last executing test programs: 54.684883456s ago: executing program 4 (id=179): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) (async, rerun: 64) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 53.764904139s ago: executing program 4 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getgroups(0x3, &(0x7f0000000300)=[0xffffffffffffffff, 0xee00, 0x0]) r4 = socket$inet6(0xa, 0x5, 0x800) setsockopt$inet6_buf(r4, 0x29, 0x2b, &(0x7f0000000540)="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", 0x108) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x98) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) (async) sendmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="a56ad992237eeba5945deeef55981a27671a24aec1919745069a8a7b657a46b2ec4a8b804fed88222a09cfc26e47821a96d6e2ae3f008b61", 0x38}, {&(0x7f0000000380)="5d183208a456d93993a24cdbaaae2e6ddf3a85c556adf9fc2d83549aa135695f75d0c5c84ef7864d27c69b14465a59f6d2248c65a054b7c90362ee39aeb2453ee86760c8d55e1d43db5c128b307dfabcddb856652299d4a3e9585d89b928", 0x5e}, {&(0x7f0000000400)="2f1548341dc88968b8a65d32f72a7346422112df428236c09e5302d643d80330c772e24f7a3a8839830ce115b9d5daa589bb1c197e9c8cb49bda52caaa24211a1bddc0631fa5cdf330cfe49a5b46d7c886af68226a9506f7ae63eae11b911b27b2a6856e96509b", 0x67}, {&(0x7f00000005c0)="bf2f5bb95e88ac5ad1b9375e6b3ae29ee22aa35fbc1098a20dec38af651dfd580dffbec9f783f5350bbe7e0d4924b775e87f19daa733d9a50f068e710b2377177d88a84ad4e90e757cdbf2716de8c0bebe215a", 0x53}, {&(0x7f0000000640)="a317c712e34b52dfa7e31f54560099361d050db24a2bd3f2f19624d2760a78d52eda036864120e5bc6e2ff6384d351e5b3ba239531906c6be2b062c3198f2d673ef4d355dfe9bf5acdf5fc84edc55f2061b04f6161c0234064c948df9df2ba7a27fdb8a05414a4345f1eaf02bf15cba78e9df931a78dc3febbec", 0x7a}], 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000010000af7247a300"/20, @ANYRES32, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1], 0x68, 0x20008080}, 0x20000858) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x50) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) (async) r7 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) close(r7) (rerun: 32) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r9, 0x400, 0x1) r10 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r10, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 53.690261954s ago: executing program 4 (id=191): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0, 0x20}, {r0, 0x1422}, {r0}, {r0, 0x6401}, {0xffffffffffffffff, 0x8080}, {r0, 0x50}, {r0, 0x844c}, {r0, 0x104}], 0x8, &(0x7f0000000180)={r1, r2+10000000}, &(0x7f0000000200)={[0x8]}, 0x8) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') (async, rerun: 64) r4 = socket(0x11, 0x2, 0x0) (rerun: 64) setsockopt(r4, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000005c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80) (async, rerun: 64) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12) getsockname$packet(r12, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@delchain={0x34, 0x2c, 0xf31, 0x1, 0x2000, {0x0, 0x0, 0x0, r13, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x695}, 0x20048040) pwritev2(r5, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 53.554442502s ago: executing program 4 (id=194): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000100)=[{0x3, 0x86ac, 0x1000}], 0x1, 0x0) r2 = semget(0x0, 0x4, 0x24) semop(r2, &(0x7f0000000200)=[{0x0, 0xfff3, 0x2000}], 0x2aaaaaaaaaaaabf7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000003400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000240)={0x0, 0x1, 0x8, 0x1ff, r3}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) 52.441023555s ago: executing program 4 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@allocspi={0x144, 0x16, 0x1, 0xfffffffe, 0x1000000, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x0, 0x0, 0x3, 0x0, 0x80, 0xa0, 0x6c}, {@in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x33}, @in=@loopback, {0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0xffffffffffffffed, 0x200000000003}, {0x52b, 0x0, 0x2, 0xfffbfffffffffffe}, {0x20, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d4, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x3505, 0x2, 0x0, 0x8, 0x8, 0xfffffff9, 0x800}]}, @etimer_thresh={0x8, 0xc, 0x400}]}, 0x144}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000071102b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x004 \x00\x00', @ANYRES32, @ANYBLOB="cd6d22bc9ec077eff92e32d2394f65e6d406f799c08da84fcb2b7aaed1b9c523799a999e5485d1375254dfe0fbfa94a15674f9f18160be62ff2e58b55d24699f852c43ab7f046e1b2a369ee873d5a6326547632e6a6913c639cb39124e9131fdcde97965c162c620185595227a6cadb1a8a46510dfc22a0d32389505a967fde4b5394efce2f20bc749c4468edfba4f146b023f9c87192ade81686b3127f2e317bad1363bf52800c12594140e7af8a901d1", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@allocspi={0x144, 0x16, 0x1, 0xfffffffe, 0x1000000, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x0, 0x0, 0x3, 0x0, 0x80, 0xa0, 0x6c}, {@in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x33}, @in=@loopback, {0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0xffffffffffffffed, 0x200000000003}, {0x52b, 0x0, 0x2, 0xfffbfffffffffffe}, {0x20, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d4, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x3505, 0x2, 0x0, 0x8, 0x8, 0xfffffff9, 0x800}]}, @etimer_thresh={0x8, 0xc, 0x400}]}, 0x144}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000071102b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x004 \x00\x00', @ANYRES32, @ANYBLOB="cd6d22bc9ec077eff92e32d2394f65e6d406f799c08da84fcb2b7aaed1b9c523799a999e5485d1375254dfe0fbfa94a15674f9f18160be62ff2e58b55d24699f852c43ab7f046e1b2a369ee873d5a6326547632e6a6913c639cb39124e9131fdcde97965c162c620185595227a6cadb1a8a46510dfc22a0d32389505a967fde4b5394efce2f20bc749c4468edfba4f146b023f9c87192ade81686b3127f2e317bad1363bf52800c12594140e7af8a901d1", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) 51.467521511s ago: executing program 4 (id=218): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000340)={0x6, &(0x7f0000000240)=[{0x100, 0x4, 0x2, 0x5}, {0xfff8, 0x6, 0xe4, 0x1}, {0x3, 0xc7, 0xb3, 0x10001}, {0xe, 0xe, 0xfc, 0x74e7}, {0x9, 0xfa, 0x6, 0x2}, {0x5, 0xf7, 0x4, 0x8}]}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4051}, 0x40044) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0xcc) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 51.429042894s ago: executing program 32 (id=218): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000340)={0x6, &(0x7f0000000240)=[{0x100, 0x4, 0x2, 0x5}, {0xfff8, 0x6, 0xe4, 0x1}, {0x3, 0xc7, 0xb3, 0x10001}, {0xe, 0xe, 0xfc, 0x74e7}, {0x9, 0xfa, 0x6, 0x2}, {0x5, 0xf7, 0x4, 0x8}]}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4051}, 0x40044) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0xcc) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 45.655673136s ago: executing program 1 (id=277): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000e6860b340000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x2006}) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r1, 0x1, {0x2, 0xfe, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)="191ad3d4fbf523f7e67df72991229b91ed5d669961ed6da9ad042697e050f348f33a7818", 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) 45.407252429s ago: executing program 1 (id=281): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x40000029) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000086321219a4b4aadafd60af", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000001c0)={r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 45.325093795s ago: executing program 1 (id=283): epoll_create1(0x0) listen(0xffffffffffffffff, 0x3) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) r0 = io_uring_setup(0x6212, &(0x7f0000000380)={0x0, 0x68c2, 0x20000, 0x1, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f00001a6000/0x1000)=nil, 0x1000, 0x1000009, 0x1010, r0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x80) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syslog(0x2, &(0x7f0000000140)=""/41, 0x29) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5000}, 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x2b, @empty}}}, 0x30) socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000003}, [@map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xb7, &(0x7f0000000080)=""/183}, 0x94) 45.086622768s ago: executing program 1 (id=293): ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f00000005c0)={&(0x7f0000000480)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f0000000500)=""/116, 0x74}, {&(0x7f0000000380)=""/18, 0x12}], 0x2, &(0x7f0000000580)=""/15, 0xf}, 0x40) sendmsg$inet_sctp(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@sndrcv={0x30, 0x84, 0x1, {0x10, 0xf, 0x0, 0x8, 0x1f819098, 0x101, 0x1ff}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}], 0x48, 0x90}, 0x54) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x4, 0x9}]}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="780100000314000427bd7000ffdbdf250900020073797a310000000008004100736977001400330067656e657665300000000000000000000900020073797a3000000000080041007369770014003300776c616e3000000000000000000000000900020073797a30000000000800410073697700140033006d6163767461703000000000000000000900020073797a32000000000800410073697700140033007465616d3000000000000000000000000900020073797a310000000008004100736977001400330076657468315f746f5f687372000000000900020073797a300000000008004100727865001400330076657468305f746f5f627269646765000900020073797a30000000000800410072786504140033007465616d3000000000000000000000000900020073797a3200000000080041007278650014003300766972745f77696669300000000000000900020073797a310000000008004100727865001400330070696d7265673000000000000000000000d7ba350db6db2b03623f2f019f8920fae6fe64b9a22abc02659eaf3151e56199c2b7c6f364f9abfa78083f63cff9deff97d90d046615fc809250662cbad6eef1b2bc61568481051a89037a6055debbc508058457cb171be193eadd5391974afe4902e0d3eb492e36741d16690d87a89d44c3f39c322e37faa7b5fd104298acb1c4a329a449ad7c772249289a13356281ee3087c20ca59971cf711acb983bd20a5142906bbeea4e424a1aabbd0e9bd3b4a0bb3177fedc"], 0x178}, 0x1, 0x0, 0x0, 0x10020080}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x35dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0x36, 0x9, 0x33fb1dc717048ae0}, [@RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) 45.0504816s ago: executing program 1 (id=294): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006110540000000000a6080000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100b1c60008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000010800084000000001140000001100010000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x1, 'queue1\x00', 0x200000}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000000)=[{0x8, 0x0, 0x8, 0xfd, @time={0xfffffff0, 0x3ff}, {}, {}, @result}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0), 0x0, 0x10120, 0x0) ioctl$TCSETAW(r2, 0x5407, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8004) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mlock(&(0x7f00007df000/0x4000)=nil, 0x4000) 44.786640105s ago: executing program 1 (id=298): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2d38a5de2f039a99c714c98b63707520"], 0x5) 44.786058655s ago: executing program 33 (id=298): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2d38a5de2f039a99c714c98b63707520"], 0x5) 2.013081715s ago: executing program 0 (id=732): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000f0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%-5lx \x00'}, 0x20) r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79ae, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_SYMLINKAT={0x26, 0x12, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1}) (async, rerun: 64) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r1, r0}, 0x4) (async, rerun: 32) r5 = memfd_secret(0x80000) (rerun: 32) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.002776865s ago: executing program 0 (id=735): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xc, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0xb, 0xc, 0x7fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7800, 0x109, 0x800}}) socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000009200"], 0x8, 0x800) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xfffb}, {}, {0xfff2, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x40840) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.638226796s ago: executing program 0 (id=745): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9034, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6a92}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000e80)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00132400000000000000000000000702000000", 0x18}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r6, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @multicast1}, &(0x7f00000001c0)=0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0x2e1a, 0x2, 0x1}, &(0x7f0000000000), &(0x7f0000000180)) 1.264028238s ago: executing program 2 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bda7, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "24b38000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.205045521s ago: executing program 2 (id=754): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0xffff}, {0x0, 0x0, 0x7ff}, {}, 0x0, 0x0, 0xa, 0x1, 0xfc}}, 0xf0}}, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20) (async) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfc}, 0x18, &(0x7f0000000180)={&(0x7f0000000340)="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", 0x130}}, 0x240008ae) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1ff, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8918, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) (async) setitimer(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x42a5, &(0x7f0000000040)={0x0, 0x36d, 0x2, 0xc, 0x6b0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) (async) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) listen(r0, 0x6) shutdown(r0, 0x1) 841.284232ms ago: executing program 5 (id=770): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) poll(&(0x7f0000000080)=[{r3, 0x4000}], 0x1, 0xfffffffa) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000480)={0x47, 0xffbf, 0x4, 0x9}) r6 = epoll_create1(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x11000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x100032, 0x43a1bd75, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000000c0)={0x30000009}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 720.42844ms ago: executing program 5 (id=773): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) keyctl$read(0xb, r0, &(0x7f00000013c0)=""/4096, 0x1000) r1 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7, 0xb}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7f, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x9, @dev, @remote}}}}}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a"], 0x38}, 0x1, 0x7}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a000000000000fe800000000000000000690d7d520d25cab2d69003e61f0000000000aa00004e220000000000000000000000000000000095254982e2e26f3ccd83f966237a0f649a7e795a9bab3c1f2bc1cb20747115cc806bcaadfa4eaa0897b719ac74b3b65e885446a40a9773ced20718123c0e8759fa9f814cda8d0e95d529adf66cd0b8f713b0d06bf364f335a613dc61ab1eb0fea8d8fc25f4105f94dacbf54c770d58c10a335c657ab7dcb967094a97155062adcf3a58a9"], 0x0) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000000c0)=ANY=[]) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) syz_emit_ethernet(0x89, &(0x7f0000000580)={@multicast, @broadcast, @val={@val={0x88a8, 0x2, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x4}}, {@llc={0x4, {@llc={0x6, 0x80, "af69", "8d579b56fc11d07a0acc5cca869a64a1823e1cd6676be4642b86af21b2458567d0817f3a4cfedf8312ffcc8af6c067d30b66b3034d44030471fa72bb8c4f0631fcedcb2e82e36834afb074b9be635a5636ebacaa02cc05788d91847198ccf41f44d877131e0db310ca5800f8a9ff32"}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x400000, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@remote}, @NHA_BLACKHOLE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 692.810401ms ago: executing program 0 (id=775): r0 = socket$phonet(0x23, 0x2, 0x1) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) 591.810846ms ago: executing program 5 (id=782): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) 528.96172ms ago: executing program 5 (id=784): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_user}]}}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000480)={0x47, 0xffbf, 0x4, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7fffffff}, 0x50) r7 = epoll_create1(0xca7289cdd43c543c) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f00000000c0)={0x30000009}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) r8 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2611}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000380)={r9, 0x4}, 0x8) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000180)=@req3={0xfffffff8, 0x200, 0x9, 0x52, 0xfffffffe, 0x2, 0xfffffffd}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 528.67705ms ago: executing program 6 (id=785): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @empty, 0x4}, 0x1c) r7 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r8, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2005, 0x201}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040855}, 0x40) 528.15114ms ago: executing program 0 (id=786): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/&*@#^b)&%$'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6b33c1b378697f65}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000020}, 0x40004) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (rerun: 32) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfa}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x54}, @IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfb}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3f}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:dhcpd_initrc_exec_t:s0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40408c4}, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40001) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000700)={{r7}, "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"}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001740), r0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001780)={'\x00', 0x2, 0x9b, 0x0, 0x3bf7, 0x6, 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x5) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r1, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x2c}}, 0x4010) (async) r11 = fsopen(&(0x7f0000001a00)='gfs2\x00', 0x0) r12 = fsmount(r11, 0x1, 0x2) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x20, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x26008040}, 0x4008191) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001b40)={'wpan0\x00'}) (async, rerun: 32) syz_clone(0x46200, &(0x7f0000001b80)="da3e591ae0135363bcef0dcc22e07c50c19f044ed6145328ddafa045681f085acf18f72dc41c74a8", 0x28, &(0x7f0000001bc0), &(0x7f0000001c00), &(0x7f0000001c40)="d3dc2218d4c08b80bd7d8b7cff51334e767222853f48dd47b7db7c2283a9476288b93fae9626b4f7d5689886acb29c1d6bb99113132c9f106ea49a5558752105a57d75feb79ee08d483cf2") (async, rerun: 64) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) connect$802154_dgram(r13, &(0x7f0000001cc0)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) (async) recvmmsg$unix(r12, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001d00)=""/251, 0xfb}, {&(0x7f0000001e00)=""/194, 0xc2}, {&(0x7f0000001f00)=""/152, 0x98}], 0x3, &(0x7f0000002000)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002040)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f00000020c0)=""/227, 0xe3}, {&(0x7f00000021c0)=""/67, 0x43}], 0x2, &(0x7f0000002280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000002380)=@abs, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002400)=""/239, 0xef}, {&(0x7f0000002500)=""/182, 0xb6}, {&(0x7f00000025c0)=""/4, 0x4}, {&(0x7f0000002600)=""/191, 0xbf}, {&(0x7f00000026c0)=""/108, 0x6c}, {&(0x7f0000002740)=""/2, 0x2}], 0x6}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000002880)=""/104, 0x68}, {&(0x7f0000002900)=""/146, 0x92}, {&(0x7f00000029c0)=""/73, 0x49}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/65, 0x41}, {&(0x7f0000003ac0)=""/152, 0x98}], 0x6, &(0x7f0000003c00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003d00)=""/144, 0x90}], 0x1, &(0x7f0000003e00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x5, 0x2120, &(0x7f0000004080)={0x77359400}) r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000004100), r14) sendmsg$TIPC_CMD_SET_NODE_ADDR(r16, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x24, r17, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004200), 0xffffffffffffffff) (async) preadv2(r15, &(0x7f0000004340)=[{&(0x7f0000004240)=""/249, 0xf9}], 0x1, 0x10, 0x65, 0x0) 484.467193ms ago: executing program 3 (id=787): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000061e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000061ec0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000061e80)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x408, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async, rerun: 32) close_range(r3, 0xffffffffffffffff, 0x0) (rerun: 32) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000062540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000062580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x4e20, 0xffff, @local, 0x4}, r2, 0xfe000000}}, 0x48) connect$can_bcm(r0, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000000400)="$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") (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 461.339424ms ago: executing program 0 (id=788): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2, 0x7}], 0xa) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x24b, 0x0, &(0x7f0000000300)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240080cd4f4e5b5da601596c31f137d2ce6ca74fd87f90ea0be786fe13ac0805807dd6853458eccc84575e9afa9df9cb422ce2ab5ff0700000000000093b110a54f32ad69d05a805194380816a626940f93b57e2f8174e162397971eb0037d33c95e9c48cc620627041732f2eb0e4c6b6ed2449161c8b447829e7110b031b2e42528ed9aaacacae558272260c6b6ab183dd433a628de952e48b76d92cb36789fa2048c18441e99f6d3928bbcba48129e9c76ea7bafde2f322a406679edc8807a1ac048371092e1545d4feae4e5cc5d59840916e65ca94a1543a0ceb72c7342ce4f36d2a0d920d256eb72e6e3b8a3f043a1f9e1dd290b02c5c2dbe9fbfb4e6c3256dbdb497f13091b76ec3a4344c0b61740561819331f69b6dae2ba1c84842ce053acbac32105ce8807c733200447c6a349b0dfa18e5f324d2ac13427962c47d6eb2f31ff4a3716116006ac25285b1e334b75010b960825647b49197dbf5e8b9b683a53c5e452d083fa81e2b7dce1c674654866fe0b64bede1284460f96b1ab7b308d07a045a1bc9abdfe71f10aa4abf60a45c4de4d3a6f66d7d145f5d53f44da883c27f9fc59a765507ef2ced9988b97ac5c85d4ca60e06eee3505df8f40d6fc7995a05b4d1f0e2bf2f55a23e2bc315f1f42a54bd568212ef0929b5c19b7f08270d85dcc58945f4347cfb5f70b536931039e93751beafd16a0f67c77a3453bc281e", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000900)={[{@nodioread_nolock}, {@noblock_validity}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="4f85f5", 0x3}], 0x1}}], 0x1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f00000029c0)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b3243078b089b3930076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef723d0e74000000003cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 389.216318ms ago: executing program 2 (id=789): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) 383.855039ms ago: executing program 3 (id=790): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "e6bff385353800ff"}, 0x10}}, 0x2004c895) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x0, 0x0, 0xffff, 0x0, "de2170420b42866d263a524b8f533db671e3fb462f6e152472578c7e9359d81409d1a02b9c2248e87414c4cfec9913387fd71cf21f357c8ca38ffddab5d147245ed5bdcdfaf4e9530630c66996c4905b"}, 0xd8) write$vga_arbiter(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='trylock io'], 0xf) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fb5bdf250100000008000100030000002400048007000309000000000000030000000000050003000000050005000300020000000800020002"], 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) r9 = socket$inet(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r9, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xff889fc13ecaead1}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000425bd7000fddbdf251b00000010002e800c0004000000000000000000080003003e1291cb4180874fc5c045dfd4d7dd5091c02300ca8b91cdac56655c8be93c674137cccaca222d58eb4caa8b79a7bda84f3dde558d835f052f791c073d3918710dcfe7e0865f937fbc63fcd2e4091760", @ANYRES32=r7, @ANYBLOB="10002e800c0004000201aaaaaaaaaaaa08000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4040001}, 0x14) 371.814099ms ago: executing program 5 (id=791): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) write(r0, &(0x7f0000000080)="08008edf773c", 0x6) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x0, 0x0) 320.428972ms ago: executing program 6 (id=792): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000020bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe00000000850000000b0000009400000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e024334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd617545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d36c309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 268.446275ms ago: executing program 5 (id=793): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xa}, {0xfff3}}}, 0x59}}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x8, &(0x7f00000000c0)={[0x1]}) write$binfmt_elf32(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x7, 0x3, 0x36, 0x2, 0x6, 0x7, 0x27b, 0x38, 0x2cc, 0x1000, 0x3ef1, 0x20, 0x1, 0x5, 0x8}, [{0x1, 0x2000000, 0x5, 0xffffffff, 0x4, 0x100, 0x1, 0xfffffff9}], "2524780f3c40b617cbf7ce98afd44bc55badbe6748270bbba71df41f29c1e7462e862b32dc3cda36d66db22c36e2db8ad1ffd3d76b732ac6cd510d6968c91503795e773d9719e98ae4a108e47b6ed4eb4aa07952867606db8fa96c3904a5e44475304a9b74ee020e9e33a41e8f6dc9ac5837140862e668b3edf6ecaf0da51a534038698d09ffac151b2c947cd52114ba222e2c22fb3b632728b5a0d9d90d076f9c7ff66fa02e2b226f4704ded180c3e3777b50413ca189014f5d21dd1c6b066d5200e2fcaed56d6d42dd1aab4ee6af0370f17c78a56f3ecc6b5b368008a76a5a1848bc84c9ec290f69e655d34a28ddbd680940b6daaf1a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb4f) preadv2(r0, &(0x7f0000000280)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001680)=""/244, 0xf4}], 0x4, 0x2, 0x6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x20, &(0x7f0000001840)=""/4066, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 266.288226ms ago: executing program 3 (id=794): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @private=0xa010102}, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0xe, 0xfa00, {&(0x7f0000000a00), r1, 0x2}}, 0x18) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") lremovexattr(&(0x7f0000000480)='./file1\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00') r3 = fspick(r2, &(0x7f0000000000)='./file1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 265.898146ms ago: executing program 6 (id=795): r0 = socket(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 245.918417ms ago: executing program 6 (id=796): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') utimensat(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000080)=0x80000001) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') (async) utimensat(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000080)=0x80000001) (async) 230.113228ms ago: executing program 2 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000000340000"], 0x40}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x25dfdc03, {0x2, 0x20, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_TABLE={0x8, 0xf, 0x3}]}, 0x2c}}, 0x0) 195.919249ms ago: executing program 2 (id=798): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000004020000f8ffffffb7030000080000008105000000000000850000000300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000001e40)=""/4101, 0x0, 0xc}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) 149.570812ms ago: executing program 2 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'bond_slave_1\x00', {0x2, 0x4e23, @remote}}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000200)=0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @sack_perm, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) set_mempolicy_home_node(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000001040)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='t', 0x1}], 0x1}}], 0x1, 0x40091) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x6, 0x4, 0xfffffff8}, &(0x7f0000000300)=0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x211000, &(0x7f0000000140)={[{@delalloc}, {@journal_checksum}, {@noacl}, {@usrjquota}, {@auto_da_alloc}]}, 0x0, 0x57a, &(0x7f00000012c0)="$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") r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, 0x0, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xfffffefd, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x27, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1e, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x6, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0x3, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4f, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0x100, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x8000, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x5, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e4, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x9, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0x80000000, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x9, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x2, 0x1, 0x9, 0x2, 0x7, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x0, 0xf, 0xa, 0x100, 0x4, 0x59b, 0x7, 0x9, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x3d9, 0x0, 0xc, 0x9, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x6, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x4, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffb, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x5, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000005, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x104, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0xc, 0x3, 0xffffffff, 0x0, 0x7e, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0xb, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x3, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x6, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0xb, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x20000001, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000004, 0x6, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c4, 0x2, 0x389f, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x80000004, 0x1, 0x10000002, 0xfb4, 0xbfa, 0x48, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0xffffffff, 0x6ae574d2, 0x5, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x5, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0x17, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0xfffffffa, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0xfffffffb, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x40, 0x6, 0xffff, 0xfffffffa, 0x3, 0xa850, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x401, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x3, 0x2, 0x80000002, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0x7, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x200, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x10400, 0x20001, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) unshare(0x22020400) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000003780)={0xbab, {0x8, 0x0, 0x1, 0x8}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) recvmmsg(r5, &(0x7f0000005f00)=[{{&(0x7f0000001f40)=@ax25={{0x3, @default}, [@remote, @default, @rose, @default, @netrom, @rose, @netrom, @default]}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001fc0)=""/184, 0xb8}, {&(0x7f0000002080)=""/254, 0xfe}, {&(0x7f0000002180)=""/170, 0xaa}, {&(0x7f0000002240)=""/74, 0x4a}], 0x4, &(0x7f0000002300)=""/32, 0x20}}, {{&(0x7f0000002340)=@isdn, 0x80, &(0x7f0000002640)=[{&(0x7f00000023c0)=""/142, 0x8e}, {&(0x7f0000002480)=""/115, 0x73}, {&(0x7f0000002500)=""/128, 0x80}, {&(0x7f0000002580)=""/174, 0xae}], 0x4, &(0x7f0000002680)=""/146, 0x92}, 0xfffffffe}, {{&(0x7f0000002740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000027c0)=""/92, 0x5c}, {&(0x7f0000002840)=""/90, 0x5a}, {&(0x7f00000028c0)=""/246, 0xf6}, {&(0x7f00000029c0)=""/94, 0x5e}], 0x4, &(0x7f0000002a80)=""/210, 0xd2}}, {{&(0x7f0000002b80)=@nfc_llcp, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c00)=""/118, 0x76}, {&(0x7f0000002c80)=""/173, 0xad}], 0x2, &(0x7f0000002d80)=""/117, 0x75}, 0xfffffcd9}, {{&(0x7f0000002e00)=@isdn, 0x80, &(0x7f0000003280)=[{&(0x7f0000002e80)=""/211, 0xd3}, {&(0x7f0000002f80)=""/71, 0x47}, {&(0x7f0000003000)=""/43, 0x2b}, {&(0x7f0000003040)=""/164, 0xa4}, {&(0x7f0000003100)=""/181, 0xb5}, {&(0x7f00000031c0)=""/189, 0xbd}], 0x6, &(0x7f0000003300)=""/137, 0x89}, 0xa}, {{&(0x7f00000033c0)=@alg, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003440)=""/156, 0x9c}, {&(0x7f0000003500)=""/179, 0xb3}], 0x2}, 0x7fff}, {{&(0x7f0000003600)=@hci, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003680)=""/118, 0x76}, {&(0x7f0000003700)=""/74, 0x4a}, {&(0x7f0000003800)=""/238, 0xee}, {&(0x7f0000003900)=""/184, 0xb8}, {&(0x7f00000039c0)=""/183, 0xb7}, {&(0x7f0000003a80)=""/68, 0x44}], 0x6, &(0x7f0000003b80)=""/132, 0x84}, 0xe}, {{&(0x7f0000003c40)=@can, 0x80, &(0x7f0000005e40)=[{&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/66, 0x42}, {&(0x7f0000003780)}, {&(0x7f0000004d40)=""/241, 0xf1}, {&(0x7f0000004e40)=""/4096, 0x1000}], 0x5, &(0x7f0000005ec0)=""/10, 0xa}, 0x8001}], 0x8, 0x40000140, &(0x7f0000006100)={0x0, 0x989680}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@enum64={0x4, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x7, 0x1, 0x7fffffff}, {0x1000000, 0x10002, 0x5}]}]}, {0x0, [0x61, 0x5f, 0x5f, 0x2e, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x45, 0xff9, 0x9}, 0x28) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000400), 0x4) 144.716082ms ago: executing program 3 (id=800): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[{0x50, 0x37, 0xfc, 0x8000}, {0x20, 0x1, 0xf7, 0x7ffc}, {0x6, 0x6, 0x1, 0x1057c}]}, 0x10) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x1057c) 49.152298ms ago: executing program 6 (id=801): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r6}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000480)={0x47, 0xffbf, 0x4, 0x9}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r7, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f00000000c0)={0x30000009}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 48.393508ms ago: executing program 3 (id=802): r0 = syz_clone(0x1100, 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0) ptrace(0x11, r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c045}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x3, 0x7, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x2c, 0xd6, 0x0, 0x4, [0x0, 0x80, 0x8, 0x5, 0x9, 0x361, 0x8000, 0x6, 0x0, 0xfffff5ab]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x401}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x265}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1000}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000104fa3a1f7ed6116a2d3b05e95a13fe60eb2107a7a4e2ffc15427641a538a6a713566e9eab5930db7f89a76a6b8b1"], 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000280)={r7, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) ptrace$poke(0x1, r0, &(0x7f0000000080), 0x4000000000004) 45.531858ms ago: executing program 6 (id=803): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) (async) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r5 = accept4$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f00000007c0)=""/249, &(0x7f00000008c0)=0xf9) (async) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f00000007c0)=""/249, &(0x7f00000008c0)=0xf9) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000006000000000000000300000018510000010000000000000000e40000037400000500000095000000000045a77517f25d00dfa91db2419d47a80fba53f43a2088644eeb0c75d9646b9b1ad6985bf60a334c40ee4b04ae77f78f5ef448c9a0a256b7ea4a8a2bedd52100f2461fd55bbf1fc647fca7ac3994ecf9ce7df4fc5ffd7dfd146f083e39bb82b4d74eefae9b5147f70bf143c69ef8fd4f1c532acad1e2a68a913a4acc7d04f7302ca151a20cef5d619899a49136783b39f9ad91f072b9eb530871151b658679ada1bb153a5032d120d7325976a8d2b2705eb72fca05a0be99d1382011ca671e27"], &(0x7f00000001c0)='GPL\x00', 0xe89, 0x0, 0x0, 0x40f00, 0x41, '\x00', r6, @fallback=0x23, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0x0, 0xc, 0xe}, 0x10, r7, r0, 0x7, &(0x7f0000000480)=[r0], &(0x7f0000000640)=[{0x0, 0x5, 0x3, 0x7}, {0x5, 0x5, 0xf, 0x6}, {0x2, 0x5, 0x6}, {0x4, 0x4, 0x5, 0x8}, {0x4, 0x1, 0x8, 0x1}, {0x1, 0x3, 0xf, 0x2}, {0x1, 0x2, 0x6}], 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000006000000000000000300000018510000010000000000000000e40000037400000500000095000000000045a77517f25d00dfa91db2419d47a80fba53f43a2088644eeb0c75d9646b9b1ad6985bf60a334c40ee4b04ae77f78f5ef448c9a0a256b7ea4a8a2bedd52100f2461fd55bbf1fc647fca7ac3994ecf9ce7df4fc5ffd7dfd146f083e39bb82b4d74eefae9b5147f70bf143c69ef8fd4f1c532acad1e2a68a913a4acc7d04f7302ca151a20cef5d619899a49136783b39f9ad91f072b9eb530871151b658679ada1bb153a5032d120d7325976a8d2b2705eb72fca05a0be99d1382011ca671e27"], &(0x7f00000001c0)='GPL\x00', 0xe89, 0x0, 0x0, 0x40f00, 0x41, '\x00', r6, @fallback=0x23, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0x0, 0xc, 0xe}, 0x10, r7, r0, 0x7, &(0x7f0000000480)=[r0], &(0x7f0000000640)=[{0x0, 0x5, 0x3, 0x7}, {0x5, 0x5, 0xf, 0x6}, {0x2, 0x5, 0x6}, {0x4, 0x4, 0x5, 0x8}, {0x4, 0x1, 0x8, 0x1}, {0x1, 0x3, 0xf, 0x2}, {0x1, 0x2, 0x6}], 0x10, 0x5}, 0x94) r8 = msgget(0x1, 0x68) msgsnd(r8, &(0x7f0000000140)={0x2, "faac395c4c72bee687fbfc1351eb942cb72c8fe0c926c45374d9a618f7596d932cd679aa6055ba7422cdc345a7d026edb49102c19c6638dec4bbbe184360d073c4665cf3d0d273"}, 0x4f, 0x800) wait4(r1, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=804): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000300)={'bridge_slave_0\x00', {0x2, 0x4e26, @multicast1}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x40, 0x0, 0x0, 0xffeffffc}, {0x6, 0x0, 0x0, 0x8}]}) (async) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x40, 0x0, 0x0, 0xffeffffc}, {0x6, 0x0, 0x0, 0x8}]}) write$ppp(r2, &(0x7f0000000300)="5af9", 0x2) (async) write$ppp(r2, &(0x7f0000000300)="5af9", 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x610bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f0003002e2e2564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f0003002e2e2564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) kernel console output (not intermixed with test programs): pid=3712 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.205619][ T3713] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.243151][ T29] audit: type=1400 audit(1770008614.308:297): avc: denied { read } for pid=3725 comm="syz.2.72" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.266478][ T29] audit: type=1400 audit(1770008614.308:298): avc: denied { open } for pid=3725 comm="syz.2.72" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.313472][ T29] audit: type=1400 audit(1770008614.308:299): avc: denied { ioctl } for pid=3725 comm="syz.2.72" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.398911][ T3732] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 37.617868][ T3755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.82'. [ 37.655599][ T3762] loop2: detected capacity change from 0 to 128 [ 37.736581][ T3768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 37.745498][ T3768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 37.757575][ T3774] dummy0: entered promiscuous mode [ 37.762811][ T3774] macsec1: entered allmulticast mode [ 37.773071][ T3774] dummy0: entered allmulticast mode [ 37.805968][ T3781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 37.813264][ T3781] IPv6: NLM_F_CREATE should be set when creating new route [ 37.820538][ T3781] IPv6: NLM_F_CREATE should be set when creating new route [ 37.868093][ T3788] loop4: detected capacity change from 0 to 128 [ 37.878755][ T3789] geneve2: entered promiscuous mode [ 37.898974][ T52] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 58031 - 0 [ 37.919890][ T3793] loop3: detected capacity change from 0 to 512 [ 37.926453][ T3468] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 58031 - 0 [ 37.946938][ T3468] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 58031 - 0 [ 37.967538][ T3793] ext4: Unknown parameter 'noacl' [ 38.057736][ T3809] x_tables: duplicate underflow at hook 1 [ 38.105731][ T3798] loop0: detected capacity change from 0 to 8192 [ 38.124451][ T3798] vfat: Unknown parameter './file0' [ 38.201162][ T3824] __nla_validate_parse: 1 callbacks suppressed [ 38.201181][ T3824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 38.253329][ T3826] loop0: detected capacity change from 0 to 2048 [ 38.263128][ T3828] netlink: 'syz.4.106': attribute type 4 has an invalid length. [ 38.271007][ T3828] netlink: 152 bytes leftover after parsing attributes in process `syz.4.106'. [ 38.274453][ T3826] EXT4-fs: Ignoring removed oldalloc option [ 38.312793][ T3828] .`: renamed from bond0 (while UP) [ 38.322575][ T3826] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 38.360215][ T3826] System zones: 0-7 [ 38.410563][ T3826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.457390][ T3826] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.105: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 38.457917][ T3826] EXT4-fs (loop0): Remounting filesystem read-only [ 38.464382][ T3839] loop2: detected capacity change from 0 to 512 [ 38.467203][ T3839] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.471320][ T3839] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 38.471355][ T3839] System zones: 1-12 [ 38.471836][ T3839] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.472000][ T3839] EXT4-fs (loop2): 1 truncate cleaned up [ 38.472548][ T3839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.524543][ T3832] tipc: Started in network mode [ 38.524799][ T3832] tipc: Node identity 4, cluster identity 4711 [ 38.524815][ T3832] tipc: Node number set to 4 [ 38.577555][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.809282][ T3846] loop1: detected capacity change from 0 to 8192 [ 38.863419][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 38.874520][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.973413][ T3863] loop0: detected capacity change from 0 to 512 [ 38.990694][ T3866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3866 comm=syz.1.117 [ 39.021249][ T3863] EXT4-fs: dax option not supported [ 39.237496][ T3876] EXT4-fs: Ignoring removed oldalloc option [ 39.306157][ T3882] ext4: Unknown parameter 'noacl' [ 39.319409][ T3883] EXT4-fs: inline encryption not supported [ 39.330325][ T3884] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 39.496500][ T3892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.506589][ T3892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.516309][ T3892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.525581][ T3876] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 39.534046][ T3876] System zones: 0-7 [ 39.538842][ T3892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.547341][ T3876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.560577][ T3876] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.119: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 39.577460][ T3876] EXT4-fs (loop2): Remounting filesystem read-only [ 39.599873][ T3883] EXT4-fs (loop4): 1 orphan inode deleted [ 39.606271][ T3883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.619049][ T52] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 39.637080][ T3883] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.651208][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.682534][ T3899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 39.731623][ T3899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=3899 comm=syz.2.126 [ 39.802019][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.873048][ T3921] netlink: 76 bytes leftover after parsing attributes in process `syz.3.132'. [ 39.884965][ T3921] netlink: 52 bytes leftover after parsing attributes in process `syz.3.132'. [ 39.899649][ T3921] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.907000][ T3921] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.918298][ T3921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3921 comm=syz.3.132 [ 39.930736][ T3921] netlink: 76 bytes leftover after parsing attributes in process `syz.3.132'. [ 39.939804][ T3921] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.946979][ T3921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.949065][ T3923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 39.954335][ T3921] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.970071][ T3921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.979454][ T3921] netlink: 52 bytes leftover after parsing attributes in process `syz.3.132'. [ 39.993626][ T3921] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.000793][ T3921] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.038168][ T3927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 40.052383][ T3929] rtc_cmos 00:00: Alarms can be up to one day in the future [ 40.077853][ T3933] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.099935][ T3936] lo speed is unknown, defaulting to 1000 [ 40.105717][ T3936] lo speed is unknown, defaulting to 1000 [ 40.112316][ T3939] EXT4-fs: inline encryption not supported [ 40.123865][ T3936] lo speed is unknown, defaulting to 1000 [ 40.133235][ T3939] EXT4-fs (loop2): unable to read superblock [ 40.144487][ T3936] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.158451][ T3936] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 40.184720][ T3946] tipc: Started in network mode [ 40.189759][ T3946] tipc: Node identity , cluster identity 4711 [ 40.195858][ T3946] tipc: Failed to obtain node identity [ 40.201475][ T3946] tipc: Enabling of bearer rejected, failed to enable media [ 40.210114][ T3936] lo speed is unknown, defaulting to 1000 [ 40.216427][ T3936] lo speed is unknown, defaulting to 1000 [ 40.223027][ T3936] lo speed is unknown, defaulting to 1000 [ 40.229253][ T3936] lo speed is unknown, defaulting to 1000 [ 40.244326][ T3936] lo speed is unknown, defaulting to 1000 [ 40.303609][ T3960] bridge1: entered promiscuous mode [ 40.341817][ T3965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.368595][ T3965] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.146: bg 0: block 385: padding at end of block bitmap is not set [ 40.414055][ T803] Process accounting resumed [ 40.433922][ T3963] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 40.433986][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.505090][ T3980] SELinux: failed to load policy [ 40.571844][ T3983] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.579086][ T3983] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.589363][ T3983] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 40.597536][ T3983] System zones: 0-1, 3-36 [ 40.603384][ T3983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.619896][ T3963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.627471][ T3976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.636015][ T3976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.645948][ T3982] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.789446][ T3994] netlink: 'syz.1.152': attribute type 1 has an invalid length. [ 40.795814][ T3969] vlan2: entered promiscuous mode [ 40.802538][ T3969] bond0: entered promiscuous mode [ 40.807895][ T3969] vlan2: entered allmulticast mode [ 40.813049][ T3969] bond0: entered allmulticast mode [ 40.831267][ T3986] bond0: (slave bridge1): making interface the new active one [ 40.838843][ T3986] bridge1: entered promiscuous mode [ 40.844236][ T3986] bridge1: entered allmulticast mode [ 40.850275][ T3986] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 40.869508][ T3994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.888158][ T3998] macvlan2: entered promiscuous mode [ 40.893501][ T3998] macvlan2: entered allmulticast mode [ 40.903327][ T3998] bond1: entered promiscuous mode [ 40.908829][ T3998] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 40.935098][ T2965] rtc_cmos 00:00: Alarms can be up to one day in the future [ 40.942854][ T2965] rtc_cmos 00:00: Alarms can be up to one day in the future [ 40.945367][ T3998] team0: Port device macvlan2 added [ 40.950551][ T2965] rtc_cmos 00:00: Alarms can be up to one day in the future [ 40.963037][ T2965] rtc_cmos 00:00: Alarms can be up to one day in the future [ 40.970417][ T2965] rtc rtc0: __rtc_set_alarm: err=-22 [ 40.982365][ T4001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.985420][ T3994] bond1: (slave ip6gretap1): making interface the new active one [ 40.997410][ T4001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59951 sclass=netlink_route_socket pid=4001 comm=syz.4.153 [ 41.002684][ T3994] ip6gretap1: entered promiscuous mode [ 41.023824][ T3994] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 41.094247][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.137390][ T4017] ext4: Unknown parameter 'obj_type' [ 41.145625][ T4015] msdos: Unknown parameter 'dos1xflŠi‰æ­ˆ~Ú ›4oppy' [ 41.278826][ T4028] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 41.324589][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.403690][ T10] Process accounting resumed [ 41.441192][ T4038] EXT4-fs: test_dummy_encryption option not supported [ 41.605280][ T4061] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 41.613051][ T4061] netlink: 'syz.0.173': attribute type 2 has an invalid length. [ 41.622163][ T4055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.653250][ T4066] EXT4-fs: inline encryption not supported [ 41.668278][ T4066] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 41.689827][ T4066] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.174: invalid indirect mapped block 2683928664 (level 1) [ 41.704357][ T4066] EXT4-fs (loop2): 1 truncate cleaned up [ 41.721712][ T4075] bond2: option resend_igmp: invalid value (18345) [ 41.728324][ T4075] bond2: option resend_igmp: allowed values 0 - 255 [ 41.741152][ T4075] bond2 (unregistering): Released all slaves [ 41.759365][ T4066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.847736][ T4066] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.174: corrupted in-inode xattr: e_value out of bounds [ 41.859111][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 41.859131][ T29] audit: type=1400 audit(1770008618.888:361): avc: denied { name_bind } for pid=4077 comm="syz.0.177" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.889279][ T29] audit: type=1400 audit(1770008618.908:362): avc: denied { lock } for pid=4065 comm="syz.2.174" path="socket:[6703]" dev="sockfs" ino=6703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.912990][ T29] audit: type=1400 audit(1770008618.918:363): avc: denied { add_name } for pid=4065 comm="syz.2.174" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.950703][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.961656][ T4088] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 41.998584][ T4088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.005474][ T29] audit: type=1326 audit(1770008618.938:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ae0aeb9 code=0x7ffc0000 [ 42.028913][ T29] audit: type=1326 audit(1770008618.938:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ae0aeb9 code=0x7ffc0000 [ 42.052407][ T29] audit: type=1326 audit(1770008618.938:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ae0aeb9 code=0x7ffc0000 [ 42.075811][ T29] audit: type=1326 audit(1770008618.938:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7ff46ae0aeb9 code=0x7ffc0000 [ 42.100043][ T29] audit: type=1326 audit(1770008618.938:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ae0aeb9 code=0x7ffc0000 [ 42.100614][ T4088] bond1: (slave gretap1): making interface the new active one [ 42.123882][ T29] audit: type=1326 audit(1770008618.938:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ae0aeb9 code=0x7ffc0000 [ 42.131796][ T4088] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 42.154149][ T29] audit: type=1326 audit(1770008618.938:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46ae0aeb9 code=0x7ffc0000 [ 42.171922][ T4088] syz.0.181 (4088) used greatest stack depth: 9792 bytes left [ 42.349455][ T4099] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.369214][ T4099] netlink: 'syz.3.183': attribute type 3 has an invalid length. [ 42.399799][ T2965] hid-generic 7FFF:0007:0004.0001: ignoring exceeding usage max [ 42.469964][ T2965] hid-generic 7FFF:0007:0004.0001: hidraw0: HID v0.0e Device [syz0] on syz0 [ 42.489655][ T4108] set_capacity_and_notify: 16 callbacks suppressed [ 42.489675][ T4108] loop3: detected capacity change from 0 to 512 [ 42.536432][ T4105] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 42.555174][ T4108] EXT4-fs: Ignoring removed oldalloc option [ 42.576511][ T4055] syz.1.169 (4055) used greatest stack depth: 7040 bytes left [ 42.589121][ T4109] fido_id[4109]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.609623][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.625073][ T4108] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.183: Parent and EA inode have the same ino 15 [ 42.711385][ T4108] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.183: Parent and EA inode have the same ino 15 [ 42.727259][ T4108] EXT4-fs (loop3): 1 orphan inode deleted [ 42.742731][ T4108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.768981][ T4120] loop0: detected capacity change from 0 to 512 [ 42.807273][ T4120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.820786][ T4120] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.855693][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.862693][ T4131] loop4: detected capacity change from 0 to 512 [ 42.892433][ T4131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.908820][ T4131] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.937706][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.954122][ T4131] dummy0: entered allmulticast mode [ 42.973938][ T4142] dummy0: left allmulticast mode [ 42.994070][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.060037][ T4150] loop4: detected capacity change from 0 to 512 [ 43.082858][ T4150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.407174][ T10] IPVS: starting estimator thread 0... [ 43.497243][ T4166] IPVS: using max 2208 ests per chain, 110400 per kthread [ 43.528661][ T10] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 43.536175][ T10] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 43.543713][ T10] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 43.551217][ T10] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 43.558659][ T10] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 43.566111][ T10] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 43.573595][ T10] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 43.581083][ T10] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 43.588720][ T10] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 43.596223][ T10] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 43.606967][ T10] hid-generic 0103:0004:0000.0002: hidraw0: HID v0.02 Device [syz0] on syz1 [ 43.783273][ T4199] loop0: detected capacity change from 0 to 1024 [ 43.911574][ T4199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.960034][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.007234][ T4154] loop3: detected capacity change from 0 to 2048 [ 44.065815][ T3313] EXT4-fs error (device loop4): ext4_readdir:224: inode #12: comm syz-executor: path /43/file0/file0: directory fails checksum at offset 0 [ 44.118027][ T3313] EXT4-fs error (device loop4): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 44.151297][ T3313] EXT4-fs error (device loop4): ext4_readdir:224: inode #12: comm syz-executor: path /43/file0/file0: directory fails checksum at offset 0 [ 44.186191][ T3313] EXT4-fs error (device loop4): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 44.219195][ T3313] EXT4-fs error (device loop4): ext4_readdir:224: inode #12: comm syz-executor: path /43/file0/file0: directory fails checksum at offset 0 [ 44.250727][ T3313] EXT4-fs error (device loop4): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 44.307382][ T3313] EXT4-fs error (device loop4): ext4_readdir:224: inode #12: comm syz-executor: path /43/file0/file0: directory fails checksum at offset 0 [ 44.338994][ T3313] EXT4-fs error (device loop4): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 44.374995][ T3313] EXT4-fs error (device loop4): ext4_readdir:224: inode #12: comm syz-executor: path /43/file0/file0: directory fails checksum at offset 0 [ 44.387163][ T4229] loop0: detected capacity change from 0 to 512 [ 44.397155][ T3313] EXT4-fs error (device loop4): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 44.417191][ T4229] ext3: Unknown parameter 'euid' [ 44.607319][ T4235] netlink: 'syz.3.211': attribute type 22 has an invalid length. [ 44.615110][ T4235] __nla_validate_parse: 14 callbacks suppressed [ 44.615128][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 44.664484][ T4244] loop0: detected capacity change from 0 to 1024 [ 44.740295][ T4244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.010402][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.020100][ T4161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.032101][ T4184] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.042601][ T4184] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58031 - 0 [ 45.105610][ T4255] loop0: detected capacity change from 0 to 128 [ 45.114332][ T4184] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.124685][ T4184] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58031 - 0 [ 45.162592][ T4255] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.250764][ T4184] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.261248][ T4184] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58031 - 0 [ 45.273683][ T4255] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.363758][ T4202] syz.1.202 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 45.377933][ T4202] CPU: 0 UID: 0 PID: 4202 Comm: syz.1.202 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.377966][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.377981][ T4202] Call Trace: [ 45.377989][ T4202] [ 45.377999][ T4202] __dump_stack+0x1d/0x30 [ 45.378030][ T4202] dump_stack_lvl+0x95/0xd0 [ 45.378105][ T4202] dump_stack+0x15/0x1b [ 45.378208][ T4202] dump_header+0x80/0x240 [ 45.378230][ T4202] oom_kill_process+0x295/0x350 [ 45.378262][ T4202] out_of_memory+0x97d/0xb80 [ 45.378294][ T4202] try_charge_memcg+0x62e/0xa10 [ 45.378404][ T4202] obj_cgroup_charge_pages+0x23/0xc0 [ 45.378443][ T4202] __memcg_kmem_charge_page+0x9e/0x170 [ 45.378479][ T4202] __alloc_frozen_pages_noprof+0x18a/0x350 [ 45.378596][ T4202] alloc_pages_mpol+0xb3/0x260 [ 45.378683][ T4202] alloc_pages_noprof+0x8f/0x130 [ 45.378758][ T4202] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 45.378798][ T4202] __kvmalloc_node_noprof+0x471/0x680 [ 45.378825][ T4202] ? ip_set_alloc+0x24/0x30 [ 45.378897][ T4202] ? ip_set_alloc+0x24/0x30 [ 45.378932][ T4202] ip_set_alloc+0x24/0x30 [ 45.379074][ T4202] hash_netiface_create+0x282/0x740 [ 45.379104][ T4202] ? __pfx_hash_netiface_create+0x10/0x10 [ 45.379149][ T4202] ip_set_create+0x3cf/0x970 [ 45.379239][ T4202] ? __nla_parse+0x40/0x60 [ 45.379263][ T4202] nfnetlink_rcv_msg+0x509/0x5d0 [ 45.379335][ T4202] netlink_rcv_skb+0x123/0x220 [ 45.379377][ T4202] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 45.379419][ T4202] nfnetlink_rcv+0x167/0x1720 [ 45.379506][ T4202] ? __kfree_skb+0x109/0x150 [ 45.379539][ T4202] ? nlmon_xmit+0x4f/0x60 [ 45.379609][ T4202] ? consume_skb+0x49/0x140 [ 45.379713][ T4202] ? nlmon_xmit+0x4f/0x60 [ 45.379751][ T4202] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 45.379795][ T4202] ? __dev_queue_xmit+0x139a/0x1f20 [ 45.379845][ T4202] ? __dev_queue_xmit+0x148/0x1f20 [ 45.379942][ T4202] ? ref_tracker_free+0x37d/0x3e0 [ 45.380037][ T4202] ? __netlink_deliver_tap+0x4dc/0x500 [ 45.380089][ T4202] netlink_unicast+0x5c0/0x690 [ 45.380125][ T4202] netlink_sendmsg+0x5c8/0x6f0 [ 45.380152][ T4202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.380176][ T4202] ____sys_sendmsg+0x5af/0x600 [ 45.380280][ T4202] ___sys_sendmsg+0x195/0x1e0 [ 45.380309][ T4202] __x64_sys_sendmsg+0xd4/0x160 [ 45.380331][ T4202] x64_sys_call+0x17ba/0x3000 [ 45.380366][ T4202] do_syscall_64+0xc0/0x2a0 [ 45.380417][ T4202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.380441][ T4202] RIP: 0033:0x7f73c6ebaeb9 [ 45.380490][ T4202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.380508][ T4202] RSP: 002b:00007f73c5917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.380543][ T4202] RAX: ffffffffffffffda RBX: 00007f73c7135fa0 RCX: 00007f73c6ebaeb9 [ 45.380557][ T4202] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 45.380569][ T4202] RBP: 00007f73c6f28c1f R08: 0000000000000000 R09: 0000000000000000 [ 45.380582][ T4202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.380594][ T4202] R13: 00007f73c7136038 R14: 00007f73c7135fa0 R15: 00007ffe1d534878 [ 45.380624][ T4202] [ 45.380633][ T4202] memory: usage 307200kB, limit 307200kB, failcnt 2418 [ 45.701213][ T4202] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 45.709148][ T4202] kmem: usage 306676kB, limit 9007199254740988kB, failcnt 0 [ 45.716526][ T4202] Memory cgroup stats for /syz1: [ 45.717060][ T4202] cache 524288 [ 45.725511][ T4202] rss 0 [ 45.728361][ T4202] shmem 524288 [ 45.731755][ T4202] mapped_file 0 [ 45.735243][ T4202] dirty 0 [ 45.738264][ T4202] writeback 0 [ 45.741564][ T4202] workingset_refault_anon 138 [ 45.746053][ T4266] Process accounting resumed [ 45.746241][ T4202] workingset_refault_file 643 [ 45.746253][ T4202] swap 299008 [ 45.758891][ T4202] swapcached 8192 [ 45.762535][ T4202] pgpgin 16982 [ 45.765945][ T4202] pgpgout 16851 [ 45.769433][ T4202] pgfault 18587 [ 45.772986][ T4202] pgmajfault 122 [ 45.776537][ T4202] inactive_anon 32768 [ 45.780607][ T4202] active_anon 237568 [ 45.784507][ T4202] inactive_file 0 [ 45.788182][ T4202] active_file 4096 [ 45.791974][ T4202] unevictable 0 [ 45.795447][ T4202] hierarchical_memory_limit 314572800 [ 45.800853][ T4202] hierarchical_memsw_limit 9223372036854771712 [ 45.808829][ T4202] total_cache 524288 [ 45.812749][ T4202] total_rss 0 [ 45.816163][ T4202] total_shmem 524288 [ 45.820782][ T4202] total_mapped_file 0 [ 45.824846][ T4202] total_dirty 0 [ 45.828339][ T4202] total_writeback 0 [ 45.832149][ T4202] total_workingset_refault_anon 138 [ 45.837461][ T4202] total_workingset_refault_file 643 [ 45.842666][ T4202] total_swap 299008 [ 45.846490][ T4202] total_swapcached 8192 [ 45.850722][ T4202] total_pgpgin 16982 [ 45.854621][ T4202] total_pgpgout 16851 [ 45.858628][ T4202] total_pgfault 18587 [ 45.862618][ T4202] total_pgmajfault 122 [ 45.866767][ T4202] total_inactive_anon 32768 [ 45.871298][ T4202] total_active_anon 237568 [ 45.875726][ T4202] total_inactive_file 0 [ 45.879913][ T4202] total_active_file 4096 [ 45.884245][ T4202] total_unevictable 0 [ 45.888359][ T4202] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.202,pid=4200,uid=0 [ 45.902927][ T4202] Memory cgroup out of memory: Killed process 4200 (syz.1.202) total-vm:94264kB, anon-rss:1332kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 45.967767][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.009620][ T4279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.222'. [ 46.012250][ T4275] bridge0: port 3(macsec2) entered blocking state [ 46.025189][ T4275] bridge0: port 3(macsec2) entered disabled state [ 46.032514][ T4280] loop0: detected capacity change from 0 to 512 [ 46.046258][ T4275] macsec2: entered allmulticast mode [ 46.051722][ T4275] bridge0: entered allmulticast mode [ 46.057862][ T4280] EXT4-fs error (device loop0): ext4_quota_enable:7177: inode #4: comm syz.0.222: iget: bad i_size value: -72057594037921792 [ 46.072056][ T4275] macsec2: left allmulticast mode [ 46.077161][ T4275] bridge0: left allmulticast mode [ 46.082556][ T4280] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.222: Bad quota inode: 4, type: 1 [ 46.093979][ T4280] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.132038][ T4280] EXT4-fs (loop0): mount failed [ 46.248388][ T4184] bridge_slave_1: left allmulticast mode [ 46.254080][ T4184] bridge_slave_1: left promiscuous mode [ 46.259866][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.290833][ T4184] bridge_slave_0: left allmulticast mode [ 46.296596][ T4184] bridge_slave_0: left promiscuous mode [ 46.302364][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.426987][ T36] SELinux: failure in sel_netif_sid_slow(), invalid network interface (73) [ 46.507259][ T4184] bond0 (unregistering): (slave bridge1): Releasing active interface [ 46.515471][ T4184] bridge1 (unregistering): left promiscuous mode [ 46.521977][ T4184] bridge1 (unregistering): left allmulticast mode [ 46.588650][ T4184] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.598594][ T4184] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.608417][ T4184] .` (unregistering): Released all slaves [ 46.619681][ T4184] bond0 (unregistering): Released all slaves [ 46.644609][ T4216] Can't find ip_set type bitmap:ip [ 46.660049][ T4217] Can't find ip_set type bitmap:ip [ 46.693613][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 46.707670][ T4184] hsr_slave_0: left promiscuous mode [ 46.714026][ T4184] hsr_slave_1: left promiscuous mode [ 46.727171][ T4184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.734574][ T4184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.745463][ T4184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.753132][ T4184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.782317][ T4184] veth1_macvtap: left promiscuous mode [ 46.788159][ T4184] veth0_macvtap: left promiscuous mode [ 46.793759][ T4184] veth1_vlan: left promiscuous mode [ 46.809286][ T4184] veth0_vlan: left promiscuous mode [ 46.892598][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 46.892633][ T29] audit: type=1400 audit(1770008623.948:545): avc: denied { write } for pid=4314 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.919773][ T4333] openvswitch: netlink: Missing key (keys=40, expected=100) [ 47.006464][ T29] audit: type=1400 audit(1770008624.058:546): avc: denied { create } for pid=4341 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.036800][ T4184] team0 (unregistering): Port device team_slave_1 removed [ 47.072743][ T4184] team0 (unregistering): Port device team_slave_0 removed [ 47.152197][ T29] audit: type=1400 audit(1770008624.208:547): avc: denied { read } for pid=4341 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.179978][ T4348] bridge1: entered promiscuous mode [ 47.185229][ T4348] bridge1: entered allmulticast mode [ 47.268013][ T29] audit: type=1400 audit(1770008624.308:548): avc: denied { setopt } for pid=4358 comm="syz.2.234" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.288368][ T29] audit: type=1400 audit(1770008624.308:549): avc: denied { write } for pid=4358 comm="syz.2.234" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.308577][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.315688][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.323048][ T4260] bridge_slave_0: entered allmulticast mode [ 47.330190][ T4260] bridge_slave_0: entered promiscuous mode [ 47.357664][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.364847][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.411109][ T29] audit: type=1400 audit(1770008624.398:550): avc: denied { remount } for pid=4365 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.416986][ T4260] bridge_slave_1: entered allmulticast mode [ 47.430786][ T29] audit: type=1400 audit(1770008624.428:551): avc: denied { setopt } for pid=4366 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.476584][ T4260] bridge_slave_1: entered promiscuous mode [ 47.511344][ T29] audit: type=1326 audit(1770008624.528:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.0.236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f622485aeb9 code=0x0 [ 47.511735][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.547178][ T4184] IPVS: stop unused estimator thread 0... [ 47.554660][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.588157][ T4260] team0: Port device team_slave_0 added [ 47.594842][ T4260] team0: Port device team_slave_1 added [ 47.613971][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.621142][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.647135][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.667079][ T29] audit: type=1400 audit(1770008624.598:553): avc: denied { connect } for pid=4381 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 47.673963][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.693816][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.719769][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.833965][ T4260] hsr_slave_0: entered promiscuous mode [ 47.841915][ T4260] hsr_slave_1: entered promiscuous mode [ 47.848006][ T4260] debugfs: 'hsr0' already exists in 'hsr' [ 47.853789][ T4260] Cannot create hsr debugfs directory [ 48.038850][ T29] audit: type=1326 audit(1770008625.098:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.1.240" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73c6ebaeb9 code=0x0 [ 48.052063][ T4414] set_capacity_and_notify: 2 callbacks suppressed [ 48.052079][ T4414] loop2: detected capacity change from 0 to 128 [ 48.103075][ T4414] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 48.146013][ T4260] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.153132][ T4414] netlink: 'syz.2.241': attribute type 21 has an invalid length. [ 48.164452][ T4260] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.167483][ T4414] process 'syz.2.241' launched './file0' with NULL argv: empty string added [ 48.185827][ T4260] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.204798][ T4260] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.271093][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.300401][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.319784][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.326945][ T4178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.352934][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.360152][ T4184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.442284][ T4438] loop0: detected capacity change from 0 to 512 [ 48.473282][ T4438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.498247][ T4438] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.506309][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.545901][ T4438] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 18: comm syz.0.244: lblock 23 mapped to illegal pblock 18 (length 1) [ 48.596720][ T4438] EXT4-fs (loop0): Remounting filesystem read-only [ 48.668305][ T4457] netlink: 51 bytes leftover after parsing attributes in process `syz.2.245'. [ 48.687788][ T4457] netlink: 44 bytes leftover after parsing attributes in process `syz.2.245'. [ 48.697222][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.704677][ T4457] bridge0: left allmulticast mode [ 48.759442][ T4260] veth0_vlan: entered promiscuous mode [ 48.774649][ T4260] veth1_vlan: entered promiscuous mode [ 48.804322][ T4260] veth0_macvtap: entered promiscuous mode [ 48.910835][ T4260] veth1_macvtap: entered promiscuous mode [ 48.921924][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.931392][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.949488][ T4178] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.980605][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.001664][ T4178] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.024619][ T4177] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.035738][ T4177] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.063675][ T4470] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 49.103541][ T4473] loop3: detected capacity change from 0 to 1024 [ 49.125699][ T4474] netlink: 32 bytes leftover after parsing attributes in process `syz.5.219'. [ 49.143171][ T4473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.175674][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.183092][ T4483] loop0: detected capacity change from 0 to 128 [ 49.198068][ T4483] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.219983][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.252'. [ 49.229213][ T4483] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.269917][ T4489] loop3: detected capacity change from 0 to 128 [ 49.283513][ T4489] netlink: 'syz.3.250': attribute type 12 has an invalid length. [ 49.289957][ T4491] loop5: detected capacity change from 0 to 1024 [ 49.291350][ T4489] netlink: 'syz.3.250': attribute type 29 has an invalid length. [ 49.305510][ T4489] netlink: 148 bytes leftover after parsing attributes in process `syz.3.250'. [ 49.314695][ T4489] netlink: 'syz.3.250': attribute type 1 has an invalid length. [ 49.338094][ T4491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.360994][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.443785][ T4491] bond1: option resend_igmp: invalid value (18345) [ 49.450464][ T4491] bond1: option resend_igmp: allowed values 0 - 255 [ 49.458626][ T4491] bond1 (unregistering): Released all slaves [ 49.480963][ T4510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.257'. [ 49.620012][ T4516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52227 sclass=netlink_route_socket pid=4516 comm=syz.0.258 [ 49.640004][ T4520] loop3: detected capacity change from 0 to 1024 [ 49.665369][ T4520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.740555][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 49.831273][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.860460][ T4532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.262'. [ 49.869538][ T4532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.262'. [ 49.887901][ T4535] loop0: detected capacity change from 0 to 128 [ 49.910123][ T4532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.262'. [ 49.910142][ T4535] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.919296][ T4532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.262'. [ 49.943762][ T4535] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.028313][ T4539] loop1: detected capacity change from 0 to 1024 [ 50.050241][ T4539] EXT4-fs: Ignoring removed orlov option [ 50.068620][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.085051][ T4542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 50.122933][ T4542] team1: entered promiscuous mode [ 50.128082][ T4542] team1: entered allmulticast mode [ 50.139454][ T4490] syz.5.253 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 50.150334][ T4542] 8021q: adding VLAN 0 to HW filter on device team1 [ 50.150502][ T4490] CPU: 1 UID: 0 PID: 4490 Comm: syz.5.253 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.150532][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.150545][ T4490] Call Trace: [ 50.150553][ T4490] [ 50.150562][ T4490] __dump_stack+0x1d/0x30 [ 50.150629][ T4490] dump_stack_lvl+0x95/0xd0 [ 50.150652][ T4490] dump_stack+0x15/0x1b [ 50.150673][ T4490] dump_header+0x80/0x240 [ 50.150696][ T4490] oom_kill_process+0x295/0x350 [ 50.150736][ T4490] out_of_memory+0x97d/0xb80 [ 50.150763][ T4490] try_charge_memcg+0x62e/0xa10 [ 50.150791][ T4490] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 50.150826][ T4490] __read_swap_cache_async+0x17b/0x2d0 [ 50.150878][ T4490] swap_cluster_readahead+0x262/0x3c0 [ 50.150940][ T4490] swapin_readahead+0xde/0x840 [ 50.150973][ T4490] ? __perf_event_task_sched_in+0xa65/0xad0 [ 50.151064][ T4490] ? __rcu_read_unlock+0x4e/0x70 [ 50.151101][ T4490] ? swap_cache_get_folio+0x26f/0x280 [ 50.151155][ T4490] do_swap_page+0x59b/0x2a50 [ 50.151187][ T4490] ? finish_task_switch+0x79/0x280 [ 50.151216][ T4490] ? __schedule+0x82d/0xc90 [ 50.151312][ T4490] ? __rcu_read_lock+0x36/0x50 [ 50.151348][ T4490] ? __pfx_default_wake_function+0x10/0x10 [ 50.151445][ T4490] handle_mm_fault+0xb40/0x3030 [ 50.151480][ T4490] ? vma_start_read+0x1c7/0x2c0 [ 50.151511][ T4490] do_user_addr_fault+0x62f/0x1050 [ 50.151615][ T4490] exc_page_fault+0x62/0xa0 [ 50.151641][ T4490] asm_exc_page_fault+0x26/0x30 [ 50.151694][ T4490] RIP: 0033:0x7f5bf82a894c [ 50.151712][ T4490] Code: ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 50.151828][ T4490] RSP: 002b:00007ffd3be51fa0 EFLAGS: 00010202 [ 50.151848][ T4490] RAX: 0000000000000000 RBX: 00007f5bf8655fa0 RCX: 00005555795a8808 [ 50.151862][ T4490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.151876][ T4490] RBP: 00007f5bf8657da0 R08: 0000000000000000 R09: 0000000000000000 [ 50.151890][ T4490] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000c3be [ 50.151903][ T4490] R13: 00007f5bf8655fac R14: 000000000000c242 R15: 00007f5bf8655fa0 [ 50.151989][ T4490] [ 50.151997][ T4490] memory: usage 307200kB, limit 307200kB, failcnt 229 [ 50.165589][ T4539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.166771][ T4490] memory+swap: usage 307900kB, limit 9007199254740988kB, failcnt 0 [ 50.331818][ T4544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 50.332383][ T4490] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 50.416576][ T4490] Memory cgroup stats for /syz5: [ 50.417076][ T4490] cache 8192 [ 50.425483][ T4490] rss 4096 [ 50.428557][ T4490] shmem 0 [ 50.431506][ T4490] mapped_file 3280896 [ 50.435610][ T4490] dirty 0 [ 50.438620][ T4490] writeback 0 [ 50.442050][ T4490] workingset_refault_anon 62 [ 50.447170][ T4490] workingset_refault_file 0 [ 50.451688][ T4490] swap 716800 [ 50.454984][ T4490] swapcached 4096 [ 50.458674][ T4490] pgpgin 372 [ 50.461884][ T4490] pgpgout 369 [ 50.465180][ T4490] pgfault 631 [ 50.468629][ T4490] pgmajfault 46 [ 50.472098][ T4490] inactive_anon 4096 [ 50.476060][ T4490] active_anon 0 [ 50.479621][ T4490] inactive_file 4096 [ 50.483544][ T4490] active_file 4096 [ 50.487345][ T4490] unevictable 0 [ 50.490884][ T4490] hierarchical_memory_limit 314572800 [ 50.496356][ T4490] hierarchical_memsw_limit 9223372036854771712 [ 50.502603][ T4490] total_cache 8192 [ 50.506423][ T4490] total_rss 4096 [ 50.510161][ T4490] total_shmem 0 [ 50.513645][ T4490] total_mapped_file 3280896 [ 50.518181][ T4490] total_dirty 0 [ 50.521646][ T4490] total_writeback 0 [ 50.525467][ T4490] total_workingset_refault_anon 62 [ 50.530675][ T4490] total_workingset_refault_file 0 [ 50.535761][ T4490] total_swap 716800 [ 50.539594][ T4490] total_swapcached 4096 [ 50.543799][ T4490] total_pgpgin 372 [ 50.547579][ T4490] total_pgpgout 369 [ 50.551525][ T4490] total_pgfault 631 [ 50.555320][ T4490] total_pgmajfault 46 [ 50.559395][ T4490] total_inactive_anon 4096 [ 50.563911][ T4490] total_active_anon 0 [ 50.567920][ T4490] total_inactive_file 4096 [ 50.572370][ T4490] total_active_file 4096 [ 50.576608][ T4490] total_unevictable 0 [ 50.580705][ T4490] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.253,pid=4490,uid=0 [ 50.595474][ T4490] Memory cgroup out of memory: Killed process 4490 (syz.5.253) total-vm:99312kB, anon-rss:1104kB, file-rss:25896kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 50.629724][ T4260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.673762][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.813635][ T4568] futex_wake_op: syz.1.273 tries to shift op by -1; fix this program [ 50.861639][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.270'. [ 50.913002][ T4562] hsr_slave_0: left promiscuous mode [ 50.927428][ T4562] hsr_slave_1: left promiscuous mode [ 50.945741][ T4577] loop1: detected capacity change from 0 to 1024 [ 50.953191][ T4577] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.961622][ T4577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.974117][ T4581] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.001390][ T4577] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.020166][ T4581] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.027719][ T4577] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.277: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 51.070954][ T4577] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.277: couldn't read orphan inode 11 (err -117) [ 51.077490][ T4586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 51.092898][ T4577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.106514][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.141599][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.251023][ T4600] ucma_write: process 152 (syz.3.284) changed security contexts after opening file descriptor, this is not allowed. [ 51.431947][ T4620] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.452549][ T4620] EXT4-fs (loop3): 1 truncate cleaned up [ 51.480046][ T4620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.615082][ T4637] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 51.631407][ T4637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 51.643346][ T4637] vlan3: entered promiscuous mode [ 51.649087][ T4637] bond3: entered promiscuous mode [ 51.654234][ T4637] vlan3: entered allmulticast mode [ 51.659527][ T4637] bond3: entered allmulticast mode [ 51.674702][ T4637] bond3: (slave bridge1): making interface the new active one [ 51.682910][ T4637] bridge1: entered promiscuous mode [ 51.688382][ T4637] bridge1: entered allmulticast mode [ 51.696648][ T4637] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 51.808053][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 51.817200][ T4646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.846124][ T4646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.064234][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 52.064253][ T29] audit: type=1400 audit(1770008629.118:575): avc: denied { mounton } for pid=4669 comm="syz.0.305" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 52.083359][ T4670] cgroup: Need name or subsystem set [ 52.135990][ T4647] chnl_net:caif_netlink_parms(): no params data found [ 52.158545][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.227257][ T4678] vlan2: entered promiscuous mode [ 52.232468][ T4678] vlan2: entered allmulticast mode [ 52.237767][ T4678] hsr_slave_1: entered allmulticast mode [ 52.255615][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 52.263024][ T4647] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.271592][ T4647] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.279542][ T4647] bridge_slave_0: entered allmulticast mode [ 52.286463][ T4647] bridge_slave_0: entered promiscuous mode [ 52.310371][ T4647] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.317553][ T4647] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.324996][ T4647] bridge_slave_1: entered allmulticast mode [ 52.331465][ T4647] bridge_slave_1: entered promiscuous mode [ 52.353334][ T4647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.369317][ T4647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.390465][ T4647] team0: Port device team_slave_0 added [ 52.397578][ T4647] team0: Port device team_slave_1 added [ 52.420277][ T4695] EXT4-fs: Ignoring removed bh option [ 52.444178][ T4647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.446143][ T4695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.451272][ T4647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.472396][ T4695] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.490721][ T4647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.524577][ T4647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.531870][ T4647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.558466][ T4647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.603302][ T4647] hsr_slave_0: entered promiscuous mode [ 52.611943][ T4647] hsr_slave_1: entered promiscuous mode [ 52.617958][ T4647] debugfs: 'hsr0' already exists in 'hsr' [ 52.623736][ T4647] Cannot create hsr debugfs directory [ 52.748911][ T4647] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.760128][ T4647] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.888501][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.898822][ T4723] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.909598][ T4647] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.919067][ T4723] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.314: Allocating blocks 41-42 which overlap fs metadata [ 52.925228][ T4647] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.949682][ T4723] EXT4-fs (loop0): Remounting filesystem read-only [ 52.956641][ T4723] Quota error (device loop0): write_blk: dquota write failed [ 52.964544][ T4723] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 52.973811][ T4723] Quota error (device loop0): write_blk: dquota write failed [ 52.981364][ T4723] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 52.991540][ T4723] EXT4-fs (loop0): 1 truncate cleaned up [ 52.999401][ T4723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.051513][ T29] audit: type=1326 audit(1770008630.118:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4724 comm="syz.2.315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7128aeb9 code=0x0 [ 53.093674][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.113650][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.258505][ T4647] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.276546][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.283660][ T4185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.338612][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.345766][ T4185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.356118][ T4744] FAULT_INJECTION: forcing a failure. [ 53.356118][ T4744] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.369281][ T4744] CPU: 1 UID: 0 PID: 4744 Comm: syz.5.319 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.369309][ T4744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.369331][ T4744] Call Trace: [ 53.369340][ T4744] [ 53.369383][ T4744] __dump_stack+0x1d/0x30 [ 53.369409][ T4744] dump_stack_lvl+0x95/0xd0 [ 53.369430][ T4744] dump_stack+0x15/0x1b [ 53.369505][ T4744] should_fail_ex+0x263/0x280 [ 53.369537][ T4744] should_fail+0xb/0x20 [ 53.369563][ T4744] should_fail_usercopy+0x1a/0x20 [ 53.369593][ T4744] _copy_from_user+0x1c/0xb0 [ 53.369657][ T4744] __sys_bpf+0x183/0x7b0 [ 53.369689][ T4744] __x64_sys_bpf+0x41/0x50 [ 53.369718][ T4744] x64_sys_call+0x28e1/0x3000 [ 53.369751][ T4744] do_syscall_64+0xc0/0x2a0 [ 53.369854][ T4744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.369881][ T4744] RIP: 0033:0x7f5bf83daeb9 [ 53.369901][ T4744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.369973][ T4744] RSP: 002b:00007f5bf6e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.369994][ T4744] RAX: ffffffffffffffda RBX: 00007f5bf8655fa0 RCX: 00007f5bf83daeb9 [ 53.370008][ T4744] RDX: 0000000000000020 RSI: 00002000000004c0 RDI: 0000000000000008 [ 53.370047][ T4744] RBP: 00007f5bf6e37090 R08: 0000000000000000 R09: 0000000000000000 [ 53.370063][ T4744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.370078][ T4744] R13: 00007f5bf8656038 R14: 00007f5bf8655fa0 R15: 00007ffd3be51e38 [ 53.370097][ T4744] [ 53.370627][ T4742] set_capacity_and_notify: 6 callbacks suppressed [ 53.370659][ T4742] loop3: detected capacity change from 0 to 1024 [ 53.550723][ T4647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.561152][ T4647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.566915][ T29] audit: type=1400 audit(1770008630.598:577): avc: denied { bind } for pid=4745 comm="syz.5.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.600019][ T4742] EXT4-fs: Ignoring removed orlov option [ 53.665226][ T29] audit: type=1326 audit(1770008630.708:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 53.689265][ T29] audit: type=1326 audit(1770008630.718:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 53.741290][ T29] audit: type=1326 audit(1770008630.718:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 53.822449][ T4647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.837475][ T4742] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #4: comm syz.3.320: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 53.856510][ T4742] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.320: Bad quota inode: 4, type: 1 [ 53.887281][ T4742] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.912572][ T4742] EXT4-fs (loop3): mount failed [ 54.034639][ T4773] IPVS: Scheduler module ip_vs_ not found [ 54.168514][ T4647] veth0_vlan: entered promiscuous mode [ 54.176632][ T4647] veth1_vlan: entered promiscuous mode [ 54.214564][ T4647] veth0_macvtap: entered promiscuous mode [ 54.223913][ T4647] veth1_macvtap: entered promiscuous mode [ 54.241084][ T4647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.253958][ T4647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.264756][ T4194] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.281979][ T4194] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.302294][ T4194] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.318528][ T4194] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.353684][ T4801] loop6: detected capacity change from 0 to 256 [ 54.363913][ T4801] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 54.373193][ T4801] FAT-fs (loop6): bogus number of directory entries (1) [ 54.380318][ T4801] FAT-fs (loop6): Can't find a valid FAT filesystem [ 54.502027][ T4797] hub 6-0:1.0: USB hub found [ 54.512755][ T4808] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 54.515233][ T4797] hub 6-0:1.0: 8 ports detected [ 54.525531][ T4821] loop5: detected capacity change from 0 to 1024 [ 54.533874][ T4807] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 54.544776][ T4821] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 54.555696][ T4821] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 54.583721][ T4821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.586126][ T4807] bond4: entered promiscuous mode [ 54.601549][ T4807] 8021q: adding VLAN 0 to HW filter on device bond4 [ 54.935052][ T4845] __nla_validate_parse: 2 callbacks suppressed [ 54.935088][ T4845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.340'. [ 55.070262][ T4858] loop3: detected capacity change from 0 to 164 [ 55.077961][ T4858] iso9660: Bad value for 'mode' [ 55.102998][ T4260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.149986][ T4867] netlink: 388 bytes leftover after parsing attributes in process `syz.3.346'. [ 55.264821][ T4883] syz.3.352 (4883): attempted to duplicate a private mapping with mremap. This is not supported. [ 55.331095][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.342406][ T4889] bridge_slave_0 (unregistering): left allmulticast mode [ 55.350244][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.461116][ T4896] netlink: 'syz.5.356': attribute type 5 has an invalid length. [ 55.468925][ T4896] netlink: 24 bytes leftover after parsing attributes in process `syz.5.356'. [ 55.562067][ T4906] loop0: detected capacity change from 0 to 512 [ 55.569413][ T803] IPVS: starting estimator thread 0... [ 55.575676][ T4899] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 55.657307][ T4907] IPVS: using max 2352 ests per chain, 117600 per kthread [ 55.739279][ T4911] loop6: detected capacity change from 0 to 1024 [ 55.774870][ T4912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.362'. [ 55.784256][ T4913] netlink: 'syz.5.362': attribute type 15 has an invalid length. [ 55.884150][ T4911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.959372][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.995410][ T4939] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 56.010131][ T4941] netlink: 348 bytes leftover after parsing attributes in process `syz.6.367'. [ 56.044048][ T4946] loop0: detected capacity change from 0 to 128 [ 56.048038][ T4941] xt_CT: No such helper "snmp_trap" [ 56.053308][ T4946] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.070632][ T4946] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.083824][ T4941] all: renamed from bridge_slave_0 (while UP) [ 56.114894][ T4194] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.126814][ T4952] netlink: 16 bytes leftover after parsing attributes in process `syz.5.372'. [ 56.259527][ T4972] loop6: detected capacity change from 0 to 512 [ 56.293589][ T4972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.310930][ T4972] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.339034][ T4983] bridge0: entered promiscuous mode [ 56.344461][ T4983] macvtap1: entered promiscuous mode [ 56.350029][ T4983] macvtap1: entered allmulticast mode [ 56.355458][ T4983] bridge0: entered allmulticast mode [ 56.362419][ T4983] bridge0: port 1(macvtap1) entered blocking state [ 56.369153][ T4983] bridge0: port 1(macvtap1) entered disabled state [ 56.378436][ T4983] bridge0: left allmulticast mode [ 56.383685][ T4983] bridge0: left promiscuous mode [ 56.492669][ T4987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.379'. [ 56.582450][ T5000] loop0: detected capacity change from 0 to 512 [ 56.611857][ T5000] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.0.382: corrupted xattr block 95: invalid header [ 56.631145][ T5000] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.382: bg 0: block 7: invalid block bitmap [ 56.643729][ T5000] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 56.653354][ T5000] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.382: corrupted xattr block 95: invalid header [ 56.667613][ T5000] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 56.677772][ T5000] EXT4-fs (loop0): 1 orphan inode deleted [ 56.684315][ T5000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.699551][ T5000] netlink: 'syz.0.382': attribute type 4 has an invalid length. [ 56.707301][ T5000] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.382'. [ 56.721535][ T3382] IPVS: starting estimator thread 0... [ 56.740641][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.776683][ T5016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.385'. [ 56.785952][ T5016] syz_tun: entered promiscuous mode [ 56.793782][ T5016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.385'. [ 56.816946][ T5007] IPVS: using max 3216 ests per chain, 160800 per kthread [ 57.084707][ T4189] IPVS: stop unused estimator thread 0... [ 57.227080][ T5032] loop5: detected capacity change from 0 to 2048 [ 57.460817][ T5043] dummy0: entered promiscuous mode [ 57.466018][ T5043] macsec1: entered allmulticast mode [ 57.487072][ T5043] dummy0: entered allmulticast mode [ 57.493354][ T5039] bio_check_eod: 12 callbacks suppressed [ 57.493369][ T5039] syz.5.394: attempt to access beyond end of device [ 57.493369][ T5039] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 57.525739][ T5043] dummy0: left allmulticast mode [ 57.530792][ T5043] dummy0: left promiscuous mode [ 57.551850][ T5050] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 57.558422][ T5050] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 57.564143][ T5039] syz.5.394: attempt to access beyond end of device [ 57.564143][ T5039] loop5: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 57.565944][ T5050] vhci_hcd vhci_hcd.0: Device attached [ 57.603966][ T5039] syz.5.394: attempt to access beyond end of device [ 57.603966][ T5039] loop5: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 57.618183][ T5039] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 57.650045][ T5039] syz.5.394: attempt to access beyond end of device [ 57.650045][ T5039] loop5: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 57.667819][ T5039] syz.5.394: attempt to access beyond end of device [ 57.667819][ T5039] loop5: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 57.681506][ T5039] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 57.699745][ T5051] usbip_core: unknown command [ 57.704474][ T5051] vhci_hcd: unknown pdu 390890802 [ 57.709570][ T5051] usbip_core: unknown command [ 57.719502][ T376] vhci_hcd vhci_hcd.3: stop threads [ 57.723622][ T5056] 9p: Bad value for 'rfdno' [ 57.724877][ T376] vhci_hcd vhci_hcd.3: release socket [ 57.734935][ T376] vhci_hcd vhci_hcd.3: disconnect device [ 57.748104][ T5039] syz.5.394: attempt to access beyond end of device [ 57.748104][ T5039] loop5: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 57.776911][ T2965] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 57.788114][ T5039] syz.5.394: attempt to access beyond end of device [ 57.788114][ T5039] loop5: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 57.801754][ T5039] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 57.825012][ T5039] syz.5.394: attempt to access beyond end of device [ 57.825012][ T5039] loop5: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 57.838925][ T5039] syz.5.394: attempt to access beyond end of device [ 57.838925][ T5039] loop5: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 57.852742][ T5039] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 57.872793][ T5039] syz.5.394: attempt to access beyond end of device [ 57.872793][ T5039] loop5: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 57.894839][ T5039] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 57.904866][ T5039] Buffer I/O error on dev loop5, logical block 120, lost async page write [ 57.915268][ T5039] Buffer I/O error on dev loop5, logical block 124, lost async page write [ 57.925406][ T5039] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 57.935652][ T5039] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 57.945884][ T5039] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 58.066123][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 58.066142][ T29] audit: type=1326 audit(1770008635.118:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 58.121971][ T5071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.147038][ T29] audit: type=1326 audit(1770008635.118:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 58.170341][ T29] audit: type=1326 audit(1770008635.118:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 58.193786][ T29] audit: type=1326 audit(1770008635.118:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 58.217105][ T29] audit: type=1326 audit(1770008635.118:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 58.240641][ T29] audit: type=1326 audit(1770008635.118:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 58.264018][ T29] audit: type=1326 audit(1770008635.118:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 58.287307][ T29] audit: type=1326 audit(1770008635.118:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 58.310650][ T29] audit: type=1326 audit(1770008635.118:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 58.333867][ T29] audit: type=1326 audit(1770008635.118:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7128aeb9 code=0x7ffc0000 [ 58.411469][ T5084] netlink: 'syz.3.403': attribute type 32 has an invalid length. [ 58.693979][ T5118] syzkaller0: entered promiscuous mode [ 58.699610][ T5118] syzkaller0: entered allmulticast mode [ 58.743022][ T5117] tipc: Enabling of bearer rejected, failed to enable media [ 59.286533][ T5195] set_capacity_and_notify: 2 callbacks suppressed [ 59.286586][ T5195] loop3: detected capacity change from 0 to 1024 [ 59.342820][ T5195] EXT4-fs: inline encryption not supported [ 59.391874][ T5195] EXT4-fs: Mount option(s) incompatible with ext3 [ 59.471499][ T5214] sctp: [Deprecated]: syz.3.427 (pid 5214) Use of int in maxseg socket option. [ 59.471499][ T5214] Use struct sctp_assoc_value instead [ 59.540373][ T5223] loop5: detected capacity change from 0 to 512 [ 59.587194][ T5223] EXT4-fs: Ignoring removed nobh option [ 59.614789][ T5223] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 59.637765][ T5223] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0003] [ 59.655970][ T5223] System zones: 1-12 [ 59.660424][ T5223] EXT4-fs (loop5): orphan cleanup on readonly fs [ 59.667791][ T5223] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #11: comm syz.5.431: corrupted in-inode xattr: e_name out of bounds [ 59.697498][ T5223] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.431: couldn't read orphan inode 11 (err -117) [ 59.767210][ T5238] loop3: detected capacity change from 0 to 1024 [ 59.802029][ T5238] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 59.832189][ T5238] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 59.858911][ T5238] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #32: comm syz.3.436: iget: special inode unallocated [ 59.895100][ T5238] EXT4-fs (loop3): Remounting filesystem read-only [ 59.923780][ T5238] EXT4-fs (loop3): no journal found [ 59.929173][ T5238] EXT4-fs (loop3): can't get journal size [ 59.948413][ T5238] EXT4-fs (loop3): filesystem is read-only [ 59.965989][ T5238] __nla_validate_parse: 6 callbacks suppressed [ 59.966051][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 60.063362][ T5262] loop6: detected capacity change from 0 to 512 [ 60.082451][ T5262] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.096373][ T5262] EXT4-fs (loop6): orphan cleanup on readonly fs [ 60.112473][ T5262] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.440: Allocating blocks 41-42 which overlap fs metadata [ 60.169319][ T5262] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.440: Allocating blocks 41-42 which overlap fs metadata [ 60.194432][ T5262] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.440: Failed to acquire dquot type 1 [ 60.234590][ T5262] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 60.253724][ T5262] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.440: corrupted inode contents [ 60.301463][ T5262] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.440: mark_inode_dirty error [ 60.342051][ T5262] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.440: corrupted inode contents [ 60.356262][ T5262] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.440: mark_inode_dirty error [ 60.402815][ T5262] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.440: corrupted inode contents [ 60.422851][ T5262] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 60.443949][ T5262] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.440: corrupted inode contents [ 60.474263][ T5262] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.440: mark_inode_dirty error [ 60.503833][ T5262] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 60.531045][ T5262] EXT4-fs (loop6): 1 truncate cleaned up [ 60.534502][ T5302] loop5: detected capacity change from 0 to 1024 [ 60.554391][ T5302] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.629279][ T5302] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.655572][ T5302] VFS: Lookup of 'file0' in ext4 loop5 would have caused loop [ 60.738628][ T5315] netlink: 32 bytes leftover after parsing attributes in process `syz.5.455'. [ 60.914349][ T5345] netlink: 16 bytes leftover after parsing attributes in process `syz.5.461'. [ 60.923399][ T5345] netlink: 16 bytes leftover after parsing attributes in process `syz.5.461'. [ 60.923419][ T5345] netlink: 5 bytes leftover after parsing attributes in process `syz.5.461'. [ 60.949019][ T5339] loop0: detected capacity change from 0 to 8192 [ 60.970586][ T5348] loop6: detected capacity change from 0 to 1024 [ 60.988293][ T5348] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.026117][ T5348] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 61.041953][ T5353] loop0: detected capacity change from 0 to 1024 [ 61.043241][ T5348] EXT4-fs (loop6): orphan cleanup on readonly fs [ 61.069010][ T5348] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #3: block 3: comm syz.6.462: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.092443][ T5348] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.462: Failed to acquire dquot type 0 [ 61.107691][ T5348] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 3: comm syz.6.462: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.122781][ T5353] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.134289][ T5348] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.462: Failed to acquire dquot type 0 [ 61.148931][ T5353] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.468: lblock 0 mapped to illegal pblock 0 (length 1) [ 61.165048][ T5348] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.462: Freeing blocks not in datazone - block = 0, count = 4096 [ 61.200004][ T5353] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 61.212466][ T5353] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.212466][ T5353] [ 61.234467][ T5348] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 3: comm syz.6.462: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.241573][ T5363] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.468: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.264040][ T5363] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 61.276373][ T5363] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.276373][ T5363] [ 61.287523][ T5348] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.462: Failed to acquire dquot type 0 [ 61.322335][ T5348] EXT4-fs (loop6): 1 orphan inode deleted [ 61.381021][ T5368] loop0: detected capacity change from 0 to 1024 [ 61.480933][ T5374] loop3: detected capacity change from 0 to 512 [ 61.492826][ T5374] EXT4-fs: inline encryption not supported [ 61.518340][ T5374] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.632413][ T4189] tipc: Subscription rejected, illegal request [ 61.780033][ T5403] EXT4-fs (loop3): 1 orphan inode deleted [ 61.790927][ T5403] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.055524][ T5432] Invalid ELF header type: 2 != 1 [ 62.072402][ T5431] EXT4-fs (loop6): 1 orphan inode deleted [ 62.087207][ T5431] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.097830][ T4194] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 1 [ 62.218800][ T5444] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.271027][ T4647] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 62.468744][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.495'. [ 62.478865][ T5456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.495'. [ 62.679980][ T5467] geneve2: entered promiscuous mode [ 62.685343][ T5467] geneve2: entered allmulticast mode [ 62.775952][ T5473] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.863789][ T5480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5480 comm=syz.0.504 [ 62.936514][ T5480] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 63.019413][ T5496] netlink: 'syz.3.507': attribute type 2 has an invalid length. [ 63.165689][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 63.165760][ T29] audit: type=1400 audit(1770008646.262:843): avc: denied { mount } for pid=5507 comm="syz.3.511" name="/" dev="rpc_pipefs" ino=12400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 63.205498][ T29] audit: type=1400 audit(1770008646.315:844): avc: denied { listen } for pid=5511 comm="syz.6.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.220187][ T5475] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.503: ea_inode with extended attributes [ 63.224916][ T29] audit: type=1400 audit(1770008646.315:845): avc: denied { accept } for pid=5511 comm="syz.6.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.263032][ T5475] EXT4-fs (loop5): Remounting filesystem read-only [ 63.272620][ T5475] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 63.285372][ T5475] EXT4-fs (loop5): 1 orphan inode deleted [ 63.307551][ T29] audit: type=1400 audit(1770008646.399:846): avc: denied { accept } for pid=5511 comm="syz.6.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 63.427794][ T29] audit: type=1400 audit(1770008646.546:847): avc: denied { accept } for pid=5531 comm="syz.6.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.473664][ T29] audit: type=1400 audit(1770008646.567:848): avc: denied { getopt } for pid=5531 comm="syz.6.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.567150][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 63.855997][ T29] audit: type=1326 audit(1770008646.976:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 63.879336][ T29] audit: type=1326 audit(1770008646.976:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 63.902628][ T29] audit: type=1326 audit(1770008646.987:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 63.926016][ T29] audit: type=1326 audit(1770008646.987:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5552 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 64.171095][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 64.195561][ T5558] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.525'. [ 64.219284][ T5574] set_capacity_and_notify: 8 callbacks suppressed [ 64.219302][ T5574] loop0: detected capacity change from 0 to 2048 [ 64.244588][ T5574] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.263362][ T5581] bio_check_eod: 24 callbacks suppressed [ 64.263380][ T5581] syz.5.525: attempt to access beyond end of device [ 64.263380][ T5581] loop5: rw=2049, sector=256, nr_sectors = 40 limit=256 [ 64.464357][ T5596] bridge0: entered promiscuous mode [ 64.563629][ T5601] tipc: Started in network mode [ 64.568655][ T5601] tipc: Node identity ac14140f, cluster identity 4711 [ 64.575675][ T5601] tipc: New replicast peer: 255.255.255.255 [ 64.581904][ T5601] tipc: Enabled bearer , priority 10 [ 64.591474][ T5610] loop3: detected capacity change from 0 to 512 [ 64.627865][ T5610] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 64.636169][ T5610] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.654151][ T5610] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.541: corrupted inode contents [ 64.667483][ T5610] EXT4-fs (loop3): Remounting filesystem read-only [ 64.674284][ T5610] EXT4-fs (loop3): 1 truncate cleaned up [ 64.680064][ T376] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.690733][ T376] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 64.709205][ T5619] loop6: detected capacity change from 0 to 1024 [ 64.725769][ T5619] ext3: Unknown parameter 'fsname' [ 64.726716][ T5622] geneve2: entered promiscuous mode [ 64.736704][ T376] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 64.755450][ T5615] loop6: detected capacity change from 0 to 1024 [ 64.763591][ T5615] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 64.783220][ T5615] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 64.798660][ T5615] jbd2_journal_init_inode: Cannot locate journal superblock [ 64.806057][ T5615] EXT4-fs (loop6): Could not load journal inode [ 64.838661][ T5628] ipvlan0: entered promiscuous mode [ 64.865496][ T5630] loop6: detected capacity change from 0 to 512 [ 64.901228][ T5630] EXT4-fs (loop6): orphan cleanup on readonly fs [ 64.911773][ T5630] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.548: bg 0: block 248: padding at end of block bitmap is not set [ 64.978315][ T5630] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.548: Failed to acquire dquot type 1 [ 65.010990][ T5648] __nla_validate_parse: 2 callbacks suppressed [ 65.011026][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.553'. [ 65.026347][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.033843][ T5648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.042480][ T5630] EXT4-fs (loop6): 1 truncate cleaned up [ 65.043822][ T5650] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 65.057530][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.058700][ T5630] EXT4-fs (loop6): shut down requested (0) [ 65.065596][ T5648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.228946][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.236440][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.247205][ T5661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.255269][ T5661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.350010][ T5665] loop5: detected capacity change from 0 to 8192 [ 65.358344][ T5665] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.472961][ T5672] xt_hashlimit: max too large, truncated to 1048576 [ 65.480415][ T5672] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 65.493424][ T5672] loop3: detected capacity change from 0 to 512 [ 65.494411][ T9] hid_parser_main: 1 callbacks suppressed [ 65.494430][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.545260][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.561620][ T5672] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.617913][ T5694] loop6: detected capacity change from 0 to 512 [ 65.625596][ T5694] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.634726][ T5694] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 65.643275][ T5695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 65.643295][ T36] tipc: Node number set to 2886997007 [ 65.659180][ T5694] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 65.667462][ T5694] System zones: 0-2, 18-18, 34-35 [ 65.698000][ T5694] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 65.706323][ T5698] loop0: detected capacity change from 0 to 4096 [ 65.719245][ T5694] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 65.727429][ T5694] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 65.744182][ T5694] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.567: bg 0: block 353: padding at end of block bitmap is not set [ 65.744367][ T5698] EXT4-fs: Cannot change journaled quota options when quota turned on [ 65.806922][ T5704] 9p: Bad value for 'rfdno' [ 65.831860][ T5707] netlink: 1 bytes leftover after parsing attributes in process `syz.3.572'. [ 65.852839][ T5694] netlink: 'syz.6.567': attribute type 2 has an invalid length. [ 65.860531][ T5694] netlink: 132 bytes leftover after parsing attributes in process `syz.6.567'. [ 65.956235][ T5719] 9p: Bad value for 'rfdno' [ 65.964322][ T5723] loop3: detected capacity change from 0 to 512 [ 65.974668][ T5723] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 66.001102][ T5725] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.019567][ T5725] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.579: No space for directory leaf checksum. Please run e2fsck -D. [ 66.035515][ T5725] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.579: checksumming directory block 0 [ 66.148855][ T5740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 66.158455][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 66.188804][ T5742] netlink: 76 bytes leftover after parsing attributes in process `syz.2.584'. [ 66.198972][ T5743] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.581: bad orphan inode 134217728 [ 66.243111][ T5746] geneve2: entered promiscuous mode [ 66.248379][ T5746] geneve2: entered allmulticast mode [ 66.271229][ T5747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=5747 comm=syz.0.582 [ 66.521542][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 66.530670][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 66.579000][ T5762] netlink: 44 bytes leftover after parsing attributes in process `syz.2.587'. [ 66.775451][ T4647] EXT4-fs unmount: 46 callbacks suppressed [ 66.775523][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.806597][ T5765] syzkaller1: entered promiscuous mode [ 66.812163][ T5765] syzkaller1: entered allmulticast mode [ 66.826517][ T5767] netlink: 'syz.5.592': attribute type 4 has an invalid length. [ 66.841371][ T5769] netlink: 'syz.6.590': attribute type 30 has an invalid length. [ 67.022680][ T5794] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.129340][ T5799] EXT4-fs: inline encryption not supported [ 67.137356][ T5799] ext4: Unknown parameter 'nouser_xattr' [ 67.186800][ T5810] netlink: 444 bytes leftover after parsing attributes in process `syz.3.606'. [ 88.703486][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 88.703574][ T29] audit: type=1400 audit(1770008673.088:890): avc: denied { mounton } for pid=5818 comm="syz.0.607" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 88.741072][ T29] audit: type=1326 audit(1770008673.119:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 88.741320][ T5827] set_capacity_and_notify: 4 callbacks suppressed [ 88.741335][ T5827] loop5: detected capacity change from 0 to 128 [ 88.765539][ T29] audit: type=1326 audit(1770008673.119:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 88.806657][ T5819] loop0: detected capacity change from 0 to 1024 [ 88.818028][ T29] audit: type=1326 audit(1770008673.182:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 88.821731][ T5819] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 88.841924][ T29] audit: type=1326 audit(1770008673.182:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 88.874897][ T29] audit: type=1326 audit(1770008673.182:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 88.888901][ T5831] loop3: detected capacity change from 0 to 512 [ 88.898356][ T29] audit: type=1326 audit(1770008673.182:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 88.898387][ T29] audit: type=1326 audit(1770008673.182:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 88.941992][ T5831] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 88.952798][ T29] audit: type=1326 audit(1770008673.182:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 88.984301][ T29] audit: type=1326 audit(1770008673.182:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5828 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072a1baeb9 code=0x7ffc0000 [ 89.009334][ T5827] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.069279][ T5839] loop5: detected capacity change from 0 to 1024 [ 89.086866][ T5841] netlink: 104 bytes leftover after parsing attributes in process `syz.2.615'. [ 89.096335][ T5841] netlink: 'syz.2.615': attribute type 10 has an invalid length. [ 89.107515][ T5839] EXT4-fs: Ignoring removed oldalloc option [ 89.113578][ T5839] EXT4-fs: Ignoring removed bh option [ 89.128923][ T5841] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 89.144105][ T5841] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 89.152726][ T5841] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 89.175827][ T5839] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.207151][ T5852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5852 comm=syz.6.618 [ 89.224410][ T5844] bridge_slave_0: left allmulticast mode [ 89.230219][ T5844] bridge_slave_0: left promiscuous mode [ 89.236007][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.285436][ T5844] bridge_slave_1: left allmulticast mode [ 89.291125][ T5844] bridge_slave_1: left promiscuous mode [ 89.297051][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.321338][ T5844] bond0: (slave bond_slave_0): Releasing backup interface [ 89.331656][ T5844] bond_slave_0: left promiscuous mode [ 89.337191][ T5844] bond_slave_0: left allmulticast mode [ 89.337205][ T5858] loop3: detected capacity change from 0 to 1024 [ 89.352198][ T5844] bond0: (slave bond_slave_1): Releasing backup interface [ 89.361896][ T5844] bond_slave_1: left promiscuous mode [ 89.367376][ T5844] bond_slave_1: left allmulticast mode [ 89.369023][ T5858] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.402131][ T5858] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 89.404725][ T5844] team_slave_0: left promiscuous mode [ 89.411954][ T5858] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 89.427703][ T5844] team_slave_0: left allmulticast mode [ 89.432029][ T5858] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 89.444265][ T5858] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #32: comm syz.3.620: iget: special inode unallocated [ 89.452786][ T5844] team0: Port device team_slave_0 removed [ 89.463052][ T5858] EXT4-fs (loop3): no journal found [ 89.469022][ T5858] EXT4-fs (loop3): can't get journal size [ 89.476234][ T5844] team_slave_1: left promiscuous mode [ 89.481688][ T5844] team_slave_1: left allmulticast mode [ 89.490487][ T5858] EXT4-fs (loop3): failed to initialize system zone (-117) [ 89.520703][ T5844] team0: Port device team_slave_1 removed [ 89.521584][ T4260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.537715][ T5858] EXT4-fs (loop3): mount failed [ 89.548308][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.555922][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.579220][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.586792][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.627082][ T5844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 89.686022][ T5874] netlink: 7688 bytes leftover after parsing attributes in process `syz.3.624'. [ 89.725162][ T5880] netlink: 24 bytes leftover after parsing attributes in process `syz.5.622'. [ 89.734626][ T5874] xt_bpf: check failed: parse error [ 89.740670][ T5873] xt_bpf: check failed: parse error [ 89.845815][ T5892] loop0: detected capacity change from 0 to 512 [ 89.873249][ T5892] EXT4-fs (loop0): Unsupported encryption level 255 [ 89.924532][ T5905] netlink: 60 bytes leftover after parsing attributes in process `syz.3.631'. [ 90.049822][ T5925] loop3: detected capacity change from 0 to 512 [ 90.078119][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 90.089105][ T5925] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.638: corrupted inode contents [ 90.124237][ T5935] netlink: 60 bytes leftover after parsing attributes in process `syz.5.641'. [ 90.148798][ T5925] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #3: comm syz.3.638: mark_inode_dirty error [ 90.149041][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.641'. [ 90.170809][ T5925] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.638: corrupted inode contents [ 90.190631][ T5940] 9p: Bad value for 'wfdno' [ 90.193039][ T5925] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.638: mark_inode_dirty error [ 90.208055][ T5925] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.638: Failed to acquire dquot type 0 [ 90.220730][ T5925] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.638: corrupted inode contents [ 90.232956][ T5925] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.638: mark_inode_dirty error [ 90.253165][ T5925] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.638: corrupted inode contents [ 90.267523][ T5925] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.638: mark_inode_dirty error [ 90.322055][ T5925] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.638: corrupted inode contents [ 90.339582][ T5947] loop6: detected capacity change from 0 to 1024 [ 90.347208][ T5954] sctp: [Deprecated]: syz.0.647 (pid 5954) Use of int in max_burst socket option. [ 90.347208][ T5954] Use struct sctp_assoc_value instead [ 90.347606][ T5952] veth0: entered promiscuous mode [ 90.373559][ T5925] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 90.383386][ T5947] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.394013][ T5925] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.638: corrupted inode contents [ 90.394174][ T5925] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.638: mark_inode_dirty error [ 90.417259][ T5957] veth0: left promiscuous mode [ 90.419309][ T5947] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 90.431543][ T5925] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 90.432066][ T5947] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.644: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.459072][ T5954] loop0: detected capacity change from 0 to 512 [ 90.466129][ T5947] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.644: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.473743][ T5925] EXT4-fs (loop3): 1 truncate cleaned up [ 90.487812][ T5947] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.644: Failed to acquire dquot type 0 [ 90.502156][ T5947] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 90.513731][ T5925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.526615][ T5947] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.644: mark_inode_dirty error [ 90.526783][ T5947] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 90.526832][ T5947] EXT4-fs (loop6): 1 orphan inode deleted [ 90.527282][ T5947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.538352][ T5925] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.558926][ T4194] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.605463][ T5954] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 90.625096][ T5954] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 90.636269][ T5954] block device autoloading is deprecated and will be removed. [ 90.643834][ T5954] EXT4-fs (loop0): couldn't read superblock of external journal [ 90.651752][ T4194] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 0 [ 90.665816][ T5947] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.675968][ T5947] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.644: Invalid inode table block 1 in block_group 0 [ 90.704778][ T5947] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 90.705003][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.714608][ T5947] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.644: mark_inode_dirty error [ 90.803135][ T5973] netlink: 'syz.6.652': attribute type 29 has an invalid length. [ 90.818691][ T5974] 9p: Bad value for 'wfdno' [ 90.826561][ T5973] netlink: 'syz.6.652': attribute type 29 has an invalid length. [ 90.837316][ T5973] netlink: 500 bytes leftover after parsing attributes in process `syz.6.652'. [ 90.902858][ T5982] sctp: [Deprecated]: syz.3.655 (pid 5982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.902858][ T5982] Use struct sctp_sack_info instead [ 90.911062][ T5980] syzkaller0: entered allmulticast mode [ 90.944491][ T5980] syzkaller0: entered promiscuous mode [ 90.969175][ T5980] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 90.990509][ T5980] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 91.013582][ T5980] netlink: 'syz.5.654': attribute type 1 has an invalid length. [ 91.044795][ T5979] syzkaller0: left promiscuous mode [ 91.050247][ T5979] syzkaller0: left allmulticast mode [ 91.158283][ T6002] ------------[ cut here ]------------ [ 91.163908][ T6002] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 91.184380][ T6002] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.2.658/6002 [ 91.195470][ T6002] Modules linked in: [ 91.199513][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.2.658 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.203816][ T6010] netlink: 228 bytes leftover after parsing attributes in process `syz.5.661'. [ 91.210092][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.228469][ T6002] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 91.234794][ T6002] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 91.255140][ T6002] RSP: 0018:ffffc90005817388 EFLAGS: 00010246 [ 91.261238][ T6002] RAX: ffff88810576bc10 RBX: 00000000ffffffff RCX: 0000000000000000 [ 91.269492][ T6002] RDX: ffffffff867f0c59 RSI: ffffffff86804ea8 RDI: ffffffff86fb97b0 [ 91.277578][ T6002] RBP: ffff88813c9e7040 R08: 0000007800000000 R09: 0000000000000000 [ 91.283331][ T5986] netlink: 28 bytes leftover after parsing attributes in process `syz.6.656'. [ 91.286168][ T6002] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88813c9e7000 [ 91.302509][ T6002] R13: 0000000000000000 R14: ffff88813c9e704c R15: ffff88813c9e7038 [ 91.310528][ T6002] FS: 00007f1e6fcc66c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 91.320143][ T6002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.326877][ T6002] CR2: 00007f62232b6ff8 CR3: 000000010540e000 CR4: 00000000003506f0 [ 91.335010][ T6002] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.343633][ T6002] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 91.351721][ T6002] Call Trace: [ 91.355020][ T6002] [ 91.357996][ T6002] reg_set_min_max+0x1f2/0x260 [ 91.362849][ T6002] check_cond_jmp_op+0x13bd/0x1a80 [ 91.368013][ T6002] do_check+0x440c/0x9060 [ 91.373098][ T6002] do_check_common+0xd0f/0x1630 [ 91.377996][ T6002] bpf_check+0x2f6d/0xc7e0 [ 91.382523][ T6002] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 91.388560][ T6002] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 91.394316][ T6002] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 91.400864][ T6002] ? pcpu_block_update+0x377/0x3b0 [ 91.406030][ T6002] ? _find_next_zero_bit+0x64/0xa0 [ 91.411328][ T6002] ? pcpu_block_update+0x24e/0x3b0 [ 91.416545][ T6002] ? _find_next_zero_bit+0x64/0xa0 [ 91.421743][ T6002] ? pcpu_block_refresh_hint+0x157/0x170 [ 91.428164][ T6002] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 91.434277][ T6002] ? css_rstat_updated+0xbb/0x280 [ 91.439361][ T6002] ? mod_memcg_state+0x182/0x260 [ 91.444727][ T6002] ? __rcu_read_unlock+0x4e/0x70 [ 91.449955][ T6002] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 91.456447][ T6002] ? pcpu_alloc_noprof+0xb08/0x1010 [ 91.461752][ T6002] ? __kmalloc_noprof+0x4a3/0x580 [ 91.466928][ T6002] ? security_bpf_prog_load+0x60/0x140 [ 91.472446][ T6002] ? selinux_bpf_prog_load+0xac/0xd0 [ 91.477874][ T6002] ? security_bpf_prog_load+0x9e/0x140 [ 91.483789][ T6002] bpf_prog_load+0xf76/0x1140 [ 91.488498][ T6002] ? security_bpf+0x2b/0x90 [ 91.493053][ T6002] __sys_bpf+0x469/0x7b0 [ 91.497485][ T6002] __x64_sys_bpf+0x41/0x50 [ 91.501902][ T6002] x64_sys_call+0x28e1/0x3000 [ 91.506679][ T6002] do_syscall_64+0xc0/0x2a0 [ 91.511288][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.517803][ T6002] RIP: 0033:0x7f1e7128aeb9 [ 91.522250][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.542440][ T6002] RSP: 002b:00007f1e6fcc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.550896][ T6002] RAX: ffffffffffffffda RBX: 00007f1e71506090 RCX: 00007f1e7128aeb9 [ 91.558884][ T6002] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 91.566942][ T6002] RBP: 00007f1e712f8c1f R08: 0000000000000000 R09: 0000000000000000 [ 91.575519][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.583521][ T6002] R13: 00007f1e71506128 R14: 00007f1e71506090 R15: 00007ffdb18cc668 [ 91.591543][ T6002] [ 91.594566][ T6002] ---[ end trace 0000000000000000 ]--- [ 91.714005][ T6026] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 91.751696][ T6026] SELinux: failed to load policy [ 91.897481][ T6051] loop6: detected capacity change from 0 to 4096 [ 91.914054][ T6051] EXT4-fs: Ignoring removed bh option [ 91.919531][ T6051] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.955275][ T6051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.099688][ T4647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.242953][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.268349][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.474728][ T6088] IPv6: NLM_F_REPLACE set, but no existing node found! [ 92.519248][ T6099] IPv6: Can't replace route, no match found [ 92.840066][ T6121] EXT4-fs: Ignoring removed oldalloc option [ 92.846791][ T6121] EXT4-fs: Ignoring removed bh option [ 92.988641][ T6121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.002922][ T6123] sctp: [Deprecated]: syz.5.693 (pid 6123) Use of int in maxseg socket option. [ 93.002922][ T6123] Use struct sctp_assoc_value instead [ 93.039422][ T6138] tipc: Enabled bearer , priority 10 [ 93.144065][ T6151] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 93.158806][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.179886][ T6158] netlink: 'syz.2.705': attribute type 10 has an invalid length. [ 93.187859][ T6158] dummy0: left promiscuous mode [ 93.192783][ T6158] dummy0: left allmulticast mode [ 93.224264][ T6158] dummy0: entered promiscuous mode [ 93.235526][ T6158] dummy0: entered allmulticast mode [ 93.236236][ T6163] netlink: 'syz.2.705': attribute type 10 has an invalid length. [ 93.241871][ T6158] team0: Port device dummy0 added [ 93.259343][ T6164] xt_hashlimit: size too large, truncated to 1048576 [ 93.260171][ T6160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.277864][ T6163] dummy0: left promiscuous mode [ 93.286147][ T6163] dummy0: left allmulticast mode [ 93.306697][ T6163] team0: Port device dummy0 removed [ 93.314152][ T6163] dummy0: entered promiscuous mode [ 93.319424][ T6163] dummy0: entered allmulticast mode [ 93.326701][ T6163] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 93.353946][ T6160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.367214][ T6165] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 93.381491][ T6172] netlink: 'syz.2.707': attribute type 1 has an invalid length. [ 93.403748][ T6165] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 93.414811][ T6165] EXT4-fs (loop5): group descriptors corrupted! [ 93.458663][ T6160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.508128][ T6160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.524731][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 93.524748][ T29] audit: type=1400 audit(1770008678.138:1031): avc: denied { read } for pid=6188 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.566009][ T4187] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.574623][ T29] audit: type=1400 audit(1770008678.190:1032): avc: denied { setopt } for pid=6188 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.580839][ T4187] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.606377][ T4187] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.619718][ T4185] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860355][ T6210] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 93.868094][ T6210] netlink: 'syz.0.718': attribute type 3 has an invalid length. [ 93.875819][ T6210] __nla_validate_parse: 6 callbacks suppressed [ 93.875836][ T6210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.718'. [ 93.892813][ T6210] SELinux: failed to load policy [ 93.897407][ T6211] netlink: 68 bytes leftover after parsing attributes in process `syz.6.717'. [ 93.926705][ T29] audit: type=1326 audit(1770008678.558:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622485aeb9 code=0x7ffc0000 [ 93.952756][ T29] audit: type=1326 audit(1770008678.558:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622485aeb9 code=0x7ffc0000 [ 93.976237][ T29] audit: type=1326 audit(1770008678.558:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f622485aeb9 code=0x7ffc0000 [ 93.999770][ T29] audit: type=1326 audit(1770008678.558:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622485aeb9 code=0x7ffc0000 [ 94.023808][ T29] audit: type=1326 audit(1770008678.558:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f622485aeb9 code=0x7ffc0000 [ 94.047823][ T29] audit: type=1326 audit(1770008678.558:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622485aeb9 code=0x7ffc0000 [ 94.051795][ T6219] set_capacity_and_notify: 3 callbacks suppressed [ 94.051892][ T6219] loop0: detected capacity change from 0 to 256 [ 94.071561][ T29] audit: type=1326 audit(1770008678.558:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f622485aeb9 code=0x7ffc0000 [ 94.071598][ T29] audit: type=1326 audit(1770008678.558:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6212 comm="syz.0.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622485aeb9 code=0x7ffc0000 [ 94.128539][ T6220] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 94.143227][ T6219] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.157519][ T6220] SELinux: failed to load policy [ 94.158309][ T6219] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.352658][ T6234] loop3: detected capacity change from 0 to 1024 [ 94.371358][ T6234] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.381207][ T6234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.390669][ T6234] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.390889][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 94.423798][ T6234] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.727: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 94.447978][ T6234] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.727: couldn't read orphan inode 11 (err -117) [ 94.464802][ T6234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.505473][ T6234] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.727: Invalid block bitmap block 0 in block_group 0 [ 94.522737][ T6234] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.727: Failed to acquire dquot type 0 [ 94.573202][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.615415][ T6264] loop0: detected capacity change from 0 to 128 [ 94.634293][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.738'. [ 94.653013][ T6264] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.686961][ T6264] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.783593][ T6280] loop5: detected capacity change from 0 to 164 [ 94.873185][ T6288] netlink: 236 bytes leftover after parsing attributes in process `syz.2.742'. [ 94.893391][ T6291] netlink: 256 bytes leftover after parsing attributes in process `syz.3.744'. [ 94.906458][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.024409][ T6298] 9p: Bad value for 'rfdno' [ 95.084385][ T6300] loop6: detected capacity change from 0 to 128 [ 95.097921][ T6300] vfat: Bad value for 'shortname' [ 95.158892][ T6303] netlink: 20 bytes leftover after parsing attributes in process `syz.5.743'. [ 95.178819][ T6300] Invalid logical block size (1) [ 95.188378][ T6300] netlink: 'syz.6.748': attribute type 3 has an invalid length. [ 95.188950][ T6303] netlink: 20 bytes leftover after parsing attributes in process `syz.5.743'. [ 95.196058][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.748'. [ 95.227220][ T6303] netlink: 20 bytes leftover after parsing attributes in process `syz.5.743'. [ 95.309635][ T6319] syz.2.754 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 95.592054][ T6353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64368 sclass=netlink_route_socket pid=6353 comm=syz.6.764 [ 95.685319][ T6368] netlink: 'syz.3.769': attribute type 4 has an invalid length. [ 95.716909][ T6368] netlink: 'syz.3.769': attribute type 4 has an invalid length. [ 95.910224][ T6392] loop3: detected capacity change from 0 to 256 [ 95.921405][ T6392] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.933190][ T6395] netlink: 'syz.0.775': attribute type 3 has an invalid length. [ 96.035537][ T6414] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.095447][ T6414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.107671][ T6414] bond3: (slave bond0): making interface the new active one [ 96.119744][ T6414] bond3: (slave bond0): Enslaving as an active interface with an up link [ 96.158212][ T6414] bond3: (slave bond0): Releasing active interface [ 96.166727][ T6441] loop0: detected capacity change from 0 to 1024 [ 96.179393][ T6441] program syz.0.788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.201851][ T6414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.272170][ T6454] loop3: detected capacity change from 0 to 512 [ 96.292892][ T6454] EXT4-fs: Ignoring removed nobh option [ 96.314873][ T6458] netlink: 'syz.6.796': attribute type 10 has an invalid length. [ 96.322980][ T6454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.330977][ T6454] EXT4-fs (loop3): 1 truncate cleaned up [ 96.339394][ T6454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.358948][ T6458] team0: entered promiscuous mode [ 96.364769][ T6458] team_slave_0: entered promiscuous mode [ 96.370573][ T6458] team_slave_1: entered promiscuous mode [ 96.376344][ T6458] team0: entered allmulticast mode [ 96.381536][ T6458] team_slave_0: entered allmulticast mode [ 96.387279][ T6458] team_slave_1: entered allmulticast mode [ 96.399384][ T6458] bridge0: port 3(team0) entered blocking state [ 96.400135][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.405780][ T6458] bridge0: port 3(team0) entered disabled state [ 96.407528][ T6458] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 96.518067][ T6480] team2: entered promiscuous mode [ 96.523335][ T6480] team2: entered allmulticast mode [ 96.528635][ T6480] 8021q: adding VLAN 0 to HW filter on device team2 [ 96.552868][ T3002] ================================================================== [ 96.560992][ T3002] BUG: KCSAN: data-race in __dentry_kill / step_into_slowpath [ 96.568461][ T3002] [ 96.570797][ T3002] read-write to 0xffff88811a88ff00 of 4 bytes by task 5826 on cpu 1: [ 96.578866][ T3002] __dentry_kill+0x1e2/0x460 [ 96.583484][ T3002] finish_dput+0x2b/0x200 [ 96.587839][ T3002] dput+0x52/0x60 [ 96.591511][ T3002] do_unlinkat+0x217/0x4b0 [ 96.595950][ T3002] __x64_sys_unlink+0x2e/0x40 [ 96.600635][ T3002] x64_sys_call+0x2f48/0x3000 [ 96.605412][ T3002] do_syscall_64+0xc0/0x2a0 [ 96.609948][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.615849][ T3002] [ 96.618173][ T3002] read to 0xffff88811a88ff00 of 4 bytes by task 3002 on cpu 0: [ 96.625719][ T3002] step_into_slowpath+0x139/0x4c0 [ 96.630753][ T3002] path_lookupat+0x330/0x500 [ 96.635361][ T3002] filename_lookup+0x190/0x390 [ 96.640135][ T3002] do_readlinkat+0x7d/0x340 [ 96.644736][ T3002] __x64_sys_readlink+0x47/0x60 [ 96.649629][ T3002] x64_sys_call+0x2af1/0x3000 [ 96.654314][ T3002] do_syscall_64+0xc0/0x2a0 [ 96.658833][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.664734][ T3002] [ 96.667056][ T3002] value changed: 0x00300180 -> 0x00004080 [ 96.672772][ T3002] [ 96.675098][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 96.681249][ T3002] CPU: 0 UID: 0 PID: 3002 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.692191][ T3002] Tainted: [W]=WARN [ 96.696000][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.706081][ T3002] ================================================================== [ 96.715098][ T6489] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 96.727918][ T6489] ..0ªî{X¹¦: entered allmulticast mode [ 96.734815][ T6489] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 96.751744][ T6488] ..1ªî{X¹¦: renamed from ..0ªî{X¹¦ (while UP) [ 96.760218][ T6488] A link change request failed with some changes committed already. Interface ..1ªî{X¹¦ may have been left with an inconsistent configuration, please check.