last executing test programs: 10.976247264s ago: executing program 3 (id=11): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xc81, 0x400, 0x43a1bd77, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) socket$inet6(0xa, 0x3, 0x8) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0'}, 0xb) sendmmsg$sock(r2, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @private=0xa010101}, 0x0, 0x3}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="02df65931f58cb1be8000dc8a64e709058ad9f44881e6d021f70eaede8779d57c6f21a374fefb21ecf300bc925667182cdf172463abc5fbc576150065db934a918d68b8a7fd34ff6f9648c1226f86586d323d98cd179b9dc5ecb5ae14e6758b15d87", 0x62}], 0x1}}], 0x1, 0x50) 10.897149939s ago: executing program 3 (id=13): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x3002, 0x10003, 0x80000001, 0x3, 0x6, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0xc5, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffc]}, 0x8, 0x0) readv(r0, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1000000000000048) signalfd4(r0, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) unshare(0x60600) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = semget(0x1, 0x4, 0x39c) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000040)=ANY=[@ANYBLOB='errors&remount-ro,debug,uid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000001,dmask=00000000000000000000005,nodots,nodots,nodots,nodots,allow_utime=00000000000000000000020,allow_utime=00000000000000000000011,dots,nocase,nodots,\x00'], 0x1, 0x23d, &(0x7f0000000a40)="$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") r7 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) 3.294997478s ago: executing program 4 (id=119): r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000000040)=""/191, 0xe4) getdents(r2, 0x0, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x2, 0x80805, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000100)="5644e7afe93a0deaf14d5c181157d192f39f090941c0be0633694781c9859d882e4cfd921358fbc3641396b3f674f41de0d039e45f5e72dffcfb4341e6a712", 0x3f}], 0x2, &(0x7f00000001c0)}, 0x40001) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x84}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 2.942840918s ago: executing program 2 (id=120): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000414, &(0x7f00000000c0)={[{@noblock_validity}, {@journal_ioprio}, {@jqfmt_vfsv1}, {@oldalloc}, {@noquota}, {@grpjquota, 0x2e}, {@auto_da_alloc}, {@usrjquota}, {@grpid}, {@delalloc}], [], 0x2c}, 0x84, 0x4c8, &(0x7f0000000e40)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x159) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0xdd, 0x479c28ea, 0x1, 0x4, 0xb}) 2.568661069s ago: executing program 2 (id=122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.370799059s ago: executing program 2 (id=123): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) 2.370512789s ago: executing program 4 (id=124): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x26b6, &(0x7f0000000100)={0x0, 0x1602, 0x0, 0x80000000, 0x380}, &(0x7f0000000000), &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000024c0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES64], 0x7, 0x71c, &(0x7f0000001d80)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x20d, &(0x7f0000000000)=[{0x4, 0xd, 0x8, 0x7fff}, {0x9000, 0x2, 0x12, 0x8}]}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) 2.289624964s ago: executing program 0 (id=125): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x7, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x4008821) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) syz_emit_ethernet(0x1011, &(0x7f0000002080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@llc_tr={0x11, {@llc={0xfc, 0xdc, 'q', "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"}}}}}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000000, 0x0) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) sendmsg$sock(r3, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0xc, &(0x7f0000000180)=@gcm_256={{0x4e87384c86382d1e}, "479029bc8ce15c02", "18876bb3e7b664850be3dc2ae804c1a9f030d7ccc0cdf931c5a6a5f0c42c936f", "2fe5c6b3", "956d23f66c35054d"}, 0x38) fdatasync(r1) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r0}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r5, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f00000003c0)={0x0}, 0x1) syz_create_resource$binfmt(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = open(&(0x7f0000000040)='.\x00', 0xc00, 0x48) getdents(r6, &(0x7f0000001fc0)=""/180, 0xb4) r7 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) 2.222725627s ago: executing program 4 (id=126): gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x1, 0x28, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x3d8, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_TX_RATES={0x3b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x1}, {0x5}, {0x3, 0xa}, {0x1, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x5}, {0x0, 0x6}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x7}, {0x2, 0x6}, {0x5, 0x5}, {0x0, 0x1}, {0x6}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x6}, {}, {0x0, 0x7}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x6}, {}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x1, 0x4}, {0x1}, {0x1, 0x4}, {0x1, 0xa}, {0x1, 0x8}, {0x6, 0x5}, {0x2, 0x9}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x3, 0x18, 0x48, 0x12, 0xb, 0x4, 0x2, 0x0, 0x24, 0x24, 0x12, 0x60, 0x16, 0x16, 0x30, 0xe, 0x18, 0x4, 0x3, 0x12]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x12, 0xb, 0x12, 0x1a, 0x18, 0x4, 0x6c, 0x1b, 0x2, 0x1b, 0x9, 0x4, 0x2, 0x1b, 0xb, 0x6c, 0x3, 0x16, 0x0, 0x4, 0x36, 0xc, 0x6, 0x0, 0x5, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x1}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0x8}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0x7}, {0x5, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x9}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x6}, {0x7, 0x8}, {0x2, 0x9}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x4}, {0x0, 0xa}, {0x7}, {0x5, 0x8}, {0x4}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x7, 0x2}, {0x3, 0x8}, {0x7}, {0x2, 0x2}, {0x4, 0x4}, {0x1, 0x6}, {0x3, 0x2}, {0x3, 0xa}, {0x3, 0x7}, {0x7}, {0x2, 0x3}, {0x3, 0x8}, {0x7, 0x9}, {0x3, 0x1}, {0x4}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x2}, {}, {0x7}, {0x0, 0x4}, {0x5, 0x6}, {0x3, 0x4}, {0x5, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x3}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x0, 0xfff8, 0x5, 0x9, 0x2, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3154, 0x1, 0x2, 0x3, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x2, 0x18, 0x60, 0x2, 0x6c, 0x16, 0x6c, 0x6, 0x18, 0x48, 0x12, 0x12, 0xf, 0x0, 0x30]}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x3, 0x12, 0x0, 0x12, 0xe49a38175384cfa4, 0x4b9ca9e091cb0424, 0x12, 0x6c, 0x18, 0x1b, 0x5, 0x3, 0x5, 0xc, 0x2, 0x60, 0x9, 0x1, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xa0, 0x401, 0x5, 0x401, 0x2, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x2}, {0x3, 0x9}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0xa}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x1}, {0x6, 0x7}, {0x3, 0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x600, 0x0, 0x24, 0x0, 0x2, 0x1, 0x6, 0xf]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x2}, {0x2, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x9}, {0x5}, {0x6, 0x8}, {0x3, 0x9}, {0x5, 0x5}, {0x5, 0x3}, {0x2}, {0x4, 0x2}, {0x6, 0x2}, {0x7, 0x6}, {0x3, 0x3}, {0x4}, {0x1, 0x3}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x7}, {0x4}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0x3}, {0x2, 0x6}, {0x4, 0x9}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x4}, {0x1, 0xa}, {0x2, 0xb}, {0x4, 0x6}, {0x1, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x0, 0x3, 0x24, 0x1b, 0x4, 0x3, 0x6, 0x2, 0xb, 0x30, 0x16, 0x12, 0x6, 0x36, 0x4, 0x24, 0x36, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x99a, 0x3, 0x8000, 0x3ff, 0x4, 0x5, 0x400, 0x2]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x4, 0xd61, 0x4, 0x7ff, 0x3, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0xff, 0x9, 0x9, 0xffff, 0x9]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x4}, {0x6, 0x5}, {0x1, 0x7}, {0x5, 0xa}, {0x5, 0x3}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x6}, {0x4, 0x2}, {}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x3}, {0x1}, {0x2, 0x4}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x1}, {0x4, 0x5}, {0x4, 0x5}, {0x5}, {0x1, 0x6}, {0x1, 0x7}, {0x7, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x3}, {0x2, 0x7}, {0x4, 0xa}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x1}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x2}, {0x5, 0x6}, {0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x9}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x1}, {0x7}, {0x5, 0x3}, {0x1, 0x1}, {0x7, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x1}, {0x2, 0x4}, {0x6}, {0x3, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x7, 0x7}, {0x0, 0x4}, {0x5, 0x7}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc16f47410aaaeaf9, 0x24, 0x6, 0xc, 0xe, 0x18, 0x9, 0x16, 0x30, 0x30, 0x48, 0xc, 0x60, 0x6, 0x1, 0x24, 0x60, 0x60, 0xc, 0x48, 0x18, 0x6, 0x0, 0x18, 0x6, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xd2e909d5780be921, 0x2, 0x5, 0x1b, 0x60, 0x12, 0x12, 0x24, 0x48, 0x1b, 0x48, 0x30, 0x1, 0xc, 0x0, 0x48, 0xc, 0x16, 0xb, 0x6c, 0x12, 0x30, 0xc, 0x3, 0x12, 0x18]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x9, 0x30, 0xb, 0x1b, 0x36, 0x30, 0x48, 0x2, 0x24, 0x12, 0x12, 0x2574e08e864e9311, 0x4, 0x2, 0x12, 0x9, 0x15, 0x2, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x140, 0x5, 0xc82, 0xb, 0x0, 0x1, 0x31d2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x0, 0x1, 0x4, 0xe7, 0x0, 0xfc01]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0xfff2, 0x91, 0xd, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1, 0x0, 0x4, 0x16, 0xb, 0x30, 0x1, 0x3, 0x30, 0x6c, 0x4, 0x60, 0xb, 0x5, 0x1b, 0x6, 0x36, 0x15, 0x5, 0x48, 0x30, 0x6c, 0xb, 0xb, 0xc]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x1}, {0x2, 0x3}, {0x3, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x3}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x1}, {0x7, 0xa}, {0x4}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x6}, {0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x9}, {0x2, 0x2}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x6}, {0x1}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0xa}, {0x5, 0x3}, {0x5, 0xa}, {0x2}, {0x3, 0xa}, {0x2, 0x2}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7fff, 0x8010, 0x401, 0xf001, 0xc6, 0xd, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000000130a8101000000000000000002"], 0x28}}, 0x20004000) 2.194535459s ago: executing program 1 (id=127): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x3920e, r0, 0x3, 0x1, 0x3, 0x6}) (fail_nth: 1) 1.99456722s ago: executing program 1 (id=128): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b70300000000000885000000a00000009500000000000000ba897ac148ff16483e3878d9fc4ab487dac2ace86b2cff25ea9b83326e45c0bea9954aa487dc1b4f698487a1dd43871ea00575cba637a27a9fd75b9848134f2b0212408c9033587cdb4a54980882e10c8c48082be823bb54b7f505e6d4d7d1cccf60f48639b6"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xc}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0xc, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x0, 0x20}, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000740)=0x10001, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x3920e, r0, 0x3, 0x1, 0x3, 0x6}) 1.894775656s ago: executing program 1 (id=129): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xf1}}]}}}]}, 0x78}}, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x42, 0x0) write(r1, &(0x7f0000000a00), 0x0) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.855963947s ago: executing program 1 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000003e40), 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000ffff000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.770096042s ago: executing program 3 (id=131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc123adeb7a4246d9f58", @ANYRES16=r1, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008", @ANYRES64=r3, @ANYRESOCT=r2, @ANYRES32, @ANYRESDEC=r0, @ANYRES8=r1, @ANYRESHEX=r5], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.690714957s ago: executing program 3 (id=132): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r1, 0x2}], 0x1, 0xfa) (async) poll(&(0x7f00000002c0)=[{r1, 0x2}], 0x1, 0xfa) r2 = dup2(r0, r1) r3 = socket$inet6(0xa, 0x5, 0x0) listen(r3, 0xa) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x400000, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100)) (async) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x400000, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) poll(&(0x7f0000000080)=[{r2, 0x4000}, {r1, 0x3}], 0x2, 0xffff8001) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000200140012800900010076657468000000000400028008004040e5a9ee"], 0x48}, 0x1, 0x0, 0x0, 0x4894}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000200140012800900010076657468000000000400028008004040e5a9ee"], 0x48}, 0x1, 0x0, 0x0, 0x4894}, 0x0) 1.653529799s ago: executing program 3 (id=133): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) 1.550804295s ago: executing program 2 (id=134): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x1b0, 0x1b0, 0xffffffff, 0x1b0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x178, 0x1b0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@unspec=@limit={{0x48}, {0x5, 0xb8e, 0x3, 0x80000000, 0x7f, 0x0, 0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000000c0), 0x5, 0x519, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x4007}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fsync(r4) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0) 1.362532375s ago: executing program 0 (id=135): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "60e275d0b2200a48", "b0da4bf7118d3e7c6d77d16f84c0fb72", "540f6dff", "7dc06d519e8c2cc4"}, 0x28) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x103800, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfff9, 0xafcb, 0xfffd, 0x6, 0x10}}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x4, 0x9, 0x9, 0x400, 0xeff4}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000180)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000200)={0x1, @read_link_policy={{0x80c, 0x2}, {0x192}}}, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4c00}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x17}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2080240}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getnexthop={0x40, 0x6a, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x8000) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="35675beb8e08cd49d1ab02a236a59c9bef2417fd497b119eae8295cd54be92846f20eeef4d6485ca13b8b6191fb137f9b793da9323733230e916f3761441381b150778e31ed4409c446ea768017bca3c4d726a6e1c54900a4bc6606f301ab63cdcf4d4fef557297b6048ca88fd6d8798fba55d3b3c", 0x75}], 0x1, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4408c}, 0x8000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/snmp\x00') tee(r1, r5, 0x2, 0x3) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r4, 0xa30, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x4000) ftruncate(r1, 0x9) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5b5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000900)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000940)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000980)={r7, @in6={{0xa, 0x4e24, 0x1, @private1, 0xfffffe01}}, 0x0, 0x4, 0x9b7, 0x1, 0x0, 0x1, 0x5}, 0x9c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0xa, [@ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @ptr={0x3, 0x0, 0x0, 0x2, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x10000}}]}, {0x0, [0x2e, 0xb4a0fba12c3f51b5, 0x0, 0x61, 0x61, 0x61, 0x61, 0x61]}}, &(0x7f0000000ac0)=""/41, 0x6e, 0x29, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xe, '\x00', 0x0, r8, 0x5, 0x2, 0x2}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/bus/input/handlers\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000c00)=0x4, 0x4) io_setup(0x7c17, &(0x7f0000000c40)=0x0) r11 = eventfd(0x101) io_submit(r10, 0x8, &(0x7f00000013c0)=[&(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x7, 0x1, r8, &(0x7f0000000c80)="f16d1ce398d17f41c97959ac005d012a60af7dcf75f01e905ea74c5690b03e02e3c2adafda2ea9afecc43b0c6c793bc0", 0x30, 0x9, 0x0, 0x3, r11}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x3, 0x9, r5, &(0x7f0000000d00)="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", 0xfa, 0x100, 0x0, 0x1}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x4, 0xff, 0xffffffffffffffff, &(0x7f0000000e40)="b31c54daf4e51fe9b0360ffaee7fdb50f24f72c09f881a6c6dd4523978274be2", 0x20, 0x49be, 0x0, 0x0, r5}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x6, 0x7fff, r8, 0x0, 0x0, 0x3, 0x0, 0x1}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x5, 0x4b1, 0xffffffffffffffff, &(0x7f0000001040)="df3b9241f4f564c83e9d893f214ea3a3df3bf08eec3d26987e2bf28de2650defc56a1464886e06e1ac4f2fc67d2cd5c178d7c8620c9e39e47c5d4e2c3a26f2bb9baef292c6a91b1da10e191ceef51e847894f7d133727f57efd91069d0d157fd99b0e320e1d5442612635c72f4b3bc3d0019f606d8fdd2519bde883d050d886b5164e2633f3893026be2783a760f7dfeb468666ebcfbcaa939bc99dd71354b467a1755e9a0d20172fbc4c7cfdf", 0xad, 0x6, 0x0, 0x1, r1}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000001140)="94fafefd3077d23a948193435c0251b2f1331c36e29f4911582f869049b2fd6979818e1acf30413f0347d2bdedd5bd16d94978fbb3bde2c45927a691c27af5bd85d9a2503a5c491bfc689d29ce4d017e1f762d0f658097b13ce6e446b664acd85eb69767d27a9a334b8c44464d329cff0c66d13bcea76439dfccdb78653b2ef34e86b5e78345b64be750323fa2", 0x8d, 0x6, 0x0, 0x0, r0}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x7, r8, &(0x7f0000001240)="b17b72e59fc16adc3c9aecab8c5740cc", 0x10, 0x2, 0x0, 0x0, r9}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f00000012c0)="30fddfc1863646f5bcf79aec5ada09d63b02efe92b9cbf0ee1a1c4b0939c10f2cbd11e58070f67102817dca2d00a23e8f796423baeb76a7939086f2b52bd2135f4560daf944f63a0d0eca07e1887f9ac6be13b424241e4733e423982c0477147796fddfe17c8e1e5c3c9603781430e590ed8978522a583e0b50a9ad6c22d18cdb8131b7955a25f01f47e30688bd82a352defb696", 0x94, 0x1, 0x0, 0x2, r9}]) 1.342555576s ago: executing program 4 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0xfffffffc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040010}, 0xb0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x20000110) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) r5 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x1, r5, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@delchain={0xdbc, 0x65, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {0x9, 0x1}, {0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xd64, 0x2, [@TCA_CGROUP_POLICE={0x90, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xc6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x64f, 0x0, 0x3, 0x4e5, 0x5aae, {0x8, 0x0, 0x55bf, 0x40, 0x1, 0x200}, {0xaf, 0x2, 0x5, 0x5, 0x8, 0x2}, 0x3d5b, 0x1ff, 0x4be}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0xffffffffffffffff, 0xff, 0x5, 0x7, {0x4, 0x0, 0x3, 0x0, 0x0, 0xc85e}, {0xe0, 0x1, 0xc2, 0x7, 0x6, 0x80}, 0x6, 0x8001, 0x100}}]}, @TCA_CGROUP_POLICE={0xa0, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x286f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x3, 0xd, 0x3, {0x2, 0x1, 0xf3e, 0xffff, 0xe8c1, 0x5e}, {0x5, 0x0, 0x4, 0x9, 0x2, 0x6}, 0x2, 0x33d2, 0x7ff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}, @TCA_CGROUP_POLICE={0xc30, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x24000000, 0xeb, 0x8, 0x1, 0x2, 0x1, 0x3, 0xc18, 0x7, 0x3, 0x7, 0x5, 0x3, 0x4, 0x8, 0x80000001, 0xe37, 0x8, 0x2e8, 0x573, 0x4, 0xffffffff, 0xad, 0xffff, 0x0, 0x2, 0xa, 0x80000000, 0x5, 0xf, 0xfffffffe, 0xa, 0x3ce2, 0x6, 0x2, 0x8001, 0x1, 0x3, 0x1, 0x4, 0x6, 0x80, 0x6, 0x401, 0x200, 0x7, 0x10, 0x1, 0xe, 0x3ff, 0x6, 0x2, 0x4, 0x7fff, 0x5, 0x200, 0x492, 0x5, 0x1, 0x5, 0x8, 0x8, 0x28c, 0x4, 0x6, 0x6, 0x1ff, 0x29, 0x7fffffff, 0x80000001, 0x8, 0x1, 0x7fff, 0x7808, 0x8, 0xe3, 0x9, 0x9, 0x6, 0x81, 0x4, 0x9, 0x101, 0x57, 0x4, 0x200, 0x0, 0x8, 0x1, 0x7, 0x22, 0xfffffffc, 0x10, 0x1000, 0x9, 0xf370, 0x5, 0xf, 0x0, 0x3, 0x1005, 0x6, 0x7, 0x9, 0x6, 0x3, 0x6, 0x5, 0x5, 0x7fff, 0x0, 0xff, 0x3, 0x8, 0x7, 0x10001, 0x5, 0xb9, 0x7fffffff, 0x3, 0x6, 0x8, 0x7, 0x0, 0x8001, 0x5, 0x6, 0x7f, 0x458, 0xa, 0x8, 0x7, 0x4, 0x5, 0x3, 0x8000, 0x432b, 0x3ff, 0xf70, 0x7fffffff, 0x5, 0x80000000, 0x3, 0x7fffffff, 0x7, 0x2, 0x2, 0xdb25, 0x8000, 0x5, 0xfffffff9, 0x9, 0xf97, 0x7fff, 0x1, 0x11, 0x81, 0x8, 0x3, 0x400, 0x80, 0xfffffffc, 0xfffff89d, 0x9, 0x10, 0xffffffff, 0x401, 0xa3df, 0xff, 0x5, 0x7fff, 0x3, 0xfffffff8, 0x4ea, 0x1, 0x1, 0x7, 0x6, 0x8088, 0x9, 0xab7, 0x8, 0xffffffff, 0x1, 0x2, 0x100, 0x6, 0x1ff, 0x2, 0xb, 0x1, 0x5, 0x3, 0x9, 0xe10, 0x80000001, 0x4, 0x0, 0x3, 0x4, 0x9a, 0x3, 0xf, 0x8, 0xc, 0x7, 0x2, 0x5, 0x16df, 0x80, 0x8001, 0x400, 0x1, 0x8, 0xa, 0x2, 0x4, 0x4, 0x3ff, 0x5, 0x9, 0x0, 0x7005, 0x100000, 0xfffffffe, 0x80, 0x7, 0xb90, 0xfffffffe, 0x4, 0x80000001, 0x7, 0x1, 0x7, 0x8, 0x4, 0x8, 0x4, 0x6b08092b, 0x80000000, 0xc78, 0x0, 0x2, 0x7, 0x5, 0xeb, 0x38ee, 0x6, 0x1, 0x100, 0x5, 0x40, 0x5, 0x800, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x8, 0x7, 0x3ff, 0x9cd9, 0x0, 0x7, 0x9b, 0xffffffff, 0x9, 0x5aa19cb7, 0x80, 0x5c6e, 0x4, 0x40000000, 0x7, 0xfffffffa, 0x10000, 0x6, 0x3, 0x9, 0x7, 0x200, 0x8, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x8, 0x5, 0x6, 0xcda, 0xfffffffc, 0x1ff, 0x4, 0x4, 0x5, 0x3, 0x7, 0x588, 0x0, 0xea, 0x0, 0x2, 0x64c, 0x4, 0x1000, 0x9, 0x6, 0x7750, 0x0, 0xc, 0x6, 0x0, 0x79, 0x5, 0x7ff, 0xe178, 0x5, 0x3, 0x0, 0x0, 0x8, 0x10001, 0x100, 0x6, 0x7, 0x80000001, 0x2, 0x7, 0xa0, 0x4, 0x1ff, 0x63da57db, 0x6, 0x3ff, 0x5, 0x7fffffff, 0x6732, 0x7, 0xaa, 0x0, 0x3, 0x9, 0x1, 0x4, 0x80000000, 0xe, 0x7, 0x8, 0xb, 0x2, 0x5, 0x10001, 0x9, 0x6, 0x1, 0x84, 0x1, 0x3, 0x1, 0x0, 0x3, 0x7, 0xa13a, 0x13a, 0x2, 0x0, 0x6, 0x56, 0x9, 0x2, 0x6, 0x5, 0x7105, 0xa, 0xaee1, 0x0, 0x6, 0x1ff, 0x9, 0x10, 0x1, 0xb, 0xfff, 0x4, 0x80000001, 0x9, 0x80000001, 0x2, 0x5, 0x7, 0x1000, 0x3, 0x1, 0x8, 0x3ff, 0x6, 0x2, 0xa4, 0x2, 0x4, 0xdd34, 0x1, 0x0, 0x6, 0xb134, 0x4, 0x7fffffff, 0x0, 0x7, 0x8, 0x5, 0x80000001, 0x8, 0xffffffff, 0x0, 0x5, 0x9, 0xfffffffc, 0x0, 0x3, 0x5, 0x2, 0xffffffff, 0x5, 0x2, 0x80000000, 0x5, 0x2, 0x3, 0x2, 0x1, 0x2, 0x2, 0x8, 0x7, 0x40, 0x4, 0x100, 0x1, 0x2, 0x7, 0x0, 0x9, 0x6, 0x8878, 0x8, 0x9, 0x1, 0x1, 0xa15, 0x6, 0x2, 0x8, 0x0, 0x200, 0xe, 0x2, 0x1, 0xfffffe00, 0xcfd, 0x5, 0x2, 0x2, 0x7, 0x1, 0x4, 0x2, 0x80, 0xc, 0x6, 0x5, 0x2, 0x0, 0xffff, 0x0, 0x3, 0x5, 0xa, 0x5, 0xea, 0x8, 0x7, 0xe, 0x2b0, 0x4, 0x2b61, 0xd, 0x0, 0x8, 0x1, 0x7, 0xe2, 0x4, 0x3, 0x1, 0x2, 0x6, 0xf, 0x6, 0x1, 0x0, 0x7, 0x8, 0x2, 0x8, 0x18, 0x1, 0x3, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xa, 0x1ff, 0xffff, 0x0, 0x80000000, 0x6a1, 0x8, 0x3, 0x5aaf4d85, 0xffff, 0x5, 0x10000, 0xe43, 0x2, 0x5, 0x401, 0x8000, 0x1, 0x2, 0x5, 0x1, 0x81, 0x8, 0x45, 0x7f, 0x5, 0xeb3e, 0xfffffff9, 0xfffffffd, 0x9b5, 0x74d4, 0x0, 0xe, 0x5, 0xa1fb, 0xc27c, 0x0, 0x0, 0xfffffffa, 0x800, 0xfffffff7, 0x8, 0x6, 0x90000000, 0x3, 0xffffc18a, 0x8, 0x4, 0x0, 0x80, 0xdf3, 0xcdf9, 0x6, 0x9, 0x1, 0x1c000000, 0x6, 0x6, 0x8, 0x80000001, 0x3, 0xc, 0x1, 0x1e9b4000, 0x1ff, 0x7, 0x8068, 0x10, 0xfffffe01, 0x4, 0x6, 0x2, 0x2, 0x3, 0x7, 0xd27, 0x1, 0x7f, 0x4, 0x3, 0x60b, 0xd0, 0xfa, 0xfffffffe, 0x2, 0x4939, 0xbdf3, 0x6, 0x1, 0x200, 0x0, 0x5, 0x2, 0x5, 0x7fff, 0x3, 0x7, 0x200000, 0x401, 0x5, 0x3, 0x8, 0x7f, 0xfffff801, 0x8, 0x2, 0x7, 0x8dc, 0x6, 0xfffffffc, 0x1, 0x6, 0x8, 0x4d9, 0xd46, 0xfffffffd, 0x4, 0x7ff, 0x100, 0x9, 0x8928, 0x8c0, 0x80, 0x7, 0x1, 0x2, 0x1, 0x35, 0x6, 0x9, 0xfbf0, 0x4, 0x8, 0x3, 0xffffff90, 0x4, 0xef6, 0x7, 0xfffffffc, 0xfce2, 0xfffffffe, 0x51, 0x1000, 0x7, 0x0, 0x7f870000, 0x400, 0x100, 0x9, 0x8000, 0x9, 0x8000, 0xf3, 0xfffffffb, 0x0, 0x4, 0x5, 0x3, 0x80000000, 0x4, 0x2, 0x7fff, 0x4, 0x948, 0x6, 0x1, 0x800, 0xe, 0x6, 0x6, 0x5, 0x44be, 0x101, 0x9, 0x10, 0x10, 0x9, 0x7f, 0x7fffffff, 0x7, 0xfffffff3, 0x8001, 0x4, 0x7, 0x7, 0x5, 0x200, 0x40, 0xff, 0x401, 0x101, 0x1ff, 0x7fffffff, 0x5, 0x100, 0xb, 0xfff, 0x10000, 0xb257331, 0x10001, 0x8, 0x80, 0x2, 0x7, 0x8, 0x10, 0xd77, 0x7fff, 0x3e4, 0x1, 0x200, 0x6, 0x4, 0x2, 0x5, 0xffffffff, 0xce5, 0xc, 0x4, 0x7, 0x0, 0xffffff66, 0x3, 0xfffffffb, 0xa, 0xc, 0x2, 0xfffffffb, 0x5, 0x4, 0xffff, 0xfffffff8, 0x2, 0x4, 0x2d5e7372, 0x8, 0x100, 0x1, 0xfffffffb, 0x1, 0x1, 0x0, 0x81, 0x1ff, 0x2, 0x8, 0x5, 0xffffffff, 0x1, 0x4, 0x8, 0x2bb, 0x1, 0x7fff, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x66}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xf}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0xdbc}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r7, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @remote}, 0xffffff1f, {0x2, 0x0, @broadcast}, 'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) syz_clone(0x200, &(0x7f0000000f00)="c49d6ad9973c81ef4869c8123d91698ad7a158bb54e33fda0b28788b60ecb4080d835deac5af7cf8f5eefb483c9ef575e3dc903a9c14cf930bcd4a0aa6ce052242928665116c176f690320d4cbb4123ad7426e708bce7fea7666a15aeab97aa4590a86987f70788d25fb5f982f8b05ac552c62bea4b436875bd1979d5a4dedad70e2ecf5cf4341d511e92c1ca4eef00ec2a960faddfecf8df9687b39a4a27e1c96f4f1e9aebee7d1135509e4952255593bb302865139e992e7279cdaa4033ca8a4cbe192be72878d0d26f249ff59dae349bf79578c27798a8b9674519e582dfb09c0a8c93e807eb5e23ff309", 0xec, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000001000)="a194ed3dcb043141138d1b240f94b000d5ff4ddd6b949e065d7dcbd015e39ca291a22481380bb374898bc5d384b46ea9d92d261f5bcab47f660414f8aa20c5f9e8b1741a17eed026dce1fd18c8d43b1e8e2858fce6789bc24bb5502e210db127f6c5f6cbc00d631468ee5f0da3db037470245fadcdb29966821ec901845bf5ae1399e44b3c09777622c8270883676da36b18241fa6d398ae2d5656ba371f9e3fdc997a099a27224fd7d76ea54052bbbe2c33cdb12f96d8c0e9e6af88b94b6820b2321c4fd04a778bd7f6f0fa9eeaeab9cdaf74cc9d93f19f53e2e3b3f64526ab171cef46e02583c58ce961d817b7472e814d63e1016037") 1.302352928s ago: executing program 2 (id=137): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1.289916769s ago: executing program 0 (id=138): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) (fail_nth: 1) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1.185672125s ago: executing program 4 (id=139): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7", 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.000603615s ago: executing program 0 (id=140): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xf1}}]}}}]}, 0x78}}, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x42, 0x0) write(r1, &(0x7f0000000a00), 0x0) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 997.143085ms ago: executing program 1 (id=141): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7", 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) (fail_nth: 1) sendfile(r1, r0, 0x0, 0x7ffff000) 705.502891ms ago: executing program 0 (id=142): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1, r2}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 326.917372ms ago: executing program 0 (id=143): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x21, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x78, 0x2, {{0x8, 0x1, 0x7fff, 0x2, 0xf, 0xfff}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xa, 0xffff7fff, 0x8ff4, 0x8}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x58, 0x2}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x6, 0x0, 0x1, 0x6, 0x8ef}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0xa8}}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r5, 0x2f, 0x3, 0xe, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}, @mcast1, 0x1, 0x0, 0x7, 0x1}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000700)={'wg1\x00', 0x0}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', r5, r0, 0x5, 0x0, 0x3}, 0x50) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000b80)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa07}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0x92, &(0x7f0000000900)=""/146, 0x41000, 0x33, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x5, 0x10, 0x23d}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r0, r1, r8], 0x0, 0x10, 0x3}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000000101040000008008000100e000000108000200e00000010c000280050001"], 0x40}}, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7", 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x6, 0x2, 0x5}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x5, 0x6, 0x0, 0x9, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fsmount(r9, 0x1, 0x0) writev(r9, &(0x7f0000000400)=[{&(0x7f0000000200)="5877a54c0f68921fe473508657d237e2ed8d7854e4f38efda33aff17080e88b2459654bf3c698339126d9939b76d87acf118f122b636b4d467bfe77106bb62997161384b27dd91369a7383cd13", 0x4d}, {&(0x7f00000002c0)="be23c8366e6ba4abc59bd015fe9c0e0baa3d", 0x12}, {&(0x7f0000000300)="54767139b92a689bf994964d49432ee86c6d4213f21e746e2e965a9dd4e51873b87ccf5915c59789b64ceb25db358912bc82ca160e529dcf80e01674001d92bcb919d55bf930a088283e70e7617120ab6fc2f92ec42a2d2fff3fc22fa18f2ac69da3993d75a621715e79967874a128d08e66e47a19f2a5d39e5f34ebeb82f165111154b4b7a22f159b882a05d307d14bd32c488e5921f275b0b511d634757dd7ce98cc8c07177b400714165ef3ecdf397b0740232c745630a64413652655f32be7162fa947f4d4e264103fab8b6ec3b14e1ebd0b37cf639673cc5d17216be7fee4bf5eba01be006298fea6da83f443529353f3244445566c9179", 0xfa}, {&(0x7f00000005c0)="6c780260521bc664ef7da051292c9eeeff85819e24a97717d48ba765fa9d5ceab8b760a4fd79ac8c0f64fdb6c8d8892a4f308b6fa3f6fb603718376b32dee1ec9fb365ab35e9c1de6befa6f2c29926a5057c6ca70a71a4e004d819b85e54d3a61bd757c1ea8724c6a12e7d3b90f26081c49fc5ae123535e8284bd5595a19c68d901e4f03e797018ec93a030bd1340d46f6a2901c170cf5970b5658ea415a13ecb39771753ce0f0710432c6bb0b940f8d6b6afc", 0xb3}], 0x4) 304.923654ms ago: executing program 3 (id=144): r0 = socket(0xb, 0x2, 0x4) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012da", 0x5e) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) socket(0x840000000002, 0x3, 0x100) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x8e9e, 0x7, 0x1f94) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @remote}, {0x20000010304, @random="641b03f0b9e0"}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}, 'bond_slave_1\x00'}) getpgid(0x0) pidfd_send_signal(0xffffffffffffffff, 0x20000021, 0x0, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 83.207405ms ago: executing program 2 (id=145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 14.299409ms ago: executing program 1 (id=146): gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x1, 0x28, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x3d8, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_TX_RATES={0x3b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x1}, {0x5}, {0x3, 0xa}, {0x1, 0x4}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x5}, {0x0, 0x6}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x7}, {0x2, 0x6}, {0x5, 0x5}, {0x0, 0x1}, {0x6}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x6}, {}, {0x0, 0x7}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x6}, {}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x1, 0x4}, {0x1}, {0x1, 0x4}, {0x1, 0xa}, {0x1, 0x8}, {0x6, 0x5}, {0x2, 0x9}, {0x3, 0x9}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x3, 0x18, 0x48, 0x12, 0xb, 0x4, 0x2, 0x0, 0x24, 0x24, 0x12, 0x60, 0x16, 0x16, 0x30, 0xe, 0x18, 0x4, 0x3, 0x12]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x12, 0xb, 0x12, 0x1a, 0x18, 0x4, 0x6c, 0x1b, 0x2, 0x1b, 0x9, 0x4, 0x2, 0x1b, 0xb, 0x6c, 0x3, 0x16, 0x0, 0x4, 0x36, 0xc, 0x6, 0x0, 0x5, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x1}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0x8}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0x7}, {0x5, 0x9}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x9}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x6}, {0x7, 0x8}, {0x2, 0x9}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x4}, {0x0, 0xa}, {0x7}, {0x5, 0x8}, {0x4}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x7, 0x4}, {0x0, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x7, 0x2}, {0x3, 0x8}, {0x7}, {0x2, 0x2}, {0x4, 0x4}, {0x1, 0x6}, {0x3, 0x2}, {0x3, 0xa}, {0x3, 0x7}, {0x7}, {0x2, 0x3}, {0x3, 0x8}, {0x7, 0x9}, {0x3, 0x1}, {0x4}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x2}, {}, {0x7}, {0x0, 0x4}, {0x5, 0x6}, {0x3, 0x4}, {0x5, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x3}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x0, 0xfff8, 0x5, 0x9, 0x2, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3154, 0x1, 0x2, 0x3, 0x5, 0x1]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x2, 0x18, 0x60, 0x2, 0x6c, 0x16, 0x6c, 0x6, 0x18, 0x48, 0x12, 0x12, 0xf, 0x0, 0x30]}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x3, 0x12, 0x0, 0x12, 0xe49a38175384cfa4, 0x4b9ca9e091cb0424, 0x12, 0x6c, 0x18, 0x1b, 0x5, 0x3, 0x5, 0xc, 0x2, 0x60, 0x9, 0x1, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xa0, 0x401, 0x5, 0x401, 0x2, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x2}, {0x3, 0x9}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0xa}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x1}, {0x6, 0x7}, {0x3, 0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x600, 0x0, 0x24, 0x0, 0x2, 0x1, 0x6, 0xf]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x2}, {0x2, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x9}, {0x5}, {0x6, 0x8}, {0x3, 0x9}, {0x5, 0x5}, {0x5, 0x3}, {0x2}, {0x4, 0x2}, {0x6, 0x2}, {0x7, 0x6}, {0x3, 0x3}, {0x4}, {0x1, 0x3}, {0x2, 0xa}, {0x0, 0x3}, {0x0, 0x7}, {0x4}, {0x0, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0x3}, {0x5, 0x1}, {0x4, 0x3}, {0x2, 0x6}, {0x4, 0x9}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x4}, {0x1, 0xa}, {0x2, 0xb}, {0x4, 0x6}, {0x1, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x0, 0x3, 0x24, 0x1b, 0x4, 0x3, 0x6, 0x2, 0xb, 0x30, 0x16, 0x12, 0x6, 0x36, 0x4, 0x24, 0x36, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x99a, 0x3, 0x8000, 0x3ff, 0x4, 0x5, 0x400, 0x2]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x4, 0xd61, 0x4, 0x7ff, 0x3, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0xff, 0x9, 0x9, 0xffff, 0x9]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x4}, {0x6, 0x5}, {0x1, 0x7}, {0x5, 0xa}, {0x5, 0x3}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x6}, {0x4, 0x2}, {}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x3}, {0x1}, {0x2, 0x4}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x4}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x1}, {0x4, 0x5}, {0x4, 0x5}, {0x5}, {0x1, 0x6}, {0x1, 0x7}, {0x7, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x3}, {0x2, 0x7}, {0x4, 0xa}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x1}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x2}, {0x5, 0x6}, {0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x9}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x1}, {0x7}, {0x5, 0x3}, {0x1, 0x1}, {0x7, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x1}, {0x2, 0x4}, {0x6}, {0x3, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x7, 0x7}, {0x0, 0x4}, {0x5, 0x7}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc16f47410aaaeaf9, 0x24, 0x6, 0xc, 0xe, 0x18, 0x9, 0x16, 0x30, 0x30, 0x48, 0xc, 0x60, 0x6, 0x1, 0x24, 0x60, 0x60, 0xc, 0x48, 0x18, 0x6, 0x0, 0x18, 0x6, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xd2e909d5780be921, 0x2, 0x5, 0x1b, 0x60, 0x12, 0x12, 0x24, 0x48, 0x1b, 0x48, 0x30, 0x1, 0xc, 0x0, 0x48, 0xc, 0x16, 0xb, 0x6c, 0x12, 0x30, 0xc, 0x3, 0x12, 0x18]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x9, 0x30, 0xb, 0x1b, 0x36, 0x30, 0x48, 0x2, 0x24, 0x12, 0x12, 0x2574e08e864e9311, 0x4, 0x2, 0x12, 0x9, 0x15, 0x2, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x140, 0x5, 0xc82, 0xb, 0x0, 0x1, 0x31d2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x0, 0x1, 0x4, 0xe7, 0x0, 0xfc01]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0xfff2, 0x91, 0xd, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1, 0x0, 0x4, 0x16, 0xb, 0x30, 0x1, 0x3, 0x30, 0x6c, 0x4, 0x60, 0xb, 0x5, 0x1b, 0x6, 0x36, 0x15, 0x5, 0x48, 0x30, 0x6c, 0xb, 0xb, 0xc]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x1}, {0x2, 0x3}, {0x3, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x3}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x1}, {0x7, 0xa}, {0x4}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x6}, {0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x2, 0x9}, {0x2, 0x2}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x6}, {0x1}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0xa}, {0x5, 0x3}, {0x5, 0xa}, {0x2}, {0x3, 0xa}, {0x2, 0x2}, {0x5, 0x7}, {0x6, 0x2}, {0x7, 0xa}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7fff, 0x8010, 0x401, 0xf001, 0xc6, 0xd, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000000130a8101000000000000000002"], 0x28}}, 0x20004000) 0s ago: executing program 4 (id=147): socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/icmp6\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040025bd7000fddb49896d69f76ef6002e45a0d9a686192653e63ea388"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001380), 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000001500), r0) socket(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r3, 0x4040099d}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 24.833243][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 24.833257][ T29] audit: type=1400 audit(1768866276.900:70): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.862189][ T29] audit: type=1400 audit(1768866276.930:71): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.862966][ T3310] cgroup: Unknown subsys name 'net' [ 24.889815][ T29] audit: type=1400 audit(1768866276.960:72): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.989935][ T3310] cgroup: Unknown subsys name 'cpuset' [ 24.995981][ T3310] cgroup: Unknown subsys name 'rlimit' [ 25.145294][ T29] audit: type=1400 audit(1768866277.210:73): avc: denied { setattr } for pid=3310 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.170635][ T29] audit: type=1400 audit(1768866277.210:74): avc: denied { create } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.191142][ T29] audit: type=1400 audit(1768866277.210:75): avc: denied { write } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.208491][ T3315] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.211510][ T29] audit: type=1400 audit(1768866277.210:76): avc: denied { read } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.237793][ T3310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.240282][ T29] audit: type=1400 audit(1768866277.210:77): avc: denied { read } for pid=3050 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.269813][ T29] audit: type=1400 audit(1768866277.240:78): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.294697][ T29] audit: type=1400 audit(1768866277.240:79): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.318999][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 26.354895][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 26.391620][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 26.403151][ T3331] chnl_net:caif_netlink_parms(): no params data found [ 26.466456][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.473562][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.480739][ T3323] bridge_slave_0: entered allmulticast mode [ 26.487165][ T3323] bridge_slave_0: entered promiscuous mode [ 26.501791][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.508834][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.516174][ T3323] bridge_slave_1: entered allmulticast mode [ 26.522493][ T3323] bridge_slave_1: entered promiscuous mode [ 26.553480][ T3330] chnl_net:caif_netlink_parms(): no params data found [ 26.562798][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.569880][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.577188][ T3325] bridge_slave_0: entered allmulticast mode [ 26.583485][ T3325] bridge_slave_0: entered promiscuous mode [ 26.594170][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.601357][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.608506][ T3322] bridge_slave_0: entered allmulticast mode [ 26.614961][ T3322] bridge_slave_0: entered promiscuous mode [ 26.627951][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.635011][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.642237][ T3325] bridge_slave_1: entered allmulticast mode [ 26.648650][ T3325] bridge_slave_1: entered promiscuous mode [ 26.659264][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.666314][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.673555][ T3322] bridge_slave_1: entered allmulticast mode [ 26.680067][ T3322] bridge_slave_1: entered promiscuous mode [ 26.687390][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.697430][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.714104][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.721163][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.728305][ T3331] bridge_slave_0: entered allmulticast mode [ 26.734705][ T3331] bridge_slave_0: entered promiscuous mode [ 26.756302][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.763413][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.770512][ T3331] bridge_slave_1: entered allmulticast mode [ 26.776941][ T3331] bridge_slave_1: entered promiscuous mode [ 26.799486][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.809809][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.823604][ T3323] team0: Port device team_slave_0 added [ 26.832033][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.842110][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.856527][ T3331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.866345][ T3323] team0: Port device team_slave_1 added [ 26.882666][ T3331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.904371][ T3322] team0: Port device team_slave_0 added [ 26.922559][ T3325] team0: Port device team_slave_0 added [ 26.928791][ T3322] team0: Port device team_slave_1 added [ 26.939018][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.945998][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.971945][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.982604][ T3330] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.989733][ T3330] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.996881][ T3330] bridge_slave_0: entered allmulticast mode [ 27.003229][ T3330] bridge_slave_0: entered promiscuous mode [ 27.010280][ T3325] team0: Port device team_slave_1 added [ 27.020789][ T3331] team0: Port device team_slave_0 added [ 27.026607][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.033614][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.059581][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.072946][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.080098][ T3330] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.087377][ T3330] bridge_slave_1: entered allmulticast mode [ 27.093811][ T3330] bridge_slave_1: entered promiscuous mode [ 27.108717][ T3331] team0: Port device team_slave_1 added [ 27.128010][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.135002][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.160997][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.176194][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.183164][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.209128][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.225588][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.232576][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.258575][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.273529][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.280646][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.306523][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.318387][ T3330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.333445][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.340420][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.366315][ T3331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.388416][ T3323] hsr_slave_0: entered promiscuous mode [ 27.394474][ T3323] hsr_slave_1: entered promiscuous mode [ 27.401369][ T3330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.415496][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.422436][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.448378][ T3331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.473770][ T3330] team0: Port device team_slave_0 added [ 27.493823][ T3330] team0: Port device team_slave_1 added [ 27.510517][ T3325] hsr_slave_0: entered promiscuous mode [ 27.516329][ T3325] hsr_slave_1: entered promiscuous mode [ 27.522218][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 27.527920][ T3325] Cannot create hsr debugfs directory [ 27.539664][ T3322] hsr_slave_0: entered promiscuous mode [ 27.545536][ T3322] hsr_slave_1: entered promiscuous mode [ 27.551475][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 27.557176][ T3322] Cannot create hsr debugfs directory [ 27.573322][ T3330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.580330][ T3330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.606299][ T3330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.628843][ T3330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.635926][ T3330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.661814][ T3330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.674592][ T3331] hsr_slave_0: entered promiscuous mode [ 27.680696][ T3331] hsr_slave_1: entered promiscuous mode [ 27.686501][ T3331] debugfs: 'hsr0' already exists in 'hsr' [ 27.692230][ T3331] Cannot create hsr debugfs directory [ 27.754008][ T3330] hsr_slave_0: entered promiscuous mode [ 27.759974][ T3330] hsr_slave_1: entered promiscuous mode [ 27.765821][ T3330] debugfs: 'hsr0' already exists in 'hsr' [ 27.771576][ T3330] Cannot create hsr debugfs directory [ 27.910448][ T3323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.918871][ T3323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.929300][ T3323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.937876][ T3323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.961538][ T3325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.975151][ T3325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.995884][ T3325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.006240][ T3325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.014787][ T3331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.024308][ T3331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.036471][ T3331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.049028][ T3331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.073569][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.084944][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.094231][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.103088][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.135193][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.145320][ T3330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.154353][ T3330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.166522][ T3330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.175484][ T3330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.207664][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.220464][ T1781] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.227536][ T1781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.248007][ T1781] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.255051][ T1781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.294790][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.318651][ T3331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.331293][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.349044][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.362925][ T1811] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.370060][ T1811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.378970][ T1811] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.386056][ T1811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.402013][ T3331] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.412282][ T3330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.427567][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.434667][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.446937][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.456276][ T1621] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.463349][ T1621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.474304][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.492623][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.499659][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.510835][ T3330] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.524901][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.531964][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.543991][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.551084][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.562729][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.569882][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.627649][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.705439][ T3323] veth0_vlan: entered promiscuous mode [ 28.718098][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.731090][ T3323] veth1_vlan: entered promiscuous mode [ 28.740159][ T3331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.763665][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.776363][ T3330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.791505][ T3323] veth0_macvtap: entered promiscuous mode [ 28.821577][ T3323] veth1_macvtap: entered promiscuous mode [ 28.852346][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.870030][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.887838][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.909633][ T3331] veth0_vlan: entered promiscuous mode [ 28.927007][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.943829][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.964275][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.974024][ T3331] veth1_vlan: entered promiscuous mode [ 28.985384][ T3322] veth0_vlan: entered promiscuous mode [ 28.993125][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.009063][ T3325] veth0_vlan: entered promiscuous mode [ 29.016810][ T3322] veth1_vlan: entered promiscuous mode [ 29.029929][ T3331] veth0_macvtap: entered promiscuous mode [ 29.046061][ T3325] veth1_vlan: entered promiscuous mode [ 29.071453][ T3331] veth1_macvtap: entered promiscuous mode [ 29.100631][ T3322] veth0_macvtap: entered promiscuous mode [ 29.108552][ T3325] veth0_macvtap: entered promiscuous mode [ 29.118222][ T3322] veth1_macvtap: entered promiscuous mode [ 29.128655][ T3493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.130014][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.202548][ T3325] veth1_macvtap: entered promiscuous mode [ 29.208897][ T3330] veth0_vlan: entered promiscuous mode [ 29.217588][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.232583][ T3330] veth1_vlan: entered promiscuous mode [ 29.238482][ T1811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.247924][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.257256][ T1811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.267546][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.275181][ T1811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.288543][ T1811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.299065][ T1811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.310286][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.317601][ T1811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.326742][ T1811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.338037][ T1811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.348995][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.371515][ T1811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.386400][ T1475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.419240][ T3330] veth0_macvtap: entered promiscuous mode [ 29.425550][ T1475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.436216][ T3330] veth1_macvtap: entered promiscuous mode [ 29.463561][ T3330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.483263][ T1475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.493293][ T3330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.515817][ T2058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.543886][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.554302][ T3506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 29.579509][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.582033][ T3511] loop3: detected capacity change from 0 to 1024 [ 29.626038][ T3509] SELinux: policydb magic number 0x6f727473 does not match expected magic number 0xf97cff8c [ 29.636703][ T3509] SELinux: failed to load policy [ 29.658260][ T3511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.700805][ C0] hrtimer: interrupt took 57736 ns [ 29.783441][ T3519] loop3: detected capacity change from 0 to 2048 [ 29.790616][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 29.801093][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.830066][ T3316] loop3: p1 p3 p4 [ 29.834909][ T3522] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 29.836927][ T3316] loop3: p4 size 589824 extends beyond EOD, truncated [ 29.849331][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 29.849344][ T29] audit: type=1400 audit(1768866281.910:139): avc: denied { write } for pid=3521 comm="syz.4.5" lport=52714 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 29.849814][ T3522] loop4: detected capacity change from 0 to 512 [ 29.855459][ T29] audit: type=1400 audit(1768866281.910:140): avc: denied { wake_alarm } for pid=3521 comm="syz.4.5" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.882735][ T3522] EXT4-fs: Ignoring removed i_version option [ 29.911973][ T3522] EXT4-fs: Ignoring removed nobh option [ 29.921480][ T3519] loop3: p1 p3 p4 [ 29.925942][ T3522] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.939070][ T3522] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 29.946106][ T3519] loop3: p4 size 589824 extends beyond EOD, truncated [ 29.957663][ T3522] EXT4-fs (loop4): 1 truncate cleaned up [ 29.964725][ T3522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.977076][ T29] audit: type=1400 audit(1768866282.050:141): avc: denied { mount } for pid=3521 comm="syz.4.5" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.983716][ T3522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 30.015012][ T29] audit: type=1400 audit(1768866282.080:142): avc: denied { read write } for pid=3518 comm="syz.3.9" name="loop3p4" dev="devtmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 30.038019][ T29] audit: type=1400 audit(1768866282.080:143): avc: denied { open } for pid=3518 comm="syz.3.9" path="/dev/loop3p4" dev="devtmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 30.122062][ T29] audit: type=1400 audit(1768866282.190:144): avc: denied { mount } for pid=3526 comm="syz.3.10" name="/" dev="autofs" ino=4920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 30.146625][ T3316] udevd[3316]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 30.166369][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 30.178572][ T3316] udevd[3316]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 30.191793][ T29] audit: type=1400 audit(1768866282.250:145): avc: denied { read } for pid=3521 comm="syz.4.5" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.214611][ T29] audit: type=1400 audit(1768866282.250:146): avc: denied { open } for pid=3521 comm="syz.4.5" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.241712][ T29] audit: type=1400 audit(1768866282.310:147): avc: denied { write } for pid=3528 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.261180][ T29] audit: type=1400 audit(1768866282.320:148): avc: denied { create } for pid=3528 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 30.268736][ T3506] syz.0.1 (3506) used greatest stack depth: 10184 bytes left [ 30.346902][ T3536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 30.453380][ T3543] loop3: detected capacity change from 0 to 512 [ 30.465659][ T3543] ======================================================= [ 30.465659][ T3543] WARNING: The mand mount option has been deprecated and [ 30.465659][ T3543] and is ignored by this kernel. Remove the mand [ 30.465659][ T3543] option from the mount to silence this warning. [ 30.465659][ T3543] ======================================================= [ 30.510768][ T3543] msdos: Unknown parameter 'errors&remount-ro' [ 30.626611][ T3554] sctp: [Deprecated]: syz.0.18 (pid 3554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 30.626611][ T3554] Use struct sctp_sack_info instead [ 30.658246][ T3556] loop2: detected capacity change from 0 to 512 [ 30.685151][ T3556] EXT4-fs: Ignoring removed oldalloc option [ 30.695353][ T3556] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.20: dx entry: limit 1024 != root limit 124 [ 30.707352][ T3556] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.20: Corrupt directory, running e2fsck is recommended [ 30.721340][ T3556] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 30.730117][ T3556] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.20: corrupted in-inode xattr: invalid ea_ino [ 30.743914][ T3556] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.20: couldn't read orphan inode 15 (err -117) [ 30.757358][ T3556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.774208][ T3556] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.20: dx entry: limit 1024 != root limit 124 [ 30.786162][ T3556] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.20: Corrupt directory, running e2fsck is recommended [ 30.800959][ T3556] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.20: dx entry: limit 1024 != root limit 124 [ 30.812844][ T3556] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.20: Corrupt directory, running e2fsck is recommended [ 30.838889][ T3556] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.20: dx entry: limit 1024 != root limit 124 [ 30.850819][ T3556] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.20: Corrupt directory, running e2fsck is recommended [ 30.864752][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.866064][ T3556] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.20: dx entry: limit 1024 != root limit 124 [ 30.885580][ T3556] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.20: Corrupt directory, running e2fsck is recommended [ 30.948433][ T3556] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 30.985997][ T3567] netlink: 48 bytes leftover after parsing attributes in process `syz.4.24'. [ 30.995197][ T3567] netlink: 48 bytes leftover after parsing attributes in process `syz.4.24'. [ 31.012265][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.193482][ T3581] loop2: detected capacity change from 0 to 512 [ 31.208718][ T3575] loop1: detected capacity change from 0 to 1024 [ 31.217684][ T3579] loop4: detected capacity change from 0 to 8192 [ 31.232890][ T3579] Illegal XDP return value 32768 on prog (id 6) dev N/A, expect packet loss! [ 31.247110][ T3575] EXT4-fs: inline encryption not supported [ 31.253968][ T3581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 31.289171][ T3581] System zones: 0-2, 18-18, 34-34 [ 31.335461][ T3575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.378074][ T3581] EXT4-fs (loop2): too many log groups per flexible block group [ 31.429587][ T3581] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 31.446522][ T3581] EXT4-fs (loop2): mount failed [ 31.476043][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.919801][ T3571] syz.2.26 (3571) used greatest stack depth: 9976 bytes left [ 31.938521][ T3572] syz.2.26 (3572) used greatest stack depth: 6160 bytes left [ 31.967554][ T3600] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.062861][ T3602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'. [ 32.084342][ T3604] netlink: 48 bytes leftover after parsing attributes in process `syz.4.33'. [ 32.142933][ T3602] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 32.208606][ T3608] loop4: detected capacity change from 0 to 512 [ 32.236196][ T3608] EXT4-fs: Ignoring removed i_version option [ 32.257369][ T3595] loop1: detected capacity change from 0 to 1024 [ 32.264263][ T3595] EXT4-fs: inline encryption not supported [ 32.273953][ T3608] EXT4-fs (loop4): orphan cleanup on readonly fs [ 32.286773][ T3595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.305501][ T3608] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.34: EA inode hash validation failed [ 32.318203][ T3608] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.332015][ T3608] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.34: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 32.347423][ T3608] EXT4-fs (loop4): Remounting filesystem read-only [ 32.354234][ T3608] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.34: ea_inode dec ref err=-117 [ 32.372790][ T3608] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 32.381979][ T3608] EXT4-fs (loop4): 1 orphan inode deleted [ 32.388377][ T3608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 32.421627][ T3613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.458876][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.469643][ T3613] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.485945][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.542619][ T3623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.37'. [ 32.554880][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.642378][ T3631] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.659714][ T3638] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.42: iget: bad i_size value: 38620345925642 [ 32.676194][ T3638] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.42: couldn't read orphan inode 15 (err -117) [ 32.688838][ T3638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.732971][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.737351][ T3647] Zero length message leads to an empty skb [ 32.845603][ T3655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.867336][ T3655] EXT4-fs (loop2): 1 orphan inode deleted [ 32.873181][ T3655] EXT4-fs (loop2): 1 truncate cleaned up [ 32.884130][ T3655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.901026][ T3660] 9p: Bad value for 'wfdno' [ 32.963154][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.178168][ T3680] EXT4-fs: Ignoring removed oldalloc option [ 33.224490][ T3680] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.56: dx entry: limit 1024 != root limit 124 [ 33.236521][ T3680] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.56: Corrupt directory, running e2fsck is recommended [ 33.288895][ T3680] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 33.350457][ T3680] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.56: corrupted in-inode xattr: invalid ea_ino [ 33.380069][ T3680] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.56: couldn't read orphan inode 15 (err -117) [ 33.420598][ T3680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.458876][ T3680] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.56: dx entry: limit 1024 != root limit 124 [ 33.470913][ T3680] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.56: Corrupt directory, running e2fsck is recommended [ 33.509987][ T3688] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.56: dx entry: limit 1024 != root limit 124 [ 33.521971][ T3688] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.56: Corrupt directory, running e2fsck is recommended [ 33.568472][ T3680] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.56: dx entry: limit 1024 != root limit 124 [ 33.580406][ T3680] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.56: Corrupt directory, running e2fsck is recommended [ 33.598405][ T3680] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.56: dx entry: limit 1024 != root limit 124 [ 33.610323][ T3680] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.56: Corrupt directory, running e2fsck is recommended [ 33.634989][ T3680] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 33.636151][ T3690] EXT4-fs: inline encryption not supported [ 33.691358][ T3697] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.704517][ T3699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.715618][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.725602][ T3690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.758346][ T3699] EXT4-fs (loop1): 1 orphan inode deleted [ 33.764132][ T3699] EXT4-fs (loop1): 1 truncate cleaned up [ 33.789477][ T3699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.810088][ T3697] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.893696][ T3697] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.909067][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.932923][ T3711] netlink: 'syz.2.64': attribute type 9 has an invalid length. [ 33.955070][ T3690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.970617][ T3697] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.583266][ T1475] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.597235][ T1621] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.619470][ T1781] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.649821][ T1781] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.701123][ T3726] syz.4.69 uses obsolete (PF_INET,SOCK_PACKET) [ 34.783393][ T3729] set_capacity_and_notify: 8 callbacks suppressed [ 34.783407][ T3729] loop4: detected capacity change from 0 to 512 [ 34.809934][ T3721] syz.1.68: attempt to access beyond end of device [ 34.809934][ T3721] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 34.823575][ T3721] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 34.835696][ T3722] syz.1.68: attempt to access beyond end of device [ 34.835696][ T3722] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 34.849271][ T3722] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 34.857873][ T3729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.870675][ T3731] loop0: detected capacity change from 0 to 128 [ 34.878565][ T3729] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.71: invalid indirect mapped block 4294967295 (level 1) [ 34.887754][ T3731] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.892896][ T3729] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.71: invalid indirect mapped block 4294967295 (level 1) [ 34.926861][ T3729] EXT4-fs (loop4): 2 truncates cleaned up [ 34.948083][ T3729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.962208][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 34.962229][ T29] audit: type=1400 audit(1768866287.030:240): avc: denied { bind } for pid=3733 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.972815][ T3731] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.989326][ T3734] 9p: Bad value for 'rfdno' [ 34.998108][ T3736] __nla_validate_parse: 4 callbacks suppressed [ 34.998122][ T3736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.74'. [ 35.016228][ T29] audit: type=1400 audit(1768866287.060:241): avc: denied { listen } for pid=3733 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 35.035670][ T29] audit: type=1400 audit(1768866287.070:242): avc: denied { read } for pid=3733 comm="syz.1.73" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.058199][ T29] audit: type=1400 audit(1768866287.070:243): avc: denied { open } for pid=3733 comm="syz.1.73" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.081351][ T29] audit: type=1400 audit(1768866287.070:244): avc: denied { ioctl } for pid=3733 comm="syz.1.73" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.106601][ T29] audit: type=1400 audit(1768866287.130:245): avc: denied { accept } for pid=3728 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.125972][ T29] audit: type=1400 audit(1768866287.130:246): avc: denied { read } for pid=3728 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.148730][ T3739] loop2: detected capacity change from 0 to 512 [ 35.162514][ T29] audit: type=1400 audit(1768866287.230:247): avc: denied { mount } for pid=3733 comm="syz.1.73" name="/" dev="configfs" ino=2173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 35.171125][ T3739] EXT4-fs: Ignoring removed oldalloc option [ 35.203733][ T3739] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.75: dx entry: limit 1024 != root limit 124 [ 35.215634][ T3739] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.75: Corrupt directory, running e2fsck is recommended [ 35.215634][ T29] audit: type=1400 audit(1768866287.230:248): avc: denied { search } for pid=3733 comm="syz.1.73" name="/" dev="configfs" ino=2173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.251042][ T29] audit: type=1400 audit(1768866287.230:249): avc: denied { search } for pid=3733 comm="syz.1.73" name="/" dev="configfs" ino=2173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.259876][ T3739] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 35.318041][ T3739] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.75: corrupted in-inode xattr: invalid ea_ino [ 35.319638][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.346066][ T3739] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.75: couldn't read orphan inode 15 (err -117) [ 35.360013][ T3743] loop0: detected capacity change from 0 to 164 [ 35.386169][ T3743] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 35.408242][ T3739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.430628][ T3749] netlink: 'syz.4.78': attribute type 9 has an invalid length. [ 35.447696][ T3751] netlink: 'syz.1.79': attribute type 5 has an invalid length. [ 35.470939][ T3739] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.75: dx entry: limit 1024 != root limit 124 [ 35.482863][ T3739] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.75: Corrupt directory, running e2fsck is recommended [ 35.503270][ T3739] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.75: dx entry: limit 1024 != root limit 124 [ 35.515236][ T3739] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.75: Corrupt directory, running e2fsck is recommended [ 35.536818][ T3757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 35.556616][ T3761] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.75: dx entry: limit 1024 != root limit 124 [ 35.557295][ T3753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 35.568671][ T3761] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.75: Corrupt directory, running e2fsck is recommended [ 35.620386][ T3739] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.75: dx entry: limit 1024 != root limit 124 [ 35.632401][ T3739] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.75: Corrupt directory, running e2fsck is recommended [ 35.679749][ T3761] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 35.716774][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.737073][ T3772] loop2: detected capacity change from 0 to 128 [ 35.746016][ T3773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 35.772115][ T3775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.85'. [ 35.848044][ T3778] loop4: detected capacity change from 0 to 512 [ 35.881652][ T3778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.916107][ T3778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.933739][ T3778] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.992754][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 36.002443][ T3778] netlink: 'syz.4.86': attribute type 5 has an invalid length. [ 36.089336][ T3330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.155439][ T3772] syz.2.84: attempt to access beyond end of device [ 36.155439][ T3772] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 36.158828][ T3786] loop4: detected capacity change from 0 to 256 [ 36.168971][ T3772] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 36.179951][ T3786] vfat: Unknown parameter '00000000000000000000003' [ 36.190673][ T3776] syz.2.84: attempt to access beyond end of device [ 36.190673][ T3776] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 36.204345][ T3776] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 36.390110][ T3801] netlink: 'syz.1.91': attribute type 9 has an invalid length. [ 36.506056][ T3809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 36.567989][ T3817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.96'. [ 36.592998][ T3823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 36.604908][ T3822] loop1: detected capacity change from 0 to 512 [ 36.634235][ T3828] loop4: detected capacity change from 0 to 128 [ 36.643752][ T3829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 36.649527][ T3822] EXT4-fs: Ignoring removed oldalloc option [ 36.696072][ T3822] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.94: dx entry: limit 1024 != root limit 124 [ 36.708020][ T3822] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.94: Corrupt directory, running e2fsck is recommended [ 36.770037][ T3822] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 36.802074][ T3822] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.94: corrupted in-inode xattr: invalid ea_ino [ 36.860835][ T3822] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.94: couldn't read orphan inode 15 (err -117) [ 36.902137][ T3822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.939975][ T3822] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.94: dx entry: limit 1024 != root limit 124 [ 36.951864][ T3822] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.94: Corrupt directory, running e2fsck is recommended [ 36.968966][ T3822] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.94: dx entry: limit 1024 != root limit 124 [ 36.980899][ T3822] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.94: Corrupt directory, running e2fsck is recommended [ 37.023067][ T3849] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.94: dx entry: limit 1024 != root limit 124 [ 37.035066][ T3849] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.94: Corrupt directory, running e2fsck is recommended [ 37.057684][ T3851] FAULT_INJECTION: forcing a failure. [ 37.057684][ T3851] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.070838][ T3851] CPU: 0 UID: 0 PID: 3851 Comm: syz.2.107 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.070940][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.070952][ T3851] Call Trace: [ 37.070964][ T3851] [ 37.070973][ T3851] __dump_stack+0x1d/0x30 [ 37.071054][ T3851] dump_stack_lvl+0x95/0xd0 [ 37.071126][ T3851] dump_stack+0x15/0x1b [ 37.071142][ T3851] should_fail_ex+0x263/0x280 [ 37.071164][ T3851] should_fail+0xb/0x20 [ 37.071184][ T3851] should_fail_usercopy+0x1a/0x20 [ 37.071202][ T3851] _copy_from_user+0x1c/0xb0 [ 37.071227][ T3851] ___sys_sendmsg+0xc1/0x1e0 [ 37.071316][ T3851] __x64_sys_sendmsg+0xd4/0x160 [ 37.071341][ T3851] x64_sys_call+0x17ba/0x3000 [ 37.071379][ T3851] do_syscall_64+0xc0/0x2a0 [ 37.071400][ T3851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.071468][ T3851] RIP: 0033:0x7f3284c5acb9 [ 37.071494][ T3851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.071513][ T3851] RSP: 002b:00007f32836b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.071531][ T3851] RAX: ffffffffffffffda RBX: 00007f3284ed5fa0 RCX: 00007f3284c5acb9 [ 37.071542][ T3851] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 37.071631][ T3851] RBP: 00007f32836b7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.071652][ T3851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.071662][ T3851] R13: 00007f3284ed6038 R14: 00007f3284ed5fa0 R15: 00007ffeb92910d8 [ 37.071677][ T3851] [ 37.071994][ T3822] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.94: dx entry: limit 1024 != root limit 124 [ 37.108290][ T3849] EXT4-fs warning (device loop1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 37.110946][ T3822] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.94: Corrupt directory, running e2fsck is recommended [ 37.173160][ T3838] syz.4.100: attempt to access beyond end of device [ 37.173160][ T3838] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 37.280286][ T3838] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 37.290044][ T3838] syz.4.100: attempt to access beyond end of device [ 37.290044][ T3838] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 37.303714][ T3838] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 37.313056][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.360642][ T3858] loop2: detected capacity change from 0 to 512 [ 37.366997][ T3627] IPVS: starting estimator thread 0... [ 37.385276][ T3858] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 37.435858][ T3870] hsr_slave_1 (unregistering): left promiscuous mode [ 37.459264][ T3859] IPVS: using max 2304 ests per chain, 115200 per kthread [ 37.618719][ T3891] FAULT_INJECTION: forcing a failure. [ 37.618719][ T3891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.631964][ T3891] CPU: 1 UID: 0 PID: 3891 Comm: syz.4.115 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.632056][ T3891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.632068][ T3891] Call Trace: [ 37.632076][ T3891] [ 37.632085][ T3891] __dump_stack+0x1d/0x30 [ 37.632139][ T3891] dump_stack_lvl+0x95/0xd0 [ 37.632161][ T3891] dump_stack+0x15/0x1b [ 37.632179][ T3891] should_fail_ex+0x263/0x280 [ 37.632201][ T3891] should_fail+0xb/0x20 [ 37.632220][ T3891] should_fail_usercopy+0x1a/0x20 [ 37.632272][ T3891] _copy_from_user+0x1c/0xb0 [ 37.632324][ T3891] ucma_write+0xd8/0x260 [ 37.632348][ T3891] vfs_writev+0x42b/0x900 [ 37.632372][ T3891] ? __pfx_ucma_write+0x10/0x10 [ 37.632412][ T3891] do_writev+0xe9/0x210 [ 37.632436][ T3891] __x64_sys_writev+0x45/0x50 [ 37.632457][ T3891] x64_sys_call+0x1ba5/0x3000 [ 37.632479][ T3891] do_syscall_64+0xc0/0x2a0 [ 37.632540][ T3891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.632562][ T3891] RIP: 0033:0x7f2bd99cacb9 [ 37.632579][ T3891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.632593][ T3891] RSP: 002b:00007f2bd8427028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 37.632665][ T3891] RAX: ffffffffffffffda RBX: 00007f2bd9c45fa0 RCX: 00007f2bd99cacb9 [ 37.632720][ T3891] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 37.632733][ T3891] RBP: 00007f2bd8427090 R08: 0000000000000000 R09: 0000000000000000 [ 37.632745][ T3891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.632790][ T3891] R13: 00007f2bd9c46038 R14: 00007f2bd9c45fa0 R15: 00007ffed4d81458 [ 37.632810][ T3891] [ 38.260680][ T4003] EXT4-fs: Ignoring removed oldalloc option [ 38.275206][ T4003] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.120: dx entry: limit 1024 != root limit 124 [ 38.287187][ T4003] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.120: Corrupt directory, running e2fsck is recommended [ 38.320243][ T4003] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 38.328451][ T4003] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.120: corrupted in-inode xattr: invalid ea_ino [ 38.359312][ T4003] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.120: couldn't read orphan inode 15 (err -117) [ 38.402543][ T4003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.431356][ T4003] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.120: dx entry: limit 1024 != root limit 124 [ 38.443314][ T4003] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.120: Corrupt directory, running e2fsck is recommended [ 38.494406][ T4003] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.120: dx entry: limit 1024 != root limit 124 [ 38.506404][ T4003] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.120: Corrupt directory, running e2fsck is recommended [ 38.525054][ T4003] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.120: dx entry: limit 1024 != root limit 124 [ 38.537076][ T4003] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.120: Corrupt directory, running e2fsck is recommended [ 38.557571][ T4003] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.120: dx entry: limit 1024 != root limit 124 [ 38.569609][ T4003] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.120: Corrupt directory, running e2fsck is recommended [ 38.612632][ T4010] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 38.648038][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.884078][ T4017] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 38.969547][ T4009] syz.1.121: attempt to access beyond end of device [ 38.969547][ T4009] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 38.983170][ T4009] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 39.063270][ T4026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.101919][ T4026] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.220354][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.282202][ T4033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.295040][ T4033] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.321126][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.695246][ T4051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.712035][ T4051] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.737514][ T4051] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.134: corrupted xattr block 32: invalid ea_ino [ 39.751136][ T4051] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 39.768538][ T4051] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.134: corrupted xattr block 32: invalid ea_ino [ 39.823715][ T4051] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 39.916099][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.930102][ T4057] netlink: 'syz.4.136': attribute type 9 has an invalid length. [ 39.936974][ T4059] FAULT_INJECTION: forcing a failure. [ 39.936974][ T4059] name failslab, interval 1, probability 0, space 0, times 0 [ 39.950649][ T4059] CPU: 1 UID: 0 PID: 4059 Comm: syz.0.138 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.950673][ T4059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 39.950683][ T4059] Call Trace: [ 39.950745][ T4059] [ 39.950752][ T4059] __dump_stack+0x1d/0x30 [ 39.950772][ T4059] dump_stack_lvl+0x95/0xd0 [ 39.950789][ T4059] dump_stack+0x15/0x1b [ 39.950811][ T4059] should_fail_ex+0x263/0x280 [ 39.950833][ T4059] should_failslab+0x8c/0xb0 [ 39.950851][ T4059] kmem_cache_alloc_noprof+0x68/0x490 [ 39.950873][ T4059] ? getname_flags+0x7f/0x3b0 [ 39.950948][ T4059] getname_flags+0x7f/0x3b0 [ 39.950966][ T4059] do_sys_openat2+0x60/0x150 [ 39.951043][ T4059] __x64_sys_openat+0xf2/0x120 [ 39.951132][ T4059] x64_sys_call+0x2b07/0x3000 [ 39.951153][ T4059] do_syscall_64+0xc0/0x2a0 [ 39.951222][ T4059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.951241][ T4059] RIP: 0033:0x7f2778f7b58e [ 39.951257][ T4059] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 39.951319][ T4059] RSP: 002b:00007f2777a16b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.951338][ T4059] RAX: ffffffffffffffda RBX: 00007f2777a176c0 RCX: 00007f2778f7b58e [ 39.951350][ T4059] RDX: 0000000000000482 RSI: 00007f2777a16c00 RDI: ffffffffffffff9c [ 39.951361][ T4059] RBP: 00007f2777a16c00 R08: 0000000000000000 R09: 0000000000000000 [ 39.951374][ T4059] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 39.951387][ T4059] R13: 00007f2779236038 R14: 00007f2779235fa0 R15: 00007ffe59a020f8 [ 39.951406][ T4059] [ 40.185424][ T4063] set_capacity_and_notify: 7 callbacks suppressed [ 40.185481][ T4063] loop4: detected capacity change from 0 to 128 [ 40.261985][ T4067] loop1: detected capacity change from 0 to 128 [ 40.282107][ T4067] FAULT_INJECTION: forcing a failure. [ 40.282107][ T4067] name failslab, interval 1, probability 0, space 0, times 0 [ 40.295281][ T4067] CPU: 1 UID: 0 PID: 4067 Comm: syz.1.141 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.295307][ T4067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.295318][ T4067] Call Trace: [ 40.295324][ T4067] [ 40.295379][ T4067] __dump_stack+0x1d/0x30 [ 40.295402][ T4067] dump_stack_lvl+0x95/0xd0 [ 40.295422][ T4067] dump_stack+0x15/0x1b [ 40.295460][ T4067] should_fail_ex+0x263/0x280 [ 40.295482][ T4067] should_failslab+0x8c/0xb0 [ 40.295512][ T4067] __kmalloc_cache_noprof+0x64/0x4a0 [ 40.295536][ T4067] ? alloc_pipe_info+0xad/0x340 [ 40.295602][ T4067] alloc_pipe_info+0xad/0x340 [ 40.295618][ T4067] splice_direct_to_actor+0x591/0x670 [ 40.295634][ T4067] ? kstrtouint_from_user+0xa8/0xf0 [ 40.295655][ T4067] ? __pfx_direct_splice_actor+0x10/0x10 [ 40.295774][ T4067] ? __rcu_read_unlock+0x4e/0x70 [ 40.295790][ T4067] ? get_pid_task+0x96/0xd0 [ 40.295814][ T4067] ? avc_policy_seqno+0x15/0x30 [ 40.295957][ T4067] ? selinux_file_permission+0x1e1/0x320 [ 40.296048][ T4067] do_splice_direct+0x119/0x1a0 [ 40.296066][ T4067] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 40.296089][ T4067] do_sendfile+0x380/0x650 [ 40.296114][ T4067] __x64_sys_sendfile64+0x105/0x150 [ 40.296141][ T4067] x64_sys_call+0x2db1/0x3000 [ 40.296163][ T4067] do_syscall_64+0xc0/0x2a0 [ 40.296181][ T4067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.296201][ T4067] RIP: 0033:0x7f981b4bacb9 [ 40.296216][ T4067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.296290][ T4067] RSP: 002b:00007f9819f17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 40.296307][ T4067] RAX: ffffffffffffffda RBX: 00007f981b735fa0 RCX: 00007f981b4bacb9 [ 40.296319][ T4067] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 40.296331][ T4067] RBP: 00007f9819f17090 R08: 0000000000000000 R09: 0000000000000000 [ 40.296343][ T4067] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 40.296356][ T4067] R13: 00007f981b736038 R14: 00007f981b735fa0 R15: 00007ffd0bbe3dc8 [ 40.296391][ T4067] [ 40.522945][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 40.522959][ T29] audit: type=1326 audit(1768866292.590:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2778fbacb9 code=0x7ffc0000 [ 40.602431][ T29] audit: type=1326 audit(1768866292.620:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2778fbacb9 code=0x7ffc0000 [ 40.625802][ T29] audit: type=1326 audit(1768866292.620:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2778fbacb9 code=0x7ffc0000 [ 40.649029][ T29] audit: type=1326 audit(1768866292.620:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2778fbacb9 code=0x7ffc0000 [ 40.672242][ T29] audit: type=1326 audit(1768866292.620:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2778fbacb9 code=0x7ffc0000 [ 40.695585][ T29] audit: type=1326 audit(1768866292.620:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2778fbacb9 code=0x7ffc0000 [ 40.718881][ T29] audit: type=1326 audit(1768866292.620:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2778fbacb9 code=0x7ffc0000 [ 40.742181][ T29] audit: type=1326 audit(1768866292.620:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2778fbacb9 code=0x7ffc0000 [ 40.765389][ T29] audit: type=1326 audit(1768866292.620:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2778fbacb9 code=0x7ffc0000 [ 40.788698][ T29] audit: type=1326 audit(1768866292.620:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4072 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2778fbacb9 code=0x7ffc0000 [ 40.967710][ T4076] __nla_validate_parse: 4 callbacks suppressed [ 40.967795][ T4076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 41.042032][ T4080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.143'. [ 41.223552][ T4084] ================================================================== [ 41.231665][ T4084] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 41.239997][ T4084] [ 41.242306][ T4084] write to 0xffff88811c2c83dc of 4 bytes by task 4080 on cpu 1: [ 41.249928][ T4084] inode_update_timestamps+0x147/0x270 [ 41.255390][ T4084] file_update_time_flags+0x269/0x300 [ 41.260767][ T4084] file_update_time+0x17/0x20 [ 41.265457][ T4084] shmem_file_write_iter+0x9c/0xf0 [ 41.270579][ T4084] iter_file_splice_write+0x6bc/0xa80 [ 41.275948][ T4084] direct_splice_actor+0x156/0x2a0 [ 41.281057][ T4084] splice_direct_to_actor+0x311/0x670 [ 41.286417][ T4084] do_splice_direct+0x119/0x1a0 [ 41.291262][ T4084] do_sendfile+0x380/0x650 [ 41.295669][ T4084] __x64_sys_sendfile64+0x105/0x150 [ 41.300879][ T4084] x64_sys_call+0x2db1/0x3000 [ 41.305588][ T4084] do_syscall_64+0xc0/0x2a0 [ 41.310105][ T4084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.315984][ T4084] [ 41.318294][ T4084] read to 0xffff88811c2c83dc of 4 bytes by task 4084 on cpu 0: [ 41.325842][ T4084] atime_needs_update+0x2a8/0x3e0 [ 41.330870][ T4084] touch_atime+0x4a/0x340 [ 41.335197][ T4084] shmem_file_splice_read+0x5b1/0x600 [ 41.340565][ T4084] splice_direct_to_actor+0x26e/0x670 [ 41.345929][ T4084] do_splice_direct+0x119/0x1a0 [ 41.350770][ T4084] do_sendfile+0x380/0x650 [ 41.355180][ T4084] __x64_sys_sendfile64+0x105/0x150 [ 41.360379][ T4084] x64_sys_call+0x2db1/0x3000 [ 41.365055][ T4084] do_syscall_64+0xc0/0x2a0 [ 41.369548][ T4084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.375423][ T4084] [ 41.377732][ T4084] value changed: 0x10b4b016 -> 0x119bc321 [ 41.383439][ T4084] [ 41.385760][ T4084] Reported by Kernel Concurrency Sanitizer on: [ 41.391895][ T4084] CPU: 0 UID: 0 PID: 4084 Comm: syz.0.143 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.401531][ T4084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.411582][ T4084] ================================================================== [ 41.446793][ T4091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.146'.