last executing test programs: 3m46.37037808s ago: executing program 4 (id=354): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x0, &(0x7f0000000080)}) write$ppp(r0, &(0x7f0000000180)="6bdff9110d5f", 0x6) 3m46.292114764s ago: executing program 4 (id=357): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x1, 0x1aa2, 0x8}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffede}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044841}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7c, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000dc0)=@ethtool_rxnfc={0x2e, 0x2, 0x806, {0x4, @usr_ip6_spec={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff8, 0x3d, 0xe}, {0x0, @local, 0x11, 0x4, [0x7, 0x6]}, @esp_ip4_spec={@multicast2, @initdev={0xac, 0x1e, 0xfe, 0x0}, 0xb54, 0x3}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}, 0x5, [0xffff, 0xfffffff9, 0x7fffffff, 0x4, 0x48eefe28]}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf250200000008000100547413eb5ba0d5c0a70ed397cd86e8b6e3aac40f23e8c2729729c49cbb15e452dc99e56354987b3a5407b347ff3ee881", @ANYRES32=r5, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r9 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$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") r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) statx(r9, &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x2, &(0x7f0000000cc0)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000140)={0x1f, 0xffff}, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x4004) 3m45.857144867s ago: executing program 4 (id=368): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d4e9f3570a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2d7, &(0x7f00000007c0)="$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") r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) socket(0x200000000000011, 0x2, 0xd) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc) 3m45.759797073s ago: executing program 4 (id=372): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1d8, 0x1d8, 0x0, 0x1d8, 0xe8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff, 0x4000], [0xff0000ff, 0x4de325748c9179dc, 0xffffffff, 0xff000000], 'wlan1\x00', 'wlan0\x00', {}, {0xff}, 0x6, 0x0, 0x2, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e21}}}, {{@ipv6={@remote, @local, [0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff], 'veth1_macvtap\x00', 'erspan0\x00', {0xff}, {}, 0x87, 0x7f, 0x4, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1, 0x33, 0x23, 0x8}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'pimreg\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x49, 0x1, 0x54}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xffffffff, 0x7, 0x76be0f9b, 0x7, 0x8, 0x4, 0x733]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5c, 0xf7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 3m45.700301525s ago: executing program 4 (id=373): r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x40000004}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x80000001, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x204, 0x6, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x5, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x88, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x402, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x4251, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x401, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0x6d5f, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x2, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x0, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x9, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x804, 0x7fff, 0x62, 0xfffeffff, 0x5, 0x2, 0x7fffffff, 0x3, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x10001, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r2) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x684}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40400d4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000080)='id\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@K@J\b\xd5w\xf3}q\x92\x02oqK,\x97q\xc3Yg\xf6\x98\xa1j\x90y\x01\xc6\x81y\"n\xb9v\x1cA\xa6E7\x1c\xa7\xfa3\x12\xed\xe6\xaaz\xba\xbd\x81[\x8c\xb6\xf6Z~\xdb\x95\xdc\xc9\xf5\xb7\xfezj\xd0s>O\xe9\x91b\xdc\xb7\xb4\x9aS\xf6{\xe5\xf1\xabyn\x14\x04\xc7~v`\xe8\xb0\x7f8\t\xa8\xf7\xb9\xb92\xa5\b\xb8\xce6A\x92D#\xb6c\xad\xabIr\x061\xbe\x9aEF6O\xe1\xbb\xc6\x17|\xfa{!-\xe4\xe1\xaf;\xf6\x81\"\x8a\xb5\x12\xd4d\xd3\xa2\x134\xca\x04.\xdfbN\xee{\xcc\x8a\xa4\xe0\x1d\x13[\xe7\xc1\xa2u~\x11\xf3\xd0') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) 3m45.561355933s ago: executing program 4 (id=375): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc5, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000001c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, 0xff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6(0xa, 0x3, 0x8c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x2001, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r7, 0x0, 0x14, 0x0, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000500"/28], 0x50) syz_open_dev$usbmon(&(0x7f0000000140), 0x7f, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r9, @ANYRES32=r1, @ANYBLOB="1100000000000000", @ANYRES32=r1, @ANYBLOB="c1ef489c8c0738afd62df9be3b8ea42113cd08d6a498f28fe149edac8c931494aeb5fa0d9f3400edf974c5766a287c482ba754db7ee3220001202829442970c8f64316e3dc58365c15574ed9575abd1ffd2d112344eed3b44db40a94f48fc577fd9a3f9c5d54ca8140fabf374ba7dafeb67f886d93e7ffffffff0000000050a0d79b2a842275cf903c3c64f2762e4d02b9d0c916b7ba11ba1ae9d0b7df6c8e4767a8e60e8e27f787dc332de5a99b5c72d31a125ca08d3f7dd1d7318c33b8ae79b0f95e51", @ANYRES32=r1, @ANYBLOB, @ANYRES64=r8], 0x20) socket$nl_route(0x10, 0x3, 0x0) 3m36.188887538s ago: executing program 3 (id=455): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/55, 0x37}], 0x1}, 0x140) writev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="08000000246837f7", 0x8}], 0x2) 3m35.415338679s ago: executing program 3 (id=457): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f00000000c0)={[{@prjquota}]}, 0xf7, 0x485, &(0x7f0000001040)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITHAW(r0, 0xc0045878) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$NL80211_CMD_AUTHENTICATE(r2, 0x0, 0x24000800) close_range(r3, 0xffffffffffffffff, 0x2) open(&(0x7f00000000c0)='.\x00', 0x20000, 0x80) sendmsg$nl_route(r1, 0x0, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) 3m35.035755949s ago: executing program 3 (id=462): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}, 0x107220, 0x10004, 0x20da, 0x9, 0xa, 0x20008, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x40002, 0x83) pwritev2(r0, 0x0, 0x0, 0x6400, 0x0, 0x3) 3m34.823003261s ago: executing program 3 (id=463): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@dmode={'dmode', 0x3d, 0x6}}, {@check_strict}, {@unhide}, {@nocompress}, {@overriderock}, {@showassoc}, {@session={'session', 0x3d, 0x2c}}]}, 0x1, 0x6a1, &(0x7f00000029c0)="$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") socket$kcm(0x2b, 0x1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000001440), 0x4) r0 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000200), 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x2) r4 = syz_clone(0x20001000, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, r4, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)}, {&(0x7f0000001540)="7eaa8a2ea0c750c2663f479c4dcc2b45de4ce0c62e7c768dc8774e199f28801c227d3a6a9aaa99a6825d9daab00d5def687decc08aef3ae3f8cd2bebddd313f6036a68cd0409766ce020d4621f98c60e291fa44ce2bce823b9525b95a58dc44d73f8fb0ab9be35da68c6bd54ff2ffac987c034dbea65713e913f96a7d99a0100000015693a58ec2a20c5b2000000000000e6000000", 0x95}], 0x2}, 0x0) close(r3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="09f10f340000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000400"/25], 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001480), 0x4) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000013c0)=@generic={&(0x7f0000001380)='./file0\x00'}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001400)=@o_path={0x0, r6, 0x4000, r5}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffe95) syz_open_procfs$namespace(0x0, &(0x7f0000004940)='ns/time_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000004bc0)='ns/time_for_children\x00') sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00'], 0x511000) 3m34.520537657s ago: executing program 3 (id=467): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1d0, 0x194, 0x194, 0x1d0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x88, 0x1, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x12}}, @common=@ah={{0x30}, {[0xffffffee, 0x9], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xb, 0x0, 0x4, 'snmp\x00', {0xfffffffffffffff7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f00000006c0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x6c00, 0x270de59453e86dcf, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000d80)={{}, {}, [{0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x4, r2}, {0x2, 0x4, r1}, {0x2, 0x0, r2}, {0x2, 0x2, r1}], {0x4, 0x2}}, 0x4c, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) fcntl$setlease(r4, 0x400, 0x1) 3m34.293488689s ago: executing program 3 (id=471): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYBLOB="d95c39a2cd19e7596754c4291a3af2eea1254d3f555e45540b1948bdc3a714a6b30ce8d9c17d57ab97ca206feccd7bf1664582048ab5d8cfb880e667fd3979f34b8e141c45f5cd0c28344f"], 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x8, 0x3, 0x7, 0xd, 0x0, 0x0, 0x100, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x351, 0x2, @perf_config_ext={0xb778, 0x2}, 0x10c010, 0x5, 0x0, 0x0, 0xa5e, 0x6, 0x7, 0x0, 0xc847, 0x0, 0x5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/184, 0xb8}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @func_proto]}, {0x0, [0x5f, 0x2e, 0x2e, 0x30]}}, 0x0, 0x3e, 0x0, 0x3}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="03a45e019078ac1e0001ac1414aa030490781200183f250000000000000000010000e00000017f00000100180000000000c51c61c969580000000000000000"], 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000040)='./cgroup/../file0\x00', 0x265) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x154) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) 3m34.26812239s ago: executing program 32 (id=471): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYBLOB="d95c39a2cd19e7596754c4291a3af2eea1254d3f555e45540b1948bdc3a714a6b30ce8d9c17d57ab97ca206feccd7bf1664582048ab5d8cfb880e667fd3979f34b8e141c45f5cd0c28344f"], 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x8, 0x3, 0x7, 0xd, 0x0, 0x0, 0x100, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x351, 0x2, @perf_config_ext={0xb778, 0x2}, 0x10c010, 0x5, 0x0, 0x0, 0xa5e, 0x6, 0x7, 0x0, 0xc847, 0x0, 0x5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/184, 0xb8}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @func_proto]}, {0x0, [0x5f, 0x2e, 0x2e, 0x30]}}, 0x0, 0x3e, 0x0, 0x3}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="03a45e019078ac1e0001ac1414aa030490781200183f250000000000000000010000e00000017f00000100180000000000c51c61c969580000000000000000"], 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000040)='./cgroup/../file0\x00', 0x265) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x154) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) 3m34.26464255s ago: executing program 1 (id=473): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setresuid(0xee01, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c8c4}, 0x4) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x202, 0x0) writev(r1, &(0x7f0000000500), 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000480)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="94", 0x1}], 0x1}}], 0x2, 0x2000c044) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 3m34.219609723s ago: executing program 1 (id=474): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m34.094708229s ago: executing program 1 (id=477): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0c050000", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) 3m33.741322948s ago: executing program 1 (id=478): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@dmode={'dmode', 0x3d, 0x6}}, {@check_strict}, {@unhide}, {@nocompress}, {@overriderock}, {@showassoc}, {@session={'session', 0x3d, 0x2c}}]}, 0x1, 0x6a1, &(0x7f00000029c0)="$eJzs3dFuFNf5APBvwSaW8xf6q6kQQoRMoFWNRMzuOhhZudqux/Yk653VzDqCqwgFEyFM0kIqFa6CKqWt1D5EbvsIvWhvKvURelP1DaI+Qqud3QUDtjc1mEXo91vBOd759pzvrFfzaWzPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUWuv1uuNWnSy7ta1ZH/t1SLfPGD7eLy/PtUcMG9EbfAv5ubi9PCp0z9+svnU4L/zcXb41dmYGzRz8fDtU///0Tszx8avPyChV+L+g4d3buzsbN+bdiJTsp52szLPNlvraZKVebKyvFy/vLFWJmtZJy2vl/10M2kXaaufF8lC+2LSWFlZStLF6/lWd3211UnHT179oFmvLycfL/bSVlHm3csfL5btjazTybrrVcxg8yDm6uCD+EnWT/ppazNJbt3e2V6alOQgqPFDgpr7b/7HWxFJ0qw3m41Gs9lYvrJy5Wq9PvPcE/VnxHMR0//QMk0nkpe8B4fDOzaq/9GJLLqxFdci2fPRjtUoIo/NfbaPjOv/Ty+nEX+ei/hm73l31/9xlT/9ZPOZqOr/ueFX5/ap/38/Pty+d0ZH/ZiNJO7Hg3gYd+JG7MRObMe9KeUyrcd6pNGNLMrII4vNaFXPJKNnkliJ5ViOenwWG7EWZSSxFll0Io0yrkcZ/UirT1Q7ikhjNvqRRxFJLEQ7LkYSjViJlViKJNJYjOuRx1Z0Yz1Wo1WNcituV+/70gE5Pg5qRBInJgU1DxhJ/efFHc2OHA7hP+P6DwAAALyxatVP3wfH/7PxbtVbyzppfdppAQAAAC9R9Zv/s4NmdtB7N2qO/wEAAOBNU6vOsatFxHy8N+yNz4TyQwAAAAB4Q1S//z83aOYHvfei5vgfAAAA3jS/m3iN/bL3Vu0v/46imK096l37Se1uaxDXuju69u7xZ0fsr52pnRwNUjXLw+ad9O30bG109cvHF8GcHTbf33qcx7/2zqP24gnMxB/i/WHM+zeH7c3xluEs82tZJ11s552PGtFqnTzWT6/1f/Xl7V9HtfzfdzdP1uLW7Z3txc+/2rlZ5fJoMMqju6MLKD53HcU9chlv+rq63kJ1zsWeK56tTsQYzTs/nLe+e/3Hhi8/9j+s/9s4P4w5Pz9s559e/9xgzsbifqsfZdE45MqfZHFhGHNh4cKw2SOL5qQsmruzONR7McoiDshiaVIWSy+YBcC03JpQhWrPF/5D7OUeV/ff/PMIq/u3sTCMWThT7VhnzuyxR69P2qPXX7C6/SkuDmMujoP3q7GDef/4TFX9bvCC7/adt+w0a4Nv1PGv7/4iTt1/8PCD23dvfLH9xfaXzebScv3Dev1KM2arZYwatQeAPUy8x87kiNqHE46qf/S4kC3G5/FV7MTNuFSdbVD9xcGeo87v+jOESxOOWud33eHl0rPHljETsSs2Ir4Z3+jludiF/cZdOupvAwC8Uucn1OEfUv8vTTjufrqWH3x0vLuWAwBHIy2+r833f1sriqz3WWNlpdHqb6RJkbc/SYpsdT1Nsm4/Ldobre56mvSKvJ+3886g82m2mpZJudXr5UU/WcuLpJeX2bXqzu/J6NbvZbrZ6vazdtnrpK0yTdp5t99q95PVrGwnva2fd7JyIy2qF5e9tJ2tZe1WP8u7SZlvFe10MUnKNN0VmK2m3X62lg263aRXZJut4nryad7Z2kyT1bRsF1mvnw8HHM+VddfyYrMadnHabzYAvCbuP3h458bOzva9I+xMe40AwNNUaQAAAAAAAAAAAAAAeP29ivP/jrrzf4dbxc/+dvhJf/mGvHWvrDMTr0UaU+6M7nYRRzHFiZc84JR3TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwh/8GAAD//4NVULU=") socket$kcm(0x2b, 0x1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000001440), 0x4) socket$kcm(0xa, 0x2, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000200), 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x2) r3 = syz_clone(0x20001000, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, r3, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)}, {&(0x7f0000001540)="7eaa8a2ea0c750c2663f479c4dcc2b45de4ce0c62e7c768dc8774e199f28801c227d3a6a9aaa99a6825d9daab00d5def687decc08aef3ae3f8cd2bebddd313f6036a68cd0409766ce020d4621f98c60e291fa44ce2bce823b9525b95a58dc44d73f8fb0ab9be35da68c6bd54ff2ffac987c034dbea65713e913f96a7d99a0100000015693a58ec2a20c5b2000000000000e6000000", 0x95}], 0x2}, 0x0) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="09f10f340000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000400"/25], 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001480), 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000013c0)=@generic={&(0x7f0000001380)='./file0\x00'}, 0x18) 3m33.543335258s ago: executing program 1 (id=481): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1d0, 0x194, 0x194, 0x1d0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x88, 0x1, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x12}}, @common=@ah={{0x30}, {[0xffffffee, 0x9], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xb, 0x0, 0x4, 'snmp\x00', {0xfffffffffffffff7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f00000006c0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x6c00, 0x270de59453e86dcf, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000d80)={{}, {}, [{0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x4, r2}, {0x2, 0x4, r1}, {0x2, 0x0, r2}, {0x2, 0x2, r1}], {0x4, 0x2}}, 0x4c, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) fcntl$setlease(r4, 0x400, 0x1) 3m32.889358753s ago: executing program 1 (id=483): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000500010000001400070000000000"], 0x74}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m32.885806743s ago: executing program 33 (id=483): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000500010000001400070000000000"], 0x74}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m30.383934665s ago: executing program 34 (id=375): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc5, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000001c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, 0xff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6(0xa, 0x3, 0x8c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x2001, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r7, 0x0, 0x14, 0x0, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000500"/28], 0x50) syz_open_dev$usbmon(&(0x7f0000000140), 0x7f, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r9, @ANYRES32=r1, @ANYBLOB="1100000000000000", @ANYRES32=r1, @ANYBLOB="c1ef489c8c0738afd62df9be3b8ea42113cd08d6a498f28fe149edac8c931494aeb5fa0d9f3400edf974c5766a287c482ba754db7ee3220001202829442970c8f64316e3dc58365c15574ed9575abd1ffd2d112344eed3b44db40a94f48fc577fd9a3f9c5d54ca8140fabf374ba7dafeb67f886d93e7ffffffff0000000050a0d79b2a842275cf903c3c64f2762e4d02b9d0c916b7ba11ba1ae9d0b7df6c8e4767a8e60e8e27f787dc332de5a99b5c72d31a125ca08d3f7dd1d7318c33b8ae79b0f95e51", @ANYRES32=r1, @ANYBLOB, @ANYRES64=r8], 0x20) socket$nl_route(0x10, 0x3, 0x0) 2m41.776854835s ago: executing program 7 (id=999): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r1, 0x5170c560dce29b81, 0x4, 0x25dfdbfe}, 0x14}, 0x1, 0xffa6, 0x0, 0x8000}, 0x40408c4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 2m41.725774798s ago: executing program 7 (id=1000): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x41}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c045}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 2m41.623577843s ago: executing program 7 (id=1004): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=@fragment={0x21, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x8, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0x9, 0x4, 0xfffffffd}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x8, 0x1, @loopback}]}, 0x3c}}, 0x44000) 2m41.619124124s ago: executing program 7 (id=1005): syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x0, 0x20, 0x0, 0x20, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @remote}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pimreg\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}}) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_pidfd_open(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r6 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000200)={[{@usrjquota}, {@quota}, {@resgid={'resgid', 0x3d, r7}}, {@barrier}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@block_validity}]}, 0x0, 0x480, &(0x7f0000000500)="$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") newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fchownat(0xffffffffffffffff, 0x0, r8, 0x0, 0x1000) write$P9_RSTATu(r4, &(0x7f0000000240)={0x60, 0x7d, 0x2, {{0x0, 0x46, 0x0, 0x8, {0x1, 0x4, 0x9}, 0x5040000, 0x7bce, 0x7, 0x8, 0x5, 'sit0\x00', 0x8, 'syztnl2\x00', 0x1, '\x1b', 0x5, 'sit0\x00'}, 0x5, 'sit0\x00', r5, r7, r8}}, 0x60) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 2m40.17465474s ago: executing program 7 (id=1013): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x2000) clock_gettime(0x69b3e55d5e8b834b, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000980)={[{@nodelalloc}, {@noblock_validity}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@minixdf}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9d, 0x4f0, &(0x7f0000000a40)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x1000}, 0x4580, 0x5, 0x800000, 0x9, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000001c0), 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x20007ff, 0x3ff, 0x0, 0x59, 0xb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) chdir(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r3 = creat(&(0x7f0000000080)='./file1\x00', 0x8) write$P9_RVERSION(r3, &(0x7f00000008c0)=ANY=[], 0x27848c70) memfd_create(&(0x7f00000001c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x01\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xa7mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x14\xe1\xc6M\x98?\x81\xadm\x1e\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87H\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xf7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xc7X\x83\x960\"p\xca\xcf\xf3\"vd@J?\xf5FYL\x82\"jg\x8b\xce\x16N\xff\x1dm\xd6e\xaci}\x87\x1a\x12\xb3\xb27XF\xfd\xb5+j^Iji$\xa2\x8e*^{f\xb1\xf6\xd2\t4\xa3\xc6\x98SX\x9eA\\Vi\xb8\x10\x9b\xc3N\x15#\xa2\xc9\x89|BP\xbbG\x1fR\xf8sY\x04\xe6\x81\xf6\tX\xf6\r\x1f\x05\xa2.W\"\xe6\xdc4\xb7\xb2}\xbb\x96\xdd\x89\xf2\xf6\x98\x12;\x01*n\x83\x98\x13\x9d#\xb1\x7f\x86\xf8\xb0', 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000170a0101000000000000000002"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r2) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x3c, r5, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xac}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c005}, 0x40010) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) 2m39.014039002s ago: executing program 7 (id=1023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x828, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5", 0x81}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x2000040) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x154) r8 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r8, 0x0, 0x20000000) connect$inet6(r8, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$packet_add_memb(r7, 0x107, 0x1, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 2m23.35318221s ago: executing program 35 (id=1023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x828, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5", 0x81}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x2000040) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x154) r8 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r8, 0x0, 0x20000000) connect$inet6(r8, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$packet_add_memb(r7, 0x107, 0x1, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 1m14.545620628s ago: executing program 0 (id=2120): r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000480), 0x4) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r5, 0xf7c) poll(&(0x7f0000000000)=[{r5, 0x100}], 0x1, 0x9b0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000845}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m13.56748651s ago: executing program 0 (id=2126): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x20400) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8f", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x6000000, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e21, 0x4, 'lblcr\x00', 0x27, 0x204, 0x8}, 0x2c) 1m13.296312544s ago: executing program 0 (id=2130): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000100)=0x8) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x2, 0xe, 0x140, 0x3710000, 0x3, 0x2002}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) socket$kcm(0x29, 0x0, 0x0) 1m13.073401986s ago: executing program 0 (id=2131): perf_event_open(&(0x7f00000012c0)={0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x21208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f0000001880)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40080) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000f80)={0x5, 0x11, 0x0, 'queue0\x00', 0x1c44}) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x803) listen(0xffffffffffffffff, 0x7d4165c9) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc242, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000040)=0x9, 0x4) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f0000000180)) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000004c0)="88a6a8d8d401f667ce80ef2e04f203a7aa0d0aec0d942eac4d8b3956dadad19514097773df68036ab87efd717543f37cc79591ad8a27347915e769f714d8d5748b1dc00ae66d83e904ce504742876d249c45b5631c3cb0589629e5fb6e990f40eb70c0a3460ec0c7f5ef2f1a5fe53565e858b0b3908701a38bae1d064b524b5b21b1473b3a875a4769ec280f020cf03e", 0x90, 0xfffffffffffffff9) fcntl$setownex(r8, 0xf, &(0x7f0000000340)={0x2, 0xffffffffffffffff}) 1m12.869249487s ago: executing program 0 (id=2136): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000340)={0x3, 0x6f, 0x6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m11.931929066s ago: executing program 0 (id=2144): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2400, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x1000}}]}, 0x82, 0x499, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) (async) socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="d260c900"/16, 0x10}], 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x7, &(0x7f0000000080)=0xb) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x8000800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) (async) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4621, @local}, 0x10) (async) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000300)=0xffffffff, 0x4) 1m11.779677825s ago: executing program 36 (id=2144): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2400, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x1000}}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) (async) socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="d260c900"/16, 0x10}], 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x7, &(0x7f0000000080)=0xb) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x8000800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) (async) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4621, @local}, 0x10) (async) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000300)=0xffffffff, 0x4) 12.982254254s ago: executing program 6 (id=2816): r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000480), 0x4) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r5, 0xf7c) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 12.10386936s ago: executing program 6 (id=2835): socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x2000000000007}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x5}, 0x106000, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x82, 0x499, &(0x7f0000000840)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 11.873123262s ago: executing program 6 (id=2839): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7d, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0xffffffffffff8001}, 0x106200, 0xbd, 0x40, 0x8, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) 10.21734949s ago: executing program 6 (id=2842): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x900}, 0x4, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x4, 0x8, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000140)=0x1, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) 7.085139015s ago: executing program 6 (id=2891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)={0x50, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x50}}, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x2000000db002) brk(0x200000ffc000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x128, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xcc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc6}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b23f9d13fdd1806be058c43f5653f32d31c43441e9a8b167c84dd590f3a1cd29"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5af2591740a6074d0cb65472f15e3242"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "685ba4d36706e561dd92e7ed5007bfdfab2667e942c0481a0edc6219f23302c9"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d717ea72511ff216cda391a83320da0c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "999f19a834588f1cb5463800826dae349273b00cb6656cb72b9003b8738871dd"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d2a385e45583289afaffc6bb8e9e7797a4983d0291aa5a38ec6b3104d8cfb070"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x128}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002400)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x24dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x4, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0xddc, 0xad, 0x2, 0xc7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x2003e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x20000000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000000b00)={{r8, &(0x7f0000000280)='-]\x00', 0x200000, &(0x7f00000002c0)={@align=0x2, {0x2ec7, 0x6, 0x2, 0xcf4}}, 0x10000, &(0x7f0000000340), &(0x7f0000000680)=0xf6}, 0x4, &(0x7f0000000a80)=[{0x3, 0x2, &(0x7f0000000700)=']/@\x00', &(0x7f0000000740)="c2adfab21da550afa158b03be846600fb9f7d2e74d4e6c8dadd51329606d29cf80edef48b215a7fb6aed7159ea79ac90411bf039", 0x34, 0xa}, {0x3, 0xd, &(0x7f0000000780)='nl802154\x00', &(0x7f00000007c0)="d86e74436bd1a0b87d75d28f8a705d10a9774fdd22c0dfec636d19f91b4b914de5930f1d67fe48a166814219b67eeaf1e1b99d633c3d11199b786436ad5159e3aab8c93eabf1b4c4de69066e139548939f0496e788fdce0e1d825c372e2ab8fc00cbdbd65d37d9d0bf0e127a24f2787d7b538248a4c20dc80917ade814990046f474faa0b6a2ef346e1c6f51c35938ea878eb7", 0x93, 0xa}, {0x3, 0xa59, &(0x7f0000000880)='wpan0\x00', &(0x7f00000008c0)="367246e2deb645fda229eb0570717af3ca8633d04108782eb01ce0d8fc5a0d6599a9724cc8b11b7fc6cd34936bcb46e3be862daccacd82ba84d8f30b37563cca837052c434de594f2a49c3a71388a82eaa12a016e2424514d97db63d4e730cb2ac8cfd89f3f91a7ebd23dc63b849f81f352a", 0x72, 0x2a}, {0x2, 0x81, &(0x7f0000000940)='.\x00', &(0x7f0000000980)="02451f4bedfd79ab4b9e6bc82dba79c307dfc85ee3114cf92a17db698a7eb140cae48f5ec30d3126a56482a3bff315443117cae20c20d05fa03f60f469f4066c4a4454adb8b0ede7b8c213020f6832f95a9c53a3e9623101728a1f425f72e625d0b2ffb0dc2db3fc94ab71e7ae21a80a25461ddbe7a9ecb0152ae341eda14be9a83b8e50884ec85a67380ab82782f345e0c3fda33fe06158d9fab4cc3f351ddbd807f26250e5bffc2489280aa422b1658fd117c321562a01a4e167ec185359752d9014e87697a750743a5443de7eca77ad14475377de3f3e489b2bb0ef6b195d614d", 0xe2, 0x20}]}) r13 = geteuid() sendmsg$nl_xfrm(r12, &(0x7f0000000e40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x18400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)=@newsa={0x230, 0x10, 0x400, 0x70bd27, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010100, 0x4e22, 0xa, 0x4e24, 0x0, 0x2, 0xa0, 0x20, 0x114, 0x0, r13}, {@in=@loopback, 0x4d6, 0x2b}, @in6=@local, {0x1, 0x7fffffffffffffff, 0xfff, 0xe5e, 0xffff, 0xe12, 0x65, 0xfffffffffffffffa}, {0x9, 0x4, 0x0, 0x80000001}, {0x205, 0x6, 0x9}, 0x70bd28, 0x4, 0xa, 0x0, 0xf, 0x45}, [@user_kmaddress={0x2c, 0x13, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@broadcast, 0x0, 0xf}}, @replay_thresh={0x8, 0xb, 0x7fffffff}, @algo_comp={0x89, 0x3, {{'lzs\x00'}, 0x208, "2876f54bbddf0d610134d7148f10ac3c396ee1cfe689f72bbe06cd396542141c43081d99ef90be00e7174ad4486f0ad948999b578888cdca62d20a4239c8c3bfa0"}}, @algo_auth={0x80, 0x1, {{'blake2s-160-generic\x00'}, 0x1c0, "731a75aff703320b3aab1226026e426da80768fe0a62486cbdb9c488d2112b553bf4388a79ad1dada7c9b44c8c2ebe4a5a218175229ee21c"}}]}, 0x230}, 0x1, 0x0, 0x0, 0x20010010}, 0x20000040) 7.055769707s ago: executing program 6 (id=2892): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x18b, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) 2.583494073s ago: executing program 8 (id=2931): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffff9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x37f9}}, @map_val={0x18, 0xf, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x11}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}]}, &(0x7f0000000500)='GPL\x00', 0x40, 0x30, &(0x7f0000000540)=""/48, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x20856, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x5, 0x2, 0xc, 0x4}], 0x10, 0xeda}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 1.855360002s ago: executing program 8 (id=2935): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x38, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x65}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000540)=""/87, 0x57}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x6e) 1.802558695s ago: executing program 9 (id=2939): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000811179000000000085000000cd00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000356d42a08000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="11110200000100001c0012800b0001006d616373656300000c000280050008000100000008000500", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1000) r4 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$eJzs3Mtv3NQaAPDPTvPoM2lvde/t494GCiKikDRpgS5YAAKpGxASLMoypKEqTVvUBIlWFU0RKsuKvwBYIiGxggVsQAIEbACxhT1CqlA3LSChQZ6xk5lkZjKZtAnp/H6Sk3Ps48d37OOx53gcQMcajIirEbElIn6KiP6ISBYWGKz8u3n94sTv1y9OJFEqPfdbUi534/rFiaJoMd/mPDOURqRvJrGnznqnz184NT41NXkuz4/MnH5lZPr8hQdPnh4/MXli8szYkSOHD40+8vDYQy3FcWmJ6VlcN3a/fnbvrqMvvP30RCle/OaDJI87FsRRMdDSepsZjMEo5ebH9pT/3rvipf+zbI2I3jydbFjjjaFlXRGR7a7ucvvvj66Y33n98dQbc5kv1mgDgdsm+2zavmhsV/4/nfv8Au5EiTYOHar4xM/uf4thNa8/1tq1x7O/k+X4b+bDd89U6ibN7mUHKnfsXQ3m/3edcX3zyVL/EuvfEhHHZv94Jxui7vcQTSQtlwQAmPNZdv3zQL3rv7Tm2mZb3ocyEBEHImJHRPwrInZGOlfmPxHx32Wuf3BBfvH1zw8bl7nIZcmu/x7N+7aKoTKliCuZy20tx9+dvHRyavJgXidD0d2b5UebrOPzJ3+82mjaYNX1XzZk6y+uBfPt+HVDb+08x8dnxlcQco1rlyOJDfXiT+Z6ArIa2BURu9tYflZnJ+9/f2+W3rZ58fSl42/iFvQzld6LuK+y/2djQfyFpLKmRv2TI30xNXlwpDgqFvv2+yvPVue7q9I18fe1FlNfu8HWce1yxKa6x38ef9EMiv7a6Tz/5ZaW13Hl57ca3tMs3v9JHJutLpEf/xvnqy07/nuS58vpnnzca+MzM+dGIz7NR9SMH5tfWpEvymfxD+2vjb9yX5xm57i/3s3n2xMR2UH8v4j4f0Tsy7f9roi4OyL2N4n/6yfuebl5DbV5/N8CWfzHm+3/iIGkur++jUTXqa8+abT+1s5/h8upoXxM9fmvp8FyW93AldYfAAAArAdpuQ86SYernt8u7IxN6dTZ6ZkDg/HqmeOVvuqB6E6Lb7r6q74PHc2/Gy7yYwvyhyJie/lJo43l/PDE2amtaxQzULG5qv1XzgVpOjxcmfZLo4degDvHsvrRqh86+/CjW78xwKrye03oXNo/dC7tHzqX9g+dq177vxRxcw02BVhl7X7+L3xgAFh3SjXvp6zxceu/8gLWJff/0Lm0f+hIi38Sn79uJTsntP+T/6kdR1fyxoDbnyj1tz97NJ40u/wFdrVWuHj7RctLbq1wElGEkzaJq04i0vkxf+ZvkyyP6a6U6Wl9U1c/kS5Z5rGlaqN7We/E6KtTG/vyRG9EtLqcS6tWq8UZIvGWSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF37OwAA//9fT+xE") r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000102, 0x0, 0x0) 1.69960759s ago: executing program 8 (id=2940): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fstat(r0, &(0x7f0000000400)) 1.661514192s ago: executing program 8 (id=2941): socket$netlink(0x10, 0x3, 0x0) geteuid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) rt_sigqueueinfo(0x0, 0x9, &(0x7f00000023c0)={0x20, 0x2, 0x2}) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) 1.465937503s ago: executing program 9 (id=2942): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.224555816s ago: executing program 9 (id=2944): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=@newtfilter={0x40, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x48c0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000001280), &(0x7f0000001300)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x30, 0xbe, 0x0, 0x8000}, {0x20, 0x4, 0x0, 0xfffff024}, {0x6}]}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000001240)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x8005) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xffff, 0xb}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10044045}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/resume_offset', 0x1, 0x14e) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)='9,\x00', 0x3}], 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001340)={{0xffffffffffffffff, &(0x7f0000000a00)='!\x00', 0x4c4842, &(0x7f0000000a40)={@_ha_fsid={[0xfffffff9, 0x401]}, {0x5, 0x3, 0x9}}, 0x2, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x4, &(0x7f0000000e80)=[{0x1, 0x5, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="edc0d7455d0435c43a2fd5d2bc8d4a8ad272e00920b65d52914867c33c78ce01c8e9a32c09d3293ca9a8d5172591182d15d40f15ecf1e92f64aba003a785c357d47d2dc8d7d9e69305b24791e95ca4207e580742ff60f958974a5d8c3912ea2373cae511958e26eec2c2ae73854f9448d9a79b3055aeb45bd19071dac9376093a42eed60fa5b38263dbbd9b36daabc3da79252f30067a0a16ab1dcffe0f6", 0x9e, 0x10}, {0x3, 0x6, &(0x7f0000000c00)=')\'}[\x00', &(0x7f0000000c40)="264c85dd10dba2d517c297dace89b05efdab22d256487970f578960fcf92258ee5d6f19decd80e3f827c24fc4c7bbf8cf058231ffad55e3b3bfcbbeebb16db3affaf56b5", 0x44, 0x2a}, {0x3, 0xd, &(0x7f0000000cc0)='multiq\x00', &(0x7f0000000d00)="05996ec131a1920909574f3a6e7229479b5f99ce6bea2744129ded0780ec37946ab4bac43537355601b150a4a106ec9c095bdfc26220b472bf613c86285ae90fe3abbdb0192d88a0df4b90ce1d0112ce25ffaf8c1265f618ebb5035ea1966b86b07ed7013844a6d4f3233d45049b52611c7c39d08319427d9a36ca5b0cac35ad6a51010a985a4b6412f6de4fd276ded4af4887f2c987724a4643ab90ee69640390b4e6b69a24075493d95e208583ae6fa421c4ff04c56ae797f3f1839fef3cfae13f33d8def55546fc1d8101b9c19d6e3858f5a89a993e9864213dcde833f83dc5", 0xe1, 0x10}, {0x3, 0x1, &(0x7f0000000e00)='(\\\\\x00', &(0x7f0000000e40)="8464251b3b22683144999f5b1a2528a7f6922d6b72817d83", 0x18}]}) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001040)={&(0x7f00000010c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000226bdf9070000df251f0000000400cc000400cc000700210062620000050092000300000089f1618d6372f037e71cd36a0dc233aa66946c83dfd56a9a53b117d889e0482e8f41c037a9418db9f115f48839dc8157a332b3cbe1f32b18c05bc9f0688bfc71807048494763bd236c6b9e9c4f2fd12dd3e5a3e42d45851fa4307d0303d6c89d05da1c36aab285beb5ca7c0ef8dedb85bd0aba8b82ed44d1127ecfc8e262d03e0e79b0abb58e18f129f4bacc8478035d0f6d56918688d470b9b4ce1c150fde6d1241b461e479270ce68e0f73302f2a97703e"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x30) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x40000}, 0x10000844) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1000c, &(0x7f0000000280), 0xef, 0x4a0, &(0x7f0000000340)="$eJzs3M9vFFUcAPDv7LallR+tiCgIWkEj8UdLCyoHD2g08aCJUQ94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTj2ri0ZAQ7YXiqWZ2Z+iy3S3d0nZt9/NJtvvezuy+9515b/fNvM4E0Lb60z9JxLaI+D0ieivZ21forzzNzU6P3pydHk1ifv6tv5Pyejdmp0fzVfP3bc0yhwoRhU+TOJ4sLnfy4qUzI6XS+PksPzh19oPByYuXnjl9duTU+Knxc8PHjh09MvT8c8PPrkqcaVw39n40sW/Pq+9cfX30xNV3f/wmrdbu/ZXl1XHc0c06AdXR/9ubEf/Ml9Uue7yJum8E26vSSUcLK0JTihGR7q7Ocv/vjWIs7LzeeOWTllYOWFPpb9OWxotn5oFNLIlW1wBojfyHPj3+zR/rNPT4X7j+YkRXlp6bnR6duxV/RxSy1zvXsPz+iDgx8++X6SOaPQ8BALAC5bHN0/XGf4XYXX6uzHXsyOZQ+iLi3ojYGRH3RcSuiLg/orzuAxHxYOXN873LLL+/Jr94/FO4VrfOqyQd/71QNfabq4o/e+orZrnt5fg7k5OnS+OHs21yKDq3pPmhJcr47uVfP2+0rHr8lz7S8vOxYFaBax01J+jGRqZGVmsjXL8csbejXvzJrZmAtAXsiYi9zX30jjxx+smv9zVa6c7xL2EV5pnmv4p4orL/Z6Im/lyy9PzkYHeUxg8P5q1isZ9+ufJGo/LvKv5VcP3AQ5XEwv6vWaOqoZVK4+cnmy/jyh+fNTymWWn770reLs9Z//xe5bULI1NT54ciupLXyvn8mK78+vDCey+MTPWk+Xz9tP0fOli//+/M3pPu/3QrpY14f0Q8HBGPZHV/NCIORMTBJeL/4aXH3l8i/iSSaN3+vxwxVvf771b770uq5+tXkCie+f7bRjPmy9v/R2Om/F1bUf7+u4PlVvAuNx8AAABsCIWI2BZJYaCS7t8WhcLAQOV/+HfFPYXSxOTUUycnPjw3VrlGoC86C/mZrt6q86FDyUz2iZX8cHauOF9+JDtv/EWxp5wfGJ0ojbU4dmh3W2/v/5H3/9RfxVbXDlhzrteC9lXb/wstqgew/pbz++9YADan2/t/d/qnp1V1AdaX439oX/X6/8c1eeN/2JwW9/8/69yyDtiMjP+hfen/0L70f2hLzVzOH8cbLeqOiGZuC5BfLLDyuwp0L/sK/3ZJ5He8WMuyeuLSma7slSi0KNJik41tUyTSHpOsa6EL91ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYyP4LAAD//4kx3vw=") 935.099471ms ago: executing program 9 (id=2947): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 898.226583ms ago: executing program 9 (id=2949): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000500)={0x0, @private=0xa010101, 0x4e22, 0x0, 'wlc\x00', 0x1, 0x9df}, 0x2c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000400000140600fe880000000000000000000000000101fe8b00000000000000000000000000aa4e244e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5080000090780000"], 0x0) syz_clone3(&(0x7f0000000540)={0x2080, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) r3 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x19) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() tkill(r4, 0x14) r5 = gettid() tkill(r5, 0x12) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r8, 0x609}, &(0x7f00000000c0)=0x8) 798.940278ms ago: executing program 2 (id=2951): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async, rerun: 32) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000140)={{0x8, 0x1, 0x4, 0x80000001, 0x9}, [{0x28cc, 0x80000000, 0x1, 0x9}, {0x7f, 0x21c, 0xff, 0x5}, {0x4, 0x0, 0x7, 0x4}, {0x0, 0x1, 0x9, 0x5}]}) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x210, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x15121, 0x0, 0x0, 0x7, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x23, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f00000000c0)={{0x32, @rand_addr=0x4, 0x4e22, 0x1, 'wlc\x00', 0x0, 0x0, 0x2}, {@loopback, 0x8004, 0x3, 0x0, 0x7ff, 0x8000000}}, 0x44) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) 757.18877ms ago: executing program 8 (id=2952): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000356d42a08000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="11110200000100001c0012800b0001006d616373656300000c000280050008000100000008000500", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1000) r4 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$eJzs3Mtv3NQaAPDPTvPoM2lvde/t494GCiKikDRpgS5YAAKpGxASLMoypKEqTVvUBIlWFU0RKsuKvwBYIiGxggVsQAIEbACxhT1CqlA3LSChQZ6xk5lkZjKZtAnp/H6Sk3Ps48d37OOx53gcQMcajIirEbElIn6KiP6ISBYWGKz8u3n94sTv1y9OJFEqPfdbUi534/rFiaJoMd/mPDOURqRvJrGnznqnz184NT41NXkuz4/MnH5lZPr8hQdPnh4/MXli8szYkSOHD40+8vDYQy3FcWmJ6VlcN3a/fnbvrqMvvP30RCle/OaDJI87FsRRMdDSepsZjMEo5ebH9pT/3rvipf+zbI2I3jydbFjjjaFlXRGR7a7ucvvvj66Y33n98dQbc5kv1mgDgdsm+2zavmhsV/4/nfv8Au5EiTYOHar4xM/uf4thNa8/1tq1x7O/k+X4b+bDd89U6ibN7mUHKnfsXQ3m/3edcX3zyVL/EuvfEhHHZv94Jxui7vcQTSQtlwQAmPNZdv3zQL3rv7Tm2mZb3ocyEBEHImJHRPwrInZGOlfmPxHx32Wuf3BBfvH1zw8bl7nIZcmu/x7N+7aKoTKliCuZy20tx9+dvHRyavJgXidD0d2b5UebrOPzJ3+82mjaYNX1XzZk6y+uBfPt+HVDb+08x8dnxlcQco1rlyOJDfXiT+Z6ArIa2BURu9tYflZnJ+9/f2+W3rZ58fSl42/iFvQzld6LuK+y/2djQfyFpLKmRv2TI30xNXlwpDgqFvv2+yvPVue7q9I18fe1FlNfu8HWce1yxKa6x38ef9EMiv7a6Tz/5ZaW13Hl57ca3tMs3v9JHJutLpEf/xvnqy07/nuS58vpnnzca+MzM+dGIz7NR9SMH5tfWpEvymfxD+2vjb9yX5xm57i/3s3n2xMR2UH8v4j4f0Tsy7f9roi4OyL2N4n/6yfuebl5DbV5/N8CWfzHm+3/iIGkur++jUTXqa8+abT+1s5/h8upoXxM9fmvp8FyW93AldYfAAAArAdpuQ86SYernt8u7IxN6dTZ6ZkDg/HqmeOVvuqB6E6Lb7r6q74PHc2/Gy7yYwvyhyJie/lJo43l/PDE2amtaxQzULG5qv1XzgVpOjxcmfZLo4degDvHsvrRqh86+/CjW78xwKrye03oXNo/dC7tHzqX9g+dq177vxRxcw02BVhl7X7+L3xgAFh3SjXvp6zxceu/8gLWJff/0Lm0f+hIi38Sn79uJTsntP+T/6kdR1fyxoDbnyj1tz97NJ40u/wFdrVWuHj7RctLbq1wElGEkzaJq04i0vkxf+ZvkyyP6a6U6Wl9U1c/kS5Z5rGlaqN7We/E6KtTG/vyRG9EtLqcS6tWq8UZIvGWSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF37OwAA//9fT+xE") r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000102, 0x0, 0x0) 604.687278ms ago: executing program 5 (id=2953): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 557.762ms ago: executing program 5 (id=2954): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000040)={[{@nobh}, {@nombcache}, {@data_journal}, {@usrjquota}, {@barrier}, {@inlinecrypt}, {@init_itable_val={'init_itable', 0x3d, 0x10}}]}, 0x1, 0x48f, &(0x7f0000001380)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000040)={[{@nobh}, {@nombcache}, {@data_journal}, {@usrjquota}, {@barrier}, {@inlinecrypt}, {@init_itable_val={'init_itable', 0x3d, 0x10}}]}, 0x1, 0x48f, &(0x7f0000001380)="$eJzs289rHGUfAPDvTLJJ+/ZH8vbtq7ZWjRYhKCZNWrUHL0oFkYqCHuoxJtsSum2kiWJrsamIJ0EKehaPon+BJ0UQ9SR49eRJCkV7aespMpOZZLPd/KDZZNPu5wMz+zwzz+w8333mx7Pz7AbQsQayWRKxMyJ+j4i++ezSAgPzLzevXxy/df3ieBJzc6//leTlbly/OF4WLbfbUWQG04j0o6TYyVLT5y+cHqvVqueK/PDMmbeHp89feOrdM2OnqqeqZ0ePHj1yeOTZZ0afbkmcWVw39n8wdWDfS29eeWX8xJW3fv4mq+/OYn19HK0ykAX+91yucd3jrd5Zm+3K5735POluc2VYs66IyJqrkp//fdEVi43XFy9+2NbKARsquzf1Lr96dg64hyWx1pKVumsGcPcrb/TZ999y2oRux5Zx7fn5L0BZ3DeLaX5Nd6RFmcrC99vWG4iIE7P/fJFNsUHPIQAA6n0y/vnxnuiN9299/XLW9+hbWJPGffnrH/l8dzGG0h8R/42IPRHxv4jYGxH/j8jL3h8RD6yzPrf3f9Kr63zLFWX9v+eKsa2l/b+y9xf9XUVuVx5/JTk5WaseKj6Twaj0ZvmRFfbx/bHfPl1uXX3/L5uy/Zd9waIeV7sbHtBNjM2MRWU9US+6djlif3ez+JOFkYAkIvZFxP6FrdY0wLO7TEw+8dWB5QqtHv8KWjDONPdlFt5sFv9sNMRfSurHJydvG58c3ha16qHh8qi43S+/fvzacvtfV/wtcK06/1rX/o1F+pP68drp1u7/Do//tCd5Ix9n7inGHN8bm5k5NxLRkxzP898VzZcvH13ctsyX5bPjf/Bg8/N/T7FN9lYPRkR2ED8UEQ9HxCNF3R+NiMci4uAKMf70wurxR9qm9r8cMdH0+rdw/De0//kLp8tL4+KSFRNdp3/8drn9r639j+SpwWJJfv1bRbPqdDep8p1+bgAAAHA3SfPfwCfp0EI6TYeG5n/Dvzf+k9ampmeePDn1ztmJ+d/K90clLZ909RXPQ2uTtepIMlu8YyU5FrXqaPGsuHxeerh4bvxZ1/Y8PzQ+VZtoc+zQ6XYsc/5n/uxqd+2ADba96dLRnk2vCNAGjePo6dLspVfDxQDuVf6vDZ1rlfM/3ax6AJvP/R86V7Pz/1JD3lgA3Jvc/6FzOf+hQ6U/tLsGQBu5/0NHWvXP++1JbKtf0rNy4Z4tUueWJbZqo+SJiDKRbon6SGxQot1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA//9vGdqJ") (async) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x1) (async) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) (async) 457.215426ms ago: executing program 5 (id=2955): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7d, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0xffffffffffff8001}, 0x106200, 0xbd, 0x40, 0x8, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xfc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) 457.012416ms ago: executing program 2 (id=2956): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x609}, &(0x7f00000000c0)=0x8) (fail_nth: 2) 430.792597ms ago: executing program 2 (id=2957): r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000480), 0x4) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r2, 0xf7c) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 203.535929ms ago: executing program 8 (id=2958): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x38, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x65}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000540)=""/87, 0x57}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x6e) 153.441472ms ago: executing program 2 (id=2959): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 153.052022ms ago: executing program 5 (id=2960): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 150.342552ms ago: executing program 2 (id=2961): syz_clone(0x82001000, 0x0, 0x0, &(0x7f0000001840), 0x0, 0x0) 135.362923ms ago: executing program 5 (id=2962): socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x2000000000007}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x5}, 0x106000, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x82, 0x499, &(0x7f0000000840)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 91.301055ms ago: executing program 2 (id=2963): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@grpid}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@noload}, {@nodiscard}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f"], 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000001280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000002a80)={0x1550, r3, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0xd0, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @measure_req={0x26, 0x98, {0x3, 0x56, 0x3, "743c687d2023d0aa54680770ef08b52a6905a51e8af9c7073290e59dc68a55abd50bca7e58f3b14a80047e161deb95a3a021035ad5b88a2348d29953a8cc8bd5644fde06c192431bf91f2ce1eeb59cd5db7c0df8044618916f438d732a0763f337d3a351b860fe4f5ec2883a71fe81e299b326675036e9bfff143c17a8cb93f51f332a5f3de58abb62ffca7830f5c007f2875a1cff"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ht={0x2d, 0x1a, {0x9bd9ecaa371c9885, 0x2, 0x2, 0x0, {0x7, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfff, 0x3}}, @supported_rates={0x1, 0x5, [{0x48}, {0xb, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x36}]}, @supported_rates={0x1, 0x7, [{0x30, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x6c, 0x1}, {0x16, 0x1}, {0xc, 0x1}, {0x60}]}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x100}, @NL80211_ATTR_FILS_ERP_REALM={0xc8, 0xfa, "6c1ecc6ded0bbf2c19818acb550fce83ea1be8c1b46d32643096da11303116dce710d07657295c89d32eae35e3444233c0b24cead3dd2635a410dead92d02ce326676b78ec30de33ee45c9c32302db214dc20ad3dc3fac1ee9c24e518449be539ec8eb5272da51ef090c2f2d86b08de51a78d8da299bf19abdb353a56fb84102a139eb1e87b788bb24921fe88980441e0dee149ea358ce5a67b16180926303f54b33d2d92a69744f181f25397ddbc5cf2620069a24337c7069edb1bca684c15544c93d48"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "d5f3d2fd"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, ','}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0xa8, 0xfc, "6ba02007c1be899e03b9995448ecb69746adf61990b16c7fe1153e24baddfb682aef99facb7bb4280ef653f29848178c4ae2f53feb9f421220030cfc87a50aa8fb964b4104a5c56655218940491717d850dad93a374b3eb27884e13a8843ea7b38310be351b19dc949ea2363226d4dd20cee5c581948894e8e3b8ec8f037dc349c59dc57a93ca350053c4cb7cb483d3cf9ab81cff2e023ea3f1bd59b67c2fba1899cb870"}, @NL80211_ATTR_FILS_ERP_RRK={0x62, 0xfc, "93d38cfda9e1987da63e001ce00e8dab8d9970ba97c43c6f548522a574c924ff5df6bd089c9d2ce417e1d6198493fe40dfe17fd0b9711d720756eeb75a9f3a2b8ea19a490c3f8dd48a29bab85c02a4718487d6d673c237fd03b76af495a3"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4f}, @NL80211_ATTR_FILS_ERP_REALM={0x3c, 0xfa, "581309e99c16b611743e74b507377eee54bd4dc4cde71dfaef533ea736f319eb8cc950487725c975730405eeda923f8da5b3d9069eca56de"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfffe}, @NL80211_ATTR_FILS_ERP_REALM={0x26, 0xfa, "12aa6b0c26fa0c1ba661739dceb37da3b033cb22cce1abeb134b8b865fd0338f6ad9"}, @NL80211_ATTR_FILS_ERP_REALM={0x90, 0xfa, "dcdb4df97db25eb640976c1b9821890f348e4a1f3c48b471226d56419ae04c35e47468f8faef1f6a3efa3de4896a39a14a4d9ce0bb2b30912962c0b6d9f60aa97e454b4cc35f077d7e71f6be0ec3fb81adba8188dcf1251e700225d0eab828eccd9b4692e1514cd52167538ac0918508ae7aa6c1bf83891b80888222ab0ca8ba5346dcafe8baaa3b2b49da6d"}, @NL80211_ATTR_FILS_ERP_REALM={0x41, 0xfa, "5f8e516d15b39ade0f896254b2b96697bb9170d7cde448545ac564d1d1f803705eef569088a8a321f4d19ab26ad555e0da4d236e46a2a72fe062581957"}, @NL80211_ATTR_FILS_ERP_RRK={0x3c, 0xfc, "2f0652d66d983690ca87acb05267e45017a974bac3329e9e5bee1956dd882e06194b387127f0923140e0f07e6a0447e42d02d1f3753c046a"}, @NL80211_ATTR_FILS_ERP_REALM={0xe0, 0xfa, "8726c70092fb16058412b98acb9ce1c877e7d13ce94ee5a5c1603aff1efba48afadefebda9d9d2a4ac740eed20603492384f2733c524027f799d0d3d027012a197a69560ab404d29ffd3427b0497ba427328bdef37fbe80f7cf41d00db674c2cc08e8e47d720087db41fe525e26342dd8a1cbbfbf61b7cf99e52e7bcf75623b4223a68ae1762e272daac6f42eb587423ab268a33c394f8ccbf924e26e62f6508deff54bebadca9ae6e8a0dcc7566d78fc15cdd42ad5dc3bb5fe45c59d8f6858376317191c821729fe2a0133feb42beb57f7ee450236b09eea72a25cb"}]]}, 0x1550}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$RNDADDENTROPY(r4, 0x5207, 0x0) unshare(0x22020600) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r6, 0x407, 0x176) vmsplice(r7, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") setsockopt$sock_attach_bpf(r1, 0x1, 0x7, 0x0, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x444000, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000440)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f00000006c0)=ANY=[@ANYBLOB="000000004c900200fe0000000300010000000000000000000000000000000000000000000000000000000000000000003b7acef15f670000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000ffffffffffffffff000000000000000000000000000000000500"/192]) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r10) 504.21Âľs ago: executing program 9 (id=2964): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) copy_file_range(r0, 0x0, r0, &(0x7f0000000500)=0xffff, 0x9, 0x0) 0s ago: executing program 5 (id=2965): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xfffffffe) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000008000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b01010000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0xa0, &(0x7f0000001a80)=""/160, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x4) io_setup(0x2009, &(0x7f0000000980)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) close(r4) shutdown(r2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42042, 0x12a) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x10003}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf25047c000004008c80140001800600060080350000080018"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=@newtfilter={0x24, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xffff, 0x2}}}, 0x24}}, 0x48c0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): want_extra_isize 5 [ 242.340161][T11880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.359122][T11889] vcan0: tx address claim with different name [ 242.391284][T11880] sit1: entered promiscuous mode [ 242.464839][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.504729][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'. [ 242.517336][T11909] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2490'. [ 242.523476][T11910] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2491'. [ 242.541642][T11897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11897 comm=syz.9.2485 [ 242.549867][T11910] netlink: zone id is out of range [ 242.559792][T11910] netlink: zone id is out of range [ 242.566400][T11897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=11897 comm=syz.9.2485 [ 242.573416][T11910] netlink: set zone limit has 8 unknown bytes [ 242.594448][T11897] loop9: detected capacity change from 0 to 512 [ 242.602995][ T28] audit: type=1400 audit(3315.579:15958): avc: denied { accept } for pid=11908 comm="syz.5.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 242.620613][T11897] EXT4-fs (loop9): bad s_min_extra_isize: 56096 [ 242.649812][T11913] kernel profiling enabled (shift: 62) [ 242.660749][T11913] profiling shift: 62 too large [ 242.705531][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2495'. [ 242.719312][T11922] macsec1: entered promiscuous mode [ 242.724940][T11922] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 242.732814][T11926] loop2: detected capacity change from 0 to 2048 [ 242.739532][T11922] macsec1: entered allmulticast mode [ 242.745681][T11922] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 242.756582][T11922] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 242.765422][T11922] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 242.775974][ T3401] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 242.785674][T11926] loop2: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 242.785803][T11926] loop2: p1 size 33024 extends beyond EOD, truncated [ 242.886555][T11926] loop2: p5 size 33024 extends beyond EOD, truncated [ 242.894314][T11926] loop2: p6 size 33024 extends beyond EOD, truncated [ 242.901851][T11926] loop2: p7 size 33024 extends beyond EOD, truncated [ 242.909500][T11926] loop2: p8 size 33024 extends beyond EOD, truncated [ 242.918901][T11926] loop2: p9 size 33024 extends beyond EOD, truncated [ 242.926208][T11926] loop2: p10 size 33024 extends beyond EOD, truncated [ 242.933716][T11926] loop2: p11 size 33024 extends beyond EOD, truncated [ 242.941221][T11926] loop2: p12 size 33024 extends beyond EOD, truncated [ 242.948553][T11926] loop2: p13 size 33024 extends beyond EOD, truncated [ 242.955884][T11926] loop2: p14 size 33024 extends beyond EOD, truncated [ 242.963255][T11926] loop2: p15 size 33024 extends beyond EOD, truncated [ 242.970678][T11926] loop2: p16 size 33024 extends beyond EOD, truncated [ 242.972491][T11932] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2499'. [ 242.978982][T11926] loop2: p17 size 33024 extends beyond EOD, truncated [ 242.994538][T11926] loop2: p18 size 33024 extends beyond EOD, truncated [ 243.001793][T11926] loop2: p19 size 33024 extends beyond EOD, truncated [ 243.009247][T11926] loop2: p20 size 33024 extends beyond EOD, truncated [ 243.016834][T11926] loop2: p21 size 33024 extends beyond EOD, truncated [ 243.025480][T11926] loop2: p22 size 33024 extends beyond EOD, truncated [ 243.037678][T11926] loop2: p23 size 33024 extends beyond EOD, truncated [ 243.045450][T11926] loop2: p24 size 33024 extends beyond EOD, truncated [ 243.053108][T11926] loop2: p25 size 33024 extends beyond EOD, truncated [ 243.060875][T11926] loop2: p26 size 33024 extends beyond EOD, truncated [ 243.069187][T11926] loop2: p27 size 33024 extends beyond EOD, truncated [ 243.077618][T11926] loop2: p28 size 33024 extends beyond EOD, truncated [ 243.085447][T11926] loop2: p29 size 33024 extends beyond EOD, truncated [ 243.096753][T11926] loop2: p30 size 33024 extends beyond EOD, truncated [ 243.105130][T11926] loop2: p31 size 33024 extends beyond EOD, truncated [ 243.112730][T11926] loop2: p32 size 33024 extends beyond EOD, truncated [ 243.120164][T11926] loop2: p33 size 33024 extends beyond EOD, truncated [ 243.127907][T11926] loop2: p34 size 33024 extends beyond EOD, truncated [ 243.135783][T11926] loop2: p35 size 33024 extends beyond EOD, truncated [ 243.143452][T11926] loop2: p36 size 33024 extends beyond EOD, truncated [ 243.150841][T11926] loop2: p37 size 33024 extends beyond EOD, truncated [ 243.158734][T11926] loop2: p38 size 33024 extends beyond EOD, truncated [ 243.166304][T11926] loop2: p39 size 33024 extends beyond EOD, truncated [ 243.173810][T11926] loop2: p40 size 33024 extends beyond EOD, truncated [ 243.181126][T11926] loop2: p41 size 33024 extends beyond EOD, truncated [ 243.189712][T11926] loop2: p42 size 33024 extends beyond EOD, truncated [ 243.197568][T11926] loop2: p43 size 33024 extends beyond EOD, truncated [ 243.208235][T11926] loop2: p44 size 33024 extends beyond EOD, truncated [ 243.215763][T11926] loop2: p45 size 33024 extends beyond EOD, truncated [ 243.223548][T11926] loop2: p46 size 33024 extends beyond EOD, truncated [ 243.231003][T11926] loop2: p47 size 33024 extends beyond EOD, truncated [ 243.238671][T11926] loop2: p48 size 33024 extends beyond EOD, truncated [ 243.246384][T11926] loop2: p49 size 33024 extends beyond EOD, truncated [ 243.253978][T11926] loop2: p50 size 33024 extends beyond EOD, truncated [ 243.261602][T11926] loop2: p51 size 33024 extends beyond EOD, truncated [ 243.269315][T11926] loop2: p52 size 33024 extends beyond EOD, truncated [ 243.276886][T11926] loop2: p53 size 33024 extends beyond EOD, truncated [ 243.284601][T11926] loop2: p54 size 33024 extends beyond EOD, truncated [ 243.293192][T11926] loop2: p55 size 33024 extends beyond EOD, truncated [ 243.300611][T11926] loop2: p56 size 33024 extends beyond EOD, truncated [ 243.308384][T11926] loop2: p57 size 33024 extends beyond EOD, truncated [ 243.316059][T11926] loop2: p58 size 33024 extends beyond EOD, truncated [ 243.323664][T11926] loop2: p59 size 33024 extends beyond EOD, truncated [ 243.331340][T11926] loop2: p60 size 33024 extends beyond EOD, truncated [ 243.338990][T11926] loop2: p61 size 33024 extends beyond EOD, truncated [ 243.344912][T11941] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2503'. [ 243.347085][T11926] loop2: p62 size 33024 extends beyond EOD, [ 243.355760][T11941] netlink: zone id is out of range [ 243.367027][T11941] netlink: zone id is out of range [ 243.368997][T11926] truncated [ 243.381055][T11926] loop2: p63 size 33024 extends beyond EOD, truncated [ 243.382465][T11941] netlink: set zone limit has 8 unknown bytes [ 243.388784][T11926] loop2: p64 size 33024 extends beyond EOD, truncated [ 243.401668][T11926] loop2: p65 size 33024 extends beyond EOD, truncated [ 243.410271][T11926] loop2: p66 size 33024 extends beyond EOD, truncated [ 243.418259][T11926] loop2: p67 size 33024 extends beyond EOD, truncated [ 243.429484][T11926] loop2: p68 size 33024 extends beyond EOD, truncated [ 243.444710][T11926] loop2: p69 size 33024 extends beyond EOD, truncated [ 243.452127][T11926] loop2: p70 size 33024 extends beyond EOD, truncated [ 243.459754][T11926] loop2: p71 size 33024 extends beyond EOD, truncated [ 243.461038][T11945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11945 comm=syz.6.2505 [ 243.467375][T11926] loop2: p72 size 33024 extends beyond EOD, truncated [ 243.484900][T11945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=11945 comm=syz.6.2505 [ 243.494774][T11926] loop2: p73 size 33024 extends beyond EOD, truncated [ 243.509687][T11951] kernel profiling enabled (shift: 62) [ 243.516749][T11951] profiling shift: 62 too large [ 243.521607][T11926] loop2: p74 size 33024 extends beyond EOD, truncated [ 243.529028][T11926] loop2: p75 size 33024 extends beyond EOD, truncated [ 243.536634][T11926] loop2: p76 size 33024 extends beyond EOD, truncated [ 243.547928][T11926] loop2: p77 size 33024 extends beyond EOD, truncated [ 243.558329][T11926] loop2: p78 size 33024 extends beyond EOD, truncated [ 243.568963][T11956] netlink: 'syz.6.2509': attribute type 1 has an invalid length. [ 243.572840][T11926] loop2: p79 size 33024 extends beyond EOD, truncated [ 243.584990][T11926] loop2: p80 size 33024 extends beyond EOD, truncated [ 243.593339][T11926] loop2: p81 size 33024 extends beyond EOD, truncated [ 243.600324][T11926] loop2: p81 could not be added: -ENOMEM [ 243.606200][T11926] loop2: p82 size 33024 extends beyond EOD, truncated [ 243.613602][T11926] loop2: p83 size 33024 extends beyond EOD, truncated [ 243.620133][T11958] dummy0 speed is unknown, defaulting to 1000 [ 243.620976][T11926] loop2: p84 size 33024 extends beyond EOD, truncated [ 243.634321][T11926] loop2: p85 size 33024 extends beyond EOD, truncated [ 243.639512][T11958] lo speed is unknown, defaulting to 1000 [ 243.643063][T11926] loop2: p86 size 33024 extends beyond EOD, truncated [ 243.662544][T11926] loop2: p87 size 33024 extends beyond EOD, truncated [ 243.670430][T11926] loop2: p88 size 33024 extends beyond EOD, truncated [ 243.726876][T11926] loop2: p89 size 33024 extends beyond EOD, truncated [ 243.745638][T11926] loop2: p90 size 33024 extends beyond EOD, truncated [ 243.774432][T11926] loop2: p91 size 33024 extends beyond EOD, truncated [ 243.815113][T11926] loop2: p92 size 33024 extends beyond EOD, truncated [ 243.847302][T11966] loop9: detected capacity change from 0 to 1024 [ 243.855647][T11926] loop2: p93 size 33024 extends beyond EOD, truncated [ 243.875922][T11926] loop2: p94 size 33024 extends beyond EOD, truncated [ 243.890893][T11966] EXT4-fs: Ignoring removed bh option [ 243.897151][T11926] loop2: p95 size 33024 extends beyond EOD, truncated [ 243.913833][T11966] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.926726][T11926] loop2: p96 size 33024 extends beyond EOD, truncated [ 243.942153][T11966] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #12: block 7: comm syz.9.2513: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 243.962611][T11926] loop2: p97 size 33024 extends beyond EOD, truncated [ 243.981783][T11926] loop2: p98 size 33024 extends beyond EOD, truncated [ 243.989720][T11926] loop2: p99 size 33024 extends beyond EOD, truncated [ 244.009513][T11926] loop2: p100 size 33024 extends beyond EOD, truncated [ 244.021217][T11926] loop2: p101 size 33024 extends beyond EOD, truncated [ 244.029385][T10807] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.040936][T11926] loop2: p102 size 33024 extends beyond EOD, truncated [ 244.060458][T11926] loop2: p103 size 33024 extends beyond EOD, truncated [ 244.078726][T11926] loop2: p104 size 33024 extends beyond EOD, truncated [ 244.087653][T11926] loop2: p105 size 33024 extends beyond EOD, truncated [ 244.095843][T11926] loop2: p106 size 33024 extends beyond EOD, truncated [ 244.107055][T11926] loop2: p107 size 33024 extends beyond EOD, truncated [ 244.115558][T11926] loop2: p108 size 33024 extends beyond EOD, truncated [ 244.123824][T11926] loop2: p109 size 33024 extends beyond EOD, truncated [ 244.131537][T11926] loop2: p110 size 33024 extends beyond EOD, truncated [ 244.139995][T11926] loop2: p111 size 33024 extends beyond EOD, truncated [ 244.149369][T11926] loop2: p112 size 33024 extends beyond EOD, truncated [ 244.181496][T11926] loop2: p113 size 33024 extends beyond EOD, truncated [ 244.194435][T11979] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2515'. [ 244.195183][T11926] loop2: p114 size 33024 extends beyond EOD, [ 244.224174][T11979] netlink: zone id is out of range [ 244.224516][T11926] truncated [ 244.239571][T11926] loop2: p115 size 33024 extends beyond EOD, truncated [ 244.241996][T11979] netlink: zone id is out of range [ 244.247396][T11926] loop2: p116 size 33024 extends beyond EOD, truncated [ 244.263609][T11926] loop2: p117 size 33024 extends beyond EOD, truncated [ 244.271696][T11979] netlink: set zone limit has 8 unknown bytes [ 244.271763][T11926] loop2: p118 size 33024 extends beyond EOD, truncated [ 244.289865][T11926] loop2: p119 size 33024 extends beyond EOD, truncated [ 244.300839][T11926] loop2: p120 size 33024 extends beyond EOD, truncated [ 244.313794][T11926] loop2: p121 size 33024 extends beyond EOD, truncated [ 244.325458][T11926] loop2: p122 size 33024 extends beyond EOD, truncated [ 244.334503][T11926] loop2: p123 size 33024 extends beyond EOD, truncated [ 244.354220][T11926] loop2: p124 size 33024 extends beyond EOD, truncated [ 244.356666][T11986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11986 comm=syz.6.2518 [ 244.375045][T11926] loop2: p125 size 33024 extends beyond EOD, truncated [ 244.376691][T11986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=11986 comm=syz.6.2518 [ 244.396493][T11926] loop2: p126 size 33024 extends beyond EOD, truncated [ 244.409823][T11926] loop2: p127 size 33024 extends beyond EOD, truncated [ 244.420380][T11926] loop2: p128 size 33024 extends beyond EOD, truncated [ 244.429520][ T28] audit: type=1326 audit(3317.399:15959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11993 comm="syz.6.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6e61cdd9 code=0x7ffc0000 [ 244.429507][T11926] loop2: p129 size 33024 extends beyond EOD, [ 244.454848][ T28] audit: type=1326 audit(3317.399:15960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11993 comm="syz.6.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6e61cdd9 code=0x7ffc0000 [ 244.476523][T11926] truncated [ 244.484699][ T28] audit: type=1326 audit(3317.429:15961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11993 comm="syz.6.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7efe6e61cdd9 code=0x7ffc0000 [ 244.512241][T11926] loop2: p130 size 33024 extends beyond EOD, truncated [ 244.520053][T11926] loop2: p131 size 33024 extends beyond EOD, truncated [ 244.527732][T11926] loop2: p132 size 33024 extends beyond EOD, truncated [ 244.535608][T11926] loop2: p133 size 33024 extends beyond EOD, truncated [ 244.543951][T11926] loop2: p134 size 33024 extends beyond EOD, truncated [ 244.551512][T11926] loop2: p135 size 33024 extends beyond EOD, truncated [ 244.559258][T11926] loop2: p136 size 33024 extends beyond EOD, truncated [ 244.567925][T11926] loop2: p137 size 33024 extends beyond EOD, truncated [ 244.575928][T11926] loop2: p138 size 33024 extends beyond EOD, truncated [ 244.584022][T11926] loop2: p139 size 33024 extends beyond EOD, truncated [ 244.591549][T11926] loop2: p140 size 33024 extends beyond EOD, truncated [ 244.599441][T11926] loop2: p141 size 33024 extends beyond EOD, truncated [ 244.619736][T11926] loop2: p142 size 33024 extends beyond EOD, truncated [ 244.632320][T11926] loop2: p143 size 33024 extends beyond EOD, truncated [ 244.640086][T11926] loop2: p144 size 33024 extends beyond EOD, truncated [ 244.641058][T11997] loop8: detected capacity change from 0 to 512 [ 244.648030][T11926] loop2: p145 size 33024 extends beyond EOD, truncated [ 244.661307][T11926] loop2: p146 size 33024 extends beyond EOD, truncated [ 244.670807][T11997] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.2522: inode has both inline data and extents flags [ 244.674311][T11926] loop2: p147 size 33024 extends beyond EOD, truncated [ 244.694202][T11997] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 244.694656][T11997] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2522: couldn't read orphan inode 15 (err -117) [ 244.701711][T11926] loop2: p148 size 33024 extends beyond EOD, [ 244.703953][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 244.716066][T11926] truncated [ 244.721813][ C0] EXT4-fs (loop8): initial error at time 3317: ext4_orphan_get:1397: inode 15 [ 244.721838][ C0] EXT4-fs (loop8): last error at time 3317: ext4_orphan_get:1397: inode 15 [ 244.731941][T11997] loop8: lost filesystem error report for type 5 error -117 [ 244.741511][T11926] loop2: p149 size 33024 extends beyond EOD, [ 244.757273][T11997] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.782437][T11926] truncated [ 244.787456][T11926] loop2: p150 size 33024 extends beyond EOD, truncated [ 244.798065][T11926] loop2: p151 size 33024 extends beyond EOD, truncated [ 244.805817][T11926] loop2: p152 size 33024 extends beyond EOD, truncated [ 244.813394][T11926] loop2: p153 size 33024 extends beyond EOD, truncated [ 244.820812][T11926] loop2: p154 size 33024 extends beyond EOD, truncated [ 244.828584][T11926] loop2: p155 size 33024 extends beyond EOD, truncated [ 244.836206][T11926] loop2: p156 size 33024 extends beyond EOD, truncated [ 244.843773][T11926] loop2: p157 size 33024 extends beyond EOD, truncated [ 244.872939][T11926] loop2: p158 size 33024 extends beyond EOD, truncated [ 244.882900][ T28] audit: type=1400 audit(3317.859:15962): avc: denied { ioctl } for pid=11996 comm="syz.8.2522" path="/250/bus/file1" dev="loop8" ino=18 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 244.902373][T11926] loop2: p159 size 33024 extends beyond EOD, truncated [ 244.914920][T11926] loop2: p160 size 33024 extends beyond EOD, truncated [ 244.922896][T11926] loop2: p161 size 33024 extends beyond EOD, truncated [ 244.930360][T11926] loop2: p162 size 33024 extends beyond EOD, truncated [ 244.938012][T11926] loop2: p163 size 33024 extends beyond EOD, truncated [ 244.945551][T11926] loop2: p164 size 33024 extends beyond EOD, truncated [ 244.953293][T11926] loop2: p165 size 33024 extends beyond EOD, truncated [ 244.960668][T11926] loop2: p166 size 33024 extends beyond EOD, truncated [ 244.984301][T11926] loop2: p167 size 33024 extends beyond EOD, truncated [ 244.992340][T11926] loop2: p168 size 33024 extends beyond EOD, truncated [ 244.999811][T11926] loop2: p169 size 33024 extends beyond EOD, truncated [ 245.007839][T11926] loop2: p170 size 33024 extends beyond EOD, truncated [ 245.015595][T11926] loop2: p171 size 33024 extends beyond EOD, truncated [ 245.023897][T11926] loop2: p172 size 33024 extends beyond EOD, truncated [ 245.031531][T11926] loop2: p173 size 33024 extends beyond EOD, truncated [ 245.039660][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2523'. [ 245.049054][T12002] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2523'. [ 245.058936][T11926] loop2: p174 size 33024 extends beyond EOD, truncated [ 245.066805][T11926] loop2: p175 size 33024 extends beyond EOD, truncated [ 245.074531][T11926] loop2: p176 size 33024 extends beyond EOD, truncated [ 245.082351][T11926] loop2: p177 size 33024 extends beyond EOD, truncated [ 245.089944][T11926] loop2: p178 size 33024 extends beyond EOD, truncated [ 245.098014][T11926] loop2: p179 size 33024 extends beyond EOD, truncated [ 245.106446][T11926] loop2: p180 size 33024 extends beyond EOD, truncated [ 245.114299][T11926] loop2: p181 size 33024 extends beyond EOD, truncated [ 245.121951][T11926] loop2: p182 size 33024 extends beyond EOD, truncated [ 245.129754][T11926] loop2: p183 size 33024 extends beyond EOD, truncated [ 245.137441][T11926] loop2: p184 size 33024 extends beyond EOD, truncated [ 245.145590][T11926] loop2: p185 size 33024 extends beyond EOD, truncated [ 245.153272][T11926] loop2: p186 size 33024 extends beyond EOD, truncated [ 245.161188][T11926] loop2: p187 size 33024 extends beyond EOD, truncated [ 245.169225][T11926] loop2: p188 size 33024 extends beyond EOD, truncated [ 245.177303][T11926] loop2: p189 size 33024 extends beyond EOD, truncated [ 245.185327][T11926] loop2: p190 size 33024 extends beyond EOD, truncated [ 245.193113][T11926] loop2: p191 size 33024 extends beyond EOD, truncated [ 245.200917][T11926] loop2: p192 size 33024 extends beyond EOD, truncated [ 245.208945][T11926] loop2: p193 size 33024 extends beyond EOD, truncated [ 245.216542][T11926] loop2: p194 size 33024 extends beyond EOD, truncated [ 245.224195][T11926] loop2: p195 size 33024 extends beyond EOD, truncated [ 245.232397][T11926] loop2: p196 size 33024 extends beyond EOD, truncated [ 245.240322][T11926] loop2: p197 size 33024 extends beyond EOD, truncated [ 245.248354][T11926] loop2: p198 size 33024 extends beyond EOD, truncated [ 245.255937][T11926] loop2: p199 size 33024 extends beyond EOD, truncated [ 245.264400][T11926] loop2: p200 size 33024 extends beyond EOD, truncated [ 245.279032][T11926] loop2: p201 size 33024 extends beyond EOD, truncated [ 245.287134][T11926] loop2: p202 size 33024 extends beyond EOD, truncated [ 245.295318][T11926] loop2: p203 size 33024 extends beyond EOD, truncated [ 245.309966][T11926] loop2: p204 size 33024 extends beyond EOD, truncated [ 245.330927][T11926] loop2: p205 size 33024 extends beyond EOD, truncated [ 245.338861][T11926] loop2: p206 size 33024 extends beyond EOD, truncated [ 245.346866][T11926] loop2: p207 size 33024 extends beyond EOD, truncated [ 245.349904][T12008] netlink: 'syz.6.2526': attribute type 1 has an invalid length. [ 245.354574][T11926] loop2: p208 size 33024 extends beyond EOD, truncated [ 245.371538][T11926] loop2: p209 size 33024 extends beyond EOD, truncated [ 245.379372][T11926] loop2: p210 size 33024 extends beyond EOD, truncated [ 245.401926][T11926] loop2: p211 size 33024 extends beyond EOD, truncated [ 245.410739][T11926] loop2: p212 size 33024 extends beyond EOD, truncated [ 245.419114][T11926] loop2: p213 size 33024 extends beyond EOD, truncated [ 245.435741][T11926] loop2: p214 size 33024 extends beyond EOD, truncated [ 245.443992][T11926] loop2: p215 size 33024 extends beyond EOD, truncated [ 245.461565][T11926] loop2: p216 size 33024 extends beyond EOD, truncated [ 245.479024][ T7612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.490023][T11926] loop2: p217 size 33024 extends beyond EOD, truncated [ 245.515088][T11926] loop2: p218 size 33024 extends beyond EOD, truncated [ 245.524962][T12016] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.2528'. [ 245.525133][T11926] loop2: p219 size 33024 extends beyond EOD, truncated [ 245.543496][T11926] loop2: p220 size 33024 extends beyond EOD, truncated [ 245.551415][T11926] loop2: p221 size 33024 extends beyond EOD, truncated [ 245.558720][T12016] netlink: zone id is out of range [ 245.559582][T11926] loop2: p222 size 33024 extends beyond EOD, truncated [ 245.573321][T11926] loop2: p223 size 33024 extends beyond EOD, truncated [ 245.581328][T11926] loop2: p224 size 33024 extends beyond EOD, truncated [ 245.590753][T11926] loop2: p225 size 33024 extends beyond EOD, truncated [ 245.598769][T11926] loop2: p226 size 33024 extends beyond EOD, truncated [ 245.606630][T11926] loop2: p227 size 33024 extends beyond EOD, truncated [ 245.625741][T11926] loop2: p228 size 33024 extends beyond EOD, truncated [ 245.637537][T11926] loop2: p229 size 33024 extends beyond EOD, truncated [ 245.645600][T11926] loop2: p230 size 33024 extends beyond EOD, truncated [ 245.665356][T11926] loop2: p231 size 33024 extends beyond EOD, truncated [ 245.674319][T11926] loop2: p232 size 33024 extends beyond EOD, truncated [ 245.684164][T11926] loop2: p233 size 33024 extends beyond EOD, truncated [ 245.695987][T11926] loop2: p234 size 33024 extends beyond EOD, truncated [ 245.708990][T11926] loop2: p235 size 33024 extends beyond EOD, truncated [ 245.717409][T11926] loop2: p236 size 33024 extends beyond EOD, truncated [ 245.729042][T11926] loop2: p237 size 33024 extends beyond EOD, truncated [ 245.755999][T11926] loop2: p238 size 33024 extends beyond EOD, truncated [ 245.764206][T11926] loop2: p239 size 33024 extends beyond EOD, truncated [ 245.772360][T11926] loop2: p240 size 33024 extends beyond EOD, truncated [ 245.782040][T11926] loop2: p241 size 33024 extends beyond EOD, truncated [ 245.801694][T11926] loop2: p242 size 33024 extends beyond EOD, truncated [ 245.809802][T11926] loop2: p243 size 33024 extends beyond EOD, truncated [ 245.832599][T11926] loop2: p244 size 33024 extends beyond EOD, truncated [ 245.856563][T11926] loop2: p245 size 33024 extends beyond EOD, truncated [ 245.866828][T12035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=12035 comm=syz.8.2536 [ 245.888318][T11926] loop2: p246 size 33024 extends beyond EOD, truncated [ 245.900488][ T28] audit: type=1326 audit(3318.859:15963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.8.2536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59cc49cdd9 code=0x0 [ 245.929233][T11926] loop2: p247 size 33024 extends beyond EOD, truncated [ 245.941564][T12041] syzkaller0: entered promiscuous mode [ 245.947719][T12041] syzkaller0: entered allmulticast mode [ 245.954625][T11926] loop2: p248 size 33024 extends beyond EOD, truncated [ 245.962933][T11926] loop2: p249 size 33024 extends beyond EOD, truncated [ 245.980979][T11926] loop2: p250 size 33024 extends beyond EOD, truncated [ 245.989111][T11926] loop2: p251 size 33024 extends beyond EOD, truncated [ 245.996834][T11926] loop2: p252 size 33024 extends beyond EOD, truncated [ 245.997746][T12042] loop8: detected capacity change from 0 to 512 [ 246.005253][T11926] loop2: p253 size 33024 extends beyond EOD, truncated [ 246.018457][T11926] loop2: p254 size 33024 extends beyond EOD, truncated [ 246.026721][T11926] loop2: p255 size 33024 extends beyond EOD, truncated [ 246.029994][T12042] EXT4-fs: Ignoring removed orlov option [ 246.074428][T12042] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.218300][ T3006] loop2: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 246.218517][ T3006] loop2: p1 size 33024 extends beyond EOD, [ 246.316083][T12069] netlink: 'syz.6.2543': attribute type 1 has an invalid length. [ 246.332814][T12064] program syz.9.2542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.342000][ T3006] truncated [ 246.357334][ T3006] loop2: p5 size 33024 extends beyond EOD, truncated [ 246.374505][ T3006] loop2: p6 size 33024 extends beyond EOD, truncated [ 246.389481][ T3006] loop2: p7 size 33024 extends beyond EOD, truncated [ 246.400335][ T3006] loop2: p8 size 33024 extends beyond EOD, truncated [ 246.412335][ T3006] loop2: p9 size 33024 extends beyond EOD, truncated [ 246.423961][ T3006] loop2: p10 size 33024 extends beyond EOD, truncated [ 246.428542][T12078] loop9: detected capacity change from 0 to 256 [ 246.435900][ T3006] loop2: p11 size 33024 extends beyond EOD, truncated [ 246.446738][ T3006] loop2: p12 size 33024 extends beyond EOD, truncated [ 246.454257][ T3006] loop2: p13 size 33024 extends beyond EOD, truncated [ 246.467501][ T3006] loop2: p14 size 33024 extends beyond EOD, truncated [ 246.475388][ T3006] loop2: p15 size 33024 extends beyond EOD, truncated [ 246.484518][ T3006] loop2: p16 size 33024 extends beyond EOD, truncated [ 246.493495][ T3006] loop2: p17 size 33024 extends beyond EOD, truncated [ 246.501020][ T3006] loop2: p18 size 33024 extends beyond EOD, truncated [ 246.508988][ T3006] loop2: p19 size 33024 extends beyond EOD, truncated [ 246.516591][ T3006] loop2: p20 size 33024 extends beyond EOD, truncated [ 246.524308][ T3006] loop2: p21 size 33024 extends beyond EOD, truncated [ 246.532184][ T3006] loop2: p22 size 33024 extends beyond EOD, truncated [ 246.539736][ T3006] loop2: p23 size 33024 extends beyond EOD, truncated [ 246.547484][ T3006] loop2: p24 size 33024 extends beyond EOD, truncated [ 246.556046][ T3006] loop2: p25 size 33024 extends beyond EOD, truncated [ 246.563800][ T3006] loop2: p26 size 33024 extends beyond EOD, truncated [ 246.567656][T12080] kernel profiling enabled (shift: 62) [ 246.571268][ T3006] loop2: p27 size 33024 extends beyond EOD, truncated [ 246.584614][ T3006] loop2: p28 size 33024 extends beyond EOD, truncated [ 246.591539][T12080] profiling shift: 62 too large [ 246.592265][ T3006] loop2: p29 size 33024 extends beyond EOD, truncated [ 246.604248][ T3006] loop2: p30 size 33024 extends beyond EOD, truncated [ 246.612089][ T3006] loop2: p31 size 33024 extends beyond EOD, truncated [ 246.619506][ T3006] loop2: p32 size 33024 extends beyond EOD, truncated [ 246.627237][ T3006] loop2: p33 size 33024 extends beyond EOD, truncated [ 246.635068][ T3006] loop2: p34 size 33024 extends beyond EOD, truncated [ 246.642741][ T3006] loop2: p35 size 33024 extends beyond EOD, truncated [ 246.650684][ T3006] loop2: p36 size 33024 extends beyond EOD, truncated [ 246.660788][ T3006] loop2: p37 size 33024 extends beyond EOD, truncated [ 246.669694][ T3006] loop2: p38 size 33024 extends beyond EOD, truncated [ 246.677540][ T3006] loop2: p39 size 33024 extends beyond EOD, truncated [ 246.685405][ T3006] loop2: p40 size 33024 extends beyond EOD, truncated [ 246.696112][ T7612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.705661][ T3006] loop2: p41 size 33024 extends beyond EOD, truncated [ 246.706139][T12083] loop9: detected capacity change from 0 to 512 [ 246.713754][ T3006] loop2: p42 size 33024 extends beyond EOD, truncated [ 246.729076][T12083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a857e02c, mo2=0102] [ 246.737462][T12083] System zones: 1-12 [ 246.742053][T12083] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2548: invalid indirect mapped block 8 (level 2) [ 246.755493][T12083] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 246.755713][T12083] EXT4-fs (loop9): Remounting filesystem read-only [ 246.762155][ T3006] loop2: p43 size 33024 extends beyond EOD, [ 246.765034][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 246.773275][ T3006] truncated [ 246.777553][ C1] EXT4-fs (loop9): initial error at time 3319: ext4_free_branches:1023: inode 11 [ 246.777583][ C1] EXT4-fs (loop9): last error at time 3319: ext4_free_branches:1023: inode 11 [ 246.777923][T12083] EXT4-fs (loop9): 1 truncate cleaned up [ 246.797351][ T3006] loop2: p44 size 33024 extends beyond EOD, [ 246.813669][T12083] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.833283][ T3006] truncated [ 246.844090][T12088] netlink: 'syz.8.2550': attribute type 2 has an invalid length. [ 246.852476][ T3006] loop2: p45 size 33024 extends beyond EOD, truncated [ 246.863676][T12088] netlink: 'syz.8.2550': attribute type 8 has an invalid length. [ 246.874130][ T3006] loop2: p46 size 33024 extends beyond EOD, truncated [ 246.893122][ T3006] loop2: p47 size 33024 extends beyond EOD, truncated [ 246.901057][ T3006] loop2: p48 size 33024 extends beyond EOD, truncated [ 246.911405][ T3006] loop2: p49 size 33024 extends beyond EOD, truncated [ 246.920149][ T3006] loop2: p50 size 33024 extends beyond EOD, truncated [ 246.928588][ T3006] loop2: p51 size 33024 extends beyond EOD, truncated [ 246.940789][ T3006] loop2: p52 size 33024 extends beyond EOD, truncated [ 246.955310][ T3006] loop2: p53 size 33024 extends beyond EOD, truncated [ 246.973029][ T3006] loop2: p54 size 33024 extends beyond EOD, truncated [ 246.982855][ T3006] loop2: p55 size 33024 extends beyond EOD, truncated [ 247.020380][ T3006] loop2: p56 size 33024 extends beyond EOD, truncated [ 247.022196][ T28] audit: type=1400 audit(3319.989:15964): avc: denied { ioctl } for pid=12092 comm="syz.5.2552" path="socket:[38123]" dev="sockfs" ino=38123 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 247.053020][T12091] loop8: detected capacity change from 0 to 512 [ 247.053446][ T3006] loop2: p57 size 33024 extends beyond EOD, truncated [ 247.053944][ T3006] loop2: p58 size 33024 extends beyond EOD, truncated [ 247.054706][ T3006] loop2: p59 size 33024 extends beyond EOD, truncated [ 247.065110][ T3006] loop2: p60 size 33024 extends beyond EOD, truncated [ 247.066654][ T3006] loop2: p61 size 33024 extends beyond EOD, [ 247.075351][T12091] EXT4-fs (loop8): 1 truncate cleaned up [ 247.090311][ T3006] truncated [ 247.095585][T12091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.104531][ T3006] loop2: p62 size 33024 extends beyond EOD, [ 247.111134][T12091] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.8.2551: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 247.121556][ T3006] truncated [ 247.122187][ T3006] loop2: p63 size 33024 extends beyond EOD, truncated [ 247.175994][ T3006] loop2: p64 size 33024 extends beyond EOD, truncated [ 247.189489][ T3006] loop2: p65 size 33024 extends beyond EOD, truncated [ 247.199647][ T3006] loop2: p66 size 33024 extends beyond EOD, truncated [ 247.208156][ T3006] loop2: p67 size 33024 extends beyond EOD, truncated [ 247.215417][T10807] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.224872][ T3006] loop2: p68 size 33024 extends beyond EOD, truncated [ 247.234620][ T3006] loop2: p69 size 33024 extends beyond EOD, truncated [ 247.248725][ T3006] loop2: p70 size 33024 extends beyond EOD, truncated [ 247.259889][ T3006] loop2: p71 size 33024 extends beyond EOD, truncated [ 247.290745][ T7612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.309068][ T3006] loop2: p72 size 33024 extends beyond EOD, truncated [ 247.336846][ T3006] loop2: p73 size 33024 extends beyond EOD, truncated [ 247.344817][T12107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12107 comm=syz.5.2557 [ 247.358648][ T3006] loop2: p74 size 33024 extends beyond EOD, truncated [ 247.363385][T12107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=12107 comm=syz.5.2557 [ 247.378460][ T3006] loop2: p75 size 33024 extends beyond EOD, truncated [ 247.386926][T12120] loop9: detected capacity change from 0 to 128 [ 247.389682][T12115] kernel profiling enabled (shift: 62) [ 247.399577][ T3006] loop2: p76 size 33024 extends beyond EOD, truncated [ 247.402742][T12115] profiling shift: 62 too large [ 247.414027][ T3006] loop2: p77 size 33024 extends beyond EOD, truncated [ 247.425733][ T3006] loop2: p78 size 33024 extends beyond EOD, truncated [ 247.434134][ T3006] loop2: p79 size 33024 extends beyond EOD, truncated [ 247.452381][ T3006] loop2: p80 size 33024 extends beyond EOD, truncated [ 247.464090][ T3006] loop2: p81 size 33024 extends beyond EOD, truncated [ 247.475771][T12127] netlink: 'syz.8.2563': attribute type 1 has an invalid length. [ 247.489703][ T3006] loop2: p82 size 33024 extends beyond EOD, truncated [ 247.506937][ T3006] loop2: p83 size 33024 extends beyond EOD, truncated [ 247.525158][ T3006] loop2: p84 size 33024 extends beyond EOD, truncated [ 247.543963][ T3006] loop2: p85 size 33024 extends beyond EOD, truncated [ 247.568652][ T3006] loop2: p86 size 33024 extends beyond EOD, truncated [ 247.587144][ T3006] loop2: p87 size 33024 extends beyond EOD, truncated [ 247.604230][ T3006] loop2: p88 size 33024 extends beyond EOD, truncated [ 247.617952][T12139] loop9: detected capacity change from 0 to 512 [ 247.626612][T12129] syzkaller0: entered promiscuous mode [ 247.632638][ T3006] loop2: p89 size 33024 extends beyond EOD, truncated [ 247.640523][T12139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 247.641728][T12129] syzkaller0: entered allmulticast mode [ 247.660621][ T3006] loop2: p90 size 33024 extends beyond EOD, truncated [ 247.665856][T12139] System zones: [ 247.667905][ T3006] loop2: p91 size 33024 extends beyond EOD, [ 247.669135][T12139] 1-12 [ 247.675695][ T3006] truncated [ 247.687927][T12139] [ 247.690734][ T3006] loop2: p92 size 33024 extends beyond EOD, truncated [ 247.699005][T12139] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #12: comm syz.9.2567: missing EA_INODE flag [ 247.711100][ T3006] loop2: p93 size 33024 extends beyond EOD, truncated [ 247.723321][ T3006] loop2: p94 size 33024 extends beyond EOD, truncated [ 247.739374][T12139] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 247.739541][T12139] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.2567: error while reading EA inode 12 err=-117 [ 247.748778][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 247.748793][ C0] EXT4-fs (loop9): initial error at time 3320: ext4_xattr_inode_iget:441: inode 12 [ 247.748827][ C0] EXT4-fs (loop9): last error at time 3320: ext4_xattr_inode_iget:441: inode 12 [ 247.787147][ T3006] loop2: p95 size 33024 extends beyond EOD, truncated [ 247.800516][T12139] loop9: lost filesystem error report for type 5 error -117 [ 247.801178][ T3006] loop2: p96 size 33024 extends beyond EOD, truncated [ 247.816073][ T3006] loop2: p97 size 33024 extends beyond EOD, truncated [ 247.823478][T12139] EXT4-fs (loop9): 1 orphan inode deleted [ 247.829332][ T3006] loop2: p98 size 33024 extends beyond EOD, truncated [ 247.837127][T12139] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.850928][ T3006] loop2: p99 size 33024 extends beyond EOD, truncated [ 247.858698][ T3006] loop2: p100 size 33024 extends beyond EOD, truncated [ 247.870084][ T3006] loop2: p101 size 33024 extends beyond EOD, truncated [ 247.884777][ T3006] loop2: p102 size 33024 extends beyond EOD, truncated [ 247.885620][ T28] audit: type=1400 audit(3320.859:15965): avc: denied { read } for pid=12138 comm="syz.9.2567" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 247.918151][ T3006] loop2: p103 size 33024 extends beyond EOD, truncated [ 247.935851][ T3006] loop2: p104 size 33024 extends beyond EOD, truncated [ 247.951901][ T28] audit: type=1400 audit(3320.889:15966): avc: denied { open } for pid=12138 comm="syz.9.2567" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 247.986968][ T3006] loop2: p105 size 33024 extends beyond EOD, truncated [ 248.005944][ T3006] loop2: p106 size 33024 extends beyond EOD, truncated [ 248.021995][ T3006] loop2: p107 size 33024 extends beyond EOD, truncated [ 248.029451][ T28] audit: type=1400 audit(3320.889:15967): avc: denied { ioctl } for pid=12138 comm="syz.9.2567" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 248.062179][ T3006] loop2: p108 size 33024 extends beyond EOD, truncated [ 248.076964][ T3006] loop2: p109 size 33024 extends beyond EOD, truncated [ 248.091927][ T3006] loop2: p110 size 33024 extends beyond EOD, truncated [ 248.101961][ T28] audit: type=1400 audit(3320.889:15968): avc: denied { setattr } for pid=12138 comm="syz.9.2567" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.130109][ T3006] loop2: p111 size 33024 extends beyond EOD, truncated [ 248.138256][ T28] audit: type=1400 audit(3320.889:15969): avc: denied { lock } for pid=12138 comm="syz.9.2567" path="/77/file0/cpuset.effective_cpus" dev="loop9" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 248.140021][ T3006] loop2: p112 size 33024 extends beyond EOD, truncated [ 248.199976][ T3006] loop2: p113 size 33024 extends beyond EOD, truncated [ 248.210830][T12150] __nla_validate_parse: 3 callbacks suppressed [ 248.210845][T12150] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.2570'. [ 248.228420][T12150] net_ratelimit: 2 callbacks suppressed [ 248.228438][T12150] netlink: zone id is out of range [ 248.242033][ T3006] loop2: p114 size 33024 extends beyond EOD, truncated [ 248.249943][T12150] netlink: zone id is out of range [ 248.255745][ T3006] loop2: p115 size 33024 extends beyond EOD, truncated [ 248.264034][ T3006] loop2: p116 size 33024 extends beyond EOD, truncated [ 248.282385][ T3006] loop2: p117 size 33024 extends beyond EOD, truncated [ 248.289502][T12147] loop9: detected capacity change from 0 to 1024 [ 248.293728][T12150] netlink: set zone limit has 8 unknown bytes [ 248.311508][ T3006] loop2: p118 size 33024 extends beyond EOD, truncated [ 248.326552][ T3006] loop2: p119 size 33024 extends beyond EOD, truncated [ 248.351316][ T3006] loop2: p120 size 33024 extends beyond EOD, truncated [ 248.367243][T12147] EXT4-fs: Ignoring removed bh option [ 248.394121][ T3006] loop2: p121 size 33024 extends beyond EOD, truncated [ 248.405214][T12154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12154 comm=syz.8.2572 [ 248.425327][ T3006] loop2: p122 size 33024 extends beyond EOD, truncated [ 248.429322][T12154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=12154 comm=syz.8.2572 [ 248.445487][ T3006] loop2: p123 size 33024 extends beyond EOD, truncated [ 248.473048][ T3006] loop2: p124 size 33024 extends beyond EOD, truncated [ 248.477334][T12154] loop8: detected capacity change from 0 to 512 [ 248.486733][ T3006] loop2: p125 size 33024 extends beyond EOD, truncated [ 248.502822][ T3006] loop2: p126 size 33024 extends beyond EOD, truncated [ 248.507954][T12147] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #12: block 7: comm syz.9.2568: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 248.523212][ T3006] loop2: p127 size 33024 extends beyond EOD, truncated [ 248.536821][T12154] EXT4-fs (loop8): bad s_min_extra_isize: 56096 [ 248.545505][T12164] kernel profiling enabled (shift: 62) [ 248.551582][ T3006] loop2: p128 size 33024 extends beyond EOD, truncated [ 248.564960][ T3006] loop2: p129 size 33024 extends beyond EOD, truncated [ 248.572648][T12164] profiling shift: 62 too large [ 248.577969][ T3006] loop2: p130 size 33024 extends beyond EOD, truncated [ 248.586819][ T3006] loop2: p131 size 33024 extends beyond EOD, truncated [ 248.600422][ T3006] loop2: p132 size 33024 extends beyond EOD, truncated [ 248.609383][ T3006] loop2: p133 size 33024 extends beyond EOD, truncated [ 248.617761][ T3006] loop2: p134 size 33024 extends beyond EOD, truncated [ 248.626321][ T3006] loop2: p135 size 33024 extends beyond EOD, truncated [ 248.641261][T12171] loop8: detected capacity change from 0 to 512 [ 248.648747][ T3006] loop2: p136 size 33024 extends beyond EOD, truncated [ 248.657762][T12171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 248.666671][ T3006] loop2: p137 size 33024 extends beyond EOD, truncated [ 248.672146][T12171] System zones: [ 248.674033][ T3006] loop2: p138 size 33024 extends beyond EOD, [ 248.674075][T12171] 1-12 [ 248.677626][ T3006] truncated [ 248.690165][ T3006] loop2: p139 size 33024 extends beyond EOD, truncated [ 248.697551][ T3006] loop2: p140 size 33024 extends beyond EOD, truncated [ 248.705451][ T3006] loop2: p141 size 33024 extends beyond EOD, truncated [ 248.714729][ T3006] loop2: p142 size 33024 extends beyond EOD, [ 248.714840][T12171] [ 248.714848][ T3006] truncated [ 248.721480][ T3006] loop2: p143 size 33024 extends beyond EOD, truncated [ 248.734241][ T3006] loop2: p144 size 33024 extends beyond EOD, truncated [ 248.741747][ T3006] loop2: p145 size 33024 extends beyond EOD, truncated [ 248.749254][ T3006] loop2: p146 size 33024 extends beyond EOD, truncated [ 248.758312][ T3006] loop2: p147 size 33024 extends beyond EOD, truncated [ 248.758462][T12171] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #12: comm syz.8.2576: missing EA_INODE flag [ 248.765914][ T3006] loop2: p148 size 33024 extends beyond EOD, truncated [ 248.784685][ T3006] loop2: p149 size 33024 extends beyond EOD, truncated [ 248.785081][T12176] loop9: detected capacity change from 0 to 256 [ 248.792145][ T3006] loop2: p150 size 33024 extends beyond EOD, truncated [ 248.801909][T12178] netlink: 'syz.5.2580': attribute type 1 has an invalid length. [ 248.805394][ T3006] loop2: p151 size 33024 extends beyond EOD, truncated [ 248.820578][ T3006] loop2: p152 size 33024 extends beyond EOD, truncated [ 248.825203][T12171] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 248.828215][ T3006] loop2: p153 size 33024 extends beyond EOD, [ 248.830859][T12171] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2576: error while reading EA inode 12 err=-117 [ 248.837457][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 248.837475][ C0] EXT4-fs (loop8): initial error at time 3321: ext4_xattr_inode_iget:441 [ 248.837491][ T3006] truncated [ 248.837492][ C0] : inode 12 [ 248.837506][ C0] EXT4-fs (loop8): last error at time 3321: ext4_xattr_inode_iget:441: inode 12 [ 248.837962][ T3006] loop2: p154 size 33024 extends beyond EOD, [ 248.878093][T12171] loop8: lost filesystem error report for type 5 error -117 [ 248.887447][ T3006] truncated [ 248.904170][ T3006] loop2: p155 size 33024 extends beyond EOD, truncated [ 248.913533][ T3006] loop2: p156 size 33024 extends beyond EOD, truncated [ 248.915965][T12171] EXT4-fs (loop8): 1 orphan inode deleted [ 248.924398][T12176] FAT-fs (loop9): Directory bread(block 64) failed [ 248.933234][T12176] FAT-fs (loop9): Directory bread(block 65) failed [ 248.940167][T12176] FAT-fs (loop9): Directory bread(block 66) failed [ 248.947757][ T3006] loop2: p157 size 33024 extends beyond EOD, truncated [ 248.954898][T12176] FAT-fs (loop9): Directory bread(block 67) failed [ 248.955159][T12171] FAULT_INJECTION: forcing a failure. [ 248.955159][T12171] name failslab, interval 1, probability 0, space 0, times 0 [ 248.963906][ T3006] loop2: p158 size 33024 extends beyond EOD, [ 248.976153][T12176] FAT-fs (loop9): Directory bread(block 68) failed [ 248.992078][ T3006] truncated [ 248.997232][ T3006] loop2: p159 size 33024 extends beyond EOD, truncated [ 249.005837][T12176] FAT-fs (loop9): Directory bread(block 69) failed [ 249.010265][T12171] CPU: 0 UID: 0 PID: 12171 Comm: syz.8.2576 Not tainted syzkaller #0 PREEMPT(full) [ 249.010295][T12171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.010316][T12171] Call Trace: [ 249.010326][T12171] [ 249.010407][T12171] __dump_stack+0x1d/0x30 [ 249.010437][T12171] dump_stack_lvl+0x95/0xd0 [ 249.010508][T12171] dump_stack+0x15/0x1b [ 249.010582][T12171] should_fail_ex+0x263/0x280 [ 249.010616][T12171] should_failslab+0x8c/0xb0 [ 249.010648][T12171] kmem_cache_alloc_noprof+0x66/0x3f0 [ 249.010718][T12171] ? do_getname+0x2e/0x1c0 [ 249.010748][T12171] do_getname+0x2e/0x1c0 [ 249.010776][T12171] getname_flags+0x1d/0x30 [ 249.010798][T12171] do_sys_openat2+0x60/0x130 [ 249.010886][T12171] __x64_sys_open+0xe6/0x110 [ 249.010962][T12171] x64_sys_call+0x14b9/0x3020 [ 249.010992][T12171] do_syscall_64+0x12c/0x3b0 [ 249.011020][T12171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.011104][T12171] RIP: 0033:0x7f59cc49cdd9 [ 249.011135][T12171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.011221][T12171] RSP: 002b:00007f59caef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 249.011243][T12171] RAX: ffffffffffffffda RBX: 00007f59cc715fa0 RCX: 00007f59cc49cdd9 [ 249.011299][T12171] RDX: 0000000000000021 RSI: 0000000000066842 RDI: 0000200000000140 [ 249.011393][T12171] RBP: 00007f59caef7090 R08: 0000000000000000 R09: 0000000000000000 [ 249.011406][T12171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.011420][T12171] R13: 00007f59cc716038 R14: 00007f59cc715fa0 R15: 00007ffe3f3d88b8 [ 249.011439][T12171] [ 249.192482][ T3006] loop2: p160 size 33024 extends beyond EOD, truncated [ 249.200053][ T3006] loop2: p161 size 33024 extends beyond EOD, truncated [ 249.211263][T12176] FAT-fs (loop9): Directory bread(block 70) failed [ 249.219338][ T3006] loop2: p162 size 33024 extends beyond EOD, truncated [ 249.226412][T12176] FAT-fs (loop9): Directory bread(block 71) failed [ 249.233878][ T3006] loop2: p163 size 33024 extends beyond EOD, truncated [ 249.241272][T12182] syzkaller0: entered promiscuous mode [ 249.246944][T12182] syzkaller0: entered allmulticast mode [ 249.253442][ T3006] loop2: p164 size 33024 extends beyond EOD, truncated [ 249.260325][T12176] FAT-fs (loop9): Directory bread(block 72) failed [ 249.269853][T12176] FAT-fs (loop9): Directory bread(block 73) failed [ 249.280694][ T3006] loop2: p165 size 33024 extends beyond EOD, truncated [ 249.288332][T12182] loop8: detected capacity change from 0 to 512 [ 249.295758][T12182] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 249.320056][ T3006] loop2: p166 size 33024 extends beyond EOD, truncated [ 249.322356][T12182] EXT4-fs: error: could not find journal device path [ 249.352471][ T3006] loop2: p167 size 33024 extends beyond EOD, truncated [ 249.368079][ T3006] loop2: p168 size 33024 extends beyond EOD, truncated [ 249.388867][ T3006] loop2: p169 size 33024 extends beyond EOD, truncated [ 249.398539][ T3006] loop2: p170 size 33024 extends beyond EOD, truncated [ 249.414435][ T3006] loop2: p171 size 33024 extends beyond EOD, truncated [ 249.422332][ T3006] loop2: p172 size 33024 extends beyond EOD, truncated [ 249.429888][ T3006] loop2: p173 size 33024 extends beyond EOD, truncated [ 249.437392][ T3006] loop2: p174 size 33024 extends beyond EOD, truncated [ 249.444986][ T30] kworker/u8:1: attempt to access beyond end of device [ 249.444986][ T30] loop9: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 249.445170][ T3006] loop2: p175 size 33024 extends beyond EOD, [ 249.471509][ T30] kworker/u8:1: attempt to access beyond end of device [ 249.471509][ T30] loop9: rw=1, sector=1288, nr_sectors = 32 limit=256 [ 249.481226][ T3006] truncated [ 249.505082][ T3006] loop2: p176 size 33024 extends beyond EOD, truncated [ 249.520511][ T3006] loop2: p177 size 33024 extends beyond EOD, truncated [ 249.528128][ T30] kworker/u8:1: attempt to access beyond end of device [ 249.528128][ T30] loop9: rw=1, sector=1352, nr_sectors = 32 limit=256 [ 249.535739][ T3006] loop2: p178 size 33024 extends beyond EOD, truncated [ 249.552650][T12186] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 249.562492][ T3006] loop2: p179 size 33024 extends beyond EOD, truncated [ 249.573850][ T30] kworker/u8:1: attempt to access beyond end of device [ 249.573850][ T30] loop9: rw=1, sector=1416, nr_sectors = 32 limit=256 [ 249.597355][ T3006] loop2: p180 size 33024 extends beyond EOD, truncated [ 249.606810][ T30] kworker/u8:1: attempt to access beyond end of device [ 249.606810][ T30] loop9: rw=1, sector=1480, nr_sectors = 32 limit=256 [ 249.607841][T12190] futex_wake_op: syz.6.2586 tries to shift op by -1; fix this program [ 249.621181][ T3006] loop2: p181 size 33024 extends beyond EOD, [ 249.629136][ T30] kworker/u8:1: attempt to access beyond end of device [ 249.629136][ T30] loop9: rw=1, sector=1544, nr_sectors = 32 limit=256 [ 249.649007][ T3006] truncated [ 249.652789][ T3006] loop2: p182 size 33024 extends beyond EOD, truncated [ 249.655989][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2585'. [ 249.660706][ T3006] loop2: p183 size 33024 extends beyond EOD, truncated [ 249.676998][ T30] kworker/u8:1: attempt to access beyond end of device [ 249.676998][ T30] loop9: rw=1, sector=1608, nr_sectors = 32 limit=256 [ 249.699377][ T3006] loop2: p184 size 33024 extends beyond EOD, truncated [ 249.706873][ T30] kworker/u8:1: attempt to access beyond end of device [ 249.706873][ T30] loop9: rw=1, sector=1672, nr_sectors = 32 limit=256 [ 249.721140][ T3006] loop2: p185 size 33024 extends beyond EOD, truncated [ 249.728675][ T3006] loop2: p186 size 33024 extends beyond EOD, truncated [ 249.748881][ T30] kworker/u8:1: attempt to access beyond end of device [ 249.748881][ T30] loop9: rw=1, sector=1736, nr_sectors = 32 limit=256 [ 249.773753][ T3006] loop2: p187 size 33024 extends beyond EOD, truncated [ 249.786394][ T3006] loop2: p188 size 33024 extends beyond EOD, truncated [ 249.795002][ T30] kworker/u8:1: attempt to access beyond end of device [ 249.795002][ T30] loop9: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 249.819686][ T3006] loop2: p189 size 33024 extends beyond EOD, truncated [ 249.838220][ T3006] loop2: p190 size 33024 extends beyond EOD, truncated [ 249.853192][ T28] audit: type=1400 audit(3322.829:15970): avc: denied { listen } for pid=12197 comm="syz.9.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.879557][ T3006] loop2: p191 size 33024 extends beyond EOD, truncated [ 249.882492][T12193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12193 comm=syz.6.2587 [ 249.899148][ T3006] loop2: p192 size 33024 extends beyond EOD, truncated [ 249.920492][ T3006] loop2: p193 size 33024 extends beyond EOD, truncated [ 249.935786][ T3006] loop2: p194 size 33024 extends beyond EOD, truncated [ 249.937531][T12193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=12193 comm=syz.6.2587 [ 249.952751][ T3006] loop2: p195 size 33024 extends beyond EOD, [ 249.955785][T12201] kernel profiling enabled (shift: 62) [ 249.961978][ T3006] truncated [ 249.967405][T12201] profiling shift: 62 too large [ 249.986300][ T3006] loop2: p196 size 33024 extends beyond EOD, truncated [ 250.006601][ T3006] loop2: p197 size 33024 extends beyond EOD, truncated [ 250.023979][ T3006] loop2: p198 size 33024 extends beyond EOD, truncated [ 250.039906][ T3006] loop2: p199 size 33024 extends beyond EOD, truncated [ 250.047857][ T3006] loop2: p200 size 33024 extends beyond EOD, truncated [ 250.056311][ T3006] loop2: p201 size 33024 extends beyond EOD, truncated [ 250.064053][ T3006] loop2: p202 size 33024 extends beyond EOD, truncated [ 250.071616][ T3006] loop2: p203 size 33024 extends beyond EOD, truncated [ 250.079309][ T3006] loop2: p204 size 33024 extends beyond EOD, truncated [ 250.087057][ T3006] loop2: p205 size 33024 extends beyond EOD, truncated [ 250.094671][ T3006] loop2: p206 size 33024 extends beyond EOD, truncated [ 250.497114][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2595'. [ 250.534038][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2595'. [ 250.578828][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2595'. [ 250.582683][ T3006] loop2: p207 size 33024 extends beyond EOD, truncated [ 250.599285][ T3006] loop2: p208 size 33024 extends beyond EOD, truncated [ 250.607160][ T3006] loop2: p209 size 33024 extends beyond EOD, truncated [ 250.614820][T12218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.622818][ T3006] loop2: p210 size 33024 extends beyond EOD, truncated [ 250.623217][ T3006] loop2: p211 size 33024 extends beyond EOD, truncated [ 250.623771][ T3006] loop2: p212 size 33024 extends beyond EOD, truncated [ 250.647509][ T3006] loop2: p213 size 33024 extends beyond EOD, truncated [ 250.664112][ T3006] loop2: p214 size 33024 extends beyond EOD, truncated [ 250.673642][ T3006] loop2: p215 size 33024 extends beyond EOD, truncated [ 250.681144][ T3006] loop2: p216 size 33024 extends beyond EOD, truncated [ 250.689693][ T3006] loop2: p217 size 33024 extends beyond EOD, truncated [ 250.697328][ T3006] loop2: p218 size 33024 extends beyond EOD, truncated [ 250.720481][ T3006] loop2: p219 size 33024 extends beyond EOD, truncated [ 250.731361][T12218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.742761][ T3006] loop2: p220 size 33024 extends beyond EOD, truncated [ 250.750384][ T3006] loop2: p221 size 33024 extends beyond EOD, truncated [ 250.758832][ T3006] loop2: p222 size 33024 extends beyond EOD, truncated [ 250.766634][ T3006] loop2: p223 size 33024 extends beyond EOD, truncated [ 250.774340][ T3006] loop2: p224 size 33024 extends beyond EOD, truncated [ 250.782611][ T3006] loop2: p225 size 33024 extends beyond EOD, truncated [ 250.790276][ T3006] loop2: p226 size 33024 extends beyond EOD, truncated [ 250.793531][T12228] netlink: 'syz.8.2599': attribute type 1 has an invalid length. [ 250.798695][ T3006] loop2: p227 size 33024 extends beyond EOD, truncated [ 250.812856][ T3006] loop2: p228 size 33024 extends beyond EOD, truncated [ 250.829354][ T3006] loop2: p229 size 33024 extends beyond EOD, truncated [ 250.843616][ T3006] loop2: p230 size 33024 extends beyond EOD, truncated [ 250.857066][ T3006] loop2: p231 size 33024 extends beyond EOD, truncated [ 250.864805][ T28] audit: type=1400 audit(3323.839:15971): avc: denied { accept } for pid=12222 comm="syz.5.2597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.866032][ T3006] loop2: p232 size 33024 extends beyond EOD, [ 250.894655][T12225] dummy0 speed is unknown, defaulting to 1000 [ 250.907999][T12225] lo speed is unknown, defaulting to 1000 [ 250.927720][ T3006] truncated [ 250.931714][ T3006] loop2: p233 size 33024 extends beyond EOD, truncated [ 250.945477][ T3006] loop2: p234 size 33024 extends beyond EOD, truncated [ 250.953535][ T3006] loop2: p235 size 33024 extends beyond EOD, truncated [ 250.961074][ T3006] loop2: p236 size 33024 extends beyond EOD, truncated [ 250.980704][ T3006] loop2: p237 size 33024 extends beyond EOD, truncated [ 250.996156][ T3006] loop2: p238 size 33024 extends beyond EOD, truncated [ 251.014515][ T3006] loop2: p239 size 33024 extends beyond EOD, truncated [ 251.023145][ T3006] loop2: p240 size 33024 extends beyond EOD, truncated [ 251.039544][ T3006] loop2: p241 size 33024 extends beyond EOD, truncated [ 251.054360][ T3006] loop2: p242 size 33024 extends beyond EOD, truncated [ 251.065404][ T3006] loop2: p243 size 33024 extends beyond EOD, truncated [ 251.072813][T12236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12236 comm=syz.9.2602 [ 251.078254][ T3006] loop2: p244 size 33024 extends beyond EOD, truncated [ 251.099977][T12236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=12236 comm=syz.9.2602 [ 251.104115][ T3006] loop2: p245 size 33024 extends beyond EOD, truncated [ 251.130060][T12236] loop9: detected capacity change from 0 to 512 [ 251.136870][ T3006] loop2: p246 size 33024 extends beyond EOD, truncated [ 251.144437][T12236] EXT4-fs (loop9): bad s_min_extra_isize: 56096 [ 251.151118][ T3006] loop2: p247 size 33024 extends beyond EOD, truncated [ 251.159822][ T3006] loop2: p248 size 33024 extends beyond EOD, truncated [ 251.167542][ T3006] loop2: p249 size 33024 extends beyond EOD, truncated [ 251.179054][ T3006] loop2: p250 size 33024 extends beyond EOD, truncated [ 251.214300][ T3006] loop2: p251 size 33024 extends beyond EOD, truncated [ 251.223023][ T3006] loop2: p252 size 33024 extends beyond EOD, truncated [ 251.231068][ T3006] loop2: p253 size 33024 extends beyond EOD, truncated [ 251.240118][ T3006] loop2: p254 size 33024 extends beyond EOD, truncated [ 251.248129][ T3006] loop2: p255 size 33024 extends beyond EOD, truncated [ 251.566418][ T28] audit: type=1400 audit(3324.539:15972): avc: denied { read write } for pid=12255 comm="syz.5.2610" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 251.787290][ T28] audit: type=1400 audit(3324.569:15973): avc: denied { open } for pid=12255 comm="syz.5.2610" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 251.888396][T12265] kernel profiling enabled (shift: 62) [ 251.894012][T12265] profiling shift: 62 too large [ 251.973071][T12276] loop8: detected capacity change from 0 to 1024 [ 251.986419][T12276] EXT4-fs: Ignoring removed bh option [ 252.036852][T12276] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #12: block 7: comm syz.8.2617: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 252.129356][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2620'. [ 252.235435][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 252.246149][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 252.246171][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 252.271638][T12290] udevd[12290]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 252.282478][T12296] netlink: 'syz.6.2621': attribute type 1 has an invalid length. [ 252.293160][T12291] udevd[12291]: inotify_add_watch(7, /dev/loop2p10, 10) failed: No such file or directory [ 252.293621][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 252.308015][T12293] udevd[12293]: inotify_add_watch(7, /dev/loop2p12, 10) failed: No such file or directory [ 252.329841][T12292] udevd[12292]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 252.339988][T12289] udevd[12289]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 252.351618][T12288] udevd[12288]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 252.384091][ T3445] IPVS: starting estimator thread 0... [ 252.396709][T12302] loop2: detected capacity change from 0 to 164 [ 252.434229][T12302] rock: directory entry would overflow storage [ 252.464559][T12302] rock: sig=0x5252, size=5, remaining=3 [ 252.472055][T12299] IPVS: using max 2448 ests per chain, 122400 per kthread [ 252.570963][ T28] audit: type=1400 audit(3325.539:15974): avc: denied { append } for pid=12306 comm="syz.2.2625" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 252.748659][T12317] loop9: detected capacity change from 0 to 1024 [ 252.755656][T12317] EXT4-fs: Ignoring removed bh option [ 252.799038][T12317] EXT4-fs mount: 7 callbacks suppressed [ 252.799054][T12317] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.826155][T12310] kernel profiling enabled (shift: 62) [ 252.850427][T12310] profiling shift: 62 too large [ 252.915594][T12317] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #12: block 7: comm syz.9.2630: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 253.018681][T10807] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.066685][ T28] audit: type=1400 audit(3326.039:15975): avc: denied { ioctl } for pid=12334 comm="syz.8.2635" path="socket:[39314]" dev="sockfs" ino=39314 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 253.128086][T12338] dummy0 speed is unknown, defaulting to 1000 [ 253.152763][T12338] lo speed is unknown, defaulting to 1000 [ 253.328453][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2637'. [ 253.519135][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2637'. [ 253.544045][T12343] syzkaller0: entered promiscuous mode [ 253.550094][T12343] syzkaller0: entered allmulticast mode [ 253.556645][T12346] netlink: 'syz.9.2637': attribute type 13 has an invalid length. [ 253.642890][T12346] netlink: 'syz.9.2637': attribute type 14 has an invalid length. [ 253.700161][ T28] audit: type=1400 audit(3326.659:15976): avc: denied { read } for pid=12334 comm="syz.8.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.017505][T12362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.056228][T12362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.209215][ T3394] hid-generic 0004:0004:0001.003B: unknown main item tag 0x0 [ 254.232887][ T3394] hid-generic 0004:0004:0001.003B: unknown main item tag 0x0 [ 254.236128][T12367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2646'. [ 254.240442][ T3394] hid-generic 0004:0004:0001.003B: unknown main item tag 0x0 [ 254.259764][ T3394] hid-generic 0004:0004:0001.003B: hidraw0: HID v1.b3 Device [syz0] on syz1 [ 254.297514][T12376] loop8: detected capacity change from 0 to 1024 [ 254.306003][T12380] netlink: 'syz.5.2649': attribute type 1 has an invalid length. [ 254.306995][T12376] EXT4-fs: Ignoring removed bh option [ 254.388078][T12376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.410475][T12384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12384 comm=syz.6.2650 [ 254.478733][T12376] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #12: block 7: comm syz.8.2647: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 254.549064][T12387] fido_id[12387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.629968][ T7612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.719886][T12396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=12396 comm=syz.8.2654 [ 254.771525][T12397] loop8: detected capacity change from 0 to 512 [ 254.785782][T12397] EXT4-fs: Ignoring removed bh option [ 254.837421][T12397] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.2654: corrupted in-inode xattr: e_value size too large [ 254.891928][T12397] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 254.892700][T12397] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2654: couldn't read orphan inode 15 (err -117) [ 254.901897][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 254.901916][ C0] EXT4-fs (loop8): initial error at time 3327: ext4_iget_extra_inode:5128: inode 15 [ 254.901945][ C0] EXT4-fs (loop8): last error at time 3327: ext4_iget_extra_inode:5128: inode 15 [ 254.938897][T12397] loop8: lost filesystem error report for type 5 error -117 [ 254.940333][T12397] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.966419][ T28] audit: type=1400 audit(3327.939:15977): avc: denied { unlink } for pid=12395 comm="syz.8.2654" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 255.039042][T12402] loop2: detected capacity change from 0 to 4096 [ 255.065849][T12402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.183962][ T7612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.349004][T12415] loop8: detected capacity change from 0 to 512 [ 255.358648][T12415] EXT4-fs: Ignoring removed oldalloc option [ 255.374219][T12402] ext4: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 255.390045][T12417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12417 comm=syz.6.2661 [ 255.421234][T12415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 255.439377][T12402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2656'. [ 255.467930][T12415] EXT4-fs (loop8): orphan cleanup on readonly fs [ 255.475464][T12415] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 255.490345][T12415] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 255.497458][T12415] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.2660: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 255.515579][T12415] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 255.515906][T12415] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2660: couldn't read orphan inode 13 (err -117) [ 255.536929][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 255.536947][ C0] EXT4-fs (loop8): last error at time 3328: ext4_ext_check_inode:521: inode 13 [ 255.567371][T12415] loop8: lost filesystem error report for type 5 error -117 [ 255.567879][T12415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.589335][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.590970][T12415] EXT4-fs error (device loop8): ext4_lookup:1785: comm syz.8.2660: inode #15: comm syz.8.2660: iget: illegal inode # [ 255.627326][T12420] loop2: detected capacity change from 0 to 128 [ 255.670581][ T7612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.701519][T12430] loop8: detected capacity change from 0 to 512 [ 255.711521][T12430] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2665: invalid indirect mapped block 256 (level 2) [ 255.725216][T12430] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 255.725761][T12430] EXT4-fs (loop8): 2 truncates cleaned up [ 255.735057][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 255.735073][ C0] EXT4-fs (loop8): initial error at time 3328: ext4_free_branches:1023: inode 11 [ 255.735097][ C0] EXT4-fs (loop8): last error at time 3328: ext4_free_branches:1023: inode 11 [ 255.756275][T12435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12435 comm=syz.6.2669 [ 255.779852][T12430] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.798844][T12430] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2665: bg 0: block 5: invalid block bitmap [ 255.821547][T12435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=12435 comm=syz.6.2669 [ 255.940313][T12430] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 255.999408][T12430] EXT4-fs (loop8): This should not happen!! Data will be lost [ 255.999408][T12430] [ 256.022037][T12430] EXT4-fs (loop8): Total free blocks count 0 [ 256.132271][T12430] EXT4-fs (loop8): Free/Dirty block details [ 256.160546][T12430] EXT4-fs (loop8): free_blocks=0 [ 256.229908][T12430] EXT4-fs (loop8): dirty_blocks=67 [ 256.253590][T12430] EXT4-fs (loop8): Block reservation details [ 256.259650][T12430] EXT4-fs (loop8): i_reserved_data_blocks=67 [ 256.319538][ T7725] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 256.334022][T12430] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz.8.2665: data will be lost [ 256.389943][T12464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12464 comm=syz.6.2674 [ 256.404551][T12465] loop8: detected capacity change from 0 to 512 [ 256.411333][T12465] EXT4-fs: Ignoring removed oldalloc option [ 256.422659][T12465] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 256.447578][T12465] EXT4-fs (loop8): orphan cleanup on readonly fs [ 256.457680][T12465] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 256.472790][T12465] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 256.479626][T12465] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.2676: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 256.497677][T12465] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 256.497881][T12465] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2676: couldn't read orphan inode 13 (err -117) [ 256.507148][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 256.507168][ C1] EXT4-fs (loop8): last error at time 3329: ext4_ext_check_inode:521: inode 13 [ 256.534862][T12465] loop8: lost filesystem error report for type 5 error -117 [ 256.535563][T12465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 256.572201][T12465] EXT4-fs error (device loop8): ext4_lookup:1785: comm syz.8.2676: inode #15: comm syz.8.2676: iget: illegal inode # [ 256.859056][T12483] loop2: detected capacity change from 0 to 1024 [ 256.904477][T12483] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 256.915402][T12483] EXT4-fs (loop2): group descriptors corrupted! [ 257.220262][ T7612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.097415][T12485] kernel profiling enabled (shift: 62) [ 258.113103][T12485] profiling shift: 62 too large [ 258.187690][T12492] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2684'. [ 258.215778][T12492] netem: incorrect gi model size [ 258.239095][T12492] netem: change failed [ 258.463947][T12506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12506 comm=syz.9.2690 [ 258.516466][T12506] loop9: detected capacity change from 0 to 512 [ 258.537985][T12506] EXT4-fs: Ignoring removed bh option [ 258.569801][T12506] EXT4-fs: inline encryption not supported [ 258.591251][T12506] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 258.643600][T12506] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 258.670247][T12506] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2690: bg 0: block 248: padding at end of block bitmap is not set [ 258.691519][T12511] loop2: detected capacity change from 0 to 512 [ 258.698964][T12506] loop9: lost filesystem error report for type 5 error -117 [ 258.699269][T12506] Quota error (device loop9): write_blk: dquota write failed [ 258.706607][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 258.706629][ C0] EXT4-fs (loop9): last error at time 3331: ext4_validate_block_bitmap:441 [ 258.722721][T12511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a857e02c, mo2=0102] [ 258.730580][T12506] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 258.747094][T12506] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.2690: Failed to acquire dquot type 1 [ 258.758513][T12506] loop9: lost filesystem error report for type 5 error -28 [ 258.759023][T12506] EXT4-fs (loop9): 1 truncate cleaned up [ 258.773005][T12506] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 258.774716][T12511] System zones: 1-12 [ 258.809543][T12511] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2691: invalid indirect mapped block 8 (level 2) [ 258.850455][T10807] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 258.864399][T12511] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 258.877948][T12511] EXT4-fs (loop2): Remounting filesystem read-only [ 258.893729][T12511] EXT4-fs (loop2): 1 truncate cleaned up [ 258.899727][T12511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.934853][T12514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.974686][T12514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.139976][T12523] netlink: 'syz.6.2696': attribute type 1 has an invalid length. [ 259.502176][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.729909][T12528] loop2: detected capacity change from 0 to 512 [ 259.749380][T12528] EXT4-fs (loop2): 1 truncate cleaned up [ 259.765734][T12528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.801486][T12528] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.2697: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 259.920629][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.964278][T12532] loop2: detected capacity change from 0 to 1024 [ 259.978337][T12532] EXT4-fs: inline encryption not supported [ 259.996696][T12532] EXT4-fs: Ignoring removed nobh option [ 260.034442][T12532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 260.057446][T12532] System zones: 0-1, 3-12 [ 260.062579][T12532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.129732][T12546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12546 comm=syz.8.2703 [ 260.193584][T12551] loop8: detected capacity change from 0 to 512 [ 260.212493][T12551] EXT4-fs: Ignoring removed bh option [ 260.228313][T12551] EXT4-fs: inline encryption not supported [ 260.246473][T12551] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.345082][T12551] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 260.364111][T12551] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2703: bg 0: block 248: padding at end of block bitmap is not set [ 260.396631][T12551] loop8: lost filesystem error report for type 5 error -117 [ 260.397499][T12551] Quota error (device loop8): write_blk: dquota write failed [ 260.404908][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 260.404935][ C1] EXT4-fs (loop8): last error at time 3333: ext4_validate_block_bitmap:441 [ 260.495894][T12551] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 260.528156][T12551] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2703: Failed to acquire dquot type 1 [ 260.550376][T12551] loop8: lost filesystem error report for type 5 error -28 [ 260.553017][T12551] EXT4-fs (loop8): 1 truncate cleaned up [ 260.566601][T12551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 260.744976][ T7612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 260.787514][T12569] netlink: 'syz.8.2710': attribute type 1 has an invalid length. [ 261.031084][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.374271][ T28] audit: type=1400 audit(3334.349:15978): avc: denied { write } for pid=12595 comm="syz.2.2720" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 261.436438][ T1040] hid-generic 0004:0004:0001.003C: unknown main item tag 0x0 [ 261.454533][ T1040] hid-generic 0004:0004:0001.003C: unknown main item tag 0x0 [ 261.470798][ T1040] hid-generic 0004:0004:0001.003C: unknown main item tag 0x0 [ 261.492937][ T1040] hid-generic 0004:0004:0001.003C: hidraw0: HID v1.b3 Device [syz0] on syz1 [ 261.570906][T12607] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2723'. [ 261.688315][T12623] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2731'. [ 261.716701][T12625] netlink: 'syz.8.2732': attribute type 1 has an invalid length. [ 262.209842][T12632] random: crng reseeded on system resumption [ 262.904000][ T28] audit: type=1400 audit(3335.879:15979): avc: denied { write } for pid=12655 comm="syz.9.2742" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 262.954615][T12656] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2742'. [ 262.974706][ T5429] hid-generic 0004:0004:0001.003D: unknown main item tag 0x0 [ 262.982593][T12656] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2742'. [ 262.998829][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.999879][ T5429] hid-generic 0004:0004:0001.003D: unknown main item tag 0x0 [ 263.024173][T12656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12656 comm=syz.9.2742 [ 263.042150][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.047021][ T5429] hid-generic 0004:0004:0001.003D: unknown main item tag 0x0 [ 263.185103][ T5429] hid-generic 0004:0004:0001.003D: hidraw0: HID v1.b3 Device [syz0] on syz1 [ 263.241500][T12659] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2743'. [ 265.355081][T12643] loop2: detected capacity change from 0 to 1024 [ 265.451271][T12643] EXT4-fs: Ignoring removed bh option [ 267.651161][T12643] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 267.747458][T12696] loop8: detected capacity change from 0 to 512 [ 267.764490][T12696] EXT4-fs: Ignoring removed oldalloc option [ 267.784924][T12696] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 267.789585][T12700] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2756'. [ 267.803257][T12700] netlink: zone id is out of range [ 267.808684][T12700] netlink: zone id is out of range [ 267.808734][T12696] EXT4-fs (loop8): orphan cleanup on readonly fs [ 267.824902][T12700] netlink: set zone limit has 8 unknown bytes [ 267.834072][T12696] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 267.858056][T12696] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 267.866400][T12696] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.2754: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 267.891657][T12696] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 267.893309][T12696] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2754: couldn't read orphan inode 13 (err -117) [ 267.902936][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 267.902961][ C0] EXT4-fs (loop8): last error at time 3340: ext4_ext_check_inode:521: inode 13 [ 267.932792][T12696] loop8: lost filesystem error report for type 5 error -117 [ 267.934132][T12696] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.959189][T12696] EXT4-fs error (device loop8): ext4_lookup:1785: comm syz.8.2754: inode #15: comm syz.8.2754: iget: illegal inode # [ 268.004936][ T7612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.025386][T12709] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2759'. [ 268.059693][ T28] audit: type=1400 audit(3341.029:15980): avc: denied { getopt } for pid=12711 comm="syz.8.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.101043][T12712] x_tables: duplicate underflow at hook 1 [ 268.134154][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2761'. [ 268.191525][T12722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.236165][T12722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.244750][T12726] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 268.258182][T12726] loop9: detected capacity change from 0 to 1024 [ 268.265283][T12726] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 268.283500][T12726] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.2766: Invalid block bitmap block 0 in block_group 0 [ 268.297021][T12726] loop9: lost filesystem error report for type 5 error -117 [ 268.297461][T12726] Quota error (device loop9): write_blk: dquota write failed [ 268.305189][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 268.305218][ C0] EXT4-fs (loop9): initial error at time 3341: ext4_read_block_bitmap_nowait:483 [ 268.305346][ C0] EXT4-fs (loop9): last error at time 3341: ext4_read_block_bitmap_nowait:483 [ 268.340878][T12726] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 268.351568][T12726] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.2766: Failed to acquire dquot type 0 [ 268.363468][T12726] loop9: lost filesystem error report for type 5 error -117 [ 268.383206][T12726] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.2766: Freeing blocks not in datazone - block = 0, count = 4096 [ 268.406866][T12726] loop9: lost filesystem error report for type 5 error -117 [ 268.408548][T12726] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.2766: Invalid inode bitmap blk 0 in block_group 0 [ 268.429518][T12726] loop9: lost filesystem error report for type 5 error -117 [ 268.430578][ T5178] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-7 [ 268.447061][T12726] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 268.456431][T12726] loop9: lost filesystem error report for type 5 error -117 [ 268.457121][T12726] EXT4-fs (loop9): 1 orphan inode deleted [ 268.478392][T12726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.504350][ T5178] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 0 [ 268.525644][T10807] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.538935][T12704] loop2: detected capacity change from 0 to 1024 [ 268.589661][T12704] EXT4-fs: Ignoring removed bh option [ 268.620311][T12704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.654734][ T28] audit: type=1400 audit(3341.629:15981): avc: denied { connect } for pid=12734 comm="syz.9.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.682539][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.700557][T12743] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2771'. [ 268.707308][T12744] loop9: detected capacity change from 0 to 128 [ 268.726373][T12744] /dev/loop9: Can't lookup blockdev [ 268.748733][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2773'. [ 268.820187][T12764] syz_tun: entered allmulticast mode [ 268.837784][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2778'. [ 268.858403][T12763] syz_tun: left allmulticast mode [ 269.083704][T12775] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2783'. [ 269.099993][T12766] loop2: detected capacity change from 0 to 1024 [ 269.150321][T12766] EXT4-fs: Ignoring removed bh option [ 269.205312][T12766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.270840][T12785] dummy0 speed is unknown, defaulting to 1000 [ 269.280556][T12785] lo speed is unknown, defaulting to 1000 [ 269.285425][T12766] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.2779: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 269.403305][T12790] tipc: Enabling of bearer rejected, failed to enable media [ 269.416461][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.523732][T12794] kernel profiling enabled (shift: 62) [ 269.556713][T12794] profiling shift: 62 too large [ 269.573959][ T39] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.591227][ T28] audit: type=1400 audit(3342.559:15982): avc: denied { setopt } for pid=12784 comm="syz.6.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 269.602101][ T39] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.624509][ T39] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.645688][ T39] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.659450][T12802] loop2: detected capacity change from 0 to 512 [ 269.670512][T12802] EXT4-fs: Ignoring removed oldalloc option [ 269.682755][T12802] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 269.699632][T12802] EXT4-fs (loop2): orphan cleanup on readonly fs [ 269.707528][T12802] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 269.722591][T12802] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 269.729843][T12802] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.2792: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 269.740062][T12809] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2794'. [ 269.762642][T12802] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 269.762841][T12802] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2792: couldn't read orphan inode 13 (err -117) [ 269.772212][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 269.772245][ C1] EXT4-fs (loop2): last error at time 3342: ext4_ext_check_inode:521: inode 13 [ 269.799973][T12802] loop2: lost filesystem error report for type 5 error -117 [ 269.803213][T12802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.863304][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.046173][T12820] loop2: detected capacity change from 0 to 1024 [ 270.158365][T12820] EXT4-fs: Ignoring removed bh option [ 270.254685][T12820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.326833][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.391440][T12831] loop2: detected capacity change from 0 to 512 [ 270.417835][T12831] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 270.430761][T12831] System zones: 1-12 [ 270.445206][T12831] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.2802: missing EA_INODE flag [ 270.457248][T12831] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 270.457446][T12831] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2802: error while reading EA inode 12 err=-117 [ 270.466703][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 270.466721][ C1] EXT4-fs (loop2): initial error at time 3343: ext4_xattr_inode_iget:441: inode 12 [ 270.466762][ C1] EXT4-fs (loop2): last error at time 3343: ext4_xattr_inode_iget:441: inode 12 [ 270.504435][T12831] loop2: lost filesystem error report for type 5 error -117 [ 270.504681][T12831] EXT4-fs (loop2): 1 orphan inode deleted [ 270.519020][T12831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.548638][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.707429][T12846] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2808'. [ 270.825405][T12852] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2811'. [ 270.850686][T12852] netlink: zone id is out of range [ 270.871183][T12852] netlink: zone id is out of range [ 270.908028][T12852] netlink: set zone limit has 8 unknown bytes [ 270.938448][T12856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12856 comm=syz.9.2813 [ 271.004377][T12864] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 271.108530][T12867] netlink: 'syz.9.2818': attribute type 142 has an invalid length. [ 271.279208][T12877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12877 comm=syz.9.2823 [ 271.312224][T12877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=12877 comm=syz.9.2823 [ 271.333992][T12882] netlink: zone id is out of range [ 271.339463][T12882] netlink: zone id is out of range [ 271.398863][T12885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=12885 comm=syz.9.2827 [ 271.416045][ T1040] hid-generic 0004:0004:0001.003E: unknown main item tag 0x0 [ 271.429769][ T1040] hid-generic 0004:0004:0001.003E: unknown main item tag 0x0 [ 271.442607][ T1040] hid-generic 0004:0004:0001.003E: unknown main item tag 0x0 [ 271.461616][ T1040] hid-generic 0004:0004:0001.003E: hidraw0: HID v1.b3 Device [syz0] on syz1 [ 271.533689][T12896] loop8: detected capacity change from 0 to 256 [ 271.679518][T12903] loop8: detected capacity change from 0 to 8192 [ 271.724691][T12903] loop8: p1 < > p3 p4 < > [ 271.735568][T12903] loop8: p3 size 218103808 extends beyond EOD, truncated [ 271.766355][ T28] audit: type=1400 audit(3344.739:15983): avc: denied { read write } for pid=12902 comm="syz.8.2834" name="loop8p3" dev="devtmpfs" ino=2750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 271.826669][ T28] audit: type=1400 audit(3344.739:15984): avc: denied { open } for pid=12902 comm="syz.8.2834" path="/dev/loop8p3" dev="devtmpfs" ino=2750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 271.967571][T12910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12910 comm=syz.2.2837 [ 271.980843][T12910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=12910 comm=syz.2.2837 [ 272.000856][T12910] loop2: detected capacity change from 0 to 512 [ 272.018913][T12910] EXT4-fs (loop2): bad s_min_extra_isize: 56096 [ 273.160478][T12924] __nla_validate_parse: 4 callbacks suppressed [ 273.160498][T12924] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2841'. [ 273.789125][T12919] net_ratelimit: 3 callbacks suppressed [ 273.789417][T12919] netlink: set zone limit has 8 unknown bytes [ 274.167296][ T3394] hid-generic 0004:0004:0001.003F: unknown main item tag 0x0 [ 274.189243][ T3394] hid-generic 0004:0004:0001.003F: unknown main item tag 0x0 [ 274.212278][ T3394] hid-generic 0004:0004:0001.003F: unknown main item tag 0x0 [ 274.237394][ T3394] hid-generic 0004:0004:0001.003F: hidraw0: HID v1.b3 Device [syz0] on syz1 [ 274.406698][T12943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2847'. [ 274.417940][T12943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2847'. [ 274.506686][T12946] loop2: detected capacity change from 0 to 128 [ 274.606075][T12945] bio_check_eod: 3 callbacks suppressed [ 274.606175][T12945] syz.2.2848: attempt to access beyond end of device [ 274.606175][T12945] loop2: rw=2049, sector=241, nr_sectors = 800 limit=128 [ 274.640088][ T30] kworker/u8:1: attempt to access beyond end of device [ 274.640088][ T30] loop2: rw=1, sector=145, nr_sectors = 89 limit=128 [ 274.698169][T12948] loop2: detected capacity change from 0 to 4096 [ 274.721487][T12948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.779460][T12948] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 274.785001][T12952] loop8: detected capacity change from 0 to 512 [ 274.787983][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2849'. [ 274.796658][T12952] EXT4-fs (loop8): 1 truncate cleaned up [ 274.809523][T12952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.818812][T12948] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 274.825116][T12952] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.8.2850: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 274.889066][ T7612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.923233][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.062360][ T28] audit: type=1400 audit(3348.039:15985): avc: denied { append } for pid=12972 comm="syz.8.2857" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 275.063772][T12975] loop2: detected capacity change from 0 to 1024 [ 275.093806][T12975] EXT4-fs: Ignoring removed bh option [ 275.099877][T12975] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 275.114497][T12975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.166503][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.274920][T12989] loop8: detected capacity change from 0 to 512 [ 275.293165][T12989] EXT4-fs (loop8): 1 truncate cleaned up [ 275.300049][T12989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.313370][T12989] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.8.2862: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 275.366039][T12992] loop2: detected capacity change from 0 to 1024 [ 275.382448][T12992] EXT4-fs: Ignoring removed orlov option [ 275.390969][T12992] EXT4-fs: Ignoring removed nobh option [ 275.398158][ T7612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.428564][T12992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.571238][T13014] loop8: detected capacity change from 0 to 1024 [ 275.578063][T13014] EXT4-fs: Ignoring removed bh option [ 275.680749][T13014] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.733527][T13014] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #12: block 7: comm syz.8.2869: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 275.756995][ T28] audit: type=1400 audit(3348.729:15986): avc: denied { ioctl } for pid=13019 comm="syz.5.2872" path="socket:[42194]" dev="sockfs" ino=42194 ioctlcmd=0x6e82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 275.814747][ T7612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.839384][T13028] loop8: detected capacity change from 0 to 512 [ 275.846822][T13028] EXT4-fs: Ignoring removed i_version option [ 275.853202][T13028] ext4: Unknown parameter 'nouser_xattr.grpquota' [ 275.872840][T13028] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2873'. [ 275.897512][T13028] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2873'. [ 275.966466][T13036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13036 comm=syz.5.2877 [ 276.090263][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.113828][T13045] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 276.130671][T13045] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 276.147070][T13045] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 276.175382][T13045] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 276.190304][T13045] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 276.411051][T13045] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 276.426037][T13045] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 276.441193][T13045] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 276.456880][T13045] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 276.530441][T13060] loop2: detected capacity change from 0 to 512 [ 276.698775][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2887'. [ 276.703402][T13060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.711877][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2887'. [ 276.748127][T13060] netlink: 'syz.2.2885': attribute type 10 has an invalid length. [ 276.758826][T13060] veth0_vlan: entered allmulticast mode [ 276.802784][T13060] veth0_vlan: left promiscuous mode [ 276.814629][T13060] veth0_vlan: entered promiscuous mode [ 276.832905][T13060] team0: Device veth0_vlan failed to register rx_handler [ 276.918922][ T28] audit: type=1326 audit(3349.889:15987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6e61cdd9 code=0x7ffc0000 [ 276.942208][ T28] audit: type=1326 audit(3349.889:15988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6e61cdd9 code=0x7ffc0000 [ 276.965219][ T28] audit: type=1326 audit(3349.889:15989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7efe6e61cdd9 code=0x7ffc0000 [ 276.996537][ T28] audit: type=1326 audit(3349.889:15990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6e61cdd9 code=0x7ffc0000 [ 277.039564][ T28] audit: type=1326 audit(3349.919:15991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13085 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6e61cdd9 code=0x7ffc0000 [ 277.065298][T13089] netlink: 'syz.9.2893': attribute type 6 has an invalid length. [ 277.092150][ T28] audit: type=1400 audit(3350.049:15992): avc: denied { getopt } for pid=13088 comm="syz.9.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 277.166523][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2896'. [ 277.199308][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2896'. [ 277.200250][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.823844][T13099] dummy0 speed is unknown, defaulting to 1000 [ 277.843471][T13099] lo speed is unknown, defaulting to 1000 [ 277.874603][ T9738] bond0: (slave syz_tun): Releasing backup interface [ 277.967479][ T55] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.986323][ T55] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.102542][T13099] chnl_net:caif_netlink_parms(): no params data found [ 278.154581][ T55] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.188833][ T55] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.222151][T13129] bridge0: port 3(erspan0) entered blocking state [ 278.232544][T13129] bridge0: port 3(erspan0) entered disabled state [ 278.239361][T13129] erspan0: entered allmulticast mode [ 278.245600][T13129] erspan0: entered promiscuous mode [ 278.256804][T13129] bridge0: port 3(erspan0) entered blocking state [ 278.263518][T13129] bridge0: port 3(erspan0) entered forwarding state [ 278.429875][T13099] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.459421][T13099] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.480189][T13149] netlink: 'syz.5.2909': attribute type 1 has an invalid length. [ 278.489015][T13099] bridge_slave_0: entered allmulticast mode [ 278.517547][T13099] bridge_slave_0: entered promiscuous mode [ 278.559399][T13099] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.616670][T13099] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.669727][T13099] bridge_slave_1: entered allmulticast mode [ 278.676451][T13099] bridge_slave_1: entered promiscuous mode [ 278.695554][T13099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.718498][ T55] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.741310][ T55] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.766410][T13138] erspan0: left allmulticast mode [ 278.775675][T13138] erspan0: left promiscuous mode [ 278.786075][T13138] bridge0: port 3(erspan0) entered disabled state [ 278.797057][T13099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.808769][T13157] loop2: detected capacity change from 0 to 1024 [ 278.822678][T13157] EXT4-fs: inline encryption not supported [ 278.831100][T13157] EXT4-fs: Ignoring removed nobh option [ 278.844562][T13157] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 278.861032][T13157] System zones: 0-1, 3-12 [ 278.871573][ T55] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.892414][T13157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.909649][ T55] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.975488][T13099] team0: Port device team_slave_0 added [ 278.982684][T13099] team0: Port device team_slave_1 added [ 278.999507][T13099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.006730][T13099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.042192][T13099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.056733][T13099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.065897][T13099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.102225][T13099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.247054][T13099] hsr_slave_0: entered promiscuous mode [ 279.272719][T13099] hsr_slave_1: entered promiscuous mode [ 279.292949][T13099] debugfs: 'hsr0' already exists in 'hsr' [ 279.311186][T13099] Cannot create hsr debugfs directory [ 279.673270][ T55] bridge_slave_1: left allmulticast mode [ 279.679453][ T55] bridge_slave_1: left promiscuous mode [ 279.685196][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.742319][ T55] bridge_slave_0: left allmulticast mode [ 279.757864][ T55] bridge_slave_0: left promiscuous mode [ 279.765439][T13184] FAULT_INJECTION: forcing a failure. [ 279.765439][T13184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.779203][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.786877][T13184] CPU: 1 UID: 0 PID: 13184 Comm: syz.8.2919 Not tainted syzkaller #0 PREEMPT(full) [ 279.786905][T13184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.786917][T13184] Call Trace: [ 279.786923][T13184] [ 279.786931][T13184] __dump_stack+0x1d/0x30 [ 279.786973][T13184] dump_stack_lvl+0x95/0xd0 [ 279.787031][T13184] dump_stack+0x15/0x1b [ 279.787054][T13184] should_fail_ex+0x263/0x280 [ 279.787099][T13184] should_fail+0xb/0x20 [ 279.787125][T13184] should_fail_usercopy+0x1a/0x20 [ 279.787147][T13184] _copy_from_iter+0xcf/0xea0 [ 279.787183][T13184] ? __alloc_skb+0x4f6/0x690 [ 279.787220][T13184] ? __alloc_skb+0x200/0x690 [ 279.787242][T13184] netlink_sendmsg+0x4ae/0x6f0 [ 279.787335][T13184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.787375][T13184] ____sys_sendmsg+0x563/0x5b0 [ 279.787402][T13184] ___sys_sendmsg+0x195/0x1e0 [ 279.787444][T13184] __x64_sys_sendmsg+0xd4/0x160 [ 279.787476][T13184] x64_sys_call+0x194c/0x3020 [ 279.787590][T13184] do_syscall_64+0x12c/0x3b0 [ 279.787617][T13184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.787677][T13184] RIP: 0033:0x7f59cc49cdd9 [ 279.787768][T13184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.787789][T13184] RSP: 002b:00007f59caef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.787817][T13184] RAX: ffffffffffffffda RBX: 00007f59cc715fa0 RCX: 00007f59cc49cdd9 [ 279.787880][T13184] RDX: 0000000004000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 279.787895][T13184] RBP: 00007f59caef7090 R08: 0000000000000000 R09: 0000000000000000 [ 279.787908][T13184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.787920][T13184] R13: 00007f59cc716038 R14: 00007f59cc715fa0 R15: 00007ffe3f3d88b8 [ 279.787937][T13184] [ 279.790563][ T55] pimreg: left allmulticast mode [ 280.034075][ T55] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 280.096570][ T55] bond3 (unregistering): (slave geneve3): Releasing active interface [ 280.107072][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.200564][T13196] loop2: detected capacity change from 0 to 512 [ 280.208575][T13196] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 280.220511][T13196] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 280.231644][T13196] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2923: Corrupt directory, running e2fsck is recommended [ 280.248375][T13196] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 280.263945][T13196] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2923: corrupted in-inode xattr: e_name out of bounds [ 280.278570][T13196] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 280.278834][T13196] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2923: couldn't read orphan inode 15 (err -117) [ 280.288043][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 280.288060][ C1] EXT4-fs (loop2): initial error at time 3353: ext4_iget_extra_inode:5128: inode 15 [ 280.288078][ C1] EXT4-fs (loop2): last error at time 3353: ext4_iget_extra_inode:5128: inode 15 [ 280.325216][T13196] loop2: lost filesystem error report for type 5 error -117 [ 280.326346][T13196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.346492][ T55] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 280.347088][T13196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.354917][ T55] bridge3 (unregistering): left promiscuous mode [ 280.370121][ T55] bridge3 (unregistering): left allmulticast mode [ 280.434007][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.444280][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.455617][ T55] bond0 (unregistering): Released all slaves [ 280.464116][ T55] bond1 (unregistering): Released all slaves [ 280.473596][ T55] bond2 (unregistering): (slave lo): Releasing backup interface [ 280.481977][ T55] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 280.494247][ T55] bond2 (unregistering): Released all slaves [ 280.505056][ T55] bond3 (unregistering): Released all slaves [ 280.515298][ T55] bond4 (unregistering): Released all slaves [ 280.567186][T13192] dummy0 speed is unknown, defaulting to 1000 [ 280.576695][ T55] tipc: Disabling bearer [ 280.585434][ T55] tipc: Left network mode [ 280.586722][T13195] dummy0 speed is unknown, defaulting to 1000 [ 280.596553][T13192] lo speed is unknown, defaulting to 1000 [ 280.609150][ T55] IPVS: stopping master sync thread 10234 ... [ 280.617692][ T28] audit: type=1400 audit(3353.589:15993): avc: denied { search } for pid=3045 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.640826][ T28] audit: type=1400 audit(3353.589:15994): avc: denied { search } for pid=3045 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.668276][ T28] audit: type=1400 audit(3353.589:15995): avc: denied { search } for pid=3045 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.690328][ T28] audit: type=1400 audit(3353.589:15996): avc: denied { read } for pid=3045 comm="dhcpcd" name="n43" dev="tmpfs" ino=18783 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 280.700968][T13195] lo speed is unknown, defaulting to 1000 [ 280.713110][ T28] audit: type=1400 audit(3353.589:15997): avc: denied { open } for pid=3045 comm="dhcpcd" path="/run/udev/data/n43" dev="tmpfs" ino=18783 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 280.847780][ T28] audit: type=1400 audit(3353.589:15998): avc: denied { getattr } for pid=3045 comm="dhcpcd" path="/run/udev/data/n43" dev="tmpfs" ino=18783 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 280.878281][ T28] audit: type=1400 audit(3353.849:15999): avc: denied { read open } for pid=13218 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.907704][ T28] audit: type=1400 audit(3353.849:16000): avc: denied { getattr } for pid=13218 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.006786][ T55] hsr_slave_0: left promiscuous mode [ 281.017328][ T55] hsr_slave_1: left promiscuous mode [ 281.042968][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.235508][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.929507][ T28] audit: type=1400 audit(3354.899:16001): avc: denied { add_name } for pid=13213 comm="dhcpcd-run-hook" name="resolv.conf.eth13.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.965338][T13235] loop2: detected capacity change from 0 to 1024 [ 281.972603][ T28] audit: type=1400 audit(3354.899:16002): avc: denied { create } for pid=13213 comm="dhcpcd-run-hook" name="resolv.conf.eth13.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 282.000843][T13235] EXT4-fs: inline encryption not supported [ 282.008306][ T55] veth1_macvtap: left promiscuous mode [ 282.014063][ T55] veth0_macvtap: left promiscuous mode [ 282.019661][T13235] EXT4-fs: Ignoring removed nobh option [ 282.025760][ T55] veth1_vlan: left promiscuous mode [ 282.031292][ T55] veth0_vlan: left promiscuous mode [ 282.051458][T13235] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 282.078156][T13235] System zones: 0-1, 3-12 [ 282.093553][T13248] netlink: 'syz.8.2935': attribute type 1 has an invalid length. [ 282.096166][T13235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.286459][T13259] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2938'. [ 282.308933][ T55] team0 (unregistering): Port device team_slave_1 removed [ 282.324503][ T55] team0 (unregistering): Port device team_slave_0 removed [ 282.470117][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2938'. [ 282.883441][T13283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13283 comm=syz.9.2944 [ 282.948612][T13283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=13283 comm=syz.9.2944 [ 282.958930][T13099] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.969200][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.982961][T13099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.991934][T13099] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.005296][T13099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.020506][T13099] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.047464][T13099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.063131][T13099] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.082367][T13099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.135258][T13099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.149289][T13099] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.183285][ T55] IPVS: stop unused estimator thread 0... [ 283.198014][T13099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.225930][T13099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.237860][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.245095][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.257121][T13318] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20002 [ 283.264492][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.271565][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.290548][T13319] loop8: detected capacity change from 0 to 512 [ 283.319568][T13319] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 283.361816][T13319] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 283.379239][T13319] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2952: Corrupt directory, running e2fsck is recommended [ 283.393894][T13319] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 283.411988][T13319] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.2952: corrupted in-inode xattr: e_name out of bounds [ 283.432038][T13319] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 283.432404][T13319] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2952: couldn't read orphan inode 15 (err -117) [ 283.443799][T13099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.453472][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 283.453491][ C0] EXT4-fs (loop8): initial error at time 3356: ext4_iget_extra_inode:5128: inode 15 [ 283.476257][ C0] EXT4-fs (loop8): last error at time 3356: ext4_iget_extra_inode:5128: inode 15 [ 283.497833][T13319] loop8: lost filesystem error report for type 5 error -117 [ 283.504267][T13319] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.511615][T13336] FAULT_INJECTION: forcing a failure. [ 283.511615][T13336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.511719][T13336] CPU: 1 UID: 0 PID: 13336 Comm: syz.2.2956 Not tainted syzkaller #0 PREEMPT(full) [ 283.511742][T13336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.511763][T13336] Call Trace: [ 283.511769][T13336] [ 283.511784][T13336] __dump_stack+0x1d/0x30 [ 283.511836][T13336] dump_stack_lvl+0x95/0xd0 [ 283.511863][T13336] dump_stack+0x15/0x1b [ 283.511887][T13336] should_fail_ex+0x263/0x280 [ 283.512006][T13336] should_fail+0xb/0x20 [ 283.512035][T13336] should_fail_usercopy+0x1a/0x20 [ 283.512055][T13336] _copy_from_user+0x1c/0xb0 [ 283.512077][T13336] sctp_getsockopt_context+0x71/0x330 [ 283.512124][T13336] sctp_getsockopt+0x444/0xaa0 [ 283.512156][T13336] sock_common_getsockopt+0x60/0x70 [ 283.512178][T13336] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 283.512278][T13336] do_sock_getsockopt+0x2f5/0x570 [ 283.512309][T13336] __x64_sys_getsockopt+0x11d/0x1a0 [ 283.512383][T13336] x64_sys_call+0x2dcf/0x3020 [ 283.512479][T13336] do_syscall_64+0x12c/0x3b0 [ 283.512507][T13336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.512604][T13336] RIP: 0033:0x7f94d270cdd9 [ 283.512621][T13336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.512658][T13336] RSP: 002b:00007f94d115f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 283.512679][T13336] RAX: ffffffffffffffda RBX: 00007f94d2985fa0 RCX: 00007f94d270cdd9 [ 283.512694][T13336] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003 [ 283.512764][T13336] RBP: 00007f94d115f090 R08: 00002000000000c0 R09: 0000000000000000 [ 283.512809][T13336] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.512823][T13336] R13: 00007f94d2986038 R14: 00007f94d2985fa0 R15: 00007ffe7f20aee8 [ 283.512842][T13336] [ 283.720306][T13319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.770742][T13346] netlink: 'syz.8.2958': attribute type 1 has an invalid length. [ 283.900037][T13364] loop2: detected capacity change from 0 to 512 [ 283.913717][T13099] veth0_vlan: entered promiscuous mode [ 283.926417][T13364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c11c, mo2=0006] [ 283.937063][T13364] System zones: 1-2, 4-13 [ 283.947702][T13099] veth1_vlan: entered promiscuous mode [ 283.950265][T13364] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2963: inode has both inline data and extents flags [ 283.968631][T13364] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 283.968828][T13364] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2963: couldn't read orphan inode 15 (err -117) [ 283.978009][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 283.978026][ C1] EXT4-fs (loop2): initial error at time 3356: ext4_orphan_get:1397: inode 15 [ 283.978072][ C1] EXT4-fs (loop2): last error at time 3356: ext4_orphan_get:1397: inode 15 [ 283.978134][ T2995] ================================================================== [ 283.978160][ T2995] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve_in_last [ 283.978186][ T2995] [ 283.978190][ T2995] write to 0xffffffff86e6ea98 of 8 bytes by interrupt on cpu 1: [ 283.978205][ T2995] prb_reserve_in_last+0x9e3/0xb20 [ 283.978224][ T2995] vprintk_store+0x457/0x910 [ 284.040455][T13370] net_ratelimit: 245 callbacks suppressed [ 284.040478][T13370] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 284.045338][ T2995] vprintk_emit+0x1a4/0x600 [ 284.045367][ T2995] vprintk_default+0x26/0x30 [ 284.045391][ T2995] vprintk+0x1d/0x30 [ 284.045421][ T2995] _printk+0x79/0xa0 [ 284.045442][ T2995] print_daily_error_info+0x24a/0x300 [ 284.045471][ T2995] call_timer_fn+0x3b/0x240 [ 284.045497][ T2995] __run_timer_base+0x415/0x5f0 [ 284.045522][ T2995] run_timer_softirq+0x31/0x70 [ 284.045546][ T2995] handle_softirqs+0xb9/0x280 [ 284.045571][ T2995] __irq_exit_rcu+0x42/0xd0 [ 284.045594][ T2995] sysvec_apic_timer_interrupt+0x74/0x80 [ 284.045616][ T2995] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.045641][ T2995] console_flush_all+0x540/0x6c0 [ 284.045669][ T2995] console_unlock+0xa1/0x280 [ 284.045697][ T2995] vprintk_emit+0x3e4/0x600 [ 284.045721][ T2995] vprintk_default+0x26/0x30 [ 284.045744][ T2995] vprintk+0x1d/0x30 [ 284.045772][ T2995] _printk+0x79/0xa0 [ 284.045793][ T2995] __ext4_error+0x225/0x2e0 [ 284.045816][ T2995] ext4_orphan_get+0x189/0x430 [ 284.045844][ T2995] ext4_orphan_cleanup+0x5fa/0x9f0 [ 284.045873][ T2995] ext4_fill_super+0x3408/0x37c0 [ 284.045899][ T2995] get_tree_bdev_flags+0x291/0x300 [ 284.045933][ T2995] get_tree_bdev+0x1f/0x30 [ 284.045965][ T2995] ext4_get_tree+0x1c/0x30 [ 284.045988][ T2995] vfs_get_tree+0x57/0x1d0 [ 284.046020][ T2995] do_new_mount+0x288/0x8d0 [ 284.046042][ T2995] path_mount+0x4d0/0xbc0 [ 284.046061][ T2995] __se_sys_mount+0x28c/0x2e0 [ 284.046082][ T2995] __x64_sys_mount+0x67/0x80 [ 284.046103][ T2995] x64_sys_call+0x2d61/0x3020 [ 284.046134][ T2995] do_syscall_64+0x12c/0x3b0 [ 284.046159][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.046183][ T2995] [ 284.046189][ T2995] read to 0xffffffff86e6ea90 of 16 bytes by task 2995 on cpu 0: [ 284.046209][ T2995] _prb_read_valid+0x1b6/0x950 [ 284.046232][ T2995] prb_read_valid+0x3c/0x60 [ 284.046254][ T2995] syslog_print+0x258/0x560 [ 284.046276][ T2995] do_syslog+0x52b/0x7f0 [ 284.061089][T13364] loop2: lost filesystem error report for type 5 error -117 [ 284.064449][ T2995] __x64_sys_syslog+0x41/0x50 [ 284.064478][ T2995] x64_sys_call+0x2b9e/0x3020 [ 284.064506][ T2995] do_syscall_64+0x12c/0x3b0 [ 284.082940][T13364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.086917][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.124425][T13364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2963'. [ 284.127085][ T2995] [ 284.127092][ T2995] Reported by Kernel Concurrency Sanitizer on: [ 284.127105][ T2995] CPU: 0 UID: 0 PID: 2995 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 284.313613][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.323667][ T2995] ================================================================== [ 284.342896][T13099] veth0_macvtap: entered promiscuous mode [ 284.350363][T13099] veth1_macvtap: entered promiscuous mode [ 284.361199][T13099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.372477][T13099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.401281][ T3469] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.417255][ T3469] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.440030][ T3469] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.455571][ T3469] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.502963][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.