [ 193.910485][T13148] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.910502][T13148] RSP: 002b:00007f97b8f76b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.910519][T13148] RAX: ffffffffffffffda RBX: 00007f97b8f776c0 RCX: 00007f97ba4db58e [ 193.910587][T13148] RDX: 0000000000000002 RSI: 00007f97b8f76c00 RDI: ffffffffffffff9c [ 193.910598][T13148] RBP: 00007f97b8f77090 R08: 0000000000000000 R09: 0000000000000000 [ 193.910655][T13148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.910666][T13148] R13: 00007f97ba796038 R14: 00007f97ba795fa0 R15: 00007ffcd4817a38 [ 193.910683][T13148] [ 194.145459][T13151] netlink: 'syz.3.3294': attribute type 4 has an invalid length. [ 194.164882][T13153] set_capacity_and_notify: 2 callbacks suppressed [ 194.164899][T13153] loop2: detected capacity change from 0 to 1024 [ 194.182620][T13153] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.227267][T13157] loop6: detected capacity change from 0 to 512 [ 194.262357][T13161] FAULT_INJECTION: forcing a failure. [ 194.262357][T13161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.275714][T13161] CPU: 1 UID: 0 PID: 13161 Comm: syz.3.3297 Not tainted syzkaller #0 PREEMPT(voluntary) [ 194.275754][T13161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.275766][T13161] Call Trace: [ 194.275773][T13161] [ 194.275783][T13161] __dump_stack+0x1d/0x30 [ 194.275875][T13161] dump_stack_lvl+0x95/0xd0 [ 194.275966][T13161] dump_stack+0x15/0x1b [ 194.275992][T13161] should_fail_ex+0x263/0x280 [ 194.276024][T13161] should_fail+0xb/0x20 [ 194.276049][T13161] should_fail_usercopy+0x1a/0x20 [ 194.276130][T13161] _copy_from_user+0x1c/0xb0 [ 194.276161][T13161] get_timespec64+0x4c/0x100 [ 194.276207][T13161] __se_sys_ppoll+0x75/0x220 [ 194.276238][T13161] __x64_sys_ppoll+0x67/0x80 [ 194.276264][T13161] x64_sys_call+0x22fe/0x3000 [ 194.276343][T13161] do_syscall_64+0xc0/0x2a0 [ 194.276369][T13161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.276398][T13161] RIP: 0033:0x7f45d270acb9 [ 194.276415][T13161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.276467][T13161] RSP: 002b:00007f45d1167028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 194.276491][T13161] RAX: ffffffffffffffda RBX: 00007f45d2985fa0 RCX: 00007f45d270acb9 [ 194.276505][T13161] RDX: 0000200000000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.276517][T13161] RBP: 00007f45d1167090 R08: 0000000000000008 R09: 0000000000000000 [ 194.276607][T13161] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 194.276619][T13161] R13: 00007f45d2986038 R14: 00007f45d2985fa0 R15: 00007ffc90c51398 [ 194.276638][T13161] [ 194.280290][T13157] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.302656][T13163] loop5: detected capacity change from 0 to 512 [ 194.464785][T13163] EXT4-fs: Ignoring removed nobh option [ 194.483143][T13163] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.586789][T13173] loop5: detected capacity change from 0 to 1024 [ 194.657764][T13190] loop3: detected capacity change from 0 to 512 [ 194.658421][T13187] program syz.0.3305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.684927][T13190] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.706960][T13196] netlink: 'syz.6.3307': attribute type 4 has an invalid length. [ 194.729912][T13190] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3304: corrupted xattr block 33: invalid header [ 194.743613][T13190] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 194.785081][T13190] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3304: corrupted xattr block 33: invalid header [ 194.800242][T13190] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 194.809645][T13190] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3304: corrupted xattr block 33: invalid header [ 194.823690][T13190] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 194.857354][T13204] lo speed is unknown, defaulting to 1000 [ 194.866248][T13208] loop6: detected capacity change from 0 to 128 [ 194.886513][T13208] FAT-fs (loop6): bogus sectors per cluster 0 [ 194.892780][T13208] FAT-fs (loop6): Can't find a valid FAT filesystem [ 195.018402][T13223] loop2: detected capacity change from 0 to 512 [ 195.030367][T13231] loop3: detected capacity change from 0 to 1024 [ 195.050678][T13223] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.067795][T13223] EXT4-fs (loop2): orphan cleanup on readonly fs [ 195.075630][T13223] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm wÞ£ÿ: Allocating blocks 41-42 which overlap fs metadata [ 195.150287][T13244] lo speed is unknown, defaulting to 1000 [ 195.175700][T13223] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm wÞ£ÿ: Allocating blocks 41-42 which overlap fs metadata [ 195.222769][T13251] netlink: 'syz.6.3321': attribute type 4 has an invalid length. [ 195.242461][T13223] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm wÞ£ÿ: Failed to acquire dquot type 1 [ 195.287910][T13223] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 195.313287][T13223] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm wÞ£ÿ: corrupted inode contents [ 195.336541][T13223] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm wÞ£ÿ: mark_inode_dirty error [ 195.349467][T13223] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm wÞ£ÿ: corrupted inode contents [ 195.362890][T13263] syz_tun: entered allmulticast mode [ 195.373734][T13263] pimreg: entered allmulticast mode [ 195.379278][T13223] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm wÞ£ÿ: mark_inode_dirty error [ 195.399056][T13223] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm wÞ£ÿ: corrupted inode contents [ 195.410927][T13223] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 195.419957][T13223] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm wÞ£ÿ: corrupted inode contents [ 195.432209][T13223] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm wÞ£ÿ: mark_inode_dirty error [ 195.443932][T13223] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 195.453295][T13223] EXT4-fs (loop2): 1 truncate cleaned up [ 195.497677][T13260] syz_tun: left allmulticast mode [ 195.647874][T13277] loop5: detected capacity change from 0 to 1024 [ 195.683866][T13277] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.869058][T13288] loop2: detected capacity change from 0 to 256 [ 196.175850][T13310] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.188511][T13310] netlink: 'syz.5.3341': attribute type 5 has an invalid length. [ 196.539358][T13323] veth0: entered promiscuous mode [ 196.546810][T13323] veth0: left promiscuous mode [ 196.552161][T13323] netlink: 'syz.6.3344': attribute type 29 has an invalid length. [ 196.560071][T13323] netlink: 'syz.6.3344': attribute type 3 has an invalid length. [ 196.610144][T13316] lo speed is unknown, defaulting to 1000 [ 196.668678][T13330] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.740551][T13316] chnl_net:caif_netlink_parms(): no params data found [ 196.903323][T13316] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.910684][T13316] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.918657][T13316] bridge_slave_0: entered allmulticast mode [ 196.925408][T13316] bridge_slave_0: entered promiscuous mode [ 196.932547][T13316] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.939725][T13316] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.947044][T13316] bridge_slave_1: entered allmulticast mode [ 196.953825][T13316] bridge_slave_1: entered promiscuous mode [ 196.981253][T13316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.995290][T13316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.031849][T13316] team0: Port device team_slave_0 added [ 197.045391][T13316] team0: Port device team_slave_1 added [ 197.079169][T13316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.086247][T13316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.112300][T13316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.132728][T13316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.139784][T13316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.165887][T13316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.255052][T13353] hsr_slave_0: left promiscuous mode [ 197.260927][T13353] hsr_slave_1: left promiscuous mode [ 197.321779][T13316] hsr_slave_0: entered promiscuous mode [ 197.328173][T13316] hsr_slave_1: entered promiscuous mode [ 197.334616][T13316] debugfs: 'hsr0' already exists in 'hsr' [ 197.340403][T13316] Cannot create hsr debugfs directory [ 197.631443][T13386] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 197.638937][T13316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 197.673957][T13316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 197.683246][T13316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 197.693791][T13316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 197.774086][T13316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.791522][T13316] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.802683][ T1682] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.809828][ T1682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.829060][ T1682] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.836266][ T1682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.886709][T13389] __nla_validate_parse: 11 callbacks suppressed [ 197.886729][T13389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3364'. [ 197.902088][T13389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3364'. [ 197.925205][T13411] EXT4-fs (loop2): 1 orphan inode deleted [ 197.936681][T13411] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.955088][ T1682] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 197.988529][T13316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.190230][T13316] veth0_vlan: entered promiscuous mode [ 198.222714][T13316] veth1_vlan: entered promiscuous mode [ 198.242856][T13316] veth0_macvtap: entered promiscuous mode [ 198.251681][T13316] veth1_macvtap: entered promiscuous mode [ 198.263667][T13440] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.281028][T13316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.297129][T13316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.335530][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.344314][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.404878][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.426375][T13448] dummy0: entered promiscuous mode [ 198.431567][T13448] dummy0: entered allmulticast mode [ 198.445549][T13450] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.470082][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.480396][T13449] netlink: 'syz.3.3343': attribute type 4 has an invalid length. [ 198.560150][T13459] FAULT_INJECTION: forcing a failure. [ 198.560150][T13459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.573361][T13459] CPU: 0 UID: 0 PID: 13459 Comm: syz.3.3381 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.573391][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.573406][T13459] Call Trace: [ 198.573412][T13459] [ 198.573420][T13459] __dump_stack+0x1d/0x30 [ 198.573449][T13459] dump_stack_lvl+0x95/0xd0 [ 198.573594][T13459] dump_stack+0x15/0x1b [ 198.573617][T13459] should_fail_ex+0x263/0x280 [ 198.573653][T13459] should_fail+0xb/0x20 [ 198.573674][T13459] should_fail_usercopy+0x1a/0x20 [ 198.573697][T13459] _copy_from_user+0x1c/0xb0 [ 198.573736][T13459] memdup_user+0x5e/0xd0 [ 198.573759][T13459] strndup_user+0x68/0xb0 [ 198.573780][T13459] __se_sys_mount+0x4d/0x2e0 [ 198.573804][T13459] ? fput+0x8f/0xc0 [ 198.573878][T13459] ? ksys_write+0x194/0x1a0 [ 198.573900][T13459] __x64_sys_mount+0x67/0x80 [ 198.573918][T13459] x64_sys_call+0x2cca/0x3000 [ 198.574008][T13459] do_syscall_64+0xc0/0x2a0 [ 198.574034][T13459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.574055][T13459] RIP: 0033:0x7f604fe0acb9 [ 198.574112][T13459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.574147][T13459] RSP: 002b:00007f604e867028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 198.574223][T13459] RAX: ffffffffffffffda RBX: 00007f6050085fa0 RCX: 00007f604fe0acb9 [ 198.574250][T13459] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 198.574267][T13459] RBP: 00007f604e867090 R08: 0000200000000300 R09: 0000000000000000 [ 198.574300][T13459] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 198.574315][T13459] R13: 00007f6050086038 R14: 00007f6050085fa0 R15: 00007ffcaccaf2c8 [ 198.574336][T13459] [ 198.935500][ T1039] IPVS: starting estimator thread 0... [ 198.938556][T13469] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.017404][ T1039] kernel read not supported for file /vcs (pid: 1039 comm: kworker/1:2) [ 199.035270][T13477] IPVS: using max 2256 ests per chain, 112800 per kthread [ 199.100923][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 199.100942][ T29] audit: type=1326 audit(1768627619.630:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604fe0acb9 code=0x7ffc0000 [ 199.116348][T13490] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3391'. [ 199.148570][ T29] audit: type=1326 audit(1768627619.630:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604fe0acb9 code=0x7ffc0000 [ 199.172194][ T29] audit: type=1326 audit(1768627619.630:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604fe0acb9 code=0x7ffc0000 [ 199.195783][ T29] audit: type=1326 audit(1768627619.630:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604fe0acb9 code=0x7ffc0000 [ 199.219313][ T29] audit: type=1326 audit(1768627619.630:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f604fe0acb9 code=0x7ffc0000 [ 199.242895][ T29] audit: type=1326 audit(1768627619.630:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604fe0acb9 code=0x7ffc0000 [ 199.266464][ T29] audit: type=1326 audit(1768627619.630:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604fe0acb9 code=0x7ffc0000 [ 199.290223][ T29] audit: type=1326 audit(1768627619.630:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604fe0acb9 code=0x7ffc0000 [ 199.313853][ T29] audit: type=1326 audit(1768627619.630:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604fe0acb9 code=0x7ffc0000 [ 199.337512][ T29] audit: type=1326 audit(1768627619.630:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f604fe0acb9 code=0x7ffc0000 [ 199.377300][T13490] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3391'. [ 199.404462][T13488] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.3392: corrupted in-inode xattr: invalid ea_ino [ 199.437384][T13488] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3392: couldn't read orphan inode 15 (err -117) [ 199.500853][T13504] set_capacity_and_notify: 9 callbacks suppressed [ 199.500869][T13504] loop2: detected capacity change from 0 to 1024 [ 199.514403][T13504] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.561677][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3395'. [ 199.598824][T13512] loop3: detected capacity change from 0 to 512 [ 199.605765][T13512] ext4: Bad value for 'barrier' [ 199.659753][T13510] SELinux: failed to load policy [ 199.683476][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3401'. [ 199.743912][T13523] loop6: detected capacity change from 0 to 512 [ 199.752988][T13523] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.764776][T13523] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 199.775452][T13523] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3403: Corrupt directory, running e2fsck is recommended [ 199.797506][T13523] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 199.806641][T13523] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.3403: corrupted in-inode xattr: e_name out of bounds [ 199.821246][T13523] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3403: couldn't read orphan inode 15 (err -117) [ 199.838015][T13523] EXT4-fs error (device loop6): ext4_xattr_set_entry:1669: inode #2: comm syz.6.3403: corrupted xattr entries [ 199.961591][T13533] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3404'. [ 200.145542][T13518] syz.3.3400 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 200.156725][T13518] CPU: 1 UID: 0 PID: 13518 Comm: syz.3.3400 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.156758][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.156774][T13518] Call Trace: [ 200.156782][T13518] [ 200.156792][T13518] __dump_stack+0x1d/0x30 [ 200.156825][T13518] dump_stack_lvl+0x95/0xd0 [ 200.156845][T13518] dump_stack+0x15/0x1b [ 200.156864][T13518] dump_header+0x80/0x240 [ 200.156886][T13518] oom_kill_process+0x295/0x350 [ 200.156981][T13518] out_of_memory+0x97d/0xb80 [ 200.157004][T13518] try_charge_memcg+0x62e/0xa10 [ 200.157057][T13518] charge_memcg+0x51/0xc0 [ 200.157094][T13518] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 200.157208][T13518] __read_swap_cache_async+0x17b/0x2d0 [ 200.157266][T13518] swap_cluster_readahead+0x362/0x3c0 [ 200.157350][T13518] swapin_readahead+0xde/0x840 [ 200.157384][T13518] ? __rcu_read_unlock+0x33/0x70 [ 200.157483][T13518] ? __rcu_read_unlock+0x4e/0x70 [ 200.157507][T13518] ? swap_cache_get_folio+0x26f/0x280 [ 200.157544][T13518] do_swap_page+0x2f4/0x2140 [ 200.157594][T13518] ? css_rstat_updated+0xbb/0x280 [ 200.157671][T13518] ? __pfx_default_wake_function+0x10/0x10 [ 200.157717][T13518] handle_mm_fault+0xb40/0x3030 [ 200.157807][T13518] ? vma_start_read+0x1c7/0x2c0 [ 200.157838][T13518] do_user_addr_fault+0x62f/0x1050 [ 200.157912][T13518] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 200.157940][T13518] ? irqentry_exit+0x3c/0x510 [ 200.157980][T13518] exc_page_fault+0x62/0xa0 [ 200.158017][T13518] asm_exc_page_fault+0x26/0x30 [ 200.158093][T13518] RIP: 0033:0x7f604fcdfb74 [ 200.158114][T13518] Code: 7b 19 00 e8 be 6f 0c 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 55 49 89 f5 41 54 55 53 48 89 fb 48 83 ec 18 <4c> 8b 76 38 4c 03 76 18 80 3d 4f 5b ed 00 00 8b 6e 04 4c 89 34 24 [ 200.158183][T13518] RSP: 002b:00007ffcaccaf320 EFLAGS: 00010202 [ 200.158200][T13518] RAX: 00000000000012a0 RBX: 00007f6050bb5720 RCX: 0000000000000003 [ 200.158246][T13518] RDX: 0000001b2d422d60 RSI: 00007f6050086218 RDI: 00007f6050bb5720 [ 200.158261][T13518] RBP: 00007f6050bb5720 R08: 00007f6050070000 R09: 00007f6050086218 [ 200.158281][T13518] R10: 0000000000000003 R11: 0000000000000008 R12: 00007f6050086180 [ 200.158293][T13518] R13: 00007f6050086218 R14: 00007ffcaccaf3e8 R15: 0000000000000003 [ 200.158341][T13518] [ 200.158362][T13518] memory: usage 307200kB, limit 307200kB, failcnt 11763 [ 200.160223][T13545] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3407'. [ 200.169816][T13518] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 200.411928][T13518] kmem: usage 280348kB, limit 9007199254740988kB, failcnt 0 [ 200.419289][T13518] Memory cgroup stats for /syz3: [ 200.432307][T13518] cache 4096 [ 200.441279][T13518] rss 8192 [ 200.444435][T13518] shmem 0 [ 200.447429][T13518] mapped_file 4096 [ 200.451203][T13518] dirty 0 [ 200.454168][T13518] writeback 0 [ 200.457507][T13518] workingset_refault_anon 421 [ 200.462223][T13518] workingset_refault_file 577 [ 200.467594][T13518] swap 196608 [ 200.470956][T13518] swapcached 36864 [ 200.474748][T13518] pgpgin 183010 [ 200.478222][T13518] pgpgout 182997 [ 200.481791][T13518] pgfault 208215 [ 200.485379][T13518] pgmajfault 81 [ 200.488892][T13518] inactive_anon 4096 [ 200.492850][T13518] active_anon 32768 [ 200.497396][T13518] inactive_file 0 [ 200.501053][T13518] active_file 8192 [ 200.504816][T13518] unevictable 0 [ 200.508296][T13518] hierarchical_memory_limit 314572800 [ 200.513763][T13518] hierarchical_memsw_limit 9223372036854771712 [ 200.519995][T13518] total_cache 4096 [ 200.523749][T13518] total_rss 8192 [ 200.527983][T13518] total_shmem 0 [ 200.531462][T13518] total_mapped_file 4096 [ 200.535774][T13518] total_dirty 0 [ 200.539265][T13518] total_writeback 0 [ 200.543120][T13518] total_workingset_refault_anon 421 [ 200.548370][T13518] total_workingset_refault_file 577 [ 200.553640][T13518] total_swap 196608 [ 200.558198][T13518] total_swapcached 36864 [ 200.562481][T13518] total_pgpgin 183010 [ 200.566582][T13518] total_pgpgout 182997 [ 200.570669][T13518] total_pgfault 208215 [ 200.574780][T13518] total_pgmajfault 81 [ 200.578769][T13518] total_inactive_anon 4096 [ 200.583202][T13518] total_active_anon 32768 [ 200.588226][T13518] total_inactive_file 0 [ 200.592414][T13518] total_active_file 8192 [ 200.596722][T13518] total_unevictable 0 [ 200.600709][T13518] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3400,pid=13518,uid=0 [ 200.616163][T13518] Memory cgroup out of memory: Killed process 13518 (syz.3.3400) total-vm:96312kB, anon-rss:1332kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 200.671603][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3411'. [ 200.696928][T13562] batadv_slave_0: entered promiscuous mode [ 200.709908][T13562] batadv_slave_1: entered promiscuous mode [ 200.731979][T13560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13560 comm=syz.5.3411 [ 200.786587][T13562] batadv_slave_1: left promiscuous mode [ 200.792261][T13562] batadv_slave_0: left promiscuous mode [ 200.806382][T13570] loop3: detected capacity change from 0 to 256 [ 200.886966][T13576] netlink: 'syz.6.3414': attribute type 6 has an invalid length. [ 200.903443][T13577] loop5: detected capacity change from 0 to 512 [ 200.923317][T13577] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3415'. [ 200.935347][T13576] autofs4:pid:13576:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc018937e) [ 200.948666][T13576] autofs4:pid:13576:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 201.064279][T13584] netlink: 'syz.3.3413': attribute type 13 has an invalid length. [ 201.101365][T13584] gretap0: refused to change device tx_queue_len [ 201.134281][T13599] loop2: detected capacity change from 0 to 1024 [ 201.145321][T13584] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 201.167576][T13604] FAULT_INJECTION: forcing a failure. [ 201.167576][T13604] name failslab, interval 1, probability 0, space 0, times 0 [ 201.180447][T13604] CPU: 1 UID: 0 PID: 13604 Comm: syz.0.3419 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.180504][T13604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.180520][T13604] Call Trace: [ 201.180527][T13604] [ 201.180537][T13604] __dump_stack+0x1d/0x30 [ 201.180567][T13604] dump_stack_lvl+0x95/0xd0 [ 201.180622][T13604] dump_stack+0x15/0x1b [ 201.180650][T13604] should_fail_ex+0x263/0x280 [ 201.180680][T13604] should_failslab+0x8c/0xb0 [ 201.180779][T13604] __kmalloc_cache_noprof+0x64/0x4a0 [ 201.180804][T13604] ? alloc_pipe_info+0xad/0x340 [ 201.180824][T13604] alloc_pipe_info+0xad/0x340 [ 201.180927][T13604] splice_direct_to_actor+0x591/0x670 [ 201.180948][T13604] ? kstrtouint_from_user+0xa8/0xf0 [ 201.181016][T13604] ? __pfx_direct_splice_actor+0x10/0x10 [ 201.181086][T13604] ? __rcu_read_unlock+0x4e/0x70 [ 201.181109][T13604] ? do_splice_direct+0x4c/0x1a0 [ 201.181134][T13604] do_splice_direct+0x119/0x1a0 [ 201.181175][T13604] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 201.181205][T13604] do_sendfile+0x380/0x650 [ 201.181274][T13604] __x64_sys_sendfile64+0x105/0x150 [ 201.181300][T13604] x64_sys_call+0x2db1/0x3000 [ 201.181324][T13604] do_syscall_64+0xc0/0x2a0 [ 201.181428][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.181457][T13604] RIP: 0033:0x7f38eef4acb9 [ 201.181474][T13604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.181492][T13604] RSP: 002b:00007f38ed9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 201.181510][T13604] RAX: ffffffffffffffda RBX: 00007f38ef1c5fa0 RCX: 00007f38eef4acb9 [ 201.181524][T13604] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 201.181578][T13604] RBP: 00007f38ed9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.181674][T13604] R10: 00008000fffffffc R11: 0000000000000246 R12: 0000000000000001 [ 201.181691][T13604] R13: 00007f38ef1c6038 R14: 00007f38ef1c5fa0 R15: 00007ffd5a5a9b08 [ 201.181774][T13604] [ 201.225762][T13599] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.748315][T13657] FAULT_INJECTION: forcing a failure. [ 201.748315][T13657] name failslab, interval 1, probability 0, space 0, times 0 [ 201.761046][T13657] CPU: 0 UID: 0 PID: 13657 Comm: syz.3.3427 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.761079][T13657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.761164][T13657] Call Trace: [ 201.761173][T13657] [ 201.761184][T13657] __dump_stack+0x1d/0x30 [ 201.761214][T13657] dump_stack_lvl+0x95/0xd0 [ 201.761243][T13657] dump_stack+0x15/0x1b [ 201.761277][T13657] should_fail_ex+0x263/0x280 [ 201.761307][T13657] should_failslab+0x8c/0xb0 [ 201.761334][T13657] kmem_cache_alloc_noprof+0x68/0x490 [ 201.761361][T13657] ? security_file_alloc+0x32/0xf0 [ 201.761450][T13657] security_file_alloc+0x32/0xf0 [ 201.761484][T13657] init_file+0x5c/0x1c0 [ 201.761583][T13657] alloc_empty_file+0x8b/0x200 [ 201.761608][T13657] path_openat+0x62/0x23c0 [ 201.761654][T13657] ? kstrtoull+0x111/0x140 [ 201.761737][T13657] do_filp_open+0x15d/0x280 [ 201.761789][T13657] do_sys_openat2+0xa6/0x150 [ 201.761826][T13657] __x64_sys_openat+0xf2/0x120 [ 201.761945][T13657] x64_sys_call+0x2b07/0x3000 [ 201.761978][T13657] do_syscall_64+0xc0/0x2a0 [ 201.762006][T13657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.762035][T13657] RIP: 0033:0x7f604fdcb58e [ 201.762055][T13657] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.762102][T13657] RSP: 002b:00007f604e866ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.762121][T13657] RAX: ffffffffffffffda RBX: 00007f604e8676c0 RCX: 00007f604fdcb58e [ 201.762139][T13657] RDX: 0000000000000002 RSI: 00007f604e866f90 RDI: ffffffffffffff9c [ 201.762157][T13657] RBP: 00007f604e867090 R08: 0000000000000000 R09: 0000000000000000 [ 201.762216][T13657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.762231][T13657] R13: 00007f6050086038 R14: 00007f6050085fa0 R15: 00007ffcaccaf2c8 [ 201.762329][T13657] [ 202.022401][T13673] loop6: detected capacity change from 0 to 1024 [ 202.035323][T13673] EXT4-fs: inline encryption not supported [ 202.062137][T13678] loop3: detected capacity change from 0 to 2048 [ 202.089955][T13673] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.3432: Allocating blocks 497-513 which overlap fs metadata [ 202.157106][T13694] EXT4-fs (loop6): pa ffff888107a20770: logic 256, phys. 369, len 9 [ 202.165347][T13694] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 202.403397][T13699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.425644][T13699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.441823][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.500212][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.560193][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.636766][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.672928][T13706] lo speed is unknown, defaulting to 1000 [ 202.750467][ T37] bridge_slave_1: left allmulticast mode [ 202.757005][ T37] bridge_slave_1: left promiscuous mode [ 202.762719][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.771388][ T37] bridge_slave_0: left allmulticast mode [ 202.777110][ T37] bridge_slave_0: left promiscuous mode [ 202.782798][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.867641][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.878928][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.888873][ T37] bond0 (unregistering): Released all slaves [ 202.930613][ T37] hsr_slave_0: left promiscuous mode [ 202.945814][ T37] hsr_slave_1: left promiscuous mode [ 202.952908][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.960461][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.988052][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.995550][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.021021][ T37] veth1_macvtap: left promiscuous mode [ 203.032982][ T37] veth0_macvtap: left promiscuous mode [ 203.046210][ T37] veth1_vlan: left promiscuous mode [ 203.056199][ T37] veth0_vlan: left promiscuous mode [ 203.065670][T13747] loop2: detected capacity change from 0 to 1024 [ 203.082612][T13747] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.130880][ T37] pimreg (unregistering): left allmulticast mode [ 203.170754][ T37] team0 (unregistering): Port device team_slave_1 removed [ 203.181516][ T37] team0 (unregistering): Port device team_slave_0 removed [ 203.295144][T13706] chnl_net:caif_netlink_parms(): no params data found [ 203.352431][T13706] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.359814][T13706] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.367283][T13706] bridge_slave_0: entered allmulticast mode [ 203.373933][T13706] bridge_slave_0: entered promiscuous mode [ 203.381492][T13706] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.388737][T13706] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.409739][T13706] bridge_slave_1: entered allmulticast mode [ 203.416796][T13706] bridge_slave_1: entered promiscuous mode [ 203.483682][T13775] loop5: detected capacity change from 0 to 1024 [ 203.562106][T13788] lo speed is unknown, defaulting to 1000 [ 203.570458][T13706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.596696][T13706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.683686][T13706] team0: Port device team_slave_0 added [ 203.695916][T13804] __nla_validate_parse: 3 callbacks suppressed [ 203.695934][T13804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3454'. [ 203.719797][T13706] team0: Port device team_slave_1 added [ 203.745554][T13706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.752555][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.778595][T13706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.800032][T13706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.807061][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.833121][T13706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.874146][T13706] hsr_slave_0: entered promiscuous mode [ 203.884833][T13706] hsr_slave_1: entered promiscuous mode [ 203.890858][T13706] debugfs: 'hsr0' already exists in 'hsr' [ 203.896706][T13706] Cannot create hsr debugfs directory [ 204.048398][T13706] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 204.062703][T13706] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 204.086117][T13706] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 204.107167][T13706] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 204.133044][T13706] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.140276][T13706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.147681][T13706] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.154882][T13706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.212425][T13706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.227441][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.237150][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.251566][T13706] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.263805][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.271117][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.296499][T13706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.307759][T13706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.330758][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.337992][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.347282][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 204.347299][ T29] audit: type=1400 audit(1768627624.870:2372): avc: denied { create } for pid=13851 comm="syz.2.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.383673][ T29] audit: type=1400 audit(1768627624.880:2373): avc: denied { connect } for pid=13851 comm="syz.2.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.404079][ T29] audit: type=1400 audit(1768627624.890:2374): avc: denied { ioctl } for pid=13851 comm="syz.2.3461" path="socket:[41517]" dev="sockfs" ino=41517 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 204.430742][ T29] audit: type=1400 audit(1768627624.890:2375): avc: denied { create } for pid=13851 comm="syz.2.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 204.450543][ T29] audit: type=1400 audit(1768627624.900:2376): avc: denied { setopt } for pid=13851 comm="syz.2.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.495589][T13858] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3462'. [ 204.506715][ T29] audit: type=1400 audit(1768627625.020:2377): avc: denied { create } for pid=13856 comm="syz.2.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.527771][ T29] audit: type=1400 audit(1768627625.020:2378): avc: denied { write } for pid=13856 comm="syz.2.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.548072][ T29] audit: type=1400 audit(1768627625.030:2379): avc: denied { nlmsg_write } for pid=13856 comm="syz.2.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.589563][ T29] audit: type=1400 audit(1768627625.120:2380): avc: denied { append } for pid=13856 comm="syz.2.3462" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 204.622648][ T29] audit: type=1400 audit(1768627625.150:2381): avc: denied { setopt } for pid=13864 comm="syz.0.3464" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.631640][T13706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.858330][T13884] loop5: detected capacity change from 0 to 1024 [ 204.906757][T13884] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.063431][T13908] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3475'. [ 205.217161][T13706] veth0_vlan: entered promiscuous mode [ 205.247679][T13706] veth1_vlan: entered promiscuous mode [ 205.256065][T13919] loop3: detected capacity change from 0 to 512 [ 205.269146][T13921] loop5: detected capacity change from 0 to 1024 [ 205.293340][T13706] veth0_macvtap: entered promiscuous mode [ 205.303126][T13919] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3479: invalid indirect mapped block 4294967295 (level 1) [ 205.346482][T13706] veth1_macvtap: entered promiscuous mode [ 205.385350][T13919] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3479: invalid indirect mapped block 4294967295 (level 1) [ 205.406521][T13706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.439791][T13706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.463976][T13919] EXT4-fs (loop3): 2 truncates cleaned up [ 205.490446][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.517496][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.551669][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.571152][T13933] loop5: detected capacity change from 0 to 1024 [ 205.578640][T13919] EXT4-fs (loop3): Online defrag not supported for non-extent files [ 205.582487][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.668154][T13933] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.703029][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3439'. [ 205.712116][T13942] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3439'. [ 205.740973][T13945] loop3: detected capacity change from 0 to 1024 [ 205.760481][T13945] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.772929][T13952] loop2: detected capacity change from 0 to 512 [ 205.832379][T13952] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 205.843969][T13952] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 205.854761][T13952] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3487: Corrupt directory, running e2fsck is recommended [ 205.885398][T13952] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 205.893697][T13952] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.3487: corrupted in-inode xattr: e_name out of bounds [ 205.907960][T13952] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3487: couldn't read orphan inode 15 (err -117) [ 205.979506][T13967] netlink: 642 bytes leftover after parsing attributes in process `syz.2.3491'. [ 206.094699][T13979] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3496'. [ 206.131153][T10057] EXT4-fs unmount: 75 callbacks suppressed [ 206.131169][T10057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.205189][T13988] loop7: detected capacity change from 0 to 1024 [ 206.213956][T13988] ext4: Invalid gid '0x00000000ffffffff' [ 206.260235][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'. [ 206.270808][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3495'. [ 206.397141][T14008] loop2: detected capacity change from 0 to 1024 [ 206.404014][T14008] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.446118][T14012] netlink: 'syz.0.3509': attribute type 4 has an invalid length. [ 206.466975][T14008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.584179][T14019] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3511'. [ 206.657258][ T31] bond0: (slave bond_slave_0): interface is now down [ 206.664080][ T31] bond0: (slave bond_slave_1): interface is now down [ 206.717528][T12014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.799561][T14036] loop7: detected capacity change from 0 to 1024 [ 206.817299][ T3425] Process accounting resumed [ 206.822190][ T1682] bond0: (slave bond_slave_0): interface is now down [ 206.829630][ T1682] bond0: (slave bond_slave_1): interface is now down [ 206.853563][ T1682] bond0: now running without any active interface! [ 206.864765][T14036] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.899913][T14045] loop2: detected capacity change from 0 to 1024 [ 206.957818][T14036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.069358][T14065] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.089071][T14065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.212652][T13706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.301695][T12014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.396930][T14090] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3536: invalid indirect mapped block 256 (level 2) [ 207.415868][T14090] EXT4-fs (loop2): 2 truncates cleaned up [ 207.423276][T14090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.452501][T14090] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3536: bg 0: block 5: invalid block bitmap [ 207.484854][T14090] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 207.497968][T14090] EXT4-fs (loop2): This should not happen!! Data will be lost [ 207.497968][T14090] [ 207.507750][T14090] EXT4-fs (loop2): Total free blocks count 0 [ 207.513774][T14090] EXT4-fs (loop2): Free/Dirty block details [ 207.519752][T14090] EXT4-fs (loop2): free_blocks=0 [ 207.525451][T14090] EXT4-fs (loop2): dirty_blocks=66 [ 207.530601][T14090] EXT4-fs (loop2): Block reservation details [ 207.536668][T14090] EXT4-fs (loop2): i_reserved_data_blocks=66 [ 207.575203][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 207.627401][T14098] 9p: Bad value for 'rfdno' [ 207.655361][T14102] netlink: 'syz.7.3539': attribute type 13 has an invalid length. [ 207.665761][T14100] netlink: 'syz.5.3540': attribute type 7 has an invalid length. [ 207.681150][ T31] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.690122][T14100] netlink: 'syz.5.3540': attribute type 7 has an invalid length. [ 207.698951][ T31] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.731303][T14103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.830717][T14103] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.863458][T14103] EXT4-fs error (device loop2): ext4_get_first_dir_block:3538: inode #12: comm syz.2.3537: directory missing '.' [ 207.879070][T14102] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.886449][T14102] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.894941][T14103] EXT4-fs (loop2): Remounting filesystem read-only [ 207.946730][T14102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.978787][T14102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.169342][ T31] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.204002][ T31] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.222950][ T31] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.274165][ T31] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.288193][T14112] netlink: 'syz.0.3543': attribute type 4 has an invalid length. [ 208.309676][ T31] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.322874][ T31] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.329001][T14114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14114 comm=syz.5.3545 [ 208.375970][T14123] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 208.411927][T14127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.460181][T12014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.526376][T13316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.538852][T11075] kernel write not supported for file bpf-prog (pid: 11075 comm: kworker/0:17) [ 208.724351][T14161] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.737870][T14161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.788678][T14168] program syz.2.3560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.832846][T14171] EXT4-fs: Ignoring removed nobh option [ 208.838551][T14171] EXT4-fs: Ignoring removed bh option [ 208.856496][T14171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.885511][T12014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.929153][T13316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.965199][T14177] lo speed is unknown, defaulting to 1000 [ 209.019252][T14181] __nla_validate_parse: 4 callbacks suppressed [ 209.019271][T14181] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3564'. [ 209.057241][T14183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3566'. [ 209.252679][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3568'. [ 209.346160][T14197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.346226][ T290] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 209.346252][ T290] FAT-fs (loop5): Filesystem has been set read-only [ 209.377296][T14197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3571'. [ 209.386357][T14197] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3571'. [ 209.395702][ T290] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 209.415907][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 209.415924][ T29] audit: type=1400 audit(1768627629.950:2535): avc: denied { create } for pid=14202 comm="syz.5.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.442016][T14197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3571'. [ 209.462170][ T29] audit: type=1400 audit(1768627629.950:2536): avc: denied { bind } for pid=14202 comm="syz.5.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.481681][ T29] audit: type=1400 audit(1768627629.950:2537): avc: denied { ioctl } for pid=14202 comm="syz.5.3572" path="socket:[43270]" dev="sockfs" ino=43270 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.534132][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.543244][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.553739][T14203] rdma_op ffff888121312580 conn xmit_rdma 0000000000000000 [ 209.561125][ T29] audit: type=1400 audit(1768627630.080:2538): avc: denied { write } for pid=14202 comm="syz.5.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.616459][T13316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.626415][T14214] netlink: 'syz.5.3575': attribute type 4 has an invalid length. [ 209.656722][ T29] audit: type=1400 audit(1768627630.190:2539): avc: denied { unmount } for pid=14210 comm="syz.0.3574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 209.741414][ T29] audit: type=1400 audit(1768627630.270:2540): avc: denied { bind } for pid=14222 comm="syz.5.3579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.782100][T14226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.795697][ T29] audit: type=1400 audit(1768627630.300:2541): avc: denied { listen } for pid=14222 comm="syz.5.3579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.799573][T14226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.815756][ T29] audit: type=1400 audit(1768627630.300:2542): avc: denied { connect } for pid=14222 comm="syz.5.3579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.842899][ T29] audit: type=1400 audit(1768627630.300:2543): avc: denied { mount } for pid=14222 comm="syz.5.3579" name="/" dev="ramfs" ino=42958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 209.865316][ T29] audit: type=1400 audit(1768627630.300:2544): avc: denied { read } for pid=14222 comm="syz.5.3579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.885806][T14221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.898856][T14221] cgroup: subsys name conflicts with all [ 209.968334][T14231] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 210.016681][T13316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.028934][T14235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3583'. [ 210.153662][T14251] set_capacity_and_notify: 12 callbacks suppressed [ 210.153682][T14251] loop7: detected capacity change from 0 to 512 [ 210.172210][T14251] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3590: corrupted in-inode xattr: invalid ea_ino [ 210.239825][T14251] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3590: couldn't read orphan inode 15 (err -117) [ 210.261446][T14251] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.277609][T14263] loop3: detected capacity change from 0 to 2048 [ 210.297627][T14263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.390643][T14271] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3594'. [ 210.440887][T13706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.460728][T14273] loop7: detected capacity change from 0 to 128 [ 210.467555][T14273] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 210.483124][T14273] loop7: detected capacity change from 0 to 128 [ 210.516488][T14273] syz.7.3595: attempt to access beyond end of device [ 210.516488][T14273] loop7: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 210.533556][T13316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.584708][T14273] syz.7.3595: attempt to access beyond end of device [ 210.584708][T14273] loop7: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 210.633309][T14273] syz.7.3595: attempt to access beyond end of device [ 210.633309][T14273] loop7: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 210.647725][T14273] Buffer I/O error on dev loop7, logical block 76, lost async page write [ 210.669639][T14279] loop2: detected capacity change from 0 to 1764 [ 210.672404][T14273] syz.7.3595: attempt to access beyond end of device [ 210.672404][T14273] loop7: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 210.685844][T14279] iso9660: Unknown parameter 'unnhide' [ 210.738264][T14291] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.750163][T14279] ipt_ECN: cannot use operation on non-tcp rule [ 210.943769][T14302] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3605'. [ 210.955726][T14302] netlink: 'syz.2.3605': attribute type 5 has an invalid length. [ 210.992352][T14302] vlan0: entered allmulticast mode [ 210.998073][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3608'. [ 211.024209][T14313] ================================================================== [ 211.032445][T14313] BUG: KCSAN: data-race in copy_mm / copy_page_range [ 211.039166][T14313] [ 211.041501][T14313] read-write to 0xffff88811b592af8 of 4 bytes by task 14312 on cpu 1: [ 211.049672][T14313] copy_page_range+0x299/0x3d30 [ 211.054558][T14313] dup_mmap+0x852/0xf00 [ 211.058747][T14313] copy_mm+0x119/0x370 [ 211.062841][T14313] copy_process+0xcbd/0x1f10 [ 211.067445][T14313] kernel_clone+0x16b/0x5b0 [ 211.071978][T14313] __x64_sys_clone+0x143/0x180 [ 211.076766][T14313] x64_sys_call+0x12d0/0x3000 [ 211.081469][T14313] do_syscall_64+0xc0/0x2a0 [ 211.085994][T14313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.091911][T14313] [ 211.094243][T14313] read to 0xffff88811b592880 of 1664 bytes by task 14313 on cpu 0: [ 211.102137][T14313] copy_mm+0xe1/0x370 [ 211.106130][T14313] copy_process+0xcbd/0x1f10 [ 211.110728][T14313] kernel_clone+0x16b/0x5b0 [ 211.115243][T14313] __x64_sys_clone+0x143/0x180 [ 211.120016][T14313] x64_sys_call+0x12d0/0x3000 [ 211.124712][T14313] do_syscall_64+0xc0/0x2a0 [ 211.129243][T14313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.135150][T14313] [ 211.137482][T14313] Reported by Kernel Concurrency Sanitizer on: [ 211.143644][T14313] CPU: 0 UID: 0 PID: 14313 Comm: syz.5.3608 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.153459][T14313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.163518][T14313] ================================================================== [ 211.559133][T14314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14314 comm=syz.0.3606