last executing test programs: 2m4.305607539s ago: executing program 1 (id=102): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) 2m4.2893132s ago: executing program 1 (id=103): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0xffffffff}, @in6={0xa, 0x4e24, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}], 0x38) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d8}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}, 0x4048043) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) fcntl$lock(r7, 0x25, &(0x7f00000000c0)={0x2, 0x2, 0x46b, 0x0, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) writev(r8, &(0x7f0000000380)=[{&(0x7f0000000040)='4', 0xff1a}], 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x44000) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf}}, 0xffffec47, 0x9, 0xa, 0x0, 0x40, 0xffff0001}, 0x9c) 2m2.441188653s ago: executing program 1 (id=111): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) (fail_nth: 1) 2m1.805631595s ago: executing program 2 (id=115): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCFLSH(r2, 0x541b, 0x7ffffffffffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x11, &(0x7f0000000540)="17000000020001004003be8c5e687a8a6a003200020100ecff3f00000003a96c6b06169da9c0f8d94d5bbb6a880a00243c5197b29f9368bdd6c8db933e7a2fdfff0a175e0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000003000000000000000080c457681f009cee4a0a003dff010000b7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfcc580000000000", 0xa8) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 2m1.755470307s ago: executing program 1 (id=116): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r0, 0x2f, 0x0) msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r1 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) llistxattr(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="000000040000000000eaff001e00009763df13003ec1cb3440cd6c64281fb0d28842873b6633916dcc8d8de3833ffafaa30ac26b9a2dbdb2048f6ea043353f2d940db158cdcd98ddcfeb65", @ANYRES32, @ANYRES32=r1, @ANYBLOB], 0x50) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) process_vm_readv(0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/43, 0x2b}], 0x3, &(0x7f0000000300)=[{&(0x7f0000000340)=""/111, 0x6f}], 0x1, 0x0) 2m1.490343501s ago: executing program 1 (id=118): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec59080600010800"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000040000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendto$packet(r0, &(0x7f0000000140)="f25d964e6e07287c7677aeab96850806499077367de379b1eeacdd7717af3a545efb1985e18aa847d331b9446777429803265904b85aef7e5a4ca50ea0f010a75ee275c87e7ab3e9e46d8118ad861e28e580e57c1b90268c38ea637ccea82871c3e7d8099331b6b2423974e6779522a954b713dbe8a8d4030c5f25f93482632ecaeb746e53c8232e1023cd13950244b86de482d177e09192db1a1eb58f702c89d5c7a0c17c94f87ce3c575b61624b5f5585f45fc282b2175425d", 0xba, 0x0, &(0x7f0000000200)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m1.324414809s ago: executing program 2 (id=119): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00') r4 = syz_io_uring_setup(0x8ec4, &(0x7f00000003c0)={0x0, 0x2b50, 0x2, 0x5, 0xf0, 0x0, r2}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x3) io_uring_enter(r4, 0x5fb, 0xe876, 0x3, 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) fallocate(r6, 0x3, 0x4100, 0x8000c62) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r7, &(0x7f0000000d40)=""/43, 0x2b) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m0.050785223s ago: executing program 1 (id=124): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b7, &(0x7f0000000a80)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x10000a) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@can_delroute={0x20, 0x19, 0xc03, 0x0, 0x0, {}, [@CGW_FILTER={0xc}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x180, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcfcb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6416}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x790}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xae08e1c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x62b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1da}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x88d1}, 0x40044) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) write$char_usb(r3, &(0x7f0000000000)='-0', 0x2) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00') 1m59.91637094s ago: executing program 32 (id=124): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b7, &(0x7f0000000a80)="$eJzs3cFrm2UYAPCnadd20zUFRVARXwYevISu/gMrsoFYUOYi04PwzaYakiUjCZUM0eHFq/+B9+HRmyD+Azvo3Zu3XTzuMPZJ8iVt06WbtbZh+vtB+Z587/t8fb835OPJITz3r393s7HdrWxnvShdSlGKiNKDiNVhVJgbHUvDeDH2uxNvlq///toHH3387sbm5uWrKV3ZuPbWekpp5fWfv/jyhwu/9J778MeVn5bi3uon9/9c/+PeS/devv/o2uf1bqp300K7l7J0o93uZTeatbRV7zYqKb3frGXdWqq3urXOxPh2s33rVj9lra3z5251at1uylr91Kj1U6+deiv9lH2W1VupUqmk8+eCp6nevXo12yji5SfMu3RaC+IEdDob2eAzvPTYSPXuTBYEAMzUcev/xePV/63J+v9MdBuVF94oLn3k+r+j/j+i/fU//1WD+n9x9PmNiHzve4D6HwAAAAAAAAAAAAAAngUP8ryc53l5fNz9ccDo9YyXxwl77P0/8Dfr9XGy9v1wbzmi+e1OdadaHIvxje2oRzNqsRbleDh4LIwV8ZV3Ni+vpaHVOH/z62H+hV8jqvOT+RejHKvT8y8W+Wk3PwbHM3Fuf/56lOPF6fnrU/MXY+373fzliCjHb59GO5qxNXy87eV/dTGlt9/bPJC/NJwHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP9DJY29GkXf+51qxNnYGfXvr+xNWJ3sj1/kj/rrl2ItyvFwen/+tan9+RfilYXZ3jsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjHX7txtZs1nrnFYw7vk/PLM4Dg7Pmium3zkwdDYmJy897Tp/P8jzPH+U5/nEUOlI1zk7uskpQ4Mrf7NcDBdntlr/1vYuz53qW3mc4ExEPGFOPtrA/UPz8U/+1/O7+zx1zlJEnOidrgyC0uw3/MjBqT+KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYOZ2m34PXszNejUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMSrd/u5E1m/OdUVCbDBbi4JmsOR+HTD4smPU9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPEv+CgAA//9l1Aea") truncate(&(0x7f0000000040)='./file1\x00', 0x10000a) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@can_delroute={0x20, 0x19, 0xc03, 0x0, 0x0, {}, [@CGW_FILTER={0xc}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x180, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcfcb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6416}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x790}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x70}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xae08e1c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x62b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1da}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x88d1}, 0x40044) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) write$char_usb(r3, &(0x7f0000000000)='-0', 0x2) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00') 1m58.967377097s ago: executing program 2 (id=126): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x143442, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000940)={[{@block_validity}, {@sysvgroups}, {@init_itable_val={'init_itable', 0x3d, 0x43dc}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}, {@init_itable_val}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '!'}}, {@euid_lt}, {@fowner_eq}, {@uid_lt}, {@obj_type}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r3, 0x2007ffc) r4 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0xfffffe47) 1m57.951165239s ago: executing program 2 (id=134): r0 = socket(0x400000000010, 0x3, 0x0) io_setup(0x2278, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x8084, 0x100000001, 0x101, 0x2, 0x7f, 0x9b9c, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) connect$unix(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100402020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000085000000b300000095000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r5, 0x24020000) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000700)='./file1\x00', 0xc) preadv2(r3, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 1m57.148724399s ago: executing program 2 (id=136): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00') r4 = syz_io_uring_setup(0x8ec4, &(0x7f00000003c0)={0x0, 0x2b50, 0x2, 0x5, 0xf0, 0x0, r2}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x3) io_uring_enter(r4, 0x5fb, 0xe876, 0x3, 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) fallocate(r6, 0x3, 0x4100, 0x8000c62) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r7, &(0x7f0000000d40)=""/43, 0x2b) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m54.974804529s ago: executing program 2 (id=141): r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x0, 0x2, {0x5}}, @NFQA_CFG_CMD={0x0, 0x1, {0x2, 0x0, 0x28}}, @NFQA_CFG_MASK={0x0, 0x4, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x2b8, 0x25c, 0xf0, 0x7, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff], [], 'macvlan1\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x4, 0x2}, 0x16c, 0xa8, 0xf0, 0xa010000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffb}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'wlan1\x00', {0xff}, {0xff}, 0x88, 0xa, 0x5, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) pread64(r1, 0x0, 0x0, 0x4eb) creat(&(0x7f0000000140)='./file0\x00', 0x106) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002400810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802dd", 0x27}, {&(0x7f0000001440)="f6e14ee68a9418", 0x7}], 0x2}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1800, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") utime(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000008406010000000000000300000d"], 0x0, 0x4a, 0x0, 0x8, 0x4}, 0x28) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'bridge_slave_0\x00', {0x2, 0x0, @multicast1}}) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xfd, 0x4e1d, 0x0, @empty, 0x1}, 0x1c, 0x0}, 0x440e0) 1m54.972781809s ago: executing program 33 (id=141): r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x0, 0x2, {0x5}}, @NFQA_CFG_CMD={0x0, 0x1, {0x2, 0x0, 0x28}}, @NFQA_CFG_MASK={0x0, 0x4, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x2b8, 0x25c, 0xf0, 0x7, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff], [], 'macvlan1\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x4, 0x2}, 0x16c, 0xa8, 0xf0, 0xa010000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffb}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'wlan1\x00', {0xff}, {0xff}, 0x88, 0xa, 0x5, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) pread64(r1, 0x0, 0x0, 0x4eb) creat(&(0x7f0000000140)='./file0\x00', 0x106) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002400810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802dd", 0x27}, {&(0x7f0000001440)="f6e14ee68a9418", 0x7}], 0x2}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1800, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pL/kNxyX8oLvkPxSX/objkPxSX/Ifikv9QXK35L/2hmAZHXt1MImL9PXfVH6ne7FzOr+0B7iDb24n/5A8F5bM/FFdPtzsAdI3v+MDevzk74li7E4sH3xfgcJS63QGga0aP2/+DorL+D8Vl/R+Ky2d8wPo/FI/1fyiu/jb3/3pby727JiLinoj4UfnI0ea9voD/X/0Rr7949VvPRJR+n2Sf/0cHTvVPv/Ha91rb9SZ/rW8R9EbEJ1986gvPTa+sLD2a1v/5Rv3KF7P6x7o1GqATzTxt5jFQXMura3PTtVp1SUFBoXCF5jxwubIx23wc1tzzwsMRb76/cRFCGvdK9mic7cnWJo/V9yj7tpJbrlVIDmDv8jOnI9afj4j788afZPc7b+x89G2Vd8V/e/acPo5n6ydpm+EO45fv2V/8B1rij7TEf0eH8Tc/0mHD22Tw692N//Ivs9d/oqcn7/Xf77UxQ//m/BNf3WeAffrNr7sb/9RId+N/fiHi1XT+mcjLv1Kaljd2PnfOP/0t10n/tz41enP+u7Jr/ivdmP/Kbea/Ex3G+eHT1Y/l1Zd/HPHm8xEP5MZvxjtWj9W3VdoV/2TL/PPgHvH/8OGfzuXVn30tYvtyxGjkx2+NNb4yvzi+vLp2+uL89Ex1pnqpUnl8anJy6szkxHh9jXq8uVK925PXhz+QV3/yy43x97WJ3xx/u9d/e48xt1r70sf735lT/5PjjfgPnsx//4ey+I3Xv2dX/Hdlz+m/k39k1/Kmba5FxNGs/qGI+M4rgw/n9etD1xvxz7cZf+mW+LvH/0iH4//sr/75bF79cx/s8C8AAA5U+6WBbvcMAAA4aIex09jtMQL5+rZ6o3UbOFlv2VdYv7mvkNZfy/YXyusRf8v2GNL6h7JdsrScu9EA/M8ZXnv3z7vdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICiW15dm5uu1apLy93uCXDY/hUAAP//T2kBHQ==") utime(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000008406010000000000000300000d"], 0x0, 0x4a, 0x0, 0x8, 0x4}, 0x28) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'bridge_slave_0\x00', {0x2, 0x0, @multicast1}}) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xfd, 0x4e1d, 0x0, @empty, 0x1}, 0x1c, 0x0}, 0x440e0) 47.835997801s ago: executing program 0 (id=567): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0xa, 0x0, 0x8, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0xa4, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d7440d73161feeb0f24cb1", 0x1d) 47.686948748s ago: executing program 0 (id=569): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x64, 0x100, 0x0) pwritev(r1, &(0x7f0000001400)=[{&(0x7f0000000040)="b213", 0x2}, {0x0}], 0x2, 0xffffff01, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003240)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8040) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x3b6, &(0x7f00000006c0)="$eJzs3cFrm2UYAPCnadd20zUFRVARXwYevISu/gMrsoFYUOYi04PwzaYakiUjCZUM0eHFq/+B9+HRmyD+Azvo3Zu3XTzuMPZJ8iVd0mWbtbZh+vtB+Z587/t8fb835OPJITx3r353vbHbrexmvShdSFGKiNK9iPVhVFgYHUvDeDkm3Yo3y1d/f+2Djz5+d2t7++LllC5tXXlrM6W09vrPX3z5w7lfes99+OPaTytxZ/2Tu39u/nHnpTsv331w5fN6N9W7aandS1m61m73smvNWtqpdxuVlN5v1rJuLdVb3Vpnany32b5xo5+y1s7ZMzc6tW43Za1+atT6qddOvbV+yj7L6q1UqVTS2TPB01RvX76cbRXx6hPmXTipBXEMOp2tbPAZXnlkpHp7LgsCAObqqPX/8tHq/9Z0/X8quo3KC28Ulz50/d9R/x/SZP3Pf9Wg/l8efX4jIn/4PUD9DwAAAAAAAAAAAAAAz4J7eV7O87w8Pu7/OGD0es7L45g98v4f+Jv3+jheEz/cW41ofrtX3asWx2J8azfq0YxabEQ57g8eC2NFfOmd7YsbaWg9zl7/eph/7teI6uJ0/vkox/rs/PNFftrPj8HxVJyZzN+Mcrw4O39zZv5ybHw/kV+Jcvz2abSjGTvDx9vD/K/Op/T2e9sH8leG8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4f6iksVej6Hu/V404HXuj/v2VhxPWp/vjF/mj/vql2Ihy3J/dn39jZn/+pXhlab73DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABj3f7NRtZs1jonFYx7/g/PLI+Dx2ctFNNvHRg6HdOTV552nb8f5HmeP8jzfGqodKjrnB7d5IyhwZW/WS2GizM7rX9re1cXTvStPEpwKiKeMCcfbeDk0GL8k//1/P4+z5yzEhHHeqdrg6A0/w0/dHDijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MXC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTh4JmsuxmMmPy6Y9z0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//xp0CCU=") pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 46.867693959s ago: executing program 0 (id=580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x67, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2a080503f8fbed353b26ff3cd072233a8f531620fe509bb67fe9c2ff966aa29c29701ed497979fbfd858fb3f644c01d74b1aac0eb803deaf2b2150d0b8c921a3448dce2844178dc5d4fcd9dd47d19ee5cd2f1aba60793cbf0cc6aa"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x9dff, 0x1, "3d52e3ff00"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040207fe056406040c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) pwritev(r3, 0x0, 0x0, 0xffffffff, 0x5) 45.905223158s ago: executing program 0 (id=590): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0xffffffff}, @in6={0xa, 0x4e24, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}], 0x38) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d8}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x2, 0x2, 0x46b, 0x0, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) writev(r9, &(0x7f0000000380)=[{&(0x7f0000000040)='4', 0xff1a}], 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x44000) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) 43.643572581s ago: executing program 0 (id=604): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x1000) ioctl$EVIOCSREP(r6, 0x40084503, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000fc0)=@filter={'filter\x00', 0xc, 0x4, 0x2d8, 0xffffffff, 0x0, 0x178, 0x178, 0x98, 0xffffffff, 0x240, 0x240, 0x241, 0x98, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x0, 0xffffffff, 'tunl0\x00', 'ipvlan1\x00', {}, {}, 0x1d, 0x3, 0x40}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "92b7", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0xa5}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, 'l/', 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200", @ANYRES64=r5], 0x108}}], 0x2, 0xc040) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002200000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9, 0xffffffffffffffff}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r10, 0x0, &(0x7f00000003c0)=""/176}, 0x20) 42.755554995s ago: executing program 0 (id=612): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) readv(r5, &(0x7f0000000780)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) r6 = dup(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) 27.459222543s ago: executing program 34 (id=612): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) readv(r5, &(0x7f0000000780)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) r6 = dup(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) 11.091485833s ago: executing program 6 (id=823): socket$kcm(0xa, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x64, 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 10.202233998s ago: executing program 6 (id=827): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0xffffffff}, @in6={0xa, 0x4e24, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}], 0x38) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d8}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}, 0x4048043) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x2, 0x2, 0x46b, 0x0, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) writev(r9, &(0x7f0000000380)=[{&(0x7f0000000040)='4', 0xff1a}], 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x44000) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) 6.631474328s ago: executing program 6 (id=832): socket$kcm(0xa, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x64, 0x100, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 6.629006108s ago: executing program 4 (id=833): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) setregid(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") (async) r3 = syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x121000, 0x0) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x5, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40009}, 0x40800) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x1fffffe}, 0xf) (async) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x1, 0x1fffffe}, 0xf) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) write(r3, &(0x7f0000000380)="b0d2e4295371b7d23264000363038265e9cba1dfed7828fec8d4820118f6591b5151d33a1767941254d92cc65a9525b36810fc023781c32d20312d05b80d135297180efb28", 0x45) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0000000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) recvmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000400)=@sco, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/8, 0x8}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000580)=""/92, 0x5c}], 0x3, &(0x7f0000000600)=""/232, 0xe8}, 0x0) (async) recvmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000400)=@sco, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/8, 0x8}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000580)=""/92, 0x5c}], 0x3, &(0x7f0000000600)=""/232, 0xe8}, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) 5.778150331s ago: executing program 6 (id=837): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001e80)={'syz', 0x1}, &(0x7f0000000080)='blake2b-256-generic\x00\v\xe5\xa1\"\x05<\x99\xd3U\xf8\x9cb\xfa\xb5\xd8\x1et\x05s\x95\xd9\xbd>\x97\x90\xde#\xb1&b\fy\x96b\xecc\xdbr\x94\x0e+?\xea\x1ey\x1a\xa4@\xb3\bV\xb7\xc3k\x9113,', 0xfffffffffffffffd) move_mount(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r5) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20000080) request_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffc) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000240)=0x1, 0x27) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000180)=0xd8e, 0x4) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x4003, @empty, 0xa}, 0x1c) 5.431303207s ago: executing program 3 (id=840): socket$kcm(0xa, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 5.233385548s ago: executing program 7 (id=842): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x2}], 0x1, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.889731875s ago: executing program 6 (id=845): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0xffffffff}, @in6={0xa, 0x4e24, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}], 0x38) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d8}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0xfdac}], 0x1}, 0x4048043) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) fcntl$lock(r7, 0x25, &(0x7f00000000c0)={0x2, 0x2, 0x46b, 0x0, 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) writev(r8, &(0x7f0000000380)=[{&(0x7f0000000040)='4', 0xff1a}], 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x44000) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf}}, 0xffffec47, 0x9, 0xa, 0x0, 0x40, 0xffff0001}, 0x9c) 4.533140833s ago: executing program 3 (id=847): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r0, 0x2f, 0x0) msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$eJzs3T9oJFUcB/Df7B/jJotGbQTxD4iIBkLsBJvYKAQkBBFBhYiIlSRCTLDLWtlYaK0SEGyC2BktxSbYKIJV1BS55uAuXHHhirtij9nZDZtkw132b9j5fGDZN3nvzXs7yfdNWJiZAHJrOiLmI6IYETMRUY6IpL3BM9lrurm5VdldjqjX37yRNNpl25lWv6mIqEXEyxGlVt3GzrsHt/Zef/7L9fJzP+y8UxnW52t3eLD/xtF3i1/8vPDSxl//XFtMYj6qzbr2z9FPSYeflZKIRwcx2CWRlEY9A+7H0mc//Zvm/rGIeLaR/3IUmpH9au2B38vx4rfn9f36+t9PDHOuQP/V6+X0HFirA7lTiIhqJIXZiMjKhcLsbPY//H/FycLHq2ufzny0ur7yYaMauKyqF2ma7L/268QvU6fyf7WY5R8YX9WI/beWtv9Py0fFUc8GGJj2b9ufzN7S/M+8v/lCyD/kjvxDfsk/5Jf8wxjoMrvyD/nVS/4fHNCcgOFw/ofx83CrUG4Vah3byT/kl/zDmPq+01WnJ8k/5Fd7/gGAfKlPjPoKZGBURr3+AAAAAAAAAAAAAAAAAAAAZ21Vdpdbr2GN+cc3EYevRkSp0/jF5gPHs7uNT95M0mbHkqxbT957uscd9OjHvl19Xemq10NX+jV+d/58ajD7/fzk5rkHZ3MlopY2niuVzv79JT0/8P6Re9SXP+hxgAs6fVfAV94e7vin3dke7fgLexG/pevPXHP9SQ/Q8e+/EI833juvP9X2Wyx36ZPbPe4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAobkbAAD//2SKbDc=") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="000000040000000000eaff001e00009763df13003ec1cb3440cd6c64281fb0d28842873b6633916dcc8d8de3833ffafaa30ac26b9a2dbdb2048f6ea043353f2d940db158cdcd98ddcfeb65", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) process_vm_readv(0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/43, 0x2b}], 0x3, &(0x7f0000000300)=[{&(0x7f0000000340)=""/111, 0x6f}], 0x1, 0x0) 4.279164366s ago: executing program 7 (id=848): socket$kcm(0xa, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x64, 0x100, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.972569411s ago: executing program 7 (id=849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x5, 0x3, 0x5, 0x902, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e4}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000300)=""/42, 0x2a, 0x0, &(0x7f00000003c0)=""/177, 0xb1}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001280)={r8, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000019c7440000080000000000000000000000008bd02800", [0xe0]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r11, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x5a, 0xfffeffff, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc2dc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r12}, &(0x7f0000000a00), &(0x7f00000003c0)}, 0x20) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x94, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) r16 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r16, 0xc08c5336, &(0x7f0000000b80)={0x7f, 0x8, 0x0, 'queue0\x00', 0xfffffffd}) recvmsg$unix(r16, &(0x7f0000000d80)={&(0x7f0000000c40), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000280)=""/52, 0x34}], 0x1, &(0x7f0000000d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x12000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x1f, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x4, 0x0, 0xb, 0x8, 0x1, 0x50, 0x10}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x6}, 0x10, r7, 0xffffffffffffffff, 0xa, &(0x7f0000000640)=[r8, r12, r13, r14, r15, r16], &(0x7f0000000740)=[{0x1, 0x3, 0x9, 0xc}, {0x2, 0x5, 0x0, 0x5}, {0x2, 0x3, 0xb, 0x5}, {0x1, 0x4, 0x1, 0x5}, {0x4, 0x3, 0xd, 0x9}, {0x5, 0x1, 0x1, 0x9}, {0x5, 0x3, 0xf, 0x1}, {0x0, 0x3, 0xffff, 0x7}, {0x5, 0x4, 0x8, 0x6}, {0x2, 0x1, 0xf, 0x3}], 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x7, 0x2000000, @val=@tcx={@void, @value=r0}}, 0x1c) 1.970625741s ago: executing program 6 (id=850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00'}, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @remote, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0x21, 0x0, 0x0, @multicast1, @remote}}}}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r5 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x9, 0x3, 0x340, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, &(0x7f0000000140), {[{{@ipv6={@private0, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xffffffff, 0xff], [0x0, 0xff, 0xffffffff, 0xff0000ff], 'bond_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x16, 0x1, 0x1, 0x1}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1e, 0x7fff, 0x185, 0x4, 'syz1\x00', 'syz0\x00', {0x7}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @loopback}, [0xffffff00, 0xff000000, 0xffffffff, 0x808000ff], [0xff, 0xff, 0xffffffff, 0xff000000], 'batadv_slave_1\x00', 'batadv0\x00', {}, {0xff}, 0x0, 0x1, 0x7, 0x8}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x62d5, 0xe0000000, 0x81, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) dup2(r6, r7) tkill(r5, 0x13) 1.734961073s ago: executing program 7 (id=851): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x194, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x6f, 0x6, "7461dd987c31bff375737fa74bae0a3fbf9921110fb5e5c65dc447849dd4d4bc1c94af38abf4e1a15ea241acde38d2dd8bca5f61425510e706deb49f1afc9886713120f050cbe48c2f6ae02e3834737dff070c81e3bcb47aff236f9ceb06e0dd6c5c5dc07a4f885c74e327"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xd0, 0x6, "d49098e9c8fea967fe1953c95ede9c70ceb2f549baad602064b228b25b1c284892ef7c5ca2c7a9558a313c8268f9aa26b9e67e648870794dd031dd716c1ea38ed231ea3e42d9f9256f123c26f2a5088a90eeb6cffa1b2e236cc4ce22be9c9b14be71006bd37ef61bf8caa235f87457609927b50b7673b4c3235a5af42d5bd63eb29634b2653fa9386502d5c4f5e945a8e1f59394f3be3c75e5aa8681575f72cd2693fe22fabd7ca94a82c604267b0a8a09f353362f40adc39f061681b6cabbd9033f1430d85fa7a38b7efe34"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x1bc}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x1000) ioctl$EVIOCSREP(r6, 0x40084503, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000fc0)=@filter={'filter\x00', 0xc, 0x4, 0x2d8, 0xffffffff, 0x0, 0x178, 0x178, 0x98, 0xffffffff, 0x240, 0x240, 0x241, 0x98, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x0, 0xffffffff, 'tunl0\x00', 'ipvlan1\x00', {}, {}, 0x1d, 0x3, 0x40}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "92b7", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0xa5}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, 'l/', 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200", @ANYRES64=r5], 0x108}}], 0x2, 0xc040) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002200000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9, 0xffffffffffffffff}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r10, 0x0, &(0x7f00000003c0)=""/176}, 0x20) 1.637452818s ago: executing program 3 (id=853): socket$kcm(0xa, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x64, 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.221333719s ago: executing program 3 (id=854): socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 1.079026306s ago: executing program 3 (id=855): ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00') r4 = syz_io_uring_setup(0x8ec4, &(0x7f00000003c0)={0x0, 0x2b50, 0x2, 0x5, 0xf0, 0x0, r2}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0x3) io_uring_enter(r4, 0x5fb, 0xe876, 0x3, 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) fallocate(r6, 0x3, 0x4100, 0x8000c62) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r7, &(0x7f0000000d40)=""/43, 0x2b) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") bpf$PROG_LOAD(0x5, 0x0, 0x0) 966.742032ms ago: executing program 4 (id=856): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000c80)=0x6, 0x12) pipe(&(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 888.068496ms ago: executing program 7 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280), &(0x7f0000048000)=0x1, 0x0) (fail_nth: 9) bpf$PROG_LOAD(0x5, 0x0, 0x0) 794.8524ms ago: executing program 5 (id=858): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 674.609866ms ago: executing program 4 (id=859): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$sock(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="643f0e91", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3ff0000}}], 0x18}}], 0x2, 0x44840) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xac, 0x0, 0x6, 0x0, 0x0, 0x480000000000000b, 0x154b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11eba, 0x4, 0x98, 0x0, 0x2, 0x81, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000006ba29c5bb45fad88c4f97e2d5eb0871d9c97ecf2df00edda315ed98e51d3a63063afb3336f148a464ec4e54b96d9d566bac3b9b226a44e12418ccf7b7be8c27651fb19872a347e06c0e1c849397e4df49d7ffaf003ad32407e55d423d43af5a5069f834569", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf250e00000008002b00f70c000008003100050000000800320005"], 0x34}, 0x1, 0x0, 0x0, 0x20040091}, 0x4000000) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x0, @perf_config_ext={0x3, 0x8001}, 0x2000, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x4000, 0x5, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000010140)=""/180, 0xb4}], 0x1}, 0xfffffffe}], 0x1, 0x40000002, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 579.623901ms ago: executing program 3 (id=860): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0xffffffff}, @in6={0xa, 0x4e24, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}], 0x38) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d8}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0xfdac}], 0x1}, 0x4048043) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) writev(r7, &(0x7f0000000380)=[{&(0x7f0000000040)='4', 0xff1a}], 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x44000) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf}}, 0xffffec47, 0x9, 0xa, 0x0, 0x40, 0xffff0001}, 0x9c) 517.528034ms ago: executing program 4 (id=861): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xfffffffffffffdef, 0x7) 446.875968ms ago: executing program 5 (id=862): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0xfffffffd, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000b00)=ANY=[@ANYRES32=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000040601040000000000000000070000060500010007000000a06589b36e5bd1ac0950b553a2b7988b11ff6d30d0976f413235f6252dc54c016a95b60b6dd4b22dad2bb0963646194a5134b8ac"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20008000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = socket$inet_sctp(0x2, 0x5, 0x84) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r12], 0x20, 0x6044}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fc0803ff0000000000200000850000004100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000480d000000000000ff7f0000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000001834000005000000000000000000300085000000ca00000318360000050000000000000000000000850000008f0000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0xae00000, 0xa7, &(0x7f0000000580)=""/167, 0x41000, 0x0, '\x00', r7, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xc, 0x8, 0x5}, 0x10, r8, 0xffffffffffffffff, 0x3, &(0x7f0000000900)=[r9, 0x1], &(0x7f0000000940)=[{0x5, 0x4, 0x1, 0xa}, {0x5, 0x1, 0xc, 0x6}, {0x3, 0x2, 0x2, 0x1}], 0x10, 0x1}, 0x94) r13 = socket$kcm(0x2, 0xa, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1, 0x100f7309, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x7f40, 0x20, 0x4000009, 0xffffffef, {{0x5, 0x4, 0x3, 0x2b, 0x14, 0x63, 0x0, 0x7, 0x29, 0x0, @broadcast, @multicast2}}}}) write$tun(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 434.767688ms ago: executing program 4 (id=863): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4200800}, 0xc, &(0x7f0000000500)={&(0x7f0000000940)={0x1d4, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000004}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6c6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6151}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ffffffffffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x408000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000002}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x32}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0xfffffffffffffd25, 0x1, 0x256}]}]}, 0x1d4}}, 0x48840) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a400030062", @ANYRES32, @ANYRES64], 0x118}, 0x1, 0x0, 0x0, 0x24000104}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x409}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0x4, 0x1, 0x2, [{0x1, 0x2, 0x2}]}]}, {0x0, [0x61, 0x6f, 0x30]}}, &(0x7f0000002cc0)=""/4085, 0x35, 0xff5, 0x9}, 0x28) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x800000, &(0x7f0000000100)='syzkaller\x00') 414.29308ms ago: executing program 4 (id=864): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x80, 0x0, 0x7, 0x7, 0x2}, {0x8, 0x1, 0x3, 0x5, 0xe595, 0x671}, 0x10001, 0xae35, 0x169}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x908b43c158034cdb}, @TCA_TBF_RATE64={0xc, 0x4, 0x3cb8956c9a0790f9}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0xc010) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r6, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500160001000000080015"], 0x48}}, 0x0) 234.988628ms ago: executing program 5 (id=865): add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0x20, 0x65, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x41}, {[@ssrr={0x89, 0x3, 0xf3}, @cipso={0x86, 0x8, 0x0, [{0xa1f7f42d7775aef7, 0x2}]}]}}}}}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000400000002000000010000fb0100000004000000ffff0f000200000025ff005f00"/68], 0x0, 0x44, 0x0, 0x1}, 0x28) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x9, 0xf, 0xdcb81c31, 0xec, 0x364530d6, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}], 0x3, 0x400000a0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) listen(r0, 0x3) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x9, 0xa5, 0x7f, 0x3, 0x0, 0x400, 0x10200, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x37ae8756499915c2, 0x7fffffff, 0x4, 0x3, 0x3, 0x9, 0x6, 0x0, 0x4, 0x0, 0x8000000000000000}, r1, 0x7, r4, 0x0) 188.311841ms ago: executing program 5 (id=866): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/18, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 174.320632ms ago: executing program 5 (id=867): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) unshare(0x2c020400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) ioctl$BLKPG(r0, 0x1275, 0x0) 71.003586ms ago: executing program 5 (id=868): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x194, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x6f, 0x6, "7461dd987c31bff375737fa74bae0a3fbf9921110fb5e5c65dc447849dd4d4bc1c94af38abf4e1a15ea241acde38d2dd8bca5f61425510e706deb49f1afc9886713120f050cbe48c2f6ae02e3834737dff070c81e3bcb47aff236f9ceb06e0dd6c5c5dc07a4f885c74e327"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xd0, 0x6, "d49098e9c8fea967fe1953c95ede9c70ceb2f549baad602064b228b25b1c284892ef7c5ca2c7a9558a313c8268f9aa26b9e67e648870794dd031dd716c1ea38ed231ea3e42d9f9256f123c26f2a5088a90eeb6cffa1b2e236cc4ce22be9c9b14be71006bd37ef61bf8caa235f87457609927b50b7673b4c3235a5af42d5bd63eb29634b2653fa9386502d5c4f5e945a8e1f59394f3be3c75e5aa8681575f72cd2693fe22fabd7ca94a82c604267b0a8a09f353362f40adc39f061681b6cabbd9033f1430d85fa7a38b7efe34"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x1bc}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x1000) ioctl$EVIOCSREP(r6, 0x40084503, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000fc0)=@filter={'filter\x00', 0xc, 0x4, 0x2d8, 0xffffffff, 0x0, 0x178, 0x178, 0x98, 0xffffffff, 0x240, 0x240, 0x241, 0x98, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x0, 0xffffffff, 'tunl0\x00', 'ipvlan1\x00', {}, {}, 0x1d, 0x3, 0x40}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "92b7", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0xa5}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, 'l/', 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200", @ANYRES64=r5], 0x108}}], 0x2, 0xc040) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002200000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9, 0xffffffffffffffff}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r10, 0x0, &(0x7f00000003c0)=""/176}, 0x20) 0s ago: executing program 7 (id=869): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000c80)=0x6, 0x12) pipe(&(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xae8, 0x863, 0x0) kernel console output (not intermixed with test programs): bling bearer [ 104.646635][ T5232] netlink: 20 bytes leftover after parsing attributes in process `syz.5.386'. [ 104.659390][ T28] audit: type=1400 audit(1774540934.523:658): avc: denied { execute } for pid=5231 comm="syz.5.386" path="/35/cpu.stat" dev="tmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.723155][ T5238] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.738232][ T5238] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.791269][ T5251] dummy0 speed is unknown, defaulting to 1000 [ 104.813277][ T5238] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 104.844666][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.950909][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.028803][ T5269] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.053400][ T5269] EXT4-fs (loop3): 1 truncate cleaned up [ 105.074626][ T5269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.175139][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.338472][ T5337] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.354110][ T5337] EXT4-fs error (device loop3): ext4_init_orphan_info:618: comm syz.3.394: orphan file block 0: bad magic [ 105.383550][ T5337] loop3: lost filesystem error report for type 5 error -117 [ 105.383729][ T5337] EXT4-fs (loop3): Remounting filesystem read-only [ 105.391063][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 105.391083][ C0] EXT4-fs (loop3): initial error at time 1774540935: ext4_init_orphan_info:618 [ 105.391105][ C0] EXT4-fs (loop3): last error at time 1774540935: ext4_init_orphan_info:618 [ 105.454584][ T5343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 105.460946][ T5337] EXT4-fs (loop3): mount failed [ 105.467761][ T5343] FAT-fs (loop4): Filesystem has been set read-only [ 105.488517][ T5343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 105.497481][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 105.512228][ T5343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 105.515131][ T28] audit: type=1400 audit(1774540935.373:659): avc: denied { getopt } for pid=5342 comm="syz.4.399" lport=36301 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 105.532603][ T5343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 105.552114][ T5343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 105.561421][ T5343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 105.569895][ T5343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 105.577952][ T5343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 105.585929][ T5343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 105.594052][ T5343] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 105.665407][ T5362] netlink: 165 bytes leftover after parsing attributes in process `syz.0.401'. [ 105.706438][ T5362] hub 8-0:1.0: USB hub found [ 105.711164][ T5362] hub 8-0:1.0: 8 ports detected [ 105.722052][ T5362] netlink: 'syz.0.401': attribute type 10 has an invalid length. [ 105.729851][ T5362] macvlan1: entered allmulticast mode [ 106.210506][ T5383] set_capacity_and_notify: 11 callbacks suppressed [ 106.210524][ T5383] loop3: detected capacity change from 0 to 4096 [ 106.211530][ T5385] loop6: detected capacity change from 0 to 512 [ 106.241161][ T5385] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 106.252129][ T5389] loop4: detected capacity change from 0 to 4096 [ 106.281337][ T5385] EXT4-fs (loop6): 1 truncate cleaned up [ 106.290170][ T5383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.309410][ T5389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.315698][ T5385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.461910][ T5406] loop0: detected capacity change from 0 to 512 [ 106.469012][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.530179][ T5415] loop6: detected capacity change from 0 to 1024 [ 106.574295][ T5415] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 106.614374][ T5415] System zones: 0-1, 3-36 [ 106.620215][ T5415] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.409: bad orphan inode 134217728 [ 106.630846][ T5415] loop6: lost filesystem error report for type 5 error -117 [ 106.648314][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 106.649816][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.655660][ C0] EXT4-fs (loop6): initial error at time 1774540936: ext4_orphan_get:1417 [ 106.655680][ C0] EXT4-fs (loop6): last error at time 1774540936: ext4_orphan_get:1417 [ 106.662548][ T5415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.671036][ C0] [ 106.727966][ T5424] loop0: detected capacity change from 0 to 8192 [ 106.840704][ T5440] FAULT_INJECTION: forcing a failure. [ 106.840704][ T5440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.845282][ T5436] dummy0 speed is unknown, defaulting to 1000 [ 106.868870][ T5440] CPU: 1 UID: 0 PID: 5440 Comm: syz.3.412 Not tainted syzkaller #0 PREEMPT(full) [ 106.869067][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.869079][ T5440] Call Trace: [ 106.869084][ T5440] [ 106.869090][ T5440] __dump_stack+0x1d/0x30 [ 106.869117][ T5440] dump_stack_lvl+0x95/0xd0 [ 106.869143][ T5440] dump_stack+0x15/0x1b [ 106.869172][ T5440] should_fail_ex+0x263/0x280 [ 106.869199][ T5440] should_fail+0xb/0x20 [ 106.869220][ T5440] should_fail_usercopy+0x1a/0x20 [ 106.869247][ T5440] _copy_from_user+0x1c/0xb0 [ 106.869307][ T5440] do_sys_poll+0x137/0xc10 [ 106.869333][ T5440] ? avc_has_perm_noaudit+0xab/0x130 [ 106.869360][ T5440] ? avc_has_perm+0x101/0x190 [ 106.869409][ T5440] ? __fget_files+0x184/0x1c0 [ 106.869445][ T5440] __se_sys_ppoll+0x1e2/0x220 [ 106.869466][ T5440] ? fput+0x8f/0xc0 [ 106.869490][ T5440] __x64_sys_ppoll+0x67/0x80 [ 106.869558][ T5440] x64_sys_call+0x28d3/0x3020 [ 106.869588][ T5440] do_syscall_64+0x12c/0x370 [ 106.869610][ T5440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.869684][ T5440] RIP: 0033:0x7f3ff06ec799 [ 106.869699][ T5440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.869716][ T5440] RSP: 002b:00007f3fef126028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 106.869735][ T5440] RAX: ffffffffffffffda RBX: 00007f3ff0966090 RCX: 00007f3ff06ec799 [ 106.869751][ T5440] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 106.869765][ T5440] RBP: 00007f3fef126090 R08: 0000000000000000 R09: 0000000000000000 [ 106.869837][ T5440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.869849][ T5440] R13: 00007f3ff0966128 R14: 00007f3ff0966090 R15: 00007fff5c5a1d78 [ 106.869917][ T5440] [ 107.091858][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.300098][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.481125][ T5482] loop0: detected capacity change from 0 to 512 [ 107.487981][ T5482] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.508876][ T5482] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.416: orphan file block 0: bad magic [ 107.520486][ T5482] loop0: lost filesystem error report for type 5 error -117 [ 107.528321][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 107.542391][ C0] EXT4-fs (loop0): initial error at time 1774540937: ext4_init_orphan_info:618 [ 107.551662][ C0] EXT4-fs (loop0): last error at time 1774540937: ext4_init_orphan_info:618 [ 107.562264][ T5482] EXT4-fs (loop0): Remounting filesystem read-only [ 107.576644][ T5482] EXT4-fs (loop0): mount failed [ 107.596108][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 107.902001][ T5501] netlink: 165 bytes leftover after parsing attributes in process `syz.5.418'. [ 107.947351][ T5501] hub 8-0:1.0: USB hub found [ 107.952280][ T5501] hub 8-0:1.0: 8 ports detected [ 107.964906][ T5501] netlink: 'syz.5.418': attribute type 10 has an invalid length. [ 108.483343][ T28] audit: type=1400 audit(1774540938.343:660): avc: denied { map } for pid=5521 comm="syz.6.424" path="socket:[12293]" dev="sockfs" ino=12293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.550668][ T28] audit: type=1400 audit(1774540938.343:661): avc: denied { accept } for pid=5521 comm="syz.6.424" path="socket:[12293]" dev="sockfs" ino=12293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.576509][ T5519] loop0: detected capacity change from 0 to 4096 [ 108.588016][ T5519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.703461][ T5541] loop6: detected capacity change from 0 to 1024 [ 108.736182][ T5541] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 108.754378][ T5539] loop5: detected capacity change from 0 to 8192 [ 108.790163][ T5541] System zones: 0-1, 3-36 [ 108.831069][ T5541] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.427: bad orphan inode 134217728 [ 108.873858][ T5541] loop6: lost filesystem error report for type 5 error -117 [ 108.883539][ T5541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.131414][ T5557] dummy0 speed is unknown, defaulting to 1000 [ 109.217328][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.236179][ T5582] netlink: 60 bytes leftover after parsing attributes in process `syz.4.429'. [ 109.345787][ T5597] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 109.357910][ T5597] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.431: orphan file block 0: bad magic [ 109.398086][ T5597] loop5: lost filesystem error report for type 5 error -117 [ 109.398321][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 109.412075][ C0] EXT4-fs (loop5): initial error at time 1774540939: ext4_init_orphan_info:618 [ 109.421070][ C0] EXT4-fs (loop5): last error at time 1774540939: ext4_init_orphan_info:618 [ 109.428674][ T5597] EXT4-fs (loop5): Remounting filesystem read-only [ 109.445972][ T5597] EXT4-fs (loop5): mount failed [ 109.477261][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.431'. [ 109.524065][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.608595][ T28] audit: type=1400 audit(1774540939.473:662): avc: denied { read write } for pid=5622 comm="syz.4.435" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 109.633954][ T3559] hid-generic 0001:0000:FFFFFFF9.0001: item fetching failed at offset 14/59 [ 109.649407][ T3559] hid-generic 0001:0000:FFFFFFF9.0001: probe with driver hid-generic failed with error -22 [ 109.761100][ T5631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.780189][ T5631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.881462][ T28] audit: type=1400 audit(1774540939.473:663): avc: denied { open } for pid=5622 comm="syz.4.435" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 109.905694][ T5637] netlink: 165 bytes leftover after parsing attributes in process `syz.6.436'. [ 109.944963][ T5636] hub 8-0:1.0: USB hub found [ 109.949914][ T5636] hub 8-0:1.0: 8 ports detected [ 109.961094][ T5636] netlink: 'syz.6.436': attribute type 10 has an invalid length. [ 109.968916][ T5636] macvlan1: entered allmulticast mode [ 109.974828][ T5636] veth1_vlan: entered allmulticast mode [ 109.982744][ T5636] team0: Port device macvlan1 added [ 110.051201][ T5642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.177972][ T5648] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.254463][ T5648] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.296155][ T28] audit: type=1400 audit(1774540939.493:664): avc: denied { listen } for pid=5622 comm="syz.4.435" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.940529][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.240980][ T5663] set_capacity_and_notify: 3 callbacks suppressed [ 111.240999][ T5663] loop4: detected capacity change from 0 to 4096 [ 111.274813][ T5663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.470337][ T5672] netlink: 64 bytes leftover after parsing attributes in process `syz.3.440'. [ 111.505906][ T5674] netlink: 60 bytes leftover after parsing attributes in process `syz.6.442'. [ 111.535423][ T5672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.440'. [ 112.035244][ T3969] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.070398][ T5684] loop6: detected capacity change from 0 to 1024 [ 112.090036][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.137762][ T5684] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 112.160122][ T5684] System zones: 0-1, 3-36 [ 112.182318][ T5684] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.444: bad orphan inode 134217728 [ 112.207913][ T5697] siw: device registration error -23 [ 112.237229][ T5684] loop6: lost filesystem error report for type 5 error -117 [ 112.240804][ T5684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.249341][ T5701] loop5: detected capacity change from 0 to 128 [ 112.249666][ T5701] vfat: Unknown parameter '^}ùŽßÏ£¿|ý¨b'&Ùò_®§ôÆÛ[wåÏßþ' [ 112.398613][ T5697] dummy0 speed is unknown, defaulting to 1000 [ 112.695772][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.749713][ T5741] loop6: detected capacity change from 0 to 512 [ 112.765569][ T5736] siw: device registration error -23 [ 112.791957][ T5748] dummy0 speed is unknown, defaulting to 1000 [ 112.799867][ T5741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.870715][ T5736] dummy0 speed is unknown, defaulting to 1000 [ 113.129786][ T28] audit: type=1400 audit(1774540942.993:665): avc: denied { mount } for pid=5799 comm="syz.5.454" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 113.159161][ T5803] netlink: 60 bytes leftover after parsing attributes in process `syz.4.455'. [ 113.204314][ T28] audit: type=1326 audit(1774540942.993:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 113.248692][ T28] audit: type=1326 audit(1774540942.993:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 113.302368][ T28] audit: type=1326 audit(1774540942.993:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 113.425504][ T28] audit: type=1326 audit(1774540942.993:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efcf12ac502 code=0x7ffc0000 [ 113.453998][ T5812] loop5: detected capacity change from 0 to 512 [ 113.473766][ T28] audit: type=1326 audit(1774540942.993:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 113.514311][ T5812] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 113.528779][ T5815] loop4: detected capacity change from 0 to 4096 [ 113.549409][ T5815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.573784][ T5812] EXT4-fs (loop5): 1 truncate cleaned up [ 113.579958][ T28] audit: type=1326 audit(1774540943.013:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 113.625923][ T5812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.689391][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.750053][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.786839][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.796583][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.807302][ T5830] veth1_vlan: left allmulticast mode [ 113.846673][ T5830] macvlan1: left allmulticast mode [ 113.858152][ T5830] netlink: 44 bytes leftover after parsing attributes in process `syz.6.459'. [ 113.906493][ T5843] siw: device registration error -23 [ 113.980751][ T5843] dummy0 speed is unknown, defaulting to 1000 [ 114.170749][ T5872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.463'. [ 114.189470][ T5847] dummy0 speed is unknown, defaulting to 1000 [ 114.234180][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.464113][ T5912] loop0: detected capacity change from 0 to 128 [ 114.488758][ T5912] vfat: Unknown parameter '^}ùŽßÏ£¿|ý¨b'&Ùò_®§ôÆÛ[wåÏßþ' [ 114.497525][ T5916] FAULT_INJECTION: forcing a failure. [ 114.497525][ T5916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.550842][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: syz.6.467 Not tainted syzkaller #0 PREEMPT(full) [ 114.550880][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.550910][ T5916] Call Trace: [ 114.550917][ T5916] [ 114.550925][ T5916] __dump_stack+0x1d/0x30 [ 114.550954][ T5916] dump_stack_lvl+0x95/0xd0 [ 114.550980][ T5916] dump_stack+0x15/0x1b [ 114.551082][ T5916] should_fail_ex+0x263/0x280 [ 114.551166][ T5916] should_fail+0xb/0x20 [ 114.551192][ T5916] should_fail_usercopy+0x1a/0x20 [ 114.551221][ T5916] _copy_to_user+0x20/0xa0 [ 114.551312][ T5916] simple_read_from_buffer+0xb5/0x130 [ 114.551337][ T5916] proc_fail_nth_read+0x10e/0x150 [ 114.551371][ T5916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.551404][ T5916] vfs_read+0x1ab/0x7f0 [ 114.551459][ T5916] ? mutex_unlock+0x4e/0x90 [ 114.551497][ T5916] ? __rcu_read_unlock+0x4e/0x70 [ 114.551520][ T5916] ? __fget_files+0x184/0x1c0 [ 114.551598][ T5916] ? mutex_lock+0x57/0x90 [ 114.551631][ T5916] ksys_read+0xdc/0x1a0 [ 114.551652][ T5916] __x64_sys_read+0x40/0x50 [ 114.551672][ T5916] x64_sys_call+0x2886/0x3020 [ 114.551797][ T5916] do_syscall_64+0x12c/0x370 [ 114.551823][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.551857][ T5916] RIP: 0033:0x7f1bb30ecfce [ 114.551870][ T5916] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.551887][ T5916] RSP: 002b:00007f1bb1b7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.551917][ T5916] RAX: ffffffffffffffda RBX: 00007f1bb1b7f6c0 RCX: 00007f1bb30ecfce [ 114.551933][ T5916] RDX: 000000000000000f RSI: 00007f1bb1b7f0a0 RDI: 0000000000000007 [ 114.551948][ T5916] RBP: 00007f1bb1b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.551962][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.551976][ T5916] R13: 00007f1bb33a6038 R14: 00007f1bb33a5fa0 R15: 00007ffef2e4a018 [ 114.552006][ T5916] [ 114.797668][ T5924] netlink: 60 bytes leftover after parsing attributes in process `syz.6.468'. [ 114.961217][ T5824] Set syz1 is full, maxelem 65536 reached [ 114.982713][ T5929] loop6: detected capacity change from 0 to 512 [ 115.023143][ T5935] loop6: detected capacity change from 0 to 512 [ 115.044282][ T5935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.370308][ T5948] siw: device registration error -23 [ 115.593933][ T5950] dummy0 speed is unknown, defaulting to 1000 [ 115.779830][ T5972] loop3: detected capacity change from 0 to 4096 [ 116.815647][ T5981] netlink: 165 bytes leftover after parsing attributes in process `syz.0.475'. [ 116.877482][ T5980] hub 8-0:1.0: USB hub found [ 116.879900][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.882147][ T5980] hub 8-0:1.0: 8 ports detected [ 116.902350][ T5972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.945925][ T5987] loop4: detected capacity change from 0 to 128 [ 116.972217][ T5987] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.010876][ T5987] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.322147][ T6004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.479'. [ 118.140436][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.678924][ T6024] loop0: detected capacity change from 0 to 128 [ 120.488361][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 120.488400][ T28] audit: type=1400 audit(1774540950.343:683): avc: denied { read } for pid=6042 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.531857][ T6074] netlink: 165 bytes leftover after parsing attributes in process `syz.3.489'. [ 121.543817][ T6068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.490'. [ 121.574573][ T6074] hub 8-0:1.0: USB hub found [ 121.579357][ T6074] hub 8-0:1.0: 8 ports detected [ 121.630551][ T6051] netlink: 'syz.6.485': attribute type 29 has an invalid length. [ 121.640601][ T6051] netlink: 'syz.6.485': attribute type 29 has an invalid length. [ 121.738420][ T28] audit: type=1400 audit(1774540951.573:684): avc: denied { create } for pid=6050 comm="syz.6.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 121.879633][ T28] audit: type=1400 audit(1774540951.653:685): avc: denied { read } for pid=6050 comm="syz.6.485" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 121.908327][ T28] audit: type=1400 audit(1774540951.653:686): avc: denied { open } for pid=6050 comm="syz.6.485" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 122.457703][ T6100] loop3: detected capacity change from 0 to 512 [ 122.744131][ T6108] loop3: detected capacity change from 0 to 128 [ 122.779409][ T28] audit: type=1400 audit(1774540952.643:687): avc: denied { bind } for pid=6109 comm="syz.6.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.829919][ T6108] FAT-fs (loop3): Directory bread(block 524322) failed [ 123.038915][ T6108] FAT-fs (loop3): Directory bread(block 524323) failed [ 123.100959][ T6108] FAT-fs (loop3): Directory bread(block 524324) failed [ 123.113495][ T28] audit: type=1400 audit(1774540952.663:688): avc: denied { setopt } for pid=6109 comm="syz.6.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.178953][ T6108] FAT-fs (loop3): Directory bread(block 524325) failed [ 123.185856][ T6108] FAT-fs (loop3): Directory bread(block 524326) failed [ 123.239089][ T6108] FAT-fs (loop3): Directory bread(block 524327) failed [ 123.268374][ T6108] FAT-fs (loop3): Directory bread(block 524328) failed [ 123.275307][ T6108] FAT-fs (loop3): Directory bread(block 524329) failed [ 123.343460][ T6108] FAT-fs (loop3): Directory bread(block 524322) failed [ 123.371522][ T6108] FAT-fs (loop3): Directory bread(block 524323) failed [ 123.486996][ T6117] loop6: detected capacity change from 0 to 8192 [ 123.840020][ T28] audit: type=1400 audit(1774540953.703:689): avc: denied { connect } for pid=6136 comm="syz.5.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 123.901561][ T28] audit: type=1400 audit(1774540953.723:690): avc: denied { bind } for pid=6136 comm="syz.5.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 124.020178][ T28] audit: type=1400 audit(1774540953.883:691): avc: denied { write } for pid=6136 comm="syz.5.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.098538][ T6146] siw: device registration error -23 [ 124.208234][ T6156] dummy0 speed is unknown, defaulting to 1000 [ 124.282471][ T6146] dummy0 speed is unknown, defaulting to 1000 [ 124.352896][ T6170] dummy0 speed is unknown, defaulting to 1000 [ 124.550618][ T6223] dummy0 speed is unknown, defaulting to 1000 [ 124.774798][ T6078] delete_channel: no stack [ 125.110025][ T6268] loop3: detected capacity change from 0 to 1024 [ 125.153373][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.203116][ T6268] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 125.299737][ T6278] netlink: 88 bytes leftover after parsing attributes in process `syz.6.514'. [ 126.041822][ T6304] loop4: detected capacity change from 0 to 8192 [ 126.225668][ T28] audit: type=1400 audit(1774540956.083:692): avc: denied { getopt } for pid=6322 comm="syz.6.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.247070][ T6324] netlink: 16 bytes leftover after parsing attributes in process `syz.6.520'. [ 126.396372][ T6334] loop6: detected capacity change from 0 to 128 [ 126.433418][ T6334] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.446902][ T6332] loop0: detected capacity change from 0 to 1024 [ 126.480443][ T6332] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 126.506555][ T6332] System zones: 0-1, 3-36 [ 126.517623][ T6334] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.531815][ T6332] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.523: bad orphan inode 134217728 [ 126.639947][ T6349] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.661335][ T6332] loop0: lost filesystem error report for type 5 error -117 [ 126.667730][ T6332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.900617][ T6360] loop4: detected capacity change from 0 to 512 [ 126.928656][ T6360] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.956338][ T6360] EXT4-fs (loop4): 1 truncate cleaned up [ 126.973564][ T6360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.975200][ T6357] dummy0 speed is unknown, defaulting to 1000 [ 127.124579][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.291669][ T6387] loop4: detected capacity change from 0 to 1024 [ 127.334002][ T6387] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 127.372848][ T6387] System zones: 0-1, 3-36 [ 127.380077][ T6404] loop5: detected capacity change from 0 to 128 [ 127.395636][ T6387] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.528: bad orphan inode 134217728 [ 127.462789][ T6387] loop4: lost filesystem error report for type 5 error -117 [ 127.468368][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 127.482091][ C1] EXT4-fs (loop4): initial error at time 1774540957: ext4_orphan_get:1417 [ 127.490599][ C1] EXT4-fs (loop4): last error at time 1774540957: ext4_orphan_get:1417 [ 127.714900][ T6430] loop3: detected capacity change from 0 to 512 [ 127.818842][ T6430] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 127.826949][ T6430] FAT-fs (loop3): Filesystem has been set read-only [ 127.833903][ T6430] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 128.102154][ T6430] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 128.147286][ T6430] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 128.187376][ T6430] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 128.232570][ T6430] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 128.270242][ T6430] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 128.308462][ T6430] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 128.343718][ T6430] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 128.564166][ T6446] loop0: detected capacity change from 0 to 8192 [ 128.599957][ T6451] loop3: detected capacity change from 0 to 512 [ 128.754323][ T6461] loop4: detected capacity change from 0 to 512 [ 128.779079][ T6461] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 129.158434][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.538'. [ 129.184892][ T6469] geneve1: entered promiscuous mode [ 129.232661][ T6469] selinux_netlink_send: 7 callbacks suppressed [ 129.232676][ T6469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6469 comm=syz.5.539 [ 129.299925][ T6479] siw: device registration error -23 [ 129.308793][ T6469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6469 comm=syz.5.539 [ 129.338739][ T6477] loop4: detected capacity change from 0 to 1024 [ 129.382567][ T6477] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 129.398512][ T6477] System zones: 0-1, 3-36 [ 129.408178][ T6477] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.540: bad orphan inode 134217728 [ 129.419619][ T6477] loop4: lost filesystem error report for type 5 error -117 [ 129.432729][ T6477] EXT4-fs mount: 3 callbacks suppressed [ 129.432829][ T6477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.456732][ T6479] dummy0 speed is unknown, defaulting to 1000 [ 129.697051][ T6527] loop5: detected capacity change from 0 to 512 [ 129.711546][ T6527] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.742488][ T6527] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.546: orphan file block 0: bad magic [ 129.759846][ T6527] loop5: lost filesystem error report for type 5 error -117 [ 129.759953][ T6527] EXT4-fs (loop5): Remounting filesystem read-only [ 129.773895][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 129.773914][ C0] EXT4-fs (loop5): initial error at time 1774540959: ext4_init_orphan_info:618 [ 129.773945][ C0] EXT4-fs (loop5): last error at time 1774540959: ext4_init_orphan_info:618 [ 129.847888][ T6527] EXT4-fs (loop5): mount failed [ 129.902797][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.546'. [ 129.938169][ T6542] dummy0 speed is unknown, defaulting to 1000 [ 129.947047][ T6540] loop3: detected capacity change from 0 to 8192 [ 130.226926][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.240760][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.259252][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.644842][ T4112] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.183551][ T6599] loop6: detected capacity change from 0 to 8192 [ 131.232481][ T6611] loop3: detected capacity change from 0 to 512 [ 132.042072][ T6635] siw: device registration error -23 [ 132.074772][ T6623] loop0: detected capacity change from 0 to 1024 [ 132.122361][ T6623] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 132.178550][ T6623] System zones: 0-1, 3-36 [ 132.260414][ T6623] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.555: bad orphan inode 134217728 [ 132.328750][ T6623] loop0: lost filesystem error report for type 5 error -117 [ 132.332580][ T6623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.391960][ T6635] dummy0 speed is unknown, defaulting to 1000 [ 132.840121][ T6674] geneve3: entered promiscuous mode [ 132.845411][ T6674] geneve3: entered allmulticast mode [ 132.852035][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.989603][ T6689] loop0: detected capacity change from 0 to 2048 [ 133.081602][ T6670] loop6: detected capacity change from 0 to 1024 [ 133.176709][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 133.187650][ T6689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.220327][ T6670] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 133.248433][ T6670] System zones: 0-1, 3-36 [ 133.253312][ T6689] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.266441][ T6691] loop4: detected capacity change from 0 to 256 [ 133.273074][ T6691] vfat: Unknown parameter '01777777777777777777777' [ 133.291758][ T6670] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.560: bad orphan inode 134217728 [ 133.322892][ T6689] netlink: 'syz.0.564': attribute type 1 has an invalid length. [ 133.343931][ T6689] netlink: 'syz.0.564': attribute type 2 has an invalid length. [ 133.355971][ T6670] loop6: lost filesystem error report for type 5 error -117 [ 133.366400][ T6670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.449386][ T28] audit: type=1400 audit(1774541219.302:693): avc: denied { write } for pid=6687 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 133.498551][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.642202][ T6710] loop0: detected capacity change from 0 to 8192 [ 134.016819][ T6724] xt_connbytes: Forcing CT accounting to be enabled [ 134.017884][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.032569][ T6724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.061538][ T6730] loop4: detected capacity change from 0 to 764 [ 134.067833][ T28] audit: type=1400 audit(1774541219.912:694): avc: denied { create } for pid=6715 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=kcm_socket permissive=1 [ 134.103710][ T28] audit: type=1400 audit(1774541219.952:695): avc: denied { mount } for pid=6715 comm="syz.4.566" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 134.197502][ T6742] siw: device registration error -23 [ 134.203184][ T6743] loop0: detected capacity change from 0 to 512 [ 134.272477][ T6742] dummy0 speed is unknown, defaulting to 1000 [ 134.519623][ T6780] siw: device registration error -23 [ 134.594523][ T6780] dummy0 speed is unknown, defaulting to 1000 [ 134.688095][ T6799] loop3: detected capacity change from 0 to 512 [ 134.695923][ T6773] loop6: detected capacity change from 0 to 1024 [ 134.710895][ T6773] EXT4-fs: test_dummy_encryption option not supported [ 134.742327][ T28] audit: type=1400 audit(1774541220.602:696): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 134.776286][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 134.776315][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 134.777129][ T6817] 8021q: VLANs not supported on vxcan0 [ 134.836823][ T6826] loop3: detected capacity change from 0 to 4096 [ 134.848126][ T6826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.901396][ T28] audit: type=1400 audit(1774541220.752:697): avc: denied { bind } for pid=6839 comm="syz.6.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.920794][ T6830] loop4: detected capacity change from 0 to 8192 [ 135.085968][ T6863] dummy0 speed is unknown, defaulting to 1000 [ 135.089050][ T6860] bridge0: port 1(ipvlan2) entered blocking state [ 135.114969][ T6860] bridge0: port 1(ipvlan2) entered disabled state [ 135.131857][ T6860] ipvlan2: entered allmulticast mode [ 135.146144][ T6860] bridge0: entered allmulticast mode [ 135.160772][ T6860] ipvlan2: left allmulticast mode [ 135.174817][ T6860] bridge0: left allmulticast mode [ 135.216209][ T6888] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 135.246933][ T6888] EXT4-fs error (device loop6): ext4_init_orphan_info:618: comm syz.6.583: orphan file block 0: bad magic [ 135.268463][ T6888] loop6: lost filesystem error report for type 5 error -117 [ 135.268695][ T6888] EXT4-fs (loop6): Remounting filesystem read-only [ 135.282527][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 135.282557][ C0] EXT4-fs (loop6): initial error at time 1774541221: ext4_init_orphan_info:618 [ 135.282577][ C0] EXT4-fs (loop6): last error at time 1774541221: ext4_init_orphan_info:618 [ 135.314560][ T6888] EXT4-fs (loop6): mount failed [ 135.348254][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.583'. [ 135.385312][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.416220][ T6910] bridge0: port 3(ipvlan3) entered blocking state [ 135.424345][ T6910] bridge0: port 3(ipvlan3) entered disabled state [ 135.431220][ T6910] ipvlan3: entered allmulticast mode [ 135.436567][ T6910] bridge0: entered allmulticast mode [ 135.443848][ T6910] ipvlan3: left allmulticast mode [ 135.449095][ T6910] bridge0: left allmulticast mode [ 135.527271][ T6910] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.537817][ T6910] EXT4-fs error (device loop4): ext4_init_orphan_info:618: comm syz.4.585: orphan file block 0: bad magic [ 135.549436][ T6910] loop4: lost filesystem error report for type 5 error -117 [ 135.549566][ T6910] EXT4-fs (loop4): Remounting filesystem read-only [ 135.563437][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 135.563452][ C0] EXT4-fs (loop4): initial error at time 1774541221: ext4_init_orphan_info:618 [ 135.563472][ C0] EXT4-fs (loop4): last error at time 1774541221: ext4_init_orphan_info:618 [ 135.587893][ T6910] EXT4-fs (loop4): mount failed [ 135.610266][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 135.627718][ T6938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.018588][ T28] audit: type=1400 audit(1774541222.872:698): avc: denied { map } for pid=6961 comm="syz.4.593" path="/proc/399" dev="proc" ino=13835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 137.365576][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.634168][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.600'. [ 137.712673][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.600'. [ 137.904129][ T6995] dummy0 speed is unknown, defaulting to 1000 [ 138.315338][ T7043] netlink: 40 bytes leftover after parsing attributes in process `syz.5.606'. [ 138.348928][ T7037] set_capacity_and_notify: 4 callbacks suppressed [ 138.348991][ T7037] loop0: detected capacity change from 0 to 1024 [ 138.389284][ T7037] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 138.397744][ T7037] System zones: 0-1, 3-36 [ 138.426855][ T7037] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.604: bad orphan inode 134217728 [ 138.440520][ T7037] loop0: lost filesystem error report for type 5 error -117 [ 138.448066][ T7046] loop6: detected capacity change from 0 to 1024 [ 138.468984][ T7037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.497874][ T7046] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 138.532939][ T7046] System zones: 0-1, 3-36 [ 138.552646][ T7046] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.605: bad orphan inode 134217728 [ 138.579893][ T7070] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 138.629263][ T7046] loop6: lost filesystem error report for type 5 error -117 [ 138.643614][ T7046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.064765][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.209480][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.279067][ T7090] bridge0: port 1(ipvlan2) entered blocking state [ 139.285528][ T7090] bridge0: port 1(ipvlan2) entered disabled state [ 139.292260][ T7090] ipvlan2: entered allmulticast mode [ 139.298425][ T7090] bridge0: entered allmulticast mode [ 139.304127][ T7090] ipvlan2: left allmulticast mode [ 139.318554][ T7090] bridge0: left allmulticast mode [ 139.383901][ T7090] loop6: detected capacity change from 0 to 512 [ 139.406249][ T7100] bridge0: port 3(ipvlan3) entered blocking state [ 139.412994][ T7090] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 139.435336][ T7104] siw: device registration error -23 [ 139.449310][ T7100] bridge0: port 3(ipvlan3) entered disabled state [ 139.455901][ T7100] ipvlan3: entered allmulticast mode [ 139.461531][ T7100] bridge0: entered allmulticast mode [ 139.467327][ T7100] ipvlan3: left allmulticast mode [ 139.472607][ T7090] EXT4-fs error (device loop6): ext4_init_orphan_info:618: comm syz.6.613: orphan file block 0: bad magic [ 139.484102][ T7090] loop6: lost filesystem error report for type 5 error -117 [ 139.484168][ T7100] bridge0: left allmulticast mode [ 139.484299][ T7090] EXT4-fs (loop6): Remounting filesystem read-only [ 139.491461][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 139.491479][ C1] EXT4-fs (loop6): initial error at time 1774541225: ext4_init_orphan_info:618 [ 139.518353][ C1] EXT4-fs (loop6): last error at time 1774541225: ext4_init_orphan_info:618 [ 139.556299][ T7090] EXT4-fs (loop6): mount failed [ 139.564064][ T7117] loop3: detected capacity change from 0 to 512 [ 139.572458][ T7117] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.583109][ T7104] dummy0 speed is unknown, defaulting to 1000 [ 139.623934][ T7117] EXT4-fs error (device loop3): ext4_init_orphan_info:618: comm syz.3.614: orphan file block 0: bad magic [ 139.644668][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.613'. [ 139.664133][ T7117] loop3: lost filesystem error report for type 5 error -117 [ 139.664287][ T7117] EXT4-fs (loop3): Remounting filesystem read-only [ 139.671655][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 139.671674][ C0] EXT4-fs (loop3): initial error at time 1774541225: ext4_init_orphan_info:618 [ 139.671699][ C0] EXT4-fs (loop3): last error at time 1774541225: ext4_init_orphan_info:618 [ 139.738267][ T7117] EXT4-fs (loop3): mount failed [ 139.767658][ T7150] siw: device registration error -23 [ 139.820908][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 139.841752][ T7150] dummy0 speed is unknown, defaulting to 1000 [ 140.123555][ T7180] siw: device registration error -23 [ 140.157289][ T7183] netlink: 'syz.6.618': attribute type 1 has an invalid length. [ 140.189546][ T7183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.197716][ T7180] dummy0 speed is unknown, defaulting to 1000 [ 140.236925][ T7183] loop6: detected capacity change from 0 to 2048 [ 140.265672][ T7183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.298761][ T7183] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.314759][ T7222] loop3: detected capacity change from 0 to 512 [ 140.362360][ T7222] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.385832][ T7222] EXT4-fs (loop3): 1 truncate cleaned up [ 140.399345][ T28] audit: type=1400 audit(1774541226.252:699): avc: denied { create } for pid=7182 comm="syz.6.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 140.405166][ T7222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.428268][ T7239] bond1: (slave ip6erspan0): making interface the new active one [ 140.452961][ T7239] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 140.574862][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.802568][ T7262] dummy0 speed is unknown, defaulting to 1000 [ 140.888542][ T5318] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 345: padding at end of block bitmap is not set [ 140.889474][ T7266] loop5: detected capacity change from 0 to 1024 [ 140.916242][ T5318] EXT4-fs (loop6): Remounting filesystem read-only [ 140.929046][ T5316] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:5037: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 140.968342][ T7266] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 141.021297][ T7266] System zones: 0-1, 3-36 [ 141.060808][ T7266] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.622: bad orphan inode 134217728 [ 141.118637][ T7266] loop5: lost filesystem error report for type 5 error -117 [ 141.118772][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.130313][ T7266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.210958][ T7252] Set syz1 is full, maxelem 65536 reached [ 141.379785][ T7307] netlink: 165 bytes leftover after parsing attributes in process `syz.6.624'. [ 141.441472][ T7307] hub 8-0:1.0: USB hub found [ 141.446957][ T7307] hub 8-0:1.0: 8 ports detected [ 141.713544][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.900225][ T7312] loop4: detected capacity change from 0 to 128 [ 141.920102][ T7312] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.953235][ T7312] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.175076][ T7332] netlink: 'syz.6.627': attribute type 3 has an invalid length. [ 142.192041][ T7332] xt_hashlimit: size too large, truncated to 1048576 [ 142.502417][ T7341] loop5: detected capacity change from 0 to 1024 [ 142.572591][ T7341] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 142.607653][ T7341] System zones: 0-1, 3-36 [ 142.634254][ T7341] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.629: bad orphan inode 134217728 [ 142.680342][ T7341] loop5: lost filesystem error report for type 5 error -117 [ 142.692144][ T7341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.199285][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.538387][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.582186][ T7353] netlink: 40 bytes leftover after parsing attributes in process `syz.5.630'. [ 143.644680][ T7358] netlink: 'syz.4.631': attribute type 10 has an invalid length. [ 143.660535][ T7358] netlink: 55 bytes leftover after parsing attributes in process `syz.4.631'. [ 143.692079][ T7353] loop5: detected capacity change from 0 to 8192 [ 143.719914][ T7371] loop4: detected capacity change from 0 to 2048 [ 143.952658][ T3302] Alternate GPT is invalid, using primary GPT. [ 143.962835][ T3302] loop4: p1 p2 p3 [ 143.967527][ T28] audit: type=1400 audit(1774541229.822:700): avc: denied { getopt } for pid=7355 comm="syz.4.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.002059][ T7371] Alternate GPT is invalid, using primary GPT. [ 144.008907][ T7371] loop4: p1 p2 p3 [ 144.216895][ T7390] cgroup: fork rejected by pids controller in /syz5 [ 144.300973][ T7406] loop4: detected capacity change from 0 to 1024 [ 144.359324][ T7406] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 144.376936][ T7406] System zones: 0-1, 3-36 [ 144.404108][ T7406] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.635: bad orphan inode 134217728 [ 144.427639][ T7406] loop4: lost filesystem error report for type 5 error -117 [ 144.428298][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 144.442008][ C0] EXT4-fs (loop4): initial error at time 1774541230: ext4_orphan_get:1417 [ 144.450538][ C0] EXT4-fs (loop4): last error at time 1774541230: ext4_orphan_get:1417 [ 144.465896][ T7406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.642407][ T8365] loop6: detected capacity change from 0 to 2048 [ 144.915942][ T8365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.945987][ T28] audit: type=1400 audit(1774541230.792:701): avc: denied { bind } for pid=8852 comm="syz.5.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.967803][ T28] audit: type=1400 audit(1774541230.792:702): avc: denied { name_bind } for pid=8852 comm="syz.5.639" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 144.991294][ T8279] dummy0 speed is unknown, defaulting to 1000 [ 145.000842][ T8365] vlan0: entered promiscuous mode [ 145.009261][ T28] audit: type=1400 audit(1774541230.792:703): avc: denied { node_bind } for pid=8852 comm="syz.5.639" saddr=2001::2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 145.050292][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.101133][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.119048][ T28] audit: type=1326 audit(1774541230.972:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 145.143318][ T28] audit: type=1326 audit(1774541230.972:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 145.168307][ T28] audit: type=1326 audit(1774541230.972:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 145.195133][ T28] audit: type=1326 audit(1774541230.972:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 145.219437][ T28] audit: type=1326 audit(1774541230.972:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.5.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 145.281051][ T8899] loop4: detected capacity change from 0 to 512 [ 145.312836][ T8906] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.314309][ T8899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.428027][ T8912] netlink: 40 bytes leftover after parsing attributes in process `syz.5.649'. [ 145.468031][ T8912] loop5: detected capacity change from 0 to 8192 [ 145.477994][ T8916] loop3: detected capacity change from 0 to 512 [ 145.489114][ T8916] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 145.500824][ T8916] FAT-fs (loop3): Filesystem has been set read-only [ 145.528611][ T8916] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 145.541280][ T8916] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 145.549538][ T8916] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 145.557565][ T8916] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 145.582211][ T8916] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 145.597836][ T8916] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 145.615944][ T8916] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 145.628753][ T8916] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 145.645312][ T8916] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 145.919947][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.929488][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.938100][ T8929] macvlan1: left allmulticast mode [ 145.943798][ T8929] geneve1: left promiscuous mode [ 145.950636][ T8929] netlink: 44 bytes leftover after parsing attributes in process `syz.5.651'. [ 146.177793][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.315609][ T8949] dummy0 speed is unknown, defaulting to 1000 [ 146.323980][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 146.323995][ T28] audit: type=1400 audit(1774541232.172:732): avc: denied { cmd } for pid=8958 comm="syz.3.657" path="socket:[14303]" dev="sockfs" ino=14303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 146.492765][ T8991] bridge0: port 3(ipvlan5) entered blocking state [ 146.499446][ T8991] bridge0: port 3(ipvlan5) entered disabled state [ 146.506153][ T8991] ipvlan5: entered allmulticast mode [ 146.535434][ T8991] bridge0: entered allmulticast mode [ 146.541496][ T8991] ipvlan5: left allmulticast mode [ 146.558368][ T8991] bridge0: left allmulticast mode [ 146.611115][ T8991] loop5: detected capacity change from 0 to 512 [ 146.618360][ T8991] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 146.653860][ T8991] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.659: orphan file block 0: bad magic [ 146.669378][ T8991] loop5: lost filesystem error report for type 5 error -117 [ 146.669539][ T8991] EXT4-fs (loop5): Remounting filesystem read-only [ 146.683381][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 146.683401][ C0] EXT4-fs (loop5): initial error at time 1774541232: ext4_init_orphan_info:618 [ 146.683442][ C0] EXT4-fs (loop5): last error at time 1774541232: ext4_init_orphan_info:618 [ 146.729605][ T8991] EXT4-fs (loop5): mount failed [ 146.764975][ T8936] Set syz1 is full, maxelem 65536 reached [ 146.772945][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.659'. [ 147.343370][ T9016] loop5: detected capacity change from 0 to 512 [ 147.412870][ T9012] dummy0 speed is unknown, defaulting to 1000 [ 147.429988][ T9031] netlink: 666 bytes leftover after parsing attributes in process `syz.5.664'. [ 147.440454][ T28] audit: type=1400 audit(1774541233.302:733): avc: denied { setopt } for pid=9030 comm="syz.5.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 147.494253][ T9039] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.569803][ T28] audit: type=1400 audit(1774541233.422:734): avc: denied { listen } for pid=9053 comm="syz.5.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.756213][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 147.765117][ T9071] loop5: detected capacity change from 0 to 512 [ 147.768257][ T9073] ip6gre1: entered promiscuous mode [ 147.776598][ T9073] ip6gre1: entered allmulticast mode [ 147.795778][ T9071] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 147.805846][ T9071] FAT-fs (loop5): Filesystem has been set read-only [ 147.812758][ T9071] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 147.820941][ T9071] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 147.829113][ T9071] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 147.837221][ T9071] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 147.845397][ T9071] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 147.853460][ T9071] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 147.861462][ T9071] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 147.863444][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.869599][ T9071] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 147.878930][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.885676][ T9071] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 147.903855][ T9081] ip6gre1: left promiscuous mode [ 147.908866][ T9081] ip6gre1: left allmulticast mode [ 147.915236][ T9081] netlink: 44 bytes leftover after parsing attributes in process `syz.3.669'. [ 148.252378][ T9086] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.274355][ T9086] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 148.282302][ T9086] FAT-fs (loop6): Filesystem has been set read-only [ 148.501320][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz.5.671'. [ 148.549384][ T9098] bridge0: port 1(ipvlan2) entered blocking state [ 148.556154][ T9098] bridge0: port 1(ipvlan2) entered disabled state [ 148.562931][ T9098] ipvlan2: entered allmulticast mode [ 148.568336][ T9098] bridge0: entered allmulticast mode [ 148.573979][ T9098] ipvlan2: left allmulticast mode [ 148.579084][ T9098] bridge0: left allmulticast mode [ 148.606791][ T9107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.613550][ T9107] EXT4-fs: Ignoring removed oldalloc option [ 148.619650][ T9107] EXT4-fs: dax option not supported [ 148.661339][ T9098] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 148.672325][ T9098] EXT4-fs error (device loop6): ext4_init_orphan_info:618: comm syz.6.672: orphan file block 0: bad magic [ 148.684049][ T9098] loop6: lost filesystem error report for type 5 error -117 [ 148.684205][ T9098] EXT4-fs (loop6): Remounting filesystem read-only [ 148.691579][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 148.691600][ C0] EXT4-fs (loop6): initial error at time 1774541234: ext4_init_orphan_info:618 [ 148.691628][ C0] EXT4-fs (loop6): last error at time 1774541234: ext4_init_orphan_info:618 [ 148.722872][ T9098] EXT4-fs (loop6): mount failed [ 148.730177][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.672'. [ 148.753061][ T28] audit: type=1400 audit(1774541234.677:735): avc: denied { write } for pid=9113 comm="syz.5.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.756352][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.674'. [ 148.785586][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.674'. [ 148.802685][ T9114] syzkaller0: tun_chr_ioctl cmd 35108 [ 149.251367][ T8951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.358328][ T28] audit: type=1400 audit(1774541235.277:736): avc: denied { name_bind } for pid=9138 comm="syz.4.678" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 149.419731][ T28] audit: type=1400 audit(1774541235.317:737): avc: denied { connect } for pid=9141 comm="syz.6.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 149.458117][ T9148] set_capacity_and_notify: 3 callbacks suppressed [ 149.458133][ T9148] loop6: detected capacity change from 0 to 512 [ 149.486280][ T9148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.532616][ T9130] syz.5.676 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 149.546937][ T9130] CPU: 0 UID: 0 PID: 9130 Comm: syz.5.676 Not tainted syzkaller #0 PREEMPT(full) [ 149.547027][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 149.547042][ T9130] Call Trace: [ 149.547048][ T9130] [ 149.547056][ T9130] __dump_stack+0x1d/0x30 [ 149.547083][ T9130] dump_stack_lvl+0x95/0xd0 [ 149.547175][ T9130] dump_stack+0x15/0x1b [ 149.547197][ T9130] dump_header+0x80/0x240 [ 149.547297][ T9130] oom_kill_process+0x295/0x350 [ 149.547333][ T9130] out_of_memory+0x97d/0xb80 [ 149.547360][ T9130] try_charge_memcg+0x62e/0xa10 [ 149.547433][ T9130] obj_cgroup_charge_pages+0x23/0xc0 [ 149.547467][ T9130] __memcg_kmem_charge_page+0x9e/0x170 [ 149.547571][ T9130] __alloc_frozen_pages_noprof+0x18a/0x360 [ 149.547608][ T9130] alloc_pages_mpol+0xb3/0x260 [ 149.547643][ T9130] alloc_pages_noprof+0x8f/0x130 [ 149.547753][ T9130] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 149.547795][ T9130] __kvmalloc_node_noprof+0x3d4/0x650 [ 149.547826][ T9130] ? ip_set_alloc+0x24/0x30 [ 149.547916][ T9130] ? ip_set_alloc+0x24/0x30 [ 149.547950][ T9130] ? __kmalloc_cache_noprof+0x18a/0x410 [ 149.547980][ T9130] ip_set_alloc+0x24/0x30 [ 149.548074][ T9130] hash_netiface_create+0x282/0x740 [ 149.548112][ T9130] ? __pfx_hash_netiface_create+0x10/0x10 [ 149.548146][ T9130] ip_set_create+0x3cf/0x970 [ 149.548263][ T9130] ? __nla_parse+0x40/0x60 [ 149.548300][ T9130] nfnetlink_rcv_msg+0x509/0x5d0 [ 149.548377][ T9130] netlink_rcv_skb+0x123/0x220 [ 149.548527][ T9130] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 149.548601][ T9130] nfnetlink_rcv+0x167/0x1720 [ 149.548636][ T9130] ? mas_next_slot+0x69b/0x6f0 [ 149.548726][ T9130] ? __rcu_read_unlock+0x4e/0x70 [ 149.548751][ T9130] ? mt_find+0x291/0x3d0 [ 149.548775][ T9130] ? cmp_ex_search+0x25/0x40 [ 149.548806][ T9130] ? bsearch+0x95/0xc0 [ 149.548826][ T9130] ? __pfx_cmp_ex_search+0x10/0x10 [ 149.548950][ T9130] ? __import_iovec+0x12b/0x530 [ 149.548985][ T9130] ? search_extable+0x53/0x80 [ 149.549015][ T9130] ? __import_iovec+0x12b/0x530 [ 149.549083][ T9130] ? _raw_spin_lock_bh+0x56/0xb0 [ 149.549137][ T9130] ? _raw_spin_unlock_bh+0x18/0x20 [ 149.549211][ T9130] ? selinux_nlmsg_lookup+0x99/0x890 [ 149.549253][ T9130] ? __rcu_read_unlock+0x33/0x70 [ 149.549277][ T9130] ? __netlink_lookup+0x276/0x2b0 [ 149.549301][ T9130] netlink_unicast+0x5c0/0x690 [ 149.549341][ T9130] netlink_sendmsg+0x5c8/0x6f0 [ 149.549381][ T9130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.549419][ T9130] ____sys_sendmsg+0x563/0x5b0 [ 149.549561][ T9130] ___sys_sendmsg+0x195/0x1e0 [ 149.549608][ T9130] __x64_sys_sendmsg+0xd4/0x160 [ 149.549647][ T9130] x64_sys_call+0x194c/0x3020 [ 149.549773][ T9130] do_syscall_64+0x12c/0x370 [ 149.549830][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.549910][ T9130] RIP: 0033:0x7efcf12ac799 [ 149.549938][ T9130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.549960][ T9130] RSP: 002b:00007efcefd07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.549984][ T9130] RAX: ffffffffffffffda RBX: 00007efcf1525fa0 RCX: 00007efcf12ac799 [ 149.550044][ T9130] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000004 [ 149.550060][ T9130] RBP: 00007efcf1342c99 R08: 0000000000000000 R09: 0000000000000000 [ 149.550075][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.550090][ T9130] R13: 00007efcf1526038 R14: 00007efcf1525fa0 R15: 00007ffe671cf788 [ 149.550145][ T9130] [ 149.559992][ T9157] lo: Caught tx_queue_len zero misconfig [ 149.569736][ T9130] memory: usage 307200kB, limit 307200kB, failcnt 519 [ 149.572776][ T9157] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 149.575636][ T9130] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 149.924017][ T9130] kmem: usage 305400kB, limit 9007199254740988kB, failcnt 0 [ 149.931356][ T9130] Memory cgroup stats for /syz5: [ 149.931556][ T9130] cache 0 [ 149.940773][ T9130] rss 1839104 [ 149.944721][ T9130] shmem 0 [ 149.947748][ T9130] mapped_file 0 [ 149.951276][ T9130] dirty 0 [ 149.954239][ T9130] writeback 0 [ 149.957583][ T9130] workingset_refault_anon 42 [ 149.962196][ T9130] workingset_refault_file 0 [ 149.966691][ T9130] swap 200704 [ 149.969983][ T9130] swapcached 200704 [ 149.973843][ T9130] pgpgin 89740 [ 149.977211][ T9130] pgpgout 89290 [ 149.980680][ T9130] pgfault 86819 [ 149.984162][ T9130] pgmajfault 42 [ 149.987605][ T9130] inactive_anon 0 [ 149.991313][ T9130] active_anon 0 [ 149.994756][ T9130] inactive_file 1843200 [ 149.999050][ T9130] active_file 0 [ 150.002498][ T9130] unevictable 0 [ 150.006147][ T9130] hierarchical_memory_limit 314572800 [ 150.011731][ T9130] hierarchical_memsw_limit 9223372036854771712 [ 150.017907][ T9130] total_cache 0 [ 150.021621][ T9130] total_rss 1839104 [ 150.025498][ T9130] total_shmem 0 [ 150.029127][ T9130] total_mapped_file 0 [ 150.033100][ T9130] total_dirty 0 [ 150.036549][ T9130] total_writeback 0 [ 150.040570][ T9130] total_workingset_refault_anon 42 [ 150.045704][ T9130] total_workingset_refault_file 0 [ 150.050856][ T9130] total_swap 200704 [ 150.054697][ T9130] total_swapcached 200704 [ 150.059283][ T9130] total_pgpgin 89740 [ 150.063519][ T9130] total_pgpgout 89290 [ 150.067530][ T9130] total_pgfault 86819 [ 150.071667][ T9130] total_pgmajfault 42 [ 150.075666][ T9130] total_inactive_anon 0 [ 150.075815][ T9162] loop3: detected capacity change from 0 to 512 [ 150.079991][ T9130] total_active_anon 0 [ 150.090193][ T9130] total_inactive_file 1843200 [ 150.094949][ T9130] total_active_file 0 [ 150.099222][ T9130] total_unevictable 0 [ 150.107909][ T9130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.676,pid=9128,uid=0 [ 150.123449][ T9162] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 150.123498][ T9130] Memory cgroup out of memory: Killed process 9128 (syz.5.676) total-vm:94296kB, anon-rss:3024kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 150.132635][ T5316] kworker/u8:12: attempt to access beyond end of device [ 150.132635][ T5316] loop3: rw=1, sector=17179852714, nr_sectors = 8 limit=512 [ 150.170762][ T9162] FAT-fs (loop3): Filesystem has been set read-only [ 150.179902][ T9162] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 150.189748][ T9162] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 150.199638][ T5316] kworker/u8:12: attempt to access beyond end of device [ 150.199638][ T5316] loop3: rw=1, sector=17179852722, nr_sectors = 8 limit=512 [ 150.215605][ T9162] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 150.225888][ T5316] kworker/u8:12: attempt to access beyond end of device [ 150.225888][ T5316] loop3: rw=1, sector=17179852730, nr_sectors = 8 limit=512 [ 150.242379][ T9162] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 150.242424][ T316] kworker/u8:6: attempt to access beyond end of device [ 150.242424][ T316] loop3: rw=8388609, sector=17179852737, nr_sectors = 1 limit=512 [ 150.242448][ T316] Buffer I/O error on dev loop3, logical block 17179852737, lost async page write [ 150.277320][ T9162] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 150.285240][ T5316] kworker/u8:12: attempt to access beyond end of device [ 150.285240][ T5316] loop3: rw=1, sector=17179852738, nr_sectors = 8 limit=512 [ 150.304088][ T9162] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 150.305636][ T3463] kworker/u8:8: attempt to access beyond end of device [ 150.305636][ T3463] loop3: rw=8388609, sector=17179852745, nr_sectors = 1 limit=512 [ 150.313260][ T9162] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 150.362284][ T9166] siw: device registration error -23 [ 150.373621][ T3463] Buffer I/O error on dev loop3, logical block 17179852745, lost async page write [ 150.412520][ T5314] kworker/u8:11: attempt to access beyond end of device [ 150.412520][ T5314] loop3: rw=1, sector=17179852746, nr_sectors = 8 limit=512 [ 150.429391][ T9162] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 150.437465][ T9162] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 150.459844][ T5318] kworker/u8:13: attempt to access beyond end of device [ 150.459844][ T5318] loop3: rw=8388609, sector=17179852753, nr_sectors = 1 limit=512 [ 150.474338][ T9166] dummy0 speed is unknown, defaulting to 1000 [ 150.477824][ T5318] Buffer I/O error on dev loop3, logical block 17179852753, lost async page write [ 150.498529][ T5318] kworker/u8:13: attempt to access beyond end of device [ 150.498529][ T5318] loop3: rw=1, sector=17179852754, nr_sectors = 16 limit=512 [ 150.527009][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.579086][ T9180] netlink: 20 bytes leftover after parsing attributes in process `syz.6.685'. [ 150.863424][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 150.874561][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 150.883938][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 150.974335][ T9218] bridge0: port 3(ipvlan4) entered blocking state [ 150.981189][ T9218] bridge0: port 3(ipvlan4) entered disabled state [ 150.987889][ T9218] ipvlan4: entered allmulticast mode [ 150.994134][ T9218] bridge0: entered allmulticast mode [ 151.000713][ T9218] ipvlan4: left allmulticast mode [ 151.005985][ T9218] bridge0: left allmulticast mode [ 151.080864][ T9230] loop3: detected capacity change from 0 to 512 [ 151.091854][ T9230] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.130754][ T9230] EXT4-fs error (device loop3): ext4_init_orphan_info:618: comm syz.3.690: orphan file block 0: bad magic [ 151.142818][ T9230] loop3: lost filesystem error report for type 5 error -117 [ 151.143061][ T9230] EXT4-fs (loop3): Remounting filesystem read-only [ 151.150364][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 151.150391][ C0] EXT4-fs (loop3): initial error at time 1774541237: ext4_init_orphan_info:618 [ 151.150416][ C0] EXT4-fs (loop3): last error at time 1774541237: ext4_init_orphan_info:618 [ 151.182601][ T9230] EXT4-fs (loop3): mount failed [ 151.862379][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 152.146289][ T9250] loop3: detected capacity change from 0 to 512 [ 152.319774][ T9254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.328703][ T9254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.337212][ T9254] vlan0: left promiscuous mode [ 152.343830][ T9254] netlink: 44 bytes leftover after parsing attributes in process `syz.6.693'. [ 152.484451][ T9262] loop4: detected capacity change from 0 to 512 [ 152.494941][ T9262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.909480][ T9274] loop3: detected capacity change from 0 to 128 [ 152.956503][ T9269] loop6: detected capacity change from 0 to 1024 [ 152.985071][ T9269] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 152.994034][ T9269] System zones: 0-1, 3-36 [ 153.029774][ T9274] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.041990][ T9269] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.696: bad orphan inode 134217728 [ 153.053521][ T9274] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.064344][ T9269] loop6: lost filesystem error report for type 5 error -117 [ 153.070843][ T9269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.409425][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.477673][ T9289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.698'. [ 153.523087][ T28] audit: type=1326 audit(1774541239.447:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bfd0c799 code=0x7ffc0000 [ 153.552216][ T28] audit: type=1326 audit(1774541239.447:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bfd0c799 code=0x7ffc0000 [ 153.576129][ T28] audit: type=1326 audit(1774541239.447:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff0bfd0c799 code=0x7ffc0000 [ 153.600424][ T28] audit: type=1326 audit(1774541239.467:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bfd0c799 code=0x7ffc0000 [ 153.624467][ T28] audit: type=1326 audit(1774541239.467:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bfd0c799 code=0x7ffc0000 [ 153.651252][ T28] audit: type=1326 audit(1774541239.447:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bfd0c799 code=0x7ffc0000 [ 153.675115][ T28] audit: type=1326 audit(1774541239.567:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bfd0c799 code=0x7ffc0000 [ 153.698600][ T28] audit: type=1326 audit(1774541239.567:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bfd0c799 code=0x7ffc0000 [ 153.730001][ T9293] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 153.768357][ T28] audit: type=1326 audit(1774541239.577:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0bfd0c799 code=0x7ffc0000 [ 153.808473][ T28] audit: type=1326 audit(1774541239.577:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bfd0c799 code=0x7ffc0000 [ 153.839133][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.895681][ T9302] loop6: detected capacity change from 0 to 512 [ 153.936139][ T9302] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.939507][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.119334][ T9319] dummy0 speed is unknown, defaulting to 1000 [ 155.429316][ T9365] loop6: detected capacity change from 0 to 1024 [ 155.490762][ T9365] EXT4-fs: test_dummy_encryption option not supported [ 155.521336][ T9319] chnl_net:caif_netlink_parms(): no params data found [ 155.810558][ T9319] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.850335][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.878409][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.885633][ T9319] bridge_slave_0: entered allmulticast mode [ 155.898516][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.908950][ T9319] bridge_slave_0: entered promiscuous mode [ 155.931043][ T9319] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.931312][ T9449] netlink: 44 bytes leftover after parsing attributes in process `syz.6.706'. [ 155.938084][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.988988][ T9319] bridge_slave_1: entered allmulticast mode [ 155.995344][ T9319] bridge_slave_1: entered promiscuous mode [ 156.029833][ T9319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.049829][ T9319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.099962][ T9319] team0: Port device team_slave_0 added [ 156.108701][ T9319] team0: Port device team_slave_1 added [ 156.135856][ T9319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.144058][ T9319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.187399][ T9319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.204804][ T9319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.212028][ T9319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.240436][ T9513] loop4: detected capacity change from 0 to 512 [ 156.260963][ T9513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.288480][ T9319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.363007][ T9319] hsr_slave_0: entered promiscuous mode [ 156.378923][ T9319] hsr_slave_1: entered promiscuous mode [ 156.389729][ T9319] debugfs: 'hsr0' already exists in 'hsr' [ 156.398473][ T9319] Cannot create hsr debugfs directory [ 156.619484][ T9617] loop6: detected capacity change from 0 to 164 [ 156.638837][ T9617] Unable to read rock-ridge attributes [ 156.644303][ T9617] isofs_fill_super: root inode is not a directory. Corrupted media? [ 156.741132][ T9319] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 156.912682][ T9319] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 156.947613][ T9319] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 156.970724][ T9319] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 156.990381][ T9629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=9629 comm=syz.6.712 [ 157.015692][ T9629] netlink: 24 bytes leftover after parsing attributes in process `syz.6.712'. [ 157.122036][ T9319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.130933][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.142494][ T9319] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.173515][ T9643] loop4: detected capacity change from 0 to 1024 [ 157.190704][ T9643] EXT4-fs: Ignoring removed orlov option [ 157.211177][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.213642][ T5316] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.227230][ T5316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.238993][ T5316] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.239283][ T9643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.246090][ T5316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.284354][ T9650] loop3: detected capacity change from 0 to 512 [ 157.297877][ T9319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.376159][ T9319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.400193][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.419564][ T9679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.432892][ T9679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.442405][ T9679] netlink: 44 bytes leftover after parsing attributes in process `syz.6.720'. [ 157.489932][ T9692] siw: device registration error -23 [ 157.517332][ T9701] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 157.530004][ T9319] veth0_vlan: entered promiscuous mode [ 157.538136][ T9319] veth1_vlan: entered promiscuous mode [ 157.561392][ T9692] dummy0 speed is unknown, defaulting to 1000 [ 157.586569][ T9319] veth0_macvtap: entered promiscuous mode [ 157.622430][ T9319] veth1_macvtap: entered promiscuous mode [ 157.671171][ T9319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.682823][ T9319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.693627][ T230] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.702569][ T230] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.724735][ T230] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.736603][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.722'. [ 157.747369][ T230] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.775722][ T9729] loop4: detected capacity change from 0 to 512 [ 157.790980][ T9729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.248257][ T9742] dummy0 speed is unknown, defaulting to 1000 [ 158.350709][ T9768] x_tables: duplicate underflow at hook 1 [ 158.596319][ T9741] Set syz1 is full, maxelem 65536 reached [ 158.704109][ T9777] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 158.706839][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 158.706850][ T28] audit: type=1400 audit(1774541244.627:824): avc: denied { getopt } for pid=9772 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 158.857586][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.029039][ T9783] loop4: detected capacity change from 0 to 512 [ 159.278338][ T28] audit: type=1400 audit(1774541245.197:825): avc: denied { write } for pid=9791 comm="syz.6.730" path="socket:[16014]" dev="sockfs" ino=16014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 159.417217][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.5.731'. [ 159.431914][ T9803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.733'. [ 159.603412][ T9812] loop6: detected capacity change from 0 to 4096 [ 159.615298][ T28] audit: type=1400 audit(1774541245.537:826): avc: denied { read } for pid=9816 comm="syz.4.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.667238][ T9812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.686857][ T9809] loop3: detected capacity change from 0 to 1024 [ 159.705139][ T9809] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 159.715708][ T9809] System zones: 0-1, 3-36 [ 159.726345][ T9809] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.735: bad orphan inode 134217728 [ 159.742028][ T9809] loop3: lost filesystem error report for type 5 error -117 [ 159.751115][ T9833] loop4: detected capacity change from 0 to 512 [ 159.752937][ T9809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.813670][ T9833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.122363][ T9842] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 160.143048][ T9842] System zones: 0-1, 3-36 [ 160.176242][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.188490][ T9842] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.739: bad orphan inode 134217728 [ 160.238601][ T9842] loop7: lost filesystem error report for type 5 error -117 [ 160.248603][ T9850] dummy0 speed is unknown, defaulting to 1000 [ 160.287706][ T9842] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.395855][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.463466][ T28] audit: type=1400 audit(1774541246.387:827): avc: denied { read write } for pid=9887 comm="syz.3.743" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 160.503134][ T9888] set_capacity_and_notify: 1 callbacks suppressed [ 160.503150][ T9888] loop3: detected capacity change from 0 to 512 [ 160.544736][ T28] audit: type=1400 audit(1774541246.387:828): avc: denied { open } for pid=9887 comm="syz.3.743" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 160.557918][ T9888] ext2: Unknown parameter '' [ 160.647517][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.741910][ T9904] netlink: 'syz.3.746': attribute type 16 has an invalid length. [ 160.756866][ T9904] netlink: 'syz.3.746': attribute type 17 has an invalid length. [ 160.780162][ T9846] Set syz1 is full, maxelem 65536 reached [ 160.799729][ T9904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.800997][ T9319] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.809009][ T9904] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.828945][ T9904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.887460][ T9918] bridge0: port 3(ipvlan4) entered blocking state [ 160.894084][ T9918] bridge0: port 3(ipvlan4) entered disabled state [ 160.903024][ T9918] ipvlan4: entered allmulticast mode [ 160.908418][ T9918] bridge0: entered allmulticast mode [ 160.914344][ T9918] ipvlan4: left allmulticast mode [ 160.920928][ T9918] bridge0: left allmulticast mode [ 160.930105][ T3398] dummy0 speed is unknown, defaulting to 1000 [ 160.936253][ T3398] syz1: Port: 1 Link ACTIVE [ 160.996793][ T9935] loop7: detected capacity change from 0 to 512 [ 161.005934][ T9918] loop3: detected capacity change from 0 to 512 [ 161.013284][ T9918] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.024721][ T9918] EXT4-fs error (device loop3): ext4_init_orphan_info:618: comm syz.3.748: orphan file block 0: bad magic [ 161.037203][ T9918] loop3: lost filesystem error report for type 5 error -117 [ 161.038312][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 161.044642][ T9935] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 161.045591][ C0] EXT4-fs (loop3): initial error at time 1774541246: ext4_init_orphan_info:618 [ 161.068715][ C0] EXT4-fs (loop3): last error at time 1774541246: ext4_init_orphan_info:618 [ 161.080990][ T9918] EXT4-fs (loop3): Remounting filesystem read-only [ 161.087543][ T9918] EXT4-fs (loop3): mount failed [ 161.093487][ T9935] FAT-fs (loop7): Filesystem has been set read-only [ 161.101138][ T9935] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 161.109617][ T9935] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 161.117776][ T9935] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 161.126443][ T9935] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 161.135123][ T9935] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 161.145268][ T9935] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 161.153786][ T9935] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 161.162353][ T9935] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 161.170754][ T9935] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 161.460290][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 161.479479][ T9944] loop7: detected capacity change from 0 to 8192 [ 161.546273][ T9955] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 161.602122][ T9944] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 161.609767][ T9944] FAT-fs (loop7): Filesystem has been set read-only [ 161.643164][ T9944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.850366][ T9970] loop3: detected capacity change from 0 to 512 [ 161.867712][ T9970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.070934][ T9981] bridge0: port 3(ipvlan2) entered blocking state [ 162.077559][ T9981] bridge0: port 3(ipvlan2) entered disabled state [ 162.084255][ T9981] ipvlan2: entered allmulticast mode [ 162.089819][ T9981] bridge0: entered allmulticast mode [ 162.095558][ T9981] ipvlan2: left allmulticast mode [ 162.100823][ T9981] bridge0: left allmulticast mode [ 162.177600][ T9981] loop7: detected capacity change from 0 to 512 [ 162.186853][ T9981] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 162.204081][ T9981] EXT4-fs error (device loop7): ext4_init_orphan_info:618: comm syz.7.757: orphan file block 0: bad magic [ 162.215979][ T9981] loop7: lost filesystem error report for type 5 error -117 [ 162.219267][ T9981] EXT4-fs (loop7): Remounting filesystem read-only [ 162.233082][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 162.233121][ C0] EXT4-fs (loop7): initial error at time 1774541248: ext4_init_orphan_info:618 [ 162.233146][ C0] EXT4-fs (loop7): last error at time 1774541248: ext4_init_orphan_info:618 [ 162.257498][ T9981] EXT4-fs (loop7): mount failed [ 162.288649][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.7.757'. [ 162.545672][ T9998] loop5: detected capacity change from 0 to 1024 [ 162.602707][ T9998] EXT4-fs: test_dummy_encryption option not supported [ 163.008546][T10017] loop7: detected capacity change from 0 to 512 [ 163.022290][T10020] loop5: detected capacity change from 0 to 256 [ 163.065458][T10020] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.093470][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.199086][T10020] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 163.221698][T10020] FAT-fs (loop5): Filesystem has been set read-only [ 163.271435][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 163.280897][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 163.290002][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 163.383338][T10036] netlink: 165 bytes leftover after parsing attributes in process `syz.7.764'. [ 163.430182][T10036] hub 8-0:1.0: USB hub found [ 163.434930][T10036] hub 8-0:1.0: 8 ports detected [ 164.176890][T10038] loop3: detected capacity change from 0 to 512 [ 164.187444][T10038] EXT4-fs: Ignoring removed oldalloc option [ 164.296017][T10049] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 164.307646][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 164.373531][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 164.393446][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 164.419015][T10038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.437124][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 164.448747][T10038] EXT4-fs (loop3): 1 truncate cleaned up [ 164.459220][T10038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.475661][ T28] audit: type=1326 audit(1774541250.450:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 164.524813][ T28] audit: type=1326 audit(1774541250.480:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 164.525003][T10079] bridge_slave_0: left allmulticast mode [ 164.548561][ T28] audit: type=1326 audit(1774541250.480:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 164.555076][T10079] bridge_slave_0: left promiscuous mode [ 164.582850][T10079] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.590972][ T28] audit: type=1326 audit(1774541250.490:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 164.615399][ T28] audit: type=1326 audit(1774541250.490:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 164.656276][ T28] audit: type=1400 audit(1774541250.490:834): avc: denied { ioctl } for pid=10033 comm="syz.3.763" path="/159/bus/file1" dev="loop3" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.682759][ T28] audit: type=1326 audit(1774541250.500:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 164.706766][ T28] audit: type=1326 audit(1774541250.500:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 164.730637][ T28] audit: type=1326 audit(1774541250.500:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 164.754596][ T28] audit: type=1326 audit(1774541250.500:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10074 comm="syz.5.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcf12ac799 code=0x7ffc0000 [ 164.787087][T10079] bridge_slave_1: left allmulticast mode [ 164.793284][T10079] bridge_slave_1: left promiscuous mode [ 164.799129][T10079] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.800049][T10089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.819380][T10089] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.834810][T10079] bond0: (slave bond_slave_0): Releasing backup interface [ 164.844817][T10089] netlink: 'syz.5.774': attribute type 1 has an invalid length. [ 164.848521][T10079] bond0: (slave bond_slave_1): Releasing backup interface [ 164.858961][T10089] netlink: 'syz.5.774': attribute type 2 has an invalid length. [ 164.870972][T10079] team0: Port device team_slave_0 removed [ 164.879274][T10079] team0: Port device team_slave_1 removed [ 164.885760][T10079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.893606][T10079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.902514][T10079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.909990][T10079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.919410][T10079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.945853][T10077] dummy0 speed is unknown, defaulting to 1000 [ 164.965849][T10034] dummy0 speed is unknown, defaulting to 1000 [ 165.001552][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.054412][T10145] netlink: 'syz.5.776': attribute type 3 has an invalid length. [ 165.070192][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.091278][T10147] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.103842][T10147] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 165.112267][T10147] FAT-fs (loop6): Filesystem has been set read-only [ 165.143293][T10145] xt_hashlimit: size too large, truncated to 1048576 [ 165.170212][T10139] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 165.188571][T10139] System zones: 0-1, 3-36 [ 165.201002][T10139] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.775: bad orphan inode 134217728 [ 165.219482][T10139] loop7: lost filesystem error report for type 5 error -117 [ 165.221477][T10139] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.254742][T10154] dummy0 speed is unknown, defaulting to 1000 [ 165.545813][T10201] hub 8-0:1.0: USB hub found [ 165.550761][T10201] hub 8-0:1.0: 8 ports detected [ 165.638963][T10200] siw: device registration error -23 [ 165.929266][ T9319] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.972589][T10200] dummy0 speed is unknown, defaulting to 1000 [ 166.044037][T10221] siw: device registration error -23 [ 166.136942][T10243] set_capacity_and_notify: 4 callbacks suppressed [ 166.136956][T10243] loop5: detected capacity change from 0 to 2048 [ 166.185155][T10243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.193758][T10221] dummy0 speed is unknown, defaulting to 1000 [ 166.214374][T10243] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.255883][T10243] netlink: 'syz.5.787': attribute type 1 has an invalid length. [ 166.263990][T10243] netlink: 'syz.5.787': attribute type 2 has an invalid length. [ 166.279732][T10261] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 166.323495][T10267] loop6: detected capacity change from 0 to 1024 [ 166.339606][T10267] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 166.348097][T10267] System zones: 0-1, 3-36 [ 166.355558][T10267] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.789: bad orphan inode 134217728 [ 166.371299][T10267] loop6: lost filesystem error report for type 5 error -117 [ 166.373425][T10267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.426905][ T1558] hid-generic 0007:0001:0100.0002: item fetching failed at offset 6/107 [ 166.451206][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.460309][ T1558] hid-generic 0007:0001:0100.0002: probe with driver hid-generic failed with error -22 [ 166.493509][T10293] loop5: detected capacity change from 0 to 256 [ 166.504533][T10293] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.527950][T10293] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 166.541390][T10293] FAT-fs (loop5): Filesystem has been set read-only [ 166.589940][T10307] __nla_validate_parse: 5 callbacks suppressed [ 166.589955][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 166.686170][T10307] loop4: detected capacity change from 0 to 8192 [ 166.732484][T10315] loop7: detected capacity change from 0 to 2048 [ 166.753065][T10315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.786376][T10315] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.836818][T10315] netlink: 'syz.7.793': attribute type 1 has an invalid length. [ 166.847900][T10323] bridge0: port 3(ipvlan5) entered blocking state [ 166.854952][T10323] bridge0: port 3(ipvlan5) entered disabled state [ 166.861806][T10323] ipvlan5: entered allmulticast mode [ 166.867393][T10323] bridge0: entered allmulticast mode [ 166.872909][T10315] netlink: 'syz.7.793': attribute type 2 has an invalid length. [ 166.881033][T10323] ipvlan5: left allmulticast mode [ 166.886161][T10323] bridge0: left allmulticast mode [ 166.958246][T10323] loop5: detected capacity change from 0 to 512 [ 167.027796][T10323] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 167.080940][T10323] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.794: orphan file block 0: bad magic [ 167.102463][T10323] loop5: lost filesystem error report for type 5 error -117 [ 167.102643][T10323] EXT4-fs (loop5): Remounting filesystem read-only [ 167.109962][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 167.109995][ C0] EXT4-fs (loop5): initial error at time 1774541253: ext4_init_orphan_info:618 [ 167.110015][ C0] EXT4-fs (loop5): last error at time 1774541253: ext4_init_orphan_info:618 [ 167.128625][ T9319] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.133346][T10323] EXT4-fs (loop5): mount failed [ 167.169891][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.794'. [ 167.269693][ T4112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.335590][T10361] netlink: 165 bytes leftover after parsing attributes in process `syz.7.799'. [ 167.376151][T10361] hub 8-0:1.0: USB hub found [ 167.380997][T10361] hub 8-0:1.0: 8 ports detected [ 167.666795][T10363] loop3: detected capacity change from 0 to 1024 [ 167.788718][T10371] loop4: detected capacity change from 0 to 4096 [ 167.799025][T10363] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 167.811721][T10371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.833796][T10384] netlink: 20 bytes leftover after parsing attributes in process `syz.6.800'. [ 167.848147][T10363] System zones: 0-1, 3-36 [ 167.865966][T10363] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.801: bad orphan inode 134217728 [ 167.877809][T10363] loop3: lost filesystem error report for type 5 error -117 [ 167.878399][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 167.893328][ C0] EXT4-fs (loop3): initial error at time 1774541253: ext4_orphan_get:1417 [ 167.902239][ C0] EXT4-fs (loop3): last error at time 1774541253: ext4_orphan_get:1417 [ 167.913938][T10387] netlink: 277 bytes leftover after parsing attributes in process `syz.5.803'. [ 167.916209][T10363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.938711][T10387] netlink: 'syz.5.803': attribute type 10 has an invalid length. [ 167.946500][T10387] macvlan1: entered allmulticast mode [ 168.196174][T10401] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 168.214132][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.390984][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.521529][T10395] loop7: detected capacity change from 0 to 1024 [ 168.703836][T10395] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.822498][T10395] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #3: block 5: comm syz.7.805: lblock 5 mapped to illegal pblock 5 (length 1) [ 168.886903][T10395] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 168.888545][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 168.904476][ C0] EXT4-fs (loop7): initial error at time 1774541254: ext4_map_blocks:818: inode 3: block 5 [ 168.914927][ C0] EXT4-fs (loop7): last error at time 1774541254: ext4_map_blocks:818: inode 3: block 5 [ 168.948698][T10430] loop5: detected capacity change from 0 to 1024 [ 169.052815][T10430] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 169.136730][T10438] bridge0: port 1(ipvlan2) entered blocking state [ 169.155300][T10430] System zones: 0-1, 3-36 [ 169.193813][T10439] siw: device registration error -23 [ 169.201457][T10438] bridge0: port 1(ipvlan2) entered disabled state [ 169.208891][T10438] ipvlan2: entered allmulticast mode [ 169.219659][T10430] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.812: bad orphan inode 134217728 [ 169.232011][T10395] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.805: Failed to acquire dquot type 0 [ 169.251236][T10438] bridge0: entered allmulticast mode [ 169.257212][T10438] ipvlan2: left allmulticast mode [ 169.264188][T10438] bridge0: left allmulticast mode [ 169.269846][T10430] loop5: lost filesystem error report for type 5 error -117 [ 169.276174][T10430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.297946][T10395] loop7: lost filesystem error report for type 5 error -117 [ 169.304091][T10395] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 5: comm syz.7.805: lblock 5 mapped to illegal pblock 5 (length 1) [ 169.343306][T10448] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 169.373229][T10447] dummy0 speed is unknown, defaulting to 1000 [ 169.423611][T10448] EXT4-fs error (device loop6): ext4_init_orphan_info:618: comm syz.6.813: orphan file block 0: bad magic [ 169.481633][T10395] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.482291][T10395] __quota_error: 15 callbacks suppressed [ 169.483739][T10395] Quota error (device loop7): do_insert_tree: Can't read tree quota block 5 [ 169.522841][T10448] loop6: lost filesystem error report for type 5 error -117 [ 169.527207][T10448] EXT4-fs (loop6): Remounting filesystem read-only [ 169.534577][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 169.534610][ C0] EXT4-fs (loop6): initial error at time 1774541255: ext4_init_orphan_info:618 [ 169.534631][ C0] EXT4-fs (loop6): last error at time 1774541255: ext4_init_orphan_info:618 [ 169.616381][T10395] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 169.713763][T10395] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.805: Failed to acquire dquot type 0 [ 169.727532][T10481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.815'. [ 169.746810][T10448] EXT4-fs (loop6): mount failed [ 169.756731][T10395] loop7: lost filesystem error report for type 5 error -117 [ 169.758692][T10395] EXT4-fs error (device loop7): ext4_free_blocks:6724: comm syz.7.805: Freeing blocks not in datazone - block = 0, count = 4096 [ 169.824543][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.844526][T10395] loop7: lost filesystem error report for type 5 error -117 [ 169.846217][T10395] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 5: comm syz.7.805: lblock 5 mapped to illegal pblock 5 (length 1) [ 169.897426][T10395] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.902726][T10395] Quota error (device loop7): do_insert_tree: Can't read tree quota block 5 [ 169.953970][T10486] netlink: 'syz.4.817': attribute type 10 has an invalid length. [ 169.961871][T10395] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 169.977721][T10486] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.985136][T10395] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.805: Failed to acquire dquot type 0 [ 169.998256][T10486] bond0: (slave team0): Enslaving as an active interface with an up link [ 170.007025][T10395] loop7: lost filesystem error report for type 5 error -117 [ 170.007989][T10395] EXT4-fs (loop7): 1 orphan inode deleted [ 170.027017][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.813'. [ 170.036726][T10395] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.172763][T10505] netlink: 165 bytes leftover after parsing attributes in process `syz.5.816'. [ 170.183485][T10505] hub 8-0:1.0: USB hub found [ 170.188313][T10505] hub 8-0:1.0: 8 ports detected [ 170.222538][T10490] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 170.231685][T10490] System zones: 0-1, 3-36 [ 170.241232][T10490] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.818: bad orphan inode 134217728 [ 170.252650][T10490] loop3: lost filesystem error report for type 5 error -117 [ 170.260882][T10490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.586407][T10395] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 170.670332][ T28] audit: type=1400 audit(1774541256.650:851): avc: denied { map } for pid=10513 comm="syz.6.821" path="socket:[17654]" dev="sockfs" ino=17654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 170.713614][ T28] audit: type=1400 audit(1774541256.650:852): avc: denied { accept } for pid=10513 comm="syz.6.821" path="socket:[17654]" dev="sockfs" ino=17654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 170.737228][ T28] audit: type=1400 audit(1774541256.650:853): avc: denied { bind } for pid=10513 comm="syz.6.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.756916][ T9319] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.851477][T10518] tap0: tun_chr_ioctl cmd 1074025677 [ 170.862403][T10518] tap0: linktype set to 778 [ 170.866822][T10523] siw: device registration error -23 [ 170.924103][T10527] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 170.940562][T10527] FAT-fs (loop6): Filesystem has been set read-only [ 170.948609][T10527] syz.6.823: attempt to access beyond end of device [ 170.948609][T10527] loop6: rw=8388608, sector=17179852721, nr_sectors = 1 limit=512 [ 170.963282][T10527] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 170.968986][T10537] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 170.996245][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.046627][T10523] dummy0 speed is unknown, defaulting to 1000 [ 171.702846][T10572] dummy0 speed is unknown, defaulting to 1000 [ 172.743468][T10609] set_capacity_and_notify: 3 callbacks suppressed [ 172.743486][T10609] loop4: detected capacity change from 0 to 2048 [ 174.724792][T10609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.942725][T10609] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.015280][T10628] loop3: detected capacity change from 0 to 4096 [ 175.033714][T10567] Set syz1 is full, maxelem 65536 reached [ 175.081406][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.092586][T10628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.298207][T10652] loop6: detected capacity change from 0 to 512 [ 175.394854][T10655] netlink: 165 bytes leftover after parsing attributes in process `syz.7.834'. [ 175.435402][T10655] hub 8-0:1.0: USB hub found [ 175.440280][T10655] hub 8-0:1.0: 8 ports detected [ 175.488066][T10652] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 175.549490][T10652] FAT-fs (loop6): Filesystem has been set read-only [ 175.600504][T10652] syz.6.832: attempt to access beyond end of device [ 175.600504][T10652] loop6: rw=8388608, sector=17179852721, nr_sectors = 1 limit=512 [ 175.717574][T10652] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00) [ 175.788683][T10661] loop5: detected capacity change from 0 to 1024 [ 175.825692][T10661] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 175.843953][T10661] System zones: 0-1, 3-36 [ 175.852386][T10661] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.835: bad orphan inode 134217728 [ 175.863720][T10661] loop5: lost filesystem error report for type 5 error -117 [ 175.866605][T10661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.001159][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.062859][ T28] audit: type=1400 audit(1774541262.040:854): avc: denied { append } for pid=10675 comm="syz.3.836" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.062890][ T28] audit: type=1400 audit(1774541262.040:855): avc: denied { getopt } for pid=10673 comm="syz.6.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.170645][T10683] loop7: detected capacity change from 0 to 512 [ 176.237663][T10679] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 176.266904][T10688] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 176.310372][T10679] FAT-fs (loop7): Filesystem has been set read-only [ 176.355373][T10679] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 176.399550][T10679] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 176.439945][T10679] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 176.471309][T10693] loop3: detected capacity change from 0 to 512 [ 176.479607][T10679] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 176.487678][T10679] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 176.495810][T10679] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 176.503844][T10679] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 176.512095][T10679] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 176.520056][T10679] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 176.556303][T10693] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 176.564217][T10693] FAT-fs (loop3): Filesystem has been set read-only [ 176.572280][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.581392][T10693] syz.3.840: attempt to access beyond end of device [ 176.581392][T10693] loop3: rw=8388608, sector=17179852721, nr_sectors = 1 limit=512 [ 176.616760][T10693] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 176.685046][T10711] loop5: detected capacity change from 0 to 4096 [ 176.703227][T10711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.256117][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.303662][T10726] loop3: detected capacity change from 0 to 128 [ 177.371531][T10726] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.436044][T10726] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.622569][T10734] loop7: detected capacity change from 0 to 512 [ 177.638620][T10734] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 177.647108][T10734] FAT-fs (loop7): Filesystem has been set read-only [ 178.462682][T10734] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 178.483258][T10734] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 178.500471][T10734] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 179.501667][T10745] siw: device registration error -23 [ 179.669869][T10734] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 179.677890][T10734] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 179.846710][T10751] netlink: 'syz.6.850': attribute type 3 has an invalid length. [ 179.895076][T10751] xt_hashlimit: size too large, truncated to 1048576 [ 179.903598][T10745] dummy0 speed is unknown, defaulting to 1000 [ 179.945088][T10765] tipc: Failed to obtain node identity [ 179.961806][T10765] tipc: Enabling of bearer rejected, failed to enable media [ 180.175379][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.241313][T10792] loop3: detected capacity change from 0 to 512 [ 180.273514][T10787] loop5: detected capacity change from 0 to 1024 [ 180.282030][T10784] loop7: detected capacity change from 0 to 1024 [ 180.295530][T10792] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 180.295763][T10787] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 180.312282][T10787] System zones: 0-1, 3-36 [ 180.317992][T10792] FAT-fs (loop3): Filesystem has been set read-only [ 180.326051][T10787] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.852: bad orphan inode 134217728 [ 180.341252][T10787] loop5: lost filesystem error report for type 5 error -117 [ 180.349714][T10787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.371453][T10784] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 180.382082][T10792] syz.3.853: attempt to access beyond end of device [ 180.382082][T10792] loop3: rw=8388608, sector=17179852721, nr_sectors = 1 limit=512 [ 180.396643][T10784] System zones: 0-1, 3-36 [ 180.406019][T10784] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.851: bad orphan inode 134217728 [ 180.444678][T10784] loop7: lost filesystem error report for type 5 error -117 [ 180.454356][T10784] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.474762][T10792] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 180.643669][T10809] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.657763][T10809] bond0: (slave lo): Error: Device can not be enslaved while up [ 180.726453][T10814] loop3: detected capacity change from 0 to 4096 [ 180.772089][T10814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.854166][T10819] loop4: detected capacity change from 0 to 256 [ 180.864646][T10819] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.876859][T10819] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 180.898075][T10819] FAT-fs (loop4): Filesystem has been set read-only [ 180.925646][ T9319] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.020621][T10829] FAULT_INJECTION: forcing a failure. [ 181.020621][T10829] name fail_futex, interval 1, probability 0, space 0, times 1 [ 181.025872][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.033516][T10829] CPU: 1 UID: 0 PID: 10829 Comm: syz.7.857 Not tainted syzkaller #0 PREEMPT(full) [ 181.033543][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.033574][T10829] Call Trace: [ 181.033581][T10829] [ 181.033588][T10829] __dump_stack+0x1d/0x30 [ 181.033614][T10829] dump_stack_lvl+0x95/0xd0 [ 181.033639][T10829] dump_stack+0x15/0x1b [ 181.033661][T10829] should_fail_ex+0x263/0x280 [ 181.033720][T10829] should_fail+0xb/0x20 [ 181.033744][T10829] should_fail_futex+0x49/0x50 [ 181.033769][T10829] futex_lock_pi_atomic+0xca/0x850 [ 181.033802][T10829] ? futex_top_waiter+0x13c/0x150 [ 181.033887][T10829] futex_requeue+0x73f/0x13f0 [ 181.033909][T10829] ? kstrtouint_from_user+0xa8/0xf0 [ 181.034013][T10829] do_futex+0x2ec/0x380 [ 181.034115][T10829] __se_sys_futex+0x2f6/0x370 [ 181.034216][T10829] __x64_sys_futex+0x78/0x90 [ 181.034250][T10829] x64_sys_call+0x24ab/0x3020 [ 181.034327][T10829] do_syscall_64+0x12c/0x370 [ 181.034352][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.034407][T10829] RIP: 0033:0x7fbe41f0c799 [ 181.034422][T10829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.034440][T10829] RSP: 002b:00007fbe4093e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.034507][T10829] RAX: ffffffffffffffda RBX: 00007fbe42186090 RCX: 00007fbe41f0c799 [ 181.034521][T10829] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 181.034547][T10829] RBP: 00007fbe4093e090 R08: 0000200000048000 R09: 0000000000000000 [ 181.034593][T10829] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 181.034606][T10829] R13: 00007fbe42186128 R14: 00007fbe42186090 R15: 00007fff4d5bfa98 [ 181.034625][T10829] [ 181.256952][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.459450][T10863] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 181.542510][ T28] audit: type=1400 audit(1774541267.520:856): avc: denied { getopt } for pid=10864 comm="syz.5.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.597065][ T28] audit: type=1400 audit(1774541267.570:857): avc: denied { listen } for pid=10864 comm="syz.5.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.646505][ T28] audit: type=1400 audit(1774541267.620:858): avc: denied { write } for pid=10871 comm="syz.5.867" name="file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 181.668986][ T28] audit: type=1400 audit(1774541267.620:859): avc: denied { ioctl } for pid=10871 comm="syz.5.867" path="/139/file0" dev="tmpfs" ino=772 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 181.733500][T10875] loop5: detected capacity change from 0 to 1024 [ 181.745609][T10875] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 181.754447][T10875] System zones: 0-1, 3-36 [ 181.762578][T10875] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.868: bad orphan inode 134217728 [ 181.773495][T10875] loop5: lost filesystem error report for type 5 error -117 [ 181.777058][T10875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.823376][T10882] loop7: detected capacity change from 0 to 256 [ 181.834868][T10882] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.847019][T10882] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 181.858350][T10882] FAT-fs (loop7): Filesystem has been set read-only [ 181.906946][T10885] ================================================================== [ 181.915019][T10885] BUG: KCSAN: data-race in filemap_read / filemap_read [ 181.921846][T10885] [ 181.924144][T10885] write to 0xffff88813d7f3be8 of 8 bytes by task 10875 on cpu 0: [ 181.931830][T10885] filemap_read+0x98d/0xa10 [ 181.936309][T10885] generic_file_read_iter+0x79/0x330 [ 181.941579][T10885] ext4_file_read_iter+0x1cc/0x290 [ 181.946666][T10885] copy_splice_read+0x471/0x6c0 [ 181.951507][T10885] splice_direct_to_actor+0x28f/0x670 [ 181.956884][T10885] do_splice_direct+0x119/0x1a0 [ 181.961738][T10885] do_sendfile+0x382/0x650 [ 181.966159][T10885] __x64_sys_sendfile64+0x105/0x150 [ 181.971366][T10885] x64_sys_call+0x2dc4/0x3020 [ 181.976045][T10885] do_syscall_64+0x12c/0x370 [ 181.980646][T10885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.986543][T10885] [ 181.988860][T10885] write to 0xffff88813d7f3be8 of 8 bytes by task 10885 on cpu 1: [ 181.996881][T10885] filemap_read+0x98d/0xa10 [ 182.001389][T10885] generic_file_read_iter+0x79/0x330 [ 182.006672][T10885] ext4_file_read_iter+0x1cc/0x290 [ 182.011771][T10885] copy_splice_read+0x471/0x6c0 [ 182.016609][T10885] splice_direct_to_actor+0x28f/0x670 [ 182.021968][T10885] do_splice_direct+0x119/0x1a0 [ 182.026814][T10885] do_sendfile+0x382/0x650 [ 182.031228][T10885] __x64_sys_sendfile64+0x105/0x150 [ 182.036416][T10885] x64_sys_call+0x2dc4/0x3020 [ 182.041087][T10885] do_syscall_64+0x12c/0x370 [ 182.045664][T10885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.051544][T10885] [ 182.053850][T10885] value changed: 0x00000000000000a7 -> 0x00000000000000a8 [ 182.060938][T10885] [ 182.063241][T10885] Reported by Kernel Concurrency Sanitizer on: [ 182.069372][T10885] CPU: 1 UID: 0 PID: 10885 Comm: syz.5.868 Not tainted syzkaller #0 PREEMPT(full) [ 182.078642][T10885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.088684][T10885] ================================================================== [ 182.355781][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.