last executing test programs: 1m44.891360963s ago: executing program 32 (id=1637): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) socket$igmp(0x2, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m43.719983964s ago: executing program 33 (id=1653): capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="1848"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socket$inet(0x2, 0x6, 0x8000) 1m38.379842382s ago: executing program 34 (id=1711): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x124, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0xd4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}]}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x68904dda}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xeef}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000004}, 0x20004010) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ec"], 0x100}}, 0x0) 1m38.246169209s ago: executing program 35 (id=1713): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3) r3 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r3, 0x1) poll(&(0x7f0000000100)=[{r3, 0x84}], 0x1, 0x3ff) sendto$inet(r3, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @loopback}, 0x10) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) unshare(0x28000600) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0x5) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a52dbc43efa8698dfa871c51852e4451b57d037ad3c04594282425cd3317b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0xfff, 0x8, 0x1, 0x10000, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0xa000200) semtimedop(0x0, &(0x7f00000002c0)=[{0x4, 0x4, 0x1000}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000d000000cc00020006"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, 0x0, 0x0, 0x2, r5, 0x0, 0x500}, 0x38) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x1, 0x5, 0x6, 0xb4}, {0x1ff, 0xb3, 0x6, 0xd8}]}) unshare(0x20060400) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 1m33.11946632s ago: executing program 8 (id=1776): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xac, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f00000004c0)={0xbe80b200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) writev(r2, &(0x7f0000000e00)=[{&(0x7f00000008c0)='b', 0x1}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000009c0)={r3, r2, 0x9, 0x82, &(0x7f0000000740)="7ecf5d6964c7c56ed2b6fa61f49baa27cb20e1692063960687463bcd3b14806cac3bab292730e9c5b96d2523f42afa85fba5ca76039b6c883804884c0d1bf23305d51de47606acba202c3f31f971ec4eb7cf4fc43a0a8860002593391cb8766927650d766c18506fa26fb516e50bf1b43a4489a76b1bf3e66f490de6ec62db451b39", 0x10, 0xd6, 0x2, 0xfeff, 0xdd3, 0x1, 0xc, 'syz0\x00'}) fchdir(r5) close(r5) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)={0x454a83, 0x128, 0x9}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r6, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) writev(r4, &(0x7f0000001000)=[{&(0x7f0000000880)="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", 0x107}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e", 0x3b}, {&(0x7f0000000cc0)="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", 0x2be}], 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) pipe2(&(0x7f0000000c40), 0x4800) sendfile(r4, r4, 0x0, 0x7fffeff9) 1m32.972621229s ago: executing program 8 (id=1778): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) socket$igmp(0x2, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) sendfile(r0, r1, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m32.720157371s ago: executing program 8 (id=1781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) 1m32.719976932s ago: executing program 36 (id=1781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r0, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) 1m29.39247795s ago: executing program 37 (id=1811): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x100000000000000, &(0x7f0000000100), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fd1c291b3091ec1a0600682c975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1m27.032397515s ago: executing program 38 (id=1839): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) 1m25.882368543s ago: executing program 39 (id=1854): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @loopback}, 0x10) 1m24.81588706s ago: executing program 40 (id=1859): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xac, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f00000004c0)={0xbe80b200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) writev(r2, &(0x7f0000000e00)=[{&(0x7f00000008c0)='b', 0x1}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000009c0)={r3, r2, 0x9, 0x82, &(0x7f0000000740)="7ecf5d6964c7c56ed2b6fa61f49baa27cb20e1692063960687463bcd3b14806cac3bab292730e9c5b96d2523f42afa85fba5ca76039b6c883804884c0d1bf23305d51de47606acba202c3f31f971ec4eb7cf4fc43a0a8860002593391cb8766927650d766c18506fa26fb516e50bf1b43a4489a76b1bf3e66f490de6ec62db451b39", 0x10, 0xd6, 0x2, 0xfeff, 0xdd3, 0x1, 0xc, 'syz0\x00'}) fchdir(r5) close(r5) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)={0x454a83, 0x128, 0x9}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r6, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) writev(r4, &(0x7f0000001000)=[{&(0x7f0000000880)="76b0d8e7b4fbe83b9a3a82e0bbf91c1680d1f0b00633f12efc58b563dbdcfe39385fa5f25b4f44f77855053cd2c70c4b2f93a03ac5065ae95772c490638e6f2609cd625dcb26a8342315a054d59e843d7acd6cf3c414d1cee5b36208364ca1fd503e7f9f9e7c8b9ab7985616d5283e56db010e1021e45a2452e8ddd7966b3c4232e6015e47ed174b11e6c81d085fc43b5c85fb84ae756ad048a44c6c84414d1e045a67447a237ff927f9ef158987745861cf8b330f7c234aff1499be56651be1c7a1221477ae394445e5014caad4442312bca4e1a985351d4d02c64c53f617a08a415575046ffd74bf9f6af6653a442b4728c46a084d2e7cb4395afe46c77ed4ec78d92d2f23ca", 0x107}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e", 0x3b}, {&(0x7f0000000cc0)="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", 0x2be}], 0x3) sendfile(r4, r4, 0x0, 0x7fffeff9) 1m24.550862584s ago: executing program 7 (id=1861): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1m24.528047018s ago: executing program 7 (id=1862): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@dax}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@bsdgroups}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x55f, &(0x7f0000000440)="$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") r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x211c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000009c0)={0x0, 'pimreg1\x00', {0x4}, 0x4}) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) sendmsg(r3, &(0x7f0000000d40)={&(0x7f0000000a00)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a80)="594a049802c473c823d03f87b99f1c14fdda8793322bd847cc5dad9e55b7f538506e433c327aa89801293d3a27c773646c20f96c70fdc9c9b7bf85eee4f720ee0a69e6a0e8d36b672a9cf35ef07bf642891b0962fe8913a03b2cb536f57e7828886ff94ffcf1ca3faa05233856635de252b4c2bc54b4358388d096bfe074bfa09a0946b00e6507dff42796d836b6ee98ca2bfe9dae2eae6966d8fc13b851ec1f1eca9f40c0b6cc8cd69d9e22", 0xac}, {&(0x7f0000000b40)="68632c2dbf24b2cfa0ec0d1eb8b9bd6ae54f57bde4561b454e72aa27e0490a9bd153378ba9e606fc7560024637db0dd421605fabff16278dc8e8ff9a97e44559e49b1f9351cd09911303c049e48d7cee122d2555fb204743c444", 0x5a}, {&(0x7f0000000bc0)="b1b1927579ef6eb28f834686557964", 0xf}, {&(0x7f0000000c00)="902fb48926f713f96ed58b10e38c4dd66313295bfda38fe450319a3fb464835a5da1a3b28c677918f016550474e324d5bb68875a48469f4ddad4f787569d1c1015837179a32932fc87243598b9498a294bbde16e9126c521afc08a32fdbfa2b4e7e5b739b7a23fcc9cff54209875d7dd486fa75d66ac8cf8e9dda79d44a37b91696ddc956acd76b7e1047f527badc28fff2b7e8727a2defaefe0415963b53b2f61665eb57817dc90eb50a9fad84575e6902cc317139fbf3dafa1f076feb689ea83e9a96e7fef2a80a4416ed37fc645c51d05ed4a6c961c", 0xd7}], 0x4}, 0x4048041) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0xffffffda) 1m24.335824022s ago: executing program 7 (id=1863): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xac, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f00000004c0)={0xbe80b200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) writev(r2, &(0x7f0000000e00)=[{&(0x7f00000008c0)='b', 0x1}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000009c0)={r3, r2, 0x9, 0x82, &(0x7f0000000740)="7ecf5d6964c7c56ed2b6fa61f49baa27cb20e1692063960687463bcd3b14806cac3bab292730e9c5b96d2523f42afa85fba5ca76039b6c883804884c0d1bf23305d51de47606acba202c3f31f971ec4eb7cf4fc43a0a8860002593391cb8766927650d766c18506fa26fb516e50bf1b43a4489a76b1bf3e66f490de6ec62db451b39", 0x10, 0xd6, 0x2, 0xfeff, 0xdd3, 0x1, 0xc, 'syz0\x00'}) fchdir(r5) close(r5) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)={0x454a83, 0x128, 0x9}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r6, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) sendfile(r4, r4, 0x0, 0x7fffeff9) 1m19.826038023s ago: executing program 7 (id=1872): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xac, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f00000004c0)={0xbe80b200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) writev(r2, &(0x7f0000000e00)=[{&(0x7f00000008c0)='b', 0x1}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000009c0)={r3, r2, 0x9, 0x82, &(0x7f0000000740)="7ecf5d6964c7c56ed2b6fa61f49baa27cb20e1692063960687463bcd3b14806cac3bab292730e9c5b96d2523f42afa85fba5ca76039b6c883804884c0d1bf23305d51de47606acba202c3f31f971ec4eb7cf4fc43a0a8860002593391cb8766927650d766c18506fa26fb516e50bf1b43a4489a76b1bf3e66f490de6ec62db451b39", 0x10, 0xd6, 0x2, 0xfeff, 0xdd3, 0x1, 0xc, 'syz0\x00'}) fchdir(r5) close(r5) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)={0x454a83, 0x128, 0x9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) sendfile(r4, r4, 0x0, 0x7fffeff9) 1m19.589528654s ago: executing program 7 (id=1885): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x80000001) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 1m19.068004351s ago: executing program 41 (id=1893): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a0012000a00270000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1m18.37614788s ago: executing program 7 (id=1902): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) (fail_nth: 4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) write$UHID_INPUT(r1, &(0x7f00000017c0)={0x8, {"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", 0x1000}}, 0x1006) 1m18.371429601s ago: executing program 42 (id=1902): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) (fail_nth: 4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) write$UHID_INPUT(r1, &(0x7f00000017c0)={0x8, {"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", 0x1000}}, 0x1006) 1m15.442827288s ago: executing program 8 (id=1895): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xac, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f00000004c0)={0xbe80b200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) writev(r2, &(0x7f0000000e00)=[{&(0x7f00000008c0)='b', 0x1}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000009c0)={r3, r2, 0x9, 0x82, &(0x7f0000000740)="7ecf5d6964c7c56ed2b6fa61f49baa27cb20e1692063960687463bcd3b14806cac3bab292730e9c5b96d2523f42afa85fba5ca76039b6c883804884c0d1bf23305d51de47606acba202c3f31f971ec4eb7cf4fc43a0a8860002593391cb8766927650d766c18506fa26fb516e50bf1b43a4489a76b1bf3e66f490de6ec62db451b39", 0x10, 0xd6, 0x2, 0xfeff, 0xdd3, 0x1, 0xc, 'syz0\x00'}) fchdir(r5) close(r5) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)={0x454a83, 0x128, 0x9}, 0x18) sendfile(r4, r4, 0x0, 0x7fffeff9) 1m15.159944824s ago: executing program 8 (id=1928): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ftruncate(r1, 0x80000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m13.399687141s ago: executing program 8 (id=1950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x1000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0xa47a}]}}]}, 0x44}}, 0x44) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000013c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0xe0, 0x6, 0x5, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x40, 0x1, 0x1ff, 0xffff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001400)={'batadv_slave_1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001500)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000001580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f0000001640)={0x130, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0x130}, 0x1, 0x0, 0x0, 0x24004895}, 0x44840) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600), 0x4, 0x0, 0xff4f}, 0x71}], 0x1, 0x40, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x108}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}]}, 0x4c}}, 0x0) 1m13.374180095s ago: executing program 43 (id=1950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x1000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0xa47a}]}}]}, 0x44}}, 0x44) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000013c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0xe0, 0x6, 0x5, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x40, 0x1, 0x1ff, 0xffff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001400)={'batadv_slave_1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001500)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000001580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f0000001640)={0x130, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0x130}, 0x1, 0x0, 0x0, 0x24004895}, 0x44840) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600), 0x4, 0x0, 0xff4f}, 0x71}], 0x1, 0x40, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x108}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}]}, 0x4c}}, 0x0) 1m9.229139479s ago: executing program 9 (id=1990): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x25, 0x1, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1m9.132985411s ago: executing program 9 (id=1991): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1m9.06126088s ago: executing program 9 (id=1994): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000900)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) fallocate(r0, 0x2, 0xbf9, 0x2000402) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000020) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r1, &(0x7f0000000240)={0x1, 0x1, 0x2, 0x0, 0x1}, 0x8) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m8.899680611s ago: executing program 9 (id=1998): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xac, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f00000004c0)={0xbe80b200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) writev(r2, &(0x7f0000000e00)=[{&(0x7f00000008c0)='b', 0x1}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7fffeff9) 1m8.654407883s ago: executing program 9 (id=2000): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x8080, &(0x7f00000000c0)={[{@norecovery}, {@quota}, {@errors_remount}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x112) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x6) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 1m8.394712136s ago: executing program 9 (id=2005): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019", @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r2, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m8.344026543s ago: executing program 44 (id=2005): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019", @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r2, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 57.262859151s ago: executing program 6 (id=2211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140"], 0xf4}}, 0x10) 57.19597208s ago: executing program 6 (id=2212): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xac, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f00000004c0)={0xbe80b200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) sendfile(r2, r2, 0x0, 0x7fffeff9) 57.082122914s ago: executing program 6 (id=2219): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x3, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="c04c", 0x5e0}], 0x1, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x8010) 57.065121736s ago: executing program 6 (id=2220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x22) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000dc0)={0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) setregid(0x0, r5) r6 = syz_io_uring_complete(0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000e40)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r10, 0xffffffffffffffff, 0x0) setfsgid(r10) sendmsg$unix(r2, &(0x7f0000000fc0)={&(0x7f0000000540)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000bc0)="5639c98e1518977ad2d4cdf749fbfa24d1e864e32f0e531c77ed334e18e1b8de1d6cb584ebc2d0706be6f1376ea37dc65c6b6c2597a5dc6af1ce14f1365459239ab5352d007bb3362cd32169c480ef533b65d5a69442906dd27394b850351dfcc0c074fbf5444a97971cd1d3f6d442631ec905c125214d1f1c5673e3cffc2fbfc8", 0x81}, {&(0x7f0000000c80)="0657bd00518b6b68a71abf20cb5973839338293147a4bc3296dff1945e2286f24cfe4a71088b2ca8e64c38134318d9fe605f5b71e75cb6c0eaa99034a5853b9f26821bbab55e6cf661ac5e936d077d7f115f4fd3cda1b2601820f76ec8e70dc46a64cd3d483435c2d6dd515ee5b27dbe1ee1ff4eb6fc94afbcf80454c9ad1693fe23f67924b7e86f42ff78b1adc32fd5208f4d70890f4b910ffc7242a7938394b55972abcadd10b24037f27b2b23cdb45c52446c1d8093b891e703bf1b02820c838587f06b6358f74190ac4ff9d56508a7e9608603204a3982ab1fb494d9ea59a2d4b14a5680d1", 0xe7}], 0x2, &(0x7f0000000f40)=[@rights={{0x24, 0x1, 0x1, [r2, r1, r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}, @rights={{0x18, 0x1, 0x1, [r0, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r10}}}], 0x80, 0x44000080}, 0x3568e6350dd1db38) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) process_madvise(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)="e84b1138e82658b87bda94cd4e8bcebcefc434e29c8a0af5f04535e2189a6d684e482ea2ef6b86db8d31bd6252ae3c6fb82485d94d9ff9e040b8a78c4f6a5ebbecc8ef091c99b39fa6df5213a5091e71ae1448eaa5a870d8d63462f9e2fc09f308c6a66c6a9fb3f66256fd7d77adaad6eeef67754fb2364db4b371856613338817e16309faba7ca17ffb66141b15d6b6841f96c43def5ffce40f60182059cfa0d137e2e3d66ff66068a0dcb1bbff7d62803342215d6076230d7b2fd06462d21a417194c6dcf9099ffea643063c725c11", 0xd0}, {&(0x7f0000000040)="4987816b72206a6eb276ccb8f268626763955bfbba485f53c7c2518826e8c4015f11f2240dcdb2e62ede26a1d7d72e525fe38a", 0x33}, {&(0x7f0000000440)="9e3ea6b36cae7d95cfc76651b81e750654b0ed2406f718f35191bb414467f603ac046cb3183e14efba7d4f74c414df9466468e780d8d7ed800d15def3351648ea80c71bb646bf8f89a3c1e12e357769a0a4ca4abf4768dd86678a9b4d3e9e1c960dbb8f7ddcf49be5e11974c07520b75c1d0966f1b9fb88359fd00c0a1d987ec184b0210ce14a80791c6694f269129af5806de4197ff7480eb6abe07b5c0c720bf12ad96326bf5b6bda5272832a21a0997f1aedc1471fb46286f12e14efa1aa3e603a724e4a3676813bcf9160a27bef8e0e91897f1897a34f3d31301f9571e76b1017ab6791b3399db4dd9d1", 0xec}, {&(0x7f0000000640)="c08086bf0a7c2b339e36ed139de3608c69a88e881548aaed9285427be126f57038184b44af0bc17e9a24851a0708c9332a184ee8a84a8897ddaa905bceb35e4cb23a1a010ea12dbea986e42fdb4e32529720738d8378e39e65b87cc4e42af367c4fd8382b4013553430ad324446b9cd3502fd79b307ab165520c481534bfc8da27ff42f35365461e91ed010003d3e3e03d33232244ab8a57dc08334aa0ba811a3f94a59b6c6f8a0170f69ae20202c53808016babe76009ae88c8d51067778e96fb83b9f4a99f2674bb5c2910c6dc2904700715695c86eb5feaad", 0xda}, {&(0x7f0000000740)="179baece156b69ba576dbb48cb1cb6b393aca6b95ff5042e6ea80d99cbb7110260f63c2ed6ca22d38519ec6b7bbf2349c72ab87b9c3141be87deab66e1574b7413066e079979f3ebe763ec5f264c1e74ebc6f3167b1f88b70c1cab8ecd6e0d9b727be99d99cac5b5613cf0fa450e25b7ca6ea6ab0501dc5296c71583aae5f521005b00047e4f52b32550baccb818604f8b8fe00502a437ee637fca230b7025dd63e0a227001dfca22792a5b6e3c88a599bb5cb862c6cf60c917935d80f3d76c417b2774783", 0xc5}, {&(0x7f0000000080)="d22a6358ae65237ef21e10c24c0660ffd767829cad14acc65978604255a617a05deee11400728ae3505957f6d63bb0d2", 0x30}, {&(0x7f0000000840)="d3ccf4761719e79ec5419e8484fb3f6fb9e8ae5e5f9e9e88c719177c37cfff744c0f346bdd44bd5bffc03d369c2de228f80389bec6c32716fc408360543f7acfa911a2e756ebe234506c4a0d56308224d4d5f3399a6e2eaa540b409dd78f4fcbff1b1f62289ca9bfd40093b7794086509e62e06f06f391f19b9f14803ed094d5cc471fdfef06a52f2732c40b597eca664c70be83d8828cc5a99307659b5e12e23f0e33fa8644fcc7f851475342b0e219eea825772ea7960bba76e9c5462abf704f473f973eb7e76806a02d7a97395023bbbc3e18c4f76a4a98bb1045141370901cd4734a4d", 0xe5}], 0x7, 0x14, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0x24004040}, 0xea5bc50b6199d77e) r11 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r11, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x3, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="c04c", 0x5e0}], 0x1, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x8010) 56.947940891s ago: executing program 6 (id=2221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {0xe, 0xfff3}, {0xe, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4010) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty}, {0x4e23, 0x0, 0x14, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100}, "59cbddf8"}}}}}}}, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000001700000c000000180005800800810075647000050002"], 0x2c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000000000061105c00000000006800c6db217700000000000000839ecfffff000000893dc14bea"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x17e) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) write$P9_RREADLINK(r7, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000040)={0x20, 0x800, 0x5, 0x9, 0x8000}) writev(r6, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x40100, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000009000000000000000400150018160000", @ANYRES32=r5, @ANYBLOB="000000000000000085100000fbffffff95"], &(0x7f0000000080)='GPL\x00', 0xb, 0xff1, &(0x7f0000000cc0)=""/4081, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 56.617063764s ago: executing program 6 (id=2229): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xac, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f00000004c0)={0xbe80b200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) sendfile(r2, r2, 0x0, 0x7fffeff9) 56.592085947s ago: executing program 45 (id=2229): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xac, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_clone3(&(0x7f00000004c0)={0xbe80b200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) sendfile(r2, r2, 0x0, 0x7fffeff9) 26.624730089s ago: executing program 5 (id=2976): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000080)='/#\x00', 0x1) 26.572583656s ago: executing program 5 (id=2979): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181243, 0x1bd) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 26.572486645s ago: executing program 5 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001f5ffffff00000000000100000a20000000000a03000000000000000000070000000900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001"], 0xac}}, 0x0) 26.519884953s ago: executing program 5 (id=2985): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000740)={[{@nojournal_checksum}, {@inlinecrypt}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x100) linkat(r1, &(0x7f0000000180)='./file1\x00', r1, &(0x7f0000000640)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@size={'size', 0x3d, [0x34]}}]}) getcwd(&(0x7f00000001c0)=""/107, 0x6b) 26.356137673s ago: executing program 5 (id=2990): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000080)='/#\x00', 0x1) 26.011941468s ago: executing program 5 (id=3005): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"}) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x800313}, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r6 = request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3, 0x14}, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000700)="2016852cae5c48814a5b2e87e8f922cba21ad64b795ccd3795e369847800e8a5e5801d80b38b85e60ac13f4ccc016bff46e48af1916fb93a133a19d0db814c056c29297f189bf32ce2d971dee915dcb84e082d6280265918b6c8646f8e5a6936079dd0726fb5db5fbc5dab16d8c434063ab1840c7e511b369260944d06a4928db59ab455115f019951343ec4f23afe5640050481734b37a3b728f715de9f071f4344da7882a377328c3c764438a759b5e3b9d044e85ae18644611bdd20efcdec75e54c2e3d85ede1f2ee45ac85449ce6ad697471eb971d8b281a4ca068929a559579c30172bfb0f7b7db58d95631cbab40dac3", 0xf3, r6) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(r7, r7, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x1, "346b00000000000045564cdc00", 0x0, 0x1002}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x3) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0xff03, 0x3c8, 0x1f8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0xff, 0x0, 0x0, 0xff, 0x1fe]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x0, 0x6, 0x3, 0x8, 0x1000, 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x400}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@broadcast, @private=0xa010102, 0xff, 0x0, 0x8, 0xd, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x5, 0x9, 0xffff, 0x8, 0x65c, 'veth0_to_bond\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x488}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @remote, 0x4}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x9ee8, 0x4f, 0x4, 0xfff, 0x2, 0x1, 'veth0_to_batadv\x00', 'rose0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r12, r12, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000900)={{{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in=@multicast2, 0x4e22, 0x927, 0x4e22, 0x3, 0x2, 0x80, 0x80, 0x32, r11, r12}, {0x92, 0x6d18, 0x9, 0x3, 0x5, 0x8000000000000000, 0x7, 0x9}, {0x9, 0x4, 0x1, 0x8001}, 0xff2b, 0x8000, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d2, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1, 0xd6, 0x1, 0x101, 0x3fd}}, 0xe8) 26.011627848s ago: executing program 46 (id=3005): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"}) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x800313}, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r6 = request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3, 0x14}, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000700)="2016852cae5c48814a5b2e87e8f922cba21ad64b795ccd3795e369847800e8a5e5801d80b38b85e60ac13f4ccc016bff46e48af1916fb93a133a19d0db814c056c29297f189bf32ce2d971dee915dcb84e082d6280265918b6c8646f8e5a6936079dd0726fb5db5fbc5dab16d8c434063ab1840c7e511b369260944d06a4928db59ab455115f019951343ec4f23afe5640050481734b37a3b728f715de9f071f4344da7882a377328c3c764438a759b5e3b9d044e85ae18644611bdd20efcdec75e54c2e3d85ede1f2ee45ac85449ce6ad697471eb971d8b281a4ca068929a559579c30172bfb0f7b7db58d95631cbab40dac3", 0xf3, r6) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(r7, r7, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x1, "346b00000000000045564cdc00", 0x0, 0x1002}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x3) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0xff03, 0x3c8, 0x1f8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0xff, 0x0, 0x0, 0xff, 0x1fe]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x0, 0x6, 0x3, 0x8, 0x1000, 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x400}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@broadcast, @private=0xa010102, 0xff, 0x0, 0x8, 0xd, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x5, 0x9, 0xffff, 0x8, 0x65c, 'veth0_to_bond\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x488}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @remote, 0x4}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x9ee8, 0x4f, 0x4, 0xfff, 0x2, 0x1, 'veth0_to_batadv\x00', 'rose0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r12, r12, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000900)={{{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in=@multicast2, 0x4e22, 0x927, 0x4e22, 0x3, 0x2, 0x80, 0x80, 0x32, r11, r12}, {0x92, 0x6d18, 0x9, 0x3, 0x5, 0x8000000000000000, 0x7, 0x9}, {0x9, 0x4, 0x1, 0x8001}, 0xff2b, 0x8000, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d2, 0x33}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1, 0xd6, 0x1, 0x101, 0x3fd}}, 0xe8) 2.64190301s ago: executing program 4 (id=3487): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2f0b4da61a"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "73acceba57"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bd9d73007ed432da04ec9c422e"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bc094082b0618bf631d81753bc"}]}, 0x7c}}, 0x20008850) (async) r0 = socket$isdn(0x22, 0x3, 0x3) listen(r0, 0x0) (async) listen(r0, 0x71) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000140)='gre0\x00') r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x50, 0xffffffffffffffff, 0x8000000) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}) r3 = socket$kcm(0x29, 0x6, 0x0) r4 = syz_io_uring_setup(0x1a93, &(0x7f00000001c0)={0x0, 0x78c3, 0x400, 0x3, 0x282}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f00000002c0)=[0x5], 0x2) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200000, 0x100) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='devices.list\x00', 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000440), 0x2100, 0x0) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000500)={0x8, {{0xa, 0x4e22, 0x40, @empty, 0x3}}, 0x0, 0x6, [{{0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}}, {{0xa, 0x4e22, 0xe2, @mcast1, 0x3}}, {{0xa, 0x4e23, 0x2, @remote, 0x9}}, {{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, {{0xa, 0x7, 0x5, @empty, 0x9}}, {{0xa, 0x4e21, 0x2, @local, 0x6}}]}, 0x390) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000008c0)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f00000009c0)={@nfc_llcp={0x27, r9, 0xffffffffffffffff, 0x6, 0xb, 0x4, "c1b07d83d1de3c46e6bc1ad906e80765630fe0a5592af8a12f13a9c9447bbf7d7728aea9570b445023241a7e04221ec159677e4e748344278553292df42b0b", 0x1b}, {&(0x7f0000000900)=""/118, 0x76}, &(0x7f0000000980), 0x24}, 0xa0) (async) io_uring_register$IORING_REGISTER_CLOCK(r6, 0x1d, &(0x7f0000000a80)={0xd}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$VT_DISALLOCATE(r10, 0x5608) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000b80)=@nat={'nat\x00', 0x1b, 0x5, 0x3f0, 0x1b0, 0x1b0, 0xffffffff, 0x0, 0x258, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f0000000b00), {[{{@ip={@broadcast, @empty, 0xff000000, 0xff000000, 'ipvlan1\x00', 'caif0\x00', {0xff}, {0xff}, 0xff, 0x1, 0x13}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x7], 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @loopback, @multicast1, @gre_key=0x1f23, @port=0x4e21}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffff, 0x0, 'veth0_vlan\x00', 'bridge_slave_0\x00', {}, {}, 0x73, 0x0, 0x60}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x40, 0x10, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x14, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @gre_key=0x3b, @gre_key=0x78c}}}}, {{@ip={@loopback, @private=0xa010100, 0xff000000, 0xffffffff, 'pim6reg0\x00', 'rose0\x00', {0xff}, {0xff}, 0xc, 0x1, 0x40}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1e, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @port=0x4e20, @gre_key=0xb03}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0xc01, 0xe26, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x0, 0x4, 0x1, 0x1, 0x5], 0x4, 0x5}, {0xffffffffffffffff, [0x5, 0x0, 0x0, 0x3, 0x4, 0x2], 0x4, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) (async) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000001000)) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async) ioctl$KDFONTOP_SET_DEF(r10, 0x4b72, &(0x7f0000001440)={0x2, 0x1, 0x17, 0xa, 0x1c7, &(0x7f0000001040)="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"}) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r11, r8, &(0x7f0000001480)=0x39490033, 0x4) 2.571905929s ago: executing program 4 (id=3490): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = epoll_create(0xaa22) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000001}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, 0x0, 0x0, 0x33, 0x51b) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000180)={{0x3, 0x3, 0x5, 0x4, 0xfff, 0xffffffff}, 0x2e6, [0x6, 0x800, 0x4, 0x813a, 0x1, 0xfffffff9, 0x83e, 0x4, 0x8, 0xfffffffe, 0xa, 0x7fffffff, 0x8, 0x9, 0x7, 0x5, 0x3, 0x400, 0x4, 0xfffffffa, 0x2, 0x0, 0x6, 0x2, 0x1e, 0xa0, 0x1d, 0x3, 0x2, 0x9, 0x9, 0x7, 0xe, 0xfff, 0x3, 0x5e2, 0xab4, 0x5e, 0x2, 0x5, 0x200, 0x2, 0x59c75bd7, 0x2af8, 0x5, 0xb, 0xb, 0x1, 0x0, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x7, 0x5, 0xfff, 0xbc0d, 0x7, 0xff, 0x1, 0x6, 0x2, 0x6b9e, 0x0, 0x4, 0x0, 0x6, 0xffff7fff, 0x8, 0x2, 0x5ede, 0x4, 0x6, 0x5, 0x10000, 0x5, 0x400, 0x1, 0x81, 0x8, 0x76877666, 0xfffffff7, 0xfffffffe, 0x3, 0x7ff, 0x7ff, 0x9, 0x6, 0x9, 0x0, 0x5, 0x6, 0x8, 0xc0, 0x3ff, 0x1000, 0x2f, 0x6, 0xe4f, 0x20000, 0xfffffffe, 0x0, 0x5, 0x1, 0xffffffff, 0x5, 0xe6, 0x7, 0x3, 0xd, 0x0, 0x2, 0x4f, 0x1, 0xc, 0x6, 0x40, 0x1, 0x5, 0x401, 0x1, 0x2, 0x6, 0x0, 0xfff, 0x1, 0x81, 0x9, 0x8, 0x2, 0x80, 0x2, 0x5, 0x6, 0x1400000, 0x8, 0x2, 0x8, 0x3, 0xa576, 0xe, 0x4, 0xc2, 0xfffffff9, 0x6a, 0xffffff00, 0x2, 0x8001, 0x5, 0x2, 0x3, 0x7, 0x1, 0x8a7f, 0x5e78, 0x25b, 0x2, 0x3ec, 0x484, 0x8, 0xffff0001, 0x7, 0x6, 0x5, 0x64d, 0xa, 0x6, 0xe8d, 0xf, 0x1, 0xfffffffd, 0x7, 0x9, 0x9, 0xbc, 0x8, 0x10, 0x8d4, 0x5, 0xda7d, 0xf, 0xffffff80, 0x4, 0x10, 0x591c, 0x1, 0x6, 0x4, 0x2, 0x10, 0x6, 0x8, 0xd2, 0xec5, 0x8, 0xf3, 0xc, 0x9731, 0x0, 0xffff26d3, 0x6, 0x2, 0x3, 0x285, 0x10000, 0x5, 0x6, 0x7, 0x101, 0xf05c, 0x2, 0x7, 0xfffffff7, 0x5, 0x7, 0xfffffff8, 0x1fa, 0x6, 0xfffffffc, 0x3, 0x3, 0x2f3, 0x9, 0x1, 0x37, 0x8, 0x1, 0x7, 0x401, 0x4, 0x800, 0x54, 0x3, 0x7, 0x3, 0x1, 0xf, 0x64e5, 0x9, 0x5, 0x4, 0xf, 0x10, 0x4, 0xba4d, 0x800, 0x80, 0x7fff, 0x8, 0x2, 0x9, 0x1, 0x1200, 0x0, 0x6, 0x9, 0x7, 0x401, 0xc, 0x4, 0x7cb0, 0x9, 0x4, 0x9, 0xf, 0x6, 0x1, 0x1, 0x2, 0x2, 0x400, 0xe, 0x81, 0x0, 0xfffffffd, 0x4, 0x0, 0xecc, 0x1, 0x1000, 0x5, 0xb0c0, 0x2, 0x3, 0x146c6000, 0x2, 0x64, 0x31, 0xd, 0x1, 0x5, 0x8000, 0x7fffffff, 0x8001, 0x2, 0x8, 0x8, 0x2, 0x7, 0x1, 0xfffffff7, 0xff, 0x4, 0x7, 0x8, 0x8, 0xd, 0x7, 0x7f, 0x5, 0x8000, 0x3ff, 0x5, 0x800, 0x80000000, 0xc, 0x0, 0x81, 0x8, 0x5, 0xfffffff7, 0x0, 0x1, 0x6, 0xf8d, 0xffff, 0x5, 0xbe5, 0xffffffff, 0x7, 0x1, 0x6, 0x8, 0x81, 0xfd21, 0x0, 0x8001, 0x1, 0xd3d5, 0x6, 0xc, 0x1, 0x5, 0x8, 0x9, 0x7f, 0x10000, 0x2, 0x94, 0xffffffff, 0x4, 0x741, 0x8, 0x4, 0x7fff, 0x6, 0x1, 0x9, 0x4, 0x893, 0x7, 0xffff8f44, 0x75e, 0x6, 0x3, 0x80, 0xffffffff, 0x8, 0x4, 0xfffffe00, 0x3, 0x8, 0x7, 0x6, 0x1c28, 0x4, 0x2bbbe94c, 0x62fddb55, 0x6de8, 0xffff, 0x3, 0x1, 0x0, 0x3, 0x40, 0x7, 0x10001, 0x2, 0x200009, 0xa4e8, 0x7f, 0x7f, 0x7, 0x1, 0x1, 0x1000, 0x5, 0xffff, 0x2, 0xff, 0xac, 0xfffff3b4, 0x7, 0x1ff, 0x9, 0xdde4, 0xfffffffc, 0x0, 0x8f0d, 0x1, 0x1000, 0xffffffc0, 0x5, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x10, 0x6, 0x99, 0x2, 0x1, 0x7, 0x8001, 0x7, 0x9, 0x6, 0x6, 0xf22, 0x1781, 0x2, 0x81, 0xbf3, 0xfff, 0x2, 0x7, 0x56d7, 0xfffffb77, 0x0, 0x8, 0x0, 0x1, 0x71a, 0x101, 0x4, 0x5, 0xa4b5, 0x5, 0x6, 0x4, 0x1000, 0x6, 0x800, 0x81, 0x4d3, 0xa, 0x6, 0x3, 0x9, 0xfffffb25, 0x8, 0x3, 0xff, 0x1, 0x9cb3, 0x87, 0x20000000, 0x7, 0x1c, 0x0, 0xf5, 0x6d, 0x1, 0x3, 0x3, 0xb, 0x5, 0x7, 0x2, 0x400, 0x3, 0x2, 0x80, 0x8, 0xfffffff7, 0x10001, 0x7fff, 0x7, 0x4973, 0x10001, 0x4, 0x1, 0x2, 0x5, 0x3, 0x1, 0x2, 0x8000, 0xeb6, 0x1, 0x9, 0x0, 0x1, 0x200, 0x5, 0x5, 0x9, 0x7, 0x8, 0xc, 0x80, 0x2, 0xfffffffe, 0xcfad, 0xa9, 0x80000000, 0x2, 0xc, 0xa, 0x7, 0x2, 0x2, 0x9bf3, 0xfffffff9, 0xe, 0x1, 0x8, 0x7, 0xcab, 0x3, 0x837, 0xffff, 0x1ff, 0xdc34, 0xd4, 0x1, 0xffff, 0xfffffff8, 0x6, 0x3, 0x8, 0x4e, 0x58, 0x10, 0xfffffff9, 0xa83, 0xfffffff8, 0x4a, 0x4, 0xc9, 0x4, 0x5, 0x6, 0x8, 0xffffff00, 0x9, 0xfffffff8, 0x2, 0x4, 0x4, 0x3, 0xe5, 0x4, 0xfffffff7, 0x7, 0x4, 0xf, 0x3, 0x3, 0x0, 0x1, 0xb, 0x1, 0xffffffff, 0x2, 0x1, 0x4, 0xffffffff, 0x5, 0x40, 0x101, 0xe4e, 0x4, 0xfffffff7, 0x4, 0x9, 0x20000, 0x5, 0x4, 0xcf0f, 0x9, 0x7, 0x0, 0x8, 0x9, 0x40, 0xa7c3, 0x7e0, 0x858, 0xe, 0x3ff, 0xd25193c, 0xe3, 0x3, 0xda8, 0xffffffff, 0x9, 0xb, 0x2, 0x4ee, 0x1, 0x8, 0x9, 0xfffffc00, 0x6, 0x8, 0x80000000, 0x80, 0x5, 0x8, 0x8000, 0x8, 0xffffffff, 0x5, 0x1, 0x835, 0x5, 0x240, 0x6, 0x4, 0xf, 0x8, 0xe1, 0x0, 0x4, 0x7, 0x1000, 0xffff, 0x71, 0x7, 0x5, 0x3, 0x2, 0xd, 0x7f, 0x1, 0x0, 0x5, 0x4, 0x9, 0x4, 0x0, 0xfffffff9, 0x0, 0x3, 0x9, 0x42e9, 0x7ff, 0x9, 0x5, 0x0, 0x2, 0x4, 0x9, 0xfffffffd, 0x3ff, 0x8000, 0x5, 0xc2b, 0x4, 0x5, 0x1, 0xfff, 0xb76, 0x2, 0x98, 0x600, 0x7, 0x9, 0x74a, 0x3a3, 0x8, 0x76, 0x8, 0x5ed, 0x200, 0x2, 0x8000000, 0x5, 0x1, 0x81, 0xffffffff, 0x1, 0xfffffff7, 0x1, 0x6, 0x800, 0xbba, 0x6, 0x4, 0x8, 0x1, 0xd1c6, 0x7, 0x2, 0xd1e, 0x2, 0x8, 0x401, 0x0, 0x6, 0x6, 0x60b, 0x3, 0x8, 0x80000001, 0x0, 0x5, 0xffffffff, 0xf135, 0x0, 0x0, 0x9, 0xc, 0x6, 0x4, 0x1, 0x3ac8, 0x8, 0x6, 0x2, 0x1, 0x6, 0x3c01c0, 0x4, 0x9, 0x9, 0x8, 0x0, 0x6, 0x0, 0x9, 0x4, 0x8, 0x7, 0xc, 0x3, 0x2, 0x40c, 0x800, 0x4, 0xfff, 0x6, 0x5, 0x9, 0xf, 0x1ff, 0xb, 0x1, 0x7, 0x6, 0x15, 0x9, 0x9, 0x6, 0x1, 0x6, 0xfffffeff, 0x0, 0xb, 0x6, 0xfffffffa, 0x229, 0xa8, 0x4, 0x69f8, 0x43, 0x7, 0xf5, 0x31, 0x10001, 0x1, 0xb82, 0x7, 0x4, 0x3, 0x2, 0xfffffff7, 0x8, 0x0, 0x9, 0x8001, 0xce, 0xfffff001, 0x10001, 0x7, 0xca9, 0x81, 0x7, 0x8, 0x9, 0x6, 0x4, 0x5, 0x5, 0x8, 0x7, 0x4, 0x3, 0x6, 0x401, 0x0, 0x9, 0xfffffffb, 0x2, 0x1000, 0x5, 0x5, 0x9, 0x2, 0x7f, 0xf1, 0xfff, 0x819, 0x1, 0x80000000, 0x6, 0xb, 0x180000, 0x6, 0xfffffff2, 0x444be314, 0xfffff2c2, 0x5, 0x9ff4, 0xcffe, 0x0, 0x9, 0x15d, 0x7, 0x2, 0x2, 0x4, 0x0, 0x8, 0x800, 0xc7, 0x5, 0x10000, 0x89, 0x7, 0x8, 0xef, 0x8000, 0x1c, 0x4, 0x4f, 0x6, 0xfff, 0x245e, 0x8, 0xd, 0x4, 0x7, 0x6, 0x90f, 0x9, 0x7ff, 0x4, 0xfd, 0x6, 0x1, 0x2, 0xd, 0x100, 0x0, 0x2, 0xfffff65a, 0xac, 0x8, 0x3ff, 0x1, 0x0, 0x0, 0x1, 0x40, 0x27, 0x9, 0xd6e3, 0x18, 0xce7, 0x3, 0x5, 0xdb5, 0x10000000, 0x4, 0xa7c1, 0x80000001, 0x3, 0x3, 0xd3c, 0x1, 0xc2, 0x2, 0x3e2, 0x7, 0x7, 0x0, 0x9, 0xfffffffd, 0x7, 0xbef, 0x1000, 0x1ff, 0x1ff, 0xd9e, 0x800, 0xff65, 0x0, 0x9, 0x8001, 0x7f, 0x0, 0x6, 0x8, 0x125b, 0x9, 0x6, 0x0, 0x6, 0x100, 0x4, 0xffff8001, 0x8, 0x3, 0x0, 0x4, 0x1, 0x7, 0x7, 0xb1c, 0x1, 0xe5a5, 0x3118, 0x40, 0x3, 0x0, 0x80000000, 0x9, 0xfffffffb, 0x80, 0x7fffffff, 0x8001, 0x80000001, 0x6, 0x80000001, 0x2fbc, 0x1, 0x80000000, 0x0, 0x6, 0xb76, 0xe, 0x800, 0xb0000000, 0x4, 0x400, 0x4, 0x2, 0x32, 0xfffffff8, 0x8, 0x8, 0x7, 0xbe, 0xc, 0x5f81, 0x100, 0x2, 0xd0, 0x1fab, 0x6, 0x6, 0x339c0, 0x3c8, 0xe, 0xf, 0x13c5, 0x2, 0x80000000, 0xe, 0x9, 0x7, 0x1, 0x2, 0x38, 0x1, 0x2, 0x7, 0x8, 0x10000, 0x7, 0x8000, 0x7, 0x2, 0x6, 0x7, 0x7, 0x8, 0x100, 0x1ff, 0x200, 0x8, 0x8, 0x8, 0x5a, 0x7, 0x3, 0x4, 0x1000]}) r3 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, 0x0, 0x1}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x5) r5 = openat(r4, &(0x7f0000000040)='.\x00', 0x0, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @alu={0x5, 0x1, 0xd, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xc3) getdents64(r5, 0x0, 0x22) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000000), 0x4) 2.571610669s ago: executing program 4 (id=3491): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000004, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb202) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x140000, 0x0, 0x3) 1.635913849s ago: executing program 4 (id=3504): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x880) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r3) recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 1.594369195s ago: executing program 3 (id=3508): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181243, 0x1bd) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc020000000000000000000000000001", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 1.512932635s ago: executing program 3 (id=3509): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000f012bbd700000000000021880000000ff000010000008000700ac14143808000100ac1414"], 0x2c}, 0x1, 0x0, 0x0, 0x4000b00}, 0x0) 1.512745715s ago: executing program 3 (id=3510): r0 = socket$kcm(0x10, 0x2, 0x0) write(r0, &(0x7f00000001c0)="448c0c970554fa7ca0d1faa2ac9450a84b702e95074d254a8c92bfa42f37b9903ffe7af5fca5577ecc1395a95e8ea3eecb0ca7f567279f9697e4d219a0dcf7823ee964f12a8a687fa82394fafe08417638690ac3a5a6282d2a9d9631cdcf1e405bc94b6d7f6750d6e7d247ec055e3dba39135fe5320f8b3487c3", 0x7a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8040, 0x2, 0x19}, 0x18) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x125) close(r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 1.512267985s ago: executing program 2 (id=3511): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f00000000c0)={0x9}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={@desc={0x1, 0x0, @desc1}}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x808140, 0x0) statx(r0, &(0x7f0000000280)='./file0\x00', 0x2000, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r2, &(0x7f0000000240), &(0x7f00000003c0)=@v3={0x3000000, [{0x7, 0x9}, {0xd, 0x4}], r3}, 0x18, 0x1) write$binfmt_aout(r2, &(0x7f0000000400)={{0x107, 0x4, 0x9, 0x187, 0x77, 0xf, 0x3e8, 0x1}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1820) write$binfmt_script(r0, &(0x7f0000001c40)={'#! ', './file0', [{0x20, 'security.capability\x00'}, {0x20, '-'}, {}, {0x20, '@'}, {0x20, '\x00\x00\x11\x11\"\"33'}], 0xa, "7cc995bf303718f739883feee5821ea39422f994ae992ca59041d9e3ebe513e6ba34c50f5332d9498bda19f06896d2dfec2e98b9e9ec0c07a9b40c0faa5ccef3132ffbea0b5ce64e50417f2b35aa93156288b98b2fd1c82e37fe78a992cd4893e60416a02ed2519ed2503e69ada73a612220d19d09d9bd8e5aaee26f80c75b98b49454c06d21b73e2f2687494667d1e28823a56737f6dee2458dee5a8748748da6a790d42f4e0eb45655f0ef38eadea0c3043f71d4a4fa2d4210f550abcca5d06889c8af"}, 0xf2) write$binfmt_script(r1, &(0x7f0000001d40)={'#! ', './file0', [{0x20, '-'}, {0x20, 'security.capability\x00'}, {}, {0x20, '}-.}!'}], 0xa, "8fa20e519d3ff11c81bef0cd381ed99f55f181a59ed9e5fe2e05c7eef61ffbc4e05e1f4b1d0250ff760d9fe57797ee41cd6b899c04b54c2149187654a5d1904b1fe097ac21069f6200ce87612f6f85d8957bf3a0115fd426df25567a2d5eca9f4a01d818719748740e9b8daef986f3a020fd4eb85867b612e08a3b4f844b88e2fa504a412fb441e74e387c4377e4ccbc8b6e1e1b3c1c05604f7e0fd35ded276ce7968cf1254f13f66c5756caa4"}, 0xd6) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000001e40)=0x480, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000001e80), &(0x7f0000001ec0)=0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$NFT_BATCH(r2, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x80000001}, @NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0xec0b3299c9aa2d3b}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$isdn(0x22, 0x3, 0x24) connect$qrtr(r0, &(0x7f0000002080)={0x2a, 0xfffffffe, 0x1}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4020}, 0x840) accept4$inet(r0, &(0x7f00000021c0)={0x2, 0x0, @initdev}, &(0x7f0000002200)=0x10, 0x0) mount(&(0x7f0000002240)=@nullb, &(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)='bpf\x00', 0x20000, &(0x7f0000002300)='\x00\x00\x11\x11\"\"33') open$dir(&(0x7f0000002340)='./file0\x00', 0x604001, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002380)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000023c0), 0x40, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000002580)={&(0x7f0000002400), 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0x84, r6, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x37}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="013c7b30fc9b"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "d0d20473fb44839d5ded6a89e1446a6c"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="06cd874b0c0a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x13}, @NL80211_ATTR_SSID={0x16, 0x34, @random="4f545fba580a1656c462a189b177a3686ab0"}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) 1.412139698s ago: executing program 2 (id=3513): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x10010, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x23, 0x5, 0x81) 1.404130459s ago: executing program 2 (id=3515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000002d0000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffed0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000200)=0x62, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r4, r4, 0x0, 0x2) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x51) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0xa846, 0x8000, 0x2, 0x178}, &(0x7f0000002380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r6, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x200, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYRES8=r4], 0x44}}, 0x0) 1.231989131s ago: executing program 2 (id=3517): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x11ff, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 937.469389ms ago: executing program 2 (id=3522): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000200)}) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x29, 0x6, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7f, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x28, 0x15, 0x4, 0xfffff004}, {0x6, 0x0, 0x7, 0xffffffff}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x8, 0x200, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000080)=0x80000008, 0x4) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}], 0x2, 0x0, 0x0, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) 720.723517ms ago: executing program 0 (id=3528): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001080)='./binderfs/binder-control\x00', 0x800, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{0x2, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "559c4157df5c5fc0a343bdfd992c89ec7c178d3d401a0657e948c1e50e9f29438946924347e8c9a7f1d228cf082056214904d6e39350c2d1bf5443d0ef0296b0"}, 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000001940)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000005c0)=[{0x6, 0x1, 0x0, 0x7fff7ffc}]}) inotify_init() unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3ffffffffffff36, 0x4000a000, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000000000)=""/4097, &(0x7f0000001040)=0x1001) 720.394997ms ago: executing program 4 (id=3529): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x0) sendto$packet(r2, &(0x7f0000000380)="44c394f305916c4516999da286dd", 0xe, 0x0, &(0x7f0000000340)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf2506"], 0x2c}, 0x1, 0x0, 0x0, 0x24040890}, 0x4040000) 668.091744ms ago: executing program 1 (id=3530): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181243, 0x1bd) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc020000000000000000000000000001", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 666.471884ms ago: executing program 3 (id=3531): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@jqfmt_vfsold}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@nobarrier}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8000, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="66000000000000000000000000a5"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000000)) open_by_handle_at(r2, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0x80}}, 0x8cb03) 659.624515ms ago: executing program 1 (id=3532): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340), 0x8) (async) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000000a00)="$eJzs3c9rXNUeAPDvnUnSpM17aR+Px2t4DwMuWpCmSS1W3djWhV0ULNiFiIuGJqmh0x80KdhaaAsuFBRE3Bbpxn/AvXTvTgR151qoIhUFLRm5d+6kk+ROk6admaT384GZOffcO3POd05P77n35swNoLTG0qdKxO6IxVNJxEjLuuForBzLt7v367XT6SOJev2NX5JI8rzm9ov56470KYkYjIhvjkb8q7q63PkrV89O1eoN1yP2L5y7uH/+ytV9c+emzsycmTk/eeDFg4cmXpo8OPlE4tyRvx47/vr/Pn7/nRdmv63tS+JwnOx/bzpWxLEB9aQgcyzGYjEPsTW/LyIOpYmC72WrWVcI2zpfDzammv977I+I/8RIVLOlhpGY+6inlQM6ql6NqAMllej/UFLNcUDz2H59x8EnOzwq6Z67RxoHQKvj72ucG4nB7Nho+72k5ciocW5j5xMoPy3j/rXRW+kjlp2H+GOpdfqeQDnt3LgZEf8tij/J6rYzizSNvxKVlveldZqIiIE8/eoGim4mWs+dPOZ5mEevxCPE39oO6XdxOH9N849usPyxFcvdjh+AcrpzJN+RZ3vjB/u/dOzRHP9EwfhnuGDftRG93v+1H/819/eD2TnyyopxWDpmOVH8kf0rM3788Nin7cpvHf/dv5Zk9WiOBbvh7s2I0RXxf5AN9JKl9k8K2j/d5NTh9ZXx2nc/H2u3bnn8o7e6HX/9dsSewuOfB6PSNPWQ65P7Z+dqMxON58Iyvvr67S/ald/r+NP2394m/pb2r6x8X/qdXFxnGV+euH1uoM264TXjr/w0kDSON5uf8e7UwsKlyYiB5Hi+SUv+gYfXpblN8zPS+Pc+W9z/l/37v7n8c4ZaD2DWcPHNs/fardtI+7dcTF6sr7MO7aTxT6/d/qv6f5r3yTrL+P2ty/9vt64g/og8/qHHCQwAAAAAAABKqJJdg00q40vpSmV8vDFf9t+xvVK7ML/w3OyFy+enI/Zmfw/ZX2le6R5pLCfp8mT+97DN5QMrlp+PiF0R8Vl1KFseP32hNt3r4AEAAAAAAAAAAAAAAAAAAGCT2JHP/2/ep/q3amP+P1ASnbzBHLC56f9QXln/X3WLJ6AM7P+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/wcAAACAp9KuZ+78kETEjZeHskdqIF9X7WnNgE7rL8irX+9BRYCus4+H8lq69G/6P5RO0fh/lT/zHwfsfHWAHkiKMrPBQf3hnf9O4TsBAAAAAAAAAAAAgA7Ys7v9/P91zQ0AtizT/qC8HmP+v58OgC3OT/9DeTnGB9aaxT/YboX5/wAAAAAAAAAAAADQNcPZI6mM53OBh6NSGR+P+EdE7Iz+ZHauNjMREf+MiO+r/dvS5cleVxoAAAAAAAAAAAAAAAAAAACeMvNXrp6dqtVmLrUm/lqV83QnmndB7UJZr8QjviuS7n8tQxHR80bpWKKvJSeJuJG2/Kao2KX52BzVyBI9/o8JAAAAAAAAAAAAAAAAAABKqGXucbHRz7tcIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovgf3/+9cotcxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb098BAAD///yqQiE=") 575.847066ms ago: executing program 1 (id=3533): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000280)=""/252, &(0x7f0000000080)=0xfc) syz_mount_image$ext4(&(0x7f0000000500)='ext3\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000280)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}], [{@fowner_gt={'fowner>', r0}}, {@seclabel}, {@uid_lt={'uid<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@dont_hash}, {@euid_lt={'euid<', r0}}, {@obj_role={'obj_role', 0x3d, ':'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-,'}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) link(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 511.907934ms ago: executing program 3 (id=3534): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$eJzs3T+LI2UcB/DfZHOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZndk1uyayWXH382n24Xl+33meJxmySZEnH74823+Qx6OnX/wSWZZEbxzjOExiFL1ofBUnjL8JAOD/7LAo4vdiYZ1cEhHZ5pYFAGzQav//+23zp0tZFgCwQffffe/tnd3du+9kkcW92dcHk/KTffl3Mb7zKD6OaTyM12IYRxHV+4T6g3/ZvlcUxbyfl0ZxazY/mJTJ2QfP6uvv/BZR5bdjGKPjWPVuo8q/tXt3u4rng05+Xq7j+Xr+cZm/E8N48Th8In9nkc+7+Zik8eornfXfjmH8/FF8EtN4UC2izX+5nedvFt/+8fn75fLKfDI/mAyqulaxdZnPCwAAAAAAAAAAAAAAAAAAAAAAV9vtvDl8J78Zt2ZlV33+ztZRWtfUJaM2VY4vWknT1TkfqDQv4vvOkYJ5URe25/v046V+92BBAAAAAAAAAAAAAAAAAAAAuL6efPrZ/t50+vDxhTSa0wD6EfHn/Yh/e51xp+dmnF88qOfcm057dfNEzbO02xNbTU0Sce4yyk1c0MPyT43nTq+5afzwY7nBdS6YdXpeX77BG5vfV3N37e8ly+caRNOT1TfJd2lEW5PGinOlZw0Vsc7tly4dGq699/SFqjE/s6Y5B+Os67zx62K87klO7yKtHtWls9+oG534qXtjpec9skX8768VSXVax2BDr0QAAAAAAAAAAAAAAAAAAED77d8lg0/PjfYKXwUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ipof/9/jca8Dq9QnMbjJ//xFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgG/goAAP///CFRHg==") r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x200, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) syz_emit_ethernet(0x82, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde080045000074000000000023b8713e1151431e2c6e019078ac1e0001ac1414aa05009078e00000e0660000000000000000110000ac1414aa000000000500000000000000b7c45c7aca9152b74500443c00030a010181000000000000000000000000ac14140000000000ac1414bb000000000000000000e4b372f414140000000000"], 0x0) syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="05b1ff035660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "a280ffffff02000000000000"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) creat(&(0x7f00000004c0)='./bus\x00', 0x20) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r9, 0x0, 0x0, 0x0, 0x0, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') 505.046755ms ago: executing program 4 (id=3535): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noauto_da_alloc}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "d56d9847bfcb49e2", "16549f18408d640d012ebcc31bd9870b", "bcd58d40", "4f5b22bc20c62b22"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x8080, 0x0, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x738, 0x570, 0x3a8, 0x0, 0x4a0, 0x0, 0x668, 0x668, 0x668, 0x668, 0x668, 0x6, &(0x7f0000000380), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x2c}, [0xffffff00, 0x0, 0xff000000], [0xff, 0xffffff00, 0x0, 0xffffffff], 'veth0_vlan\x00', 'ip6gretap0\x00', {}, {0xff}, 0x2c, 0x9, 0x5, 0x20}, 0x0, 0x218, 0x240, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@sctp={{0x148}, {[0x4e23, 0x4e21], [0x4e21, 0x4e24], [0xff, 0x58c, 0xff, 0x1, 0xd55, 0x7, 0x8d, 0x1, 0x9, 0x80000000, 0x5, 0xe1, 0xf, 0x2250, 0xffffffff, 0x3a, 0x401, 0x8000, 0x0, 0x3, 0x6, 0x4, 0x18, 0x9, 0x9, 0x200, 0x6, 0x7, 0x2, 0x6, 0x5, 0x9, 0x8, 0x7, 0x200, 0x7, 0x1, 0x8, 0xe, 0x10, 0x1, 0xfffffffb, 0x4, 0x4, 0x2, 0x3, 0x1, 0x4, 0x6, 0x45e313ba, 0x3, 0xfffffffb, 0x7, 0x6, 0x2, 0x5, 0x94, 0x7f00, 0x7f, 0x80, 0xe564, 0xa, 0x200], 0x2, [{0x7, 0x1, 0x42}, {0x7d, 0x3, 0xe0}, {0x37, 0xd4, 0xf6}, {0xff, 0x7, 0x9}], 0x3, 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x7, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0x0, 0xff], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffff00], 'veth0_to_bond\x00', 'xfrm0\x00', {}, {}, 0x84, 0x2, 0x7, 0x1}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@hbh={{0x48}, {0xb, 0x5, 0x0, [0xefb, 0x7, 0x6, 0x400, 0x4, 0x10, 0xa6d, 0x9, 0x6, 0x9, 0x5, 0xc2f, 0x4, 0x100, 0x2, 0x8], 0x5}}, @common=@frag={{0x30}, {[], 0x40, 0x2, 0x7}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@loopback, 0x40, 0x8, 0x4}}}, {{@ipv6={@mcast1, @loopback, [0xff000000, 0xff, 0xff000000, 0xff], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'wlan1\x00', 'bridge0\x00', {}, {}, 0x6, 0x5, 0x4, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xd8, 0xc, 0x2}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x35}, [0xffffff00, 0xff000000, 0xff000000, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xff000000], 'erspan0\x00', 'veth1_virt_wifi\x00', {}, {0x884bfcb35708c8a}, 0x87, 0x10, 0x22270ed329f543ae, 0xc}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x17}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x32}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x798) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000f40)="79c7f976f07f0b0918910c33147ef6ca698d2144ad35c6912f3bb3cc8cabcecda6c07c0885cf220f687742981657974f05443073ba7175570e0152ce7a8324990138fc382cb8bc19f008eecb2ef56607adc28a5ff5579e1f0f34b0ad976ed847a13549c5ae832f917191de444c67a203ad76cb97f2b8e086dc897fe58361bcdf5fbd26f6de6564e1a082ea6b3ea68925a1d939660ce4ac66b2eeb6dcf91e228da426066e16753f4f30dc92a8ab2ec995555c1f8b18e936c732251378d2e9e543336ed676d20852079e617bdb3798a976a739ff", 0xd3, 0x40010, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'veth1_to_bridge\x00', &(0x7f0000000100)=@ethtool_stats={0x1d, 0x1, [0xeb]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000008b00008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0xa, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0}, 0x40) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)}, 0x20) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000001040)=[0x4, 0x8ee], 0x0, 0x0, 0x2, 0x1}}, 0x40) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x601000, '\x00', 0x0, r3, 0x1, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1e, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6615, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0xa, 0xf0, &(0x7f0000000b80)=""/240, 0x41100, 0x40, '\x00', 0x0, @sk_lookup=0x24, r4, 0x8, &(0x7f0000000c80)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000cc0)={0x0, 0xb, 0x7fa3, 0x4c7}, 0x10, 0x0, r0, 0x8, &(0x7f0000000d80)=[r7, r3, r9, r7], &(0x7f0000000dc0)=[{0x1, 0x5, 0x8, 0x2}, {0x3, 0x4, 0x3, 0x4}, {0x5, 0x4, 0x6, 0xc}, {0x5, 0x1, 0x2, 0xc}, {0x1, 0x2, 0xa, 0x6}, {0x2, 0x4, 0xc, 0x6}, {0x0, 0x5, 0x9, 0xf}, {0x4, 0x2, 0x5, 0x3}], 0x10, 0x7}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r8, 0x58, &(0x7f0000000e40)}, 0x10) alarm(0x38) 492.083837ms ago: executing program 3 (id=3536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000240)) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)={0x4000201a}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000001c0)={r3}) syz_clone(0x20400, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)="d048f099571a466a13ae9409201d3d274565688e534f0c0a4a5a7f9093fa0019c73a7322f56d94cd9a247f04eb5b5a18e1a6fdd144a4fe30e11acacfab4e508706d8c27c88724367aacce75b1ab77c56cb63422de12482af0e7d974d323ce852557ce9ebb1009b499315f04a855070103bf46e24fb0e7a6f4e12a36b3f1903d6e06840bf7cb98f1464392db8c8a19aaede60cedbc5c303ab10aa883f9ec910c0164438ce04ba05b1ce655f6feaf22fd9b39c649da2d1928a7f74f6b3006f7c9c2501102100301a19ba2c62f0fe00b720d87bd42e71977688f7188b446159b5ad319d4528a52318fd") sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, r1, 0x413, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8814}, 0x0) 428.062345ms ago: executing program 1 (id=3537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffc, 0xc, 0x7, 0x7, 0x9, 0x40, 0x9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4004080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000880)="bad330a4a6307bb728821f703fce", 0xe, 0x841, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="e8000e00"}, 0x14) 328.386447ms ago: executing program 0 (id=3538): r0 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x23, 0x5, 0x81) 321.098679ms ago: executing program 1 (id=3539): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@mcast1, @private1, @private1, 0x0, 0x0, 0x0, 0x400, 0xa, 0x9b0012}) close_range(r0, r0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bfffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1, 0x91, 0xffff, 0x0, 0x0, 0x997d, 0x0, 0xe982}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00') r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x80000) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @local, 0xd0000000}, 0x1c) rseq(&(0x7f0000000180), 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000fcb000)=0xffffffed, 0x4) r4 = syz_open_dev$usbmon(&(0x7f0000006b00), 0x80000000, 0x88c43) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000006c40)={0x0, 0x0}) 281.913933ms ago: executing program 1 (id=3540): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x880) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r3) recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 281.597684ms ago: executing program 0 (id=3541): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}}, 0x4000000) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xfffffffffffffff4}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0x117e) 103.964477ms ago: executing program 0 (id=3542): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) close(r1) r2 = epoll_create1(0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@dev={0xfe, 0x80, '\x00', 0xe}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, 0x101, 0xfff7, 0x0, 0x358f8ef8, 0x4001004a, r3}) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1d4, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd19}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3e5c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0xd5, 0x3, "651878cdca2b7b2976a2bb46f061538fad79f82e419be2f02468bce0f3987a2acdbb908f66854b41f01b8cc30a247e9f871dae32f131646736943e3817b858213a49c2ea0031c032697e037bf2293c40acec610ac2ed4a34d2608e95aee7116fb9bf8de2d89af6554771af1abf5d4b9ea8f0c925909068d1c33e284ba9cecb610f661d2cb74d7ecd10bf7470d37a5e2edb151f33b1042d06226ea1e67f8acc5722952253eed45ddbc75ee57f335789b676f0821027bcc40d36698dd00ac5eb93267e032674404ea4c0dbe619aa3294beff"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "8a09046b9bf1b5bcf0a71a5815b3f221835ddf0f"}}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "24875222201bfa9e86da1f19e7fb4f58b38b93d1eb10f12a719dbeafdb860c7f4be6dff8513fafb0aa7f"}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x88a2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8080}, 0x890) (async) r4 = socket$unix(0x1, 0x1, 0x0) socket(0x1d, 0x2, 0x6) (async) setsockopt$sock_int(r4, 0x1, 0x2e, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1004014, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x14, 0x42, 0x201, 0x0, 0x0, {0x9, 0x0, 0x300}}, 0x14}}, 0x0) 101.698657ms ago: executing program 2 (id=3543): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b9860000000a000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 100.540607ms ago: executing program 0 (id=3544): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) setitimer(0x225c17d03, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = syz_clone(0xa04000, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@fallback, 0x33, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000e0000001000000000000000000000000ac1414aa000000000000000000000000ffff400000007fff0000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414fd000000000000000000000000000004d432000000fe80000000000000000000000000000b23030000000000000000000100000000000000000000000003000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0000000100000000000000480002"], 0x170}}, 0x0) r4 = syz_pidfd_open(r2, 0x0) ftruncate(r4, 0xd) openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) fcntl$getown(r0, 0x9) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0xc, 0x0, 0x0, 0x0, 0x23456}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)="02042700ea0e0300000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee84400004ca81b17248cf0f6b8634848593f8fb272a33f4dae827dd1bd94dae8a601e3fdcc94e687fe02c01a8fb296f0c355f256babe2578af7342c36766dcec67f1e5470bdf44e7d659dcd43cfbe575a214", 0x7f}, {&(0x7f0000000400)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551010000008d3b", 0x4a}, {&(0x7f0000000040)="1006000000000000ee8de7932b326f8a310f654fb0c4ae4398f862807a1589836c734d2341f74276871bf8465fc0583fdc0b8a34bb550ef977b001d46df69747826840d196606f75ef1cbe3bed88eb2291b63c957dd65819a068558dc5d7758e", 0x60}, {&(0x7f0000000180)="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", 0x169}, {&(0x7f00000013c0)="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", 0xcd1}], 0x5}, 0x40000) 0s ago: executing program 0 (id=3545): unshare(0x24040000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) (async) unshare(0x4010200) (async) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x800, 0x0, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ability 0, space 0, times 0 [ 175.158076][T14315] CPU: 0 UID: 0 PID: 14315 Comm: syz.3.2488 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.158237][T14315] Tainted: [W]=WARN [ 175.158243][T14315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.158253][T14315] Call Trace: [ 175.158279][T14315] [ 175.158327][T14315] __dump_stack+0x1d/0x30 [ 175.158429][T14315] dump_stack_lvl+0x95/0xd0 [ 175.158450][T14315] dump_stack+0x15/0x1b [ 175.158489][T14315] should_fail_ex+0x263/0x280 [ 175.158509][T14315] should_fail+0xb/0x20 [ 175.158527][T14315] should_fail_usercopy+0x1a/0x20 [ 175.158549][T14315] _copy_to_user+0x20/0xa0 [ 175.158632][T14315] simple_read_from_buffer+0xb5/0x130 [ 175.158658][T14315] proc_fail_nth_read+0x10e/0x150 [ 175.158699][T14315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.158731][T14315] vfs_read+0x1ab/0x7f0 [ 175.158758][T14315] ? __rcu_read_unlock+0x4e/0x70 [ 175.158778][T14315] ? __fget_files+0x184/0x1c0 [ 175.158798][T14315] ? mutex_lock+0x57/0x90 [ 175.158859][T14315] ksys_read+0xdc/0x1a0 [ 175.158878][T14315] __x64_sys_read+0x40/0x50 [ 175.158896][T14315] x64_sys_call+0x2889/0x3000 [ 175.158918][T14315] do_syscall_64+0xc0/0x2a0 [ 175.158956][T14315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.158974][T14315] RIP: 0033:0x7f8bb3a0b58e [ 175.158987][T14315] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 175.159005][T14315] RSP: 002b:00007f8bb24a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.159099][T14315] RAX: ffffffffffffffda RBX: 00007f8bb24a76c0 RCX: 00007f8bb3a0b58e [ 175.159110][T14315] RDX: 000000000000000f RSI: 00007f8bb24a70a0 RDI: 000000000000000c [ 175.159121][T14315] RBP: 00007f8bb24a7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.159132][T14315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.159143][T14315] R13: 00007f8bb3cc6038 R14: 00007f8bb3cc5fa0 R15: 00007fff93a690d8 [ 175.159192][T14315] [ 175.472160][T14325] program syz.0.2493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.786602][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 175.786619][ T29] audit: type=1326 audit(1768827789.077:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14355 comm="syz.1.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 175.824632][ T29] audit: type=1326 audit(1768827789.107:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14355 comm="syz.1.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 175.850155][ T29] audit: type=1326 audit(1768827789.107:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14355 comm="syz.1.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 175.875169][ T29] audit: type=1326 audit(1768827789.107:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14355 comm="syz.1.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 175.899797][ T29] audit: type=1326 audit(1768827789.107:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14355 comm="syz.1.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 175.925031][ T29] audit: type=1326 audit(1768827789.107:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14355 comm="syz.1.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 175.944906][T14358] program syz.4.2508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.948800][ T29] audit: type=1326 audit(1768827789.107:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14355 comm="syz.1.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 175.982144][ T29] audit: type=1326 audit(1768827789.107:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14355 comm="syz.1.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 176.007857][ T29] audit: type=1326 audit(1768827789.107:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14355 comm="syz.1.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 176.032031][ T29] audit: type=1326 audit(1768827789.107:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14355 comm="syz.1.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 176.086180][T14368] syzkaller0: entered promiscuous mode [ 176.092284][T14368] syzkaller0: entered allmulticast mode [ 176.259083][T14382] FAULT_INJECTION: forcing a failure. [ 176.259083][T14382] name failslab, interval 1, probability 0, space 0, times 0 [ 176.272151][T14382] CPU: 1 UID: 0 PID: 14382 Comm: syz.0.2517 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.272209][T14382] Tainted: [W]=WARN [ 176.272216][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.272226][T14382] Call Trace: [ 176.272234][T14382] [ 176.272242][T14382] __dump_stack+0x1d/0x30 [ 176.272266][T14382] dump_stack_lvl+0x95/0xd0 [ 176.272284][T14382] dump_stack+0x15/0x1b [ 176.272301][T14382] should_fail_ex+0x263/0x280 [ 176.272347][T14382] should_failslab+0x8c/0xb0 [ 176.272370][T14382] kmem_cache_alloc_noprof+0x68/0x490 [ 176.272391][T14382] ? skb_clone+0x151/0x1f0 [ 176.272418][T14382] skb_clone+0x151/0x1f0 [ 176.272460][T14382] ip6_finish_output2+0x1f8/0xd40 [ 176.272531][T14382] ? nf_nat_ipv6_out+0x187/0x230 [ 176.272553][T14382] ? __rcu_read_unlock+0x33/0x70 [ 176.272573][T14382] ? __pfx_ip6_mtu+0x10/0x10 [ 176.272679][T14382] ip6_finish_output+0x3a4/0x540 [ 176.272700][T14382] ip6_output+0x10a/0x280 [ 176.272748][T14382] ? __pfx_ip6_finish_output+0x10/0x10 [ 176.272769][T14382] ip6_mr_output+0x2a1/0x7f0 [ 176.272866][T14382] ? __pfx_ip6t_do_table+0x10/0x10 [ 176.272894][T14382] ? __pfx_dst_output+0x10/0x10 [ 176.272919][T14382] ip6_local_out+0xdb/0xe0 [ 176.272946][T14382] ip6_send_skb+0x5a/0x130 [ 176.272976][T14382] udp_v6_send_skb+0x7a3/0xc70 [ 176.273005][T14382] udp_v6_push_pending_frames+0xd4/0x120 [ 176.273028][T14382] udpv6_sendmsg+0xb32/0x17b0 [ 176.273122][T14382] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 176.273154][T14382] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 176.273216][T14382] inet6_sendmsg+0xac/0xd0 [ 176.273255][T14382] __sock_sendmsg+0x8b/0x170 [ 176.273273][T14382] ____sys_sendmsg+0x345/0x4a0 [ 176.273364][T14382] ___sys_sendmsg+0x195/0x1e0 [ 176.273396][T14382] __sys_sendmmsg+0x185/0x320 [ 176.273489][T14382] __x64_sys_sendmmsg+0x57/0x70 [ 176.273514][T14382] x64_sys_call+0x1e28/0x3000 [ 176.273537][T14382] do_syscall_64+0xc0/0x2a0 [ 176.273554][T14382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.273587][T14382] RIP: 0033:0x7fa0eabfacb9 [ 176.273601][T14382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.273679][T14382] RSP: 002b:00007fa0e9657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 176.273726][T14382] RAX: ffffffffffffffda RBX: 00007fa0eae75fa0 RCX: 00007fa0eabfacb9 [ 176.273739][T14382] RDX: 0000000000000001 RSI: 00002000000055c0 RDI: 0000000000000003 [ 176.273752][T14382] RBP: 00007fa0e9657090 R08: 0000000000000000 R09: 0000000000000000 [ 176.273763][T14382] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000001 [ 176.273773][T14382] R13: 00007fa0eae76038 R14: 00007fa0eae75fa0 R15: 00007ffe585342e8 [ 176.273789][T14382] [ 176.617741][T14393] syzkaller0: entered promiscuous mode [ 176.623390][T14393] syzkaller0: entered allmulticast mode [ 176.728891][T14411] loop5: detected capacity change from 0 to 512 [ 176.766609][T14409] loop3: detected capacity change from 0 to 512 [ 176.804468][T14411] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2533: bg 0: block 393: padding at end of block bitmap is not set [ 176.826970][T14411] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 176.836169][T14411] EXT4-fs (loop5): 2 truncates cleaned up [ 176.851122][T14432] loop3: detected capacity change from 0 to 512 [ 176.857133][T14411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.858121][T14432] EXT4-fs: Ignoring removed orlov option [ 176.888111][T14432] EXT4-fs: Mount option(s) incompatible with ext2 [ 176.891302][T14411] __nla_validate_parse: 10 callbacks suppressed [ 176.891319][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2533'. [ 176.912181][T14411] hsr_slave_0: left promiscuous mode [ 176.920251][T14411] hsr_slave_1: left promiscuous mode [ 176.978705][T12164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.034330][T14446] syzkaller0: entered promiscuous mode [ 177.040031][T14446] syzkaller0: entered allmulticast mode [ 177.055246][T14447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14447 comm=syz.5.2543 [ 177.200256][T14462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2553'. [ 177.253341][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2552'. [ 177.291346][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2552'. [ 177.560216][T14491] xt_l2tp: missing protocol rule (udp|l2tpip) [ 177.665428][T14498] syzkaller0: entered promiscuous mode [ 177.670961][T14498] syzkaller0: entered allmulticast mode [ 177.807801][T14522] netlink: 'syz.4.2569': attribute type 1 has an invalid length. [ 177.881522][T14514] loop1: detected capacity change from 0 to 512 [ 177.882113][T14536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2574'. [ 177.929840][T14514] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2562: corrupted inode contents [ 177.930575][T14536] SELinux: policydb string SE iž„Dì does not match my string SE Linux [ 177.950220][T14536] SELinux: failed to load policy [ 177.955837][T14514] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.2562: mark_inode_dirty error [ 177.985663][T14514] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2562: corrupted inode contents [ 178.021596][T14514] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.2562: mark_inode_dirty error [ 178.040568][T14552] syzkaller0: entered promiscuous mode [ 178.046305][T14552] syzkaller0: entered allmulticast mode [ 178.059518][T14514] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.2562: mark inode dirty (error -117) [ 178.075458][T14514] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 178.085808][T14556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2581'. [ 178.085829][T14556] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2581'. [ 178.086016][T14556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2581'. [ 178.086052][T14556] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2581'. [ 178.132326][T14514] EXT4-fs (loop1): 1 orphan inode deleted [ 178.145070][T14514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.264078][T14581] loop4: detected capacity change from 0 to 1024 [ 178.274396][T14581] EXT4-fs (loop4): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 178.502567][T14614] syzkaller0: entered promiscuous mode [ 178.508226][T14614] syzkaller0: entered allmulticast mode [ 178.585458][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'. [ 178.586043][T11589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.639389][T14524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.828003][T14656] syzkaller0: entered promiscuous mode [ 178.833517][T14656] syzkaller0: entered allmulticast mode [ 178.938835][T14670] loop5: detected capacity change from 0 to 2048 [ 178.951566][T14670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.977281][T14677] tipc: Started in network mode [ 178.982410][T14670] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.992875][T14677] tipc: Node identity 84e, cluster identity 4711 [ 178.999361][T14677] tipc: Node number set to 2126 [ 179.044165][T12164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.109617][T14693] bond0: entered promiscuous mode [ 179.114777][T14693] bond_slave_0: entered promiscuous mode [ 179.120609][T14693] bond_slave_1: entered promiscuous mode [ 179.132624][T14693] batadv0: entered promiscuous mode [ 179.139513][T14693] debugfs: 'hsr0' already exists in 'hsr' [ 179.145328][T14693] Cannot create hsr debugfs directory [ 179.151372][T14693] bond0: left promiscuous mode [ 179.156493][T14693] bond_slave_0: left promiscuous mode [ 179.162050][T14693] bond_slave_1: left promiscuous mode [ 179.168635][T14693] batadv0: left promiscuous mode [ 179.240448][T14699] loop5: detected capacity change from 0 to 128 [ 179.260485][T14699] tipc: Started in network mode [ 179.265431][T14699] tipc: Node identity 4, cluster identity 4711 [ 179.271629][T14699] tipc: Node number set to 4 [ 179.293494][T14699] netlink: 'syz.5.2623': attribute type 1 has an invalid length. [ 179.624666][T14728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=14728 comm=syz.5.2636 [ 179.696050][T14734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.853308][T14753] syzkaller0: entered promiscuous mode [ 179.859155][T14753] syzkaller0: entered allmulticast mode [ 180.036021][T14774] FAULT_INJECTION: forcing a failure. [ 180.036021][T14774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.049394][T14774] CPU: 0 UID: 0 PID: 14774 Comm: syz.3.2657 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.049423][T14774] Tainted: [W]=WARN [ 180.049430][T14774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.049442][T14774] Call Trace: [ 180.049450][T14774] [ 180.049458][T14774] __dump_stack+0x1d/0x30 [ 180.049588][T14774] dump_stack_lvl+0x95/0xd0 [ 180.049609][T14774] dump_stack+0x15/0x1b [ 180.049644][T14774] should_fail_ex+0x263/0x280 [ 180.049668][T14774] should_fail+0xb/0x20 [ 180.049686][T14774] should_fail_usercopy+0x1a/0x20 [ 180.049731][T14774] _copy_to_user+0x20/0xa0 [ 180.049756][T14774] simple_read_from_buffer+0xb5/0x130 [ 180.049787][T14774] proc_fail_nth_read+0x10e/0x150 [ 180.049825][T14774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.049954][T14774] vfs_read+0x1ab/0x7f0 [ 180.049980][T14774] ? __rcu_read_unlock+0x4e/0x70 [ 180.050075][T14774] ? __fget_files+0x184/0x1c0 [ 180.050095][T14774] ? mutex_lock+0x57/0x90 [ 180.050120][T14774] ksys_read+0xdc/0x1a0 [ 180.050157][T14774] __x64_sys_read+0x40/0x50 [ 180.050174][T14774] x64_sys_call+0x2889/0x3000 [ 180.050197][T14774] do_syscall_64+0xc0/0x2a0 [ 180.050228][T14774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.050249][T14774] RIP: 0033:0x7f8bb3a0b58e [ 180.050264][T14774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.050360][T14774] RSP: 002b:00007f8bb24a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.050380][T14774] RAX: ffffffffffffffda RBX: 00007f8bb24a76c0 RCX: 00007f8bb3a0b58e [ 180.050395][T14774] RDX: 000000000000000f RSI: 00007f8bb24a70a0 RDI: 0000000000000004 [ 180.050408][T14774] RBP: 00007f8bb24a7090 R08: 0000000000000000 R09: 0000000000000000 [ 180.050491][T14774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.050502][T14774] R13: 00007f8bb3cc6038 R14: 00007f8bb3cc5fa0 R15: 00007fff93a690d8 [ 180.050518][T14774] [ 180.326620][T14786] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.336581][T14786] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.375782][T14786] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.385707][T14786] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.401913][T14798] loop3: detected capacity change from 0 to 512 [ 180.416953][T14798] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.444943][T14798] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 9: comm syz.3.2667: lblock 0 mapped to illegal pblock 9 (length 1) [ 180.459609][T14798] EXT4-fs (loop3): mount failed [ 180.482998][T14810] loop1: detected capacity change from 0 to 512 [ 180.482992][T14786] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.499953][T14786] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.521275][T14810] EXT4-fs: Ignoring removed bh option [ 180.534049][T14810] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 180.555892][T14786] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.565866][T14786] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.577784][T14810] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 180.592129][T14810] EXT4-fs (loop1): failed to open journal device unknown-block(8,224) -6 [ 180.633720][T12984] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.642176][T12984] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.674937][T12984] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.683200][T12984] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.732124][T12984] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.740400][T12984] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.754764][T12984] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.763131][T12984] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.844426][T14848] gre2: entered promiscuous mode [ 180.849827][T14848] gre2: entered allmulticast mode [ 180.892615][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 180.892630][ T29] audit: type=1400 audit(1768827794.177:2861): avc: denied { listen } for pid=14844 comm="syz.5.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 180.990525][ T29] audit: type=1326 audit(1768827794.277:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.1.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 181.016073][ T29] audit: type=1326 audit(1768827794.277:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.1.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 181.040487][ T29] audit: type=1326 audit(1768827794.297:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.1.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 181.064393][ T29] audit: type=1326 audit(1768827794.297:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.1.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 181.089269][ T29] audit: type=1326 audit(1768827794.297:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14870 comm="syz.1.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa0cacb9 code=0x7ffc0000 [ 181.121749][ T29] audit: type=1326 audit(1768827794.407:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0eabfacb9 code=0x7ffc0000 [ 181.146000][ T29] audit: type=1326 audit(1768827794.407:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0eabfacb9 code=0x7ffc0000 [ 181.169810][ T29] audit: type=1326 audit(1768827794.407:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0eabfacb9 code=0x7ffc0000 [ 181.193831][ T29] audit: type=1326 audit(1768827794.407:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.0.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa0eabfacb9 code=0x7ffc0000 [ 181.315948][T14897] 9p: Bad value for 'rfdno' [ 181.375584][T14901] loop0: detected capacity change from 0 to 512 [ 181.382521][T14901] EXT4-fs: quotafile must be on filesystem root [ 181.828008][T14922] loop4: detected capacity change from 0 to 512 [ 181.836370][T14921] loop5: detected capacity change from 0 to 512 [ 181.844720][T14922] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2718: bg 0: block 393: padding at end of block bitmap is not set [ 181.860141][T14922] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 181.874217][T14922] EXT4-fs (loop4): 2 truncates cleaned up [ 181.880826][T14921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.888089][T14922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.911673][T14921] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.942273][T14922] __nla_validate_parse: 7 callbacks suppressed [ 181.942289][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2718'. [ 181.970433][T14922] hsr_slave_0: left promiscuous mode [ 181.980766][T14922] hsr_slave_1: left promiscuous mode [ 181.983513][T14927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2720'. [ 182.035131][T10322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.149336][T12164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.175801][T14950] w: entered promiscuous mode [ 182.194895][T14950] 8021q: adding VLAN 0 to HW filter on device w [ 182.200968][T14954] loop3: detected capacity change from 0 to 512 [ 182.231860][T14954] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2734: bg 0: block 393: padding at end of block bitmap is not set [ 182.247524][T14955] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 182.284085][T14954] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 182.293125][T14954] EXT4-fs (loop3): 2 truncates cleaned up [ 182.300719][T14954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.320648][T14955] loop5: detected capacity change from 0 to 512 [ 182.329292][T14955] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.346790][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2734'. [ 182.355884][T14954] hsr_slave_0: left promiscuous mode [ 182.361822][T14954] hsr_slave_1: left promiscuous mode [ 182.372126][T14971] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2740'. [ 182.464798][T13285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.683947][T15018] netlink: 'syz.4.2756': attribute type 1 has an invalid length. [ 182.691810][T15018] netlink: 'syz.4.2756': attribute type 2 has an invalid length. [ 182.699967][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2756'. [ 182.797855][T15027] loop4: detected capacity change from 0 to 512 [ 182.808819][T15027] EXT4-fs: Ignoring removed oldalloc option [ 182.817153][T15027] EXT4-fs: Ignoring removed i_version option [ 182.823804][T15027] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.836029][T15027] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.847759][T15027] EXT4-fs (loop4): 1 truncate cleaned up [ 182.854214][T15027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.869784][T15027] Invalid ELF header magic: != ELF [ 182.877502][T15027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2760'. [ 182.901925][T10322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.402359][T15094] FAULT_INJECTION: forcing a failure. [ 183.402359][T15094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.416005][T15094] CPU: 0 UID: 0 PID: 15094 Comm: syz.1.2786 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 183.416038][T15094] Tainted: [W]=WARN [ 183.416045][T15094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.416139][T15094] Call Trace: [ 183.416149][T15094] [ 183.416156][T15094] __dump_stack+0x1d/0x30 [ 183.416181][T15094] dump_stack_lvl+0x95/0xd0 [ 183.416203][T15094] dump_stack+0x15/0x1b [ 183.416223][T15094] should_fail_ex+0x263/0x280 [ 183.416302][T15094] should_fail+0xb/0x20 [ 183.416319][T15094] should_fail_usercopy+0x1a/0x20 [ 183.416341][T15094] _copy_from_user+0x1c/0xb0 [ 183.416438][T15094] ___sys_sendmsg+0xc1/0x1e0 [ 183.416475][T15094] __x64_sys_sendmsg+0xd4/0x160 [ 183.416525][T15094] x64_sys_call+0x17ba/0x3000 [ 183.416546][T15094] do_syscall_64+0xc0/0x2a0 [ 183.416605][T15094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.416627][T15094] RIP: 0033:0x7f58fa0cacb9 [ 183.416644][T15094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.416659][T15094] RSP: 002b:00007f58f8b27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.416694][T15094] RAX: ffffffffffffffda RBX: 00007f58fa345fa0 RCX: 00007f58fa0cacb9 [ 183.416707][T15094] RDX: 0000000024044094 RSI: 00002000000029c0 RDI: 0000000000000003 [ 183.416720][T15094] RBP: 00007f58f8b27090 R08: 0000000000000000 R09: 0000000000000000 [ 183.416780][T15094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.416794][T15094] R13: 00007f58fa346038 R14: 00007f58fa345fa0 R15: 00007fff39d03818 [ 183.416813][T15094] [ 184.015017][T15122] loop1: detected capacity change from 0 to 128 [ 184.062512][T15122] vfat: Unknown parameter '00000000000000000000000ÿÿ' [ 184.243630][T15125] loop0: detected capacity change from 0 to 512 [ 184.264983][T15125] EXT4-fs: Ignoring removed bh option [ 184.272734][T15125] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 184.285628][T15125] EXT4-fs (loop0): 1 truncate cleaned up [ 184.294912][T15125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.342014][T15125] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.414843][T15142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2799'. [ 184.425154][T15143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2799'. [ 184.438872][T15140] Restarting kernel threads ... [ 184.471363][T15146] atomic_op ffff88815aa17128 conn xmit_atomic 0000000000000000 [ 184.480266][T15140] Done restarting kernel threads. [ 184.485456][T15146] netlink: 'syz.1.2802': attribute type 11 has an invalid length. [ 184.493408][T15146] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2802'. [ 184.830050][T15194] loop5: detected capacity change from 0 to 128 [ 184.859035][T15194] vfat: Unknown parameter 'fllate' [ 184.891144][T15201] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2820'. [ 184.900697][T15194] netlink: 'syz.5.2818': attribute type 11 has an invalid length. [ 184.915676][T15157] chnl_net:caif_netlink_parms(): no params data found [ 184.950894][T15194] netlink: 'syz.5.2818': attribute type 11 has an invalid length. [ 184.992998][T15157] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.000315][T15157] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.011546][T15157] bridge_slave_0: entered allmulticast mode [ 185.018727][T15157] bridge_slave_0: entered promiscuous mode [ 185.026025][T15157] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.033385][T15157] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.041552][T15157] bridge_slave_1: entered allmulticast mode [ 185.049303][T15157] bridge_slave_1: entered promiscuous mode [ 185.116442][T15157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.127592][T15157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.164463][T15157] team0: Port device team_slave_0 added [ 185.175824][T15157] team0: Port device team_slave_1 added [ 185.197445][T15157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.205767][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.231958][T15157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.244910][T15157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.251866][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.279474][T15157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.313566][T15237] FAULT_INJECTION: forcing a failure. [ 185.313566][T15237] name failslab, interval 1, probability 0, space 0, times 0 [ 185.326869][T15237] CPU: 0 UID: 0 PID: 15237 Comm: syz.5.2828 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.326898][T15237] Tainted: [W]=WARN [ 185.326928][T15237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.326952][T15237] Call Trace: [ 185.326958][T15237] [ 185.326965][T15237] __dump_stack+0x1d/0x30 [ 185.327039][T15237] dump_stack_lvl+0x95/0xd0 [ 185.327060][T15237] dump_stack+0x15/0x1b [ 185.327134][T15237] should_fail_ex+0x263/0x280 [ 185.327154][T15237] should_failslab+0x8c/0xb0 [ 185.327255][T15237] kmem_cache_alloc_noprof+0x68/0x490 [ 185.327278][T15237] ? getname_flags+0x7f/0x3b0 [ 185.327356][T15237] getname_flags+0x7f/0x3b0 [ 185.327378][T15237] getname_uflags+0x21/0x30 [ 185.327426][T15237] __x64_sys_execveat+0x5d/0x90 [ 185.327451][T15237] x64_sys_call+0x1c0e/0x3000 [ 185.327476][T15237] do_syscall_64+0xc0/0x2a0 [ 185.327498][T15237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.327560][T15237] RIP: 0033:0x7fbe179aacb9 [ 185.327578][T15237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.327594][T15237] RSP: 002b:00007fbe163e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 185.327614][T15237] RAX: ffffffffffffffda RBX: 00007fbe17c26090 RCX: 00007fbe179aacb9 [ 185.327625][T15237] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 185.327637][T15237] RBP: 00007fbe163e6090 R08: 0000000000001000 R09: 0000000000000000 [ 185.327695][T15237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.327707][T15237] R13: 00007fbe17c26128 R14: 00007fbe17c26090 R15: 00007ffc5ba83fb8 [ 185.327728][T15237] [ 185.337241][T15157] hsr_slave_0: entered promiscuous mode [ 185.522563][T15157] hsr_slave_1: entered promiscuous mode [ 185.607127][T15157] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.618160][T15157] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.666140][T15157] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.676840][T15157] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.727312][T15157] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.737371][T15157] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.762382][T15255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.784604][T15157] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.795756][T15157] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.851438][T12984] bridge_slave_1: left allmulticast mode [ 185.858362][T12984] bridge_slave_1: left promiscuous mode [ 185.865061][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.875032][T12984] bridge_slave_0: left allmulticast mode [ 185.880874][T12984] bridge_slave_0: left promiscuous mode [ 185.888161][T12984] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.002142][T12984] bond3 (unregistering): (slave gretap1): Releasing active interface [ 186.147299][T12984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.157615][T12984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.168877][T12984] bond0 (unregistering): Released all slaves [ 186.180258][T12984] bond1 (unregistering): (slave veth3): Releasing backup interface [ 186.193491][T15272] netlink: 'syz.4.2840': attribute type 21 has an invalid length. [ 186.204219][T12984] bond1 (unregistering): Released all slaves [ 186.213018][T12984] team0: Port device bond2 removed [ 186.219724][T12984] bond2 (unregistering): Released all slaves [ 186.228563][T12984] bond3 (unregistering): Released all slaves [ 186.275659][T15157] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.297707][T15157] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.365622][T15157] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.381610][T12984] hsr_slave_0: left promiscuous mode [ 186.387645][T12984] hsr_slave_1: left promiscuous mode [ 186.393522][T12984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.401064][T12984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.408956][T12984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.417721][T12984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.427409][T12984] veth0_macvtap: left promiscuous mode [ 186.478086][T12984] team0 (unregistering): Port device team_slave_1 removed [ 186.489021][T12984] team0 (unregistering): Port device team_slave_0 removed [ 186.518486][T15157] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.704567][T15157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.720913][T15157] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.749869][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.757015][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.787706][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.795368][ T5803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.835200][T15157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.847255][T15157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.968107][T15157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.313865][T15157] veth0_vlan: entered promiscuous mode [ 187.323061][T15157] veth1_vlan: entered promiscuous mode [ 187.368389][T15157] veth0_macvtap: entered promiscuous mode [ 187.388124][T15157] veth1_macvtap: entered promiscuous mode [ 187.399648][T15157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.441659][T15157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.483234][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.509059][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.537815][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.564685][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.596604][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 187.596619][ T29] audit: type=1326 audit(1768827800.887:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15322 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 187.762449][T15329] netlink: 'syz.3.2851': attribute type 30 has an invalid length. [ 187.924918][ T29] audit: type=1326 audit(1768827800.887:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15322 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 187.949154][ T29] audit: type=1326 audit(1768827800.887:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15322 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 187.974973][ T29] audit: type=1326 audit(1768827800.887:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15322 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 188.000520][ T29] audit: type=1326 audit(1768827800.887:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15322 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 188.024349][ T29] audit: type=1400 audit(1768827801.117:3053): avc: denied { write } for pid=15333 comm="syz.0.2854" name="usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 188.048716][ T29] audit: type=1400 audit(1768827801.117:3054): avc: denied { ioctl } for pid=15333 comm="syz.0.2854" path="/dev/usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 188.179577][ T29] audit: type=1326 audit(1768827801.467:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.3.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb3a4acb9 code=0x7ffc0000 [ 188.185457][T15362] ªªªªªª: renamed from vlan0 (while UP) [ 188.203855][ T29] audit: type=1326 audit(1768827801.467:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.3.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f8bb3a4acb9 code=0x7ffc0000 [ 188.203885][ T29] audit: type=1326 audit(1768827801.467:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15359 comm="syz.3.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb3a4acb9 code=0x7ffc0000 [ 188.269750][T15366] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 188.389334][T15370] __nla_validate_parse: 4 callbacks suppressed [ 188.389360][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2867'. [ 188.422743][T15385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2873'. [ 188.579776][T15398] loop1: detected capacity change from 0 to 512 [ 188.588185][T15398] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 188.596207][T15398] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 188.605778][T15398] EXT4-fs (loop1): orphan cleanup on readonly fs [ 188.612170][T15398] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 188.627104][T15398] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 188.635377][T15398] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2879: bg 0: block 40: padding at end of block bitmap is not set [ 188.651533][T15398] EXT4-fs (loop1): Remounting filesystem read-only [ 188.658431][T15398] EXT4-fs (loop1): 1 truncate cleaned up [ 188.666279][T15398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.707728][T11589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.749377][T15411] netlink: 'syz.0.2883': attribute type 1 has an invalid length. [ 188.758516][T15411] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2883'. [ 188.874129][T15416] loop1: detected capacity change from 0 to 1024 [ 188.892956][T15416] EXT4-fs: inline encryption not supported [ 188.905756][T15416] EXT4-fs: Ignoring removed nobh option [ 188.911518][T15416] EXT4-fs: Ignoring removed bh option [ 188.927609][T15416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.034141][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2887'. [ 189.043404][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2887'. [ 189.082249][T15425] loop0: detected capacity change from 0 to 512 [ 189.097622][T15425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.131918][T15425] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.178392][T15157] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.243131][T15435] ipip0: entered promiscuous mode [ 189.248287][T15435] ipip0: entered allmulticast mode [ 189.276224][T15435] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2892'. [ 189.325509][ T10] IPVS: starting estimator thread 0... [ 189.332403][T15445] sctp: [Deprecated]: syz.4.2896 (pid 15445) Use of int in max_burst socket option. [ 189.332403][T15445] Use struct sctp_assoc_value instead [ 189.392917][T15449] loop0: detected capacity change from 0 to 128 [ 189.405628][T15449] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.413910][T15446] IPVS: using max 2160 ests per chain, 108000 per kthread [ 189.427030][T15449] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.496584][T15445] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 189.510638][T15445] bond1 (unregistering): Released all slaves [ 189.667403][T11589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.790082][T15475] netlink: 'syz.1.2903': attribute type 1 has an invalid length. [ 189.799492][T15475] netlink: 'syz.1.2903': attribute type 2 has an invalid length. [ 189.811098][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 190.309939][T15536] tipc: Started in network mode [ 190.315081][T15536] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 190.322541][T15536] tipc: Enabled bearer , priority 18 [ 190.396962][T15544] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2929'. [ 190.409425][T15545] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2929'. [ 190.622944][T15573] hub 1-0:1.0: USB hub found [ 190.636977][T15573] hub 1-0:1.0: 8 ports detected [ 190.672284][T15581] FAULT_INJECTION: forcing a failure. [ 190.672284][T15581] name failslab, interval 1, probability 0, space 0, times 0 [ 190.686047][T15581] CPU: 1 UID: 0 PID: 15581 Comm: syz.0.2944 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 190.686134][T15581] Tainted: [W]=WARN [ 190.686138][T15581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.686209][T15581] Call Trace: [ 190.686217][T15581] [ 190.686225][T15581] __dump_stack+0x1d/0x30 [ 190.686250][T15581] dump_stack_lvl+0x95/0xd0 [ 190.686346][T15581] dump_stack+0x15/0x1b [ 190.686375][T15581] should_fail_ex+0x263/0x280 [ 190.686394][T15581] should_failslab+0x8c/0xb0 [ 190.686408][T15581] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 190.686516][T15581] ? __alloc_skb+0x2f0/0x4b0 [ 190.686531][T15581] __alloc_skb+0x2f0/0x4b0 [ 190.686544][T15581] ? __alloc_skb+0x219/0x4b0 [ 190.686557][T15581] netlink_alloc_large_skb+0xbf/0xf0 [ 190.686594][T15581] netlink_sendmsg+0x40c/0x6f0 [ 190.686623][T15581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.686634][T15581] __sock_sendmsg+0x145/0x170 [ 190.686757][T15581] ____sys_sendmsg+0x31e/0x4a0 [ 190.686786][T15581] ___sys_sendmsg+0x195/0x1e0 [ 190.686814][T15581] __x64_sys_sendmsg+0xd4/0x160 [ 190.686831][T15581] x64_sys_call+0x17ba/0x3000 [ 190.686844][T15581] do_syscall_64+0xc0/0x2a0 [ 190.686901][T15581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.686913][T15581] RIP: 0033:0x7f862822acb9 [ 190.686924][T15581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.686958][T15581] RSP: 002b:00007f8626c87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.686971][T15581] RAX: ffffffffffffffda RBX: 00007f86284a5fa0 RCX: 00007f862822acb9 [ 190.687021][T15581] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 190.687028][T15581] RBP: 00007f8626c87090 R08: 0000000000000000 R09: 0000000000000000 [ 190.687036][T15581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.687061][T15581] R13: 00007f86284a6038 R14: 00007f86284a5fa0 R15: 00007fffaf0ecbd8 [ 190.687071][T15581] [ 190.936242][T15587] ref_ctr_offset mismatch. inode: 0x4d1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 191.166363][T15609] loop0: detected capacity change from 0 to 2048 [ 191.186634][T15609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 191.282333][T15616] loop1: detected capacity change from 0 to 128 [ 191.292385][T15609] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 191.343962][T15609] EXT4-fs (loop0): Remounting filesystem read-only [ 191.382215][T15628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2962'. [ 191.443863][ T4063] tipc: Node number set to 10463914 [ 191.499941][T15157] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 191.504298][T15645] loop1: detected capacity change from 0 to 256 [ 191.710302][T15680] loop5: detected capacity change from 0 to 512 [ 191.717809][T15680] EXT4-fs: inline encryption not supported [ 191.741864][T15680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.766580][T15680] EXT4-fs (loop5): shut down requested (1) [ 191.772907][T15680] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 191.782240][T15680] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 191.792572][T15680] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 191.803413][T15680] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 191.822450][T12164] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 191.833071][T12164] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 191.842235][T12164] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 191.842388][T15674] xt_TCPMSS: Only works on TCP SYN packets [ 191.851264][T12164] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 191.867822][T12164] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 191.885619][T12164] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 191.896720][T15688] netlink: 'syz.1.2988': attribute type 1 has an invalid length. [ 191.904745][T15688] netlink: 'syz.1.2988': attribute type 2 has an invalid length. [ 191.904961][T12164] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 191.914969][T15674] netlink: 'syz.3.2977': attribute type 1 has an invalid length. [ 191.926103][T12164] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 192.145491][T12164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.185362][T15726] loop4: detected capacity change from 0 to 512 [ 192.260536][T15726] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 192.277516][T15726] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.3004: iget: bad i_size value: 12154757448730 [ 192.293308][T15735] syzkaller0: entered promiscuous mode [ 192.300629][T15735] syzkaller0: entered allmulticast mode [ 192.306726][T15726] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3004: couldn't read orphan inode 13 (err -117) [ 192.319441][T15726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.334106][T15726] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3004: corrupted in-inode xattr: overlapping e_value [ 192.376792][T10322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.484196][T15751] loop1: detected capacity change from 0 to 1024 [ 192.554917][T15737] chnl_net:caif_netlink_parms(): no params data found [ 192.591327][T15737] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.598529][T15737] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.605985][T15737] bridge_slave_0: entered allmulticast mode [ 192.612861][T15737] bridge_slave_0: entered promiscuous mode [ 192.620306][T15737] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.627570][T15737] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.635108][T15737] bridge_slave_1: entered allmulticast mode [ 192.641672][T15737] bridge_slave_1: entered promiscuous mode [ 192.667150][T15737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.679866][T15737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.707008][T15737] team0: Port device team_slave_0 added [ 192.715539][T15737] team0: Port device team_slave_1 added [ 192.734349][T15737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.741605][T15737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.769083][T15737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.781482][T15737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.788842][T15737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.817222][T15737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.828912][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 192.828930][ T29] audit: type=1400 audit(1768827806.107:3303): avc: denied { create } for pid=15775 comm="syz.3.3022" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 192.858405][ T29] audit: type=1400 audit(1768827806.127:3304): avc: denied { unlink } for pid=13285 comm="syz-executor" name="file5" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 192.881739][ T29] audit: type=1400 audit(1768827806.147:3305): avc: denied { create } for pid=15777 comm="syz.3.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.903183][ T29] audit: type=1400 audit(1768827806.157:3306): avc: denied { setopt } for pid=15777 comm="syz.3.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.911644][T15778] FAT-fs (loop3): bogus number of reserved sectors [ 192.930021][T15778] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 192.939698][T15778] FAT-fs (loop3): Can't find a valid FAT filesystem [ 192.964572][T15737] hsr_slave_0: entered promiscuous mode [ 192.973277][T15737] hsr_slave_1: entered promiscuous mode [ 192.979209][ T29] audit: type=1326 audit(1768827806.257:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15779 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 192.985462][T15737] debugfs: 'hsr0' already exists in 'hsr' [ 193.004435][ T29] audit: type=1326 audit(1768827806.257:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15779 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 193.009081][T15737] Cannot create hsr debugfs directory [ 193.071069][ T29] audit: type=1326 audit(1768827806.267:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15779 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 193.094888][ T29] audit: type=1326 audit(1768827806.267:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15779 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 193.119046][ T29] audit: type=1326 audit(1768827806.267:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15779 comm="syz.0.3024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 193.182674][ T5572] IPVS: starting estimator thread 0... [ 193.188706][T15787] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 193.197594][T15787] IPVS: fo: FWM 3 0x00000003 - no destination available [ 193.198220][ T29] audit: type=1400 audit(1768827806.487:3312): avc: denied { search } for pid=15782 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.303762][T15788] IPVS: using max 1824 ests per chain, 91200 per kthread [ 193.432104][T15737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.448686][T15737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.475191][T15737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.495496][T15827] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3034: bad orphan inode 11862016 [ 193.511082][T15737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.514624][T15827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 193.552017][T15827] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.656057][T15737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.709658][T10322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 193.720725][T15737] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.912089][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.919282][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.964223][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.971343][ T5803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.212290][T15921] netlink: 'syz.4.3047': attribute type 5 has an invalid length. [ 194.221610][T15737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.240813][T15928] set_capacity_and_notify: 3 callbacks suppressed [ 194.240827][T15928] loop0: detected capacity change from 0 to 256 [ 194.286190][T15935] FAULT_INJECTION: forcing a failure. [ 194.286190][T15935] name failslab, interval 1, probability 0, space 0, times 0 [ 194.298978][T15935] CPU: 1 UID: 0 PID: 15935 Comm: syz.1.3050 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.299009][T15935] Tainted: [W]=WARN [ 194.299015][T15935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.299059][T15935] Call Trace: [ 194.299066][T15935] [ 194.299074][T15935] __dump_stack+0x1d/0x30 [ 194.299099][T15935] dump_stack_lvl+0x95/0xd0 [ 194.299119][T15935] dump_stack+0x15/0x1b [ 194.299139][T15935] should_fail_ex+0x263/0x280 [ 194.299270][T15935] should_failslab+0x8c/0xb0 [ 194.299333][T15935] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 194.299353][T15935] ? __alloc_skb+0x2f0/0x4b0 [ 194.299430][T15935] __alloc_skb+0x2f0/0x4b0 [ 194.299450][T15935] ? __alloc_skb+0x219/0x4b0 [ 194.299472][T15935] netlink_alloc_large_skb+0xbf/0xf0 [ 194.299553][T15935] netlink_sendmsg+0x40c/0x6f0 [ 194.299575][T15935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.299593][T15935] __sock_sendmsg+0x145/0x170 [ 194.299613][T15935] __sys_sendto+0x2b2/0x380 [ 194.299642][T15935] __x64_sys_sendto+0x76/0x90 [ 194.299731][T15935] x64_sys_call+0x29a7/0x3000 [ 194.299752][T15935] do_syscall_64+0xc0/0x2a0 [ 194.299774][T15935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.299793][T15935] RIP: 0033:0x7f58fa0cacb9 [ 194.299809][T15935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.299862][T15935] RSP: 002b:00007f58f8b27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 194.299879][T15935] RAX: ffffffffffffffda RBX: 00007f58fa345fa0 RCX: 00007f58fa0cacb9 [ 194.299921][T15935] RDX: 0000000000000078 RSI: 0000200000000080 RDI: 0000000000000004 [ 194.299996][T15935] RBP: 00007f58f8b27090 R08: 0000000000000000 R09: 0000000000000000 [ 194.300009][T15935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.300022][T15935] R13: 00007f58fa346038 R14: 00007f58fa345fa0 R15: 00007fff39d03818 [ 194.300096][T15935] [ 194.520027][T15943] loop4: detected capacity change from 0 to 512 [ 194.658986][T15737] veth0_vlan: entered promiscuous mode [ 194.725112][T15737] veth1_vlan: entered promiscuous mode [ 194.746078][T15737] veth0_macvtap: entered promiscuous mode [ 194.758090][T15737] veth1_macvtap: entered promiscuous mode [ 194.774987][T15737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.785789][T15737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.916986][T15960] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.929826][T15960] bond0: (slave lo): Error: Device can not be enslaved while up [ 195.180122][ T5803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.243634][ T5803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.305574][ T5803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.335557][T15983] team0: Cannot enslave team device to itself [ 195.341713][T15983] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 195.386812][ T5803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.417874][T15988] __nla_validate_parse: 5 callbacks suppressed [ 195.417886][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 195.584168][T15986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.619525][T15986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.652710][T15997] loop0: detected capacity change from 0 to 128 [ 195.678718][T15986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.704974][T15997] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.722126][T15986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.751009][T15997] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.792640][T15997] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 196.025930][T15157] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.265948][T16058] loop4: detected capacity change from 0 to 1024 [ 196.283305][T16058] tmpfs: Bad value for 'nr_inodes' [ 196.369558][T16072] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3079'. [ 196.450395][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3083'. [ 196.707203][T16139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3095'. [ 196.736879][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3093'. [ 196.811021][T16144] gtp1: entered promiscuous mode [ 196.816239][T16144] gtp1: entered allmulticast mode [ 196.907941][T16159] loop3: detected capacity change from 0 to 2048 [ 196.954864][ T3311] loop3: p1 p2 [ 196.973427][T16159] loop3: p1 p2 [ 197.030389][T16169] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 197.067287][ T5227] udevd[5227]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 197.067274][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 197.312686][T16174] tipc: Started in network mode [ 197.317617][T16174] tipc: Node identity 84e, cluster identity 4711 [ 197.324120][T16174] tipc: Node number set to 2126 [ 197.499409][T16182] bridge0: port 3(bond0) entered blocking state [ 197.505939][T16182] bridge0: port 3(bond0) entered disabled state [ 197.543952][T16182] bond0: entered allmulticast mode [ 197.549255][T16182] bond_slave_0: entered allmulticast mode [ 197.555207][T16182] bond_slave_1: entered allmulticast mode [ 197.575966][T16182] bond0: entered promiscuous mode [ 197.581149][T16182] bond_slave_0: entered promiscuous mode [ 197.587117][T16182] bond_slave_1: entered promiscuous mode [ 197.706885][T16194] loop3: detected capacity change from 0 to 512 [ 197.731829][T16178] loop2: detected capacity change from 0 to 32768 [ 197.740081][T16194] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 197.755190][T16194] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3109: bg 0: block 104: invalid block bitmap [ 197.769222][T16194] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 197.775194][T16196] loop4: detected capacity change from 0 to 2048 [ 197.786798][T16194] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3109: invalid indirect mapped block 1 (level 1) [ 197.801248][ T3311] loop2: p1 p3 < p5 p6 > [ 197.816636][T16194] EXT4-fs (loop3): 1 truncate cleaned up [ 197.822839][T16194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.839560][ T3311] loop2: p5 start 117448704 is beyond EOD, truncated [ 197.851118][T16178] loop2: p1 p3 < p5 p6 > [ 197.857028][T16178] loop2: p5 start 117448704 is beyond EOD, truncated [ 197.857052][T16205] tipc: Resetting bearer [ 197.864223][ T5227] loop4: p1 < > p3 p4 [ 197.865086][ T5227] loop4: p3 start 458752 is beyond EOD, truncated [ 197.865188][ T5227] loop4: p4 size 722688 extends beyond EOD, truncated [ 197.893103][T16196] loop4: p1 < > p3 p4 [ 197.899432][T16205] tipc: Disabling bearer [ 197.910688][T16196] loop4: p3 start 458752 is beyond EOD, truncated [ 197.917270][T16196] loop4: p4 size 722688 extends beyond EOD, truncated [ 197.932226][T13285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.934844][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 197.934857][ T29] audit: type=1400 audit(1768827811.217:3411): avc: denied { create } for pid=16207 comm="syz.2.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 197.981784][T16208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3114'. [ 198.015543][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 198.016121][ T5228] udevd[5228]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 198.030679][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 198.038972][ T29] audit: type=1400 audit(1768827811.267:3412): avc: denied { execute } for pid=16207 comm="syz.2.3114" path="/cpu.stat" dev="ramfs" ino=49153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 198.069913][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3114'. [ 198.072618][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 198.087332][ T5227] udevd[5227]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 198.102444][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 198.114051][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 198.119970][ T5228] udevd[5228]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 198.181992][T16206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3113'. [ 198.216832][T16215] syzkaller1: entered promiscuous mode [ 198.222433][T16215] syzkaller1: entered allmulticast mode [ 198.229978][T16207] delete_channel: no stack [ 198.289624][T16235] 9p: Bad value for 'rfdno' [ 198.352110][ T29] audit: type=1326 audit(1768827811.637:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.2.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43891acb9 code=0x7ffc0000 [ 198.377886][ T29] audit: type=1326 audit(1768827811.637:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.2.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43891acb9 code=0x7ffc0000 [ 198.401847][ T29] audit: type=1326 audit(1768827811.637:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.2.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7fd43891acb9 code=0x7ffc0000 [ 198.401870][ T29] audit: type=1326 audit(1768827811.637:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.2.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43891acb9 code=0x7ffc0000 [ 198.401888][ T29] audit: type=1326 audit(1768827811.637:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.2.3123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43891acb9 code=0x7ffc0000 [ 198.455434][T16245] netlink: 'syz.1.3125': attribute type 11 has an invalid length. [ 198.524453][T16249] netlink: 'syz.3.3128': attribute type 29 has an invalid length. [ 198.538122][T16249] netlink: 'syz.3.3128': attribute type 29 has an invalid length. [ 198.546676][T16249] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3128'. [ 198.555820][T16249] unsupported nla_type 58 [ 198.589453][T16260] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3127'. [ 198.614870][T16260] loop2: detected capacity change from 0 to 1024 [ 198.625470][T16259] loop4: detected capacity change from 0 to 512 [ 198.642393][T16260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.656712][T16259] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 198.681073][T16260] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.708632][T16260] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3127: bg 0: block 112: padding at end of block bitmap is not set [ 198.757427][T16259] EXT4-fs (loop4): 1 truncate cleaned up [ 198.781249][T16259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.818355][T16260] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.3127: lblock 0 mapped to illegal pblock 0 (length 1) [ 198.928976][ T29] audit: type=1400 audit(1768827812.217:3418): avc: denied { ioctl } for pid=16247 comm="syz.2.3127" path="/7/file1/file1" dev="loop2" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 198.956482][T16250] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.3127: lblock 0 mapped to illegal pblock 0 (length 1) [ 199.003682][ T29] audit: type=1400 audit(1768827812.267:3419): avc: denied { write } for pid=16247 comm="syz.2.3127" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 199.028749][ T29] audit: type=1400 audit(1768827812.287:3420): avc: denied { map } for pid=16256 comm="syz.4.3129" path="socket:[48355]" dev="sockfs" ino=48355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 199.088376][T15737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.124883][T10322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.180651][T16288] netlink: 'syz.4.3140': attribute type 11 has an invalid length. [ 199.240270][T16288] vhci_hcd vhci_hcd.0: invalid port number 129 [ 199.247993][T16288] vhci_hcd vhci_hcd.0: default hub control req: 0217 v0004 i0081 l0 [ 199.366506][T16300] loop2: detected capacity change from 0 to 1024 [ 199.394868][T16300] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.422211][T16300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.450379][T16300] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 199.474129][T16300] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3146: bad orphan inode 11 [ 199.511244][T16322] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 199.518397][T16300] ext4_test_bit(bit=10, block=4) = 1 [ 199.525029][T16300] is_bad_inode(inode)=0 [ 199.529215][T16300] NEXT_ORPHAN(inode)=3254779904 [ 199.534214][T16300] max_ino=32 [ 199.537454][T16300] i_nlink=0 [ 199.541497][T16300] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.3146: lblock 2 mapped to illegal pblock 2 (length 1) [ 199.557991][T16300] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.3146: lblock 0 mapped to illegal pblock 48 (length 1) [ 199.572741][T16300] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3146: Failed to acquire dquot type 0 [ 199.590304][T16300] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 199.603920][T16329] loop3: detected capacity change from 0 to 128 [ 199.624991][T16329] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.649093][T16300] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.3146: mark_inode_dirty error [ 199.662013][T16329] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.698122][T16300] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 199.709020][T16300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.726603][T16329] netlink: 'syz.3.3154': attribute type 1 has an invalid length. [ 199.748837][T16329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.774413][T16329] bond3: (slave geneve2): making interface the new active one [ 199.783136][T16329] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 199.789371][T16300] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #2: block 16: comm syz.2.3146: lblock 0 mapped to illegal pblock 16 (length 1) [ 199.793262][T12997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.818755][T12997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.828267][T16228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.845747][T16337] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #2: block 16: comm syz.2.3146: lblock 0 mapped to illegal pblock 16 (length 1) [ 199.851374][T16228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.870015][T13285] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.934138][T15737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.944452][T15737] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 199.974182][T15737] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 199.991867][T15737] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 200.035224][T16342] FAULT_INJECTION: forcing a failure. [ 200.035224][T16342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.048497][T16342] CPU: 1 UID: 0 PID: 16342 Comm: syz.3.3159 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 200.048529][T16342] Tainted: [W]=WARN [ 200.048537][T16342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.048614][T16342] Call Trace: [ 200.048621][T16342] [ 200.048629][T16342] __dump_stack+0x1d/0x30 [ 200.048660][T16342] dump_stack_lvl+0x95/0xd0 [ 200.048803][T16342] dump_stack+0x15/0x1b [ 200.048819][T16342] should_fail_ex+0x263/0x280 [ 200.048843][T16342] should_fail+0xb/0x20 [ 200.048861][T16342] should_fail_usercopy+0x1a/0x20 [ 200.048895][T16342] _copy_to_iter+0xd2/0xea0 [ 200.048920][T16342] ? __mutex_lock+0xa3d/0xe50 [ 200.049052][T16342] copy_page_to_iter+0x18f/0x2d0 [ 200.049073][T16342] anon_pipe_read+0x236/0x750 [ 200.049098][T16342] do_iter_readv_writev+0x4fd/0x5a0 [ 200.049121][T16342] vfs_readv+0x1f4/0x6e0 [ 200.049203][T16342] do_readv+0xe9/0x210 [ 200.049226][T16342] __x64_sys_readv+0x45/0x50 [ 200.049245][T16342] x64_sys_call+0x2831/0x3000 [ 200.049265][T16342] do_syscall_64+0xc0/0x2a0 [ 200.049286][T16342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.049442][T16342] RIP: 0033:0x7f8bb3a4acb9 [ 200.049459][T16342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.049476][T16342] RSP: 002b:00007f8bb2486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 200.049501][T16342] RAX: ffffffffffffffda RBX: 00007f8bb3cc6090 RCX: 00007f8bb3a4acb9 [ 200.049514][T16342] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000009 [ 200.049525][T16342] RBP: 00007f8bb2486090 R08: 0000000000000000 R09: 0000000000000000 [ 200.049535][T16342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.049590][T16342] R13: 00007f8bb3cc6128 R14: 00007f8bb3cc6090 R15: 00007fff93a690d8 [ 200.049610][T16342] [ 200.409119][ T5572] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 200.418725][ T5572] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.464149][T16370] ref_ctr_offset mismatch. inode: 0x537 offset: 0x0 ref_ctr_offset(old): 0x20 ref_ctr_offset(new): 0x0 [ 200.490239][T16366] fido_id[16366]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 200.536369][T16368] loop3: detected capacity change from 0 to 512 [ 200.576371][T16368] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.630873][T16368] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 200.658113][T13285] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 200.977720][T16402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.993044][T16402] batadv_slave_0: entered promiscuous mode [ 201.003961][T16402] netlink: 'syz.2.3179': attribute type 1 has an invalid length. [ 201.012874][T16404] xt_limit: Overflow, try lower: 0/0 [ 201.098474][T16408] loop2: detected capacity change from 0 to 1024 [ 201.115681][T16408] EXT4-fs: dax option not supported [ 201.132574][T16414] FAULT_INJECTION: forcing a failure. [ 201.132574][T16414] name failslab, interval 1, probability 0, space 0, times 0 [ 201.145639][T16414] CPU: 0 UID: 0 PID: 16414 Comm: syz.1.3183 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.145732][T16414] Tainted: [W]=WARN [ 201.145792][T16414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.145803][T16414] Call Trace: [ 201.145809][T16414] [ 201.145817][T16414] __dump_stack+0x1d/0x30 [ 201.145837][T16414] dump_stack_lvl+0x95/0xd0 [ 201.145854][T16414] dump_stack+0x15/0x1b [ 201.145870][T16414] should_fail_ex+0x263/0x280 [ 201.145982][T16414] should_failslab+0x8c/0xb0 [ 201.146000][T16414] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 201.146020][T16414] ? key_alloc+0x2b8/0x9a0 [ 201.146113][T16414] kmemdup_noprof+0x2b/0x70 [ 201.146142][T16414] key_alloc+0x2b8/0x9a0 [ 201.146168][T16414] keyring_alloc+0x45/0xb0 [ 201.146238][T16414] lookup_user_key+0x2fe/0xd70 [ 201.146258][T16414] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 201.146283][T16414] __se_sys_add_key+0x272/0x360 [ 201.146309][T16414] __x64_sys_add_key+0x67/0x80 [ 201.146355][T16414] x64_sys_call+0x2ea3/0x3000 [ 201.146376][T16414] do_syscall_64+0xc0/0x2a0 [ 201.146436][T16414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.146456][T16414] RIP: 0033:0x7f58fa0cacb9 [ 201.146480][T16414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.146494][T16414] RSP: 002b:00007f58f8b27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 201.146529][T16414] RAX: ffffffffffffffda RBX: 00007f58fa345fa0 RCX: 00007f58fa0cacb9 [ 201.146543][T16414] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280 [ 201.146557][T16414] RBP: 00007f58f8b27090 R08: ffffffffffffffff R09: 0000000000000000 [ 201.146641][T16414] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000001 [ 201.146697][T16414] R13: 00007f58fa346038 R14: 00007f58fa345fa0 R15: 00007fff39d03818 [ 201.146713][T16414] [ 201.564203][T16445] loop2: detected capacity change from 0 to 512 [ 201.576176][T16445] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3193: invalid indirect mapped block 256 (level 2) [ 201.591730][T16445] EXT4-fs (loop2): 2 truncates cleaned up [ 201.598213][T16445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.632314][T16445] 9p: Bad value for 'wfdno' [ 201.649409][T15737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.828300][T16470] FAULT_INJECTION: forcing a failure. [ 201.828300][T16470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.842912][T16470] CPU: 1 UID: 0 PID: 16470 Comm: syz.3.3200 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.842941][T16470] Tainted: [W]=WARN [ 201.842949][T16470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.842961][T16470] Call Trace: [ 201.842971][T16470] [ 201.842979][T16470] __dump_stack+0x1d/0x30 [ 201.843019][T16470] dump_stack_lvl+0x95/0xd0 [ 201.843038][T16470] dump_stack+0x15/0x1b [ 201.843054][T16470] should_fail_ex+0x263/0x280 [ 201.843113][T16470] should_fail+0xb/0x20 [ 201.843128][T16470] should_fail_usercopy+0x1a/0x20 [ 201.843192][T16470] _copy_from_user+0x1c/0xb0 [ 201.843236][T16470] ___sys_sendmsg+0xc1/0x1e0 [ 201.843273][T16470] __x64_sys_sendmsg+0xd4/0x160 [ 201.843300][T16470] x64_sys_call+0x17ba/0x3000 [ 201.843319][T16470] do_syscall_64+0xc0/0x2a0 [ 201.843380][T16470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.843402][T16470] RIP: 0033:0x7f8bb3a4acb9 [ 201.843418][T16470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.843436][T16470] RSP: 002b:00007f8bb24a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.843455][T16470] RAX: ffffffffffffffda RBX: 00007f8bb3cc5fa0 RCX: 00007f8bb3a4acb9 [ 201.843581][T16470] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 201.843595][T16470] RBP: 00007f8bb24a7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.843608][T16470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.843621][T16470] R13: 00007f8bb3cc6038 R14: 00007f8bb3cc5fa0 R15: 00007fff93a690d8 [ 201.843681][T16470] [ 202.120135][T16484] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.179754][T16488] loop2: detected capacity change from 0 to 512 [ 202.241058][T16496] loop0: detected capacity change from 0 to 1024 [ 202.254776][T16488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.290296][T16498] __nla_validate_parse: 7 callbacks suppressed [ 202.290352][T16498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3209'. [ 202.308720][T16496] EXT4-fs: inline encryption not supported [ 202.362193][T16496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.473107][T15157] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.524041][T16512] loop3: detected capacity change from 0 to 512 [ 202.531972][T16512] EXT4-fs (loop3): filesystem is read-only [ 202.539648][T16512] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 202.553846][T15737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.568658][T16512] EXT4-fs (loop3): filesystem is read-only [ 202.574693][T16512] EXT4-fs (loop3): orphan cleanup on readonly fs [ 202.581862][T16512] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3215: bg 0: block 64: padding at end of block bitmap is not set [ 202.596566][T16512] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 202.605771][T16512] EXT4-fs (loop3): 1 orphan inode deleted [ 202.626917][T16512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.725568][T16521] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3217'. [ 202.930177][T16542] mmap: syz.0.3223 (16542): VmData 112951296 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 202.960580][T16544] bridge1: entered promiscuous mode [ 202.968348][T16537] loop2: detected capacity change from 0 to 8192 [ 202.978246][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3224'. [ 202.978263][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3224'. [ 202.992473][T16545] team1: entered promiscuous mode [ 203.001875][T16545] team1: entered allmulticast mode [ 203.045204][T16545] 8021q: adding VLAN 0 to HW filter on device team1 [ 203.074273][T16544] team2: entered promiscuous mode [ 203.079368][T16544] team2: entered allmulticast mode [ 203.099991][T16544] 8021q: adding VLAN 0 to HW filter on device team2 [ 203.362555][T16554] loop4: detected capacity change from 0 to 1024 [ 203.382810][T16554] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.430676][T13285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.440735][T16554] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.463021][T16554] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3227: bad orphan inode 11 [ 203.488070][T16554] ext4_test_bit(bit=10, block=4) = 1 [ 203.493559][T16554] is_bad_inode(inode)=0 [ 203.497820][T16554] NEXT_ORPHAN(inode)=3254779904 [ 203.502684][T16554] max_ino=32 [ 203.507294][T16554] i_nlink=0 [ 203.524377][T16554] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.3227: lblock 2 mapped to illegal pblock 2 (length 1) [ 203.540888][T16554] __quota_error: 277 callbacks suppressed [ 203.540916][T16554] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 203.557995][T16554] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.3227: lblock 0 mapped to illegal pblock 48 (length 1) [ 203.574084][T16554] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 203.583063][T16554] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3227: Failed to acquire dquot type 0 [ 203.595765][T16554] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 203.611318][T16554] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.3227: mark_inode_dirty error [ 203.623767][T16554] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 203.650074][T16554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.693124][T16565] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3232'. [ 203.705235][ T29] audit: type=1326 audit(1768827816.997:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 203.741322][ T29] audit: type=1326 audit(1768827817.017:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 203.767275][ T29] audit: type=1326 audit(1768827817.017:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 203.788881][T16573] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 203.790971][ T29] audit: type=1326 audit(1768827817.017:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 203.825484][T16573] SELinux: failed to load policy [ 203.825495][ T29] audit: type=1326 audit(1768827817.017:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 203.825519][ T29] audit: type=1326 audit(1768827817.017:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 203.879345][ T29] audit: type=1400 audit(1768827817.017:3702): avc: denied { create } for pid=16567 comm="syz.0.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 203.901102][ T29] audit: type=1326 audit(1768827817.017:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.0.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862822acb9 code=0x7ffc0000 [ 203.946593][T10322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.990619][T10322] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 204.015199][T10322] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 204.043397][T10322] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 204.107391][T16581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.134494][T16581] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.199348][T16603] netlink: 'syz.4.3243': attribute type 9 has an invalid length. [ 204.238642][T16606] netlink: 'syz.4.3244': attribute type 29 has an invalid length. [ 204.376909][T16609] syzkaller0: entered promiscuous mode [ 204.382442][T16609] syzkaller0: entered allmulticast mode [ 204.705638][T16626] FAULT_INJECTION: forcing a failure. [ 204.705638][T16626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.718767][T16626] CPU: 1 UID: 0 PID: 16626 Comm: syz.4.3250 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.718801][T16626] Tainted: [W]=WARN [ 204.718808][T16626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.718820][T16626] Call Trace: [ 204.718828][T16626] [ 204.718836][T16626] __dump_stack+0x1d/0x30 [ 204.718934][T16626] dump_stack_lvl+0x95/0xd0 [ 204.718953][T16626] dump_stack+0x15/0x1b [ 204.718969][T16626] should_fail_ex+0x263/0x280 [ 204.718994][T16626] should_fail+0xb/0x20 [ 204.719027][T16626] should_fail_usercopy+0x1a/0x20 [ 204.719048][T16626] _copy_from_user+0x1c/0xb0 [ 204.719111][T16626] __sys_connect+0xd0/0x2a0 [ 204.719139][T16626] __x64_sys_connect+0x3f/0x50 [ 204.719169][T16626] x64_sys_call+0x2e09/0x3000 [ 204.719192][T16626] do_syscall_64+0xc0/0x2a0 [ 204.719214][T16626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.719232][T16626] RIP: 0033:0x7f5e3b85acb9 [ 204.719293][T16626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.719311][T16626] RSP: 002b:00007f5e3a2b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 204.719331][T16626] RAX: ffffffffffffffda RBX: 00007f5e3bad5fa0 RCX: 00007f5e3b85acb9 [ 204.719345][T16626] RDX: 000000000000001c RSI: 0000200000000200 RDI: 0000000000000004 [ 204.719359][T16626] RBP: 00007f5e3a2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 204.719372][T16626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.719420][T16626] R13: 00007f5e3bad6038 R14: 00007f5e3bad5fa0 R15: 00007ffccef84cf8 [ 204.719513][T16626] [ 204.940690][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3251'. [ 204.949878][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3251'. [ 204.958770][T16628] netlink: 'syz.1.3251': attribute type 11 has an invalid length. [ 205.032640][T16639] set_capacity_and_notify: 1 callbacks suppressed [ 205.032657][T16639] loop2: detected capacity change from 0 to 512 [ 205.045586][T16641] Cannot find map_set index 0 as target [ 205.084288][T15157] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.156304][T16639] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 205.276915][T16664] loop4: detected capacity change from 0 to 512 [ 205.296899][T16664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.315012][T16664] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3265: checksumming directory block 0 [ 205.374011][T16664] EXT4-fs (loop4): shut down requested (1) [ 205.410627][T16674] loop3: detected capacity change from 0 to 128 [ 205.447092][T10322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.472295][T16680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3270'. [ 205.490525][T16679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3270'. [ 205.760542][T16692] loop4: detected capacity change from 0 to 256 [ 205.768559][T16692] vfat: Bad value for 'fmask' [ 205.775954][T16692] 9pnet_fd: p9_fd_create_unix (16692): problem connecting socket: éq‰Y’3aK: -111 [ 205.812204][T16694] loop3: detected capacity change from 0 to 512 [ 205.822215][T16694] EXT4-fs (loop3): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 206.110187][T16707] loop2: detected capacity change from 0 to 512 [ 206.144799][T16707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.170083][T16707] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.370817][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3281'. [ 206.396446][T16719] bridge0: port 3(vlan2) entered blocking state [ 206.402748][T16719] bridge0: port 3(vlan2) entered disabled state [ 206.409386][T16719] vlan2: entered allmulticast mode [ 206.414634][T16719] bridge0: entered allmulticast mode [ 206.421689][T16722] ipt_REJECT: TCP_RESET invalid for non-tcp [ 206.428120][T16719] vlan2: left allmulticast mode [ 206.433008][T16719] bridge0: left allmulticast mode [ 206.450491][T16707] pim6reg1: entered promiscuous mode [ 206.456472][T16707] pim6reg1: entered allmulticast mode [ 206.476018][T16726] loop0: detected capacity change from 0 to 128 [ 206.547265][T15737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.572827][T16732] loop0: detected capacity change from 0 to 512 [ 206.619524][T16732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.634043][T16732] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.650899][T16732] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 206.674123][T16732] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 206.686805][T16732] EXT4-fs (loop0): This should not happen!! Data will be lost [ 206.686805][T16732] [ 206.698101][T16732] EXT4-fs (loop0): Total free blocks count 0 [ 206.704202][T16732] EXT4-fs (loop0): Free/Dirty block details [ 206.710118][T16732] EXT4-fs (loop0): free_blocks=65280 [ 206.715438][T16732] EXT4-fs (loop0): dirty_blocks=2 [ 206.720517][T16732] EXT4-fs (loop0): Block reservation details [ 206.727981][T16732] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 206.747191][T15157] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.958158][T16774] 9pnet_fd: Insufficient options for proto=fd [ 206.966879][T16772] loop0: detected capacity change from 0 to 256 [ 206.973245][T16760] loop3: detected capacity change from 0 to 8192 [ 207.227960][T16795] EXT4-fs: Ignoring removed nobh option [ 207.233547][T16795] EXT4-fs: Ignoring removed bh option [ 207.267736][T16795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.386860][T15737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.429494][T16811] EXT4-fs: Ignoring removed bh option [ 207.453102][T16811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.578424][T16811] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.3317: Allocating blocks 497-513 which overlap fs metadata [ 207.646261][T16811] EXT4-fs (loop0): pa ffff888107aab310: logic 256, phys. 385, len 8 [ 207.654447][T16811] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 207.762254][T15157] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.940326][T16840] bond1: option all_slaves_active: invalid value (5) [ 207.949711][T16840] bond1 (unregistering): Released all slaves [ 208.123706][T16854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.157188][T16854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.234888][T16854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.261733][T16859] __nla_validate_parse: 2 callbacks suppressed [ 208.261747][T16859] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3334'. [ 208.327541][T16854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.356452][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3336'. [ 208.368102][T16864] tipc: Failed to remove unknown binding: 66,1,1/2126:3920880784/3920880786 [ 208.377563][T16864] tipc: Failed to remove unknown binding: 66,1,1/2126:3920880784/3920880786 [ 208.411738][T16228] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.449682][T16228] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.482808][T16228] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.491631][T16875] syzkaller0: entered promiscuous mode [ 208.498565][T16875] syzkaller0: entered allmulticast mode [ 208.520241][T16228] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.541969][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3340'. [ 208.562445][T16882] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.622850][T16882] EXT4-fs (loop2): 1 truncate cleaned up [ 208.632701][T16882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.649095][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 208.649111][ T29] audit: type=1400 audit(1768827821.937:3881): avc: denied { ioctl } for pid=16889 comm="syz.3.3345" path="socket:[52678]" dev="sockfs" ino=52678 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.665866][T16895] ext2: Unknown parameter 'mask' [ 208.736250][T15737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.822524][ T29] audit: type=1400 audit(1768827822.107:3882): avc: denied { cmd } for pid=16902 comm="syz.4.3349" path="socket:[52693]" dev="sockfs" ino=52693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 208.847814][T16908] netlink: 'syz.2.3350': attribute type 3 has an invalid length. [ 208.855666][T16908] netlink: 'syz.2.3350': attribute type 4 has an invalid length. [ 208.863469][T16908] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.3350'. [ 209.085378][T16918] netem: incorrect ge model size [ 209.090518][T16918] netem: change failed [ 209.199248][T16924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.266726][T15737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.274406][T16929] netlink: 'syz.4.3358': attribute type 12 has an invalid length. [ 209.306976][T16936] tmpfs: Unknown parameter '00000000000000000003' [ 209.366340][T16911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.382563][T16942] FAULT_INJECTION: forcing a failure. [ 209.382563][T16942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.397085][T16942] CPU: 1 UID: 0 PID: 16942 Comm: syz.4.3364 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 209.397112][T16942] Tainted: [W]=WARN [ 209.397119][T16942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.397130][T16942] Call Trace: [ 209.397137][T16942] [ 209.397216][T16942] __dump_stack+0x1d/0x30 [ 209.397240][T16942] dump_stack_lvl+0x95/0xd0 [ 209.397260][T16942] dump_stack+0x15/0x1b [ 209.397278][T16942] should_fail_ex+0x263/0x280 [ 209.397298][T16942] should_fail+0xb/0x20 [ 209.397384][T16942] should_fail_usercopy+0x1a/0x20 [ 209.397403][T16942] _copy_from_user+0x1c/0xb0 [ 209.397436][T16942] ___sys_sendmsg+0xc1/0x1e0 [ 209.397470][T16942] __x64_sys_sendmsg+0xd4/0x160 [ 209.397518][T16942] x64_sys_call+0x17ba/0x3000 [ 209.397538][T16942] do_syscall_64+0xc0/0x2a0 [ 209.397612][T16942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.397632][T16942] RIP: 0033:0x7f5e3b85acb9 [ 209.397646][T16942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.397706][T16942] RSP: 002b:00007f5e3a2b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.397725][T16942] RAX: ffffffffffffffda RBX: 00007f5e3bad5fa0 RCX: 00007f5e3b85acb9 [ 209.397739][T16942] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 209.397752][T16942] RBP: 00007f5e3a2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 209.397784][T16942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.397829][T16942] R13: 00007f5e3bad6038 R14: 00007f5e3bad5fa0 R15: 00007ffccef84cf8 [ 209.397845][T16942] [ 209.399533][T16911] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 209.592307][T16947] EXT4-fs (loop2): 1 orphan inode deleted [ 209.616258][T16947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.645578][T16947] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.669718][T15737] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.699983][ T4063] kernel write not supported for file [eventfd] (pid: 4063 comm: kworker/0:9) [ 209.722846][T16963] netlink: 'syz.4.3369': attribute type 4 has an invalid length. [ 209.747287][T13285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.756839][T16957] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.780586][T16965] netlink: 'syz.4.3369': attribute type 4 has an invalid length. [ 209.817728][T16969] cgroup: name respecified [ 209.891042][T16972] EXT4-fs: Ignoring removed nobh option [ 209.918573][ T29] audit: type=1400 audit(1768827823.197:3883): avc: denied { getopt } for pid=16978 comm="syz.3.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.920789][T16983] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3377'. [ 209.962412][T16972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.010653][T16972] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3373'. [ 210.019880][T16972] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3373'. [ 210.029199][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3373'. [ 210.114033][T16995] bridge0: entered allmulticast mode [ 210.119993][ T29] audit: type=1400 audit(1768827823.407:3884): avc: denied { listen } for pid=16994 comm="syz.4.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.141989][T16995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3382'. [ 210.147587][T16997] set_capacity_and_notify: 10 callbacks suppressed [ 210.147617][T16997] loop0: detected capacity change from 0 to 512 [ 210.231291][T16997] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.244217][T16228] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 210.270102][T16997] EXT4-fs (loop0): 1 truncate cleaned up [ 210.275916][T16228] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 210.289761][T16228] EXT4-fs (loop2): This should not happen!! Data will be lost [ 210.289761][T16228] [ 210.299617][T16228] EXT4-fs (loop2): Total free blocks count 0 [ 210.305906][T16228] EXT4-fs (loop2): Free/Dirty block details [ 210.311973][T16228] EXT4-fs (loop2): free_blocks=2415919504 [ 210.319055][T16228] EXT4-fs (loop2): dirty_blocks=32 [ 210.324202][T16228] EXT4-fs (loop2): Block reservation details [ 210.330180][T16228] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 210.347457][T16997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.398703][T13001] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 210.446411][T15157] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.604956][T17030] vhci_hcd vhci_hcd.3: invalid port number 9 [ 210.605800][T17031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3395'. [ 210.611024][T17030] vhci_hcd vhci_hcd.3: invalid port number 9 [ 210.757548][T17045] ipt_REJECT: TCP_RESET invalid for non-tcp [ 211.122832][T17057] loop3: detected capacity change from 0 to 512 [ 211.156184][ T29] audit: type=1400 audit(1768827824.447:3885): avc: denied { getopt } for pid=17047 comm="syz.1.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.229525][T17057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.231576][ T29] audit: type=1400 audit(1768827824.517:3886): avc: denied { create } for pid=17062 comm="syz.4.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 211.273972][T17057] netlink: 'syz.3.3404': attribute type 4 has an invalid length. [ 211.282700][T17057] netlink: 'syz.3.3404': attribute type 4 has an invalid length. [ 211.309381][T13285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.344150][T17067] netlink: 'syz.3.3406': attribute type 4 has an invalid length. [ 211.361201][T17067] netlink: 'syz.3.3406': attribute type 4 has an invalid length. [ 211.394352][T17071] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.401579][T17071] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.828264][T17094] loop3: detected capacity change from 0 to 512 [ 211.918025][T17094] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3413: bg 0: block 104: invalid block bitmap [ 211.952113][T17094] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 211.968672][T17099] FAULT_INJECTION: forcing a failure. [ 211.968672][T17099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.981989][T17099] CPU: 0 UID: 0 PID: 17099 Comm: syz.1.3414 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 211.982018][T17099] Tainted: [W]=WARN [ 211.982024][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.982034][T17099] Call Trace: [ 211.982042][T17099] [ 211.982052][T17099] __dump_stack+0x1d/0x30 [ 211.982118][T17099] dump_stack_lvl+0x95/0xd0 [ 211.982137][T17099] dump_stack+0x15/0x1b [ 211.982152][T17099] should_fail_ex+0x263/0x280 [ 211.982172][T17099] should_fail+0xb/0x20 [ 211.982247][T17099] should_fail_usercopy+0x1a/0x20 [ 211.982267][T17099] _copy_from_user+0x1c/0xb0 [ 211.982289][T17099] kstrtouint_from_user+0x69/0xf0 [ 211.982307][T17099] ? 0xffffffff81000000 [ 211.982389][T17099] ? selinux_file_permission+0x1e1/0x320 [ 211.982422][T17099] proc_fail_nth_write+0x50/0x160 [ 211.982500][T17099] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 211.982525][T17099] vfs_write+0x269/0x9f0 [ 211.982540][T17099] ? __rcu_read_unlock+0x4e/0x70 [ 211.982624][T17099] ? __fget_files+0x184/0x1c0 [ 211.982642][T17099] ? mutex_lock+0x57/0x90 [ 211.982665][T17099] ksys_write+0xdc/0x1a0 [ 211.982729][T17099] __x64_sys_write+0x40/0x50 [ 211.982748][T17099] x64_sys_call+0x2847/0x3000 [ 211.982831][T17099] do_syscall_64+0xc0/0x2a0 [ 211.982924][T17099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.982971][T17099] RIP: 0033:0x7f58fa08b58e [ 211.982988][T17099] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.983007][T17099] RSP: 002b:00007f58f8b26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 211.983026][T17099] RAX: ffffffffffffffda RBX: 00007f58f8b276c0 RCX: 00007f58fa08b58e [ 211.983038][T17099] RDX: 0000000000000001 RSI: 00007f58f8b270a0 RDI: 0000000000000003 [ 211.983095][T17099] RBP: 00007f58f8b27090 R08: 0000000000000000 R09: 0000000000000000 [ 211.983109][T17099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.983122][T17099] R13: 00007f58fa346038 R14: 00007f58fa345fa0 R15: 00007fff39d03818 [ 211.983160][T17099] [ 212.195266][T17094] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3413: invalid indirect mapped block 1 (level 1) [ 212.218841][T17094] EXT4-fs (loop3): 1 truncate cleaned up [ 212.233606][T17094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.237618][T17101] loop4: detected capacity change from 0 to 512 [ 212.273835][T13285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.283545][T17101] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 212.297182][T17101] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3416: bg 0: block 104: invalid block bitmap [ 212.301105][T17103] netlink: 'syz.1.3415': attribute type 5 has an invalid length. [ 212.333884][T17101] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 212.343226][T17101] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3416: invalid indirect mapped block 1 (level 1) [ 212.362654][T17101] EXT4-fs (loop4): 1 truncate cleaned up [ 212.371563][T17101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.418312][T10322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.607659][T17134] loop3: detected capacity change from 0 to 512 [ 212.942452][T17134] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3426: bad orphan inode 13 [ 213.099418][T17134] ext4_test_bit(bit=12, block=4) = 1 [ 213.104877][T17134] is_bad_inode(inode)=0 [ 213.109023][T17134] NEXT_ORPHAN(inode)=0 [ 213.113112][T17134] max_ino=32 [ 213.117747][T17134] i_nlink=1 [ 213.220695][T17156] bridge_slave_0: left allmulticast mode [ 213.227701][T17156] bridge_slave_0: left promiscuous mode [ 213.233586][T17156] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.285705][T17134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.357732][T17134] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.3426: Unrecognised inode hash code 20 [ 213.369838][T17134] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3426: Corrupt directory, running e2fsck is recommended [ 213.390709][T17156] bridge_slave_1: left allmulticast mode [ 213.396574][T17156] bridge_slave_1: left promiscuous mode [ 213.402294][T17156] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.435624][T17156] bond0: (slave bond_slave_0): Releasing backup interface [ 213.446767][T17134] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.3426: Unrecognised inode hash code 20 [ 213.459756][T17134] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3426: Corrupt directory, running e2fsck is recommended [ 213.482343][T17156] bond0: (slave bond_slave_1): Releasing backup interface [ 213.491987][T17156] team_slave_0: left promiscuous mode [ 213.500440][T17156] team0: Port device team_slave_0 removed [ 213.506629][T17156] team_slave_1: left promiscuous mode [ 213.512779][T17156] team0: Port device team_slave_1 removed [ 213.530728][T17156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.539790][T17156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.564484][ T5810] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.590659][ T5810] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.615114][ T5810] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.639759][ T5810] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.684356][T17171] __nla_validate_parse: 8 callbacks suppressed [ 213.684420][T17171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3437'. [ 213.723290][ T29] audit: type=1400 audit(1768827826.997:3887): avc: denied { audit_write } for pid=17172 comm="syz.1.3438" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 213.745993][ T29] audit: type=1400 audit(1768827826.997:3888): avc: denied { accept } for pid=17172 comm="syz.1.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 213.856135][ T29] audit: type=1400 audit(1768827827.067:3889): avc: denied { map } for pid=17170 comm="syz.3.3437" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 213.858252][T17188] netlink: 'syz.4.3442': attribute type 1 has an invalid length. [ 213.881854][ T29] audit: type=1400 audit(1768827827.067:3890): avc: denied { setopt } for pid=17170 comm="syz.3.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 213.917509][ T29] audit: type=1400 audit(1768827827.197:3891): avc: denied { read } for pid=17184 comm="syz.3.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.947173][ T29] audit: type=1400 audit(1768827827.237:3892): avc: denied { write } for pid=17187 comm="syz.4.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.089354][ T29] audit: type=1400 audit(1768827827.377:3893): avc: denied { create } for pid=17196 comm="syz.4.3445" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=phonet_socket permissive=1 [ 214.176720][ T29] audit: type=1400 audit(1768827827.437:3894): avc: denied { write } for pid=17201 comm="syz.0.3446" path="socket:[54820]" dev="sockfs" ino=54820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 214.226098][T17206] openvswitch: netlink: Missing key (keys=40, expected=80) [ 214.265963][T17211] loop2: detected capacity change from 0 to 256 [ 214.273873][T17211] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.299134][ T29] audit: type=1400 audit(1768827827.587:3895): avc: denied { accept } for pid=17210 comm="syz.2.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.330979][ T29] audit: type=1400 audit(1768827827.617:3896): avc: denied { execute } for pid=17207 comm="syz.4.3449" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=53576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 214.376124][T17213] loop4: detected capacity change from 0 to 164 [ 214.385324][T17213] Unable to read rock-ridge attributes [ 214.411087][T17215] loop4: detected capacity change from 0 to 512 [ 214.426422][T17215] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.440582][T17215] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.3452: corrupted inode contents [ 214.454534][T17215] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.3452: mark_inode_dirty error [ 214.468012][T17215] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.3452: corrupted inode contents [ 214.480300][T17215] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.3452: mark_inode_dirty error [ 214.493864][T17215] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #18: comm syz.4.3452: directory missing '.' [ 214.781633][T17250] loop4: detected capacity change from 0 to 256 [ 214.819356][T17248] loop3: detected capacity change from 0 to 8192 [ 214.836782][T17253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3463'. [ 214.867382][T17246] netlink: 'syz.2.3460': attribute type 30 has an invalid length. [ 214.875502][T17246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3460'. [ 214.898134][T17246] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 214.923416][T17246] bond1 (unregistering): Released all slaves [ 215.141690][T17286] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 215.156184][T17286] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.162965][T17286] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.3473: Block bitmap for bg 0 marked uninitialized [ 215.177234][T17286] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 215.186679][T17286] EXT4-fs (loop4): 1 orphan inode deleted [ 215.196260][T17286] netlink: 'syz.4.3473': attribute type 4 has an invalid length. [ 215.227350][T17286] netlink: 'syz.4.3473': attribute type 4 has an invalid length. [ 215.353283][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3478'. [ 215.427575][T17312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3481'. [ 215.491843][T17324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3484'. [ 215.506498][T17324] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 215.574447][T17337] netlink: 'syz.1.3488': attribute type 12 has an invalid length. [ 215.582662][T17337] netlink: 'syz.1.3488': attribute type 29 has an invalid length. [ 215.590829][T17337] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3488'. [ 215.685804][T17346] set_capacity_and_notify: 1 callbacks suppressed [ 215.685821][T17346] loop4: detected capacity change from 0 to 8192 [ 215.713950][T17349] loop3: detected capacity change from 0 to 128 [ 215.721696][T17340] can0: slcan on ttyS3. [ 216.020296][T17349] syz.3.3489: attempt to access beyond end of device [ 216.020296][T17349] loop3: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 216.069489][T17349] syz.3.3489: attempt to access beyond end of device [ 216.069489][T17349] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 216.097122][T17349] syz.3.3489: attempt to access beyond end of device [ 216.097122][T17349] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 216.121488][T17349] syz.3.3489: attempt to access beyond end of device [ 216.121488][T17349] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 216.137112][T17349] syz.3.3489: attempt to access beyond end of device [ 216.137112][T17349] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 216.151625][T17349] syz.3.3489: attempt to access beyond end of device [ 216.151625][T17349] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 216.168502][T17349] syz.3.3489: attempt to access beyond end of device [ 216.168502][T17349] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 216.202582][T17379] loop2: detected capacity change from 0 to 512 [ 216.203039][T17349] syz.3.3489: attempt to access beyond end of device [ 216.203039][T17349] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 216.227821][T17349] syz.3.3489: attempt to access beyond end of device [ 216.227821][T17349] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 216.248774][T17349] syz.3.3489: attempt to access beyond end of device [ 216.248774][T17349] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 216.285797][T17384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.329559][T17388] loop0: detected capacity change from 0 to 512 [ 216.366386][T17388] ext4 filesystem being mounted at /121/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.377772][T17388] EXT4-fs (loop0): shut down requested (1) [ 216.382530][T17386] SELinux: failed to load policy [ 216.384260][T17388] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 216.398448][T17388] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 216.407972][T17388] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 216.492315][T17393] loop2: detected capacity change from 0 to 512 [ 216.501798][T17393] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 216.545718][T17393] EXT4-fs (loop2): 1 truncate cleaned up [ 216.604140][T17339] can0 (unregistered): slcan off ttyS3. [ 216.858710][T17448] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3515'. [ 217.040269][T17461] FAULT_INJECTION: forcing a failure. [ 217.040269][T17461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.053583][T17461] CPU: 0 UID: 0 PID: 17461 Comm: syz.1.3518 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 217.053613][T17461] Tainted: [W]=WARN [ 217.053619][T17461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.053631][T17461] Call Trace: [ 217.053643][T17461] [ 217.053651][T17461] __dump_stack+0x1d/0x30 [ 217.053681][T17461] dump_stack_lvl+0x95/0xd0 [ 217.053735][T17461] dump_stack+0x15/0x1b [ 217.053752][T17461] should_fail_ex+0x263/0x280 [ 217.053806][T17461] should_fail+0xb/0x20 [ 217.053826][T17461] should_fail_usercopy+0x1a/0x20 [ 217.053848][T17461] strncpy_from_user+0x27/0x250 [ 217.053895][T17461] getname_flags+0xad/0x3b0 [ 217.053998][T17461] __x64_sys_link+0x33/0x70 [ 217.054016][T17461] x64_sys_call+0x1325/0x3000 [ 217.054035][T17461] do_syscall_64+0xc0/0x2a0 [ 217.054113][T17461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.054167][T17461] RIP: 0033:0x7f58fa0cacb9 [ 217.054183][T17461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.054279][T17461] RSP: 002b:00007f58f8b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 217.054291][T17461] RAX: ffffffffffffffda RBX: 00007f58fa345fa0 RCX: 00007f58fa0cacb9 [ 217.054299][T17461] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000200000000580 [ 217.054307][T17461] RBP: 00007f58f8b27090 R08: 0000000000000000 R09: 0000000000000000 [ 217.054367][T17461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.054386][T17461] R13: 00007f58fa346038 R14: 00007f58fa345fa0 R15: 00007fff39d03818 [ 217.054442][T17461] [ 217.468279][T17481] program syz.1.3527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.519633][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3529'. [ 217.570937][T17485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3529'. [ 217.580221][T17492] loop3: detected capacity change from 0 to 1024 [ 217.676316][T17499] loop3: detected capacity change from 0 to 256 [ 217.687358][T17501] IPVS: length: 252 != 24 [ 217.751348][T17504] loop4: detected capacity change from 0 to 512 [ 217.834654][T17504] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.865292][T17504] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3535: corrupted xattr block 6: invalid header [ 217.947927][T17504] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 218.011020][T17504] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3535: corrupted xattr block 6: invalid header [ 218.035386][T17504] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 218.073839][T17504] EXT4-fs error (device loop4): ext4_xattr_block_find:1879: inode #12: comm syz.4.3535: corrupted xattr block 6: invalid header [ 218.097433][ T4063] kernel write not supported for file bpf-prog (pid: 4063 comm: kworker/0:9) [ 218.229546][T17535] ================================================================== [ 218.237745][T17535] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 218.245024][T17535] [ 218.247341][T17535] write to 0xffff888104659a00 of 8 bytes by task 17534 on cpu 1: [ 218.255131][T17535] mas_wmb_replace+0x208/0xfa0 [ 218.259884][T17535] mas_wr_store_entry+0x1610/0x2990 [ 218.265084][T17535] mas_store_prealloc+0x72e/0xa60 [ 218.270129][T17535] vma_iter_store_new+0x1c5/0x200 [ 218.275330][T17535] mmap_region+0x1698/0x1a00 [ 218.280036][T17535] do_mmap+0x9b2/0xbd0 [ 218.284111][T17535] vm_mmap_pgoff+0x183/0x2d0 [ 218.288701][T17535] ksys_mmap_pgoff+0xc1/0x310 [ 218.293403][T17535] x64_sys_call+0x16bb/0x3000 [ 218.298175][T17535] do_syscall_64+0xc0/0x2a0 [ 218.302754][T17535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.308719][T17535] [ 218.311028][T17535] read to 0xffff888104659a00 of 8 bytes by task 17535 on cpu 0: [ 218.318639][T17535] mas_state_walk+0x119/0x650 [ 218.323311][T17535] mas_walk+0x60/0x150 [ 218.327379][T17535] lock_vma_under_rcu+0xc9/0x210 [ 218.332309][T17535] do_user_addr_fault+0x232/0x1050 [ 218.337411][T17535] exc_page_fault+0x62/0xa0 [ 218.341912][T17535] asm_exc_page_fault+0x26/0x30 [ 218.346748][T17535] [ 218.349081][T17535] value changed: 0xffff8881039a7301 -> 0xffff888104659a00 [ 218.356168][T17535] [ 218.358477][T17535] Reported by Kernel Concurrency Sanitizer on: [ 218.364708][T17535] CPU: 0 UID: 0 PID: 17535 Comm: syz.0.3545 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 218.376368][T17535] Tainted: [W]=WARN [ 218.380521][T17535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.390831][T17535] ==================================================================