last executing test programs: 2m11.987312895s ago: executing program 0 (id=242): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x2, @perf_config_ext={0x3fffffffc, 0x9}, 0x10, 0x3, 0x80, 0x9, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffeffffffffbffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) vmsplice(r0, 0x0, 0x0, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) copy_file_range(r1, &(0x7f0000000040)=0x8000000000000001, r1, 0x0, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 2m11.893228939s ago: executing program 0 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x40, 0x3, {{0x32, 0x4, 0x1, 0x0, 0xc8, 0x67, 0x0, 0x2, 0x2, 0x0, @multicast2, @private=0xa010101, {[@lsrr={0x83, 0x17, 0xf0, [@multicast1, @loopback, @remote, @local, @dev={0xac, 0x14, 0x14, 0x3c}]}, @timestamp={0x44, 0x4, 0x27}, @timestamp_prespec={0x44, 0x24, 0x74, 0x3, 0x0, [{@broadcast, 0x6}, {@loopback, 0x2}, {@multicast2, 0x7ff}, {@multicast1, 0x2}]}, @rr={0x7, 0x7, 0x3d, [@local]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x43, 0x2, [{0x5, 0x6, "b48497a9"}, {0x5, 0xc, "a2c5223b3a4102d72d20"}, {0x5, 0x11, "2acd51a3c89ebc647b8a47c37eb664"}, {0x0, 0xd, "8036e1d93cdf33d7eaced0"}, {0x7, 0xb, "5e2fbd3e85ec95311e"}, {0x6, 0x2}]}, @timestamp_addr={0x44, 0x14, 0x9d, 0x1, 0x9, [{@broadcast, 0x3d}, {@rand_addr=0x64010101, 0x3}]}, @generic={0x44, 0x9, "f27ef8db913bf8"}, @generic={0x86, 0xa, "36f290749a84196d"}]}}}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ustat(0x9, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r4, 0x0, 0x2, 0x4}}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="0104ee0000000000000600000000000005000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000040000000100"/28], 0x50) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) readahead(r0, 0x9, 0x48) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) r6 = socket(0x10, 0x80000, 0x400) r7 = accept4$inet6(r1, 0x0, &(0x7f0000000240), 0x80000) recvfrom(r7, &(0x7f0000000340)=""/158, 0x9e, 0x141, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a37", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x2000800) 2m11.845752022s ago: executing program 0 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x0, 0x81}, 0x80, &(0x7f0000000080)=[{&(0x7f00000003c0)="ec000900062b2b25fe801d00f7ffffffdc8b851a238466cc80007a911b51818462b4003a009b662db2e0", 0x2a}], 0x1}, 0x48100) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x64, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0xa8, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x7a, 0x7, 0x1, 0x0, "a36371b4bed7272d8dd7db1cb145a7efecfe63c041986acea03a6b0ae04da73e62dcce51c99f8d7e3b6bdd0a5632d8c3b7449ae8f7c217927c7e97b082048d9a1f161b12888766e8d2aa0617fbbe3ec4b5cdd89bc03d9856fc9760cb9bad29ba403aefa9c150401488494deb9ed7b03ac0f5aa09577c"}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000000)={0xffff1c91, 0x0, {0x1, 0x3, 0x40000}, 0x4}) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xed6dbff2d3dfa50d}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x78, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2d0eb2e30520f42706deb2f1a3ee4467"}, @NL80211_ATTR_SSID={0x22, 0x34, @random="dc64d2ba0ffdb3d0c8227c091344eb6cf513c548ef460978d02186556fe6"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040041) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x21, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x7, 0xa, 0x5, 0x92c, 0x3c0000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @ldst={0x1, 0x3, 0x1, 0x8, 0x0, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x8, 0x7e, &(0x7f0000000500)=""/126, 0x41100, 0x20, '\x00', r8, 0x25, r9, 0x8, &(0x7f00000005c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x9, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r6, r6]}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) 2m11.546091137s ago: executing program 0 (id=250): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x3, 0x0, 0x400000400, 0x1e17c7, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x1}, 0x0, 0x3ff, 0x9, 0x0, 0xffffffffffffb83a, 0x0, 0x100, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xd) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file2/file0\x00', 0x201455a, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES8], 0xfa, 0x121f, &(0x7f0000003480)="$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") socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, 0x0, 0x0) r5 = timerfd_create(0x0, 0x800) timerfd_settime(r5, 0x3, 0x0, 0x0) r6 = syz_io_uring_setup(0x3dc, &(0x7f0000000500)={0x0, 0xe632, 0x8, 0x2, 0x40000333}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES64=r7], 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m11.201822425s ago: executing program 0 (id=254): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0x3cfa, 0x2, 0x0, 0x20002a1}, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=@newtaction={0x894, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffc, 0x814, 0x6, 0x1000, 0x0, 0x6, 0x7f, 0x500, 0x405, 0x6, 0x3, 0x8, 0x3, 0x401, 0x7, 0x3, 0x7, 0x7, 0xf, 0x9, 0x1, 0x3, 0x9, 0xea3, 0x1, 0x97, 0x7ad, 0x200, 0x7fff, 0x5f000000, 0xbe33, 0x1, 0x6, 0x101, 0x2, 0x1, 0x3, 0x8001, 0x4, 0x0, 0x3, 0x8, 0x8, 0x36, 0x200, 0x3, 0x1, 0x101, 0x5, 0xfffff6ee, 0x4, 0x7, 0x5, 0x6, 0x2, 0x80000001, 0xfffffff8, 0x3, 0x80000001, 0x2, 0x3, 0x10d2, 0x8, 0x7, 0x2, 0x0, 0x0, 0x1, 0x7930000, 0x3773, 0x1000, 0x1ff, 0x9, 0x8, 0x800, 0xff, 0x8, 0x0, 0xd, 0x3, 0x0, 0xd5fa, 0x1, 0x401, 0x3, 0x1, 0x4, 0x3, 0x7, 0x80000000, 0x9, 0xffff, 0x6, 0x6, 0xe, 0xe256, 0x800, 0x5, 0x0, 0x401, 0x8, 0x1ff, 0x4, 0x1000000, 0x0, 0x6, 0xaae4, 0x3, 0x5, 0x80000001, 0x380000, 0x100, 0x8, 0x375a, 0x4, 0xb, 0x4, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x9, 0x2, 0x6, 0x7, 0xed1, 0xd, 0xff, 0x5, 0x2b6, 0x1000, 0xffff, 0x7, 0x8, 0x5, 0x9, 0x6, 0x800, 0x6, 0x80, 0x5, 0x0, 0x40, 0x6, 0x8, 0x2, 0x60, 0x1, 0x3ff, 0xc, 0x7, 0x400, 0x0, 0x1, 0x5, 0x9b, 0x4, 0x7, 0xb, 0x3, 0x17, 0x8, 0x6, 0x8, 0x9, 0x9, 0x1, 0x4b11, 0x0, 0x80000001, 0x8, 0x8001, 0x77658106, 0xd, 0x100, 0x9, 0x1, 0x101, 0x4, 0x0, 0x81, 0x8000000, 0xe2, 0x9, 0x80000000, 0x7f, 0xb2e, 0x5, 0x3, 0x8, 0x4a2, 0x400, 0x5, 0x3ff, 0x7fff, 0xd0, 0x7, 0xffffffff, 0x2, 0x40abf83, 0x80000, 0x5, 0x9, 0x2, 0xb, 0x7fffffff, 0x9, 0x5, 0xfffffff9, 0x3448, 0x6df, 0xdd, 0x4, 0x1, 0x401, 0x6, 0x2, 0x59, 0x727990a7, 0xc, 0x6, 0x0, 0x3, 0x6, 0x4c, 0x3, 0x4, 0x6, 0xfffffe01, 0x3, 0x100, 0xb, 0x2, 0xe, 0x6, 0x8, 0x9, 0x9, 0x2, 0x7e6e, 0xfffffffb, 0x6, 0x7f4db159, 0x0, 0x3, 0x0, 0x3, 0x6, 0x7, 0x1000, 0x7, 0x6868, 0x4, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0xfffffff1, 0x50a8222b, 0x2, {0x1, 0x2, 0x8, 0x8, 0x6, 0x2}, {0x4, 0x1, 0x8000, 0x10, 0x3908, 0x5}, 0x2, 0xffffffc0, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x0, 0x7313199c, 0x38e800, 0x49c6, 0x3, 0x80000001, 0x6, 0x50a7, 0xfffffe01, 0x4b38, 0x7f, 0x75fe, 0xa0, 0x2, 0x3, 0x3, 0xd, 0xffffffff, 0x5, 0x2, 0x5, 0x3, 0x7, 0x9, 0x5, 0x5, 0x4, 0x30000, 0x3, 0x0, 0x5, 0xc18, 0x1, 0x8, 0x8, 0x0, 0x1, 0x9, 0xb, 0x101, 0x6, 0x101, 0x4, 0x4, 0x3, 0x40, 0x4541, 0x2, 0x401, 0x1, 0x0, 0x101, 0x4, 0x0, 0x9, 0x3, 0x9, 0x7fff, 0x8000, 0x4, 0x6bf, 0x80, 0x7, 0x1, 0x2, 0x500000, 0x3ff, 0x5, 0x2, 0x85, 0x5, 0x8, 0x5, 0x4, 0x4, 0x8, 0x7, 0x2, 0x7, 0xc0a, 0x7, 0x8d2, 0xcac, 0xa8, 0x3, 0x1, 0x4, 0x4, 0x2, 0x0, 0x0, 0x80000001, 0x81, 0xff, 0xfffffff9, 0x81, 0x1, 0x8, 0x5961, 0xfffffffa, 0x2, 0x8c9, 0x4, 0x7fffffff, 0x6, 0xe263, 0x3, 0x3, 0x200, 0x8, 0x58d, 0x5, 0x6, 0xfffffffc, 0xffffffff, 0xfff, 0xfffffffd, 0x8, 0x9, 0x2, 0x1, 0x2, 0x2, 0x7, 0x1, 0x5, 0x4c, 0x800, 0x7f, 0x2a, 0xaf9, 0xa, 0x10000, 0x400, 0x200, 0x7, 0xffffffff, 0x7fff, 0xc8ec, 0x7, 0xc, 0xfff, 0x8, 0xffffff7f, 0x1, 0xffffffff, 0xffff0001, 0x401, 0x4, 0x7fff, 0x4, 0x1, 0xc7, 0xdab4, 0x4317dd28, 0x2, 0x8, 0x3, 0x4, 0x0, 0x7, 0x9, 0x3, 0x8, 0xfffffffc, 0x0, 0x7, 0x4e3, 0x7, 0x1ff, 0x8001, 0x4d2, 0x8, 0x10000, 0x5, 0x0, 0x1, 0x0, 0x4, 0xffff, 0x3fe, 0x6, 0x5, 0x4, 0x4, 0x100, 0x2, 0x10, 0x2, 0x77a3, 0x8, 0xdd, 0x3, 0x100, 0x10, 0x9, 0x1000, 0x2, 0xa, 0x8, 0x17, 0x10001, 0x7ff, 0x81, 0x6, 0x37, 0x4, 0x79, 0x80000000, 0xff, 0x1, 0xc3f0, 0x1, 0x401, 0x3, 0x2, 0x8657, 0x5, 0x0, 0x8, 0x0, 0x8000, 0x7, 0x3, 0x1ff, 0xfffffffd, 0x1, 0x5, 0xffff, 0xc4, 0xffffffff, 0x5, 0x3, 0x1, 0x3ff, 0x3, 0x1, 0x3, 0x3, 0xdc, 0x9, 0x4, 0x7b8d, 0x3, 0x9, 0x30c, 0x547, 0x2, 0xe, 0x9, 0x401, 0xaa, 0x5, 0x8, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0xe32fa770345bf4de}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x1, 0x2000402) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000080)={0x80, 0x2000002b, 0x7, 0x7, 0x9, 0x2}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x807, 0x4, 0x6, 0x3}) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x10, 0xffffffffffffffff, 0xb3c13000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003306626f6e64300000000000000000fe0000f5c9c022b1620c2140a879520073d6e7270c468750cd887dadc9ea69c3068d03af3307428195ff85f68e50cde0504354a228e3b348a4bb34b4f1d329da0b750000fb9f3b27fec7acf54439d8cbc57847060bea08ab13043384e99867b2c678dd67c1ec9bc5b8721d89b7701d552b35f2d1fd2f128cb1d4e6d10426552da934ac9e12cdfb3a644dc744ae22924a185319aab1638c7ed2536e38b8edcd87450c9ee7eb1bf4f27c8d6aa17f24567bfaf564617bf13f"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 2m10.638248303s ago: executing program 0 (id=258): msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000020c00028005000100000000009c0001802c0001800a0003"], 0xd4}}, 0x0) 2m10.585611816s ago: executing program 32 (id=258): msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000020c00028005000100000000009c0001802c0001800a0003"], 0xd4}}, 0x0) 1m56.921129729s ago: executing program 5 (id=406): syz_mount_image$vfat(&(0x7f00000022c0), &(0x7f00000008c0)='./file0\x00', 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c9, &(0x7f0000002300)="$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") r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r0, @ANYBLOB="01002cbd0800fbdbdf2501"], 0x34}}, 0x4) 1m56.746906007s ago: executing program 5 (id=407): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000f00)={&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/224, 0xe0}], 0x1}, 0x1b96391a320db264) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2005c040}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000300)=""/226) 1m56.601924635s ago: executing program 5 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x20004814) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x200, 0x18064, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x100000009}, 0x0, 0x400000, 0x20}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = dup(r5) bind$inet(r6, &(0x7f0000002700)={0x2, 0x4e21, @private=0xa010101}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000003f030101040003000000000000000000003c0001800c00028005000100010000002c000180a1f9315719a40713dd0dac721514000300fe8000000000000000000000007286e66f566c324c0000"], 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000000)={0x264}, 0x0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) r11 = syz_open_dev$rtc(&(0x7f00000010c0), 0x40000000000, 0x480000) ioctl$RTC_PLL_SET(r11, 0x40207012, &(0x7f0000001100)={0x3, 0x8001, 0x80, 0x8, 0x5, 0x3, 0x4d2}) write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0x6000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = dup(r12) write$UHID_INPUT(r13, &(0x7f0000001180)={0x9, {"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", 0x1000}}, 0x33e) 1m56.162118577s ago: executing program 5 (id=416): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x94028, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_|\x00odes=5,inode32,\x00']) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x7f}, 0x100b28, 0x6, 0x0, 0x6, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000002c0)) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004080) setfsuid(0xee00) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) setxattr$security_capability(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v1={0x1000000, [{0x5, 0x3}]}, 0xc, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/schedstat\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/136, 0x88}], 0x1, 0x3, 0x404) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fddbdf250f00000005002d030600000005002e000100000008000300", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x8, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x45010) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000003c0)={0x5}) 1m55.861234272s ago: executing program 5 (id=417): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet6_tcp_buf(r5, 0x6, 0x8, 0x0, &(0x7f0000001040)) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @local, @local, {[@routing={0x32, 0x0, 0x1, 0x1}]}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @local, @local, {[@routing={0x32, 0x0, 0x1, 0x1}]}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x2}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x2}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) sendmmsg(r9, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x408e, &(0x7f0000000240), 0x3, 0x45c, &(0x7f00000010c0)="$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") r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r12, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000000) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8bc6, 0x6}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x4, 0x6, 0x0, 0x41}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x22315}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 1m55.305824481s ago: executing program 5 (id=425): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20) splice(r4, 0x0, r1, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000240)=""/174) 1m55.264930762s ago: executing program 33 (id=425): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20) splice(r4, 0x0, r1, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000240)=""/174) 1m6.074055748s ago: executing program 2 (id=947): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0xb, &(0x7f0000000c40)=ANY=[@ANYRES8, @ANYBLOB="87aa34833a8b051bb054833aa835b57321b7cfeff6547436b139262d8fa8653a765d2274fb793c91ccfd3627b6f94cbf82bb70958588d0417d98c906f9906daf4402bcf6d335b619cea6d9a4a96812ac42fc345b7dc672c9f6112da94da0d57faad7f026c5cd9eafef9ca7251dcf5c9e6504ad006880fe1465dc4dceac67c48c5ad80740c422b01f6f2d3e6aa79ceebe79e45c5a2ebde353658c7047f4f8ce0c77b740d8c6b1ced477bd25ef50ad8e3ae5cdbd86d197ff95e2cb14570bbe", @ANYBLOB="d6325aab5abf9a572ed83a29d62b1f8ab8a68b8a25f0db7351526d11c01f7694f2036b54c65264bf2f302771b18611e7ec93f819355dee646cad43dc59b3fed60e2bfe2464e3650034dbd7c4c25ed7c8d60a744bd4fafd044701dbd8cacba86e018f220a4a762beee6aee081c510c746453e6fcb560bf7aca73ef32e2704506b1df199ce38ea17ce6e7d5533689815c0bf8389f7c7291fa49b945cdd7018c400b479114fed974247962b006885401e20a2747c8a2aed68eec8fa91d3ca95cd086cffc2879064943a4e", @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x10001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4800000000000009, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11f9a, 0x5, 0x98, 0x2, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="55b187a22b2a64f2f056060d2c80d9688dc2fb0eef618c3ac6c0ee53197fa712932d8537f3374b299df9ec1caf383d131b85ff8f70af89274cdacbb66f4440d5a2d84ae3a65389590773400543362d2e5dcbbeedece44e2ead0811b1ac64ca2d3d48971eade1b390c442cc5db10aa2f201de80b2dc92b6462e45756b84f5954c39fb827a"], &(0x7f0000000980)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x109822, 0x7ff, 0x6, 0x0, 0x40, 0x4, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bf0000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/104}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x1, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd32, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xe}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x0, 0x1, 0x4, 0x1, 0x4, 0x5, 0x8, 0x7, 0x7, 0xc, 0x9, 0x4, 0xc, 0x3, 0x4], 0x0, [0x0, 0x2, 0x6, 0x6, 0x6, 0x7f, 0x7, 0xff1e, 0x8, 0x6, 0x6, 0x3, 0x30, 0x9, 0x4, 0x5], [0xe9, 0x3, 0x3, 0x2, 0x10, 0xfff8, 0xf89b, 0x2427, 0x1, 0x9, 0x78, 0xbd, 0x7f, 0x4, 0x6, 0x3]}}}}]}, 0x88}}, 0x40000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 1m5.189784573s ago: executing program 4 (id=952): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="f79ce93a8be24e0b732cf10fca", 0xd}], 0x1) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac14143f"], 0x54}}, 0x4000000) 1m5.168165704s ago: executing program 2 (id=953): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sync_file_range(r0, 0x4, 0x3, 0x5) socket(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x40000029) fcntl$notify(r2, 0x402, 0x1c) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x30) open(&(0x7f0000000280)='.\x00', 0x0, 0xd0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r5 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m5.095050317s ago: executing program 2 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000340)='GPL\x00', 0x404, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x800, &(0x7f0000000440)=0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4f}]) 1m4.989291753s ago: executing program 2 (id=959): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x300c001, &(0x7f0000000340)={[{@i_version}]}, 0x2c, 0x516, &(0x7f0000000740)="$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") r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioperm(0x40, 0x9, 0x7f) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x404, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r2, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000000000001000000000000000b02000000006100302e610061610061"], 0x0, 0x58}, 0x28) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', 0x10820, &(0x7f00000009c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x25}, 0x20) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xc71, 0x2}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x140f, 0x2, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc9d2afd3c3e449d4}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) fallocate(0xffffffffffffffff, 0x3, 0x8dc, 0xfffffffb) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) 1m4.675213629s ago: executing program 2 (id=962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1, 0x7, 0x6}) write(r2, &(0x7f0000000240)="b62e875666b4f756963f16", 0xb) r3 = socket(0x22, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffb6) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5716, 0x80, 0x0, 0x1}) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r11, r12, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r10, r5}, 0xc) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r13, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f00000004c0)={'syztnl0\x00', r7, 0x8000, 0x1, 0x5, 0x63, {{0x11, 0x4, 0x1, 0x4, 0x44, 0x64, 0x0, 0x1, 0x2d, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ssrr={0x89, 0x2b, 0x1e, [@local, @multicast2, @private=0xa010102, @local, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x22}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000001a40)={0x504, 0x0, 0x4a7c82d9651d4e6d, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0xfa, 0x3, "e577326515bd392a7ada55df18e91ab72f3954b25672fcd47ab2a7d589c30c1f29c04069e06adbdd7afdd76b9b334908f707b8e780a82c72f55b9bdf86b5e7bfd9cf631bbd34b79e54bfc1e8f6e1cfc0ef53d1f0687dd462b19529086fb2c38689676fa94e39d71d84d155b2eabdf608cfc8e9aa06b5bb1fbd526c8e4a9a87e5952b8f7cf95de36e7433a7ef874215324e049d44d341ddabe57d1175620cfd006f7a2ee8eb0dec2feef75063fe4332be707359fe5530b58fd6d62df551d8b31f2d95b5895d28f59dd258d6002e7f65d355de9979b11050678bd711570321f08668d3193474f8dcac40e2739db74b32be08e12eed1cc0"}, @ETHTOOL_A_WOL_MODES={0x16c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcc, 0x5, "2ed452d822fce09e48d78250981f75031782fe36102b170f0a174e5b6d0ae825a985170ceb8ebca27dff13b110d0fdf0faf131fdafb887f9b8e709b41efd36a13c2e5377d7fae9b8fb36db7b5655ebdfa37705a4fd9aec5872f0399724e065a598ea0f10246d3c8b6607ac4900ba2c67d492a157cca7197abd7a46f6a755645bff425840f1faad98a5f8b02dbeeb3720dca00b1acbb9292f60754aa69f9ed7f5bc150876e4b6b6f24360545f0a1380330e3a283bb211ecb2b7e9a41f328cc669d5189a5ef5f6d58d"}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "70adce484823b483968fddfb591ce33665c27a42c6ff452dca8aaaa00145a25c75357eced7a5a49d3eff0d34e07c5c113ff9e0436f12eeaa4b463f8a5d2b281a48affc4b1ac30a5fe404e7e7e5f8ad49a2195320cfa992e9dd24be797d2e2a6c07fe7de235b40018c7f1287a485964570bf2a9a23de229b15c1014285c196a58cb6f4ff62f20094535ab0aedfdf3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x154, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',%..\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fd/3\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x72, 0x5, "210b12299e10e716aba1f9254495e55a6d0a22e160d1074c59ecf43b1892c5bc8d48a3d89a91013ef63994e29bd75cf06e3ffe7c083e1733624f36784900cae5d27eb69451895dc7e4cdc4a605989e7d3f91c9dc40ef47f8ce9ee4613490fd3e2b1afa0bb2098bef28263c3978ad"}, @ETHTOOL_A_BITSET_MASK={0x47, 0x5, "6214d31b5ebca6c42a8a52aeacbfe6d1b6d34b149e199127c244184d9553e3f766d6fbd623f25e9f434ab3a84496eecea4cf8c8ff3ebfb620cc55b8a5aed26741ed97f"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x3, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0x93, 0x3, "6ada940b9018ec5d04960535ed9f4bf8546e97fb0e6117eb9752a21905b0c41422a7cdd238e9d5b6f01b60c7a6ea784ef75b8147272fb2403bdc9186a5247ec8a8bece139ae3a196e26fd22b2c4986a03298e3c40b891149395d10ae353dc212c36ebfd59fd36b6a26b05be79e23925b0ee14dd58a5ff5624bbf40c0caa2ed2fd37ecdd08d838187a3c6853696d42f"}]}, 0x504}, 0x1, 0x0, 0x0, 0x24004000}, 0x4040010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x9, [{0x4, 0x1, 0x3}]}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1ff}}, @enum={0x3}]}, {0x0, [0x2e, 0x61, 0x5f, 0x5f]}}, 0x0, 0x72, 0x0, 0x1}, 0x28) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m4.518153407s ago: executing program 2 (id=965): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sync_file_range(r0, 0x4, 0x3, 0x5) socket(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x40000029) fcntl$notify(r2, 0x402, 0x1c) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x30) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r5 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m4.517323737s ago: executing program 34 (id=965): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sync_file_range(r0, 0x4, 0x3, 0x5) socket(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x40000029) fcntl$notify(r2, 0x402, 0x1c) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x30) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r5 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m4.277999369s ago: executing program 4 (id=972): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x41, 0x7}, 0x4) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000040000000000050002000000005f2e6161302e5f80567ee60122548863375f00"], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) 1m4.276552169s ago: executing program 4 (id=974): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r1 = open(&(0x7f00000000c0)='./file0\x00', 0x188843, 0x198) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f0000000040)={[{@noblock_validity}, {@abort}, {}, {@nombcache}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@nobh}]}, 0x2a, 0x645, &(0x7f0000000600)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8004c}, @generic={0xff, 0x8, 0x0, 0x404, 0x5}], &(0x7f00000000c0)='GPL\x00', 0x10000, 0x0, &(0x7f00000003c0), 0x41100, 0x2b, '\x00', 0x0, @fallback=0x28, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x2, &(0x7f0000000240)=[r0, r0], &(0x7f0000000440)=[{0x4, 0x3, 0xf, 0x6}, {0x2, 0x2, 0xf, 0x6}], 0x10, 0x2}, 0xfffffffffffffd46) bpf$PROG_BIND_MAP(0x23, &(0x7f00000009c0)={r2, r0}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) gettid() pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x8]}, 0x8}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m2.630729802s ago: executing program 4 (id=984): socket$kcm(0x10, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b"], 0x3, 0x240, &(0x7f0000000500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) getdents64(r1, &(0x7f0000000180)=""/53, 0x35) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, 0x0) ptrace$cont(0x21, r2, 0x80000001, 0x4) wait4(r2, 0x0, 0x8, &(0x7f00000002c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e", 0x2a, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r6, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b", 0x33}, {&(0x7f0000000040)="2ae1fa3e474138b2e70a23f9ae1eb1530a65fd11c244e47196fe10dec15f78a052a71852d5b0193a1a2556df3ff5cf58181849e351e35969f5cac92606bfe7c72685b128d25378589356ca1fc78b2c10f35eb42cd604e2693109228d6cbf4927d44fbd8510fed1ce4952aacb0044c848c2bc45b8ca601421c9fbf6b2eccd7cec8864902214181967d18ff4fbdd38fe6cf3c6299a6d3ac174e79141f740a6ed44667491f1dc", 0xa5}], 0x2}, 0x20000880) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r7, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d350887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b3366959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) ioctl$VT_ACTIVATE(r7, 0x5606, 0x6) 1m1.937061788s ago: executing program 4 (id=989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x284402, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\x00\b\x00'}) 1m1.575209296s ago: executing program 4 (id=993): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r1 = open(&(0x7f00000000c0)='./file0\x00', 0x188843, 0x198) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f0000000040)={[{@noblock_validity}, {@abort}, {}, {@nombcache}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@nobh}]}, 0x2a, 0x645, &(0x7f0000000600)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8004c}, @generic={0xff, 0x8, 0x0, 0x404, 0x5}], &(0x7f00000000c0)='GPL\x00', 0x10000, 0x0, &(0x7f00000003c0), 0x41100, 0x2b, '\x00', 0x0, @fallback=0x28, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x2, &(0x7f0000000240)=[r0, r0], &(0x7f0000000440)=[{0x4, 0x3, 0xf, 0x6}, {0x2, 0x2, 0xf, 0x6}], 0x10, 0x2}, 0xfffffffffffffd46) bpf$PROG_BIND_MAP(0x23, &(0x7f00000009c0)={r2, r0}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) gettid() pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x8]}, 0x8}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m1.575045556s ago: executing program 35 (id=993): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r1 = open(&(0x7f00000000c0)='./file0\x00', 0x188843, 0x198) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f0000000040)={[{@noblock_validity}, {@abort}, {}, {@nombcache}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@nobh}]}, 0x2a, 0x645, &(0x7f0000000600)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8004c}, @generic={0xff, 0x8, 0x0, 0x404, 0x5}], &(0x7f00000000c0)='GPL\x00', 0x10000, 0x0, &(0x7f00000003c0), 0x41100, 0x2b, '\x00', 0x0, @fallback=0x28, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x2, &(0x7f0000000240)=[r0, r0], &(0x7f0000000440)=[{0x4, 0x3, 0xf, 0x6}, {0x2, 0x2, 0xf, 0x6}], 0x10, 0x2}, 0xfffffffffffffd46) bpf$PROG_BIND_MAP(0x23, &(0x7f00000009c0)={r2, r0}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) gettid() pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x8]}, 0x8}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3.399451117s ago: executing program 7 (id=1604): socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x54) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d66000008000000182300001efb35bf23e9869450d0d84f", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000002c0)='GPL\x00', 0x45, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xd9) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x480d0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x6, 0x400000000, 0x11002, 0x2, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r2, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r2}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000000c0)={r3, 0x4, 0xec5, 0x8}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) 2.954140879s ago: executing program 6 (id=1607): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x56a, &(0x7f0000000800)="$eJzs3c9rHFUcAPDvbLL9rU2hFBWRgAcrtZsm8UcFD/XkQYsFvdclmYaSTbdkN6WJBduDPUvxIhbEu3j2WPwHPPg3FLRQpAQ9eInMZnabH7vJNt0mW/fzgSnvOzO7b97OfF/f7NvNBjCwRrN/ChEvR8Q3ScTRiEjybcORbxxd3W/50Y2pbEliZeWzv5LGflncfK7m4w7nwUsR8evXEacKm+utLS7NliuVdD6Px+pzV8dqi0unL8+VZ9KZ9MrE5OTZdyYn3n/v3Z619c0L/3z36b2hPDp2J4lzcSSP1rbjKdxcG4zGaP6aFOPchh3He1BZP0narv1514+DJzOU53kxsj7gaAzlWQ/8/30VESvAgEqeOP9/Lz6bIwF2V3Mc0Ly379F98HPj4YerN0Cb2z+8+t5IHGjcGx1aTtbdGWX3uyM9qD+r45c/797Jlujd+xAA27p5KyLODA9v7v+SvP/buTNd7LOxDv0f7J572fjnrXbjn0Jr/BNtxj+H2+TuTmyf/4UHPaimo2z890Hb8W9r0mpkKI9eaIz5ismly5U069tejIiTUdyfxVvN55xdvr/Sadva8V+2ZPU3x4L5cTwY3r/+MdPlevlp2rzWw1sRr7Qd/yat85+0Of/Z63GhyzpOpHdf67Rt+/Y/Wys/RrzR9vw/ntFKtp6fHGtcD2PNq2Kzv2+f+K1T/Xvd/uz8H9q6/SNJNOdMK+l87cnr+OHAv2m05pPXW9f+6P7635d83ijvy9ddL9fr8+MR+5JPWusLzfUTjx/bjJv7Z+0/+frW/V+76/9gRHzRZftvH//p1U7b+uH8T7c9/62725Fk7Xz9Dgr3P/7y+071d9f/vd0onczXdNP/dXuAT/PaAQAAAAAAQL8pRMSRSAqlVrlQKJVWP99xPA4VKtVa/dSl6sKV6Wh8V3YkioXmTPfRNZ+HGM9nDJvxxIZ4MiKORcS3QwcbcWmqWpne68YDAAAAAAAAAAAAAAAAAABAnzjc4fv/mT+G9vrogGfOT37D4No2/3vxS09AX/L/Pwwu+Q+DS/7D4JL/MLjkPwwu+Q+DS/7D4JL/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FMXzp/PlpXlRzemsnj62uLCbPXa6em0NluaW5gqTVXnr5ZmqtWZSlqaqs5t93yVavXq+EQsXB+rp7X6WG1x6eJcdeFK/eLlufJMejEt7kqrAAAAAAAAAAAAAAAAAAAA4PlSW1yaLVcq6byCwo4Kw/1xGAo9LmzsKT7ypzsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2DP/BQAA//8dejCy") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0xbb, 0x1, 0x4}]}}}], 0x18}}], 0x1, 0x0) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f0000000480), 0x0, 0x0, 0x1000}], 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xfd44) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xfc}}, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x6000) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r7 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r7, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nouid32}, {@nodioread_nolock}]}, 0x2, 0x5ad, &(0x7f0000000180)="$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") r8 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x2b, 0x3, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sendto$inet(r8, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r8, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x440201) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f00000017c0)={0x6, 'syzkaller0\x00', {0x9}, 0x8}) 2.412099487s ago: executing program 7 (id=1618): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8000, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x3c}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) sendto$inet6(r1, &(0x7f00000004c0)="1def5e3a8a2986f0ddfc87a94e61dd6f72a312236f79b678f744cf18b94c9236d7775a69f046f699ba75b82e268e3bc07173090e7636ce091682e902f8e700955da9b0e0a4dcdb725458cfa9f396f6ad6873d939", 0x54, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) timer_create(0x2, &(0x7f0000000700)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000740)=0x0) timer_settime(r8, 0x1, &(0x7f0000000780)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000007c0)) splice(r3, 0x0, r0, 0x0, 0x810002, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.273426954s ago: executing program 3 (id=1622): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80800) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'bridge_slave_1\x00', {0x2, 0x4e20, @multicast1}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0xe, 0x0, 0x0}) 2.180315269s ago: executing program 3 (id=1625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\x00\b\x00'}) 2.16489511s ago: executing program 8 (id=1627): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.147648781s ago: executing program 8 (id=1628): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noload}, {@stripe={'stripe', 0x3d, 0xff}}, {@data_err_abort}, {@dax_always}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) r2 = openat(r1, &(0x7f0000000980)='./file1\x00', 0x230000, 0x31) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000940)=ANY=[], 0xfe37, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000000d, 0x19808, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4}, 0x2000, 0x10000, 0xd495, 0x6, 0x8, 0x80, 0x1, 0x0, 0x20000000, 0x0, 0x20000005}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000002c0)={@remote, @initdev}, &(0x7f0000000300)=0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6d23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 2.061963695s ago: executing program 3 (id=1630): setitimer(0x2, &(0x7f0000000080)={{0xfffffffffffffffd, 0x4}, {0x4, 0x8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) unshare(0x2c040480) r4 = getpid() r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r5, &(0x7f00000000c0)=r4, 0x12) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x4000000}, 0x14}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x105, 0x1800}], 0x2aaaa817, 0x0) getpid() unshare(0x8000000) 2.055968865s ago: executing program 3 (id=1631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10050}, 0x4) 1.977231539s ago: executing program 3 (id=1632): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xaee, 0x0, 0x81, 0x7a7, 0x2, "0d418107009188b791e15b1b6f6ff88c6b00", 0xfffffffe, 0x100022}) r1 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000140007800800114000000000050015000c0db7490500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000045c0)=@ethtool_gstrings={0x1b, 0x3}}) r5 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00), 0x0, 0x479, &(0x7f0000000a40)="$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") r6 = socket$kcm(0x10, 0x2, 0x0) getdents(r5, &(0x7f00000002c0)=""/119, 0x77) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0xd, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.841920826s ago: executing program 8 (id=1634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x80000001, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x92}, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) io_uring_enter(r5, 0x3514, 0x9141, 0x69, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000047"], 0x50) close(0x3) 1.811547838s ago: executing program 6 (id=1636): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x2, 0x80805, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r8, 0x100}], 0x1, &(0x7f0000000200), 0x0, 0x0) unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) 1.703330253s ago: executing program 1 (id=1639): r0 = socket(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@generic={0x0}, 0x18) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000002c0)) setreuid(0xee01, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000003c0)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0x7, 0x1, 0xf06, 0xa10c, 0xb4, 0x7f, 0x8}, 0x9c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x6b59bf0d, 0xfff, 0x20000001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8410, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x6}, 0x8000, 0x10100, 0x40000, 0x6, 0xe8a, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x875b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_create(0x7, 0x800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee00) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) keyctl$session_to_parent(0x12) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000029000000040000000c000000000000002ab84546117e421fd5180000000000000029000000040000000600000000000000"], 0x30}, 0x440e0) 1.505145743s ago: executing program 1 (id=1640): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x9) r1 = syz_io_uring_setup(0x40e4, &(0x7f00000019c0)={0x0, 0xcfca, 0x1404, 0xfffffffd, 0xe3}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) 1.386229639s ago: executing program 7 (id=1641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\x00\b\x00'}) 1.324790902s ago: executing program 8 (id=1642): gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @local, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2c10", 0x2}, {&(0x7f0000000240)="466f7e6133690b92ced63423e65920a733aa2d1d00d1700bc5140a149285e6f85dd6f21ace58b2b64e332c83bd3e8e359218684aeafc21656df230a02f0b44621efbc64bec7d1bcb76ef0e610accabedc37fd00e85d571e68022d2cb26fcec3cb22dfae812a6ace66faecd4c3f0f39b05de57847ba8334ab7e7f962635aaa5b23e376fec0bc72b4fcc8aa87cba7b60", 0x8f}], 0x2, 0x0, 0x0, 0x2c}, 0x44804) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x9232, 0x80, 0xfffffffe, 0x3e}, &(0x7f0000000100), &(0x7f0000000300)) set_mempolicy(0x1, &(0x7f0000000dc0)=0xffffffffffff0001, 0xffffffff) set_mempolicy(0x1, &(0x7f00000001c0)=0x5, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xea, 0x1, 0xfd, 0x0, 0x0, 0x7, 0x872, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x2, @perf_bp={0x0, 0x1}, 0x106200, 0x10003, 0x8020da, 0x9, 0x5, 0x20005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0xb) socket(0xa, 0x3, 0xff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000b80)={0x7f, 0x8, 0x0, 'queue0\x00', 0xfffffffd}) 1.16464951s ago: executing program 1 (id=1643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x304}, "626143c5ad8acb0b", "8b7c9520668e59391aa6982641093574", "2c847368", "4dd216ef55a43de1"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "6729b24948f89c4f", "7578a8e5250b61f03a22d38bc1c3ecac86b74e7720dbac48c702353144bffdd7", "58d38747", "5ec9ffeb8416d2b4"}, 0x38) 1.073196235s ago: executing program 7 (id=1644): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000180)="139001", 0x3}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff020000000f0000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xfc}}, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000380)=@base={0x8, 0x4, 0x4, 0xbf22, 0x150, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000004000000000000000000001fe80000000000000008000000000000000000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000000000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a000a01010100000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000ac1414340000000000000000000000003c040000002e000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) acct(0x0) unshare(0x64000600) 939.508202ms ago: executing program 8 (id=1645): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x105d30, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x58cd, 0x10000, 0x3, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd, 0xfff, 0x0, 0x6}) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x6c, r5, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x20}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @mcast1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000892}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) 921.828332ms ago: executing program 6 (id=1646): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e80), 0x82103, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000ec0)={0x4, 0x4, 0x7, 0x200, 0x3ff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019080)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x10, 0x4, [{0xa, 0xffff3804}]}]}}, 0x0, 0x2e, 0x0, 0x0, 0x10}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01005ffc0000000000040000000000000000020000000000f122"], 0x0, 0xfc5f}, 0x28) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x2a020400) getsockopt(r3, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a31f500000008000440000000000900010073797a30000000000800034000000001"], 0x98}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9, [{0x4, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x19, 0x1, "020000000400012600040000"}, {0x5, 0x1, "00f500000000"}]}}}}}}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x1d8, 0x1d8, 0x0, 0x1d8, 0xe8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [0xff0000ff, 0x4de325748c9179dc, 0xffffffff, 0xff000000], 'wlan1\x00', 'wlan0\x00', {}, {0xff}, 0x6, 0x0, 0x2, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e21}}}, {{@ipv6={@remote, @local, [0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff], 'veth1_macvtap\x00', 'erspan0\x00', {0xff}, {}, 0x87, 0x7f, 0x4, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1, 0x33, 0x23, 0x8}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'pimreg\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x49, 0x1, 0x54}, 0x0, 0x208, 0x248, 0x0, {}, [@common=@rt={{0x138}, {0x80000000, [0x64b3d7eb, 0x4], 0xd3, 0x21, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @private1, @mcast2, @private1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x10}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xffffffff, 0x7, 0x76be0f9b, 0x7, 0x8, 0x4, 0x733]}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5c, 0xf7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x653afb6a7eb5282b) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000f00)={'erspan0\x00', 0x78}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, 0xfffffffffffffffd) r9 = syz_usb_connect(0x1, 0x33e, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xdb, 0x24, 0x23, 0x8, 0x2c7c, 0x191, 0x1179, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32c, 0x1, 0x3, 0x2, 0xc0, 0x1, "", [{{0x9, 0x4, 0x57, 0x8, 0xa, 0xff, 0x0, 0x0, 0x5, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0xfc, 0x1005}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x1, 0xd1, 0x5}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0x66, 0x80, "7185"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x7, 0x1, '!', '\t'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0x4, 0xb, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x7, 0x40, 0x4, 0x3c}]}], [{{0x9, 0x5, 0x6, 0x8, 0x400, 0xd0, 0x4b, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81}, @generic={0xfa, 0x21, "cd2398ef4d1e1d94923907c64b74c15d0ca2ac8a51f9d76a46ffd4528c99137dbd9f32fffe1fc47036bd7225fd263f96e517852be43c74c41328dd85fec4003b4d05510539cb6b1e34f560888e51af9550acb1964e872b8cec0ca1088fbc95cdf9bb9e38c6ef3134ef271181095fa9c2b5ad8823a57f34ca3b98c422f1730a61a7023f082e2f01aef1cb30cfe1da8ed8062a03a7362e87f69c6b2e7684f5bf54b21845d7bf5f78a1e310432ae8aa39c8a42bfeb4a3e88d3a4a96df3e2f45898ebb976233f5d92221b50619e46bbe037a5e870e27bb6d7a2f9a021196f3cb5357a4af1a24519a6893b3a3fcbe1b7d38e8d2aef0ac94cf18c1"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x3, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x8, 0x2, 0x7, [@generic={0x1b, 0x9, "4ffe4c0d08360064c64f8c3321282c17c1d9018d51f900f12a"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x0, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8c, 0x4}, @generic={0x9a, 0x23, "0d09846f74d86274382a7657b9a76522197e3575c9706126ab5346685eba492a0902c7235b98f9f22081fc04ad6020e7501408645587eb11e73fd760b8a5778f6797bbf53427e44c97d68f97497d884038539a2132088649c9de3c983c84693b6fd51b50d0290736832f9ea028f60794b04ac96c27553d54de2ac6d75ea90814fe606534018ebbb509c1de54314b93aabf3cd6473125e164"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x4, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xff9d}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x9, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x9f}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xdb, 0x9, 0x7, [@generic={0x6b, 0x0, "fc9c07aacd6d9212c0246eb321e9c0c5dfe434522fba86c5315f3d5be1498c0c5790ee39511b84d083045aae9fa8a5a284e12a5b7f1536f9d860e8931327480690b954695b97679dd0c200eb779a7dc5c6d07424ab67ca1f16f15d39610fb5fcf7b4254d4bb3ff04fb"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x5, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa}, @generic={0x30, 0x6, "847d8514be868acd34bdf2c2f2bb280c2bcfd93d39466b523635b387c3803b33d0ead38e21224f6ee90ef21e264e"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x2, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x4}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x8, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x5}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x88, 0x4, 0x6a, 0x40, 0x1}, 0x3d, &(0x7f0000000180)={0x5, 0xf, 0x3d, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x7, 0xf00f, 0x200, [0xff00ff]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x9, 0x8, 0x1, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x6, 0x1}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x9, 0xf1e, 0x8, [0x0]}]}, 0x8, [{0xbb, &(0x7f0000000380)=@string={0xbb, 0x3, "2685be40bdbcf3e5d177b6bf6461483fb9db6edfc590149a5d09b7d0b4a61c7429d75c34ad9e4f791d5815d69a127a40cb4ecf393ee602b6c70c7d45c50114c77a84dd7b4207d3a44b275892b7abc9b9000927a02b16870f1fba6d5415f6b15ed004f1c600e3e55922d6b2d11ca17f224929a60ef3cdd2f95319b4cfa4a57b304bd4e35a60f7a39bbcd2010b73cd051b979b2bcc3e682fd5f280c932cfb6916ccabc73de3bf8c2c83a6e9276028b6f981b4b6709f830d32f56"}}, {0x7b, &(0x7f0000000280)=@string={0x7b, 0x3, "3384bbe0c7e23d9444bfc4d4ed1d622393aaf4758549e157756811095c10a903c434172597554e54bfbd0dde256cef7ffccb5140dc71bdee16d22f66e79e93b902680422458a8b905d4af6b39ab4fefd47897978a6c1f110a88f8206f4c725a872546665070256fa820c0972ff3fc1c96472eed7624ac8eab2"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x813}}, {0xf, &(0x7f0000000440)=@string={0xf, 0x3, "cf2f3cf63a646fa076e070aa87"}}, {0xbd, &(0x7f0000000480)=@string={0xbd, 0x3, "58c118691d6312b57be84b7489d2c741517091d698a48e937299511b17008a8f4d67c41b48fd5326cb059868dbaf36265bf701bd492eb606aa0bdf83ea7220c7c982178413a988f8a53bc6c5a9ac7475ef904c1556f34354f94af9b8396118044bd098e8117331d8b62da5ffa2f51a1279f8dff681103960d7ce2d04905663d4cdb7227f329057ec235b7ebf0cc01510266964c97e1940a0d4ab7272d114f789ed34104d26a65fadd98e57833a6cb04d9933e34457bc5d3680bdaa"}}, {0xf8, &(0x7f0000000900)=@string={0xf8, 0x3, "30e265d1dca0f2af53d18d081758c82d87cba84d526135718dd7ff76c09ca57fa7eac057b8f9ca4949dc9ed3c05f6ed37b9682cce214065bfe3fd25bb7c13b062930aea184ab1deaf5bf8c37bc5e87d82c141701d6261048e42d32a7afd6d111801cc04f5667ac3fec9c2a6a06c13374b466a99b71b99876717ee0dc327b56ef01752b3140a44ce47e132850a584ff399b4ca6fd5a8be74dd320fecd7e717365747e1730782bdd03620e679e0fafeac0e9093d9798ccf7cc53af68ffc1a02118643b1f06d2c4530a8c798b9dd2aa0b87aea9b1128377d52c13bf2467f28d11dcadac5235a231aeef32219edd42286280c14561134b46"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$uac2(r9, &(0x7f0000000b80)={0x14, &(0x7f0000000ac0)={0x20, 0x26, 0xfffffffffffffffd, {0x53, 0x8, "c5a366215fb68440eff02cab02bda20d1589a5c7ca467beae7a87984d0bda53e3f0eac77b6d7286f498e52bd2ac013580840baf8e735c2e5de6515b92a40286fbb3a31e1f6139d8f748b3503e80151d2d5"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000bc0)={0x40, 0xb, 0x76, "74b5b2ebdbeb346a34214b16b171862456c38248f12cd6081b251e3e6b6595b045c2c4efbeb0e6c88a8e925d64101bbd9e9cc8bc6b73575138b4b7e410eec81cba7075fc5f82b50f3a790d504b130cc16680438747d1da71d748745b3ddd50017a5ab597590f8844cad35131c135252c00cdd24e86ea"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000cc0)={0x20, 0x81, 0x2, "1a57"}, &(0x7f0000000d00)={0x20, 0x82, 0x2, "cc92"}, &(0x7f0000000d40)={0x20, 0x83, 0x1, 'w'}, &(0x7f0000000d80)={0x20, 0x84, 0x3, "6ba74f"}, &(0x7f0000000dc0)={0x20, 0x85, 0x3, "78f7bd"}}) 854.237236ms ago: executing program 3 (id=1647): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 831.203957ms ago: executing program 8 (id=1648): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x11, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0x0, 0xc, 0x4b, 0x9}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x5, 0x18}, 0xc) r1 = socket(0xa, 0x5, 0x5) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x8, 0xb, 0x6, 0x3f5a, 0x1}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYRES32=r3], 0x0) socket$igmp(0x2, 0x3, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sync() r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0xf3, @empty, 0x19f48a9}], 0x1c) r8 = dup(r7) sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x0, 0x2000}, 0x48040) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) 296.011034ms ago: executing program 1 (id=1649): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 218.285098ms ago: executing program 6 (id=1650): close(0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000000105050000000000000a0000000600124000020000440001802c00018014000300fe88000000000000000000000000000114000400ff0200000000000000000000000000010c000280050001000000000006000340000100000000"], 0x60}}, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfe6d, 0x429a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008, 0x6}, 0x98100, 0xccf8, 0x0, 0x1, 0x1, 0x0, 0x101, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = dup(r3) read$char_usb(r4, &(0x7f0000000180)=""/147, 0xfdef) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x6, 0x107fff, 0x10, 0x4, 0x9, 0x200000a4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x4, 0x3, 0x9, 0xff, 0x1002, 0xc, 0x3, 0x3, 0x90000000, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xfffffffc, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xc, 0x40, 0x40bed4, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x0, 0x81, 0x2, 0x17ffff, 0x4003, 0x6f9f, 0x5, 0x9c56, 0x3, 0x403, 0x2, 0x1, 0x9, 0x80000004, 0x7, 0x4009, 0x80000000, 0x4, 0x100002, 0x8, 0xc, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffeffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0x100, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x6, 0x40, 0x20000008, 0x3be, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x3, 0x101, 0x1ff, 0x8]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804820, &(0x7f0000001880)=ANY=[@ANYRESDEC=r2, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000001840)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)) open(0x0, 0x4000, 0x10c) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000001a00)=@req={0x28, &(0x7f00000019c0)={'team0\x00', @ifru_data=&(0x7f0000001980)="0825eb59ce526b4c5aad5bb260bce5577856a9993615f3406dab5b4c5487cf0b"}}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'netdevsim0\x00'}}, 0x1e) fdatasync(r5) 217.970998ms ago: executing program 1 (id=1651): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x0, 0x4c, 0x0, 0xffffffff, 0x9, 0x10000, @value=r0}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x0, 0x4c, 0x0, 0xffffffff, 0x9, 0x10000, @value=r0}, 0x28) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) iopl(0x3) iopl(0x0) (async) iopl(0x0) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a118001500060014ffffff67120800040043000000a80016000a000140063f0d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) (async) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a118001500060014ffffff67120800040043000000a80016000a000140063f0d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000002140)=@assoc_value={0x0}, &(0x7f0000002100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r4, 0xefc}, 0x8) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r4, 0xefc}, 0x8) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8000000000000000, 0x100) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x76, 0x0, 0x801, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x80) 154.210822ms ago: executing program 7 (id=1652): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x80000001, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x92}, &(0x7f0000000280)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) io_uring_enter(r5, 0x3514, 0x9141, 0x69, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000047"], 0x50) close(0x3) 98.550104ms ago: executing program 6 (id=1653): r0 = socket(0x26, 0x5, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) 44.678497ms ago: executing program 1 (id=1654): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x53, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107c42, 0x20) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x8, 0x7ff, 0x4, 0x5, 0x3}}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000d00)="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", 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x621c6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r3, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x3}, 0x90) 2.181839ms ago: executing program 6 (id=1655): setresuid(0x0, 0xee00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) (async) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c040000", @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000001c0), 0x0) gettid() (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000a80)={'veth0_to_bond\x00', &(0x7f0000001040)=@ethtool_flash={0x26, 0x8000, './file0\x00'}}) (async) timer_create(0x1, 0x0, &(0x7f0000000380)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) (async) pipe2(&(0x7f0000001440), 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000c80)={'ip6_vti0\x00', 0x0}) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 0s ago: executing program 7 (id=1656): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x2a, 0x1, 0x9, 0x0, 0x0, 0x7, 0xa841a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x2, 0xca0c, 0xda, 0x0, 0xa, 0x20005, 0xd, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r1 = accept(r0, &(0x7f0000000800)=@sco, &(0x7f0000000380)=0x80) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000000809010127bd7000fddbdf25030000000c003b000a0000000000000063dba8252fa6acebe94669d332d8e61380fdaba46cfd9b0567dd65227bb6a61d68e3a78fbc96cba9b50d834b0e7070f5cd3467147c98d306eca301f582339d2071ce9e1001bceea19836360f3882edde24b8d178895438300fb3b4c425e7072bb99c66fa7477b719f8654eda6b9ea47dcbade31e30d7576bf2279db03fa5c761970f79011e6162bf287df2cac208af0869f8e21e5e"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='status\x00') fchdir(r2) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x32f42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xff, 0x30000000000}, 0x12172, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14bb42, 0x8c) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000880)="0574ff", 0x3}], 0x1, 0x5412, 0xfffffffc, 0x2000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000740)=""/152, 0x98}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000640)=""/99, 0x63}, {&(0x7f00000006c0)=""/74, 0x4a}], 0x4, &(0x7f00000008c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}, 0x2062) migrate_pages(0x0, 0x7, &(0x7f0000000080)=0x46, &(0x7f0000000200)=0x101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000440)={0x8, 0x120, 0xfa00, {0x1, {0xfffffffe, 0x40008, "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", 0x6, 0x3, 0x7, 0x5, 0x5, 0x8, 0x0, 0x1}}}, 0x128) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x468}, 0x1, 0x0, 0x0, 0x4000850}, 0x2400c8c0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) close(0x3) kernel console output (not intermixed with test programs): f282efbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.816617][ T7032] RAX: ffffffffffffffda RBX: 00007f282efbf6c0 RCX: 00007f283052cfce [ 135.816660][ T7032] RDX: 000000000000000f RSI: 00007f282efbf0a0 RDI: 0000000000000003 [ 135.816672][ T7032] RBP: 00007f282efbf090 R08: 0000000000000000 R09: 0000000000000000 [ 135.816758][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.816770][ T7032] R13: 00007f28307e6038 R14: 00007f28307e5fa0 R15: 00007ffeabae3768 [ 135.816786][ T7032] [ 136.047130][ T6808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.064605][ T6808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.096468][ T7039] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1013'. [ 136.132688][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.169944][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.177166][ T6976] bridge_slave_0: entered allmulticast mode [ 136.189113][ T6976] bridge_slave_0: entered promiscuous mode [ 136.302091][ T7059] loop6: detected capacity change from 0 to 256 [ 136.314831][ T7059] FAT-fs (loop6): Directory bread(block 64) failed [ 136.321506][ T7059] FAT-fs (loop6): Directory bread(block 65) failed [ 136.328016][ T7059] FAT-fs (loop6): Directory bread(block 66) failed [ 136.349909][ T6976] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.350150][ T7059] FAT-fs (loop6): Directory bread(block 67) failed [ 136.375930][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.387651][ T7059] FAT-fs (loop6): Directory bread(block 68) failed [ 136.394711][ T7059] FAT-fs (loop6): Directory bread(block 69) failed [ 136.394899][ T6976] bridge_slave_1: entered allmulticast mode [ 136.404661][ T7059] FAT-fs (loop6): Directory bread(block 70) failed [ 136.424899][ T7067] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.438013][ T7067] netlink: 'syz.3.1020': attribute type 1 has an invalid length. [ 136.449619][ T7059] FAT-fs (loop6): Directory bread(block 71) failed [ 136.457970][ T7059] FAT-fs (loop6): Directory bread(block 72) failed [ 136.479657][ T7059] FAT-fs (loop6): Directory bread(block 73) failed [ 136.480295][ T6976] bridge_slave_1: entered promiscuous mode [ 136.538528][ T7059] syz.6.1019: attempt to access beyond end of device [ 136.538528][ T7059] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 136.554640][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 136.554669][ T28] audit: type=1400 audit(2000000527.962:1588): avc: denied { create } for pid=7066 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 136.599142][ T7072] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 136.614778][ T28] audit: type=1400 audit(2000000527.962:1589): avc: denied { write } for pid=7066 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 136.635311][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 136.645113][ T7072] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 136.661600][ T7074] bond0: (slave gretap1): making interface the new active one [ 136.670249][ T7074] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 136.680666][ T6976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.703355][ T224] bridge_slave_1: left allmulticast mode [ 136.709053][ T224] bridge_slave_1: left promiscuous mode [ 136.714962][ T224] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.743815][ T224] bridge_slave_0: left allmulticast mode [ 136.749452][ T224] bridge_slave_0: left promiscuous mode [ 136.757990][ T28] audit: type=1400 audit(2000000528.162:1590): avc: denied { connect } for pid=7081 comm="syz.6.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.762641][ T224] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.882489][ T7095] netlink: 'syz.6.1025': attribute type 10 has an invalid length. [ 136.891437][ T7095] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1025'. [ 136.934998][ T7098] loop6: detected capacity change from 0 to 512 [ 136.955946][ T7098] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.965178][ T7098] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 136.973657][ T224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.991634][ T7098] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 136.999896][ T7098] System zones: 0-2, 18-18, 34-35 [ 137.000215][ T224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.005451][ T7098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 137.029287][ T224] bond0 (unregistering): Released all slaves [ 137.038555][ T7098] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 137.042631][ T224] bond1 (unregistering): Released all slaves [ 137.059799][ T7098] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 137.071998][ T7067] macvlan0: entered promiscuous mode [ 137.077427][ T7067] macvlan0: entered allmulticast mode [ 137.078078][ T7098] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 137.084229][ T6976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.112679][ T6976] team0: Port device team_slave_0 added [ 137.122161][ T6976] team0: Port device team_slave_1 added [ 137.124140][ T7098] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 137.161226][ T7095] bond0: entered promiscuous mode [ 137.166276][ T7095] bond_slave_0: entered promiscuous mode [ 137.171999][ T7095] bond_slave_1: entered promiscuous mode [ 137.178337][ T7095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.186670][ T7095] bridge0: port 3(bond0) entered blocking state [ 137.195449][ T7095] bridge0: port 3(bond0) entered disabled state [ 137.209092][ T7095] bond0: entered allmulticast mode [ 137.214589][ T7095] bond_slave_0: entered allmulticast mode [ 137.220913][ T7095] bond_slave_1: entered allmulticast mode [ 137.253366][ T7087] netlink: 'syz.6.1025': attribute type 13 has an invalid length. [ 137.266644][ T224] hsr_slave_0: left promiscuous mode [ 137.272999][ T7087] netlink: 'syz.6.1025': attribute type 17 has an invalid length. [ 137.281906][ T224] hsr_slave_1: left promiscuous mode [ 137.291348][ T224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.299686][ T224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.307573][ T224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.316324][ T224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.337096][ T224] veth1_macvtap: left promiscuous mode [ 137.342624][ T224] veth0_macvtap: left promiscuous mode [ 137.348203][ T224] veth1_vlan: left promiscuous mode [ 137.353529][ T224] veth0_vlan: left promiscuous mode [ 137.416031][ T224] team0 (unregistering): Port device team_slave_1 removed [ 137.425009][ T224] team0 (unregistering): Port device team_slave_0 removed [ 137.454726][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.461783][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.487811][ T6976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.498976][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.506346][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.532312][ T6976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.587523][ T7087] bridge0: port 3(bond0) entered blocking state [ 137.593808][ T7087] bridge0: port 3(bond0) entered forwarding state [ 137.603357][ T7087] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.612885][ T7087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.640145][ T6976] hsr_slave_0: entered promiscuous mode [ 137.646213][ T6976] hsr_slave_1: entered promiscuous mode [ 137.652075][ T6976] debugfs: 'hsr0' already exists in 'hsr' [ 137.657773][ T6976] Cannot create hsr debugfs directory [ 137.682957][ T28] audit: type=1400 audit(2000000529.092:1591): avc: denied { setattr } for pid=7126 comm="syz.1.1037" path="pipe:[18167]" dev="pipefs" ino=18167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 137.701018][ T6808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.708617][ T28] audit: type=1400 audit(2000000529.092:1592): avc: denied { setopt } for pid=7126 comm="syz.1.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.747970][ T7131] xt_hashlimit: size too large, truncated to 1048576 [ 137.834886][ T4990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.876103][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1040'. [ 137.911659][ T7150] bond1: entered promiscuous mode [ 137.939632][ T7150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.964339][ T6976] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 137.973287][ T6976] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 137.987279][ T6976] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 138.020006][ T28] audit: type=1400 audit(2000000529.422:1593): avc: denied { read } for pid=7163 comm="syz.6.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 138.043099][ T6976] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 138.086083][ T7150] bridge3: entered promiscuous mode [ 138.091637][ T28] audit: type=1400 audit(2000000529.422:1594): avc: denied { getopt } for pid=7163 comm="syz.6.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 138.112886][ T7150] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 138.132174][ T7176] macvlan1: entered promiscuous mode [ 138.137498][ T7176] macvlan1: entered allmulticast mode [ 138.148115][ T7176] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 138.168166][ T6808] veth0_vlan: entered promiscuous mode [ 138.178087][ T6808] veth1_vlan: entered promiscuous mode [ 138.240780][ T6808] veth0_macvtap: entered promiscuous mode [ 138.264067][ T6808] veth1_macvtap: entered promiscuous mode [ 138.271919][ T6976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.294901][ T6976] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.327519][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.345160][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.352241][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.384567][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.407092][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.414180][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.432268][ T224] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.449645][ T224] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.471621][ T224] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.515553][ T224] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.549940][ T7222] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.559401][ T28] audit: type=1400 audit(2000000529.952:1595): avc: denied { getopt } for pid=7221 comm="syz.3.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.577540][ T6976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.608474][ T7198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1047'. [ 138.618568][ T28] audit: type=1400 audit(2000000529.972:1596): avc: denied { mount } for pid=6808 comm="syz-executor" name="/" dev="gadgetfs" ino=4750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 138.788958][ T7239] loop3: detected capacity change from 0 to 512 [ 138.823164][ T7239] EXT4-fs: Ignoring removed bh option [ 138.830018][ T7253] loop7: detected capacity change from 0 to 8192 [ 138.857984][ T28] audit: type=1400 audit(2000000530.262:1597): avc: denied { mounton } for pid=7252 comm="syz.7.1053" path="/1/file2/file0" dev="loop7" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 138.881666][ T7253] syz_tun: entered allmulticast mode [ 138.892370][ T7239] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 138.907067][ T7253] dvmrp8: entered allmulticast mode [ 138.914500][ T7253] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 138.923044][ T7253] mroute: pending queue full, dropping entries [ 138.941811][ T7252] syz_tun: left allmulticast mode [ 138.963819][ T7239] EXT4-fs (loop3): 1 truncate cleaned up [ 138.964563][ T7266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=7266 comm=syz.6.1054 [ 138.979315][ T7239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.041561][ T7239] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 139.041561][ T7239] program syz.3.1052 not setting count and/or reply_len properly [ 139.144567][ T7266] syz.6.1054 (7266): /proc/7265/oom_adj is deprecated, please use /proc/7265/oom_score_adj instead. [ 139.172979][ T6808] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 139.181827][ T6808] FAT-fs (loop7): Filesystem has been set read-only [ 139.251359][ T6976] veth0_vlan: entered promiscuous mode [ 139.262911][ T7275] loop7: detected capacity change from 0 to 1024 [ 139.298628][ T7275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.330185][ T6976] veth1_vlan: entered promiscuous mode [ 139.349150][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1055'. [ 139.406810][ T7275] bond1: option lacp_active: invalid value (5) [ 139.420958][ T7275] bond1 (unregistering): Released all slaves [ 139.504138][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.735684][ T6976] veth0_macvtap: entered promiscuous mode [ 139.806799][ T6976] veth1_macvtap: entered promiscuous mode [ 139.853648][ T7292] syzkaller0: entered promiscuous mode [ 139.859227][ T7292] syzkaller0: entered allmulticast mode [ 139.889457][ T6976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.582794][ T6976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.707931][ T70] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.719552][ T70] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.728583][ T70] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.744740][ T7299] loop6: detected capacity change from 0 to 512 [ 140.766674][ T70] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.799279][ T7299] EXT4-fs (loop6): 1 truncate cleaned up [ 140.805630][ T7299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.003321][ T4990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.016633][ T7308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=7308 comm=syz.8.1064 [ 141.166827][ T7318] netlink: 'syz.8.1067': attribute type 10 has an invalid length. [ 141.185315][ T7316] batman_adv: batadv0: Adding interface: gretap1 [ 141.193774][ T7318] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1067'. [ 141.209601][ T7316] batman_adv: batadv0: Interface activated: gretap1 [ 141.220860][ T7318] bond0: entered promiscuous mode [ 141.239598][ T7318] bond_slave_0: entered promiscuous mode [ 141.249452][ T7318] bond_slave_1: entered promiscuous mode [ 141.266062][ T7318] bridge0: port 3(bond0) entered blocking state [ 141.276096][ T7318] bridge0: port 3(bond0) entered disabled state [ 141.290065][ T7318] bond0: entered allmulticast mode [ 141.301263][ T7318] bond_slave_0: entered allmulticast mode [ 141.317083][ T7318] bond_slave_1: entered allmulticast mode [ 141.334684][ T7318] bridge0: port 3(bond0) entered blocking state [ 141.341111][ T7318] bridge0: port 3(bond0) entered forwarding state [ 141.413543][ T7326] tipc: Started in network mode [ 141.427276][ T7326] tipc: Node identity , cluster identity 4711 [ 141.433895][ T7326] tipc: Failed to set node id, please configure manually [ 141.441267][ T7326] tipc: Enabling of bearer rejected, failed to enable media [ 141.452077][ T7327] tipc: Started in network mode [ 141.456925][ T7327] tipc: Node identity , cluster identity 4711 [ 141.463988][ T7327] tipc: Failed to set node id, please configure manually [ 141.471338][ T7327] tipc: Enabling of bearer rejected, failed to enable media [ 141.574203][ T7333] loop8: detected capacity change from 0 to 8192 [ 141.586514][ T7335] loop7: detected capacity change from 0 to 512 [ 141.623472][ T7335] EXT4-fs: Ignoring removed bh option [ 141.641645][ T7335] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 141.690944][ T7335] EXT4-fs (loop7): 1 truncate cleaned up [ 141.706110][ T7335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.742889][ T7336] sctp: [Deprecated]: syz.8.1071 (pid 7336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.742889][ T7336] Use struct sctp_sack_info instead [ 141.792859][ T7335] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 141.792859][ T7335] program syz.7.1072 not setting count and/or reply_len properly [ 141.811053][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.915119][ T7344] 9p: Bad value for 'wfdno' [ 141.959156][ T7346] loop3: detected capacity change from 0 to 512 [ 141.963734][ T7348] FAULT_INJECTION: forcing a failure. [ 141.963734][ T7348] name failslab, interval 1, probability 0, space 0, times 0 [ 141.979059][ T7348] CPU: 0 UID: 0 PID: 7348 Comm: syz.6.1077 Not tainted syzkaller #0 PREEMPT(full) [ 141.979082][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.979092][ T7348] Call Trace: [ 141.979097][ T7348] [ 141.979104][ T7348] __dump_stack+0x1d/0x30 [ 141.979185][ T7348] dump_stack_lvl+0x95/0xd0 [ 141.979201][ T7348] dump_stack+0x15/0x1b [ 141.979218][ T7348] should_fail_ex+0x263/0x280 [ 141.979260][ T7348] should_failslab+0x8c/0xb0 [ 141.979279][ T7348] kmem_cache_alloc_noprof+0x66/0x400 [ 141.979354][ T7348] ? skb_clone+0x151/0x1f0 [ 141.979397][ T7348] skb_clone+0x151/0x1f0 [ 141.979453][ T7348] __netlink_deliver_tap+0x2c9/0x500 [ 141.979484][ T7348] netlink_unicast+0x66b/0x690 [ 141.979741][ T7348] netlink_sendmsg+0x5c8/0x6f0 [ 141.979770][ T7348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.979822][ T7348] ____sys_sendmsg+0x563/0x5b0 [ 141.979872][ T7348] ___sys_sendmsg+0x195/0x1e0 [ 141.979906][ T7348] __x64_sys_sendmsg+0xd4/0x160 [ 141.979937][ T7348] x64_sys_call+0x194c/0x3020 [ 141.979965][ T7348] do_syscall_64+0x12c/0x370 [ 141.979988][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.980009][ T7348] RIP: 0033:0x7f283056c799 [ 141.980024][ T7348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.980091][ T7348] RSP: 002b:00007f282efbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.980110][ T7348] RAX: ffffffffffffffda RBX: 00007f28307e5fa0 RCX: 00007f283056c799 [ 141.980124][ T7348] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001b [ 141.980154][ T7348] RBP: 00007f282efbf090 R08: 0000000000000000 R09: 0000000000000000 [ 141.980164][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.980189][ T7348] R13: 00007f28307e6038 R14: 00007f28307e5fa0 R15: 00007ffeabae3768 [ 141.980204][ T7348] [ 142.172312][ T7346] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 142.216695][ T30] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 142.273410][ T7355] loop8: detected capacity change from 0 to 736 [ 142.344510][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 142.442003][ T7357] hub 8-0:1.0: USB hub found [ 142.446997][ T7357] hub 8-0:1.0: 8 ports detected [ 142.549913][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 142.549924][ T28] audit: type=1400 audit(2000000533.962:1602): avc: denied { cpu } for pid=7354 comm="syz.8.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 142.601364][ T7363] netlink: 'syz.1.1083': attribute type 1 has an invalid length. [ 142.617159][ T7355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7355 comm=syz.8.1078 [ 142.681806][ T7364] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1083'. [ 142.739656][ T7367] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1083'. [ 142.781015][ T7363] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.850558][ T28] audit: type=1400 audit(2000000534.262:1603): avc: denied { create } for pid=7371 comm="syz.6.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.979324][ T28] audit: type=1400 audit(2000000534.382:1604): avc: denied { bind } for pid=7376 comm="syz.8.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 143.333388][ T28] audit: type=1400 audit(2000000534.692:1605): avc: denied { ioctl } for pid=7402 comm="syz.8.1099" path="socket:[19791]" dev="sockfs" ino=19791 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.119892][ T28] audit: type=1400 audit(2000000534.692:1606): avc: denied { bind } for pid=7402 comm="syz.8.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.135102][ T7420] netlink: 'syz.6.1101': attribute type 1 has an invalid length. [ 144.163304][ T28] audit: type=1400 audit(2000000534.692:1607): avc: denied { connect } for pid=7402 comm="syz.8.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.185008][ T28] audit: type=1400 audit(2000000534.692:1608): avc: denied { write } for pid=7402 comm="syz.8.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.208972][ T28] audit: type=1400 audit(2000000534.692:1609): avc: denied { read } for pid=7402 comm="syz.8.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.264844][ T7420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.400255][ T7430] loop3: detected capacity change from 0 to 512 [ 144.406811][ T7430] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 144.609913][ T7441] loop3: detected capacity change from 0 to 4096 [ 144.631103][ T7441] EXT4-fs: Ignoring removed bh option [ 144.673142][ T7441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.964815][ T7494] Invalid ELF header magic: != ELF [ 144.989858][ T28] audit: type=1400 audit(2000000536.362:1610): avc: denied { sys_module } for pid=7493 comm="syz.6.1106" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 145.014612][ T7496] syzkaller0: entered promiscuous mode [ 145.020136][ T7496] syzkaller0: entered allmulticast mode [ 145.030893][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.043077][ T28] audit: type=1400 audit(2000000536.362:1611): avc: denied { module_load } for pid=7493 comm="syz.6.1106" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=19865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 145.095181][ T7501] loop7: detected capacity change from 0 to 512 [ 145.104123][ T7501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.126544][ T7501] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1107: iget: bad extended attribute block 262144 [ 145.149833][ T7501] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.150224][ T7501] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1107: couldn't read orphan inode 15 (err -117) [ 145.171295][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 145.171313][ C0] EXT4-fs (loop7): initial error at time 2000000536: ext4_orphan_get:1391: inode 15 [ 145.171337][ C0] EXT4-fs (loop7): last error at time 2000000536: ext4_orphan_get:1391: inode 15 [ 145.309783][ T7501] loop7: lost filesystem error report for type 5 error -117 [ 145.330097][ T7501] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.368074][ T7435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.388067][ T7441] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.474128][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.527649][ T7526] FAULT_INJECTION: forcing a failure. [ 147.527649][ T7526] name failslab, interval 1, probability 0, space 0, times 0 [ 147.540632][ T7526] CPU: 1 UID: 0 PID: 7526 Comm: syz.8.1114 Not tainted syzkaller #0 PREEMPT(full) [ 147.540655][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.540664][ T7526] Call Trace: [ 147.540712][ T7526] [ 147.540719][ T7526] __dump_stack+0x1d/0x30 [ 147.540740][ T7526] dump_stack_lvl+0x95/0xd0 [ 147.540756][ T7526] dump_stack+0x15/0x1b [ 147.540802][ T7526] should_fail_ex+0x263/0x280 [ 147.540824][ T7526] should_failslab+0x8c/0xb0 [ 147.540840][ T7526] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 147.540858][ T7526] ? __alloc_skb+0x2d6/0x690 [ 147.540895][ T7526] __alloc_skb+0x2d6/0x690 [ 147.540918][ T7526] ? __alloc_skb+0x200/0x690 [ 147.540941][ T7526] netlink_alloc_large_skb+0xbf/0xf0 [ 147.541044][ T7526] netlink_sendmsg+0x40c/0x6f0 [ 147.541070][ T7526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.541151][ T7526] ____sys_sendmsg+0x563/0x5b0 [ 147.541184][ T7526] ___sys_sendmsg+0x195/0x1e0 [ 147.541213][ T7526] __x64_sys_sendmsg+0xd4/0x160 [ 147.541240][ T7526] x64_sys_call+0x194c/0x3020 [ 147.541269][ T7526] do_syscall_64+0x12c/0x370 [ 147.541292][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.541309][ T7526] RIP: 0033:0x7ff03844c799 [ 147.541322][ T7526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.541356][ T7526] RSP: 002b:00007ff036e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.541372][ T7526] RAX: ffffffffffffffda RBX: 00007ff0386c5fa0 RCX: 00007ff03844c799 [ 147.541383][ T7526] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 147.541412][ T7526] RBP: 00007ff036e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 147.541424][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.541519][ T7526] R13: 00007ff0386c6038 R14: 00007ff0386c5fa0 R15: 00007fff73974558 [ 147.541537][ T7526] [ 147.813462][ T7534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1119'. [ 147.908320][ T7545] loop6: detected capacity change from 0 to 128 [ 147.918936][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 147.918987][ T28] audit: type=1400 audit(2000000539.332:1613): avc: denied { write } for pid=7546 comm="syz.7.1123" lport=58182 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 147.956339][ T7537] loop8: detected capacity change from 0 to 512 [ 147.963137][ T7547] netlink: 'syz.7.1123': attribute type 4 has an invalid length. [ 148.011556][ T7537] EXT4-fs: Ignoring removed bh option [ 148.021443][ T28] audit: type=1400 audit(2000000539.332:1614): avc: denied { getopt } for pid=7546 comm="syz.7.1123" lport=58182 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 148.108074][ T7537] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 148.121184][ T7547] netlink: 'syz.7.1123': attribute type 4 has an invalid length. [ 149.938695][ T7537] EXT4-fs (loop8): 1 truncate cleaned up [ 150.546305][ T7537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.583236][ T7537] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 150.583236][ T7537] program syz.8.1117 not setting count and/or reply_len properly [ 150.608947][ T7561] loop7: detected capacity change from 0 to 1024 [ 150.629141][ T7563] loop6: detected capacity change from 0 to 764 [ 150.652415][ T7561] EXT4-fs (loop7): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 150.692361][ T7563] rock: directory entry would overflow storage [ 150.714434][ T7563] rock: sig=0x5245, size=8, remaining=5 [ 150.752126][ T7561] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.774067][ T7565] loop3: detected capacity change from 0 to 512 [ 150.790727][ T7565] EXT4-fs: Ignoring removed bh option [ 150.803654][ T7565] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 150.847353][ T7565] EXT4-fs (loop3): 1 truncate cleaned up [ 150.881696][ T28] audit: type=1400 audit(2000000542.292:1615): avc: denied { write } for pid=7583 comm="syz.1.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.908562][ T7565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.919646][ T28] audit: type=1400 audit(2000000542.292:1616): avc: denied { accept } for pid=7583 comm="syz.1.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.966657][ T7565] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 150.966657][ T7565] program syz.3.1127 not setting count and/or reply_len properly [ 151.020527][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.093146][ T7603] netlink: 'syz.7.1135': attribute type 7 has an invalid length. [ 151.104465][ T7600] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1134'. [ 151.139570][ T7603] netlink: 'syz.7.1135': attribute type 8 has an invalid length. [ 151.231764][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1134'. [ 151.240963][ T7628] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1134'. [ 151.257074][ T7630] __vm_enough_memory: pid: 7630, comm: syz.8.1117, bytes: 11728084668416 not enough memory for the allocation [ 151.380295][ T7632] loop7: detected capacity change from 0 to 512 [ 151.427535][ T7632] EXT4-fs: Ignoring removed bh option [ 151.449425][ T7632] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 151.468910][ T6976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.499990][ T7632] EXT4-fs (loop7): 1 truncate cleaned up [ 151.557619][ T7632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.592548][ T7637] loop8: detected capacity change from 0 to 128 [ 151.685144][ T7632] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 151.685144][ T7632] program syz.7.1136 not setting count and/or reply_len properly [ 152.550529][ T28] audit: type=1400 audit(2000000543.942:1617): avc: denied { execmod } for pid=7647 comm="syz.1.1142" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=20093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 152.841672][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1145'. [ 152.984362][ T28] audit: type=1400 audit(2000000544.392:1618): avc: denied { mount } for pid=7658 comm="syz.1.1146" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 153.123739][ T7659] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.201340][ T7661] loop8: detected capacity change from 0 to 512 [ 153.213380][ T7661] EXT4-fs: Ignoring removed bh option [ 153.223000][ T7661] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 153.260168][ T7661] EXT4-fs (loop8): 1 truncate cleaned up [ 153.269387][ T7661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.295594][ T7661] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 153.295594][ T7661] program syz.8.1147 not setting count and/or reply_len properly [ 153.407220][ T7659] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.487119][ T28] audit: type=1326 audit(2000000544.882:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7679 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283056c799 code=0x7ffc0000 [ 153.490536][ T7680] FAULT_INJECTION: forcing a failure. [ 153.490536][ T7680] name failslab, interval 1, probability 0, space 0, times 0 [ 153.549092][ T7680] CPU: 1 UID: 0 PID: 7680 Comm: syz.6.1149 Not tainted syzkaller #0 PREEMPT(full) [ 153.549118][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.549130][ T7680] Call Trace: [ 153.549136][ T7680] [ 153.549143][ T7680] __dump_stack+0x1d/0x30 [ 153.549167][ T7680] dump_stack_lvl+0x95/0xd0 [ 153.549311][ T7680] dump_stack+0x15/0x1b [ 153.549329][ T7680] should_fail_ex+0x263/0x280 [ 153.549353][ T7680] should_failslab+0x8c/0xb0 [ 153.549373][ T7680] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 153.549461][ T7680] ? __alloc_skb+0x2d6/0x690 [ 153.549486][ T7680] __alloc_skb+0x2d6/0x690 [ 153.549589][ T7680] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 153.549640][ T7680] ? __alloc_skb+0x200/0x690 [ 153.549662][ T7680] audit_log_start+0x3aa/0x730 [ 153.549683][ T7680] audit_seccomp+0x47/0x100 [ 153.549706][ T7680] ? __seccomp_filter+0x8db/0x1350 [ 153.549807][ T7680] __seccomp_filter+0x8ec/0x1350 [ 153.549834][ T7680] ? xfd_validate_state+0x45/0xf0 [ 153.549862][ T7680] __secure_computing+0x81/0x150 [ 153.549945][ T7680] do_syscall_64+0xd3/0x370 [ 153.549966][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.550059][ T7680] RIP: 0033:0x7f283052cfce [ 153.550073][ T7680] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.550089][ T7680] RSP: 002b:00007f282efbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.550108][ T7680] RAX: ffffffffffffffda RBX: 00007f282efbf6c0 RCX: 00007f283052cfce [ 153.550121][ T7680] RDX: 000000000000000f RSI: 00007f282efbf0a0 RDI: 0000000000000004 [ 153.550133][ T7680] RBP: 00007f282efbf090 R08: 0000000000000000 R09: 0000000000000000 [ 153.550199][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.550211][ T7680] R13: 00007f28307e6038 R14: 00007f28307e5fa0 R15: 00007ffeabae3768 [ 153.550286][ T7680] [ 153.560450][ T28] audit: type=1326 audit(2000000544.882:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7679 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283056c799 code=0x7ffc0000 [ 153.591946][ T7680] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 153.639580][ T28] audit: type=1326 audit(2000000544.882:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7679 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283056c799 code=0x7ffc0000 [ 153.661277][ T7680] audit: out of memory in audit_log_start [ 153.722783][ T28] audit: type=1326 audit(2000000544.882:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7679 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283056c799 code=0x7ffc0000 [ 153.825392][ T28] audit: type=1326 audit(2000000544.882:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7679 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283056c799 code=0x7ffc0000 [ 153.849068][ T28] audit: type=1326 audit(2000000544.882:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7679 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f283056c799 code=0x7ffc0000 [ 153.887679][ T28] audit: type=1326 audit(2000000544.892:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7679 comm="syz.6.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283056c799 code=0x7ffc0000 [ 153.921161][ T7659] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.962609][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.999669][ T7682] loop7: detected capacity change from 512 to 511 [ 154.015083][ T7684] loop3: detected capacity change from 0 to 1024 [ 154.021993][ T7684] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.042404][ T7684] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.060417][ T7659] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.080143][ T7684] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.093478][ T7687] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1152'. [ 154.125234][ T7684] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.1150: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 154.201767][ T1343] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.226473][ T1343] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.243523][ T7684] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 154.243783][ T7684] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1150: couldn't read orphan inode 11 (err -117) [ 154.252971][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 154.252989][ C0] EXT4-fs (loop3): initial error at time 2000000545: ext4_ext_check_inode:521: inode 11 [ 154.253032][ C0] EXT4-fs (loop3): last error at time 2000000545: ext4_ext_check_inode:521: inode 11 [ 154.342375][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1153'. [ 154.413366][ T7694] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 154.417561][ T7694] loop6: detected capacity change from 0 to 128 [ 154.519086][ T7694] vfat: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 154.548907][ T1343] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.626712][ T1343] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.661399][ T7684] loop3: lost filesystem error report for type 5 error -117 [ 154.662597][ T7684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.817717][ T7684] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1150: Invalid block bitmap block 0 in block_group 0 [ 154.846502][ T7684] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.1150: Failed to acquire dquot type 0 [ 154.862599][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.871935][ T7704] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1150: Invalid inode bitmap blk 137438953472 in block_group 0 [ 154.951633][ T50] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm kworker/u8:3: Invalid inode table block 8589934593 in block_group 0 [ 154.986426][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.027586][ T7708] loop6: detected capacity change from 0 to 512 [ 155.086497][ T7708] EXT4-fs: Ignoring removed bh option [ 155.097703][ T7708] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 155.123548][ T7708] EXT4-fs (loop6): 1 truncate cleaned up [ 155.137558][ T7708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.184679][ T7708] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 155.184679][ T7708] program syz.6.1160 not setting count and/or reply_len properly [ 155.427034][ T7731] loop3: detected capacity change from 0 to 128 [ 155.901939][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 155.914748][ T7741] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 156.005114][ T7739] team_slave_0: entered promiscuous mode [ 156.010904][ T7739] team_slave_1: entered promiscuous mode [ 156.088601][ T7744] 9p: Bad value for 'rfdno' [ 156.126498][ T7739] vlan2: entered promiscuous mode [ 156.178523][ T7739] team0: entered promiscuous mode [ 156.665927][ T6976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.797907][ T7762] loop7: detected capacity change from 0 to 128 [ 157.141341][ T7766] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1174'. [ 157.322263][ T7772] syz.7.1176: attempt to access beyond end of device [ 157.322263][ T7772] loop7: rw=2049, sector=409, nr_sectors = 280 limit=128 [ 157.340772][ T7772] syz.7.1176: attempt to access beyond end of device [ 157.340772][ T7772] loop7: rw=2049, sector=697, nr_sectors = 3 limit=128 [ 157.416554][ T7772] syz.7.1176: attempt to access beyond end of device [ 157.416554][ T7772] loop7: rw=2049, sector=401, nr_sectors = 8 limit=128 [ 157.443649][ T7783] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1182'. [ 157.531255][ T12] kworker/u8:0: attempt to access beyond end of device [ 157.531255][ T12] loop7: rw=8388609, sector=700, nr_sectors = 1 limit=128 [ 157.555276][ T12] Buffer I/O error on dev loop7, logical block 700, lost async page write [ 157.589575][ T12] kworker/u8:0: attempt to access beyond end of device [ 157.589575][ T12] loop7: rw=8388609, sector=701, nr_sectors = 1 limit=128 [ 157.611033][ T12] Buffer I/O error on dev loop7, logical block 701, lost async page write [ 157.633859][ T12] kworker/u8:0: attempt to access beyond end of device [ 157.633859][ T12] loop7: rw=8388609, sector=702, nr_sectors = 1 limit=128 [ 157.647956][ T12] Buffer I/O error on dev loop7, logical block 702, lost async page write [ 157.668177][ T12] kworker/u8:0: attempt to access beyond end of device [ 157.668177][ T12] loop7: rw=8388609, sector=703, nr_sectors = 1 limit=128 [ 157.702270][ T12] Buffer I/O error on dev loop7, logical block 703, lost async page write [ 157.711365][ T12] kworker/u8:0: attempt to access beyond end of device [ 157.711365][ T12] loop7: rw=8388609, sector=704, nr_sectors = 1 limit=128 [ 157.713168][ T7798] xt_hashlimit: size too large, truncated to 1048576 [ 157.753453][ T12] Buffer I/O error on dev loop7, logical block 704, lost async page write [ 157.762747][ T12] kworker/u8:0: attempt to access beyond end of device [ 157.762747][ T12] loop7: rw=1, sector=705, nr_sectors = 336 limit=128 [ 157.882249][ T7817] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1194'. [ 157.902576][ T12] kworker/u8:0: attempt to access beyond end of device [ 157.902576][ T12] loop7: rw=1, sector=393, nr_sectors = 8 limit=128 [ 158.013860][ T28] kauditd_printk_skb: 232 callbacks suppressed [ 158.013875][ T28] audit: type=1400 audit(2000000549.422:1856): avc: denied { tracepoint } for pid=7829 comm="syz.1.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 158.076584][ T28] audit: type=1400 audit(2000000549.452:1857): avc: denied { write } for pid=7829 comm="syz.1.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.169699][ T28] audit: type=1400 audit(2000000549.512:1858): avc: denied { write } for pid=7829 comm="syz.1.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 158.301475][ T28] audit: type=1400 audit(2000000549.712:1859): avc: denied { create } for pid=7833 comm="syz.7.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.321900][ T7838] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1183'. [ 158.372473][ T7838] hub 8-0:1.0: USB hub found [ 158.377087][ T28] audit: type=1400 audit(2000000549.712:1860): avc: denied { write } for pid=7833 comm="syz.7.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.377171][ T7838] hub 8-0:1.0: 8 ports detected [ 158.413682][ T4990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.437622][ T28] audit: type=1400 audit(2000000549.712:1861): avc: denied { nlmsg_write } for pid=7833 comm="syz.7.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.510998][ T7845] loop6: detected capacity change from 0 to 512 [ 158.517899][ T7843] syzkaller0: entered promiscuous mode [ 158.529151][ T7843] syzkaller0: entered allmulticast mode [ 158.630595][ T28] audit: type=1400 audit(2000000549.742:1862): avc: denied { write } for pid=7833 comm="syz.7.1183" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 158.679556][ T7845] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 158.698293][ T28] audit: type=1400 audit(2000000549.822:1863): avc: denied { unmount } for pid=4990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 158.981420][ T7845] EXT4-fs (loop6): 1 truncate cleaned up [ 158.987428][ T7845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.001688][ T28] audit: type=1400 audit(2000000549.892:1864): avc: denied { create } for pid=7842 comm="syz.8.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.033075][ T28] audit: type=1400 audit(2000000549.892:1865): avc: denied { connect } for pid=7842 comm="syz.8.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.056679][ T4990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.136500][ T7853] loop6: detected capacity change from 0 to 256 [ 159.188343][ T7855] bond0: Device is already in use. [ 159.194216][ T7853] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.233218][ T7857] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1207'. [ 159.242789][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1207'. [ 159.329772][ T7874] netlink: 'syz.3.1209': attribute type 8 has an invalid length. [ 159.563770][ T7882] netlink: 'syz.7.1215': attribute type 21 has an invalid length. [ 159.914281][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1217'. [ 159.936511][ T7890] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1217'. [ 159.990177][ T7893] loop6: detected capacity change from 0 to 128 [ 160.081684][ T7897] syzkaller1: entered promiscuous mode [ 160.087258][ T7897] syzkaller1: entered allmulticast mode [ 160.102611][ T7897] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1220'. [ 160.157796][ T7901] loop3: detected capacity change from 0 to 512 [ 160.203241][ T7901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.220819][ T7901] EXT4-fs (loop3): 1 truncate cleaned up [ 160.223337][ T7903] veth0_virt_wifi: entered promiscuous mode [ 160.227137][ T7901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.326743][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.381132][ T7912] loop8: detected capacity change from 0 to 128 [ 160.412806][ T7915] loop3: detected capacity change from 0 to 512 [ 160.549805][ T7915] EXT4-fs (loop3): 1 truncate cleaned up [ 160.559679][ T7915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.745575][ T7924] No such timeout policy "syz0" [ 161.536500][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.744544][ T7944] loop6: detected capacity change from 0 to 164 [ 161.872867][ T7946] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1234'. [ 161.912859][ T7946] hub 8-0:1.0: USB hub found [ 161.917598][ T7946] hub 8-0:1.0: 8 ports detected [ 162.111540][ T7950] loop8: detected capacity change from 0 to 512 [ 162.217767][ T7950] EXT4-fs (loop8): 1 orphan inode deleted [ 162.226998][ T7950] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.240196][ T7823] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:17: Failed to release dquot type 1 [ 162.264485][ T7823] loop8: lost filesystem error report for type 5 error -117 [ 162.265241][ T7950] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.310902][ T7956] loop7: detected capacity change from 0 to 8192 [ 162.515839][ T7958] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 162.538163][ T6976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.552038][ T7961] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1240'. [ 162.630821][ T7973] netlink: 884 bytes leftover after parsing attributes in process `syz.6.1243'. [ 162.798968][ T7990] tc_dump_action: action bad kind [ 162.815042][ T7984] dummy0 speed is unknown, defaulting to 1000 [ 162.825932][ T7988] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 162.827262][ T7984] dummy0 speed is unknown, defaulting to 1000 [ 162.832448][ T7988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.853704][ T7988] vhci_hcd vhci_hcd.0: Device attached [ 162.869704][ T7988] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(9) [ 162.876253][ T7988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.890702][ T7988] vhci_hcd vhci_hcd.0: Device attached [ 162.891808][ T7984] dummy0 speed is unknown, defaulting to 1000 [ 162.907520][ T7996] vhci_hcd: connection closed [ 162.907635][ T7993] vhci_hcd: connection closed [ 162.913094][ T7818] vhci_hcd vhci_hcd.7: stop threads [ 162.924163][ T7818] vhci_hcd vhci_hcd.7: release socket [ 162.929783][ T7818] vhci_hcd vhci_hcd.7: disconnect device [ 162.936982][ T7818] vhci_hcd vhci_hcd.7: stop threads [ 162.964205][ T7984] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 162.970651][ T7818] vhci_hcd vhci_hcd.7: release socket [ 162.987168][ T7818] vhci_hcd vhci_hcd.7: disconnect device [ 163.029549][ T3394] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 163.067533][ T7984] dummy0 speed is unknown, defaulting to 1000 [ 163.099321][ T7984] dummy0 speed is unknown, defaulting to 1000 [ 163.109534][ T28] kauditd_printk_skb: 730 callbacks suppressed [ 163.109546][ T28] audit: type=1326 audit(2000000554.512:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 163.132743][ T7984] dummy0 speed is unknown, defaulting to 1000 [ 163.168243][ T28] audit: type=1326 audit(2000000554.512:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 163.193932][ T7984] dummy0 speed is unknown, defaulting to 1000 [ 163.213744][ T7984] dummy0 speed is unknown, defaulting to 1000 [ 163.224622][ T8010] loop8: detected capacity change from 0 to 512 [ 163.243389][ T7984] dummy0 speed is unknown, defaulting to 1000 [ 163.269153][ T8010] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 163.279009][ T28] audit: type=1326 audit(2000000554.512:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 163.306832][ T7984] dummy0 speed is unknown, defaulting to 1000 [ 163.313758][ T28] audit: type=1326 audit(2000000554.512:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 163.337830][ T28] audit: type=1326 audit(2000000554.512:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 163.368193][ T8010] EXT4-fs (loop8): 1 truncate cleaned up [ 163.373999][ T28] audit: type=1326 audit(2000000554.512:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 163.376691][ T8010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.405324][ T28] audit: type=1326 audit(2000000554.542:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 163.435713][ T28] audit: type=1326 audit(2000000554.542:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 163.464561][ T28] audit: type=1326 audit(2000000554.542:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 163.489276][ T28] audit: type=1326 audit(2000000554.512:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8004 comm="syz.3.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 163.533231][ T6976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.567413][ T8018] __nla_validate_parse: 1 callbacks suppressed [ 163.567425][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1257'. [ 163.584053][ T8019] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 163.595041][ T8019] gretap1: entered allmulticast mode [ 163.618279][ T8018] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1257'. [ 163.671195][ T8029] 9p: Bad value for 'wfdno' [ 163.675905][ T8030] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1263'. [ 163.686384][ T8030] FAULT_INJECTION: forcing a failure. [ 163.686384][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 163.708921][ T8034] loop6: detected capacity change from 0 to 128 [ 163.736338][ T8030] CPU: 0 UID: 0 PID: 8030 Comm: syz.8.1263 Not tainted syzkaller #0 PREEMPT(full) [ 163.736390][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.736399][ T8030] Call Trace: [ 163.736404][ T8030] [ 163.736409][ T8030] __dump_stack+0x1d/0x30 [ 163.736432][ T8030] dump_stack_lvl+0x95/0xd0 [ 163.736511][ T8030] dump_stack+0x15/0x1b [ 163.736530][ T8030] should_fail_ex+0x263/0x280 [ 163.736554][ T8030] should_failslab+0x8c/0xb0 [ 163.736613][ T8030] __kmalloc_node_noprof+0xc8/0x560 [ 163.736631][ T8030] ? __nla_validate_parse+0x16ef/0x1cf0 [ 163.736764][ T8030] ? qdisc_alloc+0x65/0x410 [ 163.736872][ T8030] qdisc_alloc+0x65/0x410 [ 163.736892][ T8030] ? nla_strcmp+0xc3/0xe0 [ 163.736913][ T8030] qdisc_create+0xf5/0x9d0 [ 163.736997][ T8030] tc_modify_qdisc+0xffc/0x14f0 [ 163.737086][ T8030] ? __mutex_lock_slowpath+0xa/0x10 [ 163.737113][ T8030] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 163.737133][ T8030] rtnetlink_rcv_msg+0x6a7/0x720 [ 163.737155][ T8030] netlink_rcv_skb+0x123/0x220 [ 163.737245][ T8030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.737294][ T8030] rtnetlink_rcv+0x1c/0x30 [ 163.737311][ T8030] netlink_unicast+0x5c0/0x690 [ 163.737337][ T8030] netlink_sendmsg+0x5c8/0x6f0 [ 163.737470][ T8030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.737497][ T8030] ____sys_sendmsg+0x563/0x5b0 [ 163.737526][ T8030] ___sys_sendmsg+0x195/0x1e0 [ 163.737642][ T8030] __x64_sys_sendmsg+0xd4/0x160 [ 163.737749][ T8030] x64_sys_call+0x194c/0x3020 [ 163.737833][ T8030] do_syscall_64+0x12c/0x370 [ 163.737855][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.737875][ T8030] RIP: 0033:0x7ff03844c799 [ 163.737890][ T8030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.737907][ T8030] RSP: 002b:00007ff036e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.737952][ T8030] RAX: ffffffffffffffda RBX: 00007ff0386c5fa0 RCX: 00007ff03844c799 [ 163.737965][ T8030] RDX: 0000000020004014 RSI: 0000200000000040 RDI: 0000000000000003 [ 163.737977][ T8030] RBP: 00007ff036e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 163.737990][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.738002][ T8030] R13: 00007ff0386c6038 R14: 00007ff0386c5fa0 R15: 00007fff73974558 [ 163.738059][ T8030] [ 163.997393][ T8039] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 164.003915][ T8039] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.021947][ T8039] vhci_hcd vhci_hcd.0: Device attached [ 164.031953][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 164.069915][ T8040] vhci_hcd: connection closed [ 164.070091][ T7822] vhci_hcd vhci_hcd.8: stop threads [ 164.081136][ T7822] vhci_hcd vhci_hcd.8: release socket [ 164.086522][ T7822] vhci_hcd vhci_hcd.8: disconnect device [ 164.137233][ T8053] rdma_op ffff88811a7cad80 conn xmit_rdma 0000000000000000 [ 164.223002][ T8053] loop3: detected capacity change from 0 to 764 [ 164.246965][ T8053] rock: directory entry would overflow storage [ 164.258718][ T8053] rock: sig=0x4f50, size=4, remaining=3 [ 164.264919][ T8053] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 164.393069][ T8069] mmap: syz.7.1276 (8069) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 164.444421][ T8069] team_slave_0: entered promiscuous mode [ 164.450441][ T8069] team_slave_1: entered promiscuous mode [ 164.457257][ T8069] macvtap1: entered promiscuous mode [ 164.463117][ T8069] team0: entered promiscuous mode [ 164.479017][ T8069] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 164.493319][ T8069] team0: Device macvtap1 is already an upper device of the team interface [ 164.503483][ T8069] team0: left promiscuous mode [ 164.508683][ T8069] team_slave_0: left promiscuous mode [ 164.514174][ T8069] team_slave_1: left promiscuous mode [ 164.618098][ T8074] ipvlan0: entered allmulticast mode [ 164.623880][ T8074] dummy0: entered allmulticast mode [ 164.718491][ T8077] dummy0 speed is unknown, defaulting to 1000 [ 164.895832][ T8090] loop8: detected capacity change from 0 to 2048 [ 164.911158][ T8090] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.923769][ T8090] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.962174][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1283'. [ 165.048044][ T6976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.422925][ T8148] loop8: detected capacity change from 0 to 128 [ 165.430849][ T8150] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1297'. [ 165.441533][ T8142] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 165.456945][ T8148] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.469696][ T8148] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.077742][ T8168] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1307'. [ 166.200232][ T8177] loop7: detected capacity change from 0 to 4096 [ 166.217228][ T8177] EXT4-fs: Ignoring removed bh option [ 166.229314][ T8177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.284413][ T8177] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.302581][ T6976] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.368526][ T8177] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.384599][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 169.384611][ T28] audit: type=1326 audit(2000000560.792:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7886cec799 code=0x7ffc0000 [ 169.414304][ T8202] loop7: detected capacity change from 4096 to 4095 [ 169.419844][ T28] audit: type=1326 audit(2000000560.832:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7886cec799 code=0x7ffc0000 [ 169.437161][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1320'. [ 169.444894][ T28] audit: type=1326 audit(2000000560.842:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7886cec799 code=0x7ffc0000 [ 169.455752][ T8209] bond0: entered promiscuous mode [ 169.479617][ T28] audit: type=1326 audit(2000000560.842:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7886cec799 code=0x7ffc0000 [ 169.505870][ T28] audit: type=1326 audit(2000000560.842:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7886cec799 code=0x7ffc0000 [ 169.517935][ T8213] Invalid option length (1047368) for dns_resolver key [ 169.529433][ T28] audit: type=1326 audit(2000000560.842:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7886cec799 code=0x7ffc0000 [ 169.560233][ T8209] bond_slave_0: entered promiscuous mode [ 169.565975][ T8209] bond_slave_1: entered promiscuous mode [ 169.573649][ T28] audit: type=1326 audit(2000000560.842:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7886cec799 code=0x7ffc0000 [ 169.573729][ T8209] bond0: left promiscuous mode [ 169.602042][ T28] audit: type=1326 audit(2000000560.842:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7886cec799 code=0x7ffc0000 [ 169.602170][ T8209] bond_slave_0: left promiscuous mode [ 169.634271][ T28] audit: type=1326 audit(2000000560.842:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7886cec799 code=0x7ffc0000 [ 169.657653][ T28] audit: type=1326 audit(2000000560.842:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7886cec799 code=0x7ffc0000 [ 169.666782][ T8209] bond_slave_1: left promiscuous mode [ 169.694474][ T8177] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.771032][ T8177] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.851465][ T314] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.876737][ T8230] bond1: option tlb_dynamic_lb: invalid value (255) [ 169.900569][ T8230] bond1 (unregistering): Released all slaves [ 169.921484][ T314] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.939583][ T314] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.948776][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.953596][ T314] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.970879][ T8234] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1327'. [ 170.016446][ T3494] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 170.032503][ T3494] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.136794][ T8247] xt_hashlimit: size too large, truncated to 1048576 [ 170.269088][ T8236] loop8: detected capacity change from 0 to 764 [ 170.357279][ T8253] loop7: detected capacity change from 0 to 1024 [ 170.380282][ T8253] EXT4-fs: Ignoring removed orlov option [ 170.387679][ T8253] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.423369][ T8255] loop3: detected capacity change from 0 to 512 [ 170.430792][ T8253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.517322][ T8255] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.562617][ T8255] EXT4-fs (loop3): mount failed [ 170.631199][ T8271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1340'. [ 170.649423][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.718099][ T8274] loop8: detected capacity change from 0 to 8192 [ 170.775747][ T8274] loop8: p1 < > p2 p4 < p5 > [ 170.780591][ T8274] loop8: partition table partially beyond EOD, truncated [ 170.790135][ T8281] IPv6: Can't replace route, no match found [ 170.805290][ T8274] loop8: p1 start 134217728 is beyond EOD, truncated [ 170.819427][ T8274] loop8: p2 size 591360 extends beyond EOD, truncated [ 170.849371][ T8274] loop8: p5 size 591360 extends beyond EOD, truncated [ 170.853903][ T8286] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1345'. [ 171.235275][ T8313] ipip0: entered promiscuous mode [ 171.526812][ T8324] FAULT_INJECTION: forcing a failure. [ 171.526812][ T8324] name failslab, interval 1, probability 0, space 0, times 0 [ 171.546155][ T8324] CPU: 0 UID: 0 PID: 8324 Comm: syz.8.1357 Not tainted syzkaller #0 PREEMPT(full) [ 171.546180][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.546261][ T8324] Call Trace: [ 171.546266][ T8324] [ 171.546272][ T8324] __dump_stack+0x1d/0x30 [ 171.546338][ T8324] dump_stack_lvl+0x95/0xd0 [ 171.546405][ T8324] dump_stack+0x15/0x1b [ 171.546424][ T8324] should_fail_ex+0x263/0x280 [ 171.546446][ T8324] should_failslab+0x8c/0xb0 [ 171.546463][ T8324] kmem_cache_alloc_noprof+0x66/0x400 [ 171.546497][ T8324] ? security_file_alloc+0x32/0xf0 [ 171.546514][ T8324] security_file_alloc+0x32/0xf0 [ 171.546530][ T8324] init_file+0x5b/0x1b0 [ 171.546594][ T8324] alloc_empty_file+0x8b/0x200 [ 171.546612][ T8324] alloc_file_pseudo+0xf6/0x190 [ 171.546634][ T8324] anon_inode_getfile+0xa0/0x120 [ 171.546661][ T8324] __se_sys_perf_event_open+0xbf1/0x1290 [ 171.546748][ T8324] __x64_sys_perf_event_open+0x67/0x80 [ 171.546852][ T8324] x64_sys_call+0x2789/0x3020 [ 171.546876][ T8324] do_syscall_64+0x12c/0x370 [ 171.546899][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.546983][ T8324] RIP: 0033:0x7ff03844c799 [ 171.546998][ T8324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.547014][ T8324] RSP: 002b:00007ff036e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 171.547035][ T8324] RAX: ffffffffffffffda RBX: 00007ff0386c5fa0 RCX: 00007ff03844c799 [ 171.547049][ T8324] RDX: dfffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040 [ 171.547099][ T8324] RBP: 00007ff036e9f090 R08: 0000000000000001 R09: 0000000000000000 [ 171.547112][ T8324] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 171.547125][ T8324] R13: 00007ff0386c6038 R14: 00007ff0386c5fa0 R15: 00007fff73974558 [ 171.547143][ T8324] [ 171.554383][ T8328] loop3: detected capacity change from 0 to 512 [ 171.740276][ T8328] ext2: Unknown parameter 'smackfstransmute' [ 171.853673][ T8332] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 171.930294][ T8341] FAULT_INJECTION: forcing a failure. [ 171.930294][ T8341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.991771][ T8341] CPU: 0 UID: 0 PID: 8341 Comm: syz.8.1363 Not tainted syzkaller #0 PREEMPT(full) [ 171.991860][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.991872][ T8341] Call Trace: [ 171.991878][ T8341] [ 171.991884][ T8341] __dump_stack+0x1d/0x30 [ 171.991910][ T8341] dump_stack_lvl+0x95/0xd0 [ 171.991931][ T8341] dump_stack+0x15/0x1b [ 171.991970][ T8341] should_fail_ex+0x263/0x280 [ 171.991994][ T8341] should_fail+0xb/0x20 [ 171.992015][ T8341] should_fail_usercopy+0x1a/0x20 [ 171.992040][ T8341] _copy_to_user+0x20/0xa0 [ 171.992084][ T8341] simple_read_from_buffer+0xb5/0x130 [ 171.992106][ T8341] proc_fail_nth_read+0x10e/0x150 [ 171.992206][ T8341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.992232][ T8341] vfs_read+0x1ab/0x7f0 [ 171.992259][ T8341] ? __rcu_read_unlock+0x4e/0x70 [ 171.992279][ T8341] ? __fget_files+0x184/0x1c0 [ 171.992376][ T8341] ? mutex_lock+0x57/0x90 [ 171.992403][ T8341] ksys_read+0xdc/0x1a0 [ 171.992569][ T8341] __x64_sys_read+0x40/0x50 [ 171.992587][ T8341] x64_sys_call+0x2886/0x3020 [ 171.992610][ T8341] do_syscall_64+0x12c/0x370 [ 171.992633][ T8341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.992654][ T8341] RIP: 0033:0x7ff03840cfce [ 171.992705][ T8341] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.992720][ T8341] RSP: 002b:00007ff036e9efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.992739][ T8341] RAX: ffffffffffffffda RBX: 00007ff036e9f6c0 RCX: 00007ff03840cfce [ 171.992753][ T8341] RDX: 000000000000000f RSI: 00007ff036e9f0a0 RDI: 0000000000000004 [ 171.992766][ T8341] RBP: 00007ff036e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.992859][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.992871][ T8341] R13: 00007ff0386c6038 R14: 00007ff0386c5fa0 R15: 00007fff73974558 [ 171.992886][ T8341] [ 172.291696][ T8349] loop3: detected capacity change from 0 to 164 [ 172.305441][ T8349] iso9660: Unknown parameter 'crft' [ 172.504028][ T8354] loop8: detected capacity change from 0 to 512 [ 172.511936][ T8356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1368'. [ 172.521124][ T8356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1368'. [ 172.533428][ T8356] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 172.537343][ T8363] FAULT_INJECTION: forcing a failure. [ 172.537343][ T8363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.558649][ T8354] EXT4-fs: Ignoring removed bh option [ 172.590506][ T8363] CPU: 0 UID: 0 PID: 8363 Comm: syz.7.1369 Not tainted syzkaller #0 PREEMPT(full) [ 172.590576][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.590587][ T8363] Call Trace: [ 172.590593][ T8363] [ 172.590600][ T8363] __dump_stack+0x1d/0x30 [ 172.590642][ T8363] dump_stack_lvl+0x95/0xd0 [ 172.590659][ T8363] dump_stack+0x15/0x1b [ 172.590676][ T8363] should_fail_ex+0x263/0x280 [ 172.590696][ T8363] should_fail+0xb/0x20 [ 172.590795][ T8363] should_fail_usercopy+0x1a/0x20 [ 172.590816][ T8363] _copy_from_user+0x1c/0xb0 [ 172.590921][ T8363] ___sys_sendmsg+0xc1/0x1e0 [ 172.590960][ T8363] __x64_sys_sendmsg+0xd4/0x160 [ 172.591013][ T8363] x64_sys_call+0x194c/0x3020 [ 172.591042][ T8363] do_syscall_64+0x12c/0x370 [ 172.591061][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.591154][ T8363] RIP: 0033:0x7fc672cac799 [ 172.591171][ T8363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.591226][ T8363] RSP: 002b:00007fc6716ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.591242][ T8363] RAX: ffffffffffffffda RBX: 00007fc672f25fa0 RCX: 00007fc672cac799 [ 172.591290][ T8363] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 172.591376][ T8363] RBP: 00007fc6716ff090 R08: 0000000000000000 R09: 0000000000000000 [ 172.591390][ T8363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.591403][ T8363] R13: 00007fc672f26038 R14: 00007fc672f25fa0 R15: 00007ffe77727d18 [ 172.591468][ T8363] [ 172.763040][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'. [ 172.777493][ T8354] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 172.879967][ T8354] EXT4-fs (loop8): 1 truncate cleaned up [ 172.905373][ T8354] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.925133][ T8376] bond1: entered promiscuous mode [ 172.962043][ T8376] bond1 (unregistering): Released all slaves [ 172.973048][ T8353] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 172.973048][ T8353] program syz.8.1367 not setting count and/or reply_len properly [ 174.849616][ T8396] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1379'. [ 175.112779][ T8388] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 175.123622][ T28] kauditd_printk_skb: 297 callbacks suppressed [ 175.123634][ T28] audit: type=1326 audit(2000000565.562:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 175.831549][ T28] audit: type=1326 audit(2000000566.682:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 175.855248][ T28] audit: type=1326 audit(2000000566.682:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 175.880121][ T28] audit: type=1326 audit(2000000566.692:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5f7aa9d589 code=0x7ffc0000 [ 175.962121][ T8399] netlink: 'syz.3.1373': attribute type 6 has an invalid length. [ 175.970462][ T28] audit: type=1326 audit(2000000566.692:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5f7aa594fb code=0x7ffc0000 [ 175.997230][ T28] audit: type=1326 audit(2000000566.692:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 176.021211][ T28] audit: type=1326 audit(2000000566.692:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7aa9c799 code=0x7ffc0000 [ 176.044938][ T28] audit: type=1326 audit(2000000566.692:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5f7aa58bec code=0x7ffc0000 [ 176.068425][ T28] audit: type=1326 audit(2000000566.692:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5f7aa58c4e code=0x7ffc0000 [ 176.091895][ T28] audit: type=1326 audit(2000000566.692:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f7aa9c42b code=0x7ffc0000 [ 176.405754][ T6976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.444464][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1389'. [ 176.490132][ T8427] loop7: detected capacity change from 0 to 256 [ 176.514912][ T8429] netlink: 'syz.1.1391': attribute type 1 has an invalid length. [ 176.529616][ T8429] netlink: 'syz.1.1391': attribute type 27 has an invalid length. [ 176.530044][ T8428] loop7: detected capacity change from 256 to 255 [ 176.570135][ T8427] FAT-fs (loop7): unable to read boot sector [ 176.623813][ T8442] loop8: detected capacity change from 0 to 256 [ 176.678068][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.685378][ T8443] loop3: detected capacity change from 0 to 2048 [ 176.685420][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.730368][ T8443] loop3: p3 p4 < > [ 176.743243][ T8443] loop3: p3 start 11362048 is beyond EOD, truncated [ 176.775641][ T2999] loop3: p3 p4 < > [ 176.785621][ T2999] loop3: p3 start 11362048 is beyond EOD, truncated [ 176.801670][ T8429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.819008][ T8429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.849153][ T8429] hsr0: left promiscuous mode [ 176.865524][ T8446] loop8: detected capacity change from 0 to 1024 [ 176.891208][ T8446] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.912896][ T8446] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.1398: Allocating blocks 449-513 which overlap fs metadata [ 176.943454][ T8429] veth2: left allmulticast mode [ 176.952059][ T8429] bond1: left promiscuous mode [ 176.960432][ T8446] EXT4-fs (loop8): pa ffff888108224230: logic 32, phys. 449, len 2 [ 176.968446][ T8446] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 176.978985][ T8429] bond2: left promiscuous mode [ 176.986659][ T8446] EXT4-fs (loop8): pa ffff888108224230: logic 32, phys. 481, len 2 [ 176.994669][ T8446] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 177.005840][ T8429] sit1: left allmulticast mode [ 177.007589][ T8446] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 177.022509][ T8429] batman_adv: batadv0: Interface deactivated: gretap1 [ 177.040118][ T8446] 9p: Bad value for 'source' [ 177.052627][ T8427] ipvlan2: entered allmulticast mode [ 177.081514][ T8427] dummy0: entered allmulticast mode [ 177.103600][ T7822] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.112090][ T7822] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.147633][ T7822] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.166096][ T7822] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.240004][ T6976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.276623][ T8482] loop7: detected capacity change from 0 to 512 [ 177.324446][ T8475] loop3: detected capacity change from 0 to 512 [ 177.338564][ T8475] EXT4-fs: Ignoring removed bh option [ 177.347514][ T8482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.361315][ T8475] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 177.378382][ T8482] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.431931][ T8475] EXT4-fs (loop3): 1 truncate cleaned up [ 177.439981][ T8482] netlink: 111804 bytes leftover after parsing attributes in process `syz.7.1411'. [ 177.466134][ T8475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.493774][ T8482] netlink: zone id is out of range [ 177.511101][ T8482] netlink: del zone limit has 4 unknown bytes [ 177.532261][ T8460] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 177.532261][ T8460] program syz.3.1403 not setting count and/or reply_len properly [ 177.555070][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.584308][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1420'. [ 177.615041][ T8516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.638491][ T8520] loop8: detected capacity change from 0 to 256 [ 177.658789][ T8516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.725574][ T8516] bond0 (unregistering): Released all slaves [ 177.749314][ T8521] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1420'. [ 177.837782][ T8527] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 195) [ 177.869959][ T8527] FAT-fs (loop8): Filesystem has been set read-only [ 177.883406][ T8516] loop7: detected capacity change from 0 to 2048 [ 177.899927][ T8527] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 195) [ 177.956362][ T8516] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.978720][ T8527] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 195) [ 178.008986][ T8527] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 195) [ 178.044225][ T8516] netlink: 'syz.7.1420': attribute type 15 has an invalid length. [ 178.108743][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.191265][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1426'. [ 178.234803][ T8547] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 178.259956][ T8548] program syz.8.1426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.458996][ T8566] ip6t_rpfilter: unknown options [ 178.493517][ T8566] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.503172][ T8566] bond0: (slave bond4): Enslaving as an active interface with an up link [ 178.512405][ T8566] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1437'. [ 178.551729][ T8566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.565777][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.596077][ T8566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.687183][ T8566] bond0 (unregistering): (slave bond4): Releasing backup interface [ 178.738494][ T8566] bond0 (unregistering): Released all slaves [ 179.519142][ T8589] loop8: detected capacity change from 0 to 512 [ 179.537260][ T8589] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 179.560699][ T8589] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1443: bad orphan inode 15 [ 179.581619][ T8585] bond_slave_0: entered allmulticast mode [ 179.587592][ T8589] loop8: lost filesystem error report for type 5 error -117 [ 179.588037][ T8589] ext4_test_bit(bit=14, block=18) = 1 [ 179.595478][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 179.595516][ C1] EXT4-fs (loop8): initial error at time 2000000570: ext4_orphan_get:1417 [ 179.595539][ C1] EXT4-fs (loop8): last error at time 2000000570: ext4_orphan_get:1417 [ 179.630316][ T8589] is_bad_inode(inode)=0 [ 179.634747][ T8589] NEXT_ORPHAN(inode)=1023 [ 179.641136][ T8589] max_ino=32 [ 179.644578][ T8589] i_nlink=0 [ 179.648208][ T8589] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2970: inode #15: comm syz.8.1443: corrupted xattr block 19: invalid header [ 179.662560][ T8589] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 179.662936][ T8589] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -117) [ 179.713345][ T8589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 179.752943][ T8593] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 179.790147][ T8589] ext2 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.858756][ T8597] EXT4-fs: Ignoring removed bh option [ 179.867538][ T8597] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 179.889476][ T8597] EXT4-fs (loop7): 1 truncate cleaned up [ 179.910548][ T8597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.998183][ T8597] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 179.998183][ T8597] program syz.7.1446 not setting count and/or reply_len properly [ 180.095610][ T8610] 9p: Bad value for 'source' [ 180.144034][ T28] kauditd_printk_skb: 125 callbacks suppressed [ 180.144048][ T28] audit: type=1400 audit(2000000571.542:3153): avc: denied { create } for pid=8611 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.198006][ T28] audit: type=1400 audit(2000000571.602:3154): avc: denied { module_request } for pid=8611 comm="syz.3.1452" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 180.248155][ T28] audit: type=1400 audit(2000000571.632:3155): avc: denied { sys_module } for pid=8611 comm="syz.3.1452" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 180.356110][ T28] audit: type=1400 audit(2000000571.762:3156): avc: denied { unmount } for pid=6976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 180.378994][ T6976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 180.392488][ T8621] nfs4: Unknown parameter '' [ 180.402864][ T8621] 9pnet_fd: Insufficient options for proto=fd [ 180.429135][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1454'. [ 180.715929][ T8623] dummy0 speed is unknown, defaulting to 1000 [ 180.791120][ T8630] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1456'. [ 180.871538][ T8629] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1457'. [ 180.929692][ T28] audit: type=1400 audit(2000000572.272:3157): avc: denied { setopt } for pid=8625 comm="syz.6.1456" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.006328][ T8630] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1456'. [ 181.160818][ T28] audit: type=1400 audit(2000000572.312:3158): avc: denied { bind } for pid=8628 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.284993][ T8630] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1456'. [ 181.463490][ T28] audit: type=1400 audit(2000000572.312:3159): avc: denied { name_bind } for pid=8628 comm="syz.1.1457" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 181.484599][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1461'. [ 181.593007][ T28] audit: type=1400 audit(2000000572.312:3160): avc: denied { node_bind } for pid=8628 comm="syz.1.1457" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 181.617274][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1459'. [ 181.670894][ T8645] batman_adv: batadv0: Adding interface: dummy0 [ 181.681520][ T8649] 9p: Bad value for 'source' [ 181.696307][ T8645] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.729451][ T28] audit: type=1400 audit(2000000573.062:3161): avc: denied { ioctl } for pid=8643 comm="syz.8.1459" path="socket:[24074]" dev="sockfs" ino=24074 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 181.833200][ T28] audit: type=1400 audit(2000000573.222:3162): avc: denied { create } for pid=8652 comm="syz.3.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 181.860532][ T8645] batman_adv: batadv0: Interface activated: dummy0 [ 181.887625][ T8654] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1459'. [ 181.911909][ T8651] bond0: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 181.930488][ T8651] bond0 (unregistering): Released all slaves [ 181.999406][ T8659] set_capacity_and_notify: 3 callbacks suppressed [ 181.999472][ T8659] loop8: detected capacity change from 0 to 512 [ 182.031989][ T8659] EXT4-fs: Ignoring removed bh option [ 182.058012][ T8659] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 182.119123][ T8659] EXT4-fs (loop8): 1 truncate cleaned up [ 182.131656][ T8659] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.186260][ T8659] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 182.186260][ T8659] program syz.8.1466 not setting count and/or reply_len properly [ 182.220297][ T8662] batman_adv: batadv0: Adding interface: dummy0 [ 182.226565][ T8662] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.299846][ T8662] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 182.648785][ T8678] 9p: Bad value for 'source' [ 182.705873][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1475'. [ 182.919379][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1478'. [ 182.936050][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.174616][ T8714] 9p: Bad value for 'wfdno' [ 183.330945][ T8720] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.371765][ T8720] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.431189][ T8720] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.491406][ T8720] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.556148][ T8726] __vm_enough_memory: pid: 8726, comm: syz.8.1466, bytes: 11728084668416 not enough memory for the allocation [ 183.568254][ T7747] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.577359][ T7747] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.589538][ T7747] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.601974][ T7747] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.666308][ T8730] ip6tnl1: entered promiscuous mode [ 183.671646][ T8730] ip6tnl1: entered allmulticast mode [ 183.836940][ T8740] veth0_to_team: entered promiscuous mode [ 183.866062][ T8742] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 183.888436][ T6976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.009393][ T8756] loop7: detected capacity change from 0 to 128 [ 184.063622][ T8759] loop8: detected capacity change from 0 to 512 [ 184.070535][ T8759] SELinux: security_context_str_to_sid (unconfined_usmackfsfloor=lt{uY(Μ:v_?BAА%3֎Rww/锺J$bJe<,fsuuid=2ee7,errors=continue) failed with errno=-22 [ 184.892086][ T8777] loop3: detected capacity change from 0 to 512 [ 184.939582][ T8777] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1513: inode has both inline data and extents flags [ 184.967120][ T8774] loop8: detected capacity change from 0 to 8192 [ 184.999664][ T8777] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 184.999758][ T8777] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1513: couldn't read orphan inode 15 (err -117) [ 185.020733][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 185.020753][ C0] EXT4-fs (loop3): initial error at time 2000000576: ext4_orphan_get:1391: inode 15 [ 185.020784][ C0] EXT4-fs (loop3): last error at time 2000000576: ext4_orphan_get:1391: inode 15 [ 185.162630][ T8791] Invalid option length (255) for dns_resolver key [ 185.181030][ T8777] loop3: lost filesystem error report for type 5 error -117 [ 185.181577][ T8777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.282611][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 185.282625][ T28] audit: type=1400 audit(2000000576.692:3201): avc: denied { connect } for pid=8786 comm="syz.6.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.372436][ T28] audit: type=1400 audit(2000000576.732:3202): avc: denied { add_name } for pid=8776 comm="syz.3.1513" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.442018][ T8795] loop8: detected capacity change from 0 to 1024 [ 185.489549][ T28] audit: type=1400 audit(2000000576.732:3203): avc: denied { create } for pid=8776 comm="syz.3.1513" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 185.515294][ T8777] syzkaller0: entered promiscuous mode [ 185.534889][ T8777] syzkaller0: entered allmulticast mode [ 185.585327][ T8795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.609424][ T28] audit: type=1400 audit(2000000576.742:3204): avc: denied { read append open } for pid=8776 comm="syz.3.1513" path="/284/file0/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 185.701623][ T8795] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 185.714194][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.735719][ T28] audit: type=1400 audit(2000000576.972:3205): avc: denied { mounton } for pid=8790 comm="syz.8.1517" path="/93/file0" dev="tmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 185.909837][ T8795] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 2: comm syz.8.1517: lblock 2 mapped to illegal pblock 2 (length 1) [ 185.954271][ T8795] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 185.956581][ T8795] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 185.965648][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 185.965666][ C1] EXT4-fs (loop8): initial error at time 2000000577: ext4_map_blocks:776: inode 3: block 2 [ 185.965721][ C1] EXT4-fs (loop8): last error at time 2000000577: ext4_map_blocks:776: inode 3: block 2 [ 186.030107][ T8795] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 48: comm syz.8.1517: lblock 0 mapped to illegal pblock 48 (length 1) [ 186.074927][ T28] audit: type=1400 audit(2000000577.102:3206): avc: denied { write } for pid=8786 comm="syz.6.1515" path="socket:[24483]" dev="sockfs" ino=24483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.135287][ T28] audit: type=1400 audit(2000000577.122:3207): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 186.156223][ T8795] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 186.157608][ T8795] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 186.183735][ T28] audit: type=1400 audit(2000000577.142:3208): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.1.25 dest=38220 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 186.250241][ T8795] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.1517: Failed to acquire dquot type 0 [ 186.387690][ T8813] __nla_validate_parse: 1 callbacks suppressed [ 186.387787][ T8813] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1519'. [ 186.404699][ T8813] netlink: zone id is out of range [ 186.410240][ T8813] netlink: zone id is out of range [ 186.417399][ T8813] netlink: zone id is out of range [ 186.496029][ T8813] netlink: set zone limit has 8 unknown bytes [ 186.549431][ T8795] loop8: lost filesystem error report for type 5 error -117 [ 186.549980][ T8795] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 186.647888][ T8795] loop8: lost filesystem error report for type 5 error -117 [ 186.649534][ T8795] EXT4-fs error (device loop8): ext4_evict_inode:255: inode #11: comm syz.8.1517: mark_inode_dirty error [ 186.709136][ T8821] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 186.758347][ T8795] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 186.758509][ T8795] EXT4-fs warning (device loop8): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 186.820411][ T8795] EXT4-fs (loop8): 1 orphan inode deleted [ 186.879234][ T12] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 186.900715][ T12] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 186.906054][ T12] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 186.927338][ T12] loop8: lost filesystem error report for type 5 error -117 [ 186.957427][ T8837] loop7: detected capacity change from 0 to 512 [ 186.999425][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 187.023481][ T8845] netlink: 'syz.3.1535': attribute type 30 has an invalid length. [ 187.039578][ T8845] netlink: 'syz.3.1535': attribute type 29 has an invalid length. [ 187.047472][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 187.056064][ T8837] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1533: inode has both inline data and extents flags [ 187.066480][ T8795] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.148257][ T8837] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.148438][ T8837] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1533: couldn't read orphan inode 15 (err -117) [ 187.157676][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 187.157714][ C1] EXT4-fs (loop7): initial error at time 2000000578: ext4_orphan_get:1391: inode 15 [ 187.157741][ C1] EXT4-fs (loop7): last error at time 2000000578: ext4_orphan_get:1391: inode 15 [ 187.200504][ T8795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.228593][ T8860] loop3: detected capacity change from 0 to 1024 [ 187.241625][ T8837] loop7: lost filesystem error report for type 5 error -117 [ 187.242057][ T8837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.245273][ T8795] EXT4-fs error (device loop8): __ext4_get_inode_loc:4782: comm syz.8.1517: Invalid inode table block 1 in block_group 0 [ 187.282049][ T8795] loop8: lost filesystem error report for type 5 error -117 [ 187.282149][ T8795] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 187.326087][ T8860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.339604][ T8795] loop8: lost filesystem error report for type 5 error -117 [ 187.344983][ T8795] EXT4-fs error (device loop8): ext4_quota_off:7285: inode #3: comm syz.8.1517: mark_inode_dirty error [ 187.358529][ T8860] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1541: Allocating blocks 449-513 which overlap fs metadata [ 187.377813][ T8795] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 187.390473][ T8791] syz.8.1517 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 187.459591][ T8837] SELinux: failed to load policy [ 187.490805][ T8860] EXT4-fs (loop3): pa ffff88810a006380: logic 32, phys. 449, len 2 [ 187.498736][ T8860] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 187.513939][ T8791] CPU: 0 UID: 0 PID: 8791 Comm: syz.8.1517 Not tainted syzkaller #0 PREEMPT(full) [ 187.513995][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.514011][ T8791] Call Trace: [ 187.514088][ T8791] [ 187.514094][ T8791] __dump_stack+0x1d/0x30 [ 187.514119][ T8791] dump_stack_lvl+0x95/0xd0 [ 187.514140][ T8791] dump_stack+0x15/0x1b [ 187.514223][ T8791] dump_header+0x80/0x240 [ 187.514245][ T8791] oom_kill_process+0x295/0x350 [ 187.514263][ T8791] out_of_memory+0x97d/0xb80 [ 187.514280][ T8791] try_charge_memcg+0x62e/0xa10 [ 187.514309][ T8791] obj_cgroup_charge_pages+0x23/0xc0 [ 187.514344][ T8791] __memcg_kmem_charge_page+0x9e/0x170 [ 187.514381][ T8791] __alloc_frozen_pages_noprof+0x18a/0x360 [ 187.514410][ T8791] alloc_pages_mpol+0xb3/0x260 [ 187.514436][ T8791] alloc_pages_noprof+0x8f/0x130 [ 187.514497][ T8791] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 187.514524][ T8791] __kvmalloc_node_noprof+0x3d4/0x650 [ 187.514544][ T8791] ? futex_hash_allocate+0x190/0x9d0 [ 187.514612][ T8791] ? futex_hash_allocate+0x190/0x9d0 [ 187.514669][ T8791] futex_hash_allocate+0x190/0x9d0 [ 187.514795][ T8791] ? cap_task_prctl+0x13f/0x6e0 [ 187.514817][ T8791] futex_hash_prctl+0xd8/0xf0 [ 187.514913][ T8791] __se_sys_prctl+0xa3d/0x13f0 [ 187.515017][ T8791] __x64_sys_prctl+0x67/0x80 [ 187.515039][ T8791] x64_sys_call+0x2533/0x3020 [ 187.515110][ T8791] do_syscall_64+0x12c/0x370 [ 187.515148][ T8791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.515169][ T8791] RIP: 0033:0x7ff03844c799 [ 187.515182][ T8791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.515219][ T8791] RSP: 002b:00007ff036e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 187.515236][ T8791] RAX: ffffffffffffffda RBX: 00007ff0386c5fa0 RCX: 00007ff03844c799 [ 187.515247][ T8791] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 187.515257][ T8791] RBP: 00007ff0384e2c99 R08: 0000000000000000 R09: 0000000000000000 [ 187.515341][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.515353][ T8791] R13: 00007ff0386c6038 R14: 00007ff0386c5fa0 R15: 00007fff73974558 [ 187.515371][ T8791] [ 187.515598][ T8791] memory: usage 148852kB, limit 307200kB, failcnt 463 [ 187.560443][ T8860] EXT4-fs (loop3): pa ffff88810a006380: logic 32, phys. 481, len 2 [ 187.617825][ T8791] memory+swap: usage 115652kB, limit 9007199254740988kB, failcnt 0 [ 187.621169][ T8860] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, [ 187.645159][ T8791] kmem: usage 98612kB, limit 9007199254740988kB, failcnt 0 [ 187.645225][ T8860] free 0, pa_free 1 [ 187.659530][ T8791] Memory cgroup stats for [ 187.710301][ T8860] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, [ 187.721529][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.724813][ T8860] inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 187.808235][ T8791] /syz8: [ 187.808602][ T8791] cache 0 [ 187.814617][ T8791] rss 28672 [ 187.818263][ T8791] shmem 0 [ 187.821656][ T8791] mapped_file 0 [ 187.825354][ T8791] dirty 0 [ 187.828602][ T8791] writeback 0 [ 187.832201][ T8791] workingset_refault_anon 37 [ 187.839640][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1547'. [ 187.856756][ T8791] workingset_refault_file 0 [ 187.864335][ T8791] swap 17113088 [ 187.868069][ T8791] swapcached 17690624 [ 187.872199][ T8791] pgpgin 92490 [ 187.874233][ T8860] 9p: Bad value for 'source' [ 187.875852][ T8791] pgpgout 92475 [ 187.887554][ T8879] loop7: detected capacity change from 0 to 256 [ 187.908359][ T8791] pgfault 88197 [ 187.912173][ T8791] pgmajfault 9 [ 187.918675][ T8791] inactive_anon 0 [ 187.925788][ T8879] FAT-fs (loop7): Directory bread(block 64) failed [ 187.932362][ T8879] FAT-fs (loop7): Directory bread(block 65) failed [ 187.938916][ T8879] FAT-fs (loop7): Directory bread(block 66) failed [ 187.945470][ T8791] active_anon 61440 [ 187.949369][ T8791] inactive_file 0 [ 187.953498][ T8791] active_file 0 [ 187.954262][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.957007][ T8879] FAT-fs (loop7): Directory bread(block 67) failed [ 187.972720][ T8791] unevictable 0 [ 187.976488][ T8791] hierarchical_memory_limit 314572800 [ 187.982058][ T8791] hierarchical_memsw_limit 9223372036854771712 [ 187.996892][ T8879] FAT-fs (loop7): Directory bread(block 68) failed [ 188.010509][ T8791] total_cache 0 [ 188.014110][ T8879] FAT-fs (loop7): Directory bread(block 69) failed [ 188.020774][ T8791] total_rss 28672 [ 188.024461][ T8791] total_shmem 0 [ 188.028044][ T8879] FAT-fs (loop7): Directory bread(block 70) failed [ 188.034625][ T8791] total_mapped_file 0 [ 188.038664][ T8791] total_dirty 0 [ 188.042260][ T8791] total_writeback 0 [ 188.046082][ T8879] FAT-fs (loop7): Directory bread(block 71) failed [ 188.052823][ T8791] total_workingset_refault_anon 37 [ 188.057960][ T8791] total_workingset_refault_file 0 [ 188.063039][ T8879] FAT-fs (loop7): Directory bread(block 72) failed [ 188.069611][ T8791] total_swap 17113088 [ 188.073602][ T8791] total_swapcached 17690624 [ 188.078115][ T8879] FAT-fs (loop7): Directory bread(block 73) failed [ 188.084808][ T8791] total_pgpgin 92490 [ 188.090992][ T8791] total_pgpgout 92475 [ 188.099559][ T8791] total_pgfault 88197 [ 188.123506][ T8791] total_pgmajfault 9 [ 188.127628][ T8791] total_inactive_anon 0 [ 188.132927][ T8791] total_active_anon 61440 [ 188.137244][ T8791] total_inactive_file 0 [ 188.141423][ T8791] total_active_file 0 [ 188.145435][ T8791] total_unevictable 0 [ 188.149428][ T8791] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1517,pid=8790,uid=0 [ 188.175087][ T8791] Memory cgroup out of memory: Killed process 8790 (syz.8.1517) total-vm:94296kB, anon-rss:1340kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 188.528613][ T8912] loop7: detected capacity change from 0 to 1024 [ 188.550680][ T8912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.572149][ T8912] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.1559: Allocating blocks 449-513 which overlap fs metadata [ 188.599065][ T8912] EXT4-fs (loop7): pa ffff88810a0062a0: logic 32, phys. 449, len 2 [ 188.607051][ T8912] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 188.666720][ T8917] 9p: Bad value for 'source' [ 188.703246][ T8912] EXT4-fs (loop7): pa ffff88810a0062a0: logic 32, phys. 481, len 2 [ 188.711258][ T8912] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 188.861904][ T8912] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 189.029766][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.844501][ T8944] loop7: detected capacity change from 0 to 512 [ 189.961077][ T8944] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.991961][ T8944] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.018041][ T8949] loop8: detected capacity change from 0 to 512 [ 190.028450][ T8944] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.1569: corrupted inode contents [ 190.043773][ T8949] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.048353][ T8944] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.1569: mark_inode_dirty error [ 190.073566][ T8944] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.1569: corrupted inode contents [ 190.085807][ T8944] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1569: mark_inode_dirty error [ 190.101656][ T8952] EXT4-fs (loop7): shut down requested (1) [ 190.111832][ T8949] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 190.127499][ T8949] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1570: bg 0: block 248: padding at end of block bitmap is not set [ 190.143075][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1569'. [ 190.154579][ T8949] loop8: lost filesystem error report for type 5 error -117 [ 190.154805][ T8949] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.1570: Failed to acquire dquot type 1 [ 190.162124][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 190.162160][ C1] EXT4-fs (loop8): last error at time 2000000581: ext4_validate_block_bitmap:441 [ 190.205115][ T8949] loop8: lost filesystem error report for type 5 error -117 [ 190.205482][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.222691][ T8949] EXT4-fs (loop8): 1 truncate cleaned up [ 190.245958][ T8949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 190.265290][ T8956] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1572'. [ 190.284562][ T8949] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1570'. [ 190.295918][ T28] kauditd_printk_skb: 157 callbacks suppressed [ 190.295929][ T28] audit: type=1400 audit(2000000581.702:3363): avc: denied { shutdown } for pid=8957 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.337871][ T28] audit: type=1400 audit(2000000581.732:3364): avc: denied { create } for pid=8948 comm="syz.8.1570" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 190.402140][ T28] audit: type=1400 audit(2000000581.812:3365): avc: denied { write } for pid=8955 comm="syz.7.1572" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.410166][ T8956] usb usb7: usbfs: process 8956 (syz.7.1572) did not claim interface 0 before use [ 190.535199][ T28] audit: type=1400 audit(2000000581.932:3366): avc: denied { cpu } for pid=8955 comm="syz.7.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 190.619442][ T28] audit: type=1400 audit(2000000582.012:3367): avc: denied { write } for pid=8965 comm="syz.7.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.718408][ T8949] syz.8.1570 (8949) used greatest stack depth: 8376 bytes left [ 190.740633][ T6976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 190.756814][ T7819] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-5 [ 190.765937][ T7819] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 1 [ 190.788528][ T7819] loop8: lost filesystem error report for type 5 error -117 [ 190.827005][ T28] audit: type=1400 audit(2000000582.232:3368): avc: denied { bind } for pid=8977 comm="syz.3.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.870402][ T28] audit: type=1400 audit(2000000582.282:3369): avc: denied { create } for pid=8975 comm="syz.8.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.890801][ T28] audit: type=1400 audit(2000000582.282:3370): avc: denied { read } for pid=23 comm="kworker/1:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24895 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 190.917493][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [ 190.926649][ T28] audit: type=1400 audit(2000000582.302:3371): avc: denied { create } for pid=8975 comm="syz.8.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 191.173710][ T9000] FAULT_INJECTION: forcing a failure. [ 191.173710][ T9000] name failslab, interval 1, probability 0, space 0, times 0 [ 191.186376][ T9000] CPU: 1 UID: 0 PID: 9000 Comm: syz.7.1590 Not tainted syzkaller #0 PREEMPT(full) [ 191.186398][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.186504][ T9000] Call Trace: [ 191.186510][ T9000] [ 191.186518][ T9000] __dump_stack+0x1d/0x30 [ 191.186539][ T9000] dump_stack_lvl+0x95/0xd0 [ 191.186561][ T9000] dump_stack+0x15/0x1b [ 191.186576][ T9000] should_fail_ex+0x263/0x280 [ 191.186624][ T9000] ? __pfx_ip4_key_hashfn+0x10/0x10 [ 191.186700][ T9000] should_failslab+0x8c/0xb0 [ 191.186718][ T9000] kmem_cache_alloc_noprof+0x66/0x400 [ 191.186796][ T9000] ? inet_frag_find+0x377/0xc70 [ 191.186822][ T9000] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 191.186909][ T9000] ? __pfx_ip4_key_hashfn+0x10/0x10 [ 191.186930][ T9000] inet_frag_find+0x377/0xc70 [ 191.186988][ T9000] ip_defrag+0x1c3/0xe60 [ 191.187071][ T9000] ? __rcu_read_unlock+0x33/0x70 [ 191.187091][ T9000] ? ip_route_input_noref+0x66/0x90 [ 191.187113][ T9000] ip_local_deliver+0xa7/0x1e0 [ 191.187161][ T9000] ? iptable_mangle_hook+0x119/0x260 [ 191.187184][ T9000] ? __pfx_ip_local_deliver+0x10/0x10 [ 191.187207][ T9000] ip_rcv_finish+0x188/0x1a0 [ 191.187253][ T9000] ip_rcv+0x62/0x160 [ 191.187314][ T9000] ? __pfx_ip_rcv_finish+0x10/0x10 [ 191.187372][ T9000] ? __pfx_ip_rcv+0x10/0x10 [ 191.187393][ T9000] netif_receive_skb+0x137/0x530 [ 191.187486][ T9000] ? tun_rx_batched+0xd1/0x440 [ 191.187505][ T9000] tun_rx_batched+0x106/0x440 [ 191.187543][ T9000] ? eth_type_trans+0x215/0x3d0 [ 191.187589][ T9000] tun_get_user+0x2011/0x27c0 [ 191.187611][ T9000] ? ref_tracker_alloc+0x1eb/0x2f0 [ 191.187632][ T9000] tun_chr_write_iter+0x15e/0x210 [ 191.187652][ T9000] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 191.187726][ T9000] vfs_write+0x5a6/0x9f0 [ 191.187759][ T9000] ksys_write+0xdc/0x1a0 [ 191.187775][ T9000] __x64_sys_write+0x40/0x50 [ 191.187863][ T9000] x64_sys_call+0x27e1/0x3020 [ 191.187980][ T9000] do_syscall_64+0x12c/0x370 [ 191.187999][ T9000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.188019][ T9000] RIP: 0033:0x7fc672c6cfce [ 191.188035][ T9000] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.188085][ T9000] RSP: 002b:00007fc6716fefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.188168][ T9000] RAX: ffffffffffffffda RBX: 00007fc6716ff6c0 RCX: 00007fc672c6cfce [ 191.188213][ T9000] RDX: 0000000000000032 RSI: 0000200000000740 RDI: 00000000000000c8 [ 191.188226][ T9000] RBP: 00007fc6716ff090 R08: 0000000000000000 R09: 0000000000000000 [ 191.188239][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.188251][ T9000] R13: 00007fc672f26038 R14: 00007fc672f25fa0 R15: 00007ffe77727d18 [ 191.188268][ T9000] [ 191.878070][ T9008] loop7: detected capacity change from 0 to 1024 [ 191.894845][ T9008] EXT4-fs: Ignoring removed orlov option [ 191.949547][ T9008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.994483][ T9014] loop3: detected capacity change from 0 to 1024 [ 192.029943][ T9016] loop7: detected capacity change from 1024 to 1023 [ 192.044514][ T9014] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 192.064358][ T9014] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 192.074591][ T9014] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: comm syz.3.1594: inode #4294967295: comm syz.3.1594: iget: illegal inode # [ 192.079622][ T9008] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1593'. [ 192.088680][ T9014] loop3: lost filesystem error report for type 5 error -117 [ 192.097850][ T9014] EXT4-fs (loop3): no journal found [ 192.105160][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 192.105176][ C1] EXT4-fs (loop3): initial error at time 2000000839: ext4_get_journal_inode:5863 [ 192.105203][ C1] EXT4-fs (loop3): last error at time 2000000839: ext4_get_journal_inode:5863 [ 192.149233][ T9014] EXT4-fs (loop3): can't get journal size [ 192.155607][ T6808] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.175797][ T9014] EXT4-fs (loop3): failed to initialize system zone (-22) [ 192.221969][ T9014] EXT4-fs (loop3): mount failed [ 193.027619][ T9063] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.043843][ T9062] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.191169][ T9069] loop3: detected capacity change from 0 to 8192 [ 193.378943][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1624'. [ 193.388181][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1624'. [ 193.398514][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1624'. [ 193.408251][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1624'. [ 193.488631][ T9099] loop8: detected capacity change from 0 to 512 [ 193.497568][ T9099] EXT4-fs: dax option not supported [ 193.531583][ T9103] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1630'. [ 193.538136][ T9099] loop8: detected capacity change from 0 to 1024 [ 193.570846][ T9099] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.609833][ T9099] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: comm syz.8.1628: inode #3237228: comm syz.8.1628: iget: illegal inode # [ 193.658697][ T9099] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1628: error while reading EA inode 3237228 err=-117 [ 193.678868][ T9110] loop3: detected capacity change from 0 to 512 [ 193.705841][ T9110] EXT4-fs (loop3): 1 truncate cleaned up [ 193.735869][ T9110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.762735][ T6976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.779193][ T9110] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.1632: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 193.917733][ T9110] netlink: 'syz.3.1632': attribute type 10 has an invalid length. [ 193.932646][ T9110] hsr0: entered promiscuous mode [ 194.046881][ T9110] bridge2: port 1(hsr0) entered blocking state [ 194.101280][ T9110] bridge2: port 1(hsr0) entered disabled state [ 194.164193][ T9110] hsr0: entered allmulticast mode [ 194.257495][ T9110] hsr_slave_0: entered allmulticast mode [ 194.326892][ T9110] hsr_slave_1: entered allmulticast mode [ 194.362695][ T9145] xt_hashlimit: size too large, truncated to 1048576 [ 194.461098][ T9133] dummy0 speed is unknown, defaulting to 1000 [ 194.708927][ T9153] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1644'. [ 194.709724][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.732921][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1646'. [ 194.825552][ T9153] dummy0 speed is unknown, defaulting to 1000 [ 194.837076][ T9162] netlink: 10 bytes leftover after parsing attributes in process `syz.8.1648'. [ 195.408511][ T9172] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1651'. [ 195.418950][ T9172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.496357][ T9173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.524738][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 195.524752][ T28] audit: type=1400 audit(2000000842.937:3409): avc: denied { create } for pid=9179 comm="syz.6.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 195.609564][ C1] ================================================================== [ 195.617668][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 195.624870][ C1] [ 195.627174][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0: [ 195.635219][ C1] wq_worker_tick+0x64/0x240 [ 195.639802][ C1] sched_tick+0xda/0x210 [ 195.644030][ C1] update_process_times+0x15e/0x190 [ 195.649231][ C1] tick_nohz_handler+0x275/0x3d0 [ 195.654156][ C1] __hrtimer_run_queues+0x218/0x4f0 [ 195.659339][ C1] hrtimer_interrupt+0x269/0x810 [ 195.664261][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 195.670145][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 195.675783][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 195.681745][ C1] crng_make_state+0xc1/0x200 [ 195.686412][ C1] _get_random_bytes+0x85/0x1b0 [ 195.691254][ C1] get_random_bytes+0x1d/0x30 [ 195.695919][ C1] nsim_dev_trap_report_work+0x474/0x630 [ 195.701538][ C1] process_scheduled_works+0x513/0xa10 [ 195.706987][ C1] worker_thread+0x58a/0x780 [ 195.711573][ C1] kthread+0x22a/0x280 [ 195.715630][ C1] ret_from_fork+0x150/0x360 [ 195.720214][ C1] ret_from_fork_asm+0x1a/0x30 [ 195.724972][ C1] [ 195.727277][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1: [ 195.735323][ C1] wq_worker_tick+0x64/0x240 [ 195.739910][ C1] sched_tick+0xda/0x210 [ 195.744137][ C1] update_process_times+0x15e/0x190 [ 195.749335][ C1] tick_nohz_handler+0x275/0x3d0 [ 195.754267][ C1] __hrtimer_run_queues+0x218/0x4f0 [ 195.759449][ C1] hrtimer_interrupt+0x269/0x810 [ 195.764375][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 195.770256][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 195.775881][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 195.781844][ C1] crng_make_state+0xc1/0x200 [ 195.786517][ C1] _get_random_bytes+0x85/0x1b0 [ 195.791370][ C1] get_random_bytes+0x1d/0x30 [ 195.796040][ C1] nsim_dev_trap_report_work+0x482/0x630 [ 195.801658][ C1] process_scheduled_works+0x513/0xa10 [ 195.807108][ C1] worker_thread+0x58a/0x780 [ 195.811694][ C1] kthread+0x22a/0x280 [ 195.815744][ C1] ret_from_fork+0x150/0x360 [ 195.820325][ C1] ret_from_fork_asm+0x1a/0x30 [ 195.825076][ C1] [ 195.827380][ C1] value changed: 0x00000000000c0df0 -> 0x00000000000c3500 [ 195.834462][ C1] [ 195.836765][ C1] Reported by Kernel Concurrency Sanitizer on: [ 195.842981][ C1] CPU: 1 UID: 0 PID: 7747 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 195.852419][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.862459][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 195.869214][ C1] ================================================================== [ 195.944208][ T28] audit: type=1400 audit(2000000843.347:3410): avc: denied { accept } for pid=9189 comm="syz.7.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.974075][ T9193] loop8: detected capacity change from 0 to 1024 [ 196.005825][ T9184] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 196.017594][ T9193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.042066][ T9184] bond0 (unregistering): Released all slaves [ 196.052475][ T9193] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.1657: Allocating blocks 449-513 which overlap fs metadata [ 196.072362][ T9193] EXT4-fs (loop8): pa ffff88810a0061c0: logic 32, phys. 449, len 2 [ 196.080351][ T9193] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 196.091400][ T9193] EXT4-fs (loop8): pa ffff88810a0061c0: logic 32, phys. 481, len 2 [ 196.099354][ T9193] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 196.129751][ T9193] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 196.157496][ T9193] 9p: Bad value for 'source' [ 196.189958][ T6976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.