last executing test programs: 1m0.733597542s ago: executing program 4 (id=72): unshare(0xc000400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) pread64(r0, 0x0, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x300, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000000)=ANY=[@ANYBLOB="6802000000050104000000000000000007000002540201"], 0x268}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r3 = memfd_secret(0x0) r4 = openat(r3, &(0x7f0000000000)='./file1\x00', 0x0, 0x134) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a00010028bd70010000000002148000ff0000070002000008000300", @ANYRES16=r5, @ANYRES32=r3], 0x34}}, 0xea5bc50b6199d77e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r7}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$FICLONE(r4, 0x40049409, r4) 1m0.59918674s ago: executing program 4 (id=75): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x4000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x12) fsync(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x8fe02, {0x0, 0x0, 0x0, r10, {0x0, 0xffed}, {0x2, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendto$packet(r1, &(0x7f0000000880)="f3739b108f0e2db40e087ecaeb84eb00c5fe2c11646897cd481c7c5be1871abcabb347355bdadead2adfce12c3eb7eafa3106a2af16175dc451599264dabccc47c85013e7280a1af016f78081d", 0x4d, 0x5, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r4, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0c010000160001002cbd7000fedbdf25ac1414aa000000000000000000000000fc0200000000000000000000000000004e2400004e2400060a0000a03b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0a010102000000000000000000000000000004d46c00000000000000000000000000000000000001090000000000000000000000000000250a59153cc6cce5003000000c02000000000000000000000000000001800000000000004ed2000000000000ccacffffffffffff0500000000000000030000000000000039640000000000000600000009000000060000002bbd7000073500000a0001414800000000000000040000000400000008001f00030000000c001500"/196], 0x10c}, 0x1, 0x0, 0x0, 0x2004c094}, 0x24040000) 1m0.367015203s ago: executing program 4 (id=81): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000280)=@ccm_128={{0x7767bf9c4e1b1449}, "059eedf8e815eb4d", "c4fc43efa6c3a8107ee851b55fd30fd2", "ca0a2483", "62026d4b79ccf0be"}, 0x28) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xa, &(0x7f00000001c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1000000000003}]) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000480)={r5, 0xfffffff9}, &(0x7f00000004c0)=0x8) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r1, 0x1, 0x0, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x90}, {0xc, 0x90, 0x8000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x40090) r6 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f00000003c0)={0x5, r6, 'id0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x868a}, {0x6, 0x11, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x60, 0x16, 0x200, 0x70bd2b, 0x25dfdbfc, {0xa, 0x20, 0x80, 0xfd, r7}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x63}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x1, 0x5, 0xb}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m0.177050855s ago: executing program 4 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000ac0)={0x0, 0xfffffffd, 0x100, 0xfffffffe, 0xca}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d00003c0004895900000000119078000000000000f5ff01441c153164010100000000030a01010100007640000000000000ffff00000000004e2000089078"], 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c000000020000002001000000000000000000000000000000000000000000000000000003000000000000007f000001000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000003300000004000000ffffffff0000000000000000000000000000000001"], 0x23c}}, 0x0) listen(r6, 0xa) 59.90096554s ago: executing program 4 (id=94): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000000000d00000000000000000100000d00000000cf92105131"], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0xa}, 0x28) syz_emit_ethernet(0xfe, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xc8, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x0, 0x0, 0x10}, @hopopts={0x0, 0x11, '\x00', [@ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x75, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4793ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62091716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e"}, @ra, @generic, @padn]}]}}}}}}}, 0x0) 59.631568796s ago: executing program 4 (id=96): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x8, 0x3a, '[\x02|\xea(b\'H\xeeSr\xfc\xc2\xb0\xa1', 0x3a, '', 0x3a, './file1', 0x3a, [0x4f, 0x50, 0x43]}, 0x39) 59.631321006s ago: executing program 32 (id=96): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x8, 0x3a, '[\x02|\xea(b\'H\xeeSr\xfc\xc2\xb0\xa1', 0x3a, '', 0x3a, './file1', 0x3a, [0x4f, 0x50, 0x43]}, 0x39) 56.31507437s ago: executing program 1 (id=145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000b0000000c000580080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newqdisc={0x12c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x3151, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x6, 0x7, 0x15, 0x11, 0xc, 0x6, 0x8, {0x6, 0x407c, 0x7, 0x4, 0x2b52, 0x2}}}}, @TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0x7, 0x1, 0x0, 0xf, 0xb72c, 0x4}}, {0xc, 0x2, [0xf16a, 0x6, 0x7, 0x401]}}, {{0x1c, 0x1, {0xe, 0x5, 0x0, 0x9b8, 0x2, 0x7f, 0x3ff, 0x9}}, {0x16, 0x2, [0xff, 0x8, 0x0, 0x1, 0x0, 0x9, 0x1ff, 0x4, 0x7]}}, {{0x1c, 0x1, {0xc, 0x9, 0xfffc, 0xfffffff8, 0x1, 0x8, 0x3, 0x8}}, {0x14, 0x2, [0x4, 0x0, 0x40, 0x800, 0x4d9, 0x8, 0x101, 0x7f]}}, {{0x1c, 0x1, {0xfc, 0x64, 0x0, 0x6, 0x0, 0x9, 0x5, 0x2}}, {0x8, 0x2, [0x3, 0x5]}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) 56.116386982s ago: executing program 1 (id=150): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x408, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x4400, &(0x7f0000000280)={[{@bsdgroups}, {@nodiscard}, {@nomblk_io_submit}, {@abort}, {@grpjquota}, {@debug}, {@abort}, {@norecovery}, {@noauto_da_alloc}]}, 0x1, 0x520, &(0x7f0000001180)="$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") 55.63090022s ago: executing program 1 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000000002010400000000000000000a0000003800018006d60340000300002c000180e6fd0300fe8000000000000000000000000000aa14000400ff0200000000000000000000000000013c0003800c00028005000100890000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa3c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010c00028005000100"], 0xc4}, 0x1, 0x0, 0x0, 0x2400c890}, 0x4) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="00411ffffffffffc14002b8008000100", @ANYRES32=r4, @ANYBLOB="0800030008"], 0x50}}, 0x4008000) 55.531840816s ago: executing program 1 (id=155): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'pimreg1\x00', {0x2, 0x0, @private}}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000e80)='./bus\x00', 0x0, &(0x7f0000000500), 0x21, 0x4a6, &(0x7f0000003840)="$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") setgroups(0x0, 0x0) unshare(0x22020400) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0xffffffffffffffff, &(0x7f00000002c0)=0x28) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c002000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006203300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x200009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x1, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1880eeeaf40842fe483fc23598730000000000000000000000950000f58e18b903"], &(0x7f0000000c00)='GPL\x00', 0x8}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') sendmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000540)}], 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="78000000000000000b010000060000000f8e5fc95c1cb6693980d7d81411b1476602966c94d905ae6ccf7781edc18d29e152c543ca6b3a405aac0da2b5a7cfdf3e989c5664e24dea35bb45fa84a90ab5304460ce1746bb4ebe5f40844abc76b2b2e0525b4269aeac0604f1348a658a4d7ca1d90000000000300000000000000005000000ab0000006213a849d1e5c47fb558c5274946ee090e147f2a1d3d8cde59dc6b68321a0000a0000000000000000d010000a7a90000ef621f68251e081a014e89bb58a1238f2c43e5383482d8da446a65e13b8625923f146255a4173f4eae9de1eaf9c64ebb5525f544837d45fb2453cca3992254a3732a8ca9628a64bc2149d3b38fdc89125b2f26f128144532efaf8fb47ec7043ae6da2613805c970defbe585d63e899abd9562d198d2c7d52ffb47d605b74505553c9455ffa891d437527ff000000000090000000000000000d01000006000000f73f091a544b430c82c147ba51a2e58e96ddd24bbab4a9744efa8bc86e47a83bac50a98bef3888e75d08ae244390556620f19fa67fda936b910c7738508e95e77e57ab253e4f17625c3cf7278183fd8f6d324fc9513fd634ed3762a067cd111c979629f63e3038bb32c8221ee1d05bfce8c5e88f919077a48862d1470000000098000000000000000000000038d8000028583ad214fe9c584537f7fb899f63629cf98e4e0bea8694c5fe04eef84861d8ab3fa3ec19284eb0a3b013903704519ca193ff506a22500ed2df2eb8aa9fad16b9647213d2397458ebe5fb67fe3ace472e829b895b9a5324c238c9"], 0x270}, 0x40800) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800050004050500"], 0x290}}, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 55.010459766s ago: executing program 1 (id=159): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0xd, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r2, &(0x7f0000000380)=[{0x1, 0xbbdd, 0x1000}], 0x1) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) semtimedop(0xffffffffffffffff, &(0x7f0000000f00)=[{0x1, 0x7, 0xc00}], 0x1, 0x0) semctl$GETNCNT(r2, 0x4, 0xe, &(0x7f0000000280)=""/225) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d00119078000000000000000001441c1531640101000000ff000a01010100007640000000000000ffff00000000004e20000890785c7a165bfee852c8f67109a70c7f95b80938e9c1d908ac84e35cf2c900da8c89a524219a72fdc77293c435618403483ac963e1b4804599ca7e50d995394039967569da2fa3596baadcdbb0120ac56547f6544fb9ed67fe337edb24f499b43c31039d051960f3d67bb782666a1c149e197963c503ec97116f8857b811f818b56df78b3763719b78e2c5"], 0x0) 54.309677077s ago: executing program 1 (id=169): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc40, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x1852, 0x8000, 0x0, 0x1bf, 0x0, r1}, &(0x7f0000000040), &(0x7f00000001c0)) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000080)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', &(0x7f0000000180)='^{\\/@@(-\x00', &(0x7f00000001c0)='-\xb9@\x00', &(0x7f0000000200)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\']}, &(0x7f0000000480)={[&(0x7f0000000300)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', &(0x7f0000000340)='\xf3e\t\x9f\xbb\xf0:V\ad\xb0l \xfd\xd7\x8e\x7f\x89-\xb8\xc5;~\x04\x03~K\xfbPw=\xfa\x81\f\x1e\b\x00\x0e\xcf^9\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000380)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', &(0x7f00000003c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', &(0x7f0000000400)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', &(0x7f0000000440)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\']}, 0x400) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') 54.25388912s ago: executing program 33 (id=169): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc40, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x1852, 0x8000, 0x0, 0x1bf, 0x0, r1}, &(0x7f0000000040), &(0x7f00000001c0)) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000080)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', &(0x7f0000000180)='^{\\/@@(-\x00', &(0x7f00000001c0)='-\xb9@\x00', &(0x7f0000000200)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\']}, &(0x7f0000000480)={[&(0x7f0000000300)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', &(0x7f0000000340)='\xf3e\t\x9f\xbb\xf0:V\ad\xb0l \xfd\xd7\x8e\x7f\x89-\xb8\xc5;~\x04\x03~K\xfbPw=\xfa\x81\f\x1e\b\x00\x0e\xcf^9\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000380)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', &(0x7f00000003c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', &(0x7f0000000400)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', &(0x7f0000000440)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\']}, 0x400) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') 42.219090783s ago: executing program 6 (id=325): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) syz_io_uring_setup(0x55e9, &(0x7f0000000380)={0x0, 0x103f, 0x10, 0x1003, 0x102}, &(0x7f0000000240), &(0x7f0000000340)) (async) r6 = syz_io_uring_setup(0x55e9, &(0x7f0000000380)={0x0, 0x103f, 0x10, 0x1003, 0x102}, &(0x7f0000000240), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000000c0)={0x8000, r6, 0x6, {0x6, 0x3}, 0x9}, 0x1) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gretap0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x1, 0x9b, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) 42.027481995s ago: executing program 6 (id=326): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x101, 0x2, 0x0, 0x8}, {0x81, 0xc, 0x0, 0xfffffffa}, {0x9, 0xe, 0xfa}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x29, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_UP]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4008010) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e22, 0x3, 'nq\x00', 0x15, 0x80005, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000007c0)={0x833, 0x7, 0x4, "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"}) 41.835525556s ago: executing program 6 (id=330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0xfe, [0x1, 0x8001, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x2, 0x6, "0813f3", 0x3f6f, 0xff, 0x0, @mcast1, @loopback={0xfe880000}, [], "554001294af7376b"}}}}}}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r8, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e1c, 0x6, @empty, 0x8}, 0x1c) sendmmsg$inet6(r8, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='Z', 0x1}], 0x1}}], 0x1, 0x404c484) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x7, @loopback, 0x3}, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}], 0x54) 41.747033401s ago: executing program 6 (id=331): bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx}, 0x1c) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/protocols\x00') preadv(r1, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/97, 0x61}], 0x1, 0xffffff6f, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r2, r2, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r7 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(r5, 0x1) syz_io_uring_setup(0x6f71, &(0x7f0000000200)={0x0, 0xf87f, 0x1000, 0x2, 0x32, 0x0, r2}, &(0x7f0000000280)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0xc0, &(0x7f0000000600)=0x80000001, 0x0, 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r7, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x1) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 41.497355766s ago: executing program 6 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc00000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000580012800b0001006772657461700000480002800400120006000f0004000000060010004e23000005000900f4000000080005000300000005000800040000000600030000010000060003000000000005000a"], 0xcc}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000900000000000000ef29000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001866000c0400000000000000f74436ca8f65c1954f3f4e7e3f937da594f2000018360000010000000000000000000000186700000e00000000000008000000ffbf91000000010000008500000085000000"], &(0x7f00000000c0)='GPL\x00', 0x73ef421d, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000200)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r1, r1, r1, r1], &(0x7f0000000380)=[{0x0, 0x2, 0x6}], 0x10, 0x2}, 0x94) fstat(r3, &(0x7f00000005c0)) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r4) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000640)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000680)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x28, '\x00', r5, r1, 0x4, 0x3, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x87}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) close(r1) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000080)={0x1, 0x9}) r6 = socket$inet6(0xa, 0x2, 0x0) syz_clone3(&(0x7f0000000a00)={0x91024000, &(0x7f0000000180), &(0x7f0000000840)=0x0, &(0x7f0000000880), {0xd}, &(0x7f00000008c0)=""/89, 0x59, &(0x7f0000000940)=""/116, &(0x7f00000009c0)=[0x0, 0xffffffffffffffff], 0x2, {r1}}, 0x58) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000a80)=r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000840)=ANY=[]) sendmmsg$inet6(r6, &(0x7f0000004540), 0x0, 0x20010080) 40.347619373s ago: executing program 6 (id=349): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) tkill(0x0, 0x12) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext, 0x10800, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xfc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r1, 0x402, 0x91ea6c12f182534) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 40.347157433s ago: executing program 34 (id=349): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) tkill(0x0, 0x12) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext, 0x10800, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xfc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r1, 0x402, 0x91ea6c12f182534) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 29.023195705s ago: executing program 0 (id=510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb00000000"], 0xf8}}, 0x40000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d80)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000a40)='R', 0x1}], 0x1}}], 0x1, 0x4040040) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 29.006592135s ago: executing program 0 (id=513): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80c406, &(0x7f00000005c0)=ANY=[], 0xff, 0x2bc, &(0x7f0000000180)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x100003fff8001}, 0x1820, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = getpid() prlimit64(r0, 0xc, &(0x7f0000000140)={0x8, 0x7fff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000039000900f036d67600dfffeb03"], 0x24}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) r3 = gettid() pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r4, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x7000000) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000180)=""/52, 0x34) 28.315282626s ago: executing program 0 (id=523): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb00000000"], 0xf8}}, 0x40000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d80)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000a40)='R', 0x1}], 0x1}}], 0x1, 0x4040040) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 28.24258151s ago: executing program 0 (id=526): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2b6e6574202b6465766963657320a4a48044ee2b24b8e9c2922d637075736574202d68756765746c62202d63707520"], 0x24) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000b40032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) (async) socket$kcm(0x10, 0x2, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2b6e6574202b6465766963657320a4a48044ee2b24b8e9c2922d637075736574202d68756765746c62202d63707520"], 0x24) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) (async) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000b40032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) 28.058736381s ago: executing program 0 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000580)={r4, 0x9, 0x1, "a8"}, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x7, 0x8b51, 0x4392610, 0x2, 0x6, 0x9, 0x2}}, @TCA_RED_STAB={0x104, 0x2, "0a0c00000046dac48f29d158dbe8cfb1979e12979688dc839b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f26aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a8a84f1d4d132f5bb7edcf2d23642b625b2345db6b6cec3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d100"}]}}]}, 0x148}}, 0x4000010) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x194, 0x1, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_PAYLOAD={0x68, 0xa, "53a6c29b254b2bbbbbf857fb24dc9854acb56d1cd1c45c21bafc3d6893b4c883685be98570180d5f622cda43fce6a1ee381fae68b7dfa0f32eb37284f34e12d111bc3ea7fdc2375c2cd0588f073434f79af6682f7b3ba83577d4e522cf8aa94317ad53fd"}, @NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4f}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x67}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_TCI={0x6}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x370e}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}]}, @NFQA_EXP={0xc0, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0xfffffffffffffee2, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40010}, 0x20000009) 28.009888594s ago: executing program 0 (id=531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x161241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be000c2ffffe8000000000000000000002000000aaff020000000000000000000000000001", @ANYRESOCT=r2], 0xfdef) 12.921915165s ago: executing program 35 (id=531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x161241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be000c2ffffe8000000000000000000002000000aaff020000000000000000000000000001", @ANYRESOCT=r2], 0xfdef) 3.243207311s ago: executing program 7 (id=801): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)="8bcd", 0x2}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x4008000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000380)={[{@norecovery}, {@sysvgroups}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, r2, 0x333, 0x0, 0x4}, 0x14}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r3, 0x2, 0x5003) 2.760503329s ago: executing program 7 (id=812): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x10040, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00@\x00', @ANYRES16=r1, @ANYBLOB="040027bd7000fbdbdf250300000008000400ac1414aa0800080003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x24000884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x57) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) syz_io_uring_setup(0x3921, &(0x7f0000000080)={0x0, 0x83f, 0x800, 0x6, 0x10e}, &(0x7f0000000000), &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x7f) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000540)={r8, 0x1}, 0x8) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r10, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000024c0)={0x2c, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x94) read$ptp(r9, &(0x7f0000000080)=""/27, 0x1b) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r8, 0x1}, &(0x7f0000000180)=0x8) 2.557746901s ago: executing program 7 (id=816): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") timer_create(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x80000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="26000000000000000014dfd0a4e7000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x259fdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@delchain={0x34, 0x2c, 0xf31, 0x1, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) symlink(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x6, 0xb, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8, 0xf08, 0x8}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r2, r10, 0x25, 0x12, @void}, 0x10) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x52) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 2.364251532s ago: executing program 3 (id=820): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02, 0x0, 0x0, 0x8}, 0x94) (async) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) (async, rerun: 32) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 32) epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair(0x22, 0x800, 0x100000, &(0x7f0000000080)={0x0, 0x0}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (rerun: 32) syz_usbip_server_init(0x1) (async, rerun: 64) syz_usbip_server_init(0x1) (rerun: 64) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) (async, rerun: 32) syz_usbip_server_init(0x1) (rerun: 32) syz_usbip_server_init(0x5) (async) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x0) (async, rerun: 32) syz_usbip_server_init(0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_setup(0x7045, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r6}}) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) 1.566021289s ago: executing program 3 (id=821): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) io_setup(0x9, &(0x7f0000000000)=0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) (async) r3 = eventfd(0x60000) io_submit(r1, 0x3, &(0x7f0000001300)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0xf, 0xece6, r0, &(0x7f0000000080)="eedce962", 0x4, 0x80, 0x0, 0x1, r2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0xb, r0, &(0x7f0000000240)="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", 0x1000, 0x1, 0x0, 0x3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000001280)="114f2f7b369cfe685bc2fd54098891d6757dcd5e38b1146e6bed3eba5cc26da952b69a3c4329ddb85e3f61168048d3", 0x2f, 0x10000, 0x0, 0x1, r3}]) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRESHEX=r2, @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x2000c004) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbfc, {0x2, 0x20, 0x20, 0x0, 0xfd, 0x2, 0x0, 0x0, 0x2000}, [@RTA_TABLE={0x8, 0xf, 0x7fffffff}]}, 0x24}}, 0x14) 1.510460312s ago: executing program 7 (id=825): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0xb1, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0110000000020000000000"], 0x0, 0x1a}, 0x28) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) splice(r7, 0x0, r8, 0x0, 0xfffd, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000200)=0x1, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000ffff28bd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000baff000000440012800b000100697036746e6c000034000280140002002001000000000000000000000000000014000300ff0200000000000000000000000000010500090004000000080004000101"], 0x6c}}, 0x40014) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000001b00)=0x1, 0x4) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r10, 0x4) 1.486258433s ago: executing program 3 (id=827): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x6, 0x1, 0x4}, &(0x7f0000000080)=[{}, {}, {}, {}]) rt_sigqueueinfo(r0, 0x2, &(0x7f0000000280)={0x4, 0x3}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000300)=""/185) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000003c0)=0x9) setsockopt(r1, 0x6ea, 0x5, &(0x7f0000000400)="165739a8e9c79633ec594620da61e53fedc752c49f82fb6264ac020668b7ea", 0x1f) syz_emit_ethernet(0x38, &(0x7f0000000440)={@remote, @remote, @val={@void, {0x8100, 0x6, 0x1}}, {@x25={0x805, {0x0, 0x66, 0xf3, "4b8be79d2ea3cc274f033f8c642045f5b632ac190c8a36e01782ae92bdc098033bc790"}}}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = memfd_secret(0x0) write$tun(r2, &(0x7f0000000480)={@val={0x0, 0x22f0}, @void, @ipv6=@gre_packet={0x1, 0x6, "8d4f86", 0x4f2, 0x2f, 0x0, @private1, @private0, {[@routing={0xbf, 0xe, 0x2, 0x3, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2c}, @mcast2, @private0, @remote, @local]}, @routing={0x89, 0xa, 0x2, 0xb7, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00']}, @srh={0x32, 0x4, 0x4, 0x2, 0x9, 0x10, 0x9, [@dev={0xfe, 0x80, '\x00', 0x13}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x32, 0xd, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x7, 0x100}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @generic={0x2, 0x6, "aec1785604d7"}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x30, {0x3, 0xa, 0x5, 0x3, [0x10000, 0x4, 0xb7, 0x1, 0xed]}}, @pad1, @pad1]}, @dstopts={0x4, 0xe, '\x00', [@pad1, @calipso={0x7, 0x58, {0x3, 0x14, 0x2c, 0x6, [0x95d4, 0x5, 0x8, 0xfff, 0xfffffffffffffffd, 0x0, 0x100, 0xac8, 0xff, 0x1]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x7f}, @pad1, @enc_lim, @enc_lim={0x4, 0x1, 0x1}]}, @hopopts={0x2b, 0xb, '\x00', [@ra={0x5, 0x2, 0x630c}, @calipso={0x7, 0x18, {0x3, 0x4, 0x10, 0x80, [0x4023, 0x5b]}}, @calipso={0x7, 0x38, {0x0, 0xc, 0xa6, 0x7, [0x7ff, 0x1, 0xc6a, 0x7, 0x400, 0x7cb5]}}, @enc_lim={0x4, 0x1, 0xe}]}, @hopopts={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2728}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd6, 0x2, [0x7], "d7a902f0e702f242f3e826ced2787a32864965cb55949a9f4608fbb3f93b411c78708ee1e4997cfe3700bb84554ff27315f9b7c9f3cbacfee698a1ba6ea4b8d2ec63ca59dcc40b52faced342d2016476298ebe4dc6cd21e69330c634deb9571dcb715ae859603bcd51e65c126b339c6d4adae0929e2eb4f5d3856da9f8d410760f95b8f01cee240891680aa959955dbfcd7c3a52c22d180215ae19eefab1c90b88b0cc982cd21c5a40ea8fc12ffd16123b0cbd41b9f070ad117c1414422deebc87dc5237647071a71d67544c014c9f188bb02fa77fe1"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xfffb, 0x7], "d8b505621c71a47a9c97f2f67eab025eb346d3c2b9aacd872f19db0f6c016ee84ae226c5d5c5e0e9c62ea06a57fb8cf82743ac9872e30e4f1a3e584acf3ee8282705110e43c46d4b48a2664040153e460cc4387ab41a81ec34dd37f22bf4c5c81eb961f75b758dd9bb3267aea720"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x5, 0x100], "7f24220a6910d90c4c9a45cec6e08358360fe7109f5dbfe2d3d85d27ce8dc3d3403ebbf366b0476d6dac7f40b8abd0f4959701643abfa0c155f2bc4bd6f091dd2b53776f6be8730ec3966b24bfdf6ea61239c58f5062e71c9db72c223206a4102fb3a265e4439bc49eb6fd96edf6a461cfb7b5e9d40db1c8c355281026826f2e5d335c18f796"}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0x81, 0x1, 0x1, 0x2, 0x4, 0xd}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0x32, 0x2, 0x1, 0x2, 0x3, 0x2}, 0x2, {0x0, 0xffff, 0x3, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "efce084fa97bc6ba3ffda0b2444eb113d3f362992b9325a5d9c29df71b8220060cddd9f9e00da24b66d75e841c2addeff83c328ba5fdd4c12659b920cb716fc9822b643f6ee0b7bb6a7c9ace7527972f27ea98e2caf2c6f74c89e2ff83de62f2e1bb67f9f1b5b29967c7a175a771fafc89d1"}}}}}, 0x51e) r3 = semget(0x0, 0x4, 0x404) semctl$GETZCNT(r3, 0x0, 0xf, &(0x7f00000009c0)=""/95) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) chdir(&(0x7f0000000a80)='./file0\x00') r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400001, 0x0) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000b00)=""/219) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000c00)=""/91) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl2\x00', &(0x7f0000000c80)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x1, 0x401, {{0xf, 0x4, 0x1, 0x3, 0x3c, 0x66, 0x0, 0x80, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x5, 0x1, 0x8, [{@multicast2, 0x1bee7ba9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb6}]}, @cipso={0x86, 0x11, 0x3, [{0x2, 0xb, "fc61c391e4d74d3446"}]}]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', r6, r5, 0x0, 0x5, 0x4}, 0x50) ioctl$BLKGETDISKSEQ(r2, 0x80081280, &(0x7f0000000dc0)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000e00)=0x6, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000e40)={0x0, 0x3}, &(0x7f0000000e80)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000ec0)={0x0, 0x2ff, 0xb}, &(0x7f0000000f00)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000f40)={r7, 0x0, 0x4, 0x8, 0xbc7c, 0x1, 0x8, 0x1, {r8, @in6={{0xa, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}}, 0xf4, 0x72, 0x80000000, 0x51c62dc3, 0x80000000}}, &(0x7f0000001000)=0xb0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x9c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1dc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1787ed6e20023c4a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4080) 1.439061357s ago: executing program 8 (id=828): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x161241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000002000001", @ANYRESOCT=r2], 0xfdef) 1.403165799s ago: executing program 3 (id=830): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000004000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008800}, 0x2000c450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) write(r0, &(0x7f0000000300)="2cd889f035a53e14f3d5ac", 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe89b5e6ccb54cca8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) sendmsg(r8, &(0x7f0000000640)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000004c0)="a9", 0x1}], 0x1}, 0x4000810) sendmsg$kcm(r8, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r7}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x48, 0x800, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x8000, 0x8017, 0xfca, 0x81}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffc0}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000540)='syzkaller\x00', 0x200, 0x36, &(0x7f0000000580)=""/54, 0x41100, 0x8, '\x00', r10, 0x0, r0, 0x8, &(0x7f0000000840)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x6, 0x5, 0xf}, 0x10, 0x2b5f0, r7, 0x3, 0x0, &(0x7f00000008c0)=[{0x0, 0x1, 0xf, 0x1}, {0x1, 0x2, 0x2, 0xb}, {0x2, 0x4, 0xd, 0xb}], 0x10, 0x7ff}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40) 1.398595929s ago: executing program 2 (id=831): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a0003070000000000000000de3f0005001a"], 0x38}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a0003070000000000000000de3f0005001a"], 0x38}}, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) (async) 1.339197262s ago: executing program 7 (id=832): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x64dbec00, 0x49242) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x20, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x8) (async) r2 = memfd_secret(0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={r5, 0x6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={r5, 0x9, 0x7fff}, 0x8) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x2, 0x7f, 0x35, 0x0, 0x3, 0x80, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e6d05c3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x4, 0x3, 0xffffffff, 0x0, 0x93c, 0x7, 0xf, 0x0, 0x3, 0x0, 0x9}, 0x0, 0x10, r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r5, 0x4) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0/file0/..\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x0, 0x0, 0xb}, 0x18) 1.299597465s ago: executing program 8 (id=834): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001180)={0x9, {"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", 0x1000}}, 0x33e) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f079171000700880000"}}}}}}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x3) close(r4) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/45, 0x2d, 0x2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x4005, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="1700"], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r7, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x2400, 0x7, 0xffffffff, 0x5, 0x8, 0x20005, 0x21, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0x9, 0xffffffffffffffff, 0x0) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') getdents(r12, &(0x7f0000000080)=""/7, 0x49) getdents(r12, 0xffffffffffffffff, 0x5a) splice(r2, 0x0, r4, 0x0, 0x200000000622c, 0x0) 1.276716526s ago: executing program 2 (id=835): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) recvmmsg(r1, &(0x7f0000002980)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/139, 0x8b}, {&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f00000006c0)=""/125, 0x7d}, {&(0x7f0000000740)=""/83, 0x53}, {&(0x7f00000007c0)=""/230, 0xe6}], 0x9, &(0x7f00000001c0)=""/41, 0x29}, 0x9}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/234, 0xea}, {&(0x7f0000000a80)=""/20, 0x14}, {&(0x7f0000000ac0)=""/180, 0xb4}, {&(0x7f0000000b80)=""/100, 0x64}, {&(0x7f0000000c00)=""/115, 0x73}], 0x5, &(0x7f0000000d00)=""/207, 0xcf}, 0x9}, {{&(0x7f0000000e00)=@qipcrtr, 0x80, &(0x7f0000001480)=[{&(0x7f0000000e80)=""/161, 0xa1}, {&(0x7f0000000f40)=""/228, 0xe4}, {&(0x7f0000001040)=""/229, 0xe5}, {&(0x7f0000001140)=""/10, 0xa}, {&(0x7f0000001180)=""/107, 0x6b}, {&(0x7f0000001200)=""/87, 0x57}, {&(0x7f0000001280)=""/230, 0xe6}, {&(0x7f0000001380)=""/241, 0xf1}], 0x8}, 0x5}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/89, 0x59}, {&(0x7f0000001580)=""/193, 0xc1}], 0x2, &(0x7f00000016c0)=""/218, 0xda}, 0x6}, {{&(0x7f00000017c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/81, 0x51}, {&(0x7f00000018c0)=""/107, 0x6b}], 0x2, &(0x7f0000001980)=""/4096, 0x1000}, 0x1}], 0x5, 0x40000000, 0x0) recvmsg$unix(r0, &(0x7f0000002d00)={&(0x7f0000002b40), 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002bc0)=""/120, 0x78}, {&(0x7f0000002c40)=""/65, 0x41}], 0x2}, 0x40000000) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5}, 0x50) socket(0x28, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 817.134563ms ago: executing program 5 (id=840): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001380)={0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0xfffbfffd}}, 0x2da, 0x0, 0x500, 0x0, 0x54, 0xa, 0x2}, 0x9c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000003b0007010000000000000000036c0000040000000c0001"], 0x24}}, 0x800) unshare(0x6c000200) (async) unshare(0x6c000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0xfe8e, 0x12) (async) write$cgroup_int(r4, &(0x7f0000000040)=0xfe8e, 0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x94, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x8, @private0, 0x1000}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x83ca, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7fff}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000002c0)={0xfff9, 0x0, 0x0, 0x52, 0x3d, 0x7, 0x0, 0x8, r5}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) (async) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000008c0)={@void, @void, @eth={@multicast, @random="fdb065f649d1", @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0xb, 0x4, 0x1, 0x2, 0x2c, 0x28, 0x0, 0x9, 0xff, 0x0, @private=0xa010120, @broadcast, {[@rr={0x7, 0x17, 0x11, [@remote, @dev={0xac, 0x14, 0x14, 0x14}, @local, @remote, @dev={0xac, 0x14, 0x14, 0xd}]}]}}}}}}}, 0x42) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c000000200001002abd7040f9dbdf250a80100000000001120001001400010000000000000000000000ffffe0000001080017004e244e20140002000000000000000000000000000000000044b9000529e4e40e01714ec80fcf0e0b810846beb28a46d3f5ea10d1170de090ac7cd6e726f3bf874133d2537314f682db4b66eacb91f7b733eb49a405ada4c4e1b68cc7997e93ea1b52510800b65ba7986f0b2fdc6b8c06f5711628f13e5aa646f24076a89fe2cc050e191c76c4b26e3e0ee54e27b8de765acdf8c30694892daccf15071ae4c0c402738587bf25802aca7dd89b25e577125fcc5db27ee425075d7e2f73bbb2763bd3980488327cf156b847cbf8e2a40eba1773"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 502.990541ms ago: executing program 5 (id=841): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80000000}, &(0x7f0000000340)=0x8) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc5, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x74}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 477.251182ms ago: executing program 3 (id=842): setreuid(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./cgroup.net/devices.allow\x00', 0x10, &(0x7f00000003c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption}, {@inlinecrypt}, {@norecovery}]}, 0x1, 0x58b, &(0x7f0000009ec0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) 472.654703ms ago: executing program 7 (id=843): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_settime(0xfffffffb, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0x15000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000080)=0xc, 0x6, 0x2) 373.941798ms ago: executing program 2 (id=844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x161241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000004000001", @ANYRESOCT=r2], 0xfdef) 337.591611ms ago: executing program 8 (id=845): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000840)={0x3, "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"}) (async) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x88, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000680)}, 0x1}], 0x1, 0x2, 0x0) (async) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x1018c00, &(0x7f0000004a00)=ANY=[@ANYRESOCT=r0, @ANYBLOB="a294884efde434a90aedba5483cb10732b4bbdcd08f64b651c614f7087ac620a045b90493ba3086c04bb336d573036a015cbb98672b580042f35ddcbbee42842", @ANYBLOB="0004074443", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relaxed,nodots,sys_immutable,nodots,showexec,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x212, &(0x7f00000059c0)="$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") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) (async) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000003240), 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440)={0x5, 0x2, 0x8, 0x9, 0x6}, 0x14) (async) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xa0840, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r7, 0x8008330e, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x2c, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe0000}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000814}, 0xfc5c4cad224f3ddb) sendmmsg(r0, &(0x7f0000005180)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="b5666e687f36131303ed662110919ec33fe07ef318489eca56fc5b98091974031ad98e47c2f709c519888205761dab92456b0235e996f19125931339eb944044658d899234edf9c1b1a93857f6eaf7a8f10a656219816139c705bd5abb0a52799840e0f5da35c13cdcb1cd2319a4cd636da6cc40e9de754ba0e093f3d89568aa489d16f316af0bfd64f639c9d612ea30c150bc046079ebf7a8e4991e44eafefc5cce4cc22780eafd08ada0e7e8eeb624c533dd4fa88945e4d5256d1adccc7e2aaaba33577660a70ff61f4e5d82be1e60f38d4c6c344ce1914c65f08ae2c8e88625792dd47146e7a94d9e3af5", 0xec}, {&(0x7f0000000100)="2ce7f30bded8966c8625cbd47a87eca1f3e8662dc334feb6d88f6a4362f0459f5617a7c4db04477f5d2be64b9675914ad12a1d23fb3aadc8275cb571d89d137158", 0x41}], 0x2, &(0x7f0000005580)=[{0x98, 0x10d, 0xf5fe, "83a2071ad2c32944e9411d62810b28c07c9b9da66abcd2c7aa79ea82fe2ebd312905d4db0e6760fa421d21fd4dca1af6eb8bff20a4c8c4b90681cd163b60d7fd162de49b4321d957de6a49a87b9f0aace13fad564bc2b10dfab32a13a92876264520c57afbdfa9995db67e08aa6b25da0de11a91a8f4978a601cc1f1eec80926f4dd66ba93"}, {0x60, 0x10e, 0x8, "51b7d7cf12f0d0b75ff60f89f5e8465c794ce2d9fe569c84de3f2d30ccbd84774761061945e0fef70ba26aa670308212d58a1044b3b11b02e5a9fde3405a2139430b8336b04afd96cca79be988"}, {0xe0, 0x3a, 0x53, "79cded0302b6a8021cb3d0aaf24cc691ef2a046d05053e52918546ec298fd99e0d218bfbec60c8eaec7d10726dc162c502de32dca36dc08f2ee41ad4ba7ebfbf2ecc897c21c16d9db01c1e1c79d8be5c55db263a7150e5f484334df72a6ae14d3c0bf7eac2cea542004b167a8cd4476d6b1755dde9bf05983574749b4f0d745a4652a9140b5119808ba73947dc35a7af56b771885a230365bb02bb5052e5d04858843666be5235b0f235c7452fdfcd4b34158166432186ea68abed7f1eed35ae98bfe69be01807ad35514252e94d44"}, {0xa8, 0x10a, 0x1, "242d9a30de07a4ab89539427544845b2d9b9cef995f12853c4dab0be84cbf47662fa975759f3b61a041da8a625813d176c515663149450bf04afb5eb89dc2130f02517929b9a65cbe42720ae31ed325d6f5edc59afb5a47387a9789de0492e17afb20e294550cd0964ce787cfa8568530ae8615318aaa60bc4411ac7f3eb8bc1ab57cbe5a03473cd2d783aabca89097beaceb0"}, {0xe8, 0x102, 0xeba, "0866e93db51831ae897ad6ff036e0ec6ad5b030b82ffe9117f8133d31bdf5721d51fd431d4a743c8834386608247af3c2fe9cc77b4bf537519eef0ba235f19169fd6ca259b72c6954f4cddd7d00a670936ab2f61c3d38fc4563f4dcdfbcc3e3292e6a11ff5661c86f094ee26aeb5d68fc76867c16c7a415d317a3c2319944dfc643713d1249f50ee0bd683cb4675ea670fb9eac6a3fa05ee039ece1ff16ba7f2e8f2d37df0d06d3a63d03e284a36061689a73ccf715557a3c1077843a2230ff85b955fa257c80399d72355b24e5ffc0cc012f768f3"}, {0xd8, 0x108, 0x0, "bc304bc66b9e8e496024e584d1f212a7f3dcdcfe7a2eef05a7d86b1b07e7d94c478a3720e6db34f9a8a078216555010bd83cc7fb61f385e9d87cd067babd2416c53e8ae246a0e31060fb2f6661d6c338e3e335882dd09dcecb319f75cb2bfacb36b894c42f0cd850e898317a1b0d32d19916986ae3c8f5b6ef59168edaf0ef07056bb1acbdefb722f914f0cfa7e3aaec799729450eb7bef65c223d7385debbc90f1f3e74daaeb63e7ee51adc2215f7461df801d22727f5badfeac7f37a3274a43c30d9b5e7a561"}], 0x440}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="44d16ff5073f92564918ab32249ed29a7d40ea1c1b8fc1d6f74042caf16067b6360901bc3fa6f57bd3aba07a1b0fe0661e44a9a0ae664ea7d55d17e103eb5eadf668b166335fa57cfc1f6d9984c5f3b2261039699e213eb14dc9fb63dbe2c2105e406cd75098f4515ddfae76a1c30b5ca7bc0ae503dc9fb15047b62b41820ad8dee1ded7cbf40642a873d9413d59917ec03f89564ff0e1ff08bb5f10c1ecf7d3399393e26d72ea5fc32cc9af6c28538ae37274f63f2eb9c594d89cbd52aaac3fda1ef6b0d41f6244", 0xc8}, {&(0x7f0000000740)="516a31ef0b9c261ba8646255e466e41d2e52c622067daceb07ba52fc711ca5e983e9247c07868865cb9ab7ace5b756ff762dfc869b93", 0x36}, {&(0x7f0000000780)="ddf2d6b4f1803e8fa62823aeb3cdae9025f865a9e8e5b210fd09c5f249af2d1c7a8bed9d2fa7f5e63d790adf53165330d4ef5904a419fc6d847fdd58e218c911f3b94fb0fbed07bdecc82d7975e9543c27dfb671619d54e166b23d2d5ef19a42e489f0ee1a78ae3a3f96", 0x6a}, {&(0x7f0000000800)="309394bc58fede8f12f8df242b3de245b83c8c19d7f77e08721cd6007257b21ba664215d2b774df1e5a2c30eb40d50d1355978460a1341181e5a36dae7886a9acfe3e0bf4442f5c6cc", 0x49}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="903140dc215430f30664d3cc1f157d3c04305e437dcfeba076e7dbd87060970b918cbb0acf12182c732e4d85efbf416363af26282ad3e64a6d80ddfc550dc3cdf6925ee897e02d974dc710ea3cd0f68b", 0x50}], 0x6, &(0x7f00000009c0)=[{0x80, 0xe7, 0x8, "2f6bbf718cefe06f5e1d960bb6a65f1daefc958a3d558995410d792b3aa8e2224f5610642bf4d5776d705f0fde4e965146bb5a39d42b31e590714ae4de5b7cba3500890dcf797f384cbb6d490db5d1a65fe72e5c43a09ba74d61754aedd33bb1d3d289308d13ef05915c26ee59ebf3"}, {0x30, 0x10b, 0x0, "4d1acc0c988103a8746d5f7e2788016734600a9ff89a84bc610b138236189c"}, {0x40, 0x29, 0x6, "caa319b6ff2ba70cecc7802ff846fb47788b92da102dbcfe258b1996728e28b7737c3860d24a138a5120f65a60"}, {0xd0, 0x11, 0x9, "56160ffbdbb926f226225698bb31772e01bf775cc1314ed6c0456b3b8c528a48076b4fb8dc47db7650b0d7af94331f093a3c23aa6e16b9bdbb4bee16147c69d534c2c01efb91d38f6c53cc4933a3d164acf72fe364986d062ac26f17337fb829c34f198992e1b161281191fb55af5e2a621fc634c25df8f1a5bb7e187a40232fe2928583a6d50f13e36e2ee4c2f8d56bd011ff8a0ef61beb3cee6ce40793c8fb913840d4395e9cfafc617dcccec00a8d723276cc06ced483c26bf0"}, {0x50, 0x112, 0x6, "0b70419ff54ecd9d63fe5b8bd14f9e0439aed1f1bb5171abd7eaf22d361c55ee7ff1839a58d7e3d274a03e86dde26a886e918dbfe0499700cd6e"}, {0x1010, 0x0, 0x80000001, "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"}], 0x1220}}, {{&(0x7f0000001c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x2, 0x3, {0xa, 0x4e24, 0x2, @local, 0x8}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c80)="aa836f234bceb069ea9bda710444a1195abcd5b17af66c2c42b09a", 0x1b}, {&(0x7f0000001cc0)="c6242d32de7480c2a247c2940fb073795fadba144d629d6bb268315215ca00b33f0b5b4acee57e6a7b69b06cc7e44112f55b7e98c6ac6d9a947d92098910eed8da81c02e26efbda4fcbdf93e3f1278922b536076579b7fd7f817b16bc3e8691ecbe026980165f33d9a0cc4adc9fc5dffff72218c82b8f8913f044206bba6067e193bb196e065f5a13fd199090e18573a38e02caa33564f1c8476d01e94844ab0491f180c68cacaa49768cb59434389ee6fd239122d33e9f300e8b91292122ab4370004b6d3bafe6412d59a0eef04c22616d3b62b912d7423628e4517", 0xdc}, {&(0x7f0000001dc0)="da28f2188959ed0238a550a3893a5050e1e1116a6260b7ffc11e6040992f0d910d7edd3d052beb6b37b1b81b58c516b1101089e44b2d70480f2ef5130bc7b282d82656dd9d79e5cfa39675d7488695832a768e24e4ddb096e0938cfaacc276436c741521b25b24a45f3f4ffbaa83c9341dba6c0744d4fbffd0876aebde0137e8e3633d52ea854db66a13e784957357b065af0321fad26001ed39fc89917c8a07ea7132e9ed93508c7c53abf44a6b3e980dfcfe0dd4d1ebd63640", 0xba}, {&(0x7f0000001e80)="a67117b3c60a2fcaae6c05210d3fc841ca6c6e3cde7f3b6dfae7bc4d3eef3faf2cb7e4c7754cb4a49a9cc577b3e13150135f81ce2159e8a9e898936363dd0265b209bac151bde0a2f2115d6d6a5ed6bea25e26cb07e5f03d14728374c6cd07160573b1232bf5", 0x66}], 0x4}}, {{&(0x7f0000001f40)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001fc0)="ddd73e2ba055fb30d66fb63f3e58995fabb3fead052e4e72dab57952ee9950dbcadadbe324d50e1e6f294520129408287e47497d28d51ec6bae486cfd2f664d51b118b82ff95f3bda6fb42e79fe5b854bda2174afefb8e74b147911d51a04d23b969d3443a9960740af0710a4defe050ca7c56ea685176be9dfd45efcaaf9900ea21f9e6b47d5b5a17738fbd2c33c48e8fd3f439735f791e034207268187652d43fe38beab8b29348b391d05183dd2ee245759039d09ac89", 0xb8}, {&(0x7f0000002080)="96d9375c932d047bf5e8edf619de9b09d3efc90fdd3ad235fce6117e0943f2a27e6713f9422ee1e43a7d6a42ec0f70ea20f25908df161bdc92274a5a8e6220f56507c9ef6c491147b07953ff95b518fade709f62f51cefacd83a9059bd56ec426d6bd0860e830e4143c4d07b094d02a891dc47865213702b7f6c5e255fff513ab083734b07ea9ca78a1758e3afd438c2c3d4fde2cf0ccdcaa7dbc4aba4cdb7842633cd550064ec972b55c6ad114dd79e6ebaca861dc750dfab8cc02ee39f817e95ef2a9f77315e0951962ac7b92a121267a226d43e5f2a70f49037478f78d1e09601012fc45f173ee01874966102667f591106d51c9857e5bc541fe3da9a3a3d3e00ea9dd3db5e53e3941a93b374281622846c88e91081af6f40542b8f27da9917a8c1b4e5137a0855638d8295bc09fdd148167ffe633b21ac7b47d7b029edf0268ded40c52c550b1c4153023e55d76daa09a265b4e3fdf379008db38063d771e3885838f55980cdaf3eec99137fa8aa23105ee1e37ced6c1701672fa2d455e899cff1ba09c6d93e329572d2d7822b47d66c06c95c66e1036976815ac3a9aef38d6bccb6bfa64af86afcd6f4821484f7c27ecd2d01b462999c5aa43988c6c6298c080ba650f8a23403809bdf9e0ce4a29129f8531ebe7adb3126b4f1829db0e1e55e06fbef50ebac708a84f5ed8abab97f7cb955ed6677613ddba7e948a99384d1fa5f298e856b9c2056b593eeca0b458a2ee03b68503248bc340ad830b0ba18e1d21e6d730b096764ec9bae4202b797c64b6c4f44b808b47bb4ddab86d8c3307e59ae44c3fc9bfacd38a57b62ea47f3086360db641c8658a925eddcb8228f6d47e2663692b95ef2db66f6a6921b6daa61ac973672c88e7db4c0bcf6dc062126113609a00fc56027e98244543e12be75daf2d8d0d125a36b657df00035f778914f9f5b73136eae917cbd75160fdba48d642dcdc2d3ae522333fb55944b6e57f1629205dbb00ff6a65e6dd5ad868a6f5806d38e5db9c12321a062a6fbdfef4795250474ff3dba6505f38a0964c6bb5f74b6e240d607bc1a9387353629c3a40ee0ec4dd1babad9fda3b70389b8361f47023e9c807df0df651628e18498326f49a035b5ce586cc65983dee7fcc30242c321ba07a65ccd9e7bfef89b332a2614e24e99c77a30af5bf7e8ccf04b3faeed581d42852ecadc1be2584fec1b80159d2785f3f30134b7c3706aecc3b9a150e139b2f2b46a50461469ce322f9286ce6db5855222617d4aecd0e3e1414352b2e603f36e28b607034be70ca3305af57d2c02e503c7329dfd2630bfadb87f2f560c65229af1051057106128910971f67ae64d8715bd65c21b537c026120946914f3187a01c074e8589d7b0ea8c59c7782db730928f78e982493ff55b712357d7e0a371e012bced1661ebecf7c74e4cd0d74aeeddf8298007d52b5858f5e2ab83d489bd15fb97ad26f1d729afd5c3c117ffd49d40a4942d17593136897c4c022a51712dbca2d08ec16e7a28baa93d87e60b324a880c10296adb94beb887c9121b5e0cd62ca531d679726bd34c373d993e841712917a1afbd5048b702ae04800a4a20e3b2b4d42e6a84e90b2c9ef69cea510bf91a851021dd5b507bcdbbceddd58886057bd0bf72a53652a14b98beedc92a7617824c1d6c7a049f46b44549acbddfc41f0b4963a397ba847ed9e59b943752e67aac04012898c9b6033c8f88b00311e891ae34adf3d78baad130c21e16716f35192ab00b6084aeb8c56591ec19da8941504dfb00c85fbdc7ff64d3a8136a75f69c86bd5c9fe23f14af3a8cf18bf3a9b102131aad446baed075e880e5f37527943afd6464952be165c3d108d20ac39cee564fa898a7fb9298b5b4cb3ec09f12edac38e03e2c46a77cec9615b4f79f39c028da8bc1980a52c84cd320bfa555c5c4c0b9b09b0ed74195c974374d2c10b23044b0c6981ea09cb55ee0e3339db37994c11867822c9b30de6de9139aba9f2d142cb4222c6def7cd74e7469eff903e96bd49e434bf021012d3a6d3ce4fd9bb7829459077ae74895e6f896a160c9c15b074a13fe4a975a5a2aee6a9d9e3ce5188b996c606f516eac3284366c210e7f71c66de4d1952a3ec45b8eb2710571c95873288852661364d095c56995ebe197078c2653152e9dc585ee87ac1c52d76976da183677c36df6f3a13d4144fde805daf63917d0807060bf2bd2d709154f07683f0e3cbed94dedc95d736b96a4498c9e0ff87e463631cb8f91ee6cc601bb3eaa490cad64ae109264654c680afa810414e8ae085d24c1155d074edc324a77e39d619620722b6e7df4b42fc6d0745eab0efb044ef908699434af1ef6a5a45543ca8c6f8b45706f4382d36a177cec191a5351bcad7525c21aa8c7c2d7f1fb10aee4b6cd9ef160b38748be61fee11577e5dc29acacfbb73837914ce9a69a226a13e23eb9ffe72cb41c4365568c6139888df012a61e7c814dadbe28003f0449f6970576423ea4433b609065a726705ecf9b406ff575a6bee01704174a0ab241a9c05c27986fb7b9c6574904c86c47b1892a50f1861d37a05b36acf6deccc9f401f9ed6ca56ec4c458fb0b905b94f62086be3d826abe471e5efba58ec20558b07fd3cdef5df37e0e95ee938ef5c115da6b313446cfca0a039150a714a0d85a95ee2bb616fbc9b5a28f70e5d3f0cec225c09e77d85ffa84085650e2b8853799da37fb9a644bace7a004fb2de964ea346544683177c44fc972b616c06f6980cc748b52db7b2c486e0d3015e2f59ae3969650d672a5707e3aff38f41c1233994b0d262a1621d972441a57d4edef2dcdd938d5e4a8a356218214c7e5fbb14f69271bd9b5a21dc6c84bea71c9840d9c692efd4de002d915868994653c8dcad3e30a6df9861ed4c9fdef8d0776fefcadec6b7b0304c7a73a96ba4f132181376e650a8496a2b5e95de68c890e0769302d4aedd87372c05a507603ee021c569943cc9a67e9de32660bbc255a832f906bf858f139488760f34372221bd41bdc1a3a1213ec44e20b4d7d478d77f984f1e556e4d6439bc821f02dcc4925034f9bb7aaf9e4112d28de86141dd4d1f51fad56241cdce367d60a92e292e3186c938d1b562aebf0a3eeb23d2528feda051b7c0cd8747a4e789f3b8983896c30238d1c30d1cc2e0d7aee3708c5e3a9a87d2da94cd9030da9b934261a6fd27badaf8b840be6d2712f7ba071172e9c91f1574ab965c9cc5540362c075fcb3bee0e041a9046e48d643fac3196d07807e73c1caefbefc9b4f98253d6afca80c5b427c598c3e7a3470ed68fe54281a621c36e6c5787d8c4d09f931187b45c08da68d937cd2f6a703194e46f79e90398f4b93e4f9382fec0b32b69032a4e27dbb17b06728846db75aa9a9afaa5aef863fb2be8731d1fa48682c39d1794d3926bb5e7e8aea57bcfb11fd8d73d8835c65ef291a1200ee0f64ca1196ad06bab48455c3c32cd9bae6f5c7ccd5cb734c6678660a17907ff2183dd6b055621d73581072f2c902aad2f1ce5330a68792fb53652382cfca008600cff93f2eeacf2c696034aebfff860e62e8472de45a4539871c757737fa9dc75e8f51a37b598ad183567f70e470817ba23e59540e19311a733a73a491e23e70f2a2a7a24b5151ed7074eb2071f3139c02e8814c220ad6af7893dc5e00cfcb288f0b47d80e4bb378899a229358b546708d641ebeb7849b4a57a2553c4d9a3bbdaccd39f2fe1c47153fe8922891f7bdc5e55e2cb2124f021ff1724cb3f837c7085f3c7e1259d9fc24ce88e1d4a3f0af5558e0a91075a40cc7d3178f73ff6ef17d6a81a9ff84c4afde3853c62e194bd77a823c3e609034902d1b7056ab7bf615e06a6c74db615e317280adaa97c7594e41a5c95f15849392d25b3c994a725141b928500bb76a5319a1fe3039c5d2f4b3cc00b05e4a51f178a78dbb3d71ce01fa6b70a4a6156451cafe67b03aa70e01336f7cb13e00bdaa44aea3d5e66d213638424929760e3b980ce9b2abd136a6cab3f18e1f758889fa34c279ceaf75a844dda85993296be7b54d385675bb8728f9781be6fc226adfc852c4eb635331a8dd50dcdd1a3972c21a4511370b61361c9f33302be5a38dedb135b42cb05705ea5cd76cb2709db4e75fba0eb7fddd9f2041b4057283bd6b8b483e143f30a528cb79691cd195eaa2418e2f429850be1d176c31f8146daae8367c533017b7af6a130273f7568d6ee500c2d972aac6880712948a7397c5062e7b0ba91108b050691ef93b488a1df588e6fdd0cbf9068b17c55cb8feb43a5d993b32d66617ed6943d7d3d2b320dac1e4e758bc2d2bd38ef0ae97cce16138717bd0d7ae2176cdba42377e035bad53718372cb2daccf16d8bf6fcc092a109c5a1c85ce83605ee63ea0f0a750c4c1875e94635916ae32be7d6f753e433090a0c11dc63cfed444cbfcf371c6b0d69b389f9db45a99d62b6ae447b23a58f31b367e378c0334c85bbaa003285b1035e2c397feef3faeb62907d0c9090de8da5543bccfbfbdff2292844bde5efb7a4300ca5bbbb73eb0c7be51c40dde01e9f670e0549226ecd876f4ed9cfbb74319dec55e5099048d918328b9d04151c0d86955734f813402e2caf4f77a803ee99cd9b015e76ff8673077a9fa950459be4e9429332e6b2cf3c5a3d3888a7a76c6da23806e29d25ddb110eb9de0b729fbf5e64ff6f3b62198775c7ad727efaf6b478274dd603d2da025a2ecf115581ab85cfa914fc690627059d78d958614b10a185318a2c43c46f9f7081a098ac0195b46361751fc1a095dbf0946960203b716f99b3d536b6256f812b66948f72faf4b5363d87d9494d3808f93dbc11c8057dea8c922c8134b9df98ecf7742ce156dddc4c9e45584c21e924022874d88d891dd6b6427d8eaf94850ce645985e1b74c7d707513f23253b740a03ac2b11937ceb3eeec710aa6326bc7bfe0f825623b99afa8335c468ec4e5a4a31be337fcfca9e393d8ad9f33826d0ee11aac8c286aac1f2ef1f5d6d7162a8368b6fa85f13507dc2db203a03d57ff94c366e04919591d6b8cefe912b56605eb11b28c669481e8513b6a4e25e544c24f2fa109e2589918f71381ffc54047eee731352ef2f7a747ad6ce59b71a755ff3f7d1967f54702697d9a0396be7b58ef745f5887f09dc73e57867943c4704b8f942091c67e860cec33e40faec56b2970d0db292345ed1ba78f800d391096ccc1865a5c85494c127d187149d2e86adba8852f94bdda2dde20e2e910e2593ecbf7affc234d6e247f2b7510746f34e9c65c173e13b1185519d4b88ada299deb0e9861de02f071f5955a73421fa0d8ee1ef29f13449ba32694c04ab2066096c67cb7df8f06ab61448c8d8871392de86b2f7d4d010b43f1490e5964c45efd9b929289168fe39c17c5ce16267b94c008ea60c5cc1c33b5b919d5ce4e097944cf1c45aede04433e2a6aaa9ef6d7d0c2831ef885f07bdff0808a5b87b2c4ae825d3b3fce61efacd4d7423d432c96ae78ce5859243c9abb51f09def6fd71fd30a795ca136a1854bf667a8c7c3343dd670377a92e307f09a69ee6d367834b659ed0e0298c99573c71b399d07d3038a125cffa0f83c1b5de7f10b5dfe1d956b8aeb9724b1d59f8e4a9d489b463967190162de734728b7b843ba4f72db9525104ec8db9740bf6fcea75ca9480564271b6357be32bf8e28f4b9c40df24d74023c65e8b3248b18806e8a876ab893728513975be559e40ef80117533439d56af8ed991117e2b37f4cb25a9024a996", 0x1000}, {&(0x7f0000003080)="d75030ef4ad329505294b54e94820412ed9f673a562785ad145917f4b284768266c0d39301ea51f9e87b3a27148d31cf846ff6058b07660a286b19eb377bb6a4ba855a7366c23618ea31c60c491970de994fb52557eee8a27a046a49ba5afcc608e5bfe0618d475411b28ae99118fe9e8cfc557b3de113a8f97dc187862d8bb5b51e2d56f180fbcba1ba13e1e5b440e8268303559f38ba34c5dd390ec77bb899024967ef142534f8153a3b10da9ec0e05cc5d32903db49487fc1415c5e0e7a35bf13330407119a99f1ec49c4f094e4345573ed8af345e9847a", 0xd9}, {&(0x7f0000003180)="6f65e54b0f4d538fcc1147152c65b448d8765c95f6f099b051930b1c4e8677", 0x1f}], 0x4, &(0x7f0000005340)=[{0x70, 0x1, 0x3, "6373e63d7d4e16a403743c3e87abb12c41c3894ba907c524b3c68e852df53bc949b87facb5fc377ce2fc86504be07a58a549bfc6b49dfe6afc6dda2583d908714d19b527449c3f14a25617edfd7d511ab401f795226f94059fa23a16eb240a1b"}, {0x50, 0x111, 0xe7db, "918b923b1d358787efce610f1a4d002d5df2997a081d0f39f23938125a6d24536fa7a078fc5024124bee61f4db5d7adcd27585b57a287d9e9a8ba37ca50925b5"}, {0xa8, 0x114, 0x1000, "40650d0acce3b26d2f77d492c4d322ce16ccce9d8462b42a895097f31ff7915413e6c70fa3d07685600f3c05d17037a67104656ca091b27501fb81408f5ef8d464e1d9084b4fd69ef853498b5bca3438653a9daf9965bc0cbceba1a46a79fcc1a7fbccb0a06bf04eb6d6bfab442a0d66ea1a9dae64c550b471121f3a10ced7c7566a5f43e291acd9839531ad8b987c13508ea5"}, {0xa8, 0x113, 0x1, "1665d24562c026cea3ae6a508b17278282a506dd903d70d21f756f29cfc48e8cca35de6b02f0e0a5397a06cc6331c2b956733e5714a6546638865eb3653f98c5ddadbf9286c1305b6b5ad96684466995f1e53e1719334c637e4d79f0ff35837964a370625c06966d0abc327a66741ad1ad6792a60eb53ef4978badd1d4ccd994934a9280edab01d9fc3387a5d68ba2f6aa1d80"}], 0x210}}, {{&(0x7f0000003400)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x80, &(0x7f0000003700)=[{&(0x7f0000004800)="05d7dc457b94aab31e814368aeaf936354bfe51668493614288af49ed4b99f96862a9964b6cced85db994221ec23cbfe67bd2250ca1117fb5761c3c01bdd683d6d4b38488b5206d0ac8086d9bfede94c9a41b6341a6e026e263ca5f7537760f6b62be5c3912b05fc4a895bcf06bf71285129ad5edf9cbd", 0x77}, {&(0x7f0000003500)="19e96576f28f5a6330eed6e8af409ac9b3798ba110cd0d71530f6738b6f992dc4c3548338c0a8678391bd8f41bdeccfb0a6fc7bb2eb6e36a38dfc4c69317cfc12452e1187c987f5cd8869f13daaadcd8da7f04d67f833e8275205bd0fca7b6fe9b9087792d0458567fd6819731173ee7ef6f7b7268eb4628f89cf84fafeefb09a00e77acf30eaba4134d41689105f09799808c4dbd495bbd71099e1818308151c63d3957f2258ff0f7c91e28", 0xac}, {&(0x7f00000035c0)="258041505fa8bc3cd5195333aff058ea75d8727f63300b7289050338408fd0ea2696e2e9f4340b0bcf9afcb5dc5768a09f7e6a1400d013aae487aba0ce11ab2b0e152ffae9655b22cc7776062c007e8a18d9c8db245251af49b936cf1077d6743c764e22cbb18f3ef4c9edfb93d351e40543af3a329ddd7daedd445e1e0f75a4d706599c324d2ab8ea3e8ad049073b18dccae2371d258df9c5fce4b9475cc4c45b59a06631a722690abfdbf8625f8db951ee3f524a3940aa0d26248bac5c13cf398040976509", 0xc6}, {&(0x7f00000036c0)="76f445aa66f5a6cab2244ee67558cb80a3ff685b8171a8527dde668c524875e42a7200a7a82acace4558", 0x2a}], 0x4, &(0x7f0000003740)=[{0x48, 0x11, 0xb9, "0554538a3e880e3d71ba1e5d5c8b2bc8f1a4ad663f2946924ccd9a230a2a97dc6a188ee1772c255065772ef7333032a088330efc82d5"}, {0x10, 0x129, 0x7}, {0x1010, 0x10c, 0x100, "8244648b089ac0ab04fd93d98b0f730014ca4dcb67d899345754b65f38fcc7877f1bf4cc4053d8bdc5309987cdde93b2c84b46cd444c1a9c2a7eba93e979107c7b6a90cc9390b6e8e38a53afc422f859f7140847313c70de44bf1758c101859af996c3a7a2fa576dcb7ae1621747b1fd1c8d5d41a5eff01b6ec974236f8fe3ae464ee8618932f1b13a7adf7d9c59c2046067c5fc735133cca45ef7e324d2a54e6aca86db518402a54e492f93954d7019e7731c6ccb15806103be7e8257e29507e4bf08eb359c437a9b43630c98ad6821e38b9b7c891e14caa654170c9d8c1c407292ce0933e8cbc9b32cd6f158583f477d94cfdcf1cdae07ba1e50f1e444de8db76c5e3345bdc1200b332e774cac650fdbb6f354e3f20f981d8461c4e5fd9978034c0bdc9b51ff30174149eb6b43cc628434f74b35e0f35627da31699b77c21a5d681a57786f5b30cb24681fee0c4587f28196904b1da990b0beaea600746cb28fc7257f1da579e72c668ac8e800f54f87f52a97f987ff9a1c06ad7e3f95f58f417bac6db64ac6f7750bfbc24e287a22381697ef9ca10fbc937197050b951ebee81aaf21c038ac8c6d0b8f9e058ddd6529632de5690bd6f1e4a09369d3405a963e721f78809a4e00a29a2388edcc0d0bfb2a6a6fe1db67f69ee92ad964642d0b204ce61dee317192a90ce06a54137046b373397733feb61022c73fe5dffc1f5793edb72e5eb73fe50d0f71da2f6d531cfe728abc8fd1e98a11afe194b676f3f75ba950165f0e8aec033513433c1223e9de7b7a0310cb849fb94a50466e41b7c21849f543a7765dd84f2699e55730651050b89c11f418393d009ab5d8aee493c7cb560d9e2b0bc8ae8e44983ab57374807ddd928c58b7d9d13ce3c6c3c5b087746a7bc26aead144c5cab68d7a5dd347beda8848f0b9d1e6f0752f9ee53b5ea4f68cc8e32a80538af346e7205c2703ef16d2f161e05e3116f14c846350a08b27d7fbec0bd0e0c078a16bc502abb0853d77249bb3c56770b5bdc917be9318d07a535ae48bf3a1d38ca1707e67c63226688e72e6485a6e21fd15f0a1ef053cfa61db11394e8afb36a3045a525ad5324f1607caaf598244de1942a38b91c9bdc57537dc075ebf58d34b84ce75bb79411f98d682f726da3574d930401a42b0cf5853967bad84aeebdc9538cc8f3ca89ead893556e825e610567d17f69f177e2a36be1d7caeebe2cfb63844712e11028414f36f7ebfaaf1913aa4e632ef097e384eec78cc89ba2dde57e7f01285ce320791120ba962c6f74add276c9ffb1f28f220eea427f4e0c1601402b215dd4f8df180e5977822592e4829e33bb2f48d20d194b67eddf8717e85d7184358d74d4c5096daafcc26830457df5b95a719444240a6147ff3d0086a0f2d682bc9c5d90cbc93f2b36af1d32895b18f20120883725c51e551a9210808921aae6b208040f5921a5f8b3e3e1fb896d22787a4edbc2e158de65479e927d91d92dfbcddc7147f96cad070624676409bc0c9ea6ef84e1fde6f2ab8226914140ba606823d208497c4409f0609b424b8aca1edb8ff0c741ba5be051c220e16849e503b8a27687a47ec7d53bc90066a7bb3b8404af352c3c878780b4f18cfd50aff1b27a81b463245905b38cbf3478ccaf963f7a03b63cc3c73bf542b549ea66e6da7b5779239e1775958303e5dc406d4d99a52024ccbb6fe718548b1ed85c1853a11d772804a2e42944514335b6f84c9355fa855261e9a12fcd80b452b8f906ed59ca4254b3594a1168764ef083cc1c23cf61ede5b67ab146a61897f7c4d1c537b20a4d6083265ab764b67b8430a026739a90cfaef84d0e080baf15b77490eff780e73934da7996cb353050bf02daf8e4ad350a9d39c5b2c4f111d2b54ee3a181328613a69d5be814646fe9d9f6bc4823609bcf6232c25c191251cb040583f20ee4fa6470b59e2a66bbbc5cfcb7b915a62b793df16b932380c61b52fc3efc6c34eff3c0fbfafcc05e7104e8e463ea90b7ed84b67c35ef6029ee4f1b37878f578a78e9bc32f780c6aeafcf4ab137a85b7c5ebbfac17a9b70bad1776aded49a7d58a12dec4315ece3a1265f4c770987653bfdff70a6289c8679181bee1bd159d63201d50bbdaf550a1a30fe4b4a7f286da4cfd0844216a5d87c1042c8ce4e8fd22d73ea833bcaaf59c9550f801a2d67c657c5f5b56cb9553363f2dc944b0b489883e52ec64d13dd021765a6abe81fb4d66ded4a31bac92ead912c8d3f8dbf898bebbb2fe196fada817bf42c4871d2816d0c9a3497443ec481bd22c98a7bfa873569de574dd766322b8dbf0b05aee5f10d5f215d74b35c788f73452103fb9f255afed427371a62a38c802ddd11776392f628318eaab080dceaa7511c971f85b53b4b2845b888848f5bb433deafb689d30a21994469ad0a393b129f01816b929fe23070075e71592f0a48801d406b358c45a8dcb5cd216f52647b31eb40c9646a2766ee788135095cf59c2c94db12849e096c618bd8c1ea632c460f83a38534e61f48201749a7d02e1b6dff2428950eabdd7bc2a41f5ff72a86721de02e587635bb67654d1dba1f9d8e87c536125b3357dbfe7e7a813836c4fcdf982a0964d116a230283f9ee504034006077b7dc359dbbd4b5da905a811ac2137848c141d53a7b92f06e7951a7a897bf663ae4dbb2c10fadffaadf64614744a273cc4c28a4fd5e89e466a925f2ce333b4b395d006d68819f823deb470d015688da20082605b051438be5535381c78e15f174ae69dcbcdd89bd6e7b7fb5ae0986e05fed2a53a8bd1ef2c0dc51f4b24aff6defc0e3924b8461db9bdf8ca047cafd053d3197f67a1b135acadb1c81e3fb0e5801acfb4b3f51204eba4e4b7147976d3db47dc5291ec1872461dced042b111dc155a34db3d90526df42ae8c44350e8fcd559f30d3f7c048ea9bee7253cdadbbcc16a6727dfdb61b966d5e33656960696a3a341e3a51989edc37a28208d40ef3dcdd374888d3ecb6210ac81b59aec8f6048d049cc432bf92135e0e4c0476b65864704a6417519ff8f14bc544e6fbdfd7ec307e958f3b494d00ec0eb1a13269bbfdde8bcd24f1633d5d878256b8dda846041f3239f905273c5180575af5b51916ca9ea8254e1c801be6d45a963fc9e26141891b6e1150127b6e324bf2e3d867e57791b9dc8a637eaf34ca0b12187caa7f517d2e79d6e7fa71a34e0c86b6d810ccdad755a7d125dd9f2b4476e329508d701f2173a5569ef304a5aa42d7936602dbab28afe5635ac1db1c6bfbac9197dc3b0dd96b5d77b2fc0d265529c31e34d99791a15c538897524d14476d05687a1460d981223cb9207425021e80afc935c32333b7ec5d671be75fb69ac3c1293b986feb17168a96eac86fb896a5451e3b64a7e847175486820a7bbd54530dbeadded8376656d1c77208154dc327673ebfe45c2b4d5532ca0cfa3035a8ff921df1ff633d9d74d8de8e1566c15676d297ecdd08bebcfb67d6b5dadc17e1dbd874b7c9915f8cdf7e5fcaae708a6025013fd789499b2664cd2f21fd12254e97ad39277adab2c3ba5ddae8ec6215def0fee14cb8f6b9af7e9be257867daf8f9619870d61eaede2fd5b58236968857f98f7aab8667fe4ce8b50613428b172202af8859dede33a9953028e2079b39bf9bdef5edb97492acdbdfda8fc14d7a806e2c90be831ded5c23953cea4abad18ef63efe863886c62867c6d7b0a40c3df516af1f660a300d7b07d167c29a30cc09287c7ec3b5859c48e64ca639b10a8b16622e97a2ccb32fd8877ea4c46caf417abc7a7da6b69aaeeddd9d3cf7e8e9f83abf78dd19f294e965f6b908363abd768d72b08662ce4dc4174e5fcaccb4536718972cf805fe2e296c258c09a9548ed3a252ddf4f2b0f2d02a9f1f6cfffc39fbc50a50cfc1faf75791abbf309786ffeff340039dfa3e378b83d91de4f3e254aea9734a8db8993bc15ebe878a10a94d8fe06e98bcfa1232c8996084c78d83f503cdf15d7c18c1aa708003c9da074b096e4be120dd0ec826474f475dd650ccfae7ea70cd66c095be9c7584793e5a36eb826b58c98a21bb50cb52a690b78ab43d7f28ed28c4076d4a88ed52bd30c6f0ee66d2228fd58f93c4e288696e0703d05c077bc3f185fc97666332fecdc7d60a937feda2a401d53c45cd35adb00829f94de3b85b02f21efcb422b111992f343a490bd035bc0c294c35c0682bdd3ac6bc261712b995543ff9bd0f358ff7ce6743afecc16ce900be506cb29ad17df42a51105428e32eb8d2d034694587bb969d8141163e4b7e4cbe07bdac2cf4c850003a9a4a7fec61d2adf0621162c15706d65a4e6a1606acb94b89251781153be2d7ce7abb9d9df5e43993382b8681468172649c9b161e055af4ad5b5ce6dce6cbe9e87d5e57b6c4c354bc734282f5250c5526ee58c6ea5ed2224ff149845f42aea6b201d47bdce14a60306a3efb386c22fe213c8568a867d45a6f5b87619268d0734218106971bae9a45dc76e77b892400e9f1a0ba35ac9df4f712a133f12d94d89138523de0a435294f31991f0dadaaa42d4dadcd9f749992a95b2dc9a87f949d340783e128f5512066949a0c839939fc4f7782f4f9f385919c595f5f58226318f71ceb65efff48bdd6170453a19764260d9a28b009350d57f6d7f2236d2c4b37f77797bd5a718883f42f123a2e60d0e8abdb127bd2072d4a0fbb4895fb29c23bb39c156f1330eb2a779a2813d0d1ee54756a21d0e7b82e8952c6352caa5fe468dbc6061a566ddd745ec04fcf8961d7e52d9d8609e5b44cef18c48072b90da28eeb9c587dc0178077b5e014ff80bd96357f431e2430499eb5c92f8f39f8fffe9a6e324fa86c62480a5f4efeb9b3b7c701b7cb064019a5eb9b1daa516b5d59ef30d0977047c60b18a64fe0d9f97b84123846495e07ca784751de5ce7c489182655e7043f3ba02bb4106651ea03f57b8b04ab1a74a50a254e4a5db5bd21a26409770110ef3e3311534e07028d8f4b35a0c3c12e1ac68f301d9c8132eb5e2fa21903baebd6ae613957fc223903033dff208fdc88359b181a341c47513594f7010c3baa0d4d3d14284a2ce5dfafa09578103675b1692b3ea33bd13043c4d52bb01493657bacb003d3465b8d995b8ea863c9bc7cec29ead13a39bdef38831e1c0f61db8fd14485d003df2bf639daad88297b0733d23db9e88bac3809075925533feb121c2afdf7038f8c37e94ce8f84e601725e438e3b188c11192e0151c6b88207566898db081ac65da376252d380bdad1f419fb623deedb42d3ca663791feea66f7e5964901cd6de1e4a57814b9a4a4b470868b05ac9c21e715b061fc804298283bf252d210cc1b8c09327d39d39abc765f369a2ca24ead1054a61a9367ebde00d31fc136cfb6bc5596ccd1a52f90bd946465167b97523fbcb00585002ac82d19c54965f6a5d91693b9bb1e15db92d31fe5cb22d0146319ab9e686453f07c3f89008536116582a866012e93497666d8fd6212d8e2cb6e5102a3c337fbdc8baf49ac13314a9835c59be2ded0272b17eedf80db7a14d178cfd4deee73ecfd6d74a652ea3484251ead4b523d3321a2af74193617c3efbe4b03118dffe1e79925832c9f2ebeb523a1e663670532fe5a6cc5f05a3030f979636f854f3fbe3c48c8e5f3c0adef834e4f56d2be31cba63f9dd84dbeec27788c1657494e87ae6bb439a49e6b63bb859c62c0a28d1a904d97cbbf1843b8a2b6d3ab1ac54dd3e783ffa929af7368bd9ea902f0278552a3ba2b102d018"}, {0x28, 0x111, 0x2851, "322f2e4a90a35aa1d70c32524253f7280ed6"}, {0x18, 0x101, 0x10001, "001d37"}], 0x10a8}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003480)="440e9dea9c48eb7f9bf8ff5ba19f79f850ddb8ebc8560a0cc172a22953b308edfc241f8b03b56cdcbfc0e2c034c55316d021b53babe040cf525c3fb9c3561756b9693e489ee99cfec5933292d703e5912e2900e01756053de0af63fd0c0c35c222d6bf2ee7d8f71aa7f32c474a4660aa9d9344f6f7bd835928", 0x79}, {&(0x7f0000004880)="ecf3240ececde04fae452cbeedd2e2e66e2b44c692f8519fc9da568e8c2ad174dd240214028dae5b401148e6e76b833d1e53c6d0834a6bcb7782ba8d43a11eed6e60865c747cf2e7f9456fb486281bbab44b68e27e", 0x55}], 0x2}}, {{0x0, 0x0, &(0x7f0000004cc0), 0x0, &(0x7f0000004d00)=[{0x20, 0x115, 0x8c, "734f54bcd0a6ef6c0d02d42e52"}, {0xd0, 0x1, 0x28, "45dd2e2715660d317092caa32cbe608f77798a87a0bbc260d16bba683e3c8c41ee4061b372fde2950dc34ed508212a1166ba1260d538d24560d40475a9e0e5c7f751ab7c93f376873c19b45c68c3de9ae967d698ecbb4449e9e079a54a82b7942955713a1046bf6b40f1dde99f3bc707fc0815d7ad451188527ae36334dc43e45139edd5b25fb73097e94285c3aae514a48a3f8bea1ac21087111f36d2e3c1d521975db676de29be91e7c39efc11dbba099c6f53806fb00dbf"}, {0x60, 0x6, 0x1, "5c03e0761810d908663099ad6bb4d2ef7987d5f016e1896b4bd313a7e7083d6ff302ddaf0ff3818469da19513e83d63d6bb0ccfa8aacd323fce68033a0ccbe6dd0e3310b5de1f067e1e63959a79fc4"}, {0x98, 0x10c, 0x42, "a2d48fd597eabf0c30bdc4e61cc0ab18a7bd20cd98cac468632f2e4b0b52c4dcdad1b449a082eefd87b565c7c943b82604faa09822bfc5305a121a6087e39637670836e7be9d9678c8e47c5b7b4a1770ae1e1a7ee4dae846f87424a4f650cf9d06685e6d0fff085e30e36709bada41e64a5d8b86721dfd98cec0f0f37a1cc6708592fb"}, {0xb0, 0x108, 0x9, "2ea191d6bbc3c85fb588182d7c9fa53d1f41195c5f2903105ed9efa86383a7bff51db3f518e21f3b722159bf783dabab9d30dd92b73b51ee238eb823566babd5a44c5138c97057be3c14de8bab5e6536624a2d67c54e75f15f4dbe511d78ecc6466d27a5563681fe00af223ccb3621dd9bf16306005f9ae85a6c87609d148865b744147bc314dadfcb6ae5bd183a01342ac9b3d68abf874aa53e14bd1fff"}, {0x40, 0x112, 0x0, "518f5f252d96d6fcfd033322b5fe2ff175c325b6471fe7720db0f290d7a381fd68e4834dba97088b06b110d1"}, {0xd8, 0x1, 0x6, "34a6e1446933345811e99fa13937f6d91f79e9a439b2821d58b758b6b0d85c2be73dc008949990c595ae55c3cae648f6d40f1e20c8090b653fe104273e227236d64921e62c698bc7b88402d96eece2ee947ef3a3b94202fe015591b2d567d243266bb03316c9438d3d8e977a6ee9967fe635e7faa6c64f4a5b76121c54c9d619cfe4a16c0cc6d185188036a72f09606085de02e1263b4da43f870e359fcebbd24f13702f5c9d42277fd339caecfc840183cde2a81af4b099be6a0e441af15a61fcf2fa72399e69f3"}, {0x98, 0x119, 0x1, "6f9b38af70508d0f7c1055a5a2f755f776ab6e2039bc1f7b196b14e240c727c2628d2e26a969697b432033c3d1de6957412fd3243993558089fd3c070c6168b695decc1e98fc2255a1c5a634d88efbdf3f1aff4ccde3a53b4d901eb80f43e985d439d07915eb41dfc5c671e901c7dbaef764193d2eaf5c8fb1a12da680df46d65180"}], 0x448}}], 0x7, 0x4814) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000003340)={'wpan3\x00'}) (async) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x140000) 287.127483ms ago: executing program 5 (id=846): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) close(0xffffffffffffffff) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000200)={[{@errors_remount}, {@nolazytime}]}, 0x1, 0x46b, &(0x7f0000000600)="$eJzs3M+PE1UcAPDvtF1Wfm5F/AGiomgk/thlF1QOXjQx8aCJiR7wuC4LQQprYE2EbNzFELyYKAl3Y+LFxL/AEyeinky84t2QEMMF9FQzdFq63XYpbWlZ+vkkw87bvvZ9vzPzOm/eMBvA0NqV/pNEbIqIKxExFhG5+grrK0ta7+b1hZl/ry/MJFEuf/hPkr4tblxfmKlWTbKfGyuFQvpBuXNJFJu0e+r0mWPTpdLsyaw8MX/8s4lTp8+8evT49JHZI7Mnpg4c2L9v8o3Xp17rSZ5pTDd2fDm3c/u7H194f+bghU9++7kSb7l88fLeZXn0xkhELNS2SaMXetvYwG2uW08KAwyEuzIaEYXsaL0SY5E/t6X22li889VAgwPuqXK5XJ5q/fJSGXiAJTHoCIDBqJ7o0+vf6tKnocd94dpblQugNO+b2VJ5pRBnszojDde3vbQrIg4u/fd9ukTDfAoAwL1wKR3/vNJk/FeMeKyu3pZsKUbEwxGxNSIeiYhtEfFoVOo+HhFP3GX7uxrKK8c/uaudZdaedPz3ZnZva/n4r3YXrJjPSptv5T+SHD5amt2bbY89MTKaliebfnoSsZT+/PPbVu3Xj//SJW2/OhbM4rhaGF3+nkPT89NdJ565djZiR6FZ/kkUbmcR2yNiR4dtHH3pp53Lf5Ovrd05/1X04D5T+YeIFyv7fyka8q9KVr8/OfFQlGb3TlSPikaX4vc/zn/Qqv2u8u+BdP9vaHr81/IvJvX3a/MrPmLdndo4/9fXLa9pOj3+1yUfLWv8i+n5+ZOTEeuS91b+vm6Cu1qu1k/z37O7ef/fGre3xJMRkR7ET0XE0xHxTBb7sxHxXETsXiX/X99+/tPO87+30vwX72b/d7CSP3b5l1btt7f/91cLt4Jq5/uv3QC72XYAAACwVuQiYlMkufHaei43Pl75//LbYkOuNHdq/uXDc5+fOFR5RqAYI7nqTNdY3XzoZDY3XC1PZeXFrLwvmze+mF9/qzw+M1c6NOjkYchtbNH/U3+vnOsFHjSe14Lhpf/D8Oq8//vmgLXuDr041684gP5zFofh1az/Lw4gDqD/nP9heNX6/3dtVK573Kvx4U1g7XH+h+Gl/8NQ6ua5/vtiJX6MWL1O0l0To4PJ65tu3l7oQ4SRuz8OgD6uTOUjBhhGod2/ahGny4tdNzrobyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+D8AAP//Gvzn2A==") 274.420704ms ago: executing program 5 (id=847): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r0) (async) close(r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) socket$inet(0x2, 0x1, 0x0) (async) socket$inet(0x2, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 272.124234ms ago: executing program 2 (id=848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x77359c01}]}}]}, 0x40}}, 0x0) r5 = getgid() write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r5, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r5], 0xffdd) 233.310527ms ago: executing program 8 (id=849): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYBLOB="f36ad2a0f641a222341c869cd765b034435448e936310044da59cbbfb7069549da601b59bcec2250b18ac44e5c975dd53ca415e3e0b2c222e0c38972b93dada703f3067ed5ff191ce49c521cc5fa35580d886ff231e6b98d20c5e1379d927d1ae43f3cbb4297cb0557d380714af0fa1319dfaf04b57e016bef353044674469eddaef0ff3d0d989874e1c"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x83, 0x25, 0x400ffd, 0xe, 0x3, 0x2000000, 0x1, 0x7}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r5, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) (async) timer_gettime(r4, &(0x7f00000002c0)) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140100006d00200029bd7000fbdbdf25000000006624d9981e79f8c925a9181c4203b7cd84cadbf69fd204fcd4ab5582d6ae6033b19722903401cf07abaee5dd80c2221eb2929b3cf3edf0b45bb4924822710dbc505e241ed99227f94d8526845e298190", @ANYRES32=r3, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) r7 = epoll_create1(0x0) epoll_pwait2(r7, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x60000008}) (async) r8 = socket$unix(0x1, 0x1, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000280)={0x1f, @fixed}, 0x8) (async) listen(r9, 0x7) (async) connect$bt_sco(r9, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00'}) (async) syz_open_dev$loop(&(0x7f0000000240), 0x5093a5a5, 0x8002) 171.06755ms ago: executing program 3 (id=850): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) ftruncate(r4, 0x2007fff) sendfile(r5, r4, 0x0, 0x1000000200fff) (async) sendfile(r5, r4, 0x0, 0x1000000200fff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x11c, 0x23, 0x0, 0x0) 169.19053ms ago: executing program 5 (id=851): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r0, 0x402, 0x91ea6c12f182534) mkdir(0x0, 0x0) 135.324822ms ago: executing program 2 (id=852): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x12, r3, 0x94628000) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r4, 0x4, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0x5]}, 0x8}) 131.203403ms ago: executing program 8 (id=853): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x1808001, &(0x7f0000000040)=ANY=[], 0x4, 0x307, &(0x7f0000000040)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) write$cgroup_devices(r4, 0x0, 0x97ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x0) (async) ioctl$TUNSETPERSIST(r5, 0x400454cc, 0x0) (async, rerun: 64) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000a00)={0xb1bb, 0x12, [{}, {0x6, 0x1}, {0xd}, {0x7, 0x1}, {}, {0x6}, {0xd, 0x1}, {0xc, 0x1}, {0x6}, {0x1, 0x1}, {0x2}, {0x2}, {0xe, 0x1}, {0x8, 0x1}, {0xd, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0xb, 0x1}]}) (rerun: 64) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000900)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x2}, 0x2}, 0x18) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000005c0)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000800)=0xe8) mount$cgroup(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x180000, &(0x7f0000000700)={[{@xattr}, {@nofavordynmods}, {@nofavordynmods}, {@none}], [{@fowner_eq={'fowner', 0x3d, r9}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_appraise}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r10 = syz_io_uring_setup(0x3a33, &(0x7f0000000080)={0x0, 0x81d, 0x400, 0x1, 0xc1}, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS2(r10, 0xf, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}], &(0x7f00000007c0)=[0xffffffff]}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000098", @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000780)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0xe000, 0x4e24, 0xc, 0x0, @opaque="6b8b8368"}}}}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r1, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x9d}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40800) 62.768527ms ago: executing program 5 (id=854): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysinfo(&(0x7f0000000540)=""/4096) 11.756219ms ago: executing program 2 (id=855): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001180)={0x9, {"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", 0x1000}}, 0x33e) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f079171000700880000"}}}}}}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x3) close(r4) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/45, 0x2d, 0x2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x4005, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="1700"], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r7, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x2400, 0x7, 0xffffffff, 0x5, 0x8, 0x20005, 0x21, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0x9, 0xffffffffffffffff, 0x0) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') getdents(r12, &(0x7f0000000080)=""/7, 0x49) getdents(r12, 0xffffffffffffffff, 0x5a) splice(r2, 0x0, r4, 0x0, 0x200000000622c, 0x0) 0s ago: executing program 8 (id=856): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) recvmmsg(r0, &(0x7f0000002980)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/139, 0x8b}, {&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f00000006c0)=""/125, 0x7d}, {&(0x7f0000000740)=""/83, 0x53}, {&(0x7f00000007c0)=""/230, 0xe6}], 0x9, &(0x7f00000001c0)=""/41, 0x29}, 0x9}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/234, 0xea}, {&(0x7f0000000a80)=""/20, 0x14}, {&(0x7f0000000ac0)=""/180, 0xb4}, {&(0x7f0000000b80)=""/100, 0x64}, {&(0x7f0000000c00)=""/115, 0x73}], 0x5, &(0x7f0000000d00)=""/207, 0xcf}, 0x9}, {{&(0x7f0000000e00)=@qipcrtr, 0x80, &(0x7f0000001480)=[{&(0x7f0000000e80)=""/161, 0xa1}, {&(0x7f0000000f40)=""/228, 0xe4}, {&(0x7f0000001040)=""/229, 0xe5}, {&(0x7f0000001140)=""/10, 0xa}, {&(0x7f0000001180)=""/107, 0x6b}, {&(0x7f0000001200)=""/87, 0x57}, {&(0x7f0000001280)=""/230, 0xe6}, {&(0x7f0000001380)=""/241, 0xf1}], 0x8}, 0x5}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/89, 0x59}, {&(0x7f0000001580)=""/193, 0xc1}], 0x2, &(0x7f00000016c0)=""/218, 0xda}, 0x6}, {{&(0x7f00000017c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/81, 0x51}, {&(0x7f00000018c0)=""/107, 0x6b}], 0x2, &(0x7f0000001980)=""/4096, 0x1000}, 0x1}], 0x5, 0x40000000, 0x0) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5}, 0x50) socket(0x28, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.3.251'. [ 56.194560][ T4561] loop3: detected capacity change from 0 to 1024 [ 56.225427][ T4564] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 56.324314][ T4584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.255'. [ 56.333330][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.255'. [ 56.346706][ T4584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.255'. [ 56.355652][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.255'. [ 56.363993][ T3348] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.373717][ T3699] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.384181][ T3699] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.394443][ T3699] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.471358][ T4589] loop2: detected capacity change from 0 to 8192 [ 56.656375][ T3699] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.937392][ T4168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.004859][ T4629] random: crng reseeded on system resumption [ 57.243550][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.266'. [ 57.252496][ T4638] netlink: 24 bytes leftover after parsing attributes in process `syz.6.266'. [ 57.439109][ T4650] netlink: 'syz.5.269': attribute type 29 has an invalid length. [ 57.474932][ T4656] netlink: 'syz.0.270': attribute type 1 has an invalid length. [ 57.536392][ T4656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.598828][ T4656] bond1: entered promiscuous mode [ 57.604629][ T4656] bond1: entered allmulticast mode [ 57.692380][ T4656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4656 comm=syz.0.270 [ 57.712225][ T4640] loop6: detected capacity change from 0 to 1024 [ 57.735624][ T4640] EXT4-fs: Ignoring removed orlov option [ 57.741336][ T4640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.783373][ T4640] ext4: Unknown parameter 'subj_role' [ 57.849490][ T4685] netlink: 'syz.0.275': attribute type 5 has an invalid length. [ 58.191708][ T4705] tc_dump_action: action bad kind [ 58.565151][ T4739] vhci_hcd vhci_hcd.4: invalid port number 255 [ 58.571437][ T4739] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 58.673457][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.141414][ T4798] loop0: detected capacity change from 0 to 128 [ 59.474687][ T4810] loop3: detected capacity change from 0 to 512 [ 59.501426][ T4810] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.511223][ T4810] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 59.556273][ T4810] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 59.714448][ T4810] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 59.733357][ T4810] System zones: 0-2, 18-18, 34-35 [ 59.738980][ T4810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.784908][ T4810] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 59.800504][ T4810] geneve2: entered promiscuous mode [ 59.805800][ T4810] geneve2: entered allmulticast mode [ 59.822681][ T3348] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.832569][ T3348] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.847143][ T4820] loop6: detected capacity change from 0 to 1024 [ 59.854093][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 59.854151][ T29] audit: type=1400 audit(2000000003.540:857): avc: denied { setopt } for pid=4821 comm="syz.5.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 59.879871][ T29] audit: type=1400 audit(2000000003.540:858): avc: denied { write } for pid=4821 comm="syz.5.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 59.886126][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.910974][ T3348] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.934133][ T3348] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.970840][ T4820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.983581][ T4820] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.995174][ T4820] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.296: lblock 0 mapped to illegal pblock 0 (length 1) [ 60.010009][ T4820] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 60.022399][ T4820] EXT4-fs (loop6): This should not happen!! Data will be lost [ 60.022399][ T4820] [ 60.063512][ T4816] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.296: lblock 0 mapped to illegal pblock 0 (length 1) [ 60.139755][ T29] audit: type=1400 audit(2000000003.830:859): avc: denied { map } for pid=4825 comm="syz.0.299" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.231467][ T4816] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.296: lblock 0 mapped to illegal pblock 0 (length 1) [ 60.232185][ T4839] __nla_validate_parse: 7 callbacks suppressed [ 60.232221][ T4839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 60.280969][ T4816] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.296: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 60.385136][ T29] audit: type=1400 audit(2000000004.080:860): avc: denied { ioctl } for pid=4846 comm="syz.3.304" path="socket:[9837]" dev="sockfs" ino=9837 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 60.413819][ T4827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4827 comm=syz.0.299 [ 60.504841][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.306'. [ 60.561378][ T4168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 60.625305][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.310'. [ 60.655624][ T29] audit: type=1400 audit(2000000004.350:861): avc: denied { ioctl } for pid=4872 comm="syz.3.311" path="socket:[10576]" dev="sockfs" ino=10576 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.659245][ T4873] loop3: detected capacity change from 0 to 512 [ 60.669156][ T4873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 60.720682][ T4869] netlink: 24 bytes leftover after parsing attributes in process `syz.6.307'. [ 60.745282][ T4869] loop6: detected capacity change from 0 to 1024 [ 60.745760][ T4869] EXT4-fs: Ignoring removed orlov option [ 60.745785][ T4869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.745867][ T4869] ext4: Unknown parameter 'subj_role' [ 60.767965][ T29] audit: type=1400 audit(2000000004.460:862): avc: denied { ioctl } for pid=4885 comm="syz.2.313" path="socket:[9900]" dev="sockfs" ino=9900 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.872591][ T4890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.314'. [ 60.883243][ T4890] loop2: detected capacity change from 0 to 2048 [ 60.923760][ T3304] loop2: p2 < > p4 [ 60.927649][ T3304] loop2: partition table partially beyond EOD, truncated [ 60.940318][ T3304] loop2: p2 start 4278190080 is beyond EOD, truncated [ 60.947299][ T3304] loop2: p4 size 8192 extends beyond EOD, truncated [ 60.969953][ T4890] loop2: p2 < > p4 [ 60.974763][ T4890] loop2: partition table partially beyond EOD, truncated [ 60.982073][ T4890] loop2: p2 start 4278190080 is beyond EOD, truncated [ 60.989035][ T4890] loop2: p4 size 8192 extends beyond EOD, truncated [ 61.112309][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 61.229516][ T29] audit: type=1400 audit(2000000004.910:863): avc: denied { read } for pid=4899 comm="syz.0.318" lport=56906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.282631][ T29] audit: type=1400 audit(2000000004.970:864): avc: denied { create } for pid=4908 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.302620][ T29] audit: type=1400 audit(2000000004.970:865): avc: denied { read } for pid=4908 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.482807][ T4915] loop6: detected capacity change from 0 to 512 [ 61.513547][ T4917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.523176][ T4917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.584572][ T4925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 61.617389][ T4925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.627168][ T29] audit: type=1400 audit(2000000005.300:866): avc: denied { bind } for pid=4927 comm="syz.6.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.708299][ T4925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.790588][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.326'. [ 61.845821][ T3425] IPVS: starting estimator thread 0... [ 61.852471][ T4935] program syz.6.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.890593][ T4939] loop2: detected capacity change from 0 to 2048 [ 61.934234][ T4937] IPVS: using max 1776 ests per chain, 88800 per kthread [ 61.942071][ T4939] EXT4-fs warning (device loop2): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 61.981969][ T4943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.035371][ T4948] loop6: detected capacity change from 0 to 128 [ 62.045279][ T4943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.085075][ T4948] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.179377][ T4948] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.277313][ T4957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.335'. [ 62.306014][ T4168] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /16/file1/lost+found: directory fails checksum at offset 1024 [ 62.321154][ T4957] loop3: detected capacity change from 0 to 1024 [ 62.341896][ T4957] EXT4-fs: Ignoring removed orlov option [ 62.347668][ T4957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.367632][ T4967] IPv6: addrconf: prefix option has invalid lifetime [ 62.377128][ T4957] ext4: Unknown parameter 'subj_role' [ 62.384338][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 62.398969][ T4168] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /16/file1/lost+found: directory fails checksum at offset 8192 [ 62.454320][ T4168] EXT4-fs error (device loop6): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 62.493563][ T4168] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /16/file1/lost+found: directory fails checksum at offset 1024 [ 62.535295][ T4168] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /16/file1/lost+found: directory fails checksum at offset 8192 [ 62.553421][ T4168] EXT4-fs error (device loop6): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 62.555971][ T4973] loop2: detected capacity change from 0 to 512 [ 62.583547][ T4168] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /16/file1/lost+found: directory fails checksum at offset 1024 [ 62.588852][ T4973] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.340: ea_inode file size=0 entry size=6 [ 62.599358][ T4168] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /16/file1/lost+found: directory fails checksum at offset 8192 [ 62.628068][ T4973] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.646404][ T4973] ------------[ cut here ]------------ [ 62.651931][ T4973] EA inode 11 i_nlink=2 [ 62.651954][ T4973] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.2.340/4973 [ 62.652691][ T4168] EXT4-fs error (device loop6): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 62.656204][ T4973] Modules linked in: [ 62.656233][ T4973] CPU: 0 UID: 0 PID: 4973 Comm: syz.2.340 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 62.656278][ T4973] Tainted: [W]=WARN [ 62.656288][ T4973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.656305][ T4973] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 62.656348][ T4973] Code: c4 e7 9a ff 4c 8d 2d 5d 22 3e 05 49 8d 7e 40 e8 d4 d1 b6 ff 49 8b 6e 40 4c 89 e7 e8 08 cd b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f d3 d0 03 66 66 66 66 66 66 2e [ 62.656385][ T4973] RSP: 0018:ffffc90005307778 EFLAGS: 00010246 [ 62.656435][ T4973] RAX: ffff88811bfc2b90 RBX: ffff8881004b64e8 RCX: ffffffff81be1808 [ 62.656455][ T4973] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3a50 [ 62.656519][ T4973] RBP: 000000000000000b R08: 00018881004b649b R09: 0000000000000000 [ 62.656536][ T4973] R10: ffffc900053076a8 R11: 0001c900053076a8 R12: ffff8881004b6498 [ 62.656618][ T4973] R13: ffffffff86fc3a50 R14: ffff8881004b6450 R15: 0000000000000001 [ 62.656634][ T4973] FS: 00007f76868f76c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 62.656734][ T4973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.656752][ T4973] CR2: 00007f41f1469000 CR3: 000000011a926000 CR4: 00000000003506f0 [ 62.656771][ T4973] DR0: 00000000000000d4 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.656786][ T4973] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 62.656815][ T4973] Call Trace: [ 62.709264][ T4168] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path /16/file1/lost+found: directory fails checksum at offset 1024 [ 62.709503][ T4973] [ 62.709515][ T4973] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 62.709552][ T4973] ? errseq_check+0x2c/0x50 [ 62.853561][ T4973] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 62.859207][ T4973] ? ext4_truncate+0x92b/0xad0 [ 62.864085][ T4973] ext4_evict_inode+0xa1f/0xd40 [ 62.868969][ T4973] ? __pfx_ext4_evict_inode+0x10/0x10 [ 62.874411][ T4973] evict+0x2af/0x510 [ 62.878351][ T4973] ? __dquot_initialize+0x146/0x7c0 [ 62.883707][ T4973] iput+0x4b9/0x650 [ 62.887647][ T4973] ext4_process_orphan+0x1a9/0x1c0 [ 62.892806][ T4973] ext4_orphan_cleanup+0x6a8/0xa00 [ 62.898016][ T4973] ext4_fill_super+0x3476/0x3800 [ 62.902984][ T4973] ? set_blocksize+0x1a3/0x310 [ 62.907838][ T4973] ? setup_bdev_super+0x30e/0x370 [ 62.912887][ T4973] ? __pfx_ext4_fill_super+0x10/0x10 [ 62.918253][ T4973] get_tree_bdev_flags+0x291/0x300 [ 62.923447][ T4973] ? __pfx_ext4_fill_super+0x10/0x10 [ 62.928807][ T4973] get_tree_bdev+0x1f/0x30 [ 62.933250][ T4973] ext4_get_tree+0x1c/0x30 [ 62.937790][ T4973] vfs_get_tree+0x57/0x1d0 [ 62.942305][ T4973] do_new_mount+0x288/0x700 [ 62.946930][ T4973] path_mount+0x4d0/0xbc0 [ 62.951338][ T4973] ? user_path_at+0xbf/0x130 [ 62.956019][ T4973] __se_sys_mount+0x28c/0x2e0 [ 62.960736][ T4973] __x64_sys_mount+0x67/0x80 [ 62.963150][ T4978] /dev/loop5: Can't lookup blockdev [ 62.965389][ T4973] x64_sys_call+0x2cca/0x3000 [ 62.975305][ T4973] do_syscall_64+0xc0/0x2a0 [ 62.979856][ T4973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.985843][ T4973] RIP: 0033:0x7f7687e9c14a [ 62.990309][ T4973] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.010040][ T4973] RSP: 002b:00007f76868f6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.018522][ T4973] RAX: ffffffffffffffda RBX: 00007f76868f6ee0 RCX: 00007f7687e9c14a [ 63.026700][ T4973] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f76868f6ea0 [ 63.034788][ T4973] RBP: 0000200000000180 R08: 00007f76868f6ee0 R09: 0000000000800700 [ 63.042841][ T4973] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 63.050936][ T4973] R13: 00007f76868f6ea0 R14: 000000000000046c R15: 0000200000000000 [ 63.058984][ T4973] [ 63.062010][ T4973] ---[ end trace 0000000000000000 ]--- [ 63.101736][ T4986] loop3: detected capacity change from 0 to 512 [ 63.126144][ T4986] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.344: corrupted in-inode xattr: invalid ea_ino [ 63.151690][ T4973] EXT4-fs (loop2): 1 orphan inode deleted [ 63.176034][ T4973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.188613][ T4986] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.344: couldn't read orphan inode 15 (err -117) [ 63.231243][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.243089][ T4986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.341600][ T5008] netlink: 'syz.0.348': attribute type 15 has an invalid length. [ 63.351599][ T4986] netlink: 'syz.3.344': attribute type 2 has an invalid length. [ 63.359314][ T4986] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 63.368642][ T4168] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.378605][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.444495][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.467431][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.517458][ T5022] EXT4-fs: Ignoring removed orlov option [ 63.523173][ T5022] EXT4-fs: Ignoring removed i_version option [ 63.576177][ T5022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.587813][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.655271][ T5022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.672439][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.683360][ T5022] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.727050][ T5022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.782450][ T3454] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.839596][ T37] bridge_slave_1: left allmulticast mode [ 63.845408][ T37] bridge_slave_1: left promiscuous mode [ 63.851126][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.859397][ T37] bridge_slave_0: left allmulticast mode [ 63.865192][ T37] bridge_slave_0: left promiscuous mode [ 63.871002][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.967865][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.978184][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.988176][ T37] bond0 (unregistering): Released all slaves [ 64.008701][ T5058] team_slave_0: entered promiscuous mode [ 64.014453][ T5058] team_slave_1: entered promiscuous mode [ 64.021910][ T5058] vlan2: entered promiscuous mode [ 64.027051][ T5058] team0: entered promiscuous mode [ 64.055463][ T37] hsr_slave_0: left promiscuous mode [ 64.067474][ T37] hsr_slave_1: left promiscuous mode [ 64.078570][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.086119][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.109713][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.117265][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.147726][ T37] veth1_macvtap: left promiscuous mode [ 64.158711][ T37] veth0_macvtap: left promiscuous mode [ 64.170503][ T37] veth1_vlan: left promiscuous mode [ 64.190324][ T37] veth0_vlan: left promiscuous mode [ 64.301137][ T37] team0 (unregistering): Port device team_slave_1 removed [ 64.315177][ T37] team0 (unregistering): Port device team_slave_0 removed [ 64.465106][ T5023] chnl_net:caif_netlink_parms(): no params data found [ 64.473677][ T5093] 9p: Bad value for 'rfdno' [ 64.581499][ T5105] Invalid ELF header magic: != ELF [ 64.609900][ T5023] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.617168][ T5023] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.653452][ T5023] bridge_slave_0: entered allmulticast mode [ 64.677180][ T5023] bridge_slave_0: entered promiscuous mode [ 64.709017][ T5118] capability: warning: `syz.5.362' uses 32-bit capabilities (legacy support in use) [ 64.715755][ T5023] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.726194][ T5023] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.745082][ T5023] bridge_slave_1: entered allmulticast mode [ 64.766806][ T5023] bridge_slave_1: entered promiscuous mode [ 64.779979][ T37] IPVS: stop unused estimator thread 0... [ 64.788852][ T3038] SELinux: Invalid class 0 [ 64.793712][ T3038] ------------[ cut here ]------------ [ 64.799241][ T3038] WARNING: security/selinux/avc.c:761 at slow_avc_audit+0x177/0x190, CPU#1: dhcpcd/3038 [ 64.809179][ T3038] Modules linked in: [ 64.813101][ T3038] CPU: 1 UID: 0 PID: 3038 Comm: dhcpcd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.816423][ T5120] EXT4-fs: Ignoring removed oldalloc option [ 64.825074][ T3038] Tainted: [W]=WARN [ 64.834827][ T3038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.845751][ T3038] RIP: 0010:slow_avc_audit+0x177/0x190 [ 64.851279][ T3038] Code: c0 65 48 8b 0d ea ea 33 07 48 3b 4c 24 48 75 24 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 50 58 b8 03 cc e8 5a 1a 81 ff 90 <0f> 0b 90 b8 ea ff ff ff eb cd e8 da 05 b7 03 66 2e 0f 1f 84 00 00 [ 64.871010][ T3038] RSP: 0018:ffffc90001247830 EFLAGS: 00010293 [ 64.877791][ T3038] RAX: ffffffff81d7e556 RBX: 000000000000ff9e RCX: ffff8881045ea100 [ 64.885947][ T3038] RDX: 0000000000000000 RSI: 000000000000ff9e RDI: 000000000000ff9f [ 64.894036][ T3038] RBP: 0000000020000000 R08: 0001c90001247847 R09: 0000000000000000 [ 64.902041][ T3038] R10: ffffc90001247858 R11: 0001c90001247858 R12: 000000000000002d [ 64.910879][ T3038] R13: 0000000000000000 R14: ffffc90001247858 R15: 0000000020000000 [ 64.918921][ T3038] FS: 00007f82c07e0740(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 64.927945][ T3038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.935405][ T3038] CR2: 0000561b33bf7000 CR3: 0000000105c52000 CR4: 00000000003506f0 [ 64.943527][ T3038] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.951540][ T3038] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 64.959597][ T3038] Call Trace: [ 64.962918][ T3038] [ 64.966626][ T3038] audit_inode_permission+0x119/0x160 [ 64.972115][ T3038] selinux_inode_permission+0x723/0x7d0 [ 64.977744][ T3038] security_inode_permission+0x69/0xa0 [ 64.983386][ T3038] inode_permission+0x20e/0x3c0 [ 64.988347][ T3038] link_path_walk+0x779/0xe30 [ 64.993089][ T3038] path_lookupat+0x8c/0x500 [ 64.998408][ T3038] filename_lookup+0x190/0x390 [ 65.003223][ T3038] ? __pfx_kfree_link+0x10/0x10 [ 65.008175][ T3038] vfs_statx+0x96/0x170 [ 65.008510][ T5023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.012440][ T3038] vfs_fstatat+0x115/0x170 [ 65.027143][ T3038] __se_sys_newfstatat+0x55/0x3e0 [ 65.032276][ T3038] ? ksys_read+0x161/0x1a0 [ 65.036750][ T3038] __x64_sys_newfstatat+0x55/0x70 [ 65.041959][ T3038] x64_sys_call+0x111f/0x3000 [ 65.046722][ T3038] do_syscall_64+0xc0/0x2a0 [ 65.049100][ T5023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.051270][ T3038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.066971][ T3038] RIP: 0033:0x7f82c08d4b0a [ 65.071488][ T3038] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 65.092021][ T3038] RSP: 002b:00007fff9a7e7538 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 65.099431][ T5120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.100938][ T3038] RAX: ffffffffffffffda RBX: 00007f82c07dd01e RCX: 00007f82c08d4b0a [ 65.121203][ T3038] RDX: 00007fff9a7e7550 RSI: 00007fff9a7e77e0 RDI: 00000000ffffff9c [ 65.129238][ T3038] RBP: 00007fff9a7e77e0 R08: 00007f82c07d03cc R09: 00007fff9a7f7e30 [ 65.137262][ T3038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9a7f7e30 [ 65.146349][ T3038] R13: 0000561b33c128b0 R14: 00007fff9a7e7550 R15: 00007fff9a7f7da0 [ 65.154404][ T3038] [ 65.157464][ T3038] ---[ end trace 0000000000000000 ]--- [ 65.201040][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 65.201060][ T29] audit: type=1400 audit(2000000008.890:950): avc: denied { execute } for pid=5133 comm="syz.0.366" path="/88/cpu.stat" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.210161][ T5023] team0: Port device team_slave_0 added [ 65.244213][ T5135] SELinux: Invalid class 0 [ 65.249235][ T5135] ------------[ cut here ]------------ [ 65.254745][ T5135] WARNING: security/selinux/avc.c:761 at slow_avc_audit+0x177/0x190, CPU#0: syz.2.363/5135 [ 65.264831][ T5135] Modules linked in: [ 65.268821][ T5135] CPU: 0 UID: 0 PID: 5135 Comm: syz.2.363 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.280093][ T5135] Tainted: [W]=WARN [ 65.283948][ T5135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.294076][ T5135] RIP: 0010:slow_avc_audit+0x177/0x190 [ 65.299672][ T5135] Code: c0 65 48 8b 0d ea ea 33 07 48 3b 4c 24 48 75 24 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 50 58 b8 03 cc e8 5a 1a 81 ff 90 <0f> 0b 90 b8 ea ff ff ff eb cd e8 da 05 b7 03 66 2e 0f 1f 84 00 00 [ 65.319352][ T5135] RSP: 0018:ffffc90004dcb920 EFLAGS: 00010283 [ 65.325486][ T5135] RAX: ffffffff81d7e556 RBX: 000000000000ff9e RCX: 0000000000080000 [ 65.333562][ T5135] RDX: ffffc90003ea0000 RSI: 000000000000095c RDI: 000000000000095d [ 65.341585][ T5135] RBP: 0000000020000000 R08: 0001c90004dcb937 R09: 0000000000000000 [ 65.349638][ T5135] R10: ffffc90004dcb948 R11: 0001c90004dcb948 R12: 000000000000002d [ 65.357672][ T5135] R13: 0000000000000000 R14: ffffc90004dcb948 R15: 0000000020000000 [ 65.365696][ T5135] FS: 00007f76868d66c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 65.374789][ T5135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.381496][ T5135] CR2: 00007f7688c435ac CR3: 0000000131bea000 CR4: 00000000003506f0 [ 65.389613][ T5135] DR0: 00000000000000d4 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.397675][ T5135] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 65.405751][ T5135] Call Trace: [ 65.409077][ T5135] [ 65.412070][ T5135] audit_inode_permission+0x119/0x160 [ 65.417533][ T5135] selinux_inode_permission+0x723/0x7d0 [ 65.423181][ T5135] security_inode_permission+0x69/0xa0 [ 65.428781][ T5135] inode_permission+0x20e/0x3c0 [ 65.433708][ T5135] link_path_walk+0x779/0xe30 [ 65.438517][ T5135] path_openat+0x1bf/0x23c0 [ 65.443074][ T5135] ? __rcu_read_unlock+0x4e/0x70 [ 65.448111][ T5135] do_filp_open+0x15d/0x280 [ 65.452763][ T5135] do_sys_openat2+0xa6/0x150 [ 65.457637][ T5135] __x64_sys_openat+0xf2/0x120 [ 65.462516][ T5135] x64_sys_call+0x2b07/0x3000 [ 65.467341][ T5135] do_syscall_64+0xc0/0x2a0 [ 65.471917][ T5135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.477889][ T5135] RIP: 0033:0x7f7687e5b78e [ 65.482334][ T5135] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.501994][ T5135] RSP: 002b:00007f76868d59b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 65.510587][ T5135] RAX: ffffffffffffffda RBX: 00007f76868d66c0 RCX: 00007f7687e5b78e [ 65.518620][ T5135] RDX: 0000000000080001 RSI: 00007f7687f05448 RDI: ffffffffffffff9c [ 65.526734][ T5135] RBP: 00007f7687f05448 R08: 0000000000000000 R09: 0000000000000000 [ 65.534763][ T5135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 65.542766][ T5135] R13: 00007f76868d5a90 R14: 00007f7688116090 R15: 00007ffc87979c78 [ 65.550903][ T5135] [ 65.554033][ T5135] ---[ end trace 0000000000000000 ]--- [ 65.565924][ T5023] team0: Port device team_slave_1 added [ 65.592100][ T5023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.599154][ T5023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.625077][ T5023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.638304][ T5023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.645307][ T5023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.671339][ T5023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.693277][ T5142] __nla_validate_parse: 2 callbacks suppressed [ 65.699569][ T5142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.368'. [ 65.711218][ T5023] hsr_slave_0: entered promiscuous mode [ 65.717973][ T5023] hsr_slave_1: entered promiscuous mode [ 65.723876][ T5023] debugfs: 'hsr0' already exists in 'hsr' [ 65.729648][ T5023] Cannot create hsr debugfs directory [ 65.793429][ T4603] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.793914][ T3524] Bluetooth: hci0: command 0x1003 tx timeout [ 65.912100][ T29] audit: type=1400 audit(2000000009.600:951): avc: denied { create } for pid=5168 comm="syz.5.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.921734][ T5023] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 65.953551][ T29] audit: type=1400 audit(2000000009.630:952): avc: denied { getopt } for pid=5168 comm="syz.5.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 65.976908][ T5173] netlink: 14 bytes leftover after parsing attributes in process `syz.5.373'. [ 65.986701][ T5023] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 66.001697][ T5173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.015349][ T5173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.025868][ T5173] bond0 (unregistering): Released all slaves [ 66.038067][ T5023] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 66.059114][ T5023] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 66.091303][ T5169] team_slave_0: entered promiscuous mode [ 66.097029][ T5169] team_slave_1: entered promiscuous mode [ 66.123763][ T5169] vlan2: entered promiscuous mode [ 66.128847][ T5169] team0: entered promiscuous mode [ 66.145274][ T5120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.223098][ T5023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.248912][ T5023] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.267527][ T3348] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.274714][ T3348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.310039][ T3348] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.317236][ T3348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.404762][ T29] audit: type=1400 audit(2000000010.090:953): avc: denied { ioctl } for pid=5198 comm="syz.2.375" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11010 ioctlcmd=0xf518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.526113][ T5023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.907055][ T5023] veth0_vlan: entered promiscuous mode [ 66.927700][ T5023] veth1_vlan: entered promiscuous mode [ 66.959197][ T5023] veth0_macvtap: entered promiscuous mode [ 66.977106][ T5023] veth1_macvtap: entered promiscuous mode [ 66.986908][ T29] audit: type=1400 audit(2000000010.670:954): avc: denied { name_connect } for pid=5250 comm="syz.0.381" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 67.024928][ T5023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.044571][ T5023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.070100][ T3454] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.079546][ T3454] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.108482][ T3454] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.120662][ T29] audit: type=1400 audit(2000000010.800:955): avc: denied { mounton } for pid=5023 comm="syz-executor" path="/root/syzkaller.LzdtuF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.165479][ T3454] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.219819][ T5257] set_capacity_and_notify: 2 callbacks suppressed [ 67.219839][ T5257] loop2: detected capacity change from 0 to 512 [ 67.243561][ T5257] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 67.267779][ T5257] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.382: bg 0: block 255: padding at end of block bitmap is not set [ 67.300308][ T5262] netlink: 'syz.7.383': attribute type 3 has an invalid length. [ 67.314174][ T5257] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 67.322117][ T5262] futex_wake_op: syz.7.383 tries to shift op by -3; fix this program [ 67.332119][ T5257] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.382: invalid indirect mapped block 1 (level 1) [ 67.353764][ T5257] EXT4-fs (loop2): 1 truncate cleaned up [ 67.366661][ T5257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.423675][ T5257] EXT4-fs (loop2): shut down requested (0) [ 67.431112][ T5257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.382'. [ 67.441155][ T29] audit: type=1326 audit(2000000011.130:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7687e9aeb9 code=0x7ffc0000 [ 67.466259][ T29] audit: type=1326 audit(2000000011.130:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7687e9aeb9 code=0x7ffc0000 [ 67.489636][ T29] audit: type=1326 audit(2000000011.130:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7687e9aeb9 code=0x7ffc0000 [ 67.513828][ T29] audit: type=1326 audit(2000000011.130:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7687e9aeb9 code=0x7ffc0000 [ 67.579569][ T5274] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 67.631836][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.701489][ T5275] netlink: 24 bytes leftover after parsing attributes in process `syz.7.385'. [ 67.886766][ T5266] loop7: detected capacity change from 0 to 1024 [ 67.905543][ T5266] EXT4-fs: Ignoring removed orlov option [ 67.911253][ T5266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.930876][ T5297] loop3: detected capacity change from 0 to 512 [ 67.947595][ T5297] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.394: EA inode hash validation failed [ 67.973548][ T5297] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.394: corrupted inode contents [ 67.983146][ T5266] ext4: Unknown parameter 'subj_role' [ 68.023604][ T5297] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.394: mark_inode_dirty error [ 68.035600][ T5297] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.394: corrupted inode contents [ 68.054425][ T5297] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.394: mark_inode_dirty error [ 68.097088][ T5297] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.394: mark inode dirty (error -117) [ 68.153482][ T5297] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 68.162641][ T5297] EXT4-fs (loop3): 1 orphan inode deleted [ 68.196337][ T5297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.307468][ T5307] netlink: 36 bytes leftover after parsing attributes in process `syz.7.398'. [ 68.319017][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.387280][ T5310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 68.670094][ T5328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.405'. [ 68.781650][ T5334] loop2: detected capacity change from 0 to 128 [ 68.788539][ T5334] vfat: Unknown parameter 'ÿ' [ 69.045359][ T5357] loop7: detected capacity change from 0 to 512 [ 69.075593][ T5357] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 69.076795][ T5363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5363 comm=syz.0.414 [ 69.103840][ T5357] EXT4-fs (loop7): orphan cleanup on readonly fs [ 69.118086][ T5357] EXT4-fs error (device loop7): ext4_quota_enable:7173: comm syz.7.403: Bad quota inum: 5, type: 1 [ 69.145033][ T5357] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 69.161371][ T5363] netlink: 'syz.0.414': attribute type 13 has an invalid length. [ 69.184805][ T5357] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 69.202044][ T5357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.228997][ T5363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.319893][ T5363] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.329606][ T5023] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.348751][ T5363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.445204][ T5389] netlink: 'syz.7.416': attribute type 21 has an invalid length. [ 69.466791][ T5389] netlink: 156 bytes leftover after parsing attributes in process `syz.7.416'. [ 69.475826][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.416'. [ 69.602563][ T5403] loop7: detected capacity change from 0 to 128 [ 69.660937][ T5410] IPv6: addrconf: prefix option has invalid lifetime [ 69.667682][ T5410] IPv6: addrconf: prefix option has invalid lifetime [ 69.676636][ T5412] netlink: 152 bytes leftover after parsing attributes in process `syz.5.420'. [ 69.848128][ T5434] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 69.891016][ T3396] hid (null): global environment stack underflow [ 69.904101][ T3396] hid-generic 0008:0001:0005.0001: global environment stack underflow [ 69.904122][ T3396] hid-generic 0008:0001:0005.0001: item 0 2 1 11 parsing failed [ 69.904222][ T3396] hid-generic 0008:0001:0005.0001: probe with driver hid-generic failed with error -22 [ 70.004406][ T5449] 9p: Bad value for 'rfdno' [ 70.101944][ T5452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5452 comm=syz.0.427 [ 70.353567][ T5487] bridge_slave_1: left allmulticast mode [ 70.359246][ T5487] bridge_slave_1: left promiscuous mode [ 70.365163][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.385052][ T5487] bridge_slave_0: left allmulticast mode [ 70.390736][ T5487] bridge_slave_0: left promiscuous mode [ 70.396506][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.432729][ T5472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=5472 comm=syz.3.435 [ 70.448096][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 70.448114][ T29] audit: type=1400 audit(2000000014.140:1023): avc: denied { ioctl } for pid=5490 comm="syz.2.440" path="socket:[12313]" dev="sockfs" ino=12313 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.504703][ T29] audit: type=1400 audit(2000000014.190:1024): avc: denied { mount } for pid=5491 comm="syz.0.441" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 70.546849][ T29] audit: type=1400 audit(2000000014.240:1025): avc: denied { watch } for pid=5491 comm="syz.0.441" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 70.596518][ T5502] mmap: syz.2.444 (5502): VmData 167616512 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 70.610153][ T29] audit: type=1400 audit(2000000014.300:1026): avc: denied { setopt } for pid=5501 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.674396][ T5509] loop2: detected capacity change from 0 to 2048 [ 70.706052][ T29] audit: type=1400 audit(2000000014.400:1027): avc: denied { connect } for pid=5510 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.726931][ T3454] tipc: Subscription rejected, illegal request [ 70.735888][ T5511] loop3: detected capacity change from 0 to 512 [ 70.744198][ T3304] Alternate GPT is invalid, using primary GPT. [ 70.750518][ T3304] loop2: p2 p3 p7 [ 70.777519][ T5509] Alternate GPT is invalid, using primary GPT. [ 70.784055][ T5509] loop2: p2 p3 p7 [ 70.820686][ T5511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.842936][ T5509] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.853027][ T5521] loop7: detected capacity change from 0 to 512 [ 70.874495][ T29] audit: type=1400 audit(2000000014.530:1028): avc: denied { read write } for pid=5507 comm="syz.2.446" name="loop2p3" dev="devtmpfs" ino=813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 70.897790][ T29] audit: type=1400 audit(2000000014.530:1029): avc: denied { open } for pid=5507 comm="syz.2.446" path="/dev/loop2p3" dev="devtmpfs" ino=813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 70.921010][ T29] audit: type=1400 audit(2000000014.530:1030): avc: denied { write } for pid=5507 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.947004][ T5522] __nla_validate_parse: 5 callbacks suppressed [ 70.947021][ T5522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.450'. [ 70.978774][ T5520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 70.987533][ T5511] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.004538][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 71.016141][ T4879] udevd[4879]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 71.027961][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 71.038762][ T5511] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.448: corrupted inode contents [ 71.057790][ T5521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 71.065872][ T5521] System zones: 1-12 [ 71.070261][ T5521] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.451: Directory hole found for htree index block 0 [ 71.082717][ T29] audit: type=1400 audit(2000000014.650:1031): avc: denied { connect } for pid=5518 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.098781][ T5511] EXT4-fs (loop3): Remounting filesystem read-only [ 71.102464][ T29] audit: type=1400 audit(2000000014.690:1032): avc: denied { read write } for pid=5510 comm="syz.3.448" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.132205][ T5521] EXT4-fs (loop7): Remounting filesystem read-only [ 71.138809][ T5521] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 71.148457][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 71.150921][ T5511] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 71.159375][ T5521] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 71.170668][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 71.176874][ T5521] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.188789][ T4879] udevd[4879]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 71.258932][ T5023] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.271399][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.369469][ T5537] loop2: detected capacity change from 0 to 512 [ 71.386642][ T5537] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.398305][ T5537] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 71.408591][ T5537] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.458: Corrupt directory, running e2fsck is recommended [ 71.437068][ T5537] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 71.445573][ T5537] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.458: corrupted in-inode xattr: e_name out of bounds [ 71.459788][ T5537] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.458: couldn't read orphan inode 15 (err -117) [ 71.472442][ T5537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.493717][ T5537] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.505480][ T5537] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 71.515659][ T5537] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.458: Corrupt directory, running e2fsck is recommended [ 71.534126][ T5537] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.458: path /86/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 71.583117][ T5537] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 8: comm syz.2.458: path /86/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 71.646922][ T5553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'. [ 71.692349][ T5556] netlink: 64 bytes leftover after parsing attributes in process `syz.5.463'. [ 71.714576][ T5559] SELinux: Context system_u:object_r:cgroup_t:s0 is not valid (left unmapped). [ 71.734134][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.913917][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.469'. [ 71.922844][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.469'. [ 71.995890][ T5577] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 72.347996][ T5600] loop7: detected capacity change from 0 to 7 [ 72.377649][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.387284][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.403297][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.412908][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.422223][ T5600] loop7: unable to read partition table [ 72.429157][ T5600] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 72.503640][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.513253][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.521922][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.531536][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.539434][ T3304] loop7: unable to read partition table [ 72.563360][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.573052][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.581276][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.590911][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.600064][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.609665][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.622608][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.632223][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.662675][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.672296][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.692582][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.695867][ T5600] vlan2: entered allmulticast mode [ 72.702220][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.707362][ T5600] vlan1: entered allmulticast mode [ 72.720287][ T5600] veth0_vlan: entered allmulticast mode [ 72.748425][ T5603] loop7: unable to read partition table [ 72.765894][ T5603] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 72.833050][ T5612] sch_tbf: burst 2 is lower than device ip6gre0 mtu (1448) ! [ 72.907192][ T5613] team_slave_0: entered promiscuous mode [ 72.912926][ T5613] team_slave_1: entered promiscuous mode [ 72.960099][ T5613] macvtap1: entered allmulticast mode [ 72.965572][ T5613] team0: entered allmulticast mode [ 72.970871][ T5613] team_slave_0: entered allmulticast mode [ 72.976627][ T5613] team_slave_1: entered allmulticast mode [ 73.008258][ T5613] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 73.061133][ T5613] team0: left allmulticast mode [ 73.066259][ T5613] team_slave_0: left allmulticast mode [ 73.071764][ T5613] team_slave_1: left allmulticast mode [ 73.077347][ T5613] team_slave_0: left promiscuous mode [ 73.082757][ T5613] team_slave_1: left promiscuous mode [ 73.258158][ T5638] loop7: detected capacity change from 0 to 512 [ 73.278540][ T5638] loop7: detected capacity change from 0 to 164 [ 73.348698][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 73.521235][ T5652] loop2: detected capacity change from 0 to 512 [ 73.553005][ T5652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.609275][ T5652] EXT4-fs (loop2): 1 truncate cleaned up [ 73.625610][ T5652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.675476][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.711278][ T5656] loop2: detected capacity change from 0 to 512 [ 73.735198][ T5656] EXT4-fs: Ignoring removed nobh option [ 73.753217][ T5656] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.775429][ T5656] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.490: EA inode hash validation failed [ 73.803501][ T5656] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.835252][ T5656] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.490: corrupted inode contents [ 73.860896][ T5656] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.490: mark_inode_dirty error [ 73.877303][ T5656] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.490: corrupted inode contents [ 73.891600][ T5656] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.490: mark_inode_dirty error [ 73.928158][ T5656] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.490: mark inode dirty (error -117) [ 73.984006][ T5656] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 73.999798][ T5656] EXT4-fs (loop2): 1 orphan inode deleted [ 74.007283][ T5656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.034467][ T5665] netlink: 112 bytes leftover after parsing attributes in process `syz.5.493'. [ 74.112128][ T5674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.495'. [ 74.561592][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.767340][ T5716] loop7: detected capacity change from 0 to 512 [ 74.783681][ T5716] EXT4-fs: Ignoring removed bh option [ 74.815286][ T5716] EXT4-fs (loop7): filesystem is read-only [ 74.823957][ T5716] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 74.843655][ T5716] EXT4-fs (loop7): filesystem is read-only [ 74.849507][ T5716] EXT4-fs (loop7): orphan cleanup on readonly fs [ 74.858108][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'. [ 74.867080][ T5722] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 74.877071][ T5716] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.509: bg 0: block 64: padding at end of block bitmap is not set [ 74.960228][ T5716] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 74.982620][ T5716] EXT4-fs (loop7): 1 orphan inode deleted [ 74.993910][ T5727] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5727 comm=syz.5.514 [ 75.011379][ T5716] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.137191][ T5023] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.241412][ T5735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1128 sclass=netlink_route_socket pid=5735 comm=syz.7.516 [ 75.487629][ T5750] vhci_hcd vhci_hcd.2: invalid port number 98 [ 75.494561][ T5750] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffc i0062 l0 [ 75.576582][ T5763] netlink: 'syz.0.526': attribute type 11 has an invalid length. [ 75.611362][ T5765] netlink: 'syz.0.526': attribute type 11 has an invalid length. [ 75.630662][ T5767] loop7: detected capacity change from 0 to 764 [ 75.662944][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 75.663009][ T29] audit: type=1400 audit(2000000019.350:1046): avc: denied { mount } for pid=5764 comm="syz.7.527" name="/" dev="loop7" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 75.734802][ T29] audit: type=1400 audit(2000000019.420:1047): avc: denied { mounton } for pid=5770 comm="syz.0.528" path="/125/file0/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 75.777791][ T29] audit: type=1400 audit(2000000019.450:1048): avc: denied { unmount } for pid=5023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 75.798615][ T29] audit: type=1400 audit(2000000019.480:1049): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.182892][ T5800] ip6t_rpfilter: unknown options [ 76.193621][ T5801] ip6t_rpfilter: unknown options [ 76.360994][ T29] audit: type=1400 audit(2000000020.050:1050): avc: denied { create } for pid=5803 comm="syz.7.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 76.550223][ T29] audit: type=1400 audit(2000000020.240:1051): avc: denied { cpu } for pid=5813 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 76.574759][ T5814] x_tables: duplicate underflow at hook 1 [ 76.587823][ T5818] loop7: detected capacity change from 0 to 1024 [ 76.606471][ T5818] EXT4-fs: quotafile must be on filesystem root [ 76.669116][ T5818] bridge_slave_0: left allmulticast mode [ 76.674870][ T5818] bridge_slave_0: left promiscuous mode [ 76.680698][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.747270][ T5818] bridge_slave_1: left allmulticast mode [ 76.753008][ T5818] bridge_slave_1: left promiscuous mode [ 76.758809][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.783352][ T29] audit: type=1400 audit(2000000020.460:1052): avc: denied { read } for pid=5820 comm="syz.2.544" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.806033][ T29] audit: type=1400 audit(2000000020.460:1053): avc: denied { open } for pid=5820 comm="syz.2.544" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.829186][ T29] audit: type=1400 audit(2000000020.470:1054): avc: denied { ioctl } for pid=5820 comm="syz.2.544" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.896649][ T5818] bond0: (slave bond_slave_0): Releasing backup interface [ 76.953365][ T5818] bond0: (slave bond_slave_1): Releasing backup interface [ 76.991576][ T5818] team0: Port device team_slave_0 removed [ 77.020677][ T5818] team0: Port device team_slave_1 removed [ 77.039879][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.047332][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.075096][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.082558][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.125159][ T5818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.153941][ T5829] batadv1: entered promiscuous mode [ 77.160120][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 77.182537][ T5829] batadv2: entered promiscuous mode [ 77.204112][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 77.227692][ T5829] batadv3: entered promiscuous mode [ 77.254231][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 77.268492][ T5829] batadv4: entered promiscuous mode [ 77.295351][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 77.366277][ T5829] batadv5: entered promiscuous mode [ 77.372444][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 77.455176][ T5829] batadv6: entered promiscuous mode [ 77.461279][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 77.495173][ T5843] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 77.502643][ T5843] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.517813][ T5829] batadv7: entered promiscuous mode [ 77.542293][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 77.550252][ T5846] qrtr: Invalid version 0 [ 77.596182][ T5829] batadv8: entered promiscuous mode [ 77.617891][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 77.662979][ T5829] batadv9: entered promiscuous mode [ 77.679736][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 77.720434][ T5829] batadv10: entered promiscuous mode [ 77.721342][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 77.767719][ T5829] batadv11: entered promiscuous mode [ 77.768606][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 77.892634][ T5871] __nla_validate_parse: 3 callbacks suppressed [ 77.892651][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.552'. [ 77.951622][ T5876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.554'. [ 77.953529][ T29] audit: type=1400 audit(2000000021.640:1055): avc: denied { bind } for pid=5875 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.203473][ T5892] 9p: Bad value for 'rfdno' [ 78.229499][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.555'. [ 78.321790][ T5892] loop3: detected capacity change from 0 to 1024 [ 78.541876][ T5909] FAULT_INJECTION: forcing a failure. [ 78.541876][ T5909] name failslab, interval 1, probability 0, space 0, times 1 [ 78.555241][ T5909] CPU: 1 UID: 0 PID: 5909 Comm: syz.7.557 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.555355][ T5909] Tainted: [W]=WARN [ 78.555407][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.555418][ T5909] Call Trace: [ 78.555423][ T5909] [ 78.555429][ T5909] __dump_stack+0x1d/0x30 [ 78.555456][ T5909] dump_stack_lvl+0x95/0xd0 [ 78.555528][ T5909] dump_stack+0x15/0x1b [ 78.555551][ T5909] should_fail_ex+0x263/0x280 [ 78.555596][ T5909] should_failslab+0x8c/0xb0 [ 78.555616][ T5909] kmem_cache_alloc_noprof+0x68/0x490 [ 78.555662][ T5909] ? getname_flags+0x7f/0x3b0 [ 78.555708][ T5909] getname_flags+0x7f/0x3b0 [ 78.555730][ T5909] __x64_sys_mkdir+0x33/0x50 [ 78.555756][ T5909] x64_sys_call+0x2f32/0x3000 [ 78.555803][ T5909] do_syscall_64+0xc0/0x2a0 [ 78.555911][ T5909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.555935][ T5909] RIP: 0033:0x7f2bc679aeb9 [ 78.556012][ T5909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.556032][ T5909] RSP: 002b:00007f2bc51f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 78.556059][ T5909] RAX: ffffffffffffffda RBX: 00007f2bc6a15fa0 RCX: 00007f2bc679aeb9 [ 78.556073][ T5909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 78.556130][ T5909] RBP: 00007f2bc51f7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.556144][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.556158][ T5909] R13: 00007f2bc6a16038 R14: 00007f2bc6a15fa0 R15: 00007ffdcaad4648 [ 78.556176][ T5909] [ 78.738207][ T5905] loop2: detected capacity change from 0 to 8192 [ 78.888539][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.7.563'. [ 78.897530][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.7.563'. [ 78.907181][ T5927] netlink: 'syz.7.563': attribute type 12 has an invalid length. [ 78.917672][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.562'. [ 78.926556][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.562'. [ 78.971018][ T5936] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 79.040418][ T5943] loop3: detected capacity change from 0 to 512 [ 79.060859][ T5929] dummy0: entered promiscuous mode [ 79.066217][ T5929] vlan2: entered promiscuous mode [ 79.076297][ T5943] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 79.459602][ T5955] FAULT_INJECTION: forcing a failure. [ 79.459602][ T5955] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.472874][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.7.569 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.472908][ T5955] Tainted: [W]=WARN [ 79.472917][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.472932][ T5955] Call Trace: [ 79.472939][ T5955] [ 79.472946][ T5955] __dump_stack+0x1d/0x30 [ 79.473008][ T5955] dump_stack_lvl+0x95/0xd0 [ 79.473104][ T5955] dump_stack+0x15/0x1b [ 79.473156][ T5955] should_fail_ex+0x263/0x280 [ 79.473191][ T5955] should_fail+0xb/0x20 [ 79.473216][ T5955] should_fail_usercopy+0x1a/0x20 [ 79.473247][ T5955] strncpy_from_user+0x27/0x250 [ 79.473290][ T5955] getname_flags+0xad/0x3b0 [ 79.473322][ T5955] __x64_sys_mkdir+0x33/0x50 [ 79.473388][ T5955] x64_sys_call+0x2f32/0x3000 [ 79.473411][ T5955] do_syscall_64+0xc0/0x2a0 [ 79.473581][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.473607][ T5955] RIP: 0033:0x7f2bc679aeb9 [ 79.473625][ T5955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.473646][ T5955] RSP: 002b:00007f2bc51f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 79.473750][ T5955] RAX: ffffffffffffffda RBX: 00007f2bc6a15fa0 RCX: 00007f2bc679aeb9 [ 79.473768][ T5955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 79.473780][ T5955] RBP: 00007f2bc51f7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.473792][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.473803][ T5955] R13: 00007f2bc6a16038 R14: 00007f2bc6a15fa0 R15: 00007ffdcaad4648 [ 79.473823][ T5955] [ 79.881489][ T5968] loop7: detected capacity change from 0 to 512 [ 79.894514][ T5969] loop2: detected capacity change from 0 to 512 [ 79.919589][ T5968] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 79.967495][ T5968] EXT4-fs (loop7): 1 truncate cleaned up [ 79.982710][ T5968] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.997072][ T5976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.573'. [ 80.006130][ T5973] loop3: detected capacity change from 0 to 256 [ 80.012679][ T5973] vfat: Unknown parameter './file0' [ 80.059717][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 80.098114][ T5968] EXT4-fs error (device loop7): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.7.574: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 80.140648][ T5968] EXT4-fs error (device loop7) in ext4_delete_entry:2737: Corrupt filesystem [ 80.169863][ T5990] netlink: 'syz.5.579': attribute type 1 has an invalid length. [ 80.172049][ T5968] EXT4-fs warning (device loop7): ext4_rename_delete:3729: inode #2: comm syz.7.574: Deleting old file: nlink 4, error=-117 [ 80.193447][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 80.270746][ T5979] loop3: detected capacity change from 0 to 1024 [ 80.278233][ T5979] EXT4-fs: Ignoring removed orlov option [ 80.283995][ T5979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.346750][ T5979] ext4: Unknown parameter 'subj_role' [ 80.352980][ T5023] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.445773][ T6002] FAULT_INJECTION: forcing a failure. [ 80.445773][ T6002] name failslab, interval 1, probability 0, space 0, times 0 [ 80.458573][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.7.581 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.458602][ T6002] Tainted: [W]=WARN [ 80.458609][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.458624][ T6002] Call Trace: [ 80.458634][ T6002] [ 80.458642][ T6002] __dump_stack+0x1d/0x30 [ 80.458695][ T6002] dump_stack_lvl+0x95/0xd0 [ 80.458722][ T6002] dump_stack+0x15/0x1b [ 80.458788][ T6002] should_fail_ex+0x263/0x280 [ 80.458817][ T6002] should_failslab+0x8c/0xb0 [ 80.458847][ T6002] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 80.458955][ T6002] ? __d_alloc+0x37/0x340 [ 80.458990][ T6002] __d_alloc+0x37/0x340 [ 80.459025][ T6002] d_alloc+0x2e/0x100 [ 80.459059][ T6002] lookup_one_qstr_excl+0x99/0x250 [ 80.459139][ T6002] filename_create+0x155/0x220 [ 80.459254][ T6002] do_mkdirat+0x82/0x3b0 [ 80.459281][ T6002] __x64_sys_mkdir+0x42/0x50 [ 80.459308][ T6002] x64_sys_call+0x2f32/0x3000 [ 80.459331][ T6002] do_syscall_64+0xc0/0x2a0 [ 80.459360][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.459381][ T6002] RIP: 0033:0x7f2bc679aeb9 [ 80.459401][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.459421][ T6002] RSP: 002b:00007f2bc51f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 80.459445][ T6002] RAX: ffffffffffffffda RBX: 00007f2bc6a15fa0 RCX: 00007f2bc679aeb9 [ 80.459463][ T6002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 80.459479][ T6002] RBP: 00007f2bc51f7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.459495][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.459510][ T6002] R13: 00007f2bc6a16038 R14: 00007f2bc6a15fa0 R15: 00007ffdcaad4648 [ 80.459596][ T6002] [ 80.792348][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 80.792368][ T29] audit: type=1400 audit(2000000024.480:1058): avc: denied { setopt } for pid=6012 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.830890][ T29] audit: type=1400 audit(2000000024.520:1059): avc: denied { write } for pid=6012 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.960019][ T6011] vlan2: entered promiscuous mode [ 80.965249][ T6011] team0: entered promiscuous mode [ 81.736262][ T29] audit: type=1400 audit(2000000025.430:1060): avc: granted { setsecparam } for pid=6027 comm="syz.7.589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 82.442708][ T6038] loop3: detected capacity change from 0 to 512 [ 82.449624][ T6038] EXT4-fs: Ignoring removed oldalloc option [ 82.463634][ T6038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.626677][ T6043] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 82.633424][ T6043] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 82.641157][ T6043] vhci_hcd vhci_hcd.0: Device attached [ 82.664100][ T6044] vhci_hcd: cannot find the pending unlink 0 [ 82.711748][ T6044] vhci_hcd: connection closed [ 82.711961][ T37] vhci_hcd vhci_hcd.3: stop threads [ 82.721978][ T37] vhci_hcd vhci_hcd.3: release socket [ 82.727416][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 82.904639][ T29] audit: type=1400 audit(2000000026.600:1061): avc: denied { watch } for pid=6050 comm="syz.2.595" path="/121/file0" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 82.928175][ T6049] FAULT_INJECTION: forcing a failure. [ 82.928175][ T6049] name failslab, interval 1, probability 0, space 0, times 0 [ 82.941444][ T6051] loop2: detected capacity change from 0 to 512 [ 82.947927][ T6049] CPU: 1 UID: 0 PID: 6049 Comm: syz.7.594 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.948002][ T6049] Tainted: [W]=WARN [ 82.948011][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.948025][ T6049] Call Trace: [ 82.948031][ T6049] [ 82.948038][ T6049] __dump_stack+0x1d/0x30 [ 82.948068][ T6049] dump_stack_lvl+0x95/0xd0 [ 82.948172][ T6049] dump_stack+0x15/0x1b [ 82.948198][ T6049] should_fail_ex+0x263/0x280 [ 82.948230][ T6049] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 82.948263][ T6049] should_failslab+0x8c/0xb0 [ 82.948355][ T6051] EXT4-fs: Ignoring removed orlov option [ 82.948352][ T6049] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 82.948386][ T6049] ? shmem_alloc_inode+0x34/0x50 [ 82.948563][ T6049] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 82.948755][ T6049] shmem_alloc_inode+0x34/0x50 [ 82.948846][ T6049] alloc_inode+0x40/0x170 [ 82.948909][ T6049] new_inode+0x1d/0xe0 [ 82.948974][ T6049] shmem_get_inode+0x246/0x750 [ 82.949103][ T6049] shmem_mknod+0x44/0x170 [ 82.949156][ T6049] shmem_mkdir+0x33/0x70 [ 82.949210][ T6049] vfs_mkdir+0x510/0x560 [ 82.949264][ T6049] do_mkdirat+0x133/0x3b0 [ 82.949313][ T6049] __x64_sys_mkdir+0x42/0x50 [ 82.949488][ T6049] x64_sys_call+0x2f32/0x3000 [ 82.949562][ T6049] do_syscall_64+0xc0/0x2a0 [ 82.949656][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.949708][ T6049] RIP: 0033:0x7f2bc679aeb9 [ 82.949782][ T6049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.949837][ T6049] RSP: 002b:00007f2bc51f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 82.949986][ T6049] RAX: ffffffffffffffda RBX: 00007f2bc6a15fa0 RCX: 00007f2bc679aeb9 [ 82.950030][ T6049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 82.950105][ T6049] RBP: 00007f2bc51f7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.950148][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.950184][ T6049] R13: 00007f2bc6a16038 R14: 00007f2bc6a15fa0 R15: 00007ffdcaad4648 [ 82.950242][ T6049] [ 83.161216][ T6051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.176681][ T6051] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.194201][ T6051] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.595: bg 0: block 248: padding at end of block bitmap is not set [ 83.223567][ T6051] Quota error (device loop2): write_blk: dquota write failed [ 83.231008][ T6051] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 83.241110][ T6051] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.595: Failed to acquire dquot type 1 [ 83.333765][ T6051] EXT4-fs (loop2): 1 truncate cleaned up [ 83.344042][ T6051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.389238][ T6051] EXT4-fs: Ignoring removed orlov option [ 83.397544][ T6038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.406998][ T6051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.427312][ T6051] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 83.458855][ T6051] EXT4-fs error (device loop2): __ext4_remount:6789: comm syz.2.595: Abort forced by user [ 83.477264][ T6051] EXT4-fs (loop2): Remounting filesystem read-only [ 83.483918][ T6051] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 83.493310][ T6051] ext4 filesystem being remounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.535828][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.548107][ T29] audit: type=1400 audit(2000000027.240:1062): avc: granted { setsecparam } for pid=6068 comm="syz.7.601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 83.641094][ T6076] loop7: detected capacity change from 0 to 512 [ 83.666927][ T6076] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 83.713542][ T6076] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.605: invalid indirect mapped block 256 (level 1) [ 83.759190][ T6076] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.605: invalid indirect mapped block 2683928664 (level 1) [ 83.801477][ T6076] EXT4-fs (loop7): 1 truncate cleaned up [ 83.823900][ T6076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.004550][ T29] audit: type=1400 audit(2000000027.700:1063): avc: denied { sqpoll } for pid=6073 comm="syz.7.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.517120][ T5023] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.538018][ T6091] FAULT_INJECTION: forcing a failure. [ 84.538018][ T6091] name failslab, interval 1, probability 0, space 0, times 0 [ 84.550735][ T6091] CPU: 1 UID: 0 PID: 6091 Comm: syz.2.609 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 84.550769][ T6091] Tainted: [W]=WARN [ 84.550785][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.550799][ T6091] Call Trace: [ 84.550807][ T6091] [ 84.550815][ T6091] __dump_stack+0x1d/0x30 [ 84.550840][ T6091] dump_stack_lvl+0x95/0xd0 [ 84.550933][ T6091] dump_stack+0x15/0x1b [ 84.551022][ T6091] should_fail_ex+0x263/0x280 [ 84.551061][ T6091] should_failslab+0x8c/0xb0 [ 84.551124][ T6091] kmem_cache_alloc_noprof+0x68/0x490 [ 84.551151][ T6091] ? security_inode_alloc+0x37/0x100 [ 84.551231][ T6091] security_inode_alloc+0x37/0x100 [ 84.551275][ T6091] inode_init_always_gfp+0x4b7/0x500 [ 84.551298][ T6091] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 84.551351][ T6091] alloc_inode+0x58/0x170 [ 84.551376][ T6091] new_inode+0x1d/0xe0 [ 84.551427][ T6091] shmem_get_inode+0x246/0x750 [ 84.551463][ T6091] shmem_mknod+0x44/0x170 [ 84.551531][ T6091] shmem_mkdir+0x33/0x70 [ 84.551552][ T6091] vfs_mkdir+0x510/0x560 [ 84.551572][ T6091] do_mkdirat+0x133/0x3b0 [ 84.551653][ T6091] __x64_sys_mkdir+0x42/0x50 [ 84.551685][ T6091] x64_sys_call+0x2f32/0x3000 [ 84.551718][ T6091] do_syscall_64+0xc0/0x2a0 [ 84.551794][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.551823][ T6091] RIP: 0033:0x7f7687e9aeb9 [ 84.551843][ T6091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.551867][ T6091] RSP: 002b:00007f76868f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 84.551957][ T6091] RAX: ffffffffffffffda RBX: 00007f7688115fa0 RCX: 00007f7687e9aeb9 [ 84.552040][ T6091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 84.552056][ T6091] RBP: 00007f76868f7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.552072][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.552084][ T6091] R13: 00007f7688116038 R14: 00007f7688115fa0 R15: 00007ffc87979c78 [ 84.552103][ T6091] [ 85.254102][ T6100] __nla_validate_parse: 1 callbacks suppressed [ 85.254117][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'. [ 85.682892][ T29] audit: type=1400 audit(2000000029.370:1064): avc: denied { read } for pid=6112 comm="syz.2.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.747969][ T29] audit: type=1400 audit(2000000029.440:1065): avc: granted { setsecparam } for pid=6119 comm="syz.3.615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 85.833052][ T6124] netlink: 'syz.7.619': attribute type 1 has an invalid length. [ 85.834865][ T6125] netlink: 'syz.7.619': attribute type 1 has an invalid length. [ 85.842759][ T29] audit: type=1326 audit(2000000029.520:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.7.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc679aeb9 code=0x7ffc0000 [ 85.871794][ T29] audit: type=1326 audit(2000000029.520:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.7.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc679aeb9 code=0x7ffc0000 [ 85.895261][ T29] audit: type=1326 audit(2000000029.520:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.7.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc679aeb9 code=0x7ffc0000 [ 85.918670][ T29] audit: type=1326 audit(2000000029.520:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.7.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc679aeb9 code=0x7ffc0000 [ 85.942044][ T29] audit: type=1326 audit(2000000029.520:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.7.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bc679aeb9 code=0x7ffc0000 [ 85.965427][ T29] audit: type=1326 audit(2000000029.520:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.7.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc679aeb9 code=0x7ffc0000 [ 85.988761][ T29] audit: type=1326 audit(2000000029.520:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.7.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc679aeb9 code=0x7ffc0000 [ 86.012176][ T29] audit: type=1326 audit(2000000029.520:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.7.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc679aeb9 code=0x7ffc0000 [ 86.035990][ T29] audit: type=1326 audit(2000000029.520:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.7.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2bc679aeb9 code=0x7ffc0000 [ 86.059344][ T29] audit: type=1326 audit(2000000029.520:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.7.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc679aeb9 code=0x7ffc0000 [ 86.197070][ T6130] netlink: 'syz.2.621': attribute type 10 has an invalid length. [ 86.205002][ T6130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.621'. [ 86.215339][ T6134] netlink: 'syz.7.622': attribute type 1 has an invalid length. [ 86.248993][ T6130] vlan0: entered promiscuous mode [ 86.255138][ T6130] vlan0: entered allmulticast mode [ 86.260397][ T6130] veth0_vlan: entered allmulticast mode [ 86.276233][ T6137] delete_channel: no stack [ 86.280832][ T6137] delete_channel: no stack [ 86.282246][ T6130] bridge0: port 3(vlan0) entered blocking state [ 86.292351][ T6130] bridge0: port 3(vlan0) entered disabled state [ 86.315568][ T6130] bridge0: port 3(vlan0) entered blocking state [ 86.322007][ T6130] bridge0: port 3(vlan0) entered forwarding state [ 86.413639][ T6144] ------------[ cut here ]------------ [ 86.419178][ T6144] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfff80000, 0xfffffffffff801ff] s64=[0x0, 0xfffffffffff801ff] u32=[0xfff800f1, 0x2] s32=[0x0, 0xfff801ff] var_off=(0xfff80000, 0xffffffff000003ff) [ 86.442150][ T6144] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.5.624/6144 [ 86.453170][ T6144] Modules linked in: [ 86.457303][ T6144] CPU: 1 UID: 0 PID: 6144 Comm: syz.5.624 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.469633][ T6144] Tainted: [W]=WARN [ 86.473484][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.483676][ T6144] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 86.489975][ T6144] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 86.510318][ T6144] RSP: 0018:ffffc90000ebb388 EFLAGS: 00010246 [ 86.516482][ T6144] RAX: ffff88810d1e5d10 RBX: 00000000fff801ff RCX: 00000000fff80000 [ 86.524925][ T6144] RDX: ffffffff867f0650 RSI: ffffffff867c51e1 RDI: ffffffff86fb96f0 [ 86.532910][ T6144] RBP: ffff88810adc2350 R08: fffffffffff801ff R09: 0000000000000000 [ 86.541656][ T6144] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88810adc2310 [ 86.549796][ T6144] R13: 00000000fff80000 R14: ffff88810adc235c R15: ffff88810adc2348 [ 86.557811][ T6144] FS: 00007fc87f4266c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 86.567618][ T6144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.574293][ T6144] CR2: 00007fc87f425ff8 CR3: 000000012427a000 CR4: 00000000003506f0 [ 86.582295][ T6144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.590372][ T6144] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 86.599060][ T6144] Call Trace: [ 86.602371][ T6144] [ 86.605453][ T6144] reg_set_min_max+0x21c/0x260 [ 86.606371][ T6142] netlink: 'syz.5.624': attribute type 58 has an invalid length. [ 86.610256][ T6144] check_cond_jmp_op+0x1367/0x1a80 [ 86.623136][ T6144] do_check+0x440c/0x9060 [ 86.628373][ T6144] ? __memcg_slab_post_alloc_hook+0x44a/0x530 [ 86.634544][ T6144] do_check_common+0xd0f/0x1630 [ 86.639473][ T6144] bpf_check+0x2f6d/0xc7e0 [ 86.643986][ T6144] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 86.650036][ T6144] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 86.656388][ T6144] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 86.662405][ T6144] ? pcpu_block_refresh_hint+0x10b/0x170 [ 86.668146][ T6144] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 86.674335][ T6144] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 86.680541][ T6144] ? css_rstat_updated+0xbb/0x280 [ 86.686483][ T6144] ? mod_memcg_state+0x182/0x260 [ 86.691505][ T6144] ? __rcu_read_unlock+0x4e/0x70 [ 86.696731][ T6144] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 86.702721][ T6144] ? pcpu_alloc_noprof+0xb08/0x1010 [ 86.708000][ T6144] ? should_fail_ex+0x30/0x280 [ 86.712901][ T6144] ? __kmalloc_noprof+0x2a3/0x580 [ 86.718803][ T6144] ? security_bpf_prog_load+0x60/0x140 [ 86.724364][ T6144] ? selinux_bpf_prog_load+0xac/0xd0 [ 86.729714][ T6144] ? security_bpf_prog_load+0x9e/0x140 [ 86.735306][ T6144] bpf_prog_load+0xf76/0x1140 [ 86.740097][ T6144] ? security_bpf+0x2b/0x90 [ 86.745325][ T6144] __sys_bpf+0x469/0x7b0 [ 86.749643][ T6144] __x64_sys_bpf+0x41/0x50 [ 86.754138][ T6144] x64_sys_call+0x28e1/0x3000 [ 86.758860][ T6144] do_syscall_64+0xc0/0x2a0 [ 86.763482][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.769561][ T6144] RIP: 0033:0x7fc8809eaeb9 [ 86.774795][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.774923][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 86.804176][ T6144] RSP: 002b:00007fc87f426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.812640][ T6144] RAX: ffffffffffffffda RBX: 00007fc880c66090 RCX: 00007fc8809eaeb9 [ 86.820671][ T6144] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 86.828703][ T6144] RBP: 00007fc880a58c1f R08: 0000000000000000 R09: 0000000000000000 [ 86.837380][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.845409][ T6144] R13: 00007fc880c66128 R14: 00007fc880c66090 R15: 00007fff88e6f5f8 [ 86.853433][ T6144] [ 86.856466][ T6144] ---[ end trace 0000000000000000 ]--- [ 87.324105][ T6148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.626'. [ 87.390917][ T6148] loop2: detected capacity change from 0 to 1024 [ 87.397878][ T6148] EXT4-fs: Ignoring removed orlov option [ 87.404216][ T6148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.445700][ T6148] ext4: Unknown parameter 'subj_role' [ 87.593046][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.637'. [ 87.675630][ T6194] 9p: Bad value for 'wfdno' [ 87.711591][ T6194] 9p: Bad value for 'wfdno' [ 87.736433][ T6186] vlan2: entered promiscuous mode [ 87.870554][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.5.643'. [ 87.979760][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.7.642'. [ 88.050292][ T6210] loop7: detected capacity change from 0 to 1024 [ 88.302552][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.5.643'. [ 88.610838][ T2999] SELinux: Invalid class 0 [ 88.615726][ T2999] ------------[ cut here ]------------ [ 88.618949][ T6225] tmpfs: Bad value for 'mpol' [ 88.621214][ T2999] WARNING: security/selinux/avc.c:761 at slow_avc_audit+0x177/0x190, CPU#0: udevd/2999 [ 88.635592][ T2999] Modules linked in: [ 88.639517][ T2999] CPU: 0 UID: 0 PID: 2999 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.650431][ T2999] Tainted: [W]=WARN [ 88.654281][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.664429][ T2999] RIP: 0010:slow_avc_audit+0x177/0x190 [ 88.669988][ T2999] Code: c0 65 48 8b 0d ea ea 33 07 48 3b 4c 24 48 75 24 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 50 58 b8 03 cc e8 5a 1a 81 ff 90 <0f> 0b 90 b8 ea ff ff ff eb cd e8 da 05 b7 03 66 2e 0f 1f 84 00 00 [ 88.689765][ T2999] RSP: 0018:ffffc900011c7830 EFLAGS: 00010293 [ 88.689785][ T2999] RAX: ffffffff81d7e556 RBX: 000000000000ff9e RCX: ffff8881045f9080 [ 88.689817][ T2999] RDX: 0000000000000000 RSI: 000000000000ff9e RDI: 000000000000ff9f [ 88.689830][ T2999] RBP: 0000000020000000 R08: 0001c900011c7847 R09: 0000000000000000 [ 88.689845][ T2999] R10: ffffc900011c7858 R11: 0001c900011c7858 R12: 000000000000002d [ 88.689865][ T2999] R13: 0000000000000000 R14: ffffc900011c7858 R15: 0000000020000000 [ 88.689885][ T2999] FS: 00007f41f161a880(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 88.689910][ T2999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.689966][ T2999] CR2: 00007fc881798060 CR3: 0000000105c4a000 CR4: 00000000003506f0 [ 88.689984][ T2999] DR0: 00000000000000d4 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.689997][ T2999] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 88.690013][ T2999] Call Trace: [ 88.690022][ T2999] [ 88.690039][ T2999] audit_inode_permission+0x119/0x160 [ 88.690105][ T2999] selinux_inode_permission+0x723/0x7d0 [ 88.690158][ T2999] security_inode_permission+0x69/0xa0 [ 88.690187][ T2999] inode_permission+0x20e/0x3c0 [ 88.690248][ T2999] link_path_walk+0x779/0xe30 [ 88.690287][ T2999] path_lookupat+0x8c/0x500 [ 88.690328][ T2999] filename_lookup+0x190/0x390 [ 88.690445][ T2999] vfs_statx+0x96/0x170 [ 88.690482][ T2999] vfs_fstatat+0x115/0x170 [ 88.690512][ T2999] __se_sys_newfstatat+0x55/0x3e0 [ 88.690583][ T2999] ? putname+0x90/0x100 [ 88.690616][ T2999] ? do_readlinkat+0x238/0x340 [ 88.690671][ T2999] __x64_sys_newfstatat+0x55/0x70 [ 88.690761][ T2999] x64_sys_call+0x111f/0x3000 [ 88.690808][ T2999] do_syscall_64+0xc0/0x2a0 [ 88.690847][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.690944][ T2999] RIP: 0033:0x7f41f1772b0a [ 88.690963][ T2999] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 88.690986][ T2999] RSP: 002b:00007ffd8f7bfa08 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 88.691066][ T2999] RAX: ffffffffffffffda RBX: 00007ffd8f7bfea0 RCX: 00007f41f1772b0a [ 88.691080][ T2999] RDX: 00007ffd8f7bfa10 RSI: 00007ffd8f7bfea0 RDI: 00000000ffffff9c [ 88.691093][ T2999] RBP: 0000556baec7e2c0 R08: 0000000000000000 R09: 0000000000000000 [ 88.691106][ T2999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8f7bfaa0 [ 88.691118][ T2999] R13: 0000556b74b15100 R14: 0000000000000007 R15: 00007ffd8f7c13a0 [ 88.691222][ T2999] [ 88.691231][ T2999] ---[ end trace 0000000000000000 ]--- [ 88.697334][ T6227] netlink: 'syz.5.648': attribute type 9 has an invalid length. [ 88.738475][ T6225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.647'. [ 88.772814][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.7.649'. [ 89.020259][ T6244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.020354][ T6244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.025569][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.026375][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.029186][ T6244] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.086207][ T6244] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.139593][ T6244] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.397206][ T6244] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.481922][ T3348] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.496320][ T6254] netlink: 'syz.5.657': attribute type 1 has an invalid length. [ 89.505171][ T3348] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.530055][ T3348] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.557439][ T3348] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.259079][ T6282] loop7: detected capacity change from 0 to 8192 [ 90.296467][ T6282] FAT-fs (loop7): bogus number of directory entries (32769) [ 90.303908][ T6282] FAT-fs (loop7): Can't find a valid FAT filesystem [ 90.471742][ T6298] loop2: detected capacity change from 0 to 1024 [ 90.496857][ T6300] /dev/loop5: Can't lookup blockdev [ 90.513213][ T6298] EXT4-fs: Ignoring removed bh option [ 90.537472][ T6298] ext4: Unknown parameter 'subj_' [ 90.721812][ T6316] loop2: detected capacity change from 0 to 764 [ 90.894175][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 90.894251][ T29] audit: type=1400 audit(2000000034.590:1181): avc: denied { shutdown } for pid=6322 comm="syz.7.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.004291][ T6327] netlink: 'syz.3.683': attribute type 10 has an invalid length. [ 91.015153][ T29] audit: type=1400 audit(2000000034.590:1182): avc: denied { execmem } for pid=6321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 91.035513][ T29] audit: type=1400 audit(2000000034.620:1183): avc: denied { getopt } for pid=6322 comm="syz.7.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.054981][ T29] audit: type=1400 audit(2000000034.620:1184): avc: denied { connect } for pid=6322 comm="syz.7.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.075407][ T29] audit: type=1400 audit(2000000034.620:1185): avc: denied { name_connect } for pid=6322 comm="syz.7.682" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 91.097489][ T29] audit: type=1400 audit(2000000034.630:1186): avc: denied { write } for pid=6322 comm="syz.7.682" laddr=fe80::10 lport=40454 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 91.122505][ T29] audit: type=1400 audit(2000000034.630:1187): avc: denied { getopt } for pid=6322 comm="syz.7.682" laddr=fe80::10 lport=40454 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 91.175580][ T29] audit: type=1400 audit(2000000034.710:1188): avc: denied { mounton } for pid=6328 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 91.197325][ T29] audit: type=1400 audit(2000000034.710:1189): avc: denied { module_request } for pid=6328 comm="syz-executor" kmod="netdev-nr8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 91.219837][ T29] audit: type=1400 audit(2000000034.750:1190): avc: denied { create } for pid=6326 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 91.307157][ T6342] netlink: 'syz.3.686': attribute type 21 has an invalid length. [ 91.635131][ T6361] __nla_validate_parse: 1 callbacks suppressed [ 91.635150][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 91.722372][ T3038] SELinux: Invalid class 0 [ 91.728086][ T3038] ------------[ cut here ]------------ [ 91.733633][ T3038] WARNING: security/selinux/avc.c:761 at slow_avc_audit+0x177/0x190, CPU#1: dhcpcd/3038 [ 91.743533][ T3038] Modules linked in: [ 91.747462][ T3038] CPU: 1 UID: 0 PID: 3038 Comm: dhcpcd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 91.759303][ T3038] Tainted: [W]=WARN [ 91.763172][ T3038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.773415][ T3038] RIP: 0010:slow_avc_audit+0x177/0x190 [ 91.778926][ T3038] Code: c0 65 48 8b 0d ea ea 33 07 48 3b 4c 24 48 75 24 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 50 58 b8 03 cc e8 5a 1a 81 ff 90 <0f> 0b 90 b8 ea ff ff ff eb cd e8 da 05 b7 03 66 2e 0f 1f 84 00 00 [ 91.799328][ T3038] RSP: 0018:ffffc90001247830 EFLAGS: 00010293 [ 91.805508][ T3038] RAX: ffffffff81d7e556 RBX: 000000000000ff9e RCX: ffff8881045ea100 [ 91.813543][ T3038] RDX: 0000000000000000 RSI: 000000000000ff9e RDI: 000000000000ff9f [ 91.821545][ T3038] RBP: 0000000020000000 R08: 0001c90001247847 R09: 0000000000000000 [ 91.830300][ T3038] R10: ffffc90001247858 R11: 0001c90001247858 R12: 000000000000002d [ 91.838473][ T3038] R13: 0000000000000000 R14: ffffc90001247858 R15: 0000000020000000 [ 91.846519][ T3038] FS: 00007f82c07e0740(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 91.856241][ T3038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.862859][ T3038] CR2: 0000561b33bf9000 CR3: 0000000105c52000 CR4: 00000000003506f0 [ 91.870961][ T3038] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.878995][ T3038] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 91.887732][ T3038] Call Trace: [ 91.891061][ T3038] [ 91.894140][ T3038] audit_inode_permission+0x119/0x160 [ 91.899602][ T3038] selinux_inode_permission+0x723/0x7d0 [ 91.905251][ T3038] security_inode_permission+0x69/0xa0 [ 91.910810][ T3038] inode_permission+0x20e/0x3c0 [ 91.916473][ T3038] link_path_walk+0x779/0xe30 [ 91.921211][ T3038] path_lookupat+0x8c/0x500 [ 91.925842][ T3038] filename_lookup+0x190/0x390 [ 91.930657][ T3038] ? __pfx_kfree_link+0x10/0x10 [ 91.935555][ T3038] vfs_statx+0x96/0x170 [ 91.939820][ T3038] vfs_fstatat+0x115/0x170 [ 91.945018][ T3038] __se_sys_newfstatat+0x55/0x3e0 [ 91.950204][ T3038] ? ksys_read+0x161/0x1a0 [ 91.954955][ T3038] __x64_sys_newfstatat+0x55/0x70 [ 91.960042][ T3038] x64_sys_call+0x111f/0x3000 [ 91.964882][ T3038] do_syscall_64+0xc0/0x2a0 [ 91.969445][ T3038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.976107][ T3038] RIP: 0033:0x7f82c08d4b0a [ 91.980555][ T3038] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 92.000364][ T3038] RSP: 002b:00007fff9a7e7538 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 92.009601][ T3038] RAX: ffffffffffffffda RBX: 00007f82c07dd01e RCX: 00007f82c08d4b0a [ 92.017639][ T3038] RDX: 00007fff9a7e7550 RSI: 00007fff9a7e77e0 RDI: 00000000ffffff9c [ 92.025714][ T3038] RBP: 00007fff9a7e77e0 R08: 00007f82c07d03cc R09: 00007fff9a7f7e30 [ 92.034408][ T3038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9a7f7e30 [ 92.042452][ T3038] R13: 0000561b33c128b0 R14: 00007fff9a7e7550 R15: 00007fff9a7f7da0 [ 92.050491][ T3038] [ 92.053561][ T3038] ---[ end trace 0000000000000000 ]--- [ 92.296766][ T3697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.319307][ T3697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.341923][ T3697] bond0 (unregistering): Released all slaves [ 92.370685][ T3697] bond1 (unregistering): Released all slaves [ 92.481378][ T3697] macvlan1: left promiscuous mode [ 92.495767][ T3697] hsr_slave_0: left promiscuous mode [ 92.522696][ T3697] hsr_slave_1: left promiscuous mode [ 92.528693][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.536374][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.683848][ T6380] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6380 comm=syz.3.696 [ 93.056449][ T3697] team0 (unregistering): Port device team_slave_1 removed [ 93.066338][ T3697] team0 (unregistering): Port device team_slave_0 removed [ 93.176264][ T6328] chnl_net:caif_netlink_parms(): no params data found [ 93.325223][ T6390] dummy0: entered promiscuous mode [ 93.330724][ T6390] vlan2: entered promiscuous mode [ 93.369868][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.377052][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.408570][ T6328] bridge_slave_0: entered allmulticast mode [ 93.433982][ T6328] bridge_slave_0: entered promiscuous mode [ 93.456894][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.464063][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.524016][ T6328] bridge_slave_1: entered allmulticast mode [ 93.530630][ T6328] bridge_slave_1: entered promiscuous mode [ 93.562967][ T6328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.604532][ T6328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.666749][ T6328] team0: Port device team_slave_0 added [ 93.685546][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.703'. [ 93.724729][ T6328] team0: Port device team_slave_1 added [ 93.788231][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.796009][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.822081][ T6328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.924759][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.931770][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.958483][ T6328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.113994][ T6438] cgroup: fork rejected by pids controller in /syz5 [ 94.134106][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.7.710'. [ 94.143023][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.7.710'. [ 94.261074][ T6328] hsr_slave_0: entered promiscuous mode [ 94.302015][ T6328] hsr_slave_1: entered promiscuous mode [ 94.341454][ T6328] debugfs: 'hsr0' already exists in 'hsr' [ 94.347984][ T6328] Cannot create hsr debugfs directory [ 94.789850][ T6328] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 94.814008][ T6328] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 94.826239][ T6328] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 94.845759][ T6328] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 94.936422][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.712'. [ 94.985251][ T6328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.007985][ T6328] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.046480][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.053660][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.099170][ T4004] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.106341][ T4004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.138169][ T6328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.247442][ T6548] netlink: 'syz.5.718': attribute type 6 has an invalid length. [ 95.293867][ T6548] geneve2: entered promiscuous mode [ 95.313166][ T6328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.425759][ T6567] vlan2: entered promiscuous mode [ 95.498376][ T6573] netlink: 'syz.5.722': attribute type 1 has an invalid length. [ 95.515486][ T6573] netlink: 48 bytes leftover after parsing attributes in process `syz.5.722'. [ 95.529181][ T6328] veth0_vlan: entered promiscuous mode [ 95.541690][ T6328] veth1_vlan: entered promiscuous mode [ 95.550212][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.722'. [ 95.562453][ T6573] bond1 (unregistering): Released all slaves [ 95.580256][ T6328] veth0_macvtap: entered promiscuous mode [ 95.588478][ T6328] veth1_macvtap: entered promiscuous mode [ 95.601584][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.614716][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.626151][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.654823][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.676277][ T37] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.695407][ T6579] loop3: detected capacity change from 0 to 512 [ 95.709584][ T37] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.721662][ T6579] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.732793][ T6582] tc_dump_action: action bad kind [ 95.743356][ T6579] EXT4-fs (loop3): 1 truncate cleaned up [ 95.755692][ T6579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.776125][ T6579] EXT4-fs error (device loop3): __ext4_iget:5426: inode #12: block 2: comm syz.3.723: invalid block [ 95.838180][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.943448][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 95.943507][ T29] audit: type=1400 audit(2000000039.600:1262): avc: denied { append } for pid=6594 comm="syz.3.727" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.025842][ T29] audit: type=1326 audit(2000000039.690:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291687aeb9 code=0x7ffc0000 [ 96.050882][ T29] audit: type=1326 audit(2000000039.690:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f291687aeb9 code=0x7ffc0000 [ 96.074999][ T29] audit: type=1326 audit(2000000039.690:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291687aeb9 code=0x7ffc0000 [ 96.098366][ T29] audit: type=1326 audit(2000000039.690:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.3.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291687aeb9 code=0x7ffc0000 [ 96.133524][ T6595] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.141039][ T6595] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.332082][ T29] audit: type=1400 audit(2000000040.010:1267): avc: denied { mount } for pid=6607 comm="syz.7.732" name="/" dev="configfs" ino=2118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 96.355507][ T29] audit: type=1400 audit(2000000040.010:1268): avc: denied { search } for pid=6607 comm="syz.7.732" name="/" dev="configfs" ino=2118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.377640][ T29] audit: type=1400 audit(2000000040.010:1269): avc: denied { read open } for pid=6607 comm="syz.7.732" path="/" dev="configfs" ino=2118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.490969][ T6617] netlink: 'syz.7.735': attribute type 1 has an invalid length. [ 96.529092][ T6617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.540370][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.735'. [ 96.549936][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.735'. [ 96.564031][ T29] audit: type=1326 audit(2000000040.180:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6613 comm="syz.2.733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7687e9aeb9 code=0x0 [ 96.709033][ T29] audit: type=1400 audit(2000000040.340:1271): avc: denied { setopt } for pid=6620 comm="syz.7.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.082204][ T6642] vlan2: entered promiscuous mode [ 97.765536][ T6661] 9p: Bad value for 'rfdno' [ 98.739823][ T6707] dummy0: entered promiscuous mode [ 98.745280][ T6707] vlan2: entered promiscuous mode [ 98.771175][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.763'. [ 98.844144][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.763'. [ 98.949613][ T6718] netlink: 11774 bytes leftover after parsing attributes in process `syz.5.766'. [ 99.159581][ T6736] netlink: 'syz.2.770': attribute type 5 has an invalid length. [ 99.204199][ T6730] netlink: 'syz.2.770': attribute type 5 has an invalid length. [ 99.224134][ T6731] loop2: detected capacity change from 0 to 256 [ 99.239833][ T6745] netlink: 168 bytes leftover after parsing attributes in process `syz.5.775'. [ 99.418170][ T6773] netlink: 'syz.7.782': attribute type 4 has an invalid length. [ 99.436352][ T6773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6773 comm=syz.7.782 [ 99.467908][ T6783] dummy0: entered promiscuous mode [ 99.473155][ T6783] vlan2: entered promiscuous mode [ 99.621956][ T6804] loop2: detected capacity change from 0 to 128 [ 99.652440][ T6804] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 99.693074][ T6816] loop7: detected capacity change from 0 to 256 [ 99.709853][ T6804] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.826001][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.569452][ T6863] loop7: detected capacity change from 0 to 512 [ 100.597692][ T6863] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 100.645354][ T6863] EXT4-fs (loop7): invalid journal inode [ 100.681813][ T6870] loop8: detected capacity change from 0 to 512 [ 100.687293][ T6863] EXT4-fs (loop7): can't get journal size [ 100.721516][ T6870] EXT4-fs: dax option not supported [ 100.751813][ T6863] EXT4-fs (loop7): 1 truncate cleaned up [ 100.764388][ T6863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.787254][ T6876] loop3: detected capacity change from 0 to 1024 [ 100.824515][ T6876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.899154][ T6876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.980197][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 100.980217][ T29] audit: type=1400 audit(2000000044.670:1463): avc: denied { ioctl } for pid=6875 comm="syz.3.807" path="/155/file1/file1" dev="loop3" ino=15 ioctlcmd=0x5350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.040797][ T5023] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.084406][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.101769][ T6894] vlan2: entered promiscuous mode [ 101.147120][ T6900] xt_NFQUEUE: number of total queues is 0 [ 101.157128][ T29] audit: type=1400 audit(2000000044.850:1464): avc: denied { connect } for pid=6897 comm="syz.7.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.245886][ T6910] loop7: detected capacity change from 0 to 128 [ 101.265460][ T6910] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.313110][ T29] audit: type=1400 audit(2000000045.000:1465): avc: denied { create } for pid=6914 comm="syz.2.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 101.389131][ T6910] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.442403][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.7.816'. [ 101.460812][ T6924] SELinux: Invalid class 0 [ 101.461929][ T6923] SELinux: Invalid class 0 [ 101.465698][ T6924] ------------[ cut here ]------------ [ 101.465708][ T6924] WARNING: security/selinux/avc.c:761 at slow_avc_audit+0x177/0x190, CPU#0: syz.3.820/6924 [ 101.465761][ T6924] Modules linked in: [ 101.465858][ T6924] CPU: 0 UID: 0 PID: 6924 Comm: syz.3.820 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.465926][ T6924] Tainted: [W]=WARN [ 101.465934][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.465949][ T6924] RIP: 0010:slow_avc_audit+0x177/0x190 [ 101.471081][ T6923] ------------[ cut here ]------------ [ 101.477042][ T6924] Code: c0 65 48 8b 0d ea ea 33 07 48 3b 4c 24 48 75 24 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 50 58 b8 03 cc e8 5a 1a 81 ff 90 <0f> 0b 90 b8 ea ff ff ff eb cd e8 da 05 b7 03 66 2e 0f 1f 84 00 00 [ 101.486084][ T6923] WARNING: security/selinux/avc.c:761 at slow_avc_audit+0x177/0x190, CPU#1: syz.3.820/6923 [ 101.486187][ T6923] Modules linked in: [ 101.486206][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.3.820 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.486242][ T6923] Tainted: [W]=WARN [ 101.486272][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.486286][ T6923] RIP: 0010:slow_avc_audit+0x177/0x190 [ 101.486324][ T6923] Code: c0 65 48 8b 0d ea ea 33 07 48 3b 4c 24 48 75 24 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 50 58 b8 03 cc e8 5a 1a 81 ff 90 <0f> 0b 90 b8 ea ff ff ff eb cd e8 da 05 b7 03 66 2e 0f 1f 84 00 00 [ 101.486348][ T6923] RSP: 0018:ffffc900021b7920 EFLAGS: 00010293 [ 101.486369][ T6923] RAX: ffffffff81d7e556 RBX: 000000000000ff9e RCX: ffff88810a5a6300 [ 101.486428][ T6923] RDX: 0000000000000000 RSI: 000000000000ff9e RDI: 000000000000ff9f [ 101.486444][ T6923] RBP: 0000000020000000 R08: 0001c900021b7937 R09: 0000000000000000 [ 101.486461][ T6923] R10: ffffc900021b7948 R11: 0001c900021b7948 R12: 000000000000002d [ 101.486480][ T6923] R13: 0000000000000000 R14: ffffc900021b7948 R15: 0000000020000000 [ 101.486498][ T6923] FS: 00007f29152d76c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 101.486521][ T6923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.486538][ T6923] CR2: 00007f01aec80000 CR3: 0000000126536000 CR4: 00000000003506f0 [ 101.486665][ T6923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.486681][ T6923] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 101.486698][ T6923] Call Trace: [ 101.486706][ T6923] [ 101.486720][ T6923] audit_inode_permission+0x119/0x160 [ 101.486759][ T6923] selinux_inode_permission+0x723/0x7d0 [ 101.486795][ T6923] security_inode_permission+0x69/0xa0 [ 101.486851][ T6923] inode_permission+0x20e/0x3c0 [ 101.490743][ T6924] RSP: 0018:ffffc900021af920 EFLAGS: 00010293 [ 101.503570][ T6923] link_path_walk+0x779/0xe30 [ 101.505809][ T6924] [ 101.515852][ T6923] path_openat+0x1bf/0x23c0 [ 101.515894][ T6923] ? __account_obj_stock+0x211/0x350 [ 101.515982][ T6923] ? __rcu_read_unlock+0x4e/0x70 [ 101.516020][ T6923] ? kmem_cache_alloc_noprof+0x23f/0x490 [ 101.516086][ T6923] ? security_file_alloc+0x32/0xf0 [ 101.516110][ T6923] do_filp_open+0x15d/0x280 [ 101.516198][ T6923] do_sys_openat2+0xa6/0x150 [ 101.516232][ T6923] __x64_sys_openat+0xf2/0x120 [ 101.516312][ T6923] x64_sys_call+0x2b07/0x3000 [ 101.516344][ T6923] do_syscall_64+0xc0/0x2a0 [ 101.516382][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.516408][ T6923] RIP: 0033:0x7f291683b78e [ 101.516427][ T6923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.516449][ T6923] RSP: 002b:00007f29152d69b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.521911][ T6924] RAX: ffffffff81d7e556 RBX: 000000000000ff9e RCX: ffff888103b03180 [ 101.528985][ T6923] RAX: ffffffffffffffda RBX: 00007f29152d76c0 RCX: 00007f291683b78e [ 101.548517][ T6924] RDX: 0000000000000000 RSI: 000000000000ff9e RDI: 000000000000ff9f [ 101.558776][ T6923] RDX: 0000000000080001 RSI: 00007f29168e5448 RDI: ffffffffffffff9c [ 101.561947][ T6924] RBP: 0000000020000000 R08: 0001c900021af937 R09: 0000000000000000 [ 101.573241][ T6923] RBP: 00007f29168e5448 R08: 0000000000000000 R09: 0000000000000000 [ 101.573307][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 101.573322][ T6923] R13: 00007f29152d6a90 R14: 00007f2916af5fa0 R15: 00007ffebfb0b0c8 [ 101.573347][ T6923] [ 101.573354][ T6923] ---[ end trace 0000000000000000 ]--- [ 101.585873][ T6927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6927 comm=syz.7.816 [ 101.589036][ T6924] R10: ffffc900021af948 R11: 0001c900021af948 R12: 000000000000002d [ 101.845016][ T29] audit: type=1400 audit(2000000045.280:1466): avc: denied { create } for pid=6909 comm="syz.7.816" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 101.848398][ T6924] R13: 0000000000000000 R14: ffffc900021af948 R15: 0000000020000000 [ 101.978466][ T6924] FS: 00007f29152b66c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 101.987558][ T6924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.994877][ T6924] CR2: 00007f29176235a8 CR3: 0000000126536000 CR4: 00000000003506f0 [ 102.002895][ T6924] DR0: 00000000000000d4 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.010968][ T6924] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 102.019050][ T6924] Call Trace: [ 102.022363][ T6924] [ 102.026165][ T6924] audit_inode_permission+0x119/0x160 [ 102.031597][ T6924] selinux_inode_permission+0x723/0x7d0 [ 102.037236][ T6924] security_inode_permission+0x69/0xa0 [ 102.042722][ T6924] inode_permission+0x20e/0x3c0 [ 102.047737][ T6924] link_path_walk+0x779/0xe30 [ 102.052456][ T6924] path_openat+0x1bf/0x23c0 [ 102.057853][ T6924] ? __rcu_read_unlock+0x4e/0x70 [ 102.062842][ T6924] do_filp_open+0x15d/0x280 [ 102.067464][ T6924] do_sys_openat2+0xa6/0x150 [ 102.072149][ T6924] __x64_sys_openat+0xf2/0x120 [ 102.077006][ T6924] x64_sys_call+0x2b07/0x3000 [ 102.081721][ T6924] do_syscall_64+0xc0/0x2a0 [ 102.087046][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.092982][ T6924] RIP: 0033:0x7f291683b78e [ 102.097465][ T6924] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.117853][ T6924] RSP: 002b:00007f29152b59b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.126374][ T6924] RAX: ffffffffffffffda RBX: 00007f29152b66c0 RCX: 00007f291683b78e [ 102.134489][ T6924] RDX: 0000000000080001 RSI: 00007f29168e5448 RDI: ffffffffffffff9c [ 102.142482][ T6924] RBP: 00007f29168e5448 R08: 0000000000000000 R09: 0000000000000000 [ 102.151225][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 102.159386][ T6924] R13: 00007f29152b5a90 R14: 00007f2916af6090 R15: 00007ffebfb0b0c8 [ 102.167428][ T6924] [ 102.170464][ T6924] ---[ end trace 0000000000000000 ]--- [ 102.256216][ T5023] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.314086][ T29] audit: type=1400 audit(2000000046.000:1467): avc: denied { execute_no_trans } for pid=6937 comm="syz.5.824" path="/171/file1" dev="tmpfs" ino=913 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.425737][ T29] audit: type=1400 audit(2000000046.070:1468): avc: denied { ioctl } for pid=6945 comm="syz.3.827" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17152 ioctlcmd=0x1280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.658380][ T6978] vlan2: entered promiscuous mode [ 102.709142][ T29] audit: type=1326 audit(2000000046.400:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.5.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8809eaeb9 code=0x7ffc0000 [ 102.756913][ T29] audit: type=1326 audit(2000000046.430:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.5.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8809eaeb9 code=0x7ffc0000 [ 102.781157][ T29] audit: type=1326 audit(2000000046.430:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.5.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8809eaeb9 code=0x7ffc0000 [ 102.805417][ T29] audit: type=1326 audit(2000000046.430:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.5.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fc8809eaeb9 code=0x7ffc0000 [ 102.859016][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.838'. [ 102.872544][ T6986] macvlan3: entered promiscuous mode [ 102.877939][ T6986] bond0: entered promiscuous mode [ 102.883680][ T6986] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 102.917211][ T6986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6986 comm=syz.5.838 [ 103.265054][ T6998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.287803][ T6998] vlan2: entered allmulticast mode [ 103.293022][ T6998] bond1: entered allmulticast mode [ 103.394433][ T7004] loop3: detected capacity change from 0 to 1024 [ 103.444365][ T7004] EXT4-fs: test_dummy_encryption option not supported [ 103.505175][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 103.534760][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 103.709928][ T7040] loop8: detected capacity change from 0 to 128 [ 103.729065][ T7040] vfat: Unknown parameter 'xœìÝOh+UÇñ“¾äi› *ø@' [ 103.872643][ T7048] vlan2: entered promiscuous mode [ 104.169466][ T7028] ================================================================== [ 104.177616][ T7028] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 104.185732][ T7028] [ 104.188071][ T7028] write to 0xffff88811aa885e8 of 8 bytes by task 7027 on cpu 0: [ 104.195732][ T7028] filemap_splice_read+0x523/0x780 [ 104.200877][ T7028] splice_direct_to_actor+0x26e/0x670 [ 104.206273][ T7028] do_splice_direct+0x119/0x1a0 [ 104.211142][ T7028] do_sendfile+0x382/0x650 [ 104.215574][ T7028] __x64_sys_sendfile64+0x105/0x150 [ 104.220788][ T7028] x64_sys_call+0x2db1/0x3000 [ 104.225480][ T7028] do_syscall_64+0xc0/0x2a0 [ 104.230019][ T7028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.235934][ T7028] [ 104.238274][ T7028] write to 0xffff88811aa885e8 of 8 bytes by task 7028 on cpu 1: [ 104.245912][ T7028] filemap_splice_read+0x523/0x780 [ 104.251041][ T7028] splice_direct_to_actor+0x26e/0x670 [ 104.256423][ T7028] do_splice_direct+0x119/0x1a0 [ 104.261282][ T7028] do_sendfile+0x382/0x650 [ 104.265750][ T7028] __x64_sys_sendfile64+0x105/0x150 [ 104.270980][ T7028] x64_sys_call+0x2db1/0x3000 [ 104.275678][ T7028] do_syscall_64+0xc0/0x2a0 [ 104.280216][ T7028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.286134][ T7028] [ 104.288469][ T7028] value changed: 0x0000000001a54000 -> 0x0000000001a58000 [ 104.295597][ T7028] [ 104.297929][ T7028] Reported by Kernel Concurrency Sanitizer on: [ 104.304095][ T7028] CPU: 1 UID: 0 PID: 7028 Comm: syz.3.850 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 104.315353][ T7028] Tainted: [W]=WARN [ 104.319163][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.329233][ T7028] ==================================================================