last executing test programs: 3m55.476413915s ago: executing program 32 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1}, r0, 0xe, 0xffffffffffffffff, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) 2m53.132918142s ago: executing program 0 (id=838): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x39, @initdev={0xfe, 0x88, '\x00', 0xbf, 0x0}, @mcast2, 0x2000, 0x700, 0x0, 0x2}}) 2m53.132728092s ago: executing program 0 (id=839): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000a020000000000000000000001053f0000000000040000000001000005"], 0x0, 0x4e, 0x0, 0x1, 0x3f05}, 0x28) 2m53.115099073s ago: executing program 0 (id=840): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x1, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x8}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x24002850) r1 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r2, &(0x7f0000000000), 0x10) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x5) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x1070bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r3, 0x0, 0x4000) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10}, 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1f8}}, 0x20000010) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) 2m52.620165248s ago: executing program 0 (id=852): socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00e6ff02060101000034e4000000000a0000000500010006000000050004e40000000011000300686173683a69702c706f727400000000250005000a0800000900020073797a3100000000c0bd1cd66e30abbf7148d027d5e0ff8a4be52a75a8756c61f1ef88d0649576474d8736cb0d0baa4ccdbd21dcbbb5007865037f4e65593a4196c2dfa26e7b2cdbf1a7f7648d28732064756cf002105649cefe46c1bd95fc69f81c378ce8e280bf704ca333a95de6"], 0x4c}}, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x80002, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x10, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) (async) r4 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x23, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48844}, 0x40) (async) r6 = dup(r1) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7}, 0x7) (async) splice(r7, 0x0, r1, 0x0, 0xffff, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001b6fe9e4645cc78c18ba18000000000000007000000070000000070000000700000000000010080000000000000006000005090000000d000000040000200b000000080000000400000045ba000008000000040000000000000000000000040000000800000001000000000000007f1e000003000000000000000c0000000b0000000000000e0500000002"], &(0x7f0000000500)=""/144, 0x8f, 0x90, 0x0, 0x7, 0x10000}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1d, 0x4, 0x7, 0xf, 0x0, 0x1, 0x9, '\x00', 0x0, r9}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r10, @ANYRES8=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000040)=[0x7, 0x7]) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11}, 0xc) 2m52.616860508s ago: executing program 0 (id=853): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003460200bfa30000170000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f0000009c600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b04000000f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcb9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f6b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670594acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f674eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d895a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5d1fe58a00c6855ada17dcbb20a2f03164292a1e4e53e4140224ba82b599de2604398b860906dccd87c1bf0e8d0cce2e34589ef2bd3672907b7604034d4697fa3f957622eaa59df5c02b307bceaf138b419ce49f4850328069ed4d5559babf388329d6605f74dc1c21c9f0f1aa9826ba2936f14affb0b06d0aeb1054b2d044cafe64979590000000000000000000000784de836bec51a9db6533248165f79bf47b13d6d2c83a7442632f60f9eb0cc4fa54e08e5e349cc3afdff6f3175a80c4015d380ee0880a8a822d0a630a864c823392420ec93fab6d4d98a53c8b75221a9576e8204169fa1046355a0342539527e882e7fcaf062f0733fc0fb97"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) 2m51.509964183s ago: executing program 0 (id=871): unshare(0x2040400) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000e92100010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 2m51.483364245s ago: executing program 33 (id=871): unshare(0x2040400) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000e92100010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 2m46.693359305s ago: executing program 1 (id=911): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000090000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 2m46.57727693s ago: executing program 1 (id=912): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) 2m46.414515238s ago: executing program 1 (id=914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000f5ff0a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014"], 0xfc}}, 0x0) 2m46.337331742s ago: executing program 1 (id=917): r0 = socket(0x2b, 0xa, 0x1) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="61ebc972a54406a861259dd88d36c3c490b7e8a9eb8306e890e9045bb452569bfb0a03856ebd6f7b9e1ddcc455bd8df5941fbee6fecc21bad5561619649570769b5949695a51d51655882b6c4a1a450d304a205883cd96dbd8f27757923a709341934c3cf79b06f5620db0bd28c1d6de1961d4b919171d7bf1cb58fd2b75f1f81595dd9351bbbe79c5", 0x89}], 0x1, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x2c, &(0x7f0000000000)=0x1, 0x4) 2m46.336710312s ago: executing program 1 (id=918): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7"], &(0x7f0000000180)='GPL\x00'}, 0x94) close(r0) socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m45.945395952s ago: executing program 1 (id=920): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r3, 0x3) accept4(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x4004) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000180)=0x4) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000180)=0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x102240, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x102240, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) write$P9_RVERSION(r10, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000, 0x0, 0x80000}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000, 0x0, 0x80000}}}}}, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40022100) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) 2m30.673117576s ago: executing program 34 (id=920): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r3, 0x3) accept4(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x4004) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000180)=0x4) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000180)=0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x102240, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x102240, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) write$P9_RVERSION(r10, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000, 0x0, 0x80000}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000, 0x0, 0x80000}}}}}, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40022100) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) 1m27.546149162s ago: executing program 5 (id=1843): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3, 0x9, 0x2000}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m27.445375567s ago: executing program 5 (id=1844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b040400ffffff9f700012800b00010067656e657665000060000280050004000100000014000700fe"], 0x90}}, 0x0) 1m27.445040138s ago: executing program 5 (id=1846): perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 1m27.38128198s ago: executing program 5 (id=1848): syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x200080) (async) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x200080) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x85, &(0x7f00000006c0), 0x1, 0x62f, &(0x7f0000000700)="$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") ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000100)={0x100, 0x5, 0x301, 0x5, 0x6, 0x7ff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x128, 0x30, 0xffffffffffffffff, 0x70bd2c, 0x0, {}, [{0x114, 0x1, [@m_ife={0x110, 0x1c, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_SMAC={0xa, 0x4, @random="ee74a9fdda87"}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @random="234092d0aa2f"}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfff, 0x6, 0xffffffffffffffff, 0x9}}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x800}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4c, 0x6, "75d1d7db15eada8ad5f20cf70c28b9842468b703dda84cfb3f0505a12b0fc17fd99c440f6b74a3016e27afb716062ce4abedd5789ce1f9b82ccc959950a7b815c4e42e21a005d2eb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x6}}}}]}]}, 0x128}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") (async) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x41, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x1003, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f00000006c0)=""/135}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) (async) readv(r3, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) gettid() (async) r5 = gettid() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r6) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="bf16000000000000b7070000000100002070000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02221e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af268c900a756e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32bf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b577243152374d7b367337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fb2469d6cbf857a137b542045d203e43874fe17720a05d3bc42bde811dcf97732108f5cb5943e609856876c2108491e88875ead76331822c8f0151a1cf06e634ac0933487716484f30f17d8f29af19784814192b4677759b781fc1a6726b154bbf3f30c48f0b829397acb9b337a6929d1158492e49bfe9a1158a57b6a422c8d1a3c476487a736a74d01bf48e05ac030092c66a502a8a5c9ef0a29582b6fef6d0dcd6a3a277887134f98291d79a2ed48adb3086b7c1c7340e0998036686b1919d25c3aa9591f4135fdad46003d76b366b81e50fdefeecf3b5d17e946059e2883ca43d61e14e725f0acaff73e0922319b6ea7b09b7b9ea691f5598f014f362e033ba9bc2a64f1c2ed591ef9c6f1a7a08e8e2842c0a592dd82d72e141db440000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) wait4(0x0, &(0x7f0000000d40), 0x2, &(0x7f0000000d80)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES8=r5], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES8=r5], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000240)) 1m26.966982601s ago: executing program 5 (id=1853): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r5, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 1m26.79744428s ago: executing program 5 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsu(&(0x7f00000000c0), 0x481, 0x400000) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x139, &(0x7f0000000480)}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00!\x00\x00\x00\x00\x00~\x00\x00\x00\b\x00', @ANYRES32=0x0], 0x1c}}, 0x4000054) 1m26.768752911s ago: executing program 35 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsu(&(0x7f00000000c0), 0x481, 0x400000) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x139, &(0x7f0000000480)}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00!\x00\x00\x00\x00\x00~\x00\x00\x00\b\x00', @ANYRES32=0x0], 0x1c}}, 0x4000054) 47.228967158s ago: executing program 7 (id=2272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsu(&(0x7f00000000c0), 0x481, 0x400000) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x139, &(0x7f0000000480)}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="7961000000fe000000007e0000000800", @ANYRES32=0x0], 0x1c}}, 0x4000054) 46.301513065s ago: executing program 7 (id=2283): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80000000000, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x6, 0x0, 0x0, 0x0, 0xb, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x7e75, 0x5, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) (fail_nth: 1) close(r7) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x4000011, 0xffffffffffffffff, 0x8000000000) fchdir(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) 43.652007077s ago: executing program 7 (id=2295): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="eea9ad19", 0x4}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c90a7ff000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 43.58953965s ago: executing program 7 (id=2298): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0x0, 0x40}, 0x0, 0x1000000}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x400000}}, 0xe8) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0xff, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000002f048bf9fbcf363c00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) setpriority(0x1, 0x0, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 43.339738552s ago: executing program 7 (id=2303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000020201020000000002000003240002800c000280050001"], 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) umount2(&(0x7f0000000040)='./file0\x00', 0x2) (async) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x1) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r0) 42.563584431s ago: executing program 7 (id=2311): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 42.525288493s ago: executing program 36 (id=2311): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 17.113318334s ago: executing program 8 (id=2674): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0x174, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x148, 0x2, [@TCA_U32_SEL={0x144, 0x5, {0x2, 0x8, 0xd, 0x5, 0x0, 0xefdf, 0x2, 0x84c, [{0x0, 0x8000, 0x1, 0x32ec}, {0x4, 0x2, 0x5, 0x7fffffff}, {0x9, 0x7, 0xd, 0x6}, {0x2, 0x100, 0x6, 0x8}, {0x3, 0x8, 0x5c, 0x4}, {0x2, 0x0, 0xf53, 0x8}, {0xe, 0x9, 0xbb, 0x8}, {0x80, 0xfff, 0x1b09, 0x5}, {0x8, 0xb38, 0x1, 0x8}, {0x400, 0x5b, 0x8}, {0x2, 0x7, 0x0, 0x4}, {0x2, 0x2, 0x10, 0x880}, {0x8, 0xb56, 0x1003}, {0xfe8c, 0xea81aae, 0xff, 0x2}, {0x6, 0x6, 0x4d, 0x653}, {0x1, 0xe7, 0x401, 0xd}, {0x0, 0xffffff50, 0xfffffff9, 0x2}, {0x0, 0x1, 0x464, 0x7fffffff}, {0x101, 0x7, 0x1, 0x2}]}}]}}]}, 0x174}}, 0x24040084) 17.112893234s ago: executing program 8 (id=2675): r0 = syz_open_dev$sg(0x0, 0xe6, 0x2602) r1 = syz_io_uring_setup(0x114, &(0x7f0000000100)={0x0, 0x79ae, 0x3380, 0x801, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3, 0x0, r1}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffc, 0x9f, 0x10, @buffer={0x0, 0xec, &(0x7f0000000700)=""/236}, &(0x7f0000000200)="c343f7e2ceaf6aa803678134e39fa5d16a99e0f2cceac0c9df014aef202fb56d2d80719b8a70fa817495686ac3e3c33c4b517ebed6e46537180d9c199345e5badad4cf0c86e1b69f9155c5fca5857dce69a4d9c11e8d86a84dcec1bd69c4a438cc484b98aa90c1c24e168325eb4e412d1d800add814f143f7472e44abac9a303813e8cbe29f5475c5d2c7fb8a57881b3495ae327c6731d650fad0f55275a24", &(0x7f0000000800)=""/222, 0x8, 0x4, 0x2, &(0x7f0000000300)}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 17.067158636s ago: executing program 8 (id=2677): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="50010000", @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000c8004000b800800020001000000200108801c00078008000501000000000800000000000000080005000000000124000780080005000000000008000500"], 0x150}}, 0x0) 16.899941465s ago: executing program 8 (id=2678): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f00009f3000/0x1000)=nil, 0x1000, 0x2, 0x100010, r0, 0xf0c15000) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) write(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1345, 0x40, 0x0, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x20, r7, 0x1, 0x70ad25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}}, 0xc) 15.873342606s ago: executing program 8 (id=2699): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0) 14.137446813s ago: executing program 8 (id=2703): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r5, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 13.923282064s ago: executing program 37 (id=2703): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r5, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 7.013186579s ago: executing program 4 (id=2821): socket$vsock_stream(0x28, 0x1, 0x28) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x2048c5, &(0x7f0000000340)=ANY=[], 0x1, 0x2c5, &(0x7f0000000980)="$eJzs3cFr024YwPFn7bZ2G1t7GIPfD8QHveglbPUvKLKBWFDmMqYHIXOplsZmNLVSEbebBy/7O4ZHTwrqP7DLbuJVvBRB8LKDWFmTuK7rcJ2b7cz3AyPv3jfPmzd7k/Hkhab1pY2Hxbxn5K2KxJIqMZF12RFJ75YCA8E21iwPS6t1uTz27cO5W7fvXM/mcrPzqnPZhSsZVZ04//bx05cX3lfGFl9NvEnIVvpu/Wvm09bU1n/1Hwth766IpcuuW7GWHVtXCl7RUL3p2JZna6Hk2eWKtrTnHXd1taZWaWV8dLVse55apZoW7ZpWXK2Ua2rdtwolNQxDx0clauJdR5ib8/NW9lQGg14Y6VRZLmeteMdGc/NvDAoAAPSX+tJGvBf5/4OCpwVPS+6+/P5g/h+TLvJ/kUjn/90j/4+C3fx/NLh/9yP/BwAAAAAAAAAAAAAAAAAAAADgLNhpNFKNRiMVbsOfhIgkRST8vdfjxOlg/qOt5YN7SRHnedWsmv7Wb8/mpSCO2DI9JPK9eT0E/PLctdzstDZNyTtnLYhfq5pxSYTxoXTn+Bk/Xlvj12ToRRDlHz8jKZnsHJ/pEF81h+XSxUYi6MMWQ1KyfU9ccWSleV3vxT+bUb16I9cWP9LcDwAAAACAf4Ghv6Tbn9+b7YaGrw1pa/cr99YHJPWb9YG25+tB+X+wd+cNAAAAAECUeLUnRctx7HL/F8J1iGP3E37/wYmM56T/dEPB4I4elTzqIQZFJKh53R9T2VoYWPdP/GDT7oQft+f4n83yFxHZVzN5lu6UQwufHwUXWVjz8fCdF8c7/sNgzQ4AAAA4s8Kkf6DrSHP7VAYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAEHfXlYeH+x3n3WMvh4r05SwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA//AwAAP//52YPOg==") perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010100000000000000000300000005000100070000000900020073797a300000809b00001400078008001240fffffffe080013400000ffff05000400000000000c000300686173683a697000050005000a000000"], 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x5, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x80000000, 0x200}, 0x106200, 0x1000, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0xbd, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) 6.884848396s ago: executing program 4 (id=2823): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="feffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r0}, 0x38) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001080)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000600)="a4b3781edd6dc96f15a539b9e3d7d5d27b4171743ba5c007bc0c5751f3310d86cf032df39f194f8501d37ab849b549f457d5f9f39e7154b16654d1442866ed23410e698ccabd41c5b74783ab8ef9eef957edb99d1b502ea904e79b6273eee14055267fb9f712d74c9f901900b7b23b1a3653fab8ad3055e142617e7ece2a732a86c4e5bffda7df7110071479c5d9fb347e4d0e45664306beb6ac88c273c6fc8f7e9a39b765aec3935d2393995f9f71338456bc8364408d1c589299f314db05c734affc246ef34143801e8b485566d24874184f55bc6b3bea40254f", 0xdb}, {&(0x7f0000000700)="9b61b86450c230a9988b28a5702b40478ea98bd61c7eedd1c5b361a775c34ded909e1a0cacc0c8187cd12ae30bb73c248fd47ac54fff790d2482853dadb6b8a342e92179c8e733b48c945b4a7d91ef206816d99d14258d778d362eb0895fe3d99c081e690bfc87a11db4429422a765541b13d91a695e020c74ea094cfbab72bcadc917e2326c9007ea902bc9c3b8f5acf79ddc96bcd59910aecb91655a126acc0b1333c6e3d7a4fca78c8e84f593ef320143d82991cdf211bb505072541ec1b85a1c1c416ac84727e472f4af10f27a48f28c8a10719943ca5cb7734d486d367e2cb348180d59c12669f7b7e2a74a0347", 0xf0}, {&(0x7f0000000fc0)}, {&(0x7f0000000ec0)="87a02be854ef6e8ee35f5fa5d4af18fb4fedc14bddc01bc4e84bba065365dd07d079fe6a21e81702b7860e9bf841877137e0b2ff802d6361241f5602ebcbe3990b519f6f3ee1f50830bfc6523846cbcb7b89904305df83478e290b88566d12510fa69d821b", 0x65}, {&(0x7f0000000180)="33c6a1", 0x3}, {&(0x7f00000010c0)="a1da3ba0f7ee3b01a40236f1b5b962cbdbe59d2e543460c6fd8103fa5a526704ce39e543c0b0de240d569ece88ffe50d9a1a8d5db848be8cbe1c0871c83e6f99993bf00e4219b13a6bcc84867d83ab80d6c477e34ee4f2876ee6f6a748fcf7ad900f882df4d9e5fb5d49ded373de6ab42df87c5224950e286e426de2e697d1df6b30e94a53a101e27615ad91cfae41a0869e073e2195a7", 0x97}], 0x6, &(0x7f0000001040)=[@cred={{0x1c}}], 0x20, 0x10}}], 0x1, 0x45) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x300}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) brk(0x800000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pwritev(r6, 0x0, 0x0, 0xffffffff, 0x5) 6.133400823s ago: executing program 4 (id=2832): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000056, 0x3) munlock(&(0x7f0000001000/0x1000)=nil, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xff2e) 6.074694086s ago: executing program 4 (id=2835): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x7}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000) 5.487616836s ago: executing program 4 (id=2836): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000450000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0xf, 0x6, 0x50b, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b03d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 5.322186143s ago: executing program 4 (id=2839): syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000182b00fc010000000000000000000000000001fe8000000000000000000000000000aa3b00020000070000000500"], 0x0) 2.030924438s ago: executing program 9 (id=2903): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x1, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x8}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x24002850) r1 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r2, &(0x7f0000000000), 0x10) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x5) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x1070bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r3, 0x0, 0x4000) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10}, 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1f8}}, 0x20000010) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) 1.719310824s ago: executing program 9 (id=2912): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a28d000000c538c7cb7a"}}, @offload={0xc}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.577133051s ago: executing program 2 (id=2915): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xf1}, 0x94) 1.576785031s ago: executing program 9 (id=2917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsu(0x0, 0x481, 0x400000) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x139, 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\n~\x00\x00\x00\b'], 0x1c}}, 0x4000054) 1.547941443s ago: executing program 6 (id=2918): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x7}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff050000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000) 1.518036594s ago: executing program 3 (id=2919): r0 = gettid() syz_open_procfs(r0, &(0x7f0000000000)='net/route\x00') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000040)={[], [{@seclabel}]}, 0x1, 0x7cc, &(0x7f00000022c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 1.38817391s ago: executing program 6 (id=2920): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000b000000000000000000000000711236000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.089405145s ago: executing program 2 (id=2921): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@overriderock}, {@hide}, {@check_strict}, {}, {@gid}, {@cruft}, {@overriderock}, {@utf8}]}, 0x1, 0xa22, &(0x7f0000000dc0)="$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") 999.18513ms ago: executing program 6 (id=2922): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x18, 0x63, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}, "00008848"}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) 983.14322ms ago: executing program 3 (id=2923): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0x174, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x148, 0x2, [@TCA_U32_SEL={0x144, 0x5, {0x2, 0x8, 0xd, 0x5, 0x0, 0xefdf, 0x2, 0x84c, [{0x0, 0x8000, 0x1, 0x32ec}, {0x4, 0x2, 0x5, 0x7fffffff}, {0x9, 0x7, 0xd, 0x6}, {0x2, 0x100, 0x6, 0x8}, {0x3, 0x8, 0x5c, 0x4}, {0xe, 0x9, 0xbb, 0x8}, {0x80, 0xfff, 0x1b09, 0x5}, {0x8, 0xb38, 0x1, 0x8}, {0x400, 0x5b, 0x8}, {0x2, 0x7, 0x0, 0x4}, {0x2, 0x2, 0x10, 0x880}, {0x20, 0xf0, 0x3134, 0x8}, {0x8, 0xb56, 0x1003}, {0xfe8c, 0xea81aae, 0xff, 0x2}, {0x6, 0x6, 0x4d, 0x653}, {0x1, 0xe7, 0x401, 0xd}, {0x0, 0xffffff50, 0xfffffff9, 0x2}, {0x0, 0x1, 0x464, 0x7fffffff}, {0x101, 0x7, 0x1, 0x2}]}}]}}]}, 0x174}}, 0x24040084) 885.329416ms ago: executing program 6 (id=2924): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@bsdgroups}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000001e00)="$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") setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 884.849056ms ago: executing program 2 (id=2925): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x85, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") 824.264888ms ago: executing program 3 (id=2926): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregs(0xe, r0, 0x9, &(0x7f0000000000)=""/44) 764.155742ms ago: executing program 6 (id=2927): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f00000001c0)={[{@journal_dev={'journal_dev', 0x3d, 0xb}}, {@usrjquota_path={'usrjquota', 0x3d, '\xe9\x1fq\x89Y\x1e\x923aK'}}, {@data_err_ignore}, {@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota_path={'usrjquota', 0x3d, '\xe9\x1fq\x89Y\x1e\x923aK'}}, {@i_version}]}, 0x1, 0x59d, &(0x7f0000001100)="$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") 709.352764ms ago: executing program 2 (id=2928): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r1 = syz_io_uring_setup(0x114, &(0x7f0000000100)={0x0, 0x79ae, 0x3380, 0x801, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3, 0x0, r1}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 700.300725ms ago: executing program 9 (id=2929): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x7}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff050000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000) 558.278762ms ago: executing program 9 (id=2930): unshare(0x2a020400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000001"], 0x48) 493.311795ms ago: executing program 2 (id=2931): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0xffffffff, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 492.873305ms ago: executing program 9 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c0045000001050500000000000000000a0000003c0002802c000180140003010001000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018094010300ff020000000000000000000114000400200100000000000000006f0000000001060003400002000008000740000000103573e563fadca6b4d778a02a2bd8b1d4e471d84153ed4d312c9a1a8db57daea108a376b4c1337629b423a7efddfd43628fc952d25436bfa0c79889e675ad4c8c723d8b6fc323deef5e684907ada4b658c0c2e1fcf18d"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000104010100000000000000000500000006000640010100000500010003"], 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018fdffffffffffffff00000000000000020000000000"], 0x0, 0x1a, 0x0, 0xa}, 0x28) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)={0x294, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc, 0xd}}}}, [@NL80211_ATTR_TID_CONFIG={0x270, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x49}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x86}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdb}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x64}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xab6c, 0x101, 0x3, 0x0, 0x9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0xa}, {0x0, 0x2}, {0x2, 0x5}, {0x2, 0x1}, {0x0, 0x9}, {0x7}, {0x6, 0x6}, {0x3, 0x9}, {0x1, 0x7}, {}, {0x2, 0x4}, {0x2, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xd1f, 0x8, 0x7c4, 0x1, 0x3, 0x101, 0x1]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0x9, 0x36, 0x2, 0x12, 0x1, 0x1, 0x3, 0x60, 0x16, 0x4, 0x18, 0x24, 0x4, 0x1b, 0x60, 0xb, 0x16, 0x48, 0x2, 0xb, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x48, 0x16, 0x60, 0x36, 0x1b, 0x6, 0x4, 0xc, 0x3c, 0x36, 0x6c, 0x2, 0x30, 0x36, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x4, 0x3, 0xfff, 0x1, 0x69f4, 0x9, 0x101]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x5, 0x36, 0x6c, 0x18, 0x2, 0x2, 0x3, 0x48, 0x16, 0x16, 0x16]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x18, 0x1b, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0xa, 0x644, 0x100, 0xfffb, 0x8, 0x4, 0x4d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x4, 0xf6b, 0x18, 0xf000, 0x9, 0x8000, 0x7]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1a, 0x4, 0x9, 0x5, 0x19]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x294}}, 0x4000091) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r10, 0x0) ftruncate(r10, 0x51a9497) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 343.082463ms ago: executing program 3 (id=2933): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x2, 0x1}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xf, 0x80, 0x0, 0x0, 0x0, 0x40000000002, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000, 0x7}, 0x800, 0x1c00000000000000, 0xd2b6, 0x3, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 334.314923ms ago: executing program 2 (id=2934): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc458, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1, @perf_config_ext={0x385b77ee, 0x1000}, 0x0, 0x0, 0xffffffff, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r2, 0x700}, 0x20) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x5, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedreceive(r4, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 214.035149ms ago: executing program 3 (id=2935): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0x174, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x148, 0x2, [@TCA_U32_SEL={0x144, 0x5, {0x2, 0x8, 0xd, 0x5, 0x0, 0xefdf, 0x2, 0x84c, [{0x0, 0x8000, 0x1, 0x32ec}, {0x4, 0x2, 0x5, 0x7fffffff}, {0x9, 0x7, 0xd, 0x6}, {0x2, 0x100, 0x6, 0x8}, {0x2, 0x0, 0xf53, 0x8}, {0xe, 0x9, 0xbb, 0x8}, {0x80, 0xfff, 0x1b09, 0x5}, {0x8, 0xb38, 0x1, 0x8}, {0x400, 0x5b, 0x8}, {0x2, 0x7, 0x0, 0x4}, {0x2, 0x2, 0x10, 0x880}, {0x20, 0xf0, 0x3134, 0x8}, {0x8, 0xb56, 0x1003}, {0xfe8c, 0xea81aae, 0xff, 0x2}, {0x6, 0x6, 0x4d, 0x653}, {0x1, 0xe7, 0x401, 0xd}, {0x0, 0xffffff50, 0xfffffff9, 0x2}, {0x0, 0x1, 0x464, 0x7fffffff}, {0x101, 0x7, 0x1, 0x2}]}}]}}]}, 0x174}}, 0x24040084) 205.36192ms ago: executing program 3 (id=2936): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000002850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 6 (id=2937): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'nr0\x00'}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}]}, 0x38}}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000040)=0x200010, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001040)={'vcan0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000001200)={&(0x7f0000000d40)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000d80)="d9b52e4f8010b595f3db25e393a093b27d02585963a88d497605295cd6453afa564a0027bff19769e9bf5b13f352b547c4769266962a1941d450719ee5dbb84f6cf85e7bd054a346c608d715cfb2418aa1487a62ebce7f4b3fec4b8b322eb788e8bb90ec4a97d99afb1d54e29f0acae1b71c8b5532526f8114421466ecb6021e5ac8e1556e0bb2496c", 0x89}, {&(0x7f0000000e40)="61a3ae139cb4e3b656241769b34f8e7271671417fa77c624916a0b0e2bb5cb2a2c9bbd486d7f43b51c5bf37e3c436db7c377bc892c35dd41862985d9c68d80309d4b1f81acb528025ff0c890f4b85cd10b36ce457e51a72e4dbb2176087e1f46a34c949dae32962856d7dfce5e68be5cd982d081bd1db4017d7b5229c2ce134c893f30c72447fe5c8e1839c907", 0x8d}, {&(0x7f0000000f00)="50e7f375df730259dbaf2615d50252597696159f2da3815decf038c70e7b8f033887675a50a38da4fea0b40069980e34c07994690f2a48acb4d20f46de0fbfe04fae46f0ec2746bf2cede534d474e37614dff5d4c410d29a66e1661c4b218e19988f2f650cb14d6edde0aaa92b370eecab5ec92b6a3afa90b8b74fd3b3a1fc195d6e8cb76323a555bf3fb144cc16cca2731b823726f0e35c7f91ecaa7280ce7af3bbbf2ca536c6516fd31dd4239697c1430d3a0f1966e48f8cb2cac04c76887f4ac9fe646052e411052f0e6a78e60841fab6e25ec01aa8543cacf0b7c7fe5ded", 0xe0}], 0x3, &(0x7f0000001080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x3e, 0x0, 0x9, [0xe, 0x7, 0x9, 0xff, 0xa59, 0x7]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffb1}}, @ip_retopts={{0xac, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x19, 0x0, 0x7, [0x81, 0x6]}, @lsrr={0x83, 0x7, 0xb3, [@broadcast]}, @generic={0x83, 0x8, "4581a968b936"}, @timestamp_prespec={0x44, 0x4c, 0x7d, 0x3, 0x0, [{@multicast1, 0x3}, {@broadcast, 0x9}, {@local, 0xd}, {@remote, 0x7eb}, {@private=0xa010100, 0x543}, {@remote, 0xbcc}, {@empty, 0x1}, {@broadcast}, {@remote, 0x3}]}, @timestamp_prespec={0x44, 0x34, 0x35, 0x3, 0xd, [{@local, 0x1}, {@multicast1, 0x9}, {@private=0x11, 0x6}, {@private=0xa010101, 0x4}, {@empty, 0x6}, {@multicast2, 0x7c}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @local}}}], 0x150}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x0, 0x401, 0x7, 0x7, 0x8}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r7, @in6={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x9}}, 0x6, 0x6}, &(0x7f0000000100)=0x90) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x7, 0x1, 0x40, @mcast1, @mcast1, 0x1, 0x8, 0x4, 0x6}}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x1c, &(0x7f00000003c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x0, 0x1, 0x0, 0x5, 0x0, 0x30, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2a6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000140)='syzkaller\x00', 0xc50, 0x4d, &(0x7f00000004c0)=""/77, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c00)=[r2], &(0x7f0000000c40)=[{0x4, 0x1, 0x0, 0x9}, {0x3, 0x2, 0x5, 0x1}, {0x3, 0x1, 0x1, 0xa}, {0x3, 0x4, 0xf, 0x7}], 0x10, 0xff}, 0x94) close_range(r2, 0xffffffffffffffff, 0x80000000000) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)) write$nci(r10, &(0x7f0000000040)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0xf, {0x6, 0x7, "2669c22e6cb2c3b58c0547b49bdcfc71efa15e364d54b83a1f78585032679e1f93221d8eb073719fd807b408ab3935167db4b94fefad0365abcbe6d6c347cd661a54d04209f39a020085d4d5ed6fddfb60f551daca921587b263e9a50f863a4787a0136bca1f"}}, 0x6b) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c3, &(0x7f0000000100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) signalfd(r10, &(0x7f0000000000)={[0x7]}, 0x8) kernel console output (not intermixed with test programs): 1, 0] type 2 family 0 port 6081 - 0 [ 212.378571][T12545] loop7: detected capacity change from 0 to 2048 [ 212.384772][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.415389][T12545] EXT4-fs (loop7): Invalid log cluster size: 16776453 [ 212.427125][T12543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.457931][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.467361][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.603239][ T28] audit: type=1400 audit(1774558751.127:1009): avc: denied { mount } for pid=12395 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.777360][T12555] loop7: detected capacity change from 0 to 512 [ 212.785091][T12555] EXT4-fs: Ignoring removed orlov option [ 212.809520][T12555] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 213.131912][ T28] audit: type=1400 audit(1774558751.497:1010): avc: denied { create } for pid=12557 comm="syz.8.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 213.219982][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.286488][ T28] audit: type=1400 audit(1774558751.817:1011): avc: denied { setopt } for pid=12557 comm="syz.8.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.517133][T12567] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.573540][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2101'. [ 214.018001][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 214.063440][T12575] netlink: 580 bytes leftover after parsing attributes in process `syz.3.2104'. [ 214.082915][T12395] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.112855][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.122433][T12575] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2104'. [ 214.156886][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 214.250131][T12589] netlink: 'syz.4.2108': attribute type 21 has an invalid length. [ 214.271175][T12589] netlink: 'syz.4.2108': attribute type 5 has an invalid length. [ 214.279572][T12589] netlink: 'syz.4.2108': attribute type 6 has an invalid length. [ 214.443971][T12603] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.548743][T12395] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.625802][T12624] 9p: Bad value for 'rfdno' [ 214.700085][T12629] hub 8-0:1.0: USB hub found [ 214.705002][T12629] hub 8-0:1.0: 8 ports detected [ 214.715289][T12629] netlink: 'syz.4.2120': attribute type 10 has an invalid length. [ 214.771585][T12629] macvlan1: entered allmulticast mode [ 214.780415][T12629] veth1_vlan: entered allmulticast mode [ 214.789644][T12629] macvlan1: entered promiscuous mode [ 214.798106][T12629] team0: Port device macvlan1 added [ 214.860624][ T28] audit: type=1400 audit(1774558753.397:1012): avc: denied { read } for pid=12631 comm="syz.6.2123" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 214.915658][T12632] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 215.009928][T12632] EXT4-fs (loop6): 1 truncate cleaned up [ 215.042603][T12632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.062244][ T28] audit: type=1400 audit(1774558753.427:1013): avc: denied { open } for pid=12631 comm="syz.6.2123" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 215.165506][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.175452][ T28] audit: type=1400 audit(1774558753.707:1014): avc: denied { write } for pid=12643 comm="syz.8.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 215.407570][T12666] set_capacity_and_notify: 4 callbacks suppressed [ 215.407588][T12666] loop4: detected capacity change from 0 to 1024 [ 215.459944][T12672] tmpfs: Bad value for 'mpol' [ 215.486495][T12666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.688748][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.859921][T12704] Cannot find del_set index 4 as target [ 215.926178][T12697] loop4: detected capacity change from 0 to 512 [ 216.084692][ T28] audit: type=1400 audit(1774558754.447:1015): avc: denied { write } for pid=12703 comm="syz.6.2140" name="file0" dev="tmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 216.108758][T12697] EXT4-fs (loop4): 1 orphan inode deleted [ 216.119588][ T28] audit: type=1400 audit(1774558754.447:1016): avc: denied { open } for pid=12703 comm="syz.6.2140" path="/212/file0" dev="tmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 216.207396][T12697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.346312][T12725] __nla_validate_parse: 7 callbacks suppressed [ 216.346329][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2144'. [ 216.424703][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.484311][T12734] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 216.488392][T12733] loop6: detected capacity change from 0 to 1024 [ 216.517294][T12733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.535203][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2147'. [ 216.596096][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.692193][T12741] loop4: detected capacity change from 0 to 512 [ 216.743906][ T28] audit: type=1400 audit(1774558755.277:1017): avc: denied { append } for pid=12745 comm="syz.6.2152" name="pfkey" dev="proc" ino=4026533306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 216.832552][T12741] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 216.894223][T12741] EXT4-fs (loop4): 1 truncate cleaned up [ 216.915165][T12741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.957006][T12751] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2153'. [ 216.975263][ T28] audit: type=1326 audit(1774558755.507:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12739 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 217.066178][ T28] audit: type=1326 audit(1774558755.517:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12739 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 217.093244][ T28] audit: type=1326 audit(1774558755.517:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12739 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 217.120139][ T28] audit: type=1326 audit(1774558755.517:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12739 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 217.180791][ T28] audit: type=1326 audit(1774558755.517:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12739 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 217.212424][T12758] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2155'. [ 217.223162][ T28] audit: type=1326 audit(1774558755.517:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12739 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 217.246762][ T28] audit: type=1326 audit(1774558755.517:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12739 comm="syz.4.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 217.317134][T12760] loop8: detected capacity change from 0 to 512 [ 217.373156][T12760] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 217.424921][T12767] loop6: detected capacity change from 0 to 512 [ 217.431669][T12760] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.455693][T12767] EXT4-fs (loop6): 1 truncate cleaned up [ 217.461721][T12767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.519639][T12767] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.2158: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 217.539080][T12767] EXT4-fs (loop6): Remounting filesystem read-only [ 217.546950][T12769] netlink: 'syz.8.2156': attribute type 83 has an invalid length. [ 217.564246][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.577222][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.587916][T12769] EXT4-fs warning (device loop8): ext4_group_extend:1885: will only finish group (16384 blocks, 16256 new) [ 217.605702][T12769] EXT4-fs warning (device loop8): ext4_group_extend:1890: can't read last block, resize aborted [ 217.624524][T12771] loop4: detected capacity change from 0 to 1024 [ 217.668674][T12771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.706048][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2160'. [ 217.762668][T12779] loop6: detected capacity change from 0 to 512 [ 217.773769][T12395] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 217.796492][T12779] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 217.809623][T12779] EXT4-fs (loop6): orphan cleanup on readonly fs [ 217.821032][T12779] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2162: corrupted inode contents [ 217.833246][T12779] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 217.837434][T12779] EXT4-fs (loop6): Remounting filesystem read-only [ 217.846651][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 217.846670][ C0] EXT4-fs (loop6): initial error at time 1774558756: ext4_do_update_inode:5569: inode 16 [ 217.846696][ C0] EXT4-fs (loop6): last error at time 1774558756: ext4_do_update_inode:5569: inode 16 [ 217.881399][T12779] EXT4-fs (loop6): 1 truncate cleaned up [ 217.888273][ T40] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 217.898848][ T40] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 217.910117][ T40] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 217.922181][T12779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.935050][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.947866][T12787] xt_hashlimit: size too large, truncated to 1048576 [ 217.954653][T12790] wireguard0: entered promiscuous mode [ 217.962923][T12790] wireguard0: entered allmulticast mode [ 217.971928][T12787] xt_hashlimit: max too large, truncated to 1048576 [ 217.985489][T12794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2166'. [ 217.996725][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.063525][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2173'. [ 218.077463][T12805] loop4: detected capacity change from 0 to 512 [ 218.090417][T12805] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.2171: dx entry: limit 0 != root limit 125 [ 218.103283][T12805] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2171: Corrupt directory, running e2fsck is recommended [ 218.122855][T12805] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 8: comm syz.4.2171: lblock 11 mapped to illegal pblock 8 (length 1) [ 218.137944][T12805] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 218.139815][T12812] loop7: detected capacity change from 0 to 512 [ 218.143115][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 218.161520][ C0] EXT4-fs (loop4): initial error at time 1774558756: ext4_map_blocks:776: inode 2: block 8 [ 218.171617][ C0] EXT4-fs (loop4): last error at time 1774558756: ext4_map_blocks:776: inode 2: block 8 [ 218.178810][T12805] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 218.208922][T12812] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.231728][T12805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.249603][T12812] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 218.273343][T12812] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 218.281404][T12812] System zones: 0-2, 18-18, 34-35 [ 218.293851][T12805] IPVS: Error connecting to the multicast addr [ 218.302177][T12812] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.329469][T12825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2181'. [ 218.394663][ T7156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.435005][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.591609][T12854] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2193'. [ 218.685544][T12855] FAT-fs (loop7): Directory bread(block 64) failed [ 218.692195][T12855] FAT-fs (loop7): Directory bread(block 65) failed [ 218.698896][T12855] FAT-fs (loop7): Directory bread(block 66) failed [ 218.705720][T12855] FAT-fs (loop7): Directory bread(block 67) failed [ 218.712409][T12855] FAT-fs (loop7): Directory bread(block 68) failed [ 218.719128][T12855] FAT-fs (loop7): Directory bread(block 69) failed [ 218.725835][T12855] FAT-fs (loop7): Directory bread(block 70) failed [ 218.732381][T12855] FAT-fs (loop7): Directory bread(block 71) failed [ 218.739013][T12855] FAT-fs (loop7): Directory bread(block 72) failed [ 218.745634][T12855] FAT-fs (loop7): Directory bread(block 73) failed [ 219.387504][T12853] EXT4-fs: Ignoring removed orlov option [ 219.457398][T12853] ext4: Unknown parameter 'obj_role' [ 219.499724][T12876] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.2200: dx entry: limit 0 != root limit 125 [ 219.650487][T12876] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2200: Corrupt directory, running e2fsck is recommended [ 219.756762][T12882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2203'. [ 219.778509][T12876] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #2: block 8: comm syz.6.2200: lblock 11 mapped to illegal pblock 8 (length 1) [ 219.882866][T12876] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 219.883128][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 219.898640][ C1] EXT4-fs (loop6): initial error at time 1774558758: ext4_map_blocks:776: inode 2: block 8 [ 219.908649][ C1] EXT4-fs (loop6): last error at time 1774558758: ext4_map_blocks:776: inode 2: block 8 [ 219.939166][T12876] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 219.954958][T12876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.011588][T12873] IPVS: Error connecting to the multicast addr [ 220.446504][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.672376][T12907] netlink: zone id is out of range [ 220.683909][T12907] netlink: zone id is out of range [ 220.690531][T12907] netlink: zone id is out of range [ 220.734296][T12907] netlink: set zone limit has 8 unknown bytes [ 221.112630][T12927] set_capacity_and_notify: 3 callbacks suppressed [ 221.112650][T12927] loop6: detected capacity change from 0 to 8192 [ 221.214388][T12935] macvtap1: entered promiscuous mode [ 221.220140][ T7235] loop6: p3 [ 221.225570][ T7235] loop6: p3 size 100663552 extends beyond EOD, truncated [ 221.233043][T12935] macvtap1: entered allmulticast mode [ 221.238865][T12935] team0: entered allmulticast mode [ 221.245134][T12935] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 221.272705][T12938] loop8: detected capacity change from 0 to 1764 [ 221.282031][T12927] loop6: p3 [ 221.286215][T12927] loop6: p3 size 100663552 extends beyond EOD, truncated [ 221.881084][T12949] loop8: detected capacity change from 0 to 512 [ 221.910561][ T28] kauditd_printk_skb: 186 callbacks suppressed [ 221.910575][ T28] audit: type=1400 audit(1774558760.447:1205): avc: denied { remount } for pid=12944 comm="syz.8.2225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 222.060692][T12955] xt_hashlimit: size too large, truncated to 1048576 [ 222.075386][T12957] netlink: 'syz.8.2230': attribute type 21 has an invalid length. [ 222.084000][T12957] __nla_validate_parse: 3 callbacks suppressed [ 222.084030][T12957] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2230'. [ 222.234866][ T7235] udevd[7235]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 222.235003][T12957] netlink: 'syz.8.2230': attribute type 5 has an invalid length. [ 222.291889][T12957] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2230'. [ 222.431793][T12968] loop6: detected capacity change from 0 to 1024 [ 222.503716][T12968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.571156][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2232'. [ 222.636150][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.879014][T12993] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2241'. [ 222.893127][ T28] audit: type=1400 audit(1774558761.337:1206): avc: denied { bind } for pid=12989 comm="syz.4.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 222.959275][T12998] loop4: detected capacity change from 0 to 1024 [ 223.012750][T12998] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 223.096526][T12998] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.2242: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65534(4), depth 65535(65535) [ 223.153164][T12998] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 223.153418][T12998] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2242: couldn't read orphan inode 11 (err -117) [ 223.174420][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 223.174443][ C1] EXT4-fs (loop4): initial error at time 1774558761: ext4_ext_check_inode:521: inode 11 [ 223.174501][ C1] EXT4-fs (loop4): last error at time 1774558761: ext4_ext_check_inode:521: inode 11 [ 223.200459][T12998] loop4: lost filesystem error report for type 5 error -117 [ 223.213243][T12998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.271508][T13013] loop6: detected capacity change from 0 to 1024 [ 223.307129][T13013] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.339555][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.352142][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2247'. [ 223.402398][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'. [ 223.463884][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.507835][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2254'. [ 223.542312][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2254'. [ 223.560488][T13036] loop6: detected capacity change from 0 to 1024 [ 223.573415][T13036] EXT4-fs: dax option not supported [ 223.877509][T13049] loop4: detected capacity change from 0 to 512 [ 223.895514][T13049] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.2261: dx entry: limit 0 != root limit 125 [ 223.910467][T13049] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2261: Corrupt directory, running e2fsck is recommended [ 223.936119][T13049] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 8: comm syz.4.2261: lblock 11 mapped to illegal pblock 8 (length 1) [ 223.954444][T13049] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 223.961699][T13049] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 223.970776][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 223.970797][ C1] EXT4-fs (loop4): initial error at time 1774558762: ext4_map_blocks:776: inode 2: block 8 [ 223.970834][ C1] EXT4-fs (loop4): last error at time 1774558762: ext4_map_blocks:776: inode 2: block 8 [ 224.036335][T13056] loop7: detected capacity change from 0 to 1024 [ 224.041622][T13049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.070705][T13049] IPVS: Error connecting to the multicast addr [ 224.085002][T13056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.128612][ T7156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.179296][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.194740][T13062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13062 comm=syz.6.2265 [ 224.199546][T13064] loop7: detected capacity change from 0 to 128 [ 224.275986][T13068] cgroup: none used incorrectly [ 224.280964][ T28] audit: type=1400 audit(1774558762.817:1207): avc: denied { mounton } for pid=13067 comm="syz.6.2267" path="/246/file1/file0" dev="loop6" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 224.317966][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 224.342575][ T3039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.373186][ T28] audit: type=1400 audit(1774558762.867:1208): avc: denied { setopt } for pid=13078 comm="syz.4.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.657097][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2270'. [ 224.666296][T13094] 8021q: VLANs not supported on lapb0 [ 225.261689][T13112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.326073][T12395] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.417244][T13129] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.2277: dx entry: limit 0 != root limit 125 [ 225.481348][T13129] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2277: Corrupt directory, running e2fsck is recommended [ 225.495019][T13129] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #2: block 8: comm syz.8.2277: lblock 11 mapped to illegal pblock 8 (length 1) [ 225.510710][T13129] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 225.510933][T13129] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 225.523119][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 225.535266][ C1] EXT4-fs (loop8): initial error at time 1774558764: ext4_map_blocks:776: inode 2: block 8 [ 225.545303][ C1] EXT4-fs (loop8): last error at time 1774558764: ext4_map_blocks:776: inode 2: block 8 [ 225.611046][T13129] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.656386][T13129] IPVS: Error connecting to the multicast addr [ 225.689930][T13135] EXT4-fs (loop4): 1 orphan inode deleted [ 225.713598][T13135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.726405][T13135] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.823027][T13153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13153 comm=syz.3.2285 [ 226.653262][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 226.665838][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 227.688992][T12395] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.922011][T13166] SET target dimension over the limit! [ 228.018983][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.060760][T13172] __nla_validate_parse: 2 callbacks suppressed [ 228.060839][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2294'. [ 228.221134][T13174] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2291'. [ 228.305126][T13185] set_capacity_and_notify: 4 callbacks suppressed [ 228.305142][T13185] loop7: detected capacity change from 0 to 512 [ 228.341292][T13186] tipc: Enabling of bearer rejected, failed to enable media [ 228.360265][T13185] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 228.375772][T13189] loop4: detected capacity change from 0 to 512 [ 228.378426][T13191] loop8: detected capacity change from 0 to 1024 [ 228.407152][T13193] veth0: entered promiscuous mode [ 228.412316][T13193] vlan2: entered promiscuous mode [ 228.423699][T13189] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.2300: dx entry: limit 0 != root limit 125 [ 228.430626][T13185] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.2298: Unimplemented hash flags: 0x0001 [ 228.447888][T13189] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2300: Corrupt directory, running e2fsck is recommended [ 228.456372][T13185] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2298: Corrupt directory, running e2fsck is recommended [ 228.461843][T13189] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 8: comm syz.4.2300: lblock 11 mapped to illegal pblock 8 (length 1) [ 228.482780][T13185] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.2298: path /202/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 228.531386][T13191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.539905][T13189] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 228.549156][T13189] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 228.558331][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 228.558352][ C1] EXT4-fs (loop4): initial error at time 1774558767: ext4_map_blocks:776: inode 2: block 8 [ 228.558390][ C1] EXT4-fs (loop4): last error at time 1774558767: ext4_map_blocks:776: inode 2: block 8 [ 228.586471][ T7156] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /202/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 228.593862][T13189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.649927][T13189] IPVS: Error connecting to the multicast addr [ 228.670628][T12395] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.829809][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.866492][T13228] bond0: entered promiscuous mode [ 228.872736][T13228] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 228.887417][T13228] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 228.898635][T13228] bond0: left promiscuous mode [ 229.119433][T13236] tipc: Enabling of bearer rejected, failed to enable media [ 229.290570][T13242] netlink: 'syz.6.2310': attribute type 4 has an invalid length. [ 229.338304][T13202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.407064][T13245] netlink: 'syz.6.2310': attribute type 4 has an invalid length. [ 229.587780][T13242] macvlan1: left allmulticast mode [ 229.613584][ T28] audit: type=1400 audit(1774558768.087:1209): avc: denied { accept } for pid=13253 comm="syz.3.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 229.655729][ T1622] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.668076][ T1622] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.676825][ T1622] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.685329][ T1622] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.830938][ T28] audit: type=1400 audit(1774558768.327:1210): avc: denied { create } for pid=13258 comm="syz.3.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 229.860031][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 229.896202][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2322'. [ 229.952600][T13260] lo speed is unknown, defaulting to 1000 [ 230.021597][T13260] ip6_vti0 speed is unknown, defaulting to 1000 [ 230.064821][T13301] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13301 comm=syz.3.2328 [ 230.093155][ T28] audit: type=1400 audit(1774558768.627:1211): avc: denied { getopt } for pid=13302 comm="syz.4.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 230.125151][ T28] audit: type=1400 audit(1774558768.637:1212): avc: denied { read } for pid=13302 comm="syz.4.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 230.146352][ T28] audit: type=1400 audit(1774558768.637:1213): avc: denied { getopt } for pid=13302 comm="syz.4.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 230.194868][T13260] chnl_net:caif_netlink_parms(): no params data found [ 230.257693][T13321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.282001][T13260] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.290263][T13260] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.298077][T13260] bridge_slave_0: entered allmulticast mode [ 230.306580][T13260] bridge_slave_0: entered promiscuous mode [ 230.316093][T13260] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.323324][T13260] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.330714][T13260] bridge_slave_1: entered allmulticast mode [ 230.337731][T13260] bridge_slave_1: entered promiscuous mode [ 230.357401][T13260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.369585][T13260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.379988][ T28] audit: type=1326 audit(1774558768.907:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13330 comm="syz.4.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 230.391446][T13331] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2340'. [ 230.422034][T13260] team0: Port device team_slave_0 added [ 230.429109][T13260] team0: Port device team_slave_1 added [ 230.434040][ T28] audit: type=1326 audit(1774558768.907:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13330 comm="syz.4.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 230.458752][T13260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.458769][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.458857][T13260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.459616][T13260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.510285][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.514400][ T28] audit: type=1326 audit(1774558768.907:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13330 comm="syz.4.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 230.536490][T13260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.554910][T13260] hsr_slave_0: entered promiscuous mode [ 230.574803][ T28] audit: type=1326 audit(1774558768.917:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13330 comm="syz.4.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 230.600978][ T28] audit: type=1326 audit(1774558768.917:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13330 comm="syz.4.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 230.603671][T13260] hsr_slave_1: entered promiscuous mode [ 230.630516][T13260] debugfs: 'hsr0' already exists in 'hsr' [ 230.638230][T13260] Cannot create hsr debugfs directory [ 230.743057][T13353] netlink: 'syz.6.2347': attribute type 10 has an invalid length. [ 230.806800][T13260] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 230.808922][T13359] loop4: detected capacity change from 0 to 512 [ 230.829336][T13260] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 230.848920][T13260] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 230.862436][T13260] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 230.879429][T13359] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.907440][T13359] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2349'. [ 230.987468][T13260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.008514][T13260] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.024871][ T4981] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.031944][ T4981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.051242][T13376] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 231.081922][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.089181][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.106060][T13385] loop4: detected capacity change from 0 to 1024 [ 231.129462][T13385] EXT4-fs: inline encryption not supported [ 231.186100][T13385] EXT4-fs: Ignoring removed nobh option [ 231.191770][T13385] EXT4-fs: Ignoring removed bh option [ 231.192713][T13260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.239998][T13385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.368609][T13260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.986088][T13409] loop8: detected capacity change from 0 to 4096 [ 232.006247][T13409] EXT4-fs: Ignoring removed bh option [ 232.064330][T13409] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.088104][T13409] netlink: 144 bytes leftover after parsing attributes in process `syz.8.2362'. [ 232.111219][T13409] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.169271][T13409] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.270307][T13409] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.353658][T13409] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.480601][ T4981] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.517068][ T4981] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.544759][ T4981] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.606439][ T4981] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.726723][T12395] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.782987][T13260] veth0_vlan: entered promiscuous mode [ 232.815595][T13260] veth1_vlan: entered promiscuous mode [ 232.855436][T13260] veth0_macvtap: entered promiscuous mode [ 232.871468][T13260] veth1_macvtap: entered promiscuous mode [ 232.893546][T13260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.907923][T13260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.920369][ T61] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.960587][ T61] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.990868][ T61] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.010918][ T61] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.028820][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.137109][T13459] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2375'. [ 233.146305][T13461] loop8: detected capacity change from 0 to 512 [ 233.155196][T13461] ext2: Bad value for 'resgid' [ 233.161313][T13461] ext2: Bad value for 'resgid' [ 233.196035][T13461] loop8: detected capacity change from 0 to 1024 [ 233.237930][T13461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.240525][T13468] loop9: detected capacity change from 0 to 512 [ 233.262236][T13468] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 233.298671][T13468] EXT4-fs (loop9): 1 truncate cleaned up [ 233.307397][T13468] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.347765][T12395] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.518069][T13487] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 233.526707][T13260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.542196][T13487] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 233.602279][T13497] FAULT_INJECTION: forcing a failure. [ 233.602279][T13497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.616213][T13497] CPU: 0 UID: 0 PID: 13497 Comm: syz.9.2388 Tainted: G W syzkaller #0 PREEMPT(full) [ 233.616301][T13497] Tainted: [W]=WARN [ 233.616363][T13497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.616378][T13497] Call Trace: [ 233.616386][T13497] [ 233.616395][T13497] __dump_stack+0x1d/0x30 [ 233.616422][T13497] dump_stack_lvl+0x95/0xd0 [ 233.616450][T13497] dump_stack+0x15/0x1b [ 233.616594][T13497] should_fail_ex+0x263/0x280 [ 233.616619][T13497] should_fail+0xb/0x20 [ 233.616640][T13497] should_fail_usercopy+0x1a/0x20 [ 233.616719][T13497] _copy_from_user+0x1c/0xb0 [ 233.616752][T13497] ___sys_sendmsg+0xc1/0x1e0 [ 233.616798][T13497] __x64_sys_sendmsg+0xd4/0x160 [ 233.616846][T13497] x64_sys_call+0x194c/0x3020 [ 233.616936][T13497] do_syscall_64+0x12c/0x370 [ 233.617022][T13497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.617049][T13497] RIP: 0033:0x7f1d91bdc799 [ 233.617073][T13497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.617094][T13497] RSP: 002b:00007f1d9062f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.617116][T13497] RAX: ffffffffffffffda RBX: 00007f1d91e55fa0 RCX: 00007f1d91bdc799 [ 233.617208][T13497] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 233.617223][T13497] RBP: 00007f1d9062f090 R08: 0000000000000000 R09: 0000000000000000 [ 233.617239][T13497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.617305][T13497] R13: 00007f1d91e56038 R14: 00007f1d91e55fa0 R15: 00007fffbdc695d8 [ 233.617332][T13497] [ 233.622477][T13498] hub 9-0:1.0: USB hub found [ 233.797454][T13498] hub 9-0:1.0: 8 ports detected [ 233.911775][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 234.009203][T13523] netlink: 165 bytes leftover after parsing attributes in process `syz.9.2393'. [ 234.052070][T13523] hub 8-0:1.0: USB hub found [ 234.056978][T13523] hub 8-0:1.0: 8 ports detected [ 234.070402][T13523] netlink: 'syz.9.2393': attribute type 10 has an invalid length. [ 234.091112][T13523] macvlan1: entered allmulticast mode [ 234.100292][T13523] veth1_vlan: entered allmulticast mode [ 234.111837][T13523] team0: Port device macvlan1 added [ 234.140758][T13524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.239145][T13521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.683958][T13554] 9p: Bad value for 'source' [ 234.913978][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2423'. [ 235.174624][T13596] lo speed is unknown, defaulting to 1000 [ 235.212374][T13596] ip6_vti0 speed is unknown, defaulting to 1000 [ 235.541705][T13626] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2428'. [ 235.700495][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2433'. [ 235.897950][T13639] wireguard0: entered promiscuous mode [ 235.913718][T13639] wireguard0: entered allmulticast mode [ 236.070588][T13657] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 236.107875][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2444'. [ 236.341270][T13680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13680 comm=syz.8.2450 [ 236.353909][T13680] netlink: 1047 bytes leftover after parsing attributes in process `syz.8.2450'. [ 236.365510][T13680] bridge_slave_1: default FDB implementation only supports local addresses [ 236.881095][T13724] SET target dimension over the limit! [ 236.905177][T13726] loop6: detected capacity change from 0 to 128 [ 237.204273][T13741] lo speed is unknown, defaulting to 1000 [ 237.240390][T13741] ip6_vti0 speed is unknown, defaulting to 1000 [ 237.755200][T13752] loop6: detected capacity change from 0 to 128 [ 237.777647][T13752] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.814524][T13752] ext4 filesystem being mounted at /283/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.037893][ T6271] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.096416][T13785] loop6: detected capacity change from 0 to 512 [ 238.102687][T13786] loop8: detected capacity change from 0 to 1764 [ 238.131347][T13785] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2488: inode has both inline data and extents flags [ 238.157586][T13785] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 238.157727][T13785] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2488: couldn't read orphan inode 15 (err -117) [ 238.167033][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 238.167056][ C0] EXT4-fs (loop6): initial error at time 1774558776: ext4_orphan_get:1391: inode 15 [ 238.167089][ C0] EXT4-fs (loop6): last error at time 1774558776: ext4_orphan_get:1391: inode 15 [ 238.206128][T13785] loop6: lost filesystem error report for type 5 error -117 [ 238.206711][T13785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.262604][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.278366][T13794] loop8: detected capacity change from 0 to 512 [ 238.430620][T13798] loop9: detected capacity change from 0 to 256 [ 239.311786][T13797] : port 1(veth0_to_team) entered blocking state [ 239.318596][T13797] : port 1(veth0_to_team) entered disabled state [ 239.326461][T13797] veth0_to_team: entered allmulticast mode [ 239.332813][T13797] veth0_to_team: entered promiscuous mode [ 240.039976][T13798] FAT-fs (loop9): Directory bread(block 64) failed [ 240.047271][T13798] FAT-fs (loop9): Directory bread(block 65) failed [ 240.053969][T13798] FAT-fs (loop9): Directory bread(block 66) failed [ 240.060485][T13798] FAT-fs (loop9): Directory bread(block 67) failed [ 240.067749][T13798] FAT-fs (loop9): Directory bread(block 68) failed [ 240.074405][T13798] FAT-fs (loop9): Directory bread(block 69) failed [ 240.081045][T13798] FAT-fs (loop9): Directory bread(block 70) failed [ 240.088490][T13798] FAT-fs (loop9): Directory bread(block 71) failed [ 240.095070][T13798] FAT-fs (loop9): Directory bread(block 72) failed [ 240.101608][T13798] FAT-fs (loop9): Directory bread(block 73) failed [ 241.071903][T13825] xt_hashlimit: size too large, truncated to 1048576 [ 241.084991][T13827] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 241.109444][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 241.109460][ T28] audit: type=1326 audit(1774558779.637:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.3.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d77a5c799 code=0x7ffc0000 [ 241.178608][T13834] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2505'. [ 241.189461][ T28] audit: type=1326 audit(1774558779.637:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.3.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d77a5c799 code=0x7ffc0000 [ 241.223500][T13834] hub 8-0:1.0: USB hub found [ 241.229217][T13834] hub 8-0:1.0: 8 ports detected [ 241.246226][T13834] netlink: 'syz.4.2505': attribute type 36 has an invalid length. [ 241.262936][T13834] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 241.272886][T13834] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 241.308724][ T28] audit: type=1326 audit(1774558779.637:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.3.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d77a5c799 code=0x7ffc0000 [ 241.364588][ T28] audit: type=1326 audit(1774558779.637:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.3.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d77a5c799 code=0x7ffc0000 [ 241.402397][ T28] audit: type=1326 audit(1774558779.637:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.3.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d77a5c799 code=0x7ffc0000 [ 241.431314][ T28] audit: type=1326 audit(1774558779.637:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.3.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d77a5c799 code=0x7ffc0000 [ 241.482584][ T28] audit: type=1326 audit(1774558779.637:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.3.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d77a5c799 code=0x7ffc0000 [ 241.512797][ T28] audit: type=1326 audit(1774558779.637:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.3.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d77a5c799 code=0x7ffc0000 [ 241.569833][ T28] audit: type=1326 audit(1774558779.637:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.3.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d77a5c799 code=0x7ffc0000 [ 241.613141][ T28] audit: type=1326 audit(1774558779.637:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13826 comm="syz.3.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d77a5c799 code=0x7ffc0000 [ 242.311740][T13846] loop9: detected capacity change from 0 to 512 [ 242.347548][T13851] loop4: detected capacity change from 0 to 512 [ 242.358500][T13848] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13848 comm=syz.3.2510 [ 242.385463][T13851] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.424158][T13858] loop9: detected capacity change from 0 to 512 [ 242.432531][T13858] msdos: Unknown parameter 'nodotNns' [ 242.460892][T13858] cgroup: Invalid name [ 242.474043][T13851] EXT4-fs (loop4): 1 orphan inode deleted [ 242.487020][T13851] EXT4-fs (loop4): 1 truncate cleaned up [ 242.506630][T13851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.542299][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.643924][T13868] netlink: 'syz.4.2517': attribute type 1 has an invalid length. [ 242.684077][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2515'. [ 242.711032][T13873] gretap1: entered allmulticast mode [ 243.099287][T13885] loop6: detected capacity change from 0 to 512 [ 243.112443][T13887] loop9: detected capacity change from 0 to 1024 [ 243.117674][T13885] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.2522: dx entry: limit 0 != root limit 125 [ 243.133401][T13885] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2522: Corrupt directory, running e2fsck is recommended [ 243.188544][T13887] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.214884][T13885] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #2: block 8: comm syz.6.2522: lblock 11 mapped to illegal pblock 8 (length 1) [ 243.291919][T13885] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 243.292141][T13885] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 243.301227][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 243.301249][ C1] EXT4-fs (loop6): initial error at time 1774558781: ext4_map_blocks:776: inode 2: block 8 [ 243.301284][ C1] EXT4-fs (loop6): last error at time 1774558781: ext4_map_blocks:776: inode 2: block 8 [ 243.339376][T13260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.403991][T13885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.447687][T13885] IPVS: Error connecting to the multicast addr [ 243.489063][T13895] loop8: detected capacity change from 0 to 136 [ 243.523882][T13895] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2526'. [ 243.524508][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.532855][T13895] ------------[ cut here ]------------ [ 243.532864][T13895] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 243.559712][T13895] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#1: syz.8.2526/13895 [ 243.569688][T13895] Modules linked in: [ 243.573611][T13895] CPU: 1 UID: 0 PID: 13895 Comm: syz.8.2526 Tainted: G W syzkaller #0 PREEMPT(full) [ 243.584601][T13895] Tainted: [W]=WARN [ 243.588403][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.598541][T13895] RIP: 0010:u32_change+0x1463/0x14d0 [ 243.603919][T13895] Code: 31 ed e9 96 fe ff ff e8 eb 04 c2 fc 48 8d 3d 24 3b 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 56 61 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 243.623614][T13895] RSP: 0018:ffffc9000a5db5e0 EFLAGS: 00010283 [ 243.629813][T13895] RAX: ffffffff84975b05 RBX: ffffc9000a5db7f0 RCX: 0000000000000010 [ 243.637825][T13895] RDX: ffffffff867e6156 RSI: 0000000000000020 RDI: ffffffff87209630 [ 243.645917][T13895] RBP: ffffc9000a5db6e8 R08: 000188811be93987 R09: 0000000000000000 [ 243.653923][T13895] R10: ffff88811be93900 R11: 0001c9000a5db357 R12: ffff88811bea1500 [ 243.661936][T13895] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88811bea15c0 [ 243.669961][T13895] FS: 00007f8a2bbb76c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 243.679010][T13895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.685658][T13895] CR2: 0000000000000008 CR3: 0000000162bd0000 CR4: 00000000003506f0 [ 243.693677][T13895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.701657][T13895] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 243.709714][T13895] Call Trace: [ 243.712986][T13895] [ 243.716026][T13895] tc_new_tfilter+0xfc0/0x1200 [ 243.720875][T13895] ? ns_capable+0x7c/0xb0 [ 243.725251][T13895] ? __pfx_tc_new_tfilter+0x10/0x10 [ 243.730488][T13895] rtnetlink_rcv_msg+0x64b/0x720 [ 243.735506][T13895] netlink_rcv_skb+0x123/0x220 [ 243.740288][T13895] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 243.745861][T13895] rtnetlink_rcv+0x1c/0x30 [ 243.750344][T13895] netlink_unicast+0x5c0/0x690 [ 243.755215][T13895] netlink_sendmsg+0x5c8/0x6f0 [ 243.760054][T13895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.765405][T13895] ____sys_sendmsg+0x563/0x5b0 [ 243.770237][T13895] ___sys_sendmsg+0x195/0x1e0 [ 243.774978][T13895] ? place_entity+0x1ab/0x210 [ 243.779751][T13895] __sys_sendmmsg+0x185/0x320 [ 243.784517][T13895] __x64_sys_sendmmsg+0x57/0x70 [ 243.789407][T13895] x64_sys_call+0x27aa/0x3020 [ 243.794136][T13895] do_syscall_64+0x12c/0x370 [ 243.798840][T13895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.804851][T13895] RIP: 0033:0x7f8a2d15c799 [ 243.809443][T13895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.829097][T13895] RSP: 002b:00007f8a2bbb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 243.837556][T13895] RAX: ffffffffffffffda RBX: 00007f8a2d3d5fa0 RCX: 00007f8a2d15c799 [ 243.845570][T13895] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000008 [ 243.853600][T13895] RBP: 00007f8a2d1f2c99 R08: 0000000000000000 R09: 0000000000000000 [ 243.861593][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.869601][T13895] R13: 00007f8a2d3d6038 R14: 00007f8a2d3d5fa0 R15: 00007ffcdc1f3418 [ 243.877630][T13895] [ 243.880647][T13895] ---[ end trace 0000000000000000 ]--- [ 243.932264][T13905] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2530'. [ 243.946656][T13904] netlink: 'syz.9.2529': attribute type 21 has an invalid length. [ 243.972742][T13904] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2529'. [ 244.011163][T13904] netlink: 'syz.9.2529': attribute type 5 has an invalid length. [ 244.063288][T13904] netlink: 'syz.9.2529': attribute type 6 has an invalid length. [ 244.081350][T13904] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2529'. [ 244.183950][T13923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2536'. [ 244.189109][T13924] loop9: detected capacity change from 0 to 1024 [ 244.258265][T13924] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.281618][T13929] loop4: detected capacity change from 0 to 512 [ 244.318356][T13260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.333832][T13929] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.2538: dx entry: limit 0 != root limit 125 [ 244.346186][T13929] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2538: Corrupt directory, running e2fsck is recommended [ 244.381166][T13929] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 8: comm syz.4.2538: lblock 11 mapped to illegal pblock 8 (length 1) [ 244.396805][T13929] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 244.397019][T13929] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 244.406109][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 244.406129][ C1] EXT4-fs (loop4): initial error at time 1774558782: ext4_map_blocks:776: inode 2: block 8 [ 244.406169][ C1] EXT4-fs (loop4): last error at time 1774558782: ext4_map_blocks:776: inode 2: block 8 [ 244.441223][T13929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.460007][T13929] IPVS: Error connecting to the multicast addr [ 244.461086][T13901] loop6: detected capacity change from 0 to 1024 [ 244.540092][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.612924][T13958] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2550'. [ 244.672697][T13962] loop4: detected capacity change from 0 to 1024 [ 244.686535][T13962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.715080][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2553'. [ 244.738973][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.754394][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2553'. [ 244.917229][T13983] IPVS: Error connecting to the multicast addr [ 245.076040][T14002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.131059][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.361602][T14029] IPVS: Error connecting to the multicast addr [ 245.368266][T14011] lo speed is unknown, defaulting to 1000 [ 245.417534][T14031] EXT4-fs: Ignoring removed bh option [ 245.444793][T14011] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.445640][T14031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.473796][T14031] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.487095][T14031] EXT4-fs (loop6): Online resizing not supported with bigalloc [ 245.569347][T14011] chnl_net:caif_netlink_parms(): no params data found [ 245.620185][T14011] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.627637][T14011] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.634961][T14011] bridge_slave_0: entered allmulticast mode [ 245.641651][T14011] bridge_slave_0: entered promiscuous mode [ 245.648787][T14011] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.656070][T14011] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.663334][T14011] bridge_slave_1: entered allmulticast mode [ 245.669883][T14011] bridge_slave_1: entered promiscuous mode [ 245.692373][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.705549][T14011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.716365][T14011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.737459][T14011] team0: Port device team_slave_0 added [ 245.746283][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.759017][T14011] team0: Port device team_slave_1 added [ 245.794987][T14011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.802062][T14011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.844700][T14011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.886204][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.907579][T14011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.915302][T14011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.941764][T14011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.958668][T14050] vlan2: entered promiscuous mode [ 245.963868][T14050] batadv0: entered promiscuous mode [ 245.976965][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.012701][T14011] hsr_slave_0: entered promiscuous mode [ 246.022572][T14011] hsr_slave_1: entered promiscuous mode [ 246.029516][T14011] debugfs: 'hsr0' already exists in 'hsr' [ 246.037287][T14011] Cannot create hsr debugfs directory [ 246.044125][T14053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.096174][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.142682][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 246.142698][ T28] audit: type=1400 audit(1774558784.677:1388): avc: denied { write } for pid=14059 comm="syz.8.2582" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 246.232085][T14066] IPVS: Error connecting to the multicast addr [ 246.277120][ T3992] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 6) [ 246.296289][ T3992] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 246.326364][ T3992] EXT4-fs (loop6): This should not happen!! Data will be lost [ 246.326364][ T3992] [ 246.347796][ T9840] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 246.381597][ T9840] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 246.401654][ T9840] EXT4-fs (loop6): This should not happen!! Data will be lost [ 246.401654][ T9840] [ 246.455684][T14078] __nla_validate_parse: 5 callbacks suppressed [ 246.455782][T14078] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2588'. [ 246.487902][T14075] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.538513][T13260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.578790][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2590'. [ 246.618563][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2591'. [ 246.629522][ T12] bond0 (unregistering): Released all slaves [ 246.640363][ T12] bond1 (unregistering): Released all slaves [ 246.668585][ T12] bond2 (unregistering): Released all slaves [ 246.686483][ T12] bond3 (unregistering): Released all slaves [ 246.740332][ T12] tipc: Disabling bearer [ 246.759094][ T12] tipc: Left network mode [ 246.767936][T14093] netlink: 'syz.9.2593': attribute type 10 has an invalid length. [ 246.784175][T14093] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2593'. [ 246.794969][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.824528][T14093] team0: entered promiscuous mode [ 246.829808][T14093] team_slave_0: entered promiscuous mode [ 246.879308][T14093] team_slave_1: entered promiscuous mode [ 246.896216][T14093] macvlan1: entered promiscuous mode [ 246.907141][T14093] team0: entered allmulticast mode [ 246.918678][T14093] team_slave_0: entered allmulticast mode [ 246.935919][T14093] team_slave_1: entered allmulticast mode [ 246.942680][T14093] bridge0: port 3(team0) entered blocking state [ 246.966608][T14093] bridge0: port 3(team0) entered disabled state [ 247.000630][T14093] bridge0: port 3(team0) entered blocking state [ 247.006950][T14093] bridge0: port 3(team0) entered forwarding state [ 247.085091][T14101] IPVS: Error connecting to the multicast addr [ 247.213872][T14115] EXT4-fs: inline encryption not supported [ 247.231263][T14115] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 247.262566][T14115] EXT4-fs (loop8): group descriptors corrupted! [ 247.367932][T14119] set_capacity_and_notify: 6 callbacks suppressed [ 247.367952][T14119] loop8: detected capacity change from 0 to 1024 [ 247.516095][T14119] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.556461][T14104] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 247.584038][ T12] hsr_slave_0: left promiscuous mode [ 247.602547][T12395] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.620789][ T12] hsr_slave_1: left promiscuous mode [ 247.637548][ T12] team0: left allmulticast mode [ 247.652213][ T12] veth1_macvtap: left promiscuous mode [ 247.658220][ T12] veth0_macvtap: left promiscuous mode [ 247.660455][T14134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14134 comm=syz.6.2605 [ 247.669598][ T12] veth1_vlan: left promiscuous mode [ 247.683326][ T12] veth0_vlan: left promiscuous mode [ 247.692666][T14136] FAULT_INJECTION: forcing a failure. [ 247.692666][T14136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.707065][T14137] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2604'. [ 247.713459][T14136] CPU: 1 UID: 0 PID: 14136 Comm: syz.4.2606 Tainted: G W syzkaller #0 PREEMPT(full) [ 247.713493][T14136] Tainted: [W]=WARN [ 247.713500][T14136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.713591][T14136] Call Trace: [ 247.713597][T14136] [ 247.713605][T14136] __dump_stack+0x1d/0x30 [ 247.713633][T14136] dump_stack_lvl+0x95/0xd0 [ 247.713709][T14136] dump_stack+0x15/0x1b [ 247.713733][T14136] should_fail_ex+0x263/0x280 [ 247.713786][T14136] should_fail+0xb/0x20 [ 247.713810][T14136] should_fail_usercopy+0x1a/0x20 [ 247.713839][T14136] _copy_from_user+0x1c/0xb0 [ 247.713870][T14136] __sys_bpf+0x183/0x7e0 [ 247.713961][T14136] __x64_sys_bpf+0x41/0x50 [ 247.713994][T14136] x64_sys_call+0x10cb/0x3020 [ 247.714021][T14136] do_syscall_64+0x12c/0x370 [ 247.714100][T14136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.714167][T14136] RIP: 0033:0x7f316432c799 [ 247.714185][T14136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.714203][T14136] RSP: 002b:00007f3162d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.714224][T14136] RAX: ffffffffffffffda RBX: 00007f31645a5fa0 RCX: 00007f316432c799 [ 247.714305][T14136] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000002 [ 247.714319][T14136] RBP: 00007f3162d87090 R08: 0000000000000000 R09: 0000000000000000 [ 247.714333][T14136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.714346][T14136] R13: 00007f31645a6038 R14: 00007f31645a5fa0 R15: 00007ffccd9efe08 [ 247.714392][T14136] [ 247.943056][ T12] macvlan1 (unregistering): left promiscuous mode [ 247.952010][ T12] team0 (unregistering): Port device macvlan1 removed [ 248.122326][T14166] loop9: detected capacity change from 0 to 512 [ 248.193924][T14162] loop4: detected capacity change from 0 to 1024 [ 248.224862][T14166] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.247832][T14162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.258591][T14166] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.233364][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.263586][T14187] xt_hashlimit: max too large, truncated to 1048576 [ 249.360145][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2616'. [ 249.425395][T14190] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 249.435100][T14190] block device autoloading is deprecated and will be removed. [ 250.008541][T14203] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2625'. [ 250.065650][T13260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.142607][T14206] 9p: Could not find request transport: fd~o=A'虠̆<0x0000000000000008 [ 250.164101][T14205] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2626'. [ 250.178407][T14206] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2625'. [ 250.219303][T14212] loop9: detected capacity change from 0 to 1024 [ 250.246704][T14212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.272125][T13260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.282124][T14218] tmpfs: Unknown parameter 'Ympol' [ 250.384519][T14228] SET target dimension over the limit! [ 250.411843][T14228] loop8: detected capacity change from 0 to 4096 [ 250.423648][T14228] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 250.444306][T14228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.452159][ T28] audit: type=1400 audit(1774558788.907:1389): avc: denied { unmount } for pid=12395 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 250.496203][T12395] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.233450][T14238] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2637'. [ 251.278620][ T28] audit: type=1400 audit(1774558789.817:1390): avc: denied { module_load } for pid=14239 comm="syz.9.2638" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=35577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 251.328863][T14240] Invalid ELF header magic: != ELF [ 251.406467][T14246] loop9: detected capacity change from 0 to 1024 [ 251.444427][T14246] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.468232][T13260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.989660][T14267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2648'. [ 251.992168][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2646'. [ 252.058565][T14274] loop6: detected capacity change from 0 to 1024 [ 252.094771][T14274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.115109][T14274] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2651'. [ 252.135361][T14284] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2655'. [ 252.166838][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.281637][T14293] tipc: Enabling of bearer rejected, failed to enable media [ 252.299060][T14295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2659'. [ 252.341879][T14298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.350545][T14299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.406282][T14298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.417247][T14299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.428472][T14298] loop6: detected capacity change from 0 to 164 [ 252.452428][T14301] loop9: detected capacity change from 0 to 512 [ 252.610123][T14303] vlan3: entered promiscuous mode [ 253.934631][T14316] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 253.941255][T14316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.183898][T14316] vhci_hcd vhci_hcd.0: Device attached [ 254.243579][T14316] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 254.250136][T14316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.271221][T14316] vhci_hcd vhci_hcd.0: Device attached [ 254.286456][T14316] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 254.293066][T14316] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 254.305395][T14316] vhci_hcd vhci_hcd.0: Device attached [ 254.314489][T14316] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(9) [ 254.321009][T14316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.357926][T14316] vhci_hcd vhci_hcd.0: Device attached [ 254.364498][T14316] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(11) [ 254.371216][T14316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.379950][T14316] vhci_hcd vhci_hcd.0: Device attached [ 254.404559][T14316] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 254.414463][T14316] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 254.426214][T14316] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(20) [ 254.432846][T14316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.442426][T14316] vhci_hcd vhci_hcd.0: Device attached [ 254.449601][T14330] vhci_hcd: connection closed [ 254.449809][ T12] vhci_hcd vhci_hcd.6: stop threads [ 254.461586][ T12] vhci_hcd vhci_hcd.6: release socket [ 254.467465][T14328] vhci_hcd: connection closed [ 254.467663][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 254.481235][ T12] vhci_hcd vhci_hcd.6: stop threads [ 254.485769][T14326] vhci_hcd: connection closed [ 254.486674][T14324] vhci_hcd: connection closed [ 254.491453][T14317] vhci_hcd: connection closed [ 254.499588][T14322] vhci_hcd: connection closed [ 254.529395][T14335] loop4: detected capacity change from 0 to 1024 [ 254.533217][ T12] vhci_hcd vhci_hcd.6: release socket [ 254.553188][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 254.553746][ T3414] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 254.564865][ T12] vhci_hcd vhci_hcd.6: stop threads [ 254.575483][ T12] vhci_hcd vhci_hcd.6: release socket [ 254.582937][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 254.587139][T14335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.588935][ T12] vhci_hcd vhci_hcd.6: stop threads [ 254.606011][T14318] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 254.611245][T14339] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2669'. [ 254.612458][ T12] vhci_hcd vhci_hcd.6: release socket [ 254.626623][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 254.629225][T14335] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2668'. [ 254.632292][ T12] vhci_hcd vhci_hcd.6: stop threads [ 254.632310][ T12] vhci_hcd vhci_hcd.6: release socket [ 254.652403][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 254.658251][ T12] vhci_hcd vhci_hcd.6: stop threads [ 254.663621][ T12] vhci_hcd vhci_hcd.6: release socket [ 254.669085][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 254.685405][T14347] bond0: entered promiscuous mode [ 254.690487][T14347] bond_slave_0: entered promiscuous mode [ 254.698524][T14347] bond_slave_1: entered promiscuous mode [ 254.706350][T14347] batadv0: entered promiscuous mode [ 254.712347][T14347] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 254.720218][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.729381][T14347] bond0: left promiscuous mode [ 254.735162][T14347] bond_slave_0: left promiscuous mode [ 254.743976][T14347] bond_slave_1: left promiscuous mode [ 254.749899][T14347] batadv0: left promiscuous mode [ 254.759222][T14351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2672'. [ 254.867976][T14363] loop8: detected capacity change from 0 to 512 [ 254.879359][T14363] EXT4-fs: Ignoring removed bh option [ 254.892012][T14363] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 254.902055][T14363] EXT4-fs (loop8): 1 truncate cleaned up [ 254.908716][T14363] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.925884][T14363] netlink: 220 bytes leftover after parsing attributes in process `syz.8.2677'. [ 254.935881][T14363] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2677'. [ 254.962368][T12395] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.991292][T14369] loop8: detected capacity change from 0 to 512 [ 255.005063][T14369] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2678: inode has both inline data and extents flags [ 255.023103][T14369] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.033145][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 255.048710][ C1] EXT4-fs (loop8): initial error at time 1774558793: ext4_orphan_get:1391: inode 15 [ 255.058126][ C1] EXT4-fs (loop8): last error at time 1774558793: ext4_orphan_get:1391: inode 15 [ 255.082498][T14369] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2678: couldn't read orphan inode 15 (err -117) [ 255.159040][T14369] loop8: lost filesystem error report for type 5 error -117 [ 255.160167][T14369] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.303511][ T28] audit: type=1400 audit(1774558793.837:1391): avc: denied { map } for pid=14368 comm="syz.8.2678" path="/125/file0/memory.events.local" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 255.400939][T14379] loop6: detected capacity change from 0 to 1024 [ 255.475541][T14379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.530805][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.547912][T14385] tipc: Enabled bearer , priority 0 [ 255.555037][T14385] syzkaller0: entered promiscuous mode [ 255.560849][T14385] syzkaller0: entered allmulticast mode [ 255.570401][T14385] tipc: Resetting bearer [ 255.604723][T14384] tipc: Resetting bearer [ 255.636080][T14384] tipc: Disabling bearer [ 255.715372][ T28] audit: type=1400 audit(1774558794.237:1392): avc: denied { accept } for pid=14390 comm="syz.6.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 255.851531][T14409] syzkaller0: entered promiscuous mode [ 255.873961][T14409] syzkaller0: entered allmulticast mode [ 255.987755][T14425] loop6: detected capacity change from 0 to 1024 [ 256.057136][ T28] audit: type=1400 audit(1774558794.547:1393): avc: denied { unlink } for pid=12395 comm="syz-executor" name="memory.events.local" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 256.093652][T14387] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.099805][T14425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.636103][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.658858][T14434] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.682512][T14011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 256.702991][T14011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 256.731824][T14011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 256.745260][T14011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 256.791878][T14011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.196377][T14011] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.065558][T14451] hub 8-0:1.0: USB hub found [ 258.070209][T14451] hub 8-0:1.0: 8 ports detected [ 258.077617][T14451] netlink: 'syz.4.2702': attribute type 36 has an invalid length. [ 258.129495][T14455] netlink: 'syz.4.2702': attribute type 10 has an invalid length. [ 258.194326][ T12] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.232720][T14451] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 258.242671][T14451] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 258.254192][T14455] veth1_vlan: left allmulticast mode [ 258.270809][ T4981] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.278049][ T4981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.288211][T14461] __nla_validate_parse: 6 callbacks suppressed [ 258.288221][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2706'. [ 258.307818][ T4981] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.315060][ T4981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.323967][T14462] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2705'. [ 258.333051][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2706'. [ 258.352136][ T12] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.385332][T14467] Invalid logical block size (6) [ 258.436889][T14011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.461100][T14477] loop4: detected capacity change from 0 to 1024 [ 258.468545][T14011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.490467][T14477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.503864][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2712'. [ 258.516509][ T12] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.520896][T14477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2711'. [ 258.526386][T14479] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2712'. [ 258.554816][T14452] lo speed is unknown, defaulting to 1000 [ 258.604749][ T12] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.621662][T14011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.628963][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.638093][T14452] ip6_vti0 speed is unknown, defaulting to 1000 [ 258.735033][T14503] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2716'. [ 258.808105][T14511] netlink: 'syz.4.2719': attribute type 1 has an invalid length. [ 258.819758][T14511] netlink: 'syz.4.2719': attribute type 2 has an invalid length. [ 258.839640][T14511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2719'. [ 258.858057][ T12] bridge_slave_1: left allmulticast mode [ 258.863880][ T12] bridge_slave_1: left promiscuous mode [ 258.869615][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.878250][ T12] bridge_slave_0: left allmulticast mode [ 258.884126][ T12] bridge_slave_0: left promiscuous mode [ 258.889908][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.912238][ T12] veth0_to_team: left allmulticast mode [ 258.930254][T14520] loop9: detected capacity change from 0 to 1024 [ 258.938504][T14522] loop4: detected capacity change from 0 to 512 [ 258.946786][ T12] veth0_to_team: left promiscuous mode [ 258.952375][ T12] : port 1(veth0_to_team) entered disabled state [ 258.986861][T14522] EXT4-fs: inline encryption not supported [ 259.049156][T14522] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 259.091897][T14520] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.150474][T14520] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2723'. [ 259.573323][ T28] audit: type=1400 audit(1774558797.717:1394): avc: denied { ioctl } for pid=14525 comm="syz.6.2725" path="socket:[36418]" dev="sockfs" ino=36418 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 259.622580][T14538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2727'. [ 259.638855][T13260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.674278][ T3414] usb 13-1: enqueue for inactive port 0 [ 259.683353][ T3414] usb 13-1: enqueue for inactive port 0 [ 259.691011][T14540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.702622][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.715698][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.725816][ T12] bond0 (unregistering): Released all slaves [ 259.738530][ T12] bond1 (unregistering): Released all slaves [ 259.773841][ T3414] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 259.886967][T14547] loop4: detected capacity change from 0 to 128 [ 259.894816][T14011] veth0_vlan: entered promiscuous mode [ 259.903974][T14452] chnl_net:caif_netlink_parms(): no params data found [ 259.915115][T14547] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 259.984667][T14011] veth1_vlan: entered promiscuous mode [ 260.019919][T14547] ext4 filesystem being mounted at /632/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.052506][ T12] hsr_slave_0: left promiscuous mode [ 260.059053][ T12] hsr_slave_1: left promiscuous mode [ 260.064855][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.072241][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.148865][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.158109][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.183057][ T12] veth1_macvtap: left promiscuous mode [ 260.189023][ T12] veth0_macvtap: left promiscuous mode [ 260.194861][ T12] veth1_vlan: left promiscuous mode [ 260.200273][ T12] veth0_vlan: left promiscuous mode [ 260.222891][T14567] loop6: detected capacity change from 0 to 1024 [ 260.240968][T14567] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.268071][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.301513][ T12] team0 (unregistering): Port device team_slave_1 removed [ 260.316934][ T12] team0 (unregistering): Port device team_slave_0 removed [ 260.366856][T14011] veth0_macvtap: entered promiscuous mode [ 260.391769][T14452] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.399098][T14452] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.406794][T14452] bridge_slave_0: entered allmulticast mode [ 260.413556][T14452] bridge_slave_0: entered promiscuous mode [ 260.420878][T14011] veth1_macvtap: entered promiscuous mode [ 260.438920][T14452] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.446413][T14452] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.454141][T14452] bridge_slave_1: entered allmulticast mode [ 260.461106][T14452] bridge_slave_1: entered promiscuous mode [ 260.469737][T14581] netlink: 'syz.9.2742': attribute type 10 has an invalid length. [ 260.492088][T14581] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 260.517080][T14011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.551909][T14452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.574412][T14452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.586756][T14011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.609081][T14452] team0: Port device team_slave_0 added [ 260.639455][T14452] team0: Port device team_slave_1 added [ 260.649309][T14600] loop6: detected capacity change from 0 to 1024 [ 260.670571][ T3992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.692380][T14452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.700772][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.701759][T14600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.728005][T14452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.753085][T14452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.760055][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.786699][T14452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.804474][ T3992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.814041][ T3992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.826257][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.853033][T14452] hsr_slave_0: entered promiscuous mode [ 260.867332][T14452] hsr_slave_1: entered promiscuous mode [ 260.873373][T14452] debugfs: 'hsr0' already exists in 'hsr' [ 260.879098][T14452] Cannot create hsr debugfs directory [ 260.890331][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.930999][ T3992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.931768][T14615] netlink: 'syz.4.2749': attribute type 10 has an invalid length. [ 261.161295][T14642] loop4: detected capacity change from 0 to 1024 [ 261.167908][T14644] loop3: detected capacity change from 0 to 512 [ 261.200248][T14644] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.208702][T14642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.305549][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.343016][T14637] loop6: detected capacity change from 0 to 512 [ 261.621485][T14688] loop9: detected capacity change from 0 to 512 [ 261.650785][T14687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.751911][T14694] FAT-fs (loop4): codepage cp852 not found [ 261.765814][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.845408][ T28] audit: type=1400 audit(1774558800.367:1395): avc: denied { read } for pid=14692 comm="syz.4.2768" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 261.930843][ T28] audit: type=1400 audit(1774558800.367:1396): avc: denied { open } for pid=14692 comm="syz.4.2768" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 262.021228][ T28] audit: type=1400 audit(1774558800.367:1397): avc: denied { ioctl } for pid=14692 comm="syz.4.2768" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 262.177918][T14741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.294738][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.308124][T14751] EXT4-fs: inline encryption not supported [ 262.314394][T14751] EXT4-fs: Ignoring removed nobh option [ 262.320033][T14751] EXT4-fs: Ignoring removed bh option [ 262.342287][T14751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.426236][T14764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.443202][T14764] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.561231][ T28] audit: type=1400 audit(1774558801.097:1398): avc: denied { create } for pid=14763 comm="syz.6.2784" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 262.561493][T14764] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2784: bg 0: block 345: padding at end of block bitmap is not set [ 262.601628][T14764] EXT4-fs (loop6): Remounting filesystem read-only [ 263.234791][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.310764][T14805] lo speed is unknown, defaulting to 1000 [ 263.567912][T14824] set_capacity_and_notify: 8 callbacks suppressed [ 263.567927][T14824] loop4: detected capacity change from 0 to 1024 [ 263.609564][T14805] ip6_vti0 speed is unknown, defaulting to 1000 [ 263.683498][T14824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.743178][T14824] __nla_validate_parse: 12 callbacks suppressed [ 263.743195][T14824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2794'. [ 263.847564][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.968432][T14836] loop3: detected capacity change from 0 to 512 [ 263.978689][T14836] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 264.037142][T14836] EXT4-fs (loop3): 1 truncate cleaned up [ 264.044627][T14836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.070130][T14011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.089096][T13260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.137945][T14845] loop3: detected capacity change from 0 to 164 [ 264.163816][T14847] loop4: detected capacity change from 0 to 512 [ 264.209297][T14847] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 264.240327][T14847] EXT4-fs (loop4): 1 truncate cleaned up [ 264.263407][T14847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.300307][T14861] loop3: detected capacity change from 0 to 1024 [ 264.314789][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.326344][ T28] audit: type=1400 audit(1774558802.867:1399): avc: denied { read } for pid=14862 comm="syz.6.2808" laddr=fe80::1445:64ff:fec6:e7e1 lport=65001 faddr=ff04::1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 264.384756][T14869] FAULT_INJECTION: forcing a failure. [ 264.384756][T14869] name failslab, interval 1, probability 0, space 0, times 0 [ 264.398223][T14861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.411590][T14869] CPU: 0 UID: 0 PID: 14869 Comm: syz.4.2809 Tainted: G W syzkaller #0 PREEMPT(full) [ 264.411684][T14869] Tainted: [W]=WARN [ 264.411692][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.411713][T14869] Call Trace: [ 264.411720][T14869] [ 264.411728][T14869] __dump_stack+0x1d/0x30 [ 264.411759][T14869] dump_stack_lvl+0x95/0xd0 [ 264.411842][T14869] dump_stack+0x15/0x1b [ 264.411909][T14869] should_fail_ex+0x263/0x280 [ 264.412003][T14869] should_failslab+0x8c/0xb0 [ 264.412084][T14869] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 264.412106][T14869] ? __alloc_skb+0x2d6/0x690 [ 264.412136][T14869] __alloc_skb+0x2d6/0x690 [ 264.412165][T14869] ? __alloc_skb+0x200/0x690 [ 264.412254][T14869] netlink_alloc_large_skb+0xbf/0xf0 [ 264.412282][T14869] netlink_sendmsg+0x40c/0x6f0 [ 264.412317][T14869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.412403][T14869] ____sys_sendmsg+0x563/0x5b0 [ 264.412446][T14869] ___sys_sendmsg+0x195/0x1e0 [ 264.412536][T14869] __x64_sys_sendmsg+0xd4/0x160 [ 264.412575][T14869] x64_sys_call+0x194c/0x3020 [ 264.412737][T14869] do_syscall_64+0x12c/0x370 [ 264.412763][T14869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.412823][T14869] RIP: 0033:0x7f316432c799 [ 264.412841][T14869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.412858][T14869] RSP: 002b:00007f3162d87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.412877][T14869] RAX: ffffffffffffffda RBX: 00007f31645a5fa0 RCX: 00007f316432c799 [ 264.412891][T14869] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 264.412904][T14869] RBP: 00007f3162d87090 R08: 0000000000000000 R09: 0000000000000000 [ 264.412945][T14869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.412958][T14869] R13: 00007f31645a6038 R14: 00007f31645a5fa0 R15: 00007ffccd9efe08 [ 264.412978][T14869] [ 264.415784][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2806'. [ 264.667780][T14011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.750096][T14902] xt_bpf: check failed: parse error [ 264.868202][T14904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.915297][T14908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.942181][T14919] loop4: detected capacity change from 0 to 128 [ 264.966757][T14919] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2821'. [ 264.999535][T14452] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.012159][ T28] audit: type=1326 audit(1774558803.557:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 265.048509][T14452] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.070350][T14452] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.123748][ T28] audit: type=1326 audit(1774558803.557:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 265.152719][T14452] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 265.160384][T14927] loop4: detected capacity change from 0 to 512 [ 265.177225][ T28] audit: type=1326 audit(1774558803.557:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 265.209776][ T28] audit: type=1326 audit(1774558803.557:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 265.220903][T14938] loop9: detected capacity change from 0 to 512 [ 265.266520][ T28] audit: type=1326 audit(1774558803.557:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 265.291765][ T28] audit: type=1326 audit(1774558803.557:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 265.317112][ T28] audit: type=1326 audit(1774558803.557:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 265.324360][T14938] EXT4-fs (loop9): invalid inodes per group: 512463901 [ 265.324360][T14938] [ 265.348745][ T28] audit: type=1326 audit(1774558803.557:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 265.374408][ T28] audit: type=1326 audit(1774558803.557:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 265.398310][ T28] audit: type=1326 audit(1774558803.557:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f316432c799 code=0x7ffc0000 [ 265.461596][T14452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.516349][T14452] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.529753][T14927] EXT4-fs (loop4): 1 orphan inode deleted [ 265.534862][ T2197] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.542830][ T2197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.555959][ T1622] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.561481][T14927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.563012][ T1622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.592480][T14452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.603265][T14452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.687825][T14968] loop6: detected capacity change from 0 to 1764 [ 265.746173][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.748135][T14968] lo speed is unknown, defaulting to 1000 [ 265.800094][T14452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.818112][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2829'. [ 265.947750][T14968] ip6_vti0 speed is unknown, defaulting to 1000 [ 265.973314][T15003] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2834'. [ 266.019731][T15003] hub 8-0:1.0: USB hub found [ 266.024448][T15003] hub 8-0:1.0: 8 ports detected [ 266.034746][T15003] netlink: 'syz.3.2834': attribute type 10 has an invalid length. [ 266.051466][T14987] bridge6: entered promiscuous mode [ 266.067718][T14987] bridge6: entered allmulticast mode [ 266.086891][T15003] macvlan1: entered allmulticast mode [ 266.096049][T15003] veth1_vlan: entered allmulticast mode [ 266.111484][T15003] team0: Port device macvlan1 added [ 266.185251][T14452] veth0_vlan: entered promiscuous mode [ 266.214900][T14452] veth1_vlan: entered promiscuous mode [ 266.280855][T14452] veth0_macvtap: entered promiscuous mode [ 266.302230][T14452] veth1_macvtap: entered promiscuous mode [ 266.365100][T14452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.401616][T14452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.442211][ T4981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.469522][ T4981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.496902][ T4981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.506609][ T4981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.544603][T15018] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2837'. [ 266.560666][T15018] ip6tnl1: entered allmulticast mode [ 266.724790][T15035] cgroup: release_agent respecified [ 266.886394][T15042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.936652][T15042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.965781][T15074] loop9: detected capacity change from 0 to 512 [ 267.044498][T15074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 267.067395][T15051] lo speed is unknown, defaulting to 1000 [ 267.113907][T15074] ext4 filesystem being mounted at /112/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.117975][T15051] ip6_vti0 speed is unknown, defaulting to 1000 [ 267.274561][T13260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 267.348359][T15103] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2854'. [ 267.360197][T15103] xt_bpf: check failed: parse error [ 267.388707][T15051] chnl_net:caif_netlink_parms(): no params data found [ 267.500449][ T3992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.543389][T15051] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.553387][T15051] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.560789][T15051] bridge_slave_0: entered allmulticast mode [ 267.568915][T15051] bridge_slave_0: entered promiscuous mode [ 267.578726][ T3992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.592230][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2859'. [ 267.601690][T15051] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.609553][T15051] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.618015][T15051] bridge_slave_1: entered allmulticast mode [ 267.625430][T15051] bridge_slave_1: entered promiscuous mode [ 267.637912][ T3992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.691568][T15051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.720125][ T3992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.743044][T15141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2862'. [ 267.746646][T15051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.766123][T15141] tipc: New replicast peer: 255.255.186.255 [ 267.772282][T15141] tipc: Enabled bearer , priority 10 [ 267.779962][T15141] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2862'. [ 267.815692][T15051] team0: Port device team_slave_0 added [ 267.824331][T15051] team0: Port device team_slave_1 added [ 267.852617][T15145] wireguard0: entered promiscuous mode [ 267.865739][T15145] wireguard0: entered allmulticast mode [ 267.960826][T15051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.967995][T15051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.994771][T15051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.010994][T15051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.023868][T15051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.079910][T15051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.131095][T15169] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2874: invalid block [ 268.145745][T15169] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 268.145973][T15169] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2874: invalid indirect mapped block 4294967295 (level 1) [ 268.155218][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 268.155241][ C1] EXT4-fs (loop2): initial error at time 1774558806: ext4_get_branch:178: inode 11: block 4294967295 [ 268.155270][ C1] EXT4-fs (loop2): last error at time 1774558806: ext4_get_branch:178: inode 11: block 4294967295 [ 268.197191][T15169] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 268.197541][T15169] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2874: invalid indirect mapped block 4294967295 (level 1) [ 268.220631][T15169] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 268.220974][T15169] EXT4-fs (loop2): 2 truncates cleaned up [ 268.236500][T15169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.336698][ T83] smc: removing ib device syz2 [ 268.351697][T15181] netlink: 'syz.9.2878': attribute type 21 has an invalid length. [ 268.478489][ T3400] kernel read not supported for file bpf-prog (pid: 3400 comm: kworker/1:4) [ 268.694882][ T3992] bond0 (unregistering): Released all slaves [ 268.702539][ T3992] bond1 (unregistering): Released all slaves [ 268.711673][ T3992] bond2 (unregistering): Released all slaves [ 268.719963][ T3992] bond3 (unregistering): Released all slaves [ 268.729427][ T3992] bond4 (unregistering): Released all slaves [ 268.737777][ T3992] bond5 (unregistering): Released all slaves [ 268.745991][ T3992] bond6 (unregistering): Released all slaves [ 268.762367][ T5197] ip6_vti0 speed is unknown, defaulting to 1000 [ 268.769254][ T5197] syz2: Port: 1 Link DOWN [ 268.773784][T15169] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.785865][T15184] __nla_validate_parse: 3 callbacks suppressed [ 268.785884][T15184] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2874'. [ 268.802073][T15181] netlink: 'syz.9.2878': attribute type 4 has an invalid length. [ 268.810341][T15181] netlink: 'syz.9.2878': attribute type 5 has an invalid length. [ 268.818103][T15181] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2878'. [ 268.881944][T15051] hsr_slave_0: entered promiscuous mode [ 268.897186][T15051] hsr_slave_1: entered promiscuous mode [ 268.910378][T14452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.920727][T15051] debugfs: 'hsr0' already exists in 'hsr' [ 268.932995][T15051] Cannot create hsr debugfs directory [ 268.951020][ T3992] tipc: Disabling bearer [ 268.962718][T15227] FAULT_INJECTION: forcing a failure. [ 268.962718][T15227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.976008][ T3992] tipc: Left network mode [ 268.986098][T15229] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2892'. [ 268.986227][ T3356] tipc: Node number set to 2886997007 [ 269.018604][T15227] CPU: 0 UID: 0 PID: 15227 Comm: syz.2.2889 Tainted: G W syzkaller #0 PREEMPT(full) [ 269.018666][T15227] Tainted: [W]=WARN [ 269.018674][T15227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.018704][T15227] Call Trace: [ 269.018711][T15227] [ 269.018773][T15227] __dump_stack+0x1d/0x30 [ 269.018801][T15227] dump_stack_lvl+0x95/0xd0 [ 269.018825][T15227] dump_stack+0x15/0x1b [ 269.018848][T15227] should_fail_ex+0x263/0x280 [ 269.018902][T15227] should_fail+0xb/0x20 [ 269.018921][T15227] should_fail_usercopy+0x1a/0x20 [ 269.018945][T15227] _copy_from_user+0x1c/0xb0 [ 269.019038][T15227] ___sys_sendmsg+0xc1/0x1e0 [ 269.019079][T15227] __x64_sys_sendmsg+0xd4/0x160 [ 269.019170][T15227] x64_sys_call+0x194c/0x3020 [ 269.019195][T15227] do_syscall_64+0x12c/0x370 [ 269.019220][T15227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.019270][T15227] RIP: 0033:0x7f1d3aa0c799 [ 269.019285][T15227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.019309][T15227] RSP: 002b:00007f1d39467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.019349][T15227] RAX: ffffffffffffffda RBX: 00007f1d3ac85fa0 RCX: 00007f1d3aa0c799 [ 269.019364][T15227] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 269.019419][T15227] RBP: 00007f1d39467090 R08: 0000000000000000 R09: 0000000000000000 [ 269.019447][T15227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.019461][T15227] R13: 00007f1d3ac86038 R14: 00007f1d3ac85fa0 R15: 00007ffe73b551b8 [ 269.019482][T15227] [ 269.270263][T15235] set_capacity_and_notify: 2 callbacks suppressed [ 269.270318][T15235] loop9: detected capacity change from 0 to 512 [ 269.313014][ T3992] hsr_slave_0: left promiscuous mode [ 269.320393][T15249] Cannot find add_set index 0 as target [ 269.326601][ T3992] hsr_slave_1: left promiscuous mode [ 269.358917][T15235] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 269.369777][ T3992] macsec0: left allmulticast mode [ 269.383271][ T3992] veth1_macvtap: left allmulticast mode [ 269.389243][ T3992] veth1_macvtap: left promiscuous mode [ 269.416682][ T3992] veth0_macvtap: left promiscuous mode [ 269.422201][ T3992] veth1_vlan: left promiscuous mode [ 269.433464][T15235] EXT4-fs (loop9): orphan file too big: 4294967295 [ 269.440807][ T3992] veth0_vlan: left promiscuous mode [ 269.447977][T15235] EXT4-fs (loop9): mount failed [ 269.456284][T15252] loop2: detected capacity change from 0 to 1024 [ 269.510836][T15235] loop9: detected capacity change from 0 to 512 [ 269.517297][T15252] EXT4-fs: Ignoring removed orlov option [ 269.520030][T15252] ext4: Unknown parameter 'obj_role' [ 269.574302][T15235] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 269.591404][T15235] EXT4-fs (loop9): mount failed [ 269.602664][ T3992] macvlan1 (unregistering): left promiscuous mode [ 269.613022][ T3992] team0 (unregistering): Port device macvlan1 removed [ 269.679022][ T4981] smc: removing ib device syz0 [ 269.713320][ T23] lo speed is unknown, defaulting to 1000 [ 269.720932][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 269.730356][ T23] syz0: Port: 1 Link DOWN [ 269.884287][T15281] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.931062][T15281] loop6: detected capacity change from 0 to 1024 [ 269.972678][T15281] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.007382][T15293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2907'. [ 270.039570][ T3992] IPVS: stop unused estimator thread 0... [ 270.070518][T15281] EXT4-fs error (device loop6): ext4_empty_dir:3107: inode #11: block 623: comm syz.6.2904: Attempting to read directory block (623) that is past i_size (638464) [ 270.090630][T15281] EXT4-fs (loop6): Remounting filesystem read-only [ 270.138965][T15302] loop2: detected capacity change from 0 to 1024 [ 270.166165][T15302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.189683][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.208508][T15302] SELinux: Context is not valid (left unmapped). [ 270.226404][ T28] kauditd_printk_skb: 183 callbacks suppressed [ 270.226420][ T28] audit: type=1400 audit(1774558808.767:1593): avc: denied { relabelto } for pid=15301 comm="syz.2.2910" name="blkio.bfq.io_queued_recursive" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 270.307507][T14452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.316732][T15318] loop6: detected capacity change from 0 to 512 [ 270.323869][T15318] ext4: Unknown parameter 'uid<18446744073709551615' [ 270.378981][T15325] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2918'. [ 270.422382][T15327] loop3: detected capacity change from 0 to 2048 [ 270.461130][T15327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.842070][ T28] audit: type=1400 audit(1774558809.377:1594): avc: denied { reparent } for pid=15326 comm="syz.3.2919" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.910242][ T28] audit: type=1400 audit(1774558809.377:1595): avc: denied { add_name } for pid=15326 comm="syz.3.2919" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 270.934288][T15343] loop2: detected capacity change from 0 to 1764 [ 270.946063][T14011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.013595][T15352] loop6: detected capacity change from 0 to 512 [ 271.025971][T15352] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2924: inode has both inline data and extents flags [ 271.039628][T15352] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.043117][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 271.056267][T15359] loop2: detected capacity change from 0 to 512 [ 271.058677][ C1] EXT4-fs (loop6): initial error at time 1774558809: ext4_orphan_get:1391: inode 15 [ 271.064995][T15352] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2924: couldn't read orphan inode 15 (err -117) [ 271.074278][ C1] EXT4-fs (loop6): last error at time 1774558809: ext4_orphan_get:1391: inode 15 [ 271.096446][T15352] loop6: lost filesystem error report for type 5 error -117 [ 271.107600][T15352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.116427][T15359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 271.183895][ T6271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.229581][T15371] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2929'. [ 271.230036][T14452] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.284751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.306835][ T28] audit: type=1400 audit(1774558809.847:1596): avc: denied { load_policy } for pid=15366 comm="syz.6.2927" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 271.336925][T15367] SELinux: failed to load policy [ 271.349146][T15367] EXT4-fs: Ignoring removed i_version option [ 271.399560][T15367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.415811][T15367] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 271.437933][T15367] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 271.447652][T15367] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2927: Failed to acquire dquot type 0 [ 271.447987][T15387] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2932'. [ 271.458934][T15367] loop6: lost filesystem error report for type 5 error -117 [ 271.470688][T15367] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, [ 271.478036][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 271.478061][ C0] EXT4-fs (loop6): initial error at time 1774558810: ext4_acquire_dquot:7001 [ 271.478101][ C0] EXT4-fs (loop6): last error at time 1774558810: ext4_acquire_dquot:7001 [ 271.486977][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2932'. [ 271.492161][T15367] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 271.531217][T15367] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #13: comm syz.6.2927: corrupted inode contents [ 271.543205][T15367] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 271.545234][T15367] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #13: comm syz.6.2927: mark_inode_dirty error [ 271.582951][T15367] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 271.595108][T15367] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #13: comm syz.6.2927: corrupted inode contents [ 271.617139][ T28] audit: type=1326 audit(1774558810.127:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15390 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3aa0c799 code=0x7ffc0000 [ 271.668385][T15367] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 271.668616][ T28] audit: type=1326 audit(1774558810.127:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15390 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1d3aa0c799 code=0x7ffc0000 [ 271.704787][T15367] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #13: comm syz.6.2927: mark_inode_dirty error [ 271.723110][T15367] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 271.723233][ T28] audit: type=1326 audit(1774558810.137:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15390 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3aa0c799 code=0x7ffc0000 [ 271.756341][T15367] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #13: comm syz.6.2927: corrupted inode contents [ 271.757709][ T28] audit: type=1326 audit(1774558810.137:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15390 comm="syz.2.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f1d3aa0c799 code=0x7ffc0000 [ 271.773090][T15367] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 271.793560][T15367] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 271.811444][T15367] loop6: lost filesystem error report for type 5 error -117 [ 271.811648][T15367] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #13: comm syz.6.2927: corrupted inode contents [ 271.831280][T15367] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 271.831430][T15367] EXT4-fs error (device loop6): ext4_truncate:4587: inode #13: comm syz.6.2927: mark_inode_dirty error [ 271.852253][T15367] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 271.861340][T15367] loop6: lost filesystem error report for type 5 error -117 [ 271.862116][T15367] EXT4-fs (loop6): 1 truncate cleaned up [ 271.878128][T15367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.973600][ T3430] ================================================================== [ 271.981694][ T3430] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 271.988709][ T3430] [ 271.991015][ T3430] read-write to 0xffff888237c2a8a4 of 4 bytes by task 7446 on cpu 0: [ 271.999061][ T3430] wq_worker_running+0x9b/0x120 [ 272.003901][ T3430] schedule_timeout+0xca/0x180 [ 272.008647][ T3430] msleep+0x4f/0x90 [ 272.012431][ T3430] nsim_fib_event+0x491d/0x4d70 [ 272.017282][ T3430] nsim_fib_event_work+0x13d/0x210 [ 272.022372][ T3430] process_scheduled_works+0x513/0xa10 [ 272.027808][ T3430] worker_thread+0x58a/0x780 [ 272.032382][ T3430] kthread+0x22a/0x280 [ 272.036427][ T3430] ret_from_fork+0x150/0x360 [ 272.040998][ T3430] ret_from_fork_asm+0x1a/0x30 [ 272.045746][ T3430] [ 272.048048][ T3430] read to 0xffff888237c2a8a4 of 4 bytes by task 3430 on cpu 1: [ 272.055571][ T3430] kick_pool+0x49/0x2d0 [ 272.059707][ T3430] __queue_work+0x896/0xaf0 [ 272.064190][ T3430] queue_work_on+0xa9/0x140 [ 272.068673][ T3430] process_srcu+0xa56/0xdc0 [ 272.073155][ T3430] process_scheduled_works+0x513/0xa10 [ 272.078592][ T3430] worker_thread+0x58a/0x780 [ 272.083162][ T3430] kthread+0x22a/0x280 [ 272.087208][ T3430] ret_from_fork+0x150/0x360 [ 272.091776][ T3430] ret_from_fork_asm+0x1a/0x30 [ 272.096516][ T3430] [ 272.098815][ T3430] value changed: 0x00000000 -> 0x00000001 [ 272.104509][ T3430] [ 272.106810][ T3430] Reported by Kernel Concurrency Sanitizer on: [ 272.112937][ T3430] CPU: 1 UID: 0 PID: 3430 Comm: kworker/1:6 Tainted: G W syzkaller #0 PREEMPT(full) [ 272.123847][ T3430] Tainted: [W]=WARN [ 272.127624][ T3430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.137654][ T3430] Workqueue: rcu_gp process_srcu [ 272.142572][ T3430] ================================================================== [ 272.204250][ T7235] loop6: p1 p2 p3 [ 272.223754][T15402] loop6: p1 p2 p3 [ 272.246011][ T7235] udevd[7235]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 272.259092][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 272.276191][ T7238] udevd[7238]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 272.292923][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 272.304825][ T7238] udevd[7238]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 272.313479][ T7235] udevd[7235]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 273.716568][T15051] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.725456][T15051] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.734202][T15051] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.742809][T15051] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.774020][T15051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.785726][T15051] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.794744][ T9840] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.801899][ T9840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.812334][ T4981] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.819385][ T4981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.872218][T15051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.959457][T15051] veth0_vlan: entered promiscuous mode [ 273.967016][T15051] veth1_vlan: entered promiscuous mode [ 273.980435][T15051] veth0_macvtap: entered promiscuous mode [ 273.987613][T15051] veth1_macvtap: entered promiscuous mode [ 273.998348][T15051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.008691][T15051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.017913][ T83] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.028384][ T83] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.037606][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.047247][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.193855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)