last executing test programs: 28.796764112s ago: executing program 1 (id=31): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) close(0x3) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 28.441712107s ago: executing program 1 (id=34): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{}, {0x20, '\x00\x18\xcf\xabo~\x103\x12x\xdc@\xd1\x90\r\x99\xce8&\xa2$\x0e\x83\x832\\\xc7\xbc\a00\x1d\b\xfa!\b#\x0e\x99\x87%\x8d\xd1\xe9\x8bZ\x1f\x9fgU!K\x80V\x90;*\xa6 \xe7\xd0{o\xe5T\x0e:\x1dzO\xb8\xdb\xec\xb8\x7f\t?\x99\"\a\x92\xd00Z\xd8\xb1\xaa\xf3\x1b\xae\x85(\xf0[kFzbO\r\xc87\x9e\xc4\xdd$\xd9\xa9\b5\xd3\x95\xd9\xf22\xac\x93L&A\xa9o\x1c\x8e\xc7'}]}, 0x8a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 28.276130229s ago: executing program 1 (id=35): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x361, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x1) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 28.259513151s ago: executing program 1 (id=36): ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3430c2, 0x15) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa8402, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa8402, 0x0) io_setup(0x1, &(0x7f0000002500)) (async) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r2, 0x1, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000380)="a3", 0x1, 0xe3}]) r3 = accept(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x80) pwrite64(r3, &(0x7f0000000000)='2', 0x1, 0xe7c) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) 27.79623766s ago: executing program 1 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003c80)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r1], 0x3c}}, 0x0) 27.071566793s ago: executing program 1 (id=54): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x4, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r2, @loopback}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) socket$nl_netfilter(0x10, 0x3, 0xc) 27.041993037s ago: executing program 32 (id=54): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x4, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r2, @loopback}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) socket$nl_netfilter(0x10, 0x3, 0xc) 2.757178176s ago: executing program 2 (id=441): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_settime(0xb84856c935ea9e7, &(0x7f0000000100)={0x77359400}) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @remote}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x40, 0x8, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x5, 0xf989, 'P'}, @mptcp=@generic={0x0, 0x10, "5f71bf8a8088fc0d16907cbac1e5"}]}}}}}}}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x20000000) (async) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.709212632s ago: executing program 3 (id=443): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000000c0)="62030042a39b0b20", 0x8}], 0x2}, 0x40810) (fail_nth: 2) 2.506276288s ago: executing program 2 (id=445): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x4c) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b399e, 0x0) r2 = syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x10000800) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x8, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x3, &(0x7f0000000100)=""/147, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x144, 0x9, 0x6, 0x0, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_COMMENT={0x40, 0x1a, 'syzkaller\x00\x12\xe1\xe1\xf7\x95\xe7\xfe\xeb\xb6\x97\xac)\xe1&\xc3Z\f\xa5\x95\xd7\x8f\xd9\x04\xc5a\x9e+)/\xdd\xb1N\x96\x96/\x17\xeb\x1agh\xa1cG\nd|Y\xd8P|'}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="e6690be04964"}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8dad}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_COMMENT={0x40, 0x1a, 'syzkaller\x00\x12\xe1\xe1\xf7\x95\xe7\xfe\xeb\xb6\x97\xac)\xe1&\xc3Z\f\xa5\x95\xd7\x8f\xd9\x04\xc5a\x9e+)/\xdd\xb1N\x96\x96/\x17\xeb\x1agh\xa1cG\nd|Y\xd8P|'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_COMMENT={0xe, 0x1a, 'syzkaller\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x810}, 0x48089) 2.147962954s ago: executing program 5 (id=447): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80900) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000004bc0)=[{{&(0x7f0000001640)={0xa, 0x4e21, 0xffffffff, @private0, 0x7}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001680)="b4", 0x1}], 0x1}}], 0x1, 0x48051) shutdown(r3, 0x1) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r4, &(0x7f0000000380)={@val={0x0, 0x8917}, @val={0x3, 0x0, 0x7, 0xa465, 0x400, 0xa49a}, @ipv4=@tipc={{0xb, 0x4, 0x2, 0x5, 0xa8, 0x68, 0x0, 0xd, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4, 0xc7, 0x1, 0x6}, @generic={0x86, 0x2}, @lsrr={0x83, 0xb, 0xf2, [@loopback, @remote]}, @ra={0x94, 0x4, 0x1}]}}, @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x844, 0x0, 0x0, 0x8d, 0xfffe, 0x2, 0x4e24, 0x4e21, 0x1, 0x4000002, 0x0, 0x0, 0x1}, [{0x0, 0x1000, 0x1e, 0xcf42, 0xbe13, 0x5, 0x6, 0x8}, {0xffffff72, 0x4, 0x8, 0x9, 0x27, 0x7, 0x6, 0xffff}, {0xe30, 0x10, 0x5, 0x7f, 0x6, 0x5, 0x8, 0x8000}]}}}, 0xb6) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x14, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x24000840) 2.146435674s ago: executing program 3 (id=448): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0x401}, 0x14}}, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x40c100) socket$netlink(0x10, 0x3, 0x0) semop(0x0, &(0x7f0000000080)=[{0x4, 0x0, 0x800}, {0x4, 0x8, 0x800}], 0x2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_delroute={0x1c, 0x19, 0x10, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x20, 0xfa, 0xff, 0x1, 0xfe, 0x0, 0x1980}}, 0x1c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x40000) 1.987128364s ago: executing program 3 (id=449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r1, &(0x7f0000000380)=""/45, 0x2d) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, 0x13}}, 0x18) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000a39e00000100000a68000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b24001280200001800a00010071756f7461000000100002800c000140000000000000008008000340000001"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.899981266s ago: executing program 4 (id=451): r0 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') (async) renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) stat(&(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x5, 0x0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x6, 0x0, 0xc, 0x0, 0x10, 0x7, 0x9802, {0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x5d, 0x2, 0x0, 0x78, 0x9}}, &(0x7f0000000440)=0xb0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000480)={r4, 0x4, 0x30, 0xe8d, 0x519b}, &(0x7f00000004c0)=0x18) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) (async) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) (async) statx(r2, &(0x7f0000000200)='./cgroup.net/cgroup.procs/file0\x00', 0x800, 0x2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f00000000c0)='./cgroup.net/cgroup.procs\x00', r3, r6, 0x800) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00ad57e1b7616e45877202a95a4538e940609a746df21e45c6edace0f2527fc4b50056a51934c48e44e7f2c74a4f740ed0ecda9394b1629849902b68b9092de8ed66a931ddae559b95d300abf2e25d11fafe583d90e87374c30d5f1269ced3480f1fd2fd85b539714db68a8a6643c3cde0914993c60fec182f71f0c8d2c085bc0a410a20f5ab7d5d9cbc8a94f61a1933ff9c2ac6051014413c181b4461a3954138b0aba006a05aa34ed08acaeb2713b0da113bffb03ce16b78a601f8ffffffffffffbc43df44364c9a594dac8927cb5e7f2fa4838b96090cb7f3954cc5dbb568e626247d7eb69f9cfe4d9162d4b018d91aeff4c330b3f4db8c49e87d1b1271d962365fdb9c68612a3448ae49a3d2b716597d163a41e5dc7a071f168d427e781ed57425"]) 1.899281226s ago: executing program 2 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xc, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2040c5c, &(0x7f00000012c0)=ANY=[@ANYBLOB='check=relaxed,showckperm,unhiDe,map=off,i9-5,uid=\x00'/80, @ANYRESHEX=0x0, @ANYBLOB=',check=strict,map=off,overriderockperm,map=acorn,hide,session=0x0000000000000044,mode=0x0000000000000003,overriderockperm,norock,showassoc,iocharset=ascii,\x00'], 0xff, 0xa24, &(0x7f0000000280)="$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") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000080)=@isdn={0x22, 0x4, 0x25, 0x7, 0x5}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000cc0)="a84428dcae79f8dc3b7ef16398a9fb0b8eec783a1d434fe4891f7c29100ef7aea9f24115956c9291b64ec58603ae48b821f09c18f4a5610a3217881fe38030080a17816c7ff10716bc0d7ef2742688df06804a80ff26da91c6386b449dc8f3b63271bba5412c72c8d082c269fd1185e7eb0c3cb6a38aa5111c2468c248fb185e263acd5088aba716d5994424a495db2ade984bdb2d4bd6bda7b3527e294dca44c6686591473a0429d3c40bce7d41ffe8f4", 0xb1}, {&(0x7f0000000000)="e11d956cb540550fe0f2265806947682f5a1247f33961615911aa1e2", 0x1c}, {&(0x7f0000000d80)="9c9241d3a7c5393e110fa22b0b1b48397a66f71b88020ba7dd7c20f0e384e9f91026bd88ae360a207f8ba3fe638dc4669f58c44818593fff408e3100083a4f5453707f99ae4ffb12ced55d7a8fbee5da4c856fe70387b4da124ff08812c33a0f3717381d85", 0x65}, {&(0x7f0000000e00)="732730b34e524b89d823f2ad5cbb5edc92b68f492e60eeeea368b0fccd90da9191f7118d69c10035ba614e92667c68c1e33137a6da0bfb1f2eea4f35175925a1086696fc8ac39a3c7c2a6eecd548817750b019fb788afd38134b642673c5138926fc3f18f11a7a46bd5a48213391adc9e72d61934265c9d21d5e0e5fd1d569556207848cd7bbe542dafb3e62f7109875e6a4271b55507fc01e3c9ef5e1c6171181f41c857f03f4d8917f19bea7d8cac1eb890a84117cd5467d15e981c46504b904c05a948976aabea5ebf966972d7b82e915fe6028124f284c12f672f06a15d210e347706772535bf77cebaf0e76f76d87", 0xf1}, {&(0x7f0000000100)="047f0f48afcb643626c93a82afa3509f72d6ac1a", 0x14}, {&(0x7f0000000f00)="9a2b58c7c9033305f27f552618b3f9066a38ba544a163dac41f17388cb9d1c608c374c823e2a3af31c1c55393a52fdb1331b85f891d1f128e650cc4c10b49b7ce1eb651faca4b6ae4f1d7a5fb230228c781eecd1a05bd1e12106900c69b804537ae2804305fe4d851f1f7264fb46e434d9e76bfdf266af2118c6b4216e144ad1d6305497d252748c6c77e4f79be564a14f7f1c795abee1bd8642901ecf49cae3b4cb7b0a3cb516d0476417", 0xab}, {&(0x7f0000000fc0)="dd55d6655a", 0x5}, {&(0x7f0000001000)="39544f4b7ae1678db71a13558971d23646bf42892d30c79fc381661bd8838b62db3b5666bd89d21ded3676a586812a632a852a94a5d7efed3850937547b4097c29dd08304db98aaea6e7ec38317018fed09334235cd0bc40ba8859d036794654a631697f44bcc67177421fc378b995d8483db47c41c8db3b1cb50edb335f511387b483db013086c0c1e5b4bad0600ae1c27a3ba98adc8327ecb8021a205792d4d56afca2680438d523cfe8347cc96356eb1a1082f47eafd26801210bbd12d5fd0fdbeee020a71e5d94779b564f2ce0239e56fb23c1d34f58647fe82f56f5a038e970172f112173c6535176", 0xeb}, {&(0x7f0000001100)="c90bd7dd351040c8311baef1577ade043138f52fc261df5e0c2a4efe8868132312754dcd96b4154cffc59b17ece8beded3dabbd297fe6e6f0bc2dd257976b44e69308af791a7e67ea80ebce3173cbd97021f80b0042d897d696f07f7f76b3f09a09387aeef840593379f9828ac523dea74d959641daace1a75a83a201f874cb9625c52075a7bcf6d08d868e93289d84aca7820b8", 0x94}], 0x9}, 0x1) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2b, 'pids'}, {0x2d, 'io'}, {0x2b, 'cpu'}, {0x2d, 'devices'}, {0x2b, 'rlimit'}]}, 0x20) 1.795486519s ago: executing program 4 (id=453): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000023f3201"], 0x138) 1.748781695s ago: executing program 5 (id=454): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/13, 0xd}, {&(0x7f0000000040)=""/227, 0xe3}, {&(0x7f0000000140)=""/101, 0x65}], 0x3, &(0x7f0000000200)=""/204, 0xcc}, 0x40000000) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x5, 0x5c6040) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x2, 0x1, "aa9d8fe18b8f16e4ec7a9b9b6317be75335f7b318e751a059c165059c856dd126f47d532b28163583fc017a4414f7a903edc0810e97e8f6797d5d6e1eec3b439afcf191ceb930e077bef45756f087bbcbb1aa250e20e4d269a7ef05453f1c5f53559200994c1f16dd9e19aab0dd467c485947f08032eaeca26b772659b493058cf7c03c082eeb01d4367a0ec8fbe32e1e130837a5ae8ef4bcf714ae7c6645c506109f428434763d769d7f0c39144f394f4be04eac8041c77d1cd4865e9627b9af45c86a2b102314d67e77f3f43834dac2a7ea3d5bab86358449cff84e02934fe0c5d00c89c65be631793be7915bc016cd7979427a5c1b355fe56ff489aa65adb"}) getsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000540)=""/106) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000005c0)={0x1, 0x4f, "0aed7111cb8666f17288219a1d9046f5557e7c23cbacfa6a5e467cc540ff928488f6e505ffa1f679017b5ceed24b86d0c342ffb148790e052799e207a127a8cd359be9b3a4c26f9251608f7beae627"}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000640)={0x3, 0x3}) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000680)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg$sock(r0, &(0x7f00000009c0)=[{{&(0x7f00000006c0)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="487a1c49b1b688b9fc6d705920de3b8c5db7d57252c316a3a24a9e1106ff6cf8eaa1072bbc4a5d7df1dd58d63cd62b0a63abdff7ac39b85ce71d0195693463551dba46976b91dea7716fd2ede1433c38141c", 0x52}, {&(0x7f00000007c0)="c54b10f10569eb2c323dc74b6b2b9b9e931296c19ad1abd9bb191dd6c4e0307691173a6870b077f27e9529768071bfcd5875023e0e0cd3d108d735c52cf28d88bedd4183334298f1b8518441d69c49bb1eb80ba262d77464b82a3782078c612d115fd927eb2ce315721de60e1567", 0x6e}, {&(0x7f0000000840)="4250a085c9f51c38e82e72fec2c018d91e3f3117723a11cbddd7cc89f29e5e399285e373fc38cf0bce6a5b4af548cb9cd568af8e9d122b", 0x37}, {&(0x7f0000000880)="5b7224d133f33884b35bcd5d93ae6da0477ed33c5346787927d64e0a042db2a351e34c547a56f2c56ec8021077a2499c50ba1d0beb3e380e9b3445f8c2cb", 0x3e}], 0x4, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0xfffff800}}, @txtime={{0x18, 0x1, 0x3d, 0x31f87cdf}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xb}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x90}}], 0x1, 0xc4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000a00)=0x9, 0x4) read$usbfs(r1, &(0x7f0000000a40)=""/136, 0x88) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000b00)='-\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb0, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "14f2b2d0872b592d967c198edfd41af8"}, @NL80211_ATTR_PMKID={0x14, 0x55, "fc9acd9f698e2137571e3cefe50efc1c"}, @NL80211_ATTR_SSID={0x9, 0x34, @random="4a42d89861"}, @NL80211_ATTR_PMKID={0x14, 0x55, "70d1ceecd0b61f1b2dc4e4c37f69ce4c"}, @NL80211_ATTR_PMKID={0x14, 0x55, "bd856a4c681a28ec8da993e2f615f5ea"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x13}, @NL80211_ATTR_SSID={0x24, 0x34, @random="a27b2d0c80da6cb326d4d9b1bd0e7f5a696b83fb9bcd87213c00be261526a312"}]}, 0xb0}}, 0x4040) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000d00)=0x4, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000d40)) syz_genetlink_get_family_id$team(&(0x7f0000000d80), r4) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000dc0)=0x9b, 0x4) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$pppl2tp(r7, &(0x7f0000000e00)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @local}, 0x4, 0x4, 0x3}}, 0x2e) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000e40)={@empty, @multicast1, 0x1, "356b22ae96da587a15368ac4c5bf8deb5cdfc52e463ec472899835f8ca610dff", 0x2, 0x6, 0x7, 0x5}, 0x3c) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000e80)={'filter\x00', 0xa9, "68bb6635c38abc7312e8ee0d6bf6df6636e727e1bfa57e1fcf4447a8d9f8dda79109eafcf3f596b8ede2d02e86691669c63369b2bfcb08d8b5ecdf3c66314cbe0ee945af7d50934f9d63d32862b5b61b6992ebda686e9566aae2964305bc5016ccb8633a8dc5fe976523fb43d3464625475e57e7774185a353e1745cbed9a20380b934fa262d37a8cc3441bf165f0be8e2fb69b4e376086d999749e7855629961c9cb33235ca35e2dd"}, &(0x7f0000000f80)=0xcd) connect$pptp(r8, &(0x7f0000000fc0)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) mkdirat(r7, &(0x7f0000001000)='./file0\x00', 0x18) 1.601804774s ago: executing program 0 (id=456): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r1}}, 0x48) 1.589169076s ago: executing program 2 (id=457): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x44, 0x28, 0x0, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x3, 0xe}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb8, 0x2f}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x14000) 1.567542109s ago: executing program 4 (id=458): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) unshare(0x2040400) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048"], 0x122}}, 0x4008090) 1.432055386s ago: executing program 0 (id=459): r0 = socket$kcm(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xb516baf7c90ea24d) r2 = socket(0x18, 0x1, 0x0) getsockname(r2, 0x0, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x2, 0xfffffffd, 0x1, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {0x0, 0x73}}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='veth0_to_batadv\x00') 1.342005027s ago: executing program 4 (id=460): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x24) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105500, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nodelalloc}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c00078008001240050000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.248915599s ago: executing program 0 (id=461): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x8d) close(r0) socket(0x40000000015, 0x5, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r5, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setrlimit(0x7, &(0x7f00000000c0)={0x0, 0x3}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fadbdf2501000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5428a090000000000003d68c95f014c37bcac5d92db688f5295f9b5b05e1e5520040d9c59db48"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x6, 0x4, 0x0, 0x7, 0x8, 0x652, 0x7, 0x8000009657, 0x1, 0x6, 0x0, 0x10, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x80003, 0xf64d}) syz_emit_ethernet(0x82, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x74, 0x65, 0x0, 0xff, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x6, 0x101f, {0x16, 0x4, 0x3, 0x14, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @loopback, @multicast2, {[@timestamp={0x44, 0x10, 0x37, 0x0, 0x3, [0x4, 0x7ff, 0x7]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@loopback}, {@remote, 0x329}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) perf_event_open$cgroup(&(0x7f0000001980)={0x1, 0x80, 0x3, 0x1, 0x9, 0x7, 0x0, 0x8, 0x81808, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xd}, 0x18610, 0x9, 0x9, 0x7, 0xf, 0x5bfd, 0x8, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r8, 0x0, 0x3, 0x1}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) 1.120026516s ago: executing program 2 (id=462): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0), 0x55) epoll_create1(0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x800, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x13, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) close_range(r1, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x144) io_submit(r5, 0x1, &(0x7f0000000040)=[0x0]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000000), &(0x7f00000001c0)=r1}, 0x20) lseek(0xffffffffffffffff, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) sync() socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000540)=0x6, 0x4) setrlimit(0xc, &(0x7f0000000000)={0x200, 0x100}) 1.091140749s ago: executing program 4 (id=463): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/91, 0x5b, 0x1, &(0x7f00000000c0)=""/26, 0x1a}, &(0x7f0000000140)=0x40) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getgroups(0x2, &(0x7f0000000240)=[0xee00, 0xee01]) fchown(r0, r1, r2) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}}, 0x84) setfsgid(r2) io_setup(0x0, &(0x7f0000000340)=0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r0}, 0x8) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xd59, r0, &(0x7f0000000380)="80af05f9d3cd25e672877149bf0c7b8e45ac1652e916c5e388b9213dfa5056c32c092996be1294947779b7aaf3f69225c52d8393d56b4d292c748c08eeb8416d5e7913b231e8ba70352b47bd1512098f37e9421d44f467dce3b3facb9205098861d08fe80d0af26f282bb4bcfe9fc28e49241afe37acaf51a1006af3c457bde2e9525d357c694e4bb695a77a38b7385d4997c3abfcbd335904409ed2f8b30c68622e0abd4a0a2227767943b641ee582c11d93d3aa685c46c6587a9bcd36a143260d7c7653cf2", 0xc6, 0x4, 0x0, 0x3, r4}]) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$sg(&(0x7f0000000540), 0x80000001, 0x10000) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(r4, &(0x7f0000000580)=0x4ae, r7, &(0x7f00000005c0)=0x3ff, 0x2b, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000600)=0x7) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x110, r4, 0x0) syncfs(r4) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000640)={0xfffff2e2}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000dc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f00000007c0)={0x59c, r9, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x24}}}}, [@NL80211_ATTR_NAN_FUNC={0x180, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x15c, 0xd, 0x0, 0x1, [{0xfb, 0x0, "3f50c99266df14fcb747a943a371bf3b33d68ae14c8a547b635819e8eba57a7ea5101d8f7dd5f7c6e881cbebe5d4ee90d17887c827e5000d00d73ff9eb3eae17596faeff0983619acab776001b5d75da1470b733a9cf3e955ba7a6f6d548f81d8c00b3a6bcc50c148c6789d9b803c07fad8ae830840708b7133300f23054cb3576c22a03be25f590396ead170aa3910f0fe52a1bbb9e3f32748d1b90fa77061502bead20419bbf9acc339c54c0e4084f9a4a202f5795967e2bb71887d284ff88b1f86ae2e78ce1bcbeb0769141def1c7a4a0f08d6f099886a02209d24c3a624ad4b2e3b6be8697eebf36f6761f8e1c0ca67dcece011d0c"}, {0x5a, 0x0, "5c8d31220749feef41704edd3f060dd3586b49527c04bd2f1a0f9be867cc7a0a1b6bd6fb2eed25ea2c6eab58fd5bc7ef95317d702d7fe5909a61fd2d8d15d2ccd73d2e7de72c82aa45a7918ed8cf81d8bb4b5f6e45cd"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "4c5dc2c8e78d"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x50, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xe6}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "f6bddd4ccfc8"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x81}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "05159039c5ec"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x120, 0xd, 0x0, 0x1, [{0x40, 0x0, "d82d84cfbe440f8c968f7b8289c892e702c4b3c5e433d2a46d2630546687c0c936b74340c1fbdc0e97612934ff51f3206999ee43baa1b307e26dd834"}, {0xd9, 0x0, "14ff8f3bc58623d1c6e8623af167735cd4dc58000e51c65737e8d63a932e160507e275a9f02ae39260a51ac6e5f84064cab23bf7b181435540b03a565560f4af42e0f83f6f9a4eaee767429fbf0e609cf79517be096a10e8d50b99f69f726e1566ce6a47b996a1307eda40f3ee6c918be504a23c1f2e3848550fa8f6f6f873e4c5d1f0bc7d36b7c98a7ddf8f3b8d089e6f812c429033ba24b6268f1d14bc483a0904821a55b9e089a68762c4e096ddafc7f1aba8121f3af88c83d629583d719a0d03cc6ca6bde50e96887e5eef4741fafd2314082d"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a2a003e53971"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "f59831cf7c6a"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "2f6d6e72b93b"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SRF={0x248, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}]}, 0x59c}, 0x1, 0x0, 0x0, 0x1}, 0x4c001) sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000e00)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000e40)="024e2d9bff328834638f3d07e42ef6b99ea1f1d68389362bac93027b353f4e487557bcdd4cd082c72894172e297138bb2e9c4ebfd1cd4d111918e3535346b47610b9fad89f1cad2e0e66fc5a281a81676e215daaa236", 0x56}, {&(0x7f0000000ec0)="f647cc71e2018439763713260954637f1ed9ba0290f9dc1827a5c9629e83dc7aee540bb7e6b26223dc114ea34545fb48dff7a6dc65555219465a8ba833003d607845f6a528c67750ca1deecfeffa3460d5ff160ef9c7f2d2f059fd183e5e5c518efd6ab097baf5e36f7489e992214a8583b2ca3d2712636d34", 0x79}, {&(0x7f0000000f40)="8636e6f3a3733524edf46a7434c794531ab102384c582144d57605bd0ef15c31937db02f2db81c0b70d5906bd24fc87e283da6534703418abe77e822621a3f8a7e34b58adf93f26c018f267f2f066fdb04cfaf43558305215fa384f941da7a489b04124494403e4502858fbfc1281e10ad79613b00b2d94d1eaa316fcbd18d5eb3038aaad196630e60", 0x89}], 0x3, &(0x7f0000001040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}], 0x48}, 0x20004) ioctl$BLKFRASET(r4, 0x1264, &(0x7f0000001100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000001140)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x6, 0x7, 0xd690, 0xfffffffd, 0x4}, &(0x7f0000001200)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001240)={r10, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x8, 0x3, 0x263, 0x7, 0x0, 0x90, 0x8}, 0x9c) openat$cgroup_ro(r8, &(0x7f0000001300)='memory.stat\x00', 0x0, 0x0) 1.055044024s ago: executing program 3 (id=464): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, 0x0) pread64(r0, &(0x7f00000000c0)=""/70, 0x46, 0x2b) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x1044, 0x0, 0x10000, 0x1, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000011480000004084000c4e392eba0db374d3b82fac706aa304a132f62e22c7b24", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000fcffffff00"/28], 0x50) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) dup2(r2, r2) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) 988.035333ms ago: executing program 0 (id=465): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0xa, 0x3, 0x87) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0x1000, "9887ac1dcd7566ea58258231dc36fd189e5bba358276818860db97ba8f695548b7e693f5b2a47b3516bb6ad2d226cee0cf018dca93836316342394723cc701162254c6b766156daf0d68db2ae6bd0b0e0816eab2acf984eb3c6825d6a9a08d6b8788ef185548f9ba08afc6f4b51e978bee251c10bfdbf37a5cf74afb42488a9a065215aaa88721e0df84193d03770b1469191d901b4019bbd451b0d8a37d25b1dfcc1aaaf0c6239d68d9dd8e6a44451ce7f386b4710a6f940f6d882c57d4c743412400ec428cd450db09f88a1833da81ae30349cc8eabf3332d7f4bf5cab53f8dee7e18cb19b3a81bed5e245fa384fbcd6af1982114163a7633fe9ec61803fb3d10cde1d839c2f011a351209d95e57dbc9d80171a449d8ab67d62174c43a7e9640abadac0fa4082f228cf186f1d942d671549c9212a3580afbf99355d60f8e2cd333f3446b5de1572221b8b6495b0a952ca6978397e8db728353c4816bc492bcc0f2a90b17505acc6da655d3c217c6263bc2dddb4bc99719a662af36aa0fe99f7fdf124ced376ee219582e0b6bd102446d4d7099ab425d7668c06bea6ff4499416901b4e48ac5cc1aab0a082eb7addbb83f2ac20bd4eb06d165c485048fb070537ca43dccd183a5252c0a5982526fd3643373f96f873f0684c3025c48b87301defa5e864ccffc1e8aca27256ca309c53557523ed8d7417dd34204a8ac18de6107dc0d36e08629ca78ef8f87323f8a4d0fd8a7b8c3e37609dbf387021c4153885495b229ebbec98dc3fe7a3048a890d2f6af595ad049e5192b76b74138dd7b55847be0b55e48d0c1545b125caf7b4acf4b76f0b2663763c150c1fc1c795d40aa31cd9c364f9fdd233970685a0b868dd30177a282c8299d8bba80561e43d175f7d0dceb79080c6ffadd41134825c79efb8a00ca9a6d0514ea306aecb6ad26de824983404d7ae18f16bdf43eb52a87a0251aa0042c747cc989829cf874a2279e66543720a0269b608b81ddd50fd6fdf86f52b53da03b7c19397499dbce7e0afc1048859e2e71e1a54d0ed666e283b979b9a360c3603a4e5ba96395d7b16d3efe27c20701f14b3b11280b612afb5cf07aace040374457878f7ab1416255048eb3ce5f4fe76be1813873ca7b7c388549f97e7b57ef7ea887b20cab433a600afde82ec164c8146493f1f10679ab16e4cdd938c0761411c97473570552e9e864b36677e01968d8ec39378564b1e299a25ecb0d37b1e4a68aed1a83a09b87b49db36ff1edbc52737d18ac8fb479a8b52be80eed1d2a961ca33d8d1fba668660b91eba6c2ec94511504b1a871c4be6515c6dc0215cb2fb79bbf8a8a75bfa3c556173a37c343540c5a18a299053e7fa34961e99f2127214e56cc00d0af1bcd13fb0d587f05d53ea0c83b25a4acef77a828b9e3f42f52f8f28d2a7c90bc905950dd1d842bb22a515b7fb000a76546dadf6690b1ab656fcc90dc63641e29dcff62f7b0d60de29848e0425eb3ca496cb9ae4a774621801c34946f31087bd46ccc7b4e1084bc868d9ee2c4e94a63cc6d268971304c32d8613a3a0fba601c5431b22473fc32ee114cdbcf497e33efc3684ea2c17fef0764087c22cbc52430378fbb40eeb05e72f92f9dbd055446ade821adbc06d3e9666a1471732bd6221c8066bbad182a74d83590deff455740ee16adcc325ec03ee05d32f7bab48b40c7b5908686faead1801eee8f94b19992bd227c44447dbff56b4f3e6b818ef3f15d420a9f64e061c167acf0dfb1ce1dccaea4c0504f7074fc101f127fe5711a8ac9aa5bbbe27a95a2088d6357d0a1a61ce770ff7babf95820d6d6b26c19a24c4899d135ce2501df7616eed87acffa936c1c3b062cfdd1d737cc3935734b9804f14a14e629a18ffa384aa9d9ff1cb28986d8683adbf4b7e5ab1ef393c4a187aaa4e09d29e83c5d6013c95248814eedc0cde0d366e067f37aa601f214c12048c175de03d98e9eeaadbcd4fc627f3a3adf4d60d7ee5244948d47462878278845807511611bc8ad6ce556d57db696b7bc6bf633841a172af9f6be00df96d1fa968d8db043454b527e9427bce1f4bf857e48039712d3b921abe79aa5fb3d38f7438242ccc7daf78e20b4be13471465a35219bceca5dc96f222604f93395651a9e5a7eec8540d275be15c1abefcb46394e922c2fb8d69c0d0a95797b7d3bd1bf2902b3191a714c4d1c3348fe3192bbec63144e54dd850d81787eb7e983d1026d09cfa631b37081a280a2a573ca178d63b87bea89d398c8e515a72ee679da2cb8d462e1a4268c28bb8113b115d4945ee435187520a2778094fcc0e0b78381fd95db252def6bcd3c9d818ca8888993bf5037efb8cbf4bbd88d81531ce3cf130f6ee6c435a21cda36aa154194acdd3c65aeb7290e4417f88a539deb8172e37b8f0a5721d884a64363f8b272ce4cf4cba661b79ca7c501991e70dd26d9c8cc45e168b4ba2783a27ce14a7d10a5994d499fa3e4c8a302aee7597fe62091a2828b888907a75353c526189af1d9638842317569601259504752040851b1f3c78f0f46e181f2aea788c13f0babb7ad7b6a56252cc8c23e9530deb584190b89fdf2185ac4cba22a2275878b4b97848522b881cc2f4ed69a808dc87588a9c063a774f205d4756118753f9f56e09e7fd7a7ccbf4736d3362168a41e46d84113111e810b55e918f9a21233ff59d0b2f4324fa51b2eed3f11e6e1afde9d09bb04f97c1be0d878d077045a0a5745e17d34e7b7815f04ca978f21cc35ba898228700383e619768e1961771826b68c4029af1816976b806de653ffd5bb1459e3306ce2dd6e40ddaafddefa97f2aa730d2ba8e4298ee4399516a980350297912a8351850810cfb2240bfc19b9245b62303e3b8df98debe6f45fb70a8ba576a8b83a5db96171bf512ed248ed6d849c073be1a43dc1e6db079ed6022c2fc4c46349ca2561fd3f4de59954ecef0b12e057a78f64fcce7f38629fe65770e4703ef6bd71ac7db8b81d9c6a89bdc31fd1504e33ae6b7c5372bb2b5476a190d14bdb9c618607eb44d39e6e7039864f3bd9e06b531b9a1152b13cf7c90d675e8f973180d24f6addb620a77828bce553aa6231711dac5078c383995490e4bb00d7f2c34c6b98ac2b5181ae07d93d793348586e761aa5d995e81834fdbb969e82199fa75b79110a66aba885016b9304335b92e7a1eb6fd8e56c712d91159aa6aaef43db280460388ca34c9e5320695c5b9d1f4941b67c280e6244867e794d0a4031b1aebef01bcfae61650cf63e16283ba0df096f5b2af89aae3d282118bb7a0dfef6a31cd452cb6cfa07c843bc58fd85de9cb60ee06a6fbeaf46cee1da61f7ff9de26c503dc821077f49f7c16a3739bb461a88d9f886d534cffa3d770c7cd31e0a61e558aff592330b62b9acad47154919a28ad74819238355ab08bb3732681b801a8f74846e9598036b1c01c37b3789c417228d2856d48d9637fcd6c70f4765d172e7ba2aee1007edb5997dd9f20d20407749b3dadb6053e810d8e4db1f5ed1e7669f36b73dc6f816e37e2e16b548b0b608e9880e6d435a0bb6c772307d79f5e32a3ff15ce06945015d4996719c9f00a54699bca53947f00df24158eaaf8b18915798db6a367fabf47bbb0497dab41266f83deed8af33e645dcf57adc8215fdf6b538ec9fc80dd608ff1ad31ee7b602009969b0487d46e4fbee416d5a65d92298663dd09241ef77df7ef8e2fdc67bb113f9449c8e79461a956b20fc112131c560bcc34104564046b68f5b6c59456a4092a679113a44335419d66a5872af73451dde05d4916d7b20b29380a2002421633e60723703e96b64074bcdbbf81aec1c0a030ddffec4d49d45a3d4575084c2574721b11b58966a737a98e0fde48b82ee7c2c03ab39e2c6b537867f491e616e9aabd7d1f242514f19b953db373b7e03c847f799cbd7794af97ab33ee02f25c1145814ab4dadbd593cd89ab1da8b3c9d77037882f5555164a981bc0a2a8653e2d360ffcdb37143cc57c4397976ab266ccdb21e43a70fe305ef8ecade510de0c56190ee67145c78ad7a472680206dc5829555dbc16e108109ea218a3161c6b6c17641d1b7f44cba5051bc65fd623ff806ad62b2a844b85e17b77f92616f12396ce2a46a2c2e7c0ce0fe73dea06417c353593745c35d7405b12d6be21a26a1603551d1c3dce63f012c2a6771855b040813bf559ab0bfff24f0daae0f0d37f331d6223692ed0666c3f9a497832ae0d43392dcc92c8a5110fac965d634358e3509c49c8106f35bc46d661c503031b67b868ceeb53b4c5660e7e94284d5659eb26307d7df6a74b222ac06d1316789f5ff768ba2973fdec62bbdb536f272188bcc886cedee5d3c5dd0b5a54cba5a90e539e535ca49f03684e1483be34b3257902be3d712d69b965214433d0196464d1ede87d6a89bc0dfc3f4c5bdaed780cd01bd0cc637ebef987697687117ec72e32c1151cf52cdeaad122abc6644cd776a854ce41a7d9590a170e3fc345d84651d3de1282753a7dd56bbe679d2f9ed9ea1bf5bddd553f290f60bcabafabd0bad4f748c8a92cdb81fa46f382e790ba9606473218fb927a89a374f29453f8645df0b1e5934f736eef9d3f15ca71ab023e2ef84264e743573323dc4a5445ee34c309cb82db84ee26a86eb94c94f9e28bfe0d241daacf9bb4f2772503fcc4bf08e42915db99e8f11eadd4a6376f7494c8505ceda7ab1ddc2d4485b375c86313fdfd36ffd074f66d909f2087640976adcc33993bf46987fe1921bf288d63061f5471679930e2fac2f1a60677dcb6f4ca7c4d5367c34afac3ecd471e7d715e029649896b483e5a73d9b06ee4edc7fc1202c3e69d798ff42520528b9e2e55f7142a7e46ee05bba9b1cc8be947a153e9dbc32862c61b2eb699c8421ef1b32483f42a207dcf1f74ee732b3fb40f168cd4a51c374d1f062b5df0e49f7003e1198870256196d2947b383d2bea40eeff9d40fcbf28a73e1d47c617aba10b184ffe3da59e8ec45707478997ab7b468fb1ca5671cac556674e28530a20a6377d1aa5e569f59a454be649fe6c4f460fe761753096f9ff9b8a848f9fc0b5a4c7d3a137709bd0dfbfe6931e1d8e96ef5ea96c3225fc07641561a4f6dbebf7e00d5dcce3a6b3bb0d04f01f35d377352cee725360bf72e6daacb52c0616077b998f128a29c2407e1f5ecb35e2c042336eac0d4a3b2694f508521527d09b486226ecccb5a36d48cc5d64dbd75eb5be7f2089008f6691da5f6cd5d709f992cc9868223b6bf490fb7219658194a2f56f358911d2e678e232dbbaed7f7c1c4b265f1ac82a967f0dec819f2a693057eaa0becf4c822ead8fcd4dacdc2c1f8895a5d2bc9bc1d2ebd1ae812445e52f357f29cf7907c6fec9d137832d3073b2d51cdd9a4c71525a6cb5138d7814daf3c8cb10c2304aa6b5491ef103660ec86d66031604e98d5f00a6b4c6ecd8faa9e3b986d6afbf88b920584220bfc3bf341ce1824301c92d234eb08109384800cd8f6d45be468ecb92170c71cf63abef46cacc3f8ec65c9f3eb21fbca001296c0a7eca8527e258d3f29981631ec573ee3945e7b093167bc9d369d06c5664d8785f1c77477442642f630d4d0e3a1c05f114126fde97509b1301e6bfc8972175d668e53995c1e708cf9006cb3148b0475fe1c6344f242c7ca79f44347b888c551635bdd69024d6bdffb5f2928100b0683c93e9348d1b034a6d6ad815b1aa3b848ad1d7c94a6231bc043d25ccc794c6e3ea5103d5df476bde6abafb82ce0b5800ec4"}, &(0x7f0000000000)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={r2, 0x70, &(0x7f0000000280)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x84, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRES8=r3]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000380)={{0x2, 0x4e22, @loopback}, {0x306, @remote}, 0x20, {0x2, 0x4e24, @broadcast}, 'rose0\x00'}) 736.793565ms ago: executing program 5 (id=466): r0 = socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x10002, 0x4) (async) r1 = io_uring_setup(0x6005, &(0x7f0000000080)={0x0, 0xb720, 0x800, 0x0, 0x100135}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xc32e, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0x8c, 0x716, 0x8000000000000000, 0x0, 0x80000000000000, 0x800}, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000", @ANYRES32=0x0, @ANYBLOB="000800000000000003000000000000000000000000000000fd"], 0xfc}}, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/281], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) (async) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003380), 0x8202, 0x0) write$vga_arbiter(r2, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001580)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (rerun: 32) 607.543531ms ago: executing program 0 (id=467): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x400000, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async, rerun: 64) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4b800, 0x0) (rerun: 64) pidfd_send_signal(r6, 0x0, 0x0, 0x2) getpeername$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) (async) r7 = syz_open_dev$loop(&(0x7f0000001800), 0x7, 0x80) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x200) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) 503.959915ms ago: executing program 5 (id=468): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80040) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000000c0)=0xf) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"30c72e6dc8aa31a3384592dfcabdc782", r1, 0x0, {0x7, 0xfffffff7}, {0x4a0d, 0x2}, 0xfffffffffffffff9, [0x7, 0x0, 0x0, 0x7ff, 0x319a, 0x3, 0x80000000, 0xfffffffffffffff8, 0xbabf, 0x63, 0x3, 0x1, 0x3, 0x7, 0x4, 0xffffffff]}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x100) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000280)=0x7fffffff, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f00000002c0)=[0x4, 0x4], 0x2) write$snapshot(r2, &(0x7f0000000300)="325ca24ead4d402a325f7807336d1710f4a877948c2edde404ab16728355c88578f0f58b2fbc37d9b17c5b8028d6aede1392e66bdd9044a41f58c61e90df55edf05a0e6cb8f5fa68e20aa7c239c1b8286f5c204f057f1adf68ecea71eb25937e4beac77779992238add720b184d907f11c933c2ce104f93ef9a2ba050911e287e35bcbcb31d02502b163b4592ef8179e8fa741bb029cdcaa87ff9a2fecc11a5ee858db39081c94d436d16c4e350981b2aa63e1c3e6bb84089419776890ac9bb47f78a5e9949997cbfc2904", 0xcb) ioctl$RTC_PIE_ON(r2, 0x7005) r4 = dup(0xffffffffffffffff) io_uring_enter(r4, 0x3d84, 0xe976, 0x8, &(0x7f0000000400)={[0x8]}, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000440)={'pim6reg1\x00', {0x2, 0x4e23, @local}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44840}, 0x20000000) link(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000640)={0x1, 0xc, 0x1, 0x3, 0x6, 0x4, 0x7}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008800) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000007c0)={0x6}, 0x8) r7 = syz_clone(0x3000000, &(0x7f0000000880)="9591012b7ea7bbe371e79aa2a2650020a75ea003601a62e1905dc6c2a7c0b0c11a376a20368605e9f60d8142436452c0f4906c29a11fed60b4794ee344c5e9db4dcb176ac287c82c6396e75ab1ab9e61f552ae5983ccee19afdfa6256ab1451fb6a0a2caef296f2ffd8b6f3f7e549c6093c8b05eeea568a1aeb465e87b9e7a260b628ea3778a98b6ba", 0x89, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="894e02c9e450ad3c2068614f4840d7ad70f3e7a76b4c1353b86ca3bb0f7abe947fcb81bb6e60d1bec36b862ba0466d26a72721c4e4d8e58e2b767f48353ba6e889d5dde077ca164e3e571bf943506b4869967eb9c8773d82e686feceadf6ca5e81722f6fb8994d5623ab8e497cf2e07d3f5df9f5fe18ca5b97bcc7002a0c01ca3ce983c776e95fdd09189bca7afe3eb5c1b59655d2d92d155cb04bb8138a89f5a94381440943030de0b763f05513c0a8c852f9e48d9471fa66ac5fe3f9eb2f7d2458b8fb6712dfbd2fe343bf44956bb54d544a29e793f9166c36eec32b05") perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0x9, 0xc, 0xff, 0x3a, 0x0, 0x389f, 0x30a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe, 0x2, @perf_config_ext={0x4cc, 0x2}, 0x40, 0x23b, 0x6, 0x1, 0xffffffffffff0000, 0x1, 0x9, 0x0, 0x1, 0x0, 0x2}, r7, 0xc, r2, 0x3) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x154, 0x1, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_EXP={0x5c, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x58, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, @NFQA_PAYLOAD={0xad, 0xa, "52ac34cb1b9e968082f5a982859b253a51ebc5a2228193eef2c426ccdfdf7219cc65a78e5a6cb56be13ae30a54fab9699b5abacd8b593b946175a419aa4b140dc2bcb6dac92ce4f7e556904de747bfaf864d64cafc7ba4bc7ac1ca728dd72a9ff852b94191f8140a3bd79e26312b300e57b2556ad04634fd778799d05488cbe8c3ba3d5fa55612eb0f236a9cf7055df5b18031a2b14acb920a6105d40eb3e927a0691c0d3b07a844f8"}, @NFQA_CT={0x28, 0xb, 0x0, 0x1, [@CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, {0x8, 0x2, @loopback}}}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x400c) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, 0x1409, 0x4, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44014}, 0x8000) accept(r4, &(0x7f0000000e80)=@x25={0x9, @remote}, &(0x7f0000000f00)=0x80) r8 = syz_pidfd_open(r7, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f0000000f40)={0x0, 0x3ff, 0xc9}) 485.041367ms ago: executing program 3 (id=469): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r1}}, 0x48) 471.953319ms ago: executing program 2 (id=470): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="060000009374e65de70bdb0ae8f4f4e1f334720657f724494bb99c586fc8402962a14fc815287d4acdd90391b226e24779b0d18abb", @ANYRES16=r4, @ANYBLOB="010003000000030000002a000000080058000000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4048880) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0xd08, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000008c0)='p', 0x1}], 0x1}}], 0x1, 0x44000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x0, 0x78d, 0x1, r2}, 0x10) r5 = syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000080)='./file0/file0\x00', 0x1008802, &(0x7f0000000e40)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@errors_continue}, {@data_ordered}, {@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fff}}, {@nodioread_nolock}, {@errors_remount}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xd}}]}, 0x9, 0x606, &(0x7f0000000600)="$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") r6 = socket$inet6(0xa, 0x80000, 0x2) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000300)=0x5, 0x4) sendmsg$inet6(r6, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80003, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe6}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r6, @ANYRES16=r1, @ANYRES8=r4], 0x30}, 0x40c0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000300)=ANY=[], 0xfe37, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) connect$bt_sco(r7, &(0x7f00000002c0), 0x8) openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x14d842, 0x5) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r11, @ANYRES32=r5], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r12, r9, 0x25, 0x4, @val=@netkit={@void, @value=r12}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000d80)={'sit0\x00', r9, 0x7, 0x1, 0x4, 0x1ff, {{0x13, 0x4, 0x1, 0x4, 0x4c, 0x867, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@rr={0x7, 0x7, 0x9a, [@broadcast]}, @timestamp_prespec={0x44, 0x24, 0xc8, 0x3, 0x7, [{@private=0xa010100, 0x4}, {@multicast2, 0xd}, {@private=0xa010102, 0x5}, {@rand_addr=0x64010101, 0xd8}]}, @cipso={0x86, 0xd, 0x3, [{0x6, 0x7, '\x00\x00\x00\x00\x00'}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x8, 0x40, 0x3, 0x2, {{0x22, 0x4, 0x3, 0x35, 0x88, 0x68, 0x0, 0x7f, 0x4, 0x0, @multicast1, @empty, {[@generic={0x94, 0xf, "5a22c61798123098f4c2b86457"}, @lsrr={0x83, 0x27, 0xe5, [@remote, @private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @rand_addr=0x64010102, @broadcast, @empty]}, @timestamp_addr={0x44, 0x34, 0xa7, 0x1, 0x5, [{@rand_addr=0x64010100, 0x5}, {@remote, 0x800}, {@broadcast, 0x5}, {@loopback, 0x3}, {@local, 0x6}, {@empty, 0x8}]}, @lsrr={0x83, 0x7, 0x6e, [@loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0xf8, 0x85, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x700, 0x4, 0x3}}) 386.66905ms ago: executing program 5 (id=471): msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000001440)=""/142) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0xe013, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) 228.039271ms ago: executing program 5 (id=472): socket$l2tp(0x2, 0x2, 0x73) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$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") listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) 195.025934ms ago: executing program 3 (id=473): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x24) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105500, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nodelalloc}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c00078008001240050000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 112.558565ms ago: executing program 4 (id=474): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000008"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x440c, &(0x7f0000000080), 0x6, 0x454, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file2\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r0, 0x0, 0x1800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="0500000000000000bc100800000000001fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2d}, 0x53) 0s ago: executing program 0 (id=475): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x0, 0x2d9}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x13584}}) io_uring_enter(r0, 0x663e, 0x0, 0x2, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x3, &(0x7f0000000000)='source', &(0x7f0000000080)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91e[\xea\x11\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 34.663172][ T29] audit: type=1400 audit(1768679636.431:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.686244][ T29] audit: type=1400 audit(1768679636.461:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.688312][ T3305] cgroup: Unknown subsys name 'net' [ 34.714211][ T29] audit: type=1400 audit(1768679636.481:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.855775][ T3305] cgroup: Unknown subsys name 'cpuset' [ 34.862029][ T3305] cgroup: Unknown subsys name 'rlimit' [ 34.974185][ T29] audit: type=1400 audit(1768679636.741:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.012094][ T29] audit: type=1400 audit(1768679636.741:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.032594][ T29] audit: type=1400 audit(1768679636.741:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.053091][ T29] audit: type=1400 audit(1768679636.741:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.073398][ T29] audit: type=1400 audit(1768679636.741:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.073938][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.098454][ T29] audit: type=1400 audit(1768679636.741:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.130055][ T29] audit: type=1400 audit(1768679636.771:71): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 35.170421][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.340508][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.377406][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.411831][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.449615][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 36.480438][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.487653][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.494769][ T3319] bridge_slave_0: entered allmulticast mode [ 36.501381][ T3319] bridge_slave_0: entered promiscuous mode [ 36.522525][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 36.531473][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.538648][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.545805][ T3319] bridge_slave_1: entered allmulticast mode [ 36.552167][ T3319] bridge_slave_1: entered promiscuous mode [ 36.597351][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.604426][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.611779][ T3317] bridge_slave_0: entered allmulticast mode [ 36.618295][ T3317] bridge_slave_0: entered promiscuous mode [ 36.626222][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.651828][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.659000][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.666230][ T3321] bridge_slave_0: entered allmulticast mode [ 36.672624][ T3321] bridge_slave_0: entered promiscuous mode [ 36.679282][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.686422][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.693640][ T3317] bridge_slave_1: entered allmulticast mode [ 36.700321][ T3317] bridge_slave_1: entered promiscuous mode [ 36.707428][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.722051][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.729138][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.736319][ T3321] bridge_slave_1: entered allmulticast mode [ 36.742841][ T3321] bridge_slave_1: entered promiscuous mode [ 36.790765][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.797945][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.805325][ T3328] bridge_slave_0: entered allmulticast mode [ 36.811943][ T3328] bridge_slave_0: entered promiscuous mode [ 36.819524][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.830189][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.840094][ T3319] team0: Port device team_slave_0 added [ 36.850489][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.857623][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.864896][ T3328] bridge_slave_1: entered allmulticast mode [ 36.871533][ T3328] bridge_slave_1: entered promiscuous mode [ 36.879089][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.889347][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.899475][ T3319] team0: Port device team_slave_1 added [ 36.927904][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.935037][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.942324][ T3323] bridge_slave_0: entered allmulticast mode [ 36.948912][ T3323] bridge_slave_0: entered promiscuous mode [ 36.973788][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.980940][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.988236][ T3323] bridge_slave_1: entered allmulticast mode [ 36.994854][ T3323] bridge_slave_1: entered promiscuous mode [ 37.002245][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.012281][ T3317] team0: Port device team_slave_0 added [ 37.018805][ T3321] team0: Port device team_slave_0 added [ 37.024705][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.031785][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.057732][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.074514][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.084694][ T3317] team0: Port device team_slave_1 added [ 37.091135][ T3321] team0: Port device team_slave_1 added [ 37.097121][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.104092][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.130092][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.168822][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.187774][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.194778][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.220805][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.232521][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.239521][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.265532][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.277659][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.287798][ T3328] team0: Port device team_slave_0 added [ 37.293756][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.300855][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.326817][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.338447][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.345456][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.371515][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.390323][ T3328] team0: Port device team_slave_1 added [ 37.426886][ T3323] team0: Port device team_slave_0 added [ 37.444083][ T3319] hsr_slave_0: entered promiscuous mode [ 37.450098][ T3319] hsr_slave_1: entered promiscuous mode [ 37.457002][ T3323] team0: Port device team_slave_1 added [ 37.462967][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.469968][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.495927][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.520182][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.527234][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.553296][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.566720][ T3317] hsr_slave_0: entered promiscuous mode [ 37.572825][ T3317] hsr_slave_1: entered promiscuous mode [ 37.578844][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 37.584580][ T3317] Cannot create hsr debugfs directory [ 37.597468][ T3321] hsr_slave_0: entered promiscuous mode [ 37.603447][ T3321] hsr_slave_1: entered promiscuous mode [ 37.609415][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.615177][ T3321] Cannot create hsr debugfs directory [ 37.641712][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.648748][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.674732][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.696341][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.703419][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.729471][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.755144][ T3328] hsr_slave_0: entered promiscuous mode [ 37.761194][ T3328] hsr_slave_1: entered promiscuous mode [ 37.767253][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 37.773007][ T3328] Cannot create hsr debugfs directory [ 37.836915][ T3323] hsr_slave_0: entered promiscuous mode [ 37.842934][ T3323] hsr_slave_1: entered promiscuous mode [ 37.848958][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 37.854785][ T3323] Cannot create hsr debugfs directory [ 38.013567][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.026203][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.035169][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.047029][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.064782][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.077067][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.086524][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.098586][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.128675][ T3328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.138432][ T3328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.156217][ T3328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.169218][ T3328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.197149][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.208371][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.223463][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.234817][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.264251][ T3323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.276197][ T3323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.287884][ T3323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.299409][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.307917][ T3323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.338907][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.360119][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.367215][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.379622][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.395906][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.402992][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.418530][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.438747][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.445851][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.466517][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.476127][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.483234][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.515245][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.538462][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.545581][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.560716][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.567860][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.584777][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.617121][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.629446][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.639907][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.652594][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.676426][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.683578][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.694036][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.727042][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.737842][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.745112][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.766825][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.773966][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.793022][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.800152][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.833100][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.843554][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.862258][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.890544][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.977916][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.054477][ T3319] veth0_vlan: entered promiscuous mode [ 39.093657][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.112168][ T3319] veth1_vlan: entered promiscuous mode [ 39.124942][ T3321] veth0_vlan: entered promiscuous mode [ 39.144847][ T3328] veth0_vlan: entered promiscuous mode [ 39.152300][ T3321] veth1_vlan: entered promiscuous mode [ 39.181918][ T3328] veth1_vlan: entered promiscuous mode [ 39.199311][ T3317] veth0_vlan: entered promiscuous mode [ 39.219130][ T3317] veth1_vlan: entered promiscuous mode [ 39.228731][ T3319] veth0_macvtap: entered promiscuous mode [ 39.240053][ T3321] veth0_macvtap: entered promiscuous mode [ 39.251862][ T3319] veth1_macvtap: entered promiscuous mode [ 39.262500][ T3321] veth1_macvtap: entered promiscuous mode [ 39.282453][ T3328] veth0_macvtap: entered promiscuous mode [ 39.299180][ T3328] veth1_macvtap: entered promiscuous mode [ 39.305961][ T3323] veth0_vlan: entered promiscuous mode [ 39.312820][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.327139][ T3317] veth0_macvtap: entered promiscuous mode [ 39.334679][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.345340][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.353841][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.365293][ T3317] veth1_macvtap: entered promiscuous mode [ 39.372614][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.381554][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.394110][ T3323] veth1_vlan: entered promiscuous mode [ 39.400905][ T353] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.414787][ T353] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.429690][ T353] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.441991][ T353] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.453882][ T353] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.463826][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.475748][ T353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.493794][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.502981][ T353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.528753][ T353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.545813][ T353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556214][ T3328] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.565892][ T353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.580737][ T3323] veth0_macvtap: entered promiscuous mode [ 39.604948][ T353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.640003][ T3323] veth1_macvtap: entered promiscuous mode [ 39.647810][ T3493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.657105][ T353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.666741][ T353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.676184][ T353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.697202][ T353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.716297][ T3492] loop3: detected capacity change from 0 to 1024 [ 39.721027][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 39.721116][ T29] audit: type=1400 audit(1768679641.491:99): avc: denied { prog_load } for pid=3495 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.745972][ T353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.747753][ T29] audit: type=1400 audit(1768679641.491:100): avc: denied { bpf } for pid=3495 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.760696][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.776428][ T29] audit: type=1400 audit(1768679641.491:101): avc: denied { perfmon } for pid=3495 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.776463][ T29] audit: type=1400 audit(1768679641.491:102): avc: denied { bind } for pid=3495 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.852512][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.865676][ T1708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.866201][ C1] hrtimer: interrupt took 31873 ns [ 39.882378][ T29] audit: type=1400 audit(1768679641.491:103): avc: denied { mounton } for pid=3491 comm="syz.3.4" path="/0/file1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.904502][ T29] audit: type=1400 audit(1768679641.591:104): avc: denied { setopt } for pid=3495 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.915942][ T3492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.924715][ T29] audit: type=1400 audit(1768679641.601:105): avc: denied { open } for pid=3495 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.955676][ T29] audit: type=1400 audit(1768679641.601:106): avc: denied { kernel } for pid=3495 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.974828][ T29] audit: type=1400 audit(1768679641.601:107): avc: denied { tracepoint } for pid=3495 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.994385][ T29] audit: type=1400 audit(1768679641.631:108): avc: denied { name_bind } for pid=3501 comm="syz.0.1" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.016649][ T1708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.017759][ T3492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.038187][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.048093][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.108705][ T3507] tipc: Started in network mode [ 40.113709][ T3507] tipc: Node identity ac14140f, cluster identity 4711 [ 40.121922][ T3507] tipc: New replicast peer: 255.255.255.83 [ 40.127908][ T3507] tipc: Enabled bearer , priority 10 [ 40.160735][ T3512] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6'. [ 40.182157][ T3514] loop3: detected capacity change from 0 to 1024 [ 40.222094][ T3514] ======================================================= [ 40.222094][ T3514] WARNING: The mand mount option has been deprecated and [ 40.222094][ T3514] and is ignored by this kernel. Remove the mand [ 40.222094][ T3514] option from the mount to silence this warning. [ 40.222094][ T3514] ======================================================= [ 40.305688][ T3516] syz.0.9 (3516) used greatest stack depth: 10328 bytes left [ 40.306609][ T3514] EXT4-fs: Ignoring removed bh option [ 40.338496][ T3514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.361732][ T3514] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.7: Allocating blocks 385-513 which overlap fs metadata [ 40.418766][ T3535] loop1: detected capacity change from 0 to 256 [ 40.445664][ T3514] EXT4-fs (loop3): pa ffff8881076b9070: logic 16, phys. 129, len 24 [ 40.453744][ T3514] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 40.510417][ T3538] loop4: detected capacity change from 0 to 2048 [ 40.523994][ T3514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 40.552365][ T3426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3426 comm=kworker/0:6 [ 40.566280][ T3005] loop4: p1 < > p4 [ 40.585746][ T3005] loop4: p4 size 8388608 extends beyond EOD, truncated [ 40.629279][ T3005] loop4: p1 < > p4 [ 40.638499][ T3005] loop4: p4 size 8388608 extends beyond EOD, truncated [ 40.657159][ T3538] loop4: p1 < > p4 [ 40.668134][ T3538] loop4: p4 size 8388608 extends beyond EOD, truncated [ 41.034928][ T3543] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.058394][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.116021][ T3545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.125067][ T3545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.175272][ T3545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 41.255273][ T3485] tipc: Node number set to 2886997007 [ 41.263804][ T3552] netlink: 'syz.1.16': attribute type 1 has an invalid length. [ 41.271608][ T3552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 41.307073][ T3550] loop2: detected capacity change from 0 to 512 [ 41.314415][ T3550] ext4: Unknown parameter 'uid<00000000000000000000' [ 41.337386][ T3556] loop4: detected capacity change from 0 to 128 [ 41.346546][ T3554] syz.3.19 uses obsolete (PF_INET,SOCK_PACKET) [ 41.399021][ T3554] loop3: detected capacity change from 0 to 128 [ 41.428297][ T3554] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.19'. [ 41.453974][ T3554] netlink: zone id is out of range [ 41.459204][ T3554] netlink: zone id is out of range [ 41.472000][ T3554] netlink: zone id is out of range [ 41.477354][ T3554] netlink: zone id is out of range [ 41.482509][ T3554] netlink: zone id is out of range [ 41.487816][ T3554] netlink: zone id is out of range [ 41.492972][ T3554] netlink: zone id is out of range [ 41.498161][ T3554] netlink: zone id is out of range [ 41.503371][ T3554] netlink: zone id is out of range [ 41.508600][ T3554] netlink: zone id is out of range [ 41.592166][ T3577] netlink: 140 bytes leftover after parsing attributes in process `syz.2.26'. [ 41.622928][ T3581] Illegal XDP return value 4294967294 on prog (id 7) dev N/A, expect packet loss! [ 41.625806][ T3572] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.654787][ T3577] loop2: detected capacity change from 0 to 2048 [ 41.656794][ T3572] Zero length message leads to an empty skb [ 41.696621][ T3581] loop3: detected capacity change from 0 to 256 [ 41.727255][ T3577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.741371][ T3581] vfat: Unknown parameter '·' [ 41.896375][ T3597] loop3: detected capacity change from 0 to 2048 [ 41.975501][ T3310] loop3: p1 < > p4 [ 41.980214][ T3310] loop3: p4 size 8388608 extends beyond EOD, truncated [ 42.002258][ T3597] loop3: p1 < > p4 [ 42.010772][ T3597] loop3: p4 size 8388608 extends beyond EOD, truncated [ 42.234238][ T3612] EXT4-fs: dax option not supported [ 42.311127][ T3615] process 'syz.1.34' launched '/dev/fd/3' with NULL argv: empty string added [ 42.355275][ T3612] FAT-fs (loop3): FAT read failed (blocknr 33568) [ 42.464195][ T3576] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.495298][ T3622] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.536242][ T3576] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 16 with error 28 [ 42.548739][ T3576] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.548739][ T3576] [ 42.558474][ T3576] EXT4-fs (loop2): Total free blocks count 0 [ 42.562514][ T3611] FAULT_INJECTION: forcing a failure. [ 42.562514][ T3611] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.564495][ T3576] EXT4-fs (loop2): Free/Dirty block details [ 42.577682][ T3611] CPU: 0 UID: 0 PID: 3611 Comm: syz.4.32 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.577768][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.577815][ T3611] Call Trace: [ 42.577837][ T3611] [ 42.577913][ T3611] __dump_stack+0x1d/0x30 [ 42.577996][ T3611] dump_stack_lvl+0x95/0xd0 [ 42.578064][ T3611] dump_stack+0x15/0x1b [ 42.578124][ T3611] should_fail_ex+0x263/0x280 [ 42.578213][ T3611] should_fail+0xb/0x20 [ 42.578274][ T3611] should_fail_usercopy+0x1a/0x20 [ 42.578353][ T3611] _copy_to_user+0x20/0xa0 [ 42.578460][ T3611] simple_read_from_buffer+0xb5/0x130 [ 42.578554][ T3611] proc_fail_nth_read+0x10e/0x150 [ 42.578715][ T3611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.578803][ T3611] vfs_read+0x1ab/0x7f0 [ 42.578923][ T3611] ? __rcu_read_unlock+0x4e/0x70 [ 42.578986][ T3611] ? __fget_files+0x184/0x1c0 [ 42.579055][ T3611] ? mutex_lock+0x57/0x90 [ 42.579166][ T3611] ksys_read+0xdc/0x1a0 [ 42.579319][ T3611] __x64_sys_read+0x40/0x50 [ 42.579380][ T3611] x64_sys_call+0x2889/0x3000 [ 42.579412][ T3611] do_syscall_64+0xc0/0x2a0 [ 42.579433][ T3611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.579454][ T3611] RIP: 0033:0x7fb72087b58e [ 42.579508][ T3611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 42.579587][ T3611] RSP: 002b:00007fb71f2f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.579650][ T3611] RAX: ffffffffffffffda RBX: 00007fb71f2f66c0 RCX: 00007fb72087b58e [ 42.579709][ T3611] RDX: 000000000000000f RSI: 00007fb71f2f60a0 RDI: 0000000000000005 [ 42.579750][ T3611] RBP: 00007fb71f2f6090 R08: 0000000000000000 R09: 0000000000000000 [ 42.579791][ T3611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.579894][ T3611] R13: 00007fb720b36128 R14: 00007fb720b36090 R15: 00007ffe85724268 [ 42.579943][ T3611] [ 42.599050][ T3622] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.603307][ T3576] EXT4-fs (loop2): free_blocks=2415919504 [ 42.603322][ T3576] EXT4-fs (loop2): dirty_blocks=16 [ 42.603334][ T3576] EXT4-fs (loop2): Block reservation details [ 42.603344][ T3576] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 42.893547][ T3323] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 42.918001][ T3323] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 42.960554][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 42.997215][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.007024][ T3323] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 43.039490][ T3323] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 43.067754][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 43.081546][ T3323] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 43.096346][ T3323] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 43.110531][ T3647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3647 comm=syz.4.43 [ 43.111490][ T3323] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 43.124449][ T3644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.136453][ T3323] EXT4-fs error (device loop1): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 43.374825][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.597451][ T3323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.614219][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.702379][ T3693] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3693 comm=syz.2.56 [ 43.749120][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.836895][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.854289][ T3710] EXT4-fs: Ignoring removed i_version option [ 43.862544][ T3710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.918332][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.943682][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.057771][ T37] bridge_slave_1: left allmulticast mode [ 44.063470][ T37] bridge_slave_1: left promiscuous mode [ 44.069227][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.096564][ T37] bridge_slave_0: left allmulticast mode [ 44.102303][ T37] bridge_slave_0: left promiscuous mode [ 44.108250][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.237890][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.249165][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.259106][ T37] bond0 (unregistering): Released all slaves [ 44.303036][ T37] hsr_slave_0: left promiscuous mode [ 44.317194][ T37] hsr_slave_1: left promiscuous mode [ 44.327964][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.335565][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.381447][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.388933][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.405621][ T37] veth1_macvtap: left promiscuous mode [ 44.411279][ T37] veth0_macvtap: left promiscuous mode [ 44.417332][ T37] veth1_vlan: left promiscuous mode [ 44.422713][ T37] veth0_vlan: left promiscuous mode [ 44.519817][ T3748] netlink: 'syz.0.68': attribute type 3 has an invalid length. [ 44.527758][ T3748] netlink: 132 bytes leftover after parsing attributes in process `syz.0.68'. [ 44.542852][ T3755] msdos: Unknown parameter 'doterrors' [ 44.635644][ T37] team0 (unregistering): Port device team_slave_1 removed [ 44.664398][ T37] team0 (unregistering): Port device team_slave_0 removed [ 44.691992][ T3761] msdos: Unknown parameter '00000000000004356212751' [ 44.840321][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 44.840415][ T29] audit: type=1400 audit(1768679646.611:343): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 44.886336][ T3700] chnl_net:caif_netlink_parms(): no params data found [ 44.904159][ T29] audit: type=1400 audit(1768679646.651:344): avc: denied { read open } for pid=3769 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.930355][ T29] audit: type=1400 audit(1768679646.651:345): avc: denied { getattr } for pid=3769 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.005531][ T3780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3780 comm=syz.4.76 [ 45.025646][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.032784][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.040401][ T3700] bridge_slave_0: entered allmulticast mode [ 45.055792][ T3700] bridge_slave_0: entered promiscuous mode [ 45.069877][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.077053][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.087903][ T29] audit: type=1400 audit(1768679646.861:346): avc: denied { add_name } for pid=3767 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.091132][ T3700] bridge_slave_1: entered allmulticast mode [ 45.117126][ T3700] bridge_slave_1: entered promiscuous mode [ 45.158282][ T3700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.171836][ T29] audit: type=1326 audit(1768679646.911:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7208bacb9 code=0x7ffc0000 [ 45.195259][ T29] audit: type=1326 audit(1768679646.911:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7208bacb9 code=0x7ffc0000 [ 45.198316][ T3700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.218670][ T29] audit: type=1326 audit(1768679646.921:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb7208bacb9 code=0x7ffc0000 [ 45.250707][ T29] audit: type=1326 audit(1768679646.921:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7208bacb9 code=0x7ffc0000 [ 45.273949][ T29] audit: type=1326 audit(1768679646.921:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7208bacb9 code=0x7ffc0000 [ 45.297068][ T29] audit: type=1326 audit(1768679646.921:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7208bacb9 code=0x7ffc0000 [ 45.358693][ T3700] team0: Port device team_slave_0 added [ 45.376696][ T3700] team0: Port device team_slave_1 added [ 45.407462][ T3700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.414465][ T3700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.440471][ T3700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.488897][ T3700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.495949][ T3700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.521983][ T3700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.567225][ T3700] hsr_slave_0: entered promiscuous mode [ 45.573502][ T3700] hsr_slave_1: entered promiscuous mode [ 45.579962][ T3700] debugfs: 'hsr0' already exists in 'hsr' [ 45.585779][ T3700] Cannot create hsr debugfs directory [ 45.610829][ T3795] set_capacity_and_notify: 9 callbacks suppressed [ 45.610850][ T3795] loop3: detected capacity change from 0 to 8192 [ 45.680685][ T3808] lo speed is unknown, defaulting to 1000 [ 45.760064][ T3808] lo speed is unknown, defaulting to 1000 [ 45.769131][ T3808] lo speed is unknown, defaulting to 1000 [ 45.810937][ T3808] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.831989][ T3808] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 45.879126][ T3808] lo speed is unknown, defaulting to 1000 [ 45.907504][ T3808] lo speed is unknown, defaulting to 1000 [ 45.933460][ T3808] lo speed is unknown, defaulting to 1000 [ 45.943637][ T3700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.960607][ T3808] lo speed is unknown, defaulting to 1000 [ 45.967884][ T3700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.987857][ T3808] lo speed is unknown, defaulting to 1000 [ 45.994406][ T3700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.009756][ T3830] loop0: detected capacity change from 0 to 512 [ 46.063548][ T3700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.225578][ T3866] loop2: detected capacity change from 0 to 128 [ 46.236828][ T3867] loop0: detected capacity change from 0 to 256 [ 46.254086][ T3700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.317080][ T3700] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.340140][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.347361][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.386018][ T3871] atomic_op ffff88811bee7928 conn xmit_atomic 0000000000000000 [ 46.405128][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.412290][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.432511][ T3871] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1480662166/1480662167 [ 46.499823][ T3871] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.528853][ T3871] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1480662166/1480662167 [ 46.577200][ T3700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.713049][ T3870] loop3: detected capacity change from 0 to 2048 [ 46.735110][ T37] kworker/u8:2: attempt to access beyond end of device [ 46.735110][ T37] loop2: rw=1, sector=137, nr_sectors = 8 limit=128 [ 46.775312][ T37] kworker/u8:2: attempt to access beyond end of device [ 46.775312][ T37] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 46.790439][ T3870] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 46.825854][ T37] kworker/u8:2: attempt to access beyond end of device [ 46.825854][ T37] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 46.881495][ T37] kworker/u8:2: attempt to access beyond end of device [ 46.881495][ T37] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 46.935553][ T37] kworker/u8:2: attempt to access beyond end of device [ 46.935553][ T37] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 46.975150][ T37] kworker/u8:2: attempt to access beyond end of device [ 46.975150][ T37] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 47.090270][ T37] kworker/u8:2: attempt to access beyond end of device [ 47.090270][ T37] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 47.103720][ T37] kworker/u8:2: attempt to access beyond end of device [ 47.103720][ T37] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 47.117248][ T37] kworker/u8:2: attempt to access beyond end of device [ 47.117248][ T37] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 47.121761][ T3909] 8021q: VLANs not supported on ip6gre0 [ 47.145151][ T37] kworker/u8:2: attempt to access beyond end of device [ 47.145151][ T37] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 47.153088][ T3700] veth0_vlan: entered promiscuous mode [ 47.193880][ T3700] veth1_vlan: entered promiscuous mode [ 47.207782][ T3912] loop2: detected capacity change from 0 to 512 [ 47.221549][ T3912] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.234667][ T3912] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.243776][ T3912] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 47.277073][ T3700] veth0_macvtap: entered promiscuous mode [ 47.305908][ T3700] veth1_macvtap: entered promiscuous mode [ 47.349713][ T3700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.390094][ T3700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.409949][ T3920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'. [ 47.440353][ T353] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.486515][ T399] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.511754][ T399] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.541933][ T399] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.547939][ T3928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.557924][ T3928] IPv6: NLM_F_CREATE should be set when creating new route [ 47.785778][ T3949] loop4: detected capacity change from 0 to 512 [ 47.794298][ T3949] msdos: Unknown parameter 'error}' [ 47.808355][ T3949] netlink: 'syz.4.100': attribute type 12 has an invalid length. [ 47.816184][ T3949] netlink: 132 bytes leftover after parsing attributes in process `syz.4.100'. [ 47.837670][ T3951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 47.954449][ T3954] loop4: detected capacity change from 0 to 512 [ 47.979376][ T3954] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 48.026908][ T3959] loop2: detected capacity change from 0 to 1024 [ 48.041094][ T3954] loop4: detected capacity change from 0 to 1024 [ 48.054771][ T3959] EXT4-fs: Ignoring removed orlov option [ 48.081969][ T3954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.105932][ T3959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.180061][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.279233][ T3908] syz.3.90 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 48.293295][ T3908] CPU: 0 UID: 0 PID: 3908 Comm: syz.3.90 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.293324][ T3908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.293339][ T3908] Call Trace: [ 48.293346][ T3908] [ 48.293355][ T3908] __dump_stack+0x1d/0x30 [ 48.293464][ T3908] dump_stack_lvl+0x95/0xd0 [ 48.293491][ T3908] dump_stack+0x15/0x1b [ 48.293511][ T3908] dump_header+0x80/0x240 [ 48.293534][ T3908] oom_kill_process+0x295/0x350 [ 48.293605][ T3908] out_of_memory+0x97d/0xb80 [ 48.293635][ T3908] try_charge_memcg+0x62e/0xa10 [ 48.293682][ T3908] obj_cgroup_charge_pages+0xa6/0x150 [ 48.293727][ T3908] __memcg_kmem_charge_page+0x9e/0x170 [ 48.293785][ T3908] __alloc_frozen_pages_noprof+0x18a/0x350 [ 48.293836][ T3908] alloc_pages_mpol+0xb3/0x260 [ 48.293865][ T3908] alloc_pages_noprof+0x8f/0x130 [ 48.293950][ T3908] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 48.293992][ T3908] __kvmalloc_node_noprof+0x471/0x680 [ 48.294043][ T3908] ? ip_set_alloc+0x24/0x30 [ 48.294145][ T3908] ? ip_set_alloc+0x24/0x30 [ 48.294295][ T3908] ? __slab_alloc+0x25/0x50 [ 48.294334][ T3908] ip_set_alloc+0x24/0x30 [ 48.294384][ T3908] hash_netiface_create+0x282/0x740 [ 48.294444][ T3908] ? __pfx_hash_netiface_create+0x10/0x10 [ 48.294490][ T3908] ip_set_create+0x3cf/0x970 [ 48.294519][ T3908] ? __nla_parse+0x40/0x60 [ 48.294625][ T3908] nfnetlink_rcv_msg+0x509/0x5d0 [ 48.294687][ T3908] netlink_rcv_skb+0x123/0x220 [ 48.294788][ T3908] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 48.294832][ T3908] nfnetlink_rcv+0x167/0x1720 [ 48.294867][ T3908] ? __kfree_skb+0x109/0x150 [ 48.294954][ T3908] ? nlmon_xmit+0x4f/0x60 [ 48.294981][ T3908] ? consume_skb+0x49/0x140 [ 48.295087][ T3908] ? nlmon_xmit+0x4f/0x60 [ 48.295112][ T3908] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 48.295164][ T3908] ? __dev_queue_xmit+0x139a/0x1f20 [ 48.295211][ T3908] ? __dev_queue_xmit+0x148/0x1f20 [ 48.295286][ T3908] ? ref_tracker_free+0x37d/0x3e0 [ 48.295321][ T3908] ? __netlink_deliver_tap+0x4dc/0x500 [ 48.295368][ T3908] netlink_unicast+0x5c0/0x690 [ 48.295413][ T3908] netlink_sendmsg+0x5c8/0x6f0 [ 48.295495][ T3908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.295520][ T3908] __sock_sendmsg+0x145/0x170 [ 48.295547][ T3908] ____sys_sendmsg+0x31e/0x4a0 [ 48.295620][ T3908] ___sys_sendmsg+0x195/0x1e0 [ 48.295665][ T3908] __x64_sys_sendmsg+0xd4/0x160 [ 48.295705][ T3908] x64_sys_call+0x17ba/0x3000 [ 48.295736][ T3908] do_syscall_64+0xc0/0x2a0 [ 48.295847][ T3908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.295875][ T3908] RIP: 0033:0x7f346f39acb9 [ 48.295892][ T3908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.295944][ T3908] RSP: 002b:00007f346ddd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.295969][ T3908] RAX: ffffffffffffffda RBX: 00007f346f616090 RCX: 00007f346f39acb9 [ 48.295985][ T3908] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000d [ 48.296018][ T3908] RBP: 00007f346f408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 48.296030][ T3908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.296118][ T3908] R13: 00007f346f616128 R14: 00007f346f616090 R15: 00007ffc8106d108 [ 48.296144][ T3908] [ 48.617847][ T3908] memory: usage 307200kB, limit 307200kB, failcnt 162 [ 48.624782][ T3908] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0 [ 48.632765][ T3908] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 48.640113][ T3908] Memory cgroup stats for /syz3: [ 48.713901][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.775518][ T3908] cache 4096 [ 48.778831][ T3908] rss 0 [ 48.781626][ T3908] shmem 0 [ 48.784655][ T3908] mapped_file 0 [ 48.788279][ T3908] dirty 0 [ 48.791264][ T3908] writeback 0 [ 48.794563][ T3908] workingset_refault_anon 16 [ 48.799239][ T3908] workingset_refault_file 3 [ 48.803763][ T3908] swap 282624 [ 48.807165][ T3908] swapcached 0 [ 48.810591][ T3908] pgpgin 9930 [ 48.813912][ T3908] pgpgout 9929 [ 48.817343][ T3908] pgfault 7470 [ 48.820733][ T3908] pgmajfault 18 [ 48.824218][ T3908] inactive_anon 0 [ 48.827912][ T3908] active_anon 0 [ 48.831398][ T3908] inactive_file 0 [ 48.835086][ T3908] active_file 4096 [ 48.838825][ T3908] unevictable 0 [ 48.842297][ T3908] hierarchical_memory_limit 314572800 [ 48.845693][ T3984] bond1: Removing last ns target with arp_interval on [ 48.847854][ T3908] hierarchical_memsw_limit 9223372036854771712 [ 48.860739][ T3908] total_cache 4096 [ 48.862187][ T3984] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 48.864528][ T3908] total_rss 0 [ 48.864558][ T3908] total_shmem 0 [ 48.881036][ T3908] total_mapped_file 0 [ 48.885051][ T3908] total_dirty 0 [ 48.888656][ T3908] total_writeback 0 [ 48.892562][ T3908] total_workingset_refault_anon 16 [ 48.897780][ T3908] total_workingset_refault_file 3 [ 48.902841][ T3908] total_swap 282624 [ 48.906717][ T3908] total_swapcached 0 [ 48.910704][ T3908] total_pgpgin 9930 [ 48.914647][ T3908] total_pgpgout 9929 [ 48.918605][ T3908] total_pgfault 7470 [ 48.922532][ T3908] total_pgmajfault 18 [ 48.926582][ T3908] total_inactive_anon 0 [ 48.930765][ T3908] total_active_anon 0 [ 48.934772][ T3908] total_inactive_file 0 [ 48.938982][ T3908] total_active_file 4096 [ 48.943328][ T3908] total_unevictable 0 [ 48.947405][ T3908] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.90,pid=3869,uid=0 [ 48.962052][ T3908] Memory cgroup out of memory: Killed process 3869 (syz.3.90) total-vm:229432kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 49.022318][ T3908] syz.3.90 (3908) used greatest stack depth: 7224 bytes left [ 49.028749][ T3993] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.095201][ T3993] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.227448][ T4004] netlink: 'syz.0.118': attribute type 3 has an invalid length. [ 49.265337][ T4004] netlink: 'syz.0.118': attribute type 21 has an invalid length. [ 49.331868][ T4004] netlink: 'syz.0.118': attribute type 4 has an invalid length. [ 49.340727][ T4010] netlink: 'syz.5.120': attribute type 21 has an invalid length. [ 49.379203][ T4010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.120'. [ 49.583303][ T4020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.617297][ T4020] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.123: invalid indirect mapped block 4294967295 (level 1) [ 49.635339][ T4020] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.123: invalid indirect mapped block 4294967295 (level 1) [ 49.673992][ T4020] EXT4-fs (loop0): 2 truncates cleaned up [ 49.680423][ T4020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.757096][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.804498][ T4030] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.851465][ T4030] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.875137][ T4037] x_tables: duplicate entry at hook 3 [ 49.985753][ T4046] capability: warning: `syz.5.130' uses 32-bit capabilities (legacy support in use) [ 50.094843][ T4056] pim6reg: entered allmulticast mode [ 50.103030][ T4052] netlink: 'syz.3.133': attribute type 15 has an invalid length. [ 50.110869][ T4052] netlink: 25 bytes leftover after parsing attributes in process `syz.3.133'. [ 50.126619][ T4052] pimreg: entered allmulticast mode [ 50.131998][ T4056] pim6reg: left allmulticast mode [ 50.149012][ T4052] pimreg: left allmulticast mode [ 50.165556][ T4063] syzkaller0: entered allmulticast mode [ 50.171527][ T4063] syzkaller0: entered promiscuous mode [ 50.228127][ T4062] syzkaller0: left promiscuous mode [ 50.233504][ T4062] syzkaller0: left allmulticast mode [ 50.320587][ T4082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'. [ 50.334720][ T4080] msdos: Unknown parameter 'chec' [ 50.384140][ T4087] ext4: Bad value for 'errors' [ 50.441920][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 50.441940][ T29] audit: type=1326 audit(1768679652.211:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 50.488397][ T4099] pim6reg: entered allmulticast mode [ 50.505110][ T4099] pim6reg: left allmulticast mode [ 50.531040][ T4103] netlink: 'syz.5.151': attribute type 4 has an invalid length. [ 50.539258][ T4103] netlink: 152 bytes leftover after parsing attributes in process `syz.5.151'. [ 50.559273][ T29] audit: type=1326 audit(1768679652.271:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 50.585985][ T29] audit: type=1326 audit(1768679652.271:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 50.613387][ T29] audit: type=1326 audit(1768679652.271:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 50.638232][ T29] audit: type=1326 audit(1768679652.271:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 50.661739][ T29] audit: type=1326 audit(1768679652.271:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 50.685067][ T29] audit: type=1326 audit(1768679652.271:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 50.708531][ T29] audit: type=1326 audit(1768679652.271:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 50.732172][ T29] audit: type=1326 audit(1768679652.271:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 50.755463][ T29] audit: type=1326 audit(1768679652.271:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 50.793562][ T4103] net_ratelimit: 71 callbacks suppressed [ 50.793578][ T4103] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 50.853573][ T4116] lo speed is unknown, defaulting to 1000 [ 50.953956][ T4118] set_capacity_and_notify: 7 callbacks suppressed [ 50.953974][ T4118] loop3: detected capacity change from 0 to 1024 [ 51.038212][ T4118] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.060159][ T4118] EXT4-fs: Ignoring removed nobh option [ 51.087493][ T4118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.168949][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.188783][ T4140] loop4: detected capacity change from 0 to 1764 [ 51.228526][ T4140] ISOFS: Unable to identify CD-ROM format. [ 51.313107][ T4152] loop4: detected capacity change from 0 to 512 [ 51.330038][ T4152] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 51.341932][ T4152] EXT4-fs (loop4): invalid journal inode [ 51.348764][ T4152] EXT4-fs (loop4): can't get journal size [ 51.356221][ T4152] EXT4-fs (loop4): 1 truncate cleaned up [ 51.362523][ T4152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.376100][ T4152] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 1986356271 (only 1 groups) [ 51.399253][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.447710][ T4150] loop0: detected capacity change from 0 to 1024 [ 51.475251][ T4150] EXT4-fs: Ignoring removed oldalloc option [ 51.490942][ T4150] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 51.506581][ T4160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 51.515507][ T4160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 51.528001][ T4159] loop3: detected capacity change from 0 to 1024 [ 51.540779][ T55] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.568563][ T166] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.583279][ T4159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.595531][ T166] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.604269][ T166] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.665010][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.942354][ T4185] netlink: 'syz.5.173': attribute type 27 has an invalid length. [ 51.959126][ T4186] 9p: Bad value for 'port' [ 51.965593][ T4183] loop2: detected capacity change from 0 to 1024 [ 51.988022][ T4183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.012233][ T4183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'. [ 52.057001][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.064579][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.110563][ T4185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.121811][ T4185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.173815][ T52] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.187967][ T52] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.211198][ T52] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.211241][ T52] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.320150][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.365623][ T4212] loop5: detected capacity change from 0 to 512 [ 52.376295][ T4212] EXT4-fs: dax option not supported [ 52.382671][ T4226] netlink: 'syz.2.184': attribute type 39 has an invalid length. [ 52.460076][ T4236] __nla_validate_parse: 2 callbacks suppressed [ 52.460093][ T4236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 52.486940][ T4236] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 52.496041][ T4236] team0: Device ipvlan2 is already an upper device of the team interface [ 52.500781][ T4238] loop0: detected capacity change from 0 to 1024 [ 52.517596][ T4238] EXT4-fs: Ignoring removed bh option [ 52.539334][ T4238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.554002][ T4238] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.590578][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.616401][ T4250] loop0: detected capacity change from 0 to 512 [ 52.650923][ T4250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.669655][ T4250] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.719165][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.838532][ T4271] mmap: syz.3.197 (4271) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.920898][ T4277] loop2: detected capacity change from 0 to 128 [ 52.943328][ T4277] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.006280][ T4279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.033070][ T4277] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.042294][ T4279] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.072529][ T4279] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.200: corrupted inode contents [ 53.116835][ T4279] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.200: mark_inode_dirty error [ 53.137606][ T4279] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.200: corrupted inode contents [ 53.168552][ T4279] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.200: mark_inode_dirty error [ 53.242684][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.547059][ T4290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.683035][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.931537][ T4314] netlink: 44 bytes leftover after parsing attributes in process `syz.2.210'. [ 53.940769][ T4316] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.988717][ T4319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.212'. [ 54.014147][ T4316] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.023326][ T4319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.212'. [ 54.123993][ T4325] lo speed is unknown, defaulting to 1000 [ 54.242350][ T4337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.219'. [ 54.251354][ T4337] netlink: 24 bytes leftover after parsing attributes in process `syz.5.219'. [ 54.275661][ T4337] macvlan0: entered allmulticast mode [ 54.281261][ T4337] veth1_vlan: entered allmulticast mode [ 54.333848][ T4331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.385893][ T4331] EXT4-fs (loop4): shut down requested (2) [ 54.402912][ T4271] EXT4-fs (loop3): 1 orphan inode deleted [ 54.406612][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.219'. [ 54.418668][ T52] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 54.453340][ T4271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.479010][ T4271] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.496624][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.506928][ T4349] x_tables: duplicate underflow at hook 2 [ 54.514257][ T4352] x_tables: duplicate underflow at hook 2 [ 54.581681][ T4356] netlink: 24 bytes leftover after parsing attributes in process `syz.5.224'. [ 54.696608][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.736966][ T4368] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.749363][ T3734] loop5: p1 < > p4 [ 54.759502][ T3734] loop5: p4 size 8388608 extends beyond EOD, truncated [ 54.769067][ T4363] loop5: p1 < > p4 [ 54.775111][ T4368] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.790459][ T4363] loop5: p4 size 8388608 extends beyond EOD, truncated [ 54.839583][ T3311] loop2: p1 p2 p3 [ 54.860939][ T4372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 54.870046][ T4372] bridge_slave_1: left allmulticast mode [ 54.875878][ T4372] bridge_slave_1: left promiscuous mode [ 54.881755][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.892585][ T4369] loop2: p1 p2 p3 [ 54.898481][ T4372] bridge_slave_0: left allmulticast mode [ 54.904208][ T4372] bridge_slave_0: left promiscuous mode [ 54.909929][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.961114][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 54.971270][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 55.040579][ T4369] syzkaller0: entered promiscuous mode [ 55.046184][ T4369] syzkaller0: entered allmulticast mode [ 55.087593][ T4378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.131570][ T4378] netlink: 40 bytes leftover after parsing attributes in process `syz.5.232'. [ 55.204199][ T3700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.243476][ T4393] capability: warning: `syz.3.237' uses deprecated v2 capabilities in a way that may be insecure [ 55.286775][ T4396] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.339772][ T4404] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.357583][ T4396] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.413796][ T4404] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.456884][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 55.456902][ T29] audit: type=1326 audit(1768679657.231:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b94e0acb9 code=0x7ffc0000 [ 55.486524][ T29] audit: type=1326 audit(1768679657.231:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b94dcb58e code=0x7ffc0000 [ 55.517815][ T29] audit: type=1326 audit(1768679657.231:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2b94e0bfd7 code=0x7ffc0000 [ 55.541142][ T29] audit: type=1326 audit(1768679657.231:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b94e0acb9 code=0x7ffc0000 [ 55.564366][ T29] audit: type=1326 audit(1768679657.231:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2b94e0bfd7 code=0x7ffc0000 [ 55.587687][ T29] audit: type=1326 audit(1768679657.231:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2b94dcb58e code=0x7ffc0000 [ 55.610796][ T29] audit: type=1326 audit(1768679657.231:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b94e0acb9 code=0x7ffc0000 [ 55.634221][ T29] audit: type=1326 audit(1768679657.231:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b94e0acb9 code=0x7ffc0000 [ 55.657313][ T29] audit: type=1326 audit(1768679657.231:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b94e0acb9 code=0x7ffc0000 [ 55.680659][ T29] audit: type=1326 audit(1768679657.231:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4407 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b94e0acb9 code=0x7ffc0000 [ 55.706888][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.015973][ T4411] set_capacity_and_notify: 13 callbacks suppressed [ 56.016021][ T4411] loop5: detected capacity change from 0 to 512 [ 56.066944][ T4411] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 56.116709][ T4411] EXT4-fs (loop5): orphan cleanup on readonly fs [ 56.155385][ T4411] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 56.210828][ T4411] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 56.227541][ T4411] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz.5.242: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 56.277943][ T4458] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 56.284557][ T4458] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 56.292774][ T4458] vhci_hcd vhci_hcd.0: Device attached [ 56.305335][ T4411] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.242: couldn't read orphan inode 13 (err -117) [ 56.323960][ T4411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.353653][ T4461] vhci_hcd: connection closed [ 56.353799][ T1673] vhci_hcd vhci_hcd.2: stop threads [ 56.364091][ T1673] vhci_hcd vhci_hcd.2: release socket [ 56.369598][ T1673] vhci_hcd vhci_hcd.2: disconnect device [ 56.377735][ T4468] loop0: detected capacity change from 0 to 128 [ 56.406058][ T4468] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.439512][ T4468] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.510874][ T3700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.685837][ T4490] loop0: detected capacity change from 0 to 128 [ 56.703202][ T4489] loop5: detected capacity change from 0 to 1024 [ 56.711862][ T4490] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 56.762870][ T4490] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.775611][ T4489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.787967][ T4490] ext2 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.806583][ T4499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=4499 comm=syz.2.266 [ 56.842963][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.018181][ T3700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.068765][ T4512] loop5: detected capacity change from 0 to 128 [ 57.101500][ T4512] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.131859][ T4512] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.251221][ T4523] ipvlan0: entered promiscuous mode [ 57.281943][ T4523] ipvlan0: left promiscuous mode [ 57.390160][ T399] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.637512][ T4562] netlink: 'syz.3.277': attribute type 5 has an invalid length. [ 57.647233][ T4566] __nla_validate_parse: 5 callbacks suppressed [ 57.647277][ T4566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.280'. [ 57.678250][ T4566] netlink: 'syz.0.280': attribute type 13 has an invalid length. [ 57.694162][ T4570] loop2: detected capacity change from 0 to 2048 [ 57.735179][ T4566] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.742397][ T4566] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.758582][ T4575] netlink: 108 bytes leftover after parsing attributes in process `syz.0.280'. [ 57.798108][ T4566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.811779][ T4566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.829049][ T4580] tmpfs: Bad value for 'gid' [ 57.833728][ T4580] tmpfs: Bad value for 'gid' [ 57.880634][ T399] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.892017][ T399] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.907402][ T399] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.924750][ T399] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.999935][ T4592] loop0: detected capacity change from 0 to 2048 [ 58.017117][ T4592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 58.046784][ T4603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'. [ 58.056642][ T4603] syzkaller0: entered promiscuous mode [ 58.062333][ T4603] syzkaller0: entered allmulticast mode [ 58.264554][ T399] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.291032][ T399] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 58.303673][ T399] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.303673][ T399] [ 58.314009][ T399] EXT4-fs (loop0): Total free blocks count 0 [ 58.320161][ T399] EXT4-fs (loop0): Free/Dirty block details [ 58.326564][ T399] EXT4-fs (loop0): free_blocks=2415919104 [ 58.332465][ T399] EXT4-fs (loop0): dirty_blocks=2496 [ 58.337888][ T399] EXT4-fs (loop0): Block reservation details [ 58.343900][ T399] EXT4-fs (loop0): i_reserved_data_blocks=156 [ 58.378129][ T4619] netlink: 'syz.5.290': attribute type 33 has an invalid length. [ 58.533847][ T4634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=4634 comm=syz.3.291 [ 58.543842][ T399] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 436 with error 28 [ 58.579999][ T4621] netlink: 'syz.2.289': attribute type 21 has an invalid length. [ 58.610438][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 58.729143][ T4645] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 58.874204][ T4656] bridge_slave_0: left allmulticast mode [ 58.879959][ T4656] bridge_slave_0: left promiscuous mode [ 58.885702][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.918702][ T4663] loop5: detected capacity change from 0 to 512 [ 58.927440][ T4656] bridge_slave_1: left allmulticast mode [ 58.933119][ T4656] bridge_slave_1: left promiscuous mode [ 58.938880][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.980204][ T4663] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.299: Failed to acquire dquot type 1 [ 58.995511][ T4656] bond0: (slave bond_slave_0): Releasing backup interface [ 59.016026][ T4656] bond0: (slave bond_slave_1): Releasing backup interface [ 59.028671][ T4663] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.299: Failed to acquire dquot type 1 [ 59.043689][ T4656] team0: Port device team_slave_0 removed [ 59.047593][ T4669] loop3: detected capacity change from 0 to 1024 [ 59.056558][ T4663] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.299: bg 0: block 248: padding at end of block bitmap is not set [ 59.074725][ T4656] team0: Port device team_slave_1 removed [ 59.080275][ T4663] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 59.091005][ T4656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.093955][ T4663] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.299: Failed to acquire dquot type 1 [ 59.098735][ T4656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.112193][ T4663] EXT4-fs (loop5): 1 orphan inode deleted [ 59.123612][ T4663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.136199][ T4656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.137894][ T4663] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.143629][ T4656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.162378][ T4669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.178848][ T4656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 59.186596][ T4669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.301'. [ 59.203793][ T3485] lo speed is unknown, defaulting to 1000 [ 59.245617][ T3700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.280813][ T4606] veth0_to_team: entered promiscuous mode [ 59.290948][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 59.370414][ T4681] tmpfs: Bad value for 'size' [ 59.375995][ T4681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.304'. [ 59.387087][ T4681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.304'. [ 59.396147][ T4681] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 59.405112][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 59.412707][ T3539] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.493025][ T4684] netlink: 80 bytes leftover after parsing attributes in process `syz.2.305'. [ 59.512837][ T4684] syz.2.305 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.525218][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.547222][ T4684] netlink: 14 bytes leftover after parsing attributes in process `syz.2.305'. [ 59.726417][ T4697] lo speed is unknown, defaulting to 1000 [ 59.951479][ T4716] loop2: detected capacity change from 0 to 1024 [ 59.960855][ T4716] EXT4-fs: inline encryption not supported [ 59.991077][ T4716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.011443][ T4719] EXT4-fs: Ignoring removed orlov option [ 60.017261][ T4719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.039726][ T4719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.086839][ T4716] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 60.125384][ T4716] EXT4-fs (loop2): Remounting filesystem read-only [ 60.182006][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.218530][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.463691][ T4766] EXT4-fs (loop2): 1 orphan inode deleted [ 60.470161][ T4766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.483224][ T353] __quota_error: 267 callbacks suppressed [ 60.483241][ T353] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 60.498768][ T353] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1 [ 60.515297][ T4766] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.540973][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.564745][ T29] audit: type=1326 audit(1768679662.331:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 60.588319][ T29] audit: type=1326 audit(1768679662.331:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 60.600375][ T4775] EXT4-fs: Ignoring removed i_version option [ 60.611676][ T29] audit: type=1326 audit(1768679662.331:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 60.617797][ T4775] EXT4-fs: Ignoring removed nobh option [ 60.640955][ T29] audit: type=1326 audit(1768679662.331:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 60.669799][ T29] audit: type=1326 audit(1768679662.331:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d6f0cb58e code=0x7ffc0000 [ 60.693078][ T29] audit: type=1400 audit(1768679662.331:996): avc: denied { write } for pid=4771 comm="syz.0.332" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.696381][ T4775] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.749890][ T4775] EXT4-fs (loop2): 1 truncate cleaned up [ 60.769210][ T29] audit: type=1326 audit(1768679662.441:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 60.770784][ T4775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.792502][ T29] audit: type=1326 audit(1768679662.441:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 60.828584][ T29] audit: type=1326 audit(1768679662.501:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6f10acb9 code=0x7ffc0000 [ 60.877767][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.895692][ T4781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4781 comm=syz.0.335 [ 60.914774][ T4783] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 60.949927][ T4785] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.962293][ T4785] EXT4-fs (loop0): orphan file too big: 4294967264 [ 60.969368][ T4785] EXT4-fs (loop0): mount failed [ 61.102622][ T4793] netlink: 'syz.0.339': attribute type 4 has an invalid length. [ 61.114344][ T4793] netlink: 'syz.0.339': attribute type 4 has an invalid length. [ 61.248654][ T4801] bond2: option ad_user_port_key: invalid value (1136) [ 61.255658][ T4801] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 61.281722][ T4801] bond2 (unregistering): Released all slaves [ 61.540424][ T4787] syz.2.336 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 61.554532][ T4787] CPU: 1 UID: 0 PID: 4787 Comm: syz.2.336 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.554579][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.554623][ T4787] Call Trace: [ 61.554632][ T4787] [ 61.554642][ T4787] __dump_stack+0x1d/0x30 [ 61.554674][ T4787] dump_stack_lvl+0x95/0xd0 [ 61.554701][ T4787] dump_stack+0x15/0x1b [ 61.554743][ T4787] dump_header+0x80/0x240 [ 61.554777][ T4787] oom_kill_process+0x295/0x350 [ 61.554806][ T4787] out_of_memory+0x97d/0xb80 [ 61.554832][ T4787] try_charge_memcg+0x62e/0xa10 [ 61.554977][ T4787] obj_cgroup_charge_pages+0xa6/0x150 [ 61.555015][ T4787] __memcg_kmem_charge_page+0x9e/0x170 [ 61.555108][ T4787] __alloc_frozen_pages_noprof+0x18a/0x350 [ 61.555223][ T4787] alloc_pages_mpol+0xb3/0x260 [ 61.555253][ T4787] alloc_pages_noprof+0x8f/0x130 [ 61.555296][ T4787] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 61.555372][ T4787] __kvmalloc_node_noprof+0x471/0x680 [ 61.555493][ T4787] ? ip_set_alloc+0x24/0x30 [ 61.555528][ T4787] ? ip_set_alloc+0x24/0x30 [ 61.555610][ T4787] ip_set_alloc+0x24/0x30 [ 61.555652][ T4787] hash_netiface_create+0x282/0x740 [ 61.555713][ T4787] ? __pfx_hash_netiface_create+0x10/0x10 [ 61.555753][ T4787] ip_set_create+0x3cf/0x970 [ 61.555813][ T4787] ? __nla_parse+0x40/0x60 [ 61.555840][ T4787] nfnetlink_rcv_msg+0x509/0x5d0 [ 61.555891][ T4787] netlink_rcv_skb+0x123/0x220 [ 61.556011][ T4787] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 61.556051][ T4787] nfnetlink_rcv+0x167/0x1720 [ 61.556087][ T4787] ? __kfree_skb+0x109/0x150 [ 61.556113][ T4787] ? nlmon_xmit+0x4f/0x60 [ 61.556193][ T4787] ? consume_skb+0x49/0x140 [ 61.556227][ T4787] ? nlmon_xmit+0x4f/0x60 [ 61.556253][ T4787] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 61.556297][ T4787] ? __dev_queue_xmit+0x139a/0x1f20 [ 61.556461][ T4787] ? __dev_queue_xmit+0x148/0x1f20 [ 61.556497][ T4787] ? ref_tracker_free+0x37d/0x3e0 [ 61.556541][ T4787] ? __netlink_deliver_tap+0x4dc/0x500 [ 61.556589][ T4787] netlink_unicast+0x5c0/0x690 [ 61.556635][ T4787] netlink_sendmsg+0x5c8/0x6f0 [ 61.556662][ T4787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.556684][ T4787] __sock_sendmsg+0x145/0x170 [ 61.556706][ T4787] ____sys_sendmsg+0x31e/0x4a0 [ 61.556773][ T4787] ___sys_sendmsg+0x195/0x1e0 [ 61.556820][ T4787] __x64_sys_sendmsg+0xd4/0x160 [ 61.556939][ T4787] x64_sys_call+0x17ba/0x3000 [ 61.556964][ T4787] do_syscall_64+0xc0/0x2a0 [ 61.556991][ T4787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.557021][ T4787] RIP: 0033:0x7f146bd1acb9 [ 61.557042][ T4787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.557174][ T4787] RSP: 002b:00007f146a756028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.557200][ T4787] RAX: ffffffffffffffda RBX: 00007f146bf96090 RCX: 00007f146bd1acb9 [ 61.557214][ T4787] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 61.557228][ T4787] RBP: 00007f146bd88bf7 R08: 0000000000000000 R09: 0000000000000000 [ 61.557271][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.557283][ T4787] R13: 00007f146bf96128 R14: 00007f146bf96090 R15: 00007ffe4ed64e28 [ 61.557301][ T4787] [ 61.874791][ T4787] memory: usage 307200kB, limit 307200kB, failcnt 333 [ 61.881698][ T4787] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 61.889660][ T4787] kmem: usage 306996kB, limit 9007199254740988kB, failcnt 0 [ 61.896987][ T4787] Memory cgroup stats for /syz2: [ 61.967142][ T4787] cache 0 [ 61.975206][ T4787] rss 0 [ 61.978094][ T4787] shmem 0 [ 61.981126][ T4787] mapped_file 0 [ 61.984603][ T4787] dirty 0 [ 61.987604][ T4787] writeback 0 [ 61.990904][ T4787] workingset_refault_anon 66 [ 61.995542][ T4787] workingset_refault_file 900 [ 62.000383][ T4787] swap 212992 [ 62.003870][ T4787] swapcached 0 [ 62.007349][ T4787] pgpgin 28100 [ 62.010800][ T4787] pgpgout 28100 [ 62.014276][ T4787] pgfault 23233 [ 62.017785][ T4787] pgmajfault 61 [ 62.021260][ T4787] inactive_anon 0 [ 62.024910][ T4787] active_anon 0 [ 62.028403][ T4787] inactive_file 0 [ 62.032156][ T4787] active_file 0 [ 62.035727][ T4787] unevictable 0 [ 62.039199][ T4787] hierarchical_memory_limit 314572800 [ 62.044592][ T4787] hierarchical_memsw_limit 9223372036854771712 [ 62.050848][ T4787] total_cache 0 [ 62.054372][ T4787] total_rss 0 [ 62.057706][ T4787] total_shmem 0 [ 62.061188][ T4787] total_mapped_file 0 [ 62.065217][ T4787] total_dirty 0 [ 62.068697][ T4787] total_writeback 0 [ 62.072527][ T4787] total_workingset_refault_anon 66 [ 62.077759][ T4787] total_workingset_refault_file 900 [ 62.082974][ T4787] total_swap 212992 [ 62.086818][ T4787] total_swapcached 0 [ 62.090728][ T4787] total_pgpgin 28100 [ 62.094692][ T4787] total_pgpgout 28100 [ 62.098707][ T4787] total_pgfault 23233 [ 62.102711][ T4787] total_pgmajfault 61 [ 62.106722][ T4787] total_inactive_anon 0 [ 62.110948][ T4787] total_active_anon 0 [ 62.115013][ T4787] total_inactive_file 0 [ 62.119191][ T4787] total_active_file 0 [ 62.123200][ T4787] total_unevictable 0 [ 62.127242][ T4787] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.336,pid=4782,uid=0 [ 62.141979][ T4787] Memory cgroup out of memory: Killed process 4782 (syz.2.336) total-vm:94264kB, anon-rss:1204kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 62.307512][ T4816] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 62.363035][ T4811] lo speed is unknown, defaulting to 1000 [ 62.541378][ T4824] set_capacity_and_notify: 6 callbacks suppressed [ 62.541400][ T4824] loop3: detected capacity change from 0 to 1764 [ 62.613114][ T4824] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 62.756097][ T4831] lo speed is unknown, defaulting to 1000 [ 62.909367][ T4834] __nla_validate_parse: 5 callbacks suppressed [ 62.909432][ T4834] netlink: 36 bytes leftover after parsing attributes in process `syz.3.353'. [ 63.389856][ T4853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.359'. [ 63.491080][ T4855] netlink: 36 bytes leftover after parsing attributes in process `syz.5.360'. [ 63.617741][ T4862] loop5: detected capacity change from 0 to 512 [ 63.656716][ T4866] netlink: 48 bytes leftover after parsing attributes in process `syz.2.364'. [ 63.685582][ T4862] EXT4-fs: Ignoring removed oldalloc option [ 63.691581][ T4862] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.731959][ T4869] loop0: detected capacity change from 0 to 1024 [ 63.739131][ T4862] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.768945][ T4862] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 63.785408][ T4869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.799133][ T4862] EXT4-fs error (device loop5): __ext4_fill_super:5553: inode #2: comm syz.5.362: iget: special inode unallocated [ 63.811578][ T4862] EXT4-fs (loop5): Remounting filesystem read-only [ 63.818756][ T4862] EXT4-fs (loop5): get root inode failed [ 63.824614][ T4862] EXT4-fs (loop5): mount failed [ 63.828655][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 63.845633][ T4878] loop2: detected capacity change from 0 to 1024 [ 63.859762][ T4878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.868592][ T4878] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.902775][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.913371][ T4878] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #3: block 1: comm syz.2.367: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.927926][ T4878] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.367: Failed to acquire dquot type 0 [ 63.939559][ T4878] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.367: Freeing blocks not in datazone - block = 0, count = 4096 [ 63.968769][ T4878] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.367: Invalid inode bitmap blk 0 in block_group 0 [ 63.981631][ T4878] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 63.990419][ T4465] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.006433][ T4878] EXT4-fs (loop2): 1 orphan inode deleted [ 64.024134][ T4465] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 64.090878][ T4892] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 64.120933][ T4899] loop3: detected capacity change from 0 to 736 [ 64.187104][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 64.213565][ T4916] loop3: detected capacity change from 0 to 128 [ 64.232864][ T4916] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.249407][ T4916] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.261238][ T4918] raw_sendmsg: syz.0.377 forgot to set AF_INET. Fix it! [ 64.281321][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 64.348015][ T4924] loop3: detected capacity change from 0 to 512 [ 64.371873][ T4924] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2807: inode #11: comm syz.3.379: corrupted xattr block 95: invalid header [ 64.387710][ T4924] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.379: bg 0: block 7: invalid block bitmap [ 64.408445][ T4924] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 64.426931][ T4924] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #11: comm syz.3.379: corrupted xattr block 95: invalid header [ 64.445302][ T4928] lo speed is unknown, defaulting to 1000 [ 64.455519][ T4924] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 64.475822][ T4924] EXT4-fs (loop3): 1 orphan inode deleted [ 64.989826][ T4946] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.068477][ T4952] loop4: detected capacity change from 0 to 128 [ 65.086509][ T4952] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.111545][ T4952] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.159947][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 65.279321][ T4969] netlink: 'syz.0.394': attribute type 10 has an invalid length. [ 65.287233][ T4969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'. [ 65.308568][ T4969] u†): entered promiscuous mode [ 65.324061][ T4969] bridge0: port 3(u†)) entered blocking state [ 65.330383][ T4969] bridge0: port 3(u†)) entered disabled state [ 65.346510][ T4973] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 65.347126][ T4969] u†): entered allmulticast mode [ 65.360316][ T4969] bridge0: entered allmulticast mode [ 65.367897][ T4974] loop2: detected capacity change from 0 to 256 [ 65.375241][ T4974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.396'. [ 65.384598][ T4969] u†): left allmulticast mode [ 65.389539][ T4969] bridge0: left allmulticast mode [ 65.534014][ T4995] loop2: detected capacity change from 0 to 128 [ 65.541243][ T4995] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.559263][ T4995] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.607788][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 65.607879][ T29] audit: type=1326 audit(1768679667.381:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146bd1acb9 code=0x7ffc0000 [ 65.642342][ T29] audit: type=1326 audit(1768679667.411:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f146bcdb58e code=0x7ffc0000 [ 65.665840][ T29] audit: type=1326 audit(1768679667.411:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f146bd1bfd7 code=0x7ffc0000 [ 65.689180][ T29] audit: type=1326 audit(1768679667.411:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f146bd1acb9 code=0x7ffc0000 [ 65.712462][ T29] audit: type=1326 audit(1768679667.411:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f146bd1bfd7 code=0x7ffc0000 [ 65.736242][ T29] audit: type=1326 audit(1768679667.411:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f146bcdb58e code=0x7ffc0000 [ 65.759562][ T29] audit: type=1326 audit(1768679667.411:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146bd1acb9 code=0x7ffc0000 [ 65.782972][ T29] audit: type=1326 audit(1768679667.411:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f146bd1acb9 code=0x7ffc0000 [ 65.806465][ T29] audit: type=1326 audit(1768679667.411:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f146bd1acb9 code=0x7ffc0000 [ 65.829935][ T29] audit: type=1326 audit(1768679667.411:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4997 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f146bd1acb9 code=0x7ffc0000 [ 65.888372][ T4990] EXT4-fs (loop3): 1 orphan inode deleted [ 65.889877][ T5004] xt_connbytes: Forcing CT accounting to be enabled [ 65.905438][ T37] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 65.912031][ T4990] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.927457][ T5004] xt_NFQUEUE: number of total queues is 0 [ 66.022976][ T5015] lo speed is unknown, defaulting to 1000 [ 66.243941][ T5030] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.279329][ T5030] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 66.294022][ T5034] 9p: Bad value for 'port' [ 66.340398][ T5037] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 66.498088][ T5043] EXT4-fs: journaled quota format not specified [ 66.516158][ T5039] EXT4-fs: dax option not supported [ 66.798505][ T5056] xt_policy: neither incoming nor outgoing policy selected [ 67.041938][ T5065] ext4: Unknown parameter 'uid' [ 67.111458][ T5068] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.136103][ T5071] FAULT_INJECTION: forcing a failure. [ 67.136103][ T5071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.149335][ T5071] CPU: 0 UID: 0 PID: 5071 Comm: syz.0.429 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.149369][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.149386][ T5071] Call Trace: [ 67.149395][ T5071] [ 67.149405][ T5071] __dump_stack+0x1d/0x30 [ 67.149431][ T5071] dump_stack_lvl+0x95/0xd0 [ 67.149479][ T5071] dump_stack+0x15/0x1b [ 67.149498][ T5071] should_fail_ex+0x263/0x280 [ 67.149526][ T5071] should_fail+0xb/0x20 [ 67.149552][ T5071] should_fail_usercopy+0x1a/0x20 [ 67.149598][ T5071] _copy_from_user+0x1c/0xb0 [ 67.149633][ T5071] ___sys_sendmsg+0xc1/0x1e0 [ 67.149687][ T5071] __x64_sys_sendmsg+0xd4/0x160 [ 67.149736][ T5071] x64_sys_call+0x17ba/0x3000 [ 67.149760][ T5071] do_syscall_64+0xc0/0x2a0 [ 67.149789][ T5071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.149871][ T5071] RIP: 0033:0x7f0d6f10acb9 [ 67.149889][ T5071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.149977][ T5071] RSP: 002b:00007f0d6db67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.149997][ T5071] RAX: ffffffffffffffda RBX: 00007f0d6f385fa0 RCX: 00007f0d6f10acb9 [ 67.150010][ T5071] RDX: 0000000000040810 RSI: 0000200000000580 RDI: 0000000000000003 [ 67.150024][ T5071] RBP: 00007f0d6db67090 R08: 0000000000000000 R09: 0000000000000000 [ 67.150040][ T5071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.150110][ T5071] R13: 00007f0d6f386038 R14: 00007f0d6f385fa0 R15: 00007ffe0497d818 [ 67.150130][ T5071] [ 67.322083][ T5068] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.422613][ T5079] 9p: Bad value for 'port' [ 67.480826][ T5084] lo speed is unknown, defaulting to 1000 [ 67.974707][ T5107] __nla_validate_parse: 15 callbacks suppressed [ 67.974732][ T5107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'. [ 68.078318][ T5114] set_capacity_and_notify: 6 callbacks suppressed [ 68.078337][ T5114] loop0: detected capacity change from 0 to 128 [ 68.087782][ T5115] FAULT_INJECTION: forcing a failure. [ 68.087782][ T5115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.104393][ T5115] CPU: 1 UID: 0 PID: 5115 Comm: syz.3.443 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.104458][ T5115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.104471][ T5115] Call Trace: [ 68.104483][ T5115] [ 68.104491][ T5115] __dump_stack+0x1d/0x30 [ 68.104520][ T5115] dump_stack_lvl+0x95/0xd0 [ 68.104544][ T5115] dump_stack+0x15/0x1b [ 68.104621][ T5115] should_fail_ex+0x263/0x280 [ 68.104695][ T5115] should_fail+0xb/0x20 [ 68.104714][ T5115] should_fail_usercopy+0x1a/0x20 [ 68.104742][ T5115] _copy_from_user+0x1c/0xb0 [ 68.104779][ T5115] __copy_msghdr+0x244/0x300 [ 68.104812][ T5115] ___sys_sendmsg+0x10c/0x1e0 [ 68.104921][ T5115] __x64_sys_sendmsg+0xd4/0x160 [ 68.104966][ T5115] x64_sys_call+0x17ba/0x3000 [ 68.105076][ T5115] do_syscall_64+0xc0/0x2a0 [ 68.105104][ T5115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.105132][ T5115] RIP: 0033:0x7f346f39acb9 [ 68.105147][ T5115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.105165][ T5115] RSP: 002b:00007f346ddf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.105243][ T5115] RAX: ffffffffffffffda RBX: 00007f346f615fa0 RCX: 00007f346f39acb9 [ 68.105258][ T5115] RDX: 0000000000040810 RSI: 0000200000000580 RDI: 0000000000000003 [ 68.105292][ T5115] RBP: 00007f346ddf7090 R08: 0000000000000000 R09: 0000000000000000 [ 68.105308][ T5115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.105324][ T5115] R13: 00007f346f616038 R14: 00007f346f615fa0 R15: 00007ffc8106d108 [ 68.105348][ T5115] [ 68.164865][ T5114] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.459942][ T5120] lo speed is unknown, defaulting to 1000 [ 68.493258][ T5114] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.527019][ T5121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.445'. [ 68.613216][ T5123] sg_write: data in/out 458719/136 bytes for SCSI command 0xc7-- guessing data in; [ 68.613216][ T5123] program syz.5.447 not setting count and/or reply_len properly [ 68.901953][ T5131] lo speed is unknown, defaulting to 1000 [ 69.054175][ T5143] loop2: detected capacity change from 0 to 1764 [ 69.231424][ T3483] IPVS: starting estimator thread 0... [ 69.261362][ T5154] netlink: 68 bytes leftover after parsing attributes in process `syz.4.458'. [ 69.349225][ T5155] IPVS: using max 1728 ests per chain, 86400 per kthread [ 69.421031][ T5162] loop4: detected capacity change from 0 to 128 [ 69.436233][ T5162] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.465464][ T5162] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.755157][ T5174] loop3: detected capacity change from 0 to 512 [ 69.803097][ T5174] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.464: error while reading EA inode 32 err=-116 [ 69.864289][ T5174] EXT4-fs (loop3): Remounting filesystem read-only [ 69.935152][ T5174] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 69.994683][ T5174] EXT4-fs (loop3): 1 orphan inode deleted [ 70.022672][ T5174] EXT4-fs mount: 6 callbacks suppressed [ 70.022690][ T5174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.204656][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.410744][ T5201] loop2: detected capacity change from 0 to 1024 [ 70.596018][ T5206] loop5: detected capacity change from 0 to 1024 [ 70.613071][ T5210] loop3: detected capacity change from 0 to 128 [ 70.625114][ T29] kauditd_printk_skb: 993 callbacks suppressed [ 70.625131][ T29] audit: type=1400 audit(1768679672.391:2188): avc: denied { mounton } for pid=5204 comm="syz.5.472" path="/74/file2" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.679022][ T5210] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.707350][ T5206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.725896][ T55] ================================================================== [ 70.734025][ T55] BUG: KCSAN: data-race in touch_atime / touch_atime [ 70.740744][ T55] [ 70.743180][ T55] write to 0xffff88811bce6c88 of 4 bytes by task 31 on cpu 1: [ 70.750672][ T55] touch_atime+0x1e8/0x340 [ 70.755130][ T55] shmem_file_read_iter+0x477/0x540 [ 70.760377][ T55] lo_rw_aio+0x67d/0x730 [ 70.764657][ T55] loop_process_work+0x56c/0xac0 [ 70.769628][ T55] loop_rootcg_workfn+0x22/0x30 [ 70.774611][ T55] process_scheduled_works+0x4cd/0x9d0 [ 70.780113][ T55] worker_thread+0x581/0x770 [ 70.784740][ T55] kthread+0x488/0x510 [ 70.788851][ T55] ret_from_fork+0x148/0x280 [ 70.793476][ T55] ret_from_fork_asm+0x1a/0x30 [ 70.798285][ T55] [ 70.800636][ T55] read to 0xffff88811bce6c88 of 4 bytes by task 55 on cpu 0: [ 70.808058][ T55] touch_atime+0x194/0x340 [ 70.812522][ T55] shmem_file_read_iter+0x477/0x540 [ 70.817807][ T55] lo_rw_aio+0x67d/0x730 [ 70.822078][ T55] loop_process_work+0x56c/0xac0 [ 70.825880][ T29] audit: type=1400 audit(1768679672.401:2189): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.827038][ T55] loop_workfn+0x31/0x40 [ 70.851319][ T29] audit: type=1400 audit(1768679672.401:2190): avc: denied { open } for pid=3317 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.855466][ T55] process_scheduled_works+0x4cd/0x9d0 [ 70.879658][ T29] audit: type=1400 audit(1768679672.401:2191): avc: denied { ioctl } for pid=3317 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.885076][ T55] worker_thread+0x581/0x770 [ 70.885105][ T55] kthread+0x488/0x510 [ 70.885130][ T55] ret_from_fork+0x148/0x280 [ 70.885151][ T55] ret_from_fork_asm+0x1a/0x30 [ 70.911534][ T29] audit: type=1400 audit(1768679672.451:2192): avc: denied { mounton } for pid=5209 comm="syz.3.473" path="/76/file1" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.915381][ T55] [ 70.915387][ T55] value changed: 0x1c20371c -> 0x1de9fa9c [ 70.915420][ T55] [ 70.915424][ T55] Reported by Kernel Concurrency Sanitizer on: [ 70.915436][ T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.915466][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.915488][ T55] Workqueue: loop3 loop_workfn [ 70.915514][ T55] ================================================================== [ 71.001009][ T29] audit: type=1400 audit(1768679672.451:2193): avc: denied { prog_load } for pid=5211 comm="syz.4.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.017756][ T5212] loop4: detected capacity change from 0 to 512 [ 71.020101][ T29] audit: type=1400 audit(1768679672.451:2194): avc: denied { bpf } for pid=5211 comm="syz.4.474" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.046730][ T29] audit: type=1400 audit(1768679672.451:2195): avc: denied { perfmon } for pid=5211 comm="syz.4.474" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.067961][ T29] audit: type=1400 audit(1768679672.451:2196): avc: denied { perfmon } for pid=5211 comm="syz.4.474" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.068421][ T5212] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.088944][ T29] audit: type=1400 audit(1768679672.451:2197): avc: denied { bpf } for pid=5211 comm="syz.4.474" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.090493][ T5210] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.170372][ T5206] netlink: 24 bytes leftover after parsing attributes in process `syz.5.472'. [ 71.268342][ T5212] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.474: bad orphan inode 131083 [ 71.297757][ T5212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.355774][ T3700] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.377454][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.