last executing test programs: 2m26.134889785s ago: executing program 1 (id=156): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x6}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440), 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x150, 0x1170, 0x1170, 0x150, 0x1170, 0x150, 0x1398, 0x1398, 0x218, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0xef4, 0x0, 0x4, 0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'macvlan1\x00', {0xff}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xfffffffffffffed2) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b00000000314010829bd7000fddbdf250900020073797a300000000008004100727865001400330069705f767456300000000000000000000900020073797a3200000000080041007369770014003300736974300000000000000000000000000900020073797a320000000008004100727865001400330070696d726567310000000000000000000900020073797a310000000008004100736977001400330076657468315f766972745f776966690037663d0b1a924c71f82b6d450710406e3b1bd50a3f24e032e2baf97777c67f5645fb053c82d653390010984e42780317c2d7ebb652b0092ba9451e0ea2a3d24143f3df01f1b6b4b0c1ea32f26a20b0d085dff8be18dac4dc31e9766b3fa4a80f9cde53f19f3cde12fcd052ccf6de7b181771030272fb32a379e2f0f88c4491463524c73934db15ac37938b91eb71688c49d893e297f5c695f23d078cdac22125d444be95f9aaeb189bd27182433045f5653b60762e3d3dad3d3d9586c4c8df17ec51d7c35a026ce85fa8e1832ef7ae63cdba87f6fdb71bf18a4e"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x2010000) sendmmsg$inet6(r1, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x48) 2m25.84548981s ago: executing program 1 (id=164): socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000005400000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc724, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m25.747037178s ago: executing program 1 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x80000, &(0x7f0000000600)='\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0xa6b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) clock_adjtime(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = dup(r6) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000206050000000000fffff0000000000005000100060000000900020073797a32000000000000000c000780080012400e00000011000300686173683a69702c706f7274000000000500050002000000"], 0x58}}, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x80c406, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0x1, 0x2b1, &(0x7f0000000100)="$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") 2m25.660402687s ago: executing program 0 (id=169): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x7f, 0x4a9, &(0x7f0000001500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) 2m23.441742122s ago: executing program 0 (id=182): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = memfd_secret(0x0) fchownat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20000, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb201, 0x0) r2 = dup(r1) write$P9_RWALK(r2, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = eventfd2(0xffffffff, 0x1) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f0000000300)={&(0x7f0000000240)=0x2, 0x8, &(0x7f0000000400)=[{}, {}], &(0x7f0000000280)}) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="05022dbd7000fedbdf250100000000000000024100000010001375"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) read$eventfd(r4, &(0x7f0000000040), 0x8) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f00000003c0)={@local, @broadcast}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0xd8b9}, &(0x7f0000000580)=0x8) r5 = mq_open(&(0x7f0000000200)='batadv_slave_\xc5{\xd3l?@\x01\x86\xb3X\x84\xe2\x87\x19\xb3\xc81\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x4, 0xc05}) mq_getsetattr(r5, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r5, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0) 2m23.104474372s ago: executing program 1 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0x1f}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x6}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x6188, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x3}, 0x200, 0x80, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r3, 0x2) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x300080d7}, 0x894) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x1, 0x8c0, 0x3, {}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x38, 0x3, 0x0, 0x0, "649cf69ea3e76f79ccd3238e0834d952b6054bdd457e2802a4c866ea94d240e73fb1c08097bae00c3c267a2b5dcdfb946272ca085f4fa96d531abcde7ae0ca2d"}}, 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x50) r7 = signalfd4(r3, &(0x7f00000003c0), 0x8, 0x80800) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0xfffffffffffffdb8, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="01000000010000000300000000000000", @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYBLOB="030000e0010000d9ff000003c71f2db40e5ba7a4cb8007020000d46fae00"/39], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$pptp(0x18, 0x1, 0x2) sendmsg$nl_netfilter(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="d4030000070a010427bd7000fddbdf25050000015a91b09534c6677cd19ae618cace80219b509fd93990232f5d716d5b1a704ba8eabd787e6202321be03a0f4ec21de05fa92587e4415d5c795a7ff3cde5ad5894ab2135c6cb749338a102660eedf064d45347c21fe66205dfd4f01c2bd660cdf2f35617eb2f09e8b9d1d8320186823143432d97bc91b4424418d6b80c4d93c906bd19c976f32254b7ea76297fe77b079af7505720cb487f69a7941e5c55a043ff6f111ba84c511123aba1719c2357c31aabebd425dfe62b13529271327bf8c98253fdcbb14d0b8eae34017a6221711e6afda88a8e8ebde00238f31764380800a200", @ANYRES32=r9, @ANYBLOB="1400df00fe8000000000000000000000000000bbfa3934f6c5e019e4207ee92cf7b4bd81c087c8ae9d861b0a61e08c116fedd378d8296cd91bccb15f74489f4650da2e79377e1eccd8a9e6fccf5d3ba919b4ba11d346e43af1f26a70bb07339fe88725013245218326b7874b13e0d948f7d3e0561d69c8423910660492305822b035ee1470071992496eca08b7808432da54173a03b242554753063b81f2a86d88086643726bc0076151e310c8a40c587910144eb47602f05a1c86a7320864ac81548a3a926f72e61eb0caae840e2dc3e5f4f26a054e3d8f76dc4701b9319b941bf6ba3d0df377a77b0bde76a9c70cc2825c33b14dbb78d1a55db55c2ae48caa92d0a7793a87902434587d5178ccdc2e52e952d00e21fb82aa86ee7bb3582aaacce2372edd949928e5fe38edc706ad7aadacff0f9f7967f3e4e03287679a9f4cd1f832407454fe50a41dec47a8805133c83dd92ee3255ea8bccd7d84e3e20e2326edd90cc95545bf084d1698e4341c4d8c7e04e0089cf185086daf30792231287283eea8bcf8a781b1ac7ceed1a01238202f514129e06860a50b171cb273b35d3136232d005fcf2d13de34537cf97c136e26164f4147e41ceccf775f72192d88671e1c307d549a255f7c98b05e72f46347a4e8a533fbf1c73bc47f76a834af1d24f59bc4701007764a640b0f190ef5f869a0276387e611a11763e34da4b21af450972efbfdf95b9af5a852de21b9ae7834ead6abe8e84e0369259eabc259663be441409df44c2cdaec4765a535387b1738a93fb60a464ffbe17755956b5ab0e5f3970069804d686dcadfddcab95049aa7efb7d63f49f3a9f0d0800a700080000002ae08637429099f29e0e1447b37e8eb8fbe7e9fac09f67f5a9019befc8c389a906f5fa4bc23eacce8b6f9e4e1e1ad3c7075b08a40abec0d22d85ba979723298d9dbc6603ccfc665955ae3f9d9794de9d9a5527be64e4a357b59083f6cba02f82340f84f34710b187c4ce7a0df590120400348004000080000000"], 0x3d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004800) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r11, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r10, 0x0}]) set_mempolicy(0x2, &(0x7f0000000180)=0xfffffffffffffffa, 0x8) 2m23.018667679s ago: executing program 0 (id=186): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x280}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000100001d44000000000000db0a00fee10000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m22.932503407s ago: executing program 0 (id=188): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000240)={0x27, 0x0, 0x2, 0x6, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) r5 = syz_io_uring_setup(0x3644, &(0x7f0000000980)={0x0, 0xe826, 0x800, 0x0, 0x188}, &(0x7f00000008c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x42db, 0x0, 0x0, 0x0, 0xfffffffffffffe85) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r10 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0), 0x5f) getuid() statx(r2, &(0x7f0000000180)='./file2\x00', 0x4000, 0x100, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x25, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) 2m22.804303768s ago: executing program 1 (id=190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="b0", 0x1, 0x400c0d5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xa2d7}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) 2m22.635510633s ago: executing program 0 (id=194): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="b0", 0x1, 0x400c0d5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xa2d7}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffe0) 2m22.565878339s ago: executing program 1 (id=195): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x7}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0xc0d1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2m22.565703949s ago: executing program 32 (id=195): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x7}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0xc0d1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2m22.245913107s ago: executing program 0 (id=206): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x2, 0x6, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x44, 0xfffffffd, 0x3, 0x3}, 0x10) 2m22.239362978s ago: executing program 33 (id=206): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x2, 0x6, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x44, 0xfffffffd, 0x3, 0x3}, 0x10) 1m21.15333926s ago: executing program 4 (id=832): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') read(r0, &(0x7f0000001180)=""/4096, 0x1000) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000740)={0x15}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)="23a9", 0x2}, {&(0x7f0000002000)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) timer_gettime(r2, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_gettime(r2, &(0x7f0000000080)) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f0000000040)=0x4000b16, 0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x28, r7, 0xa11, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0x20040004) 1m21.085709526s ago: executing program 4 (id=833): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0xfd, 0x0, 0x0, 0x0, 0x10, 0xe529f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7e4, 0x6}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000640)={0x4, 0x1, 0x6, 0xda, 0xb, 0x6, 0x3, 0x2, 0xff, 0x6, 0xd, 0x8, 0x4, 0x1}, 0xe) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f0000000000)=0x1c00) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000fdff0000b7040000fdffffff8500000033000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='\\-]^$\x00', 0xfffffffffffffffd) r10 = add_key$fscrypt_provisioning(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000680)=ANY=[@ANYBLOB="8c0101000000000000eb91666768696a6b6c6d6a6f70715b73747576770922c4216c26fa6735442c305238df7f1200"/57], 0x29, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000600)=@chain={'key_or_keyring:', r10}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1m20.974474706s ago: executing program 4 (id=838): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43b1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xb, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000030001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) syz_open_procfs(0x0, 0x0) 1m20.781898023s ago: executing program 4 (id=842): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0x3, 0x23}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x44000, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) 1m20.739006897s ago: executing program 4 (id=844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x1000000, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x4040082) 1m20.292607736s ago: executing program 4 (id=856): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x108) pipe(&(0x7f00000002c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000340)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 1m20.196768734s ago: executing program 34 (id=856): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x108) pipe(&(0x7f00000002c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000340)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 25.65353557s ago: executing program 6 (id=1489): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0xb0000004}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(0x0, 0x6f5e, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) clock_nanosleep(0x2, 0x1, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0xc4, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x9c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6ce1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xf3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xd}}]}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xfffff001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x57b, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x96, 0xdc}}]}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0xc4}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) sendfile(r5, r1, 0x0, 0x100000000) 25.329915398s ago: executing program 6 (id=1490): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x58010}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x13, 0xa, 0x10b, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x80d0) 25.055956082s ago: executing program 6 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)="882d96000400000000000000", 0xc}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r5, 0xe, &(0x7f0000000040)={0xd, 0x91}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@bh}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@data_journal}, {@commit}]}, 0x0, 0x5a3, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000008061121c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x320}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23.998632816s ago: executing program 6 (id=1505): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200404, &(0x7f0000000280)={[{@noblock_validity}, {@nodelalloc}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000700)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x4a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x7, @local, 0x5}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000380)="4e8c", 0x2}], 0x1, &(0x7f0000000340)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x88}}], 0x18, 0x4855}, 0x4008850) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a6f000210000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) close$binfmt(0xffffffffffffffff) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)={0x0, 0xfb, 0xae, 0x2, 0x20, "11fc1397d51d9e3e7e1e63aeec5e24e2", "b20fca901eeabd6970767fb68bf32b95b1c84c443d009aa029bc42ad853bab12fbc6e5433575f8f6a73139891ffd903887311fafc75a2f66e44e9d000c59301371635068f1aa727a4a1e6cfa3c97609223b6fc6b948509019c3820b3be54d53abae41eb481fd983f3379afedadb456b7258f4f2bc2bb1a8129407de74a80bf1ff81272196efa9fcd757b1890f22289240c0f915335b1f43bf9"}, 0xae, 0x0) 23.233406023s ago: executing program 6 (id=1506): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) io_setup(0x6, &(0x7f0000001380)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, r7}]) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000004fffffe00000000fd0700008500000027000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='!pu\t&&\t\t\t') socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000900)=0x1, 0x4) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000500)={{r3}, r10, 0x2, @unused=[0xf, 0x4, 0x8000000000000001, 0x5], @subvolid=0x200}) 22.489330668s ago: executing program 6 (id=1509): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000206010800000000000000000000fffd0500010006000000050005000a00000005000400000000000900020073797a300000000015000300686173683a69702c706f72742c6e657400000000aab976744f0360021ac166868f11d52583a6dd02eebdd3881f810b0c9e3fc5be416ebc7acd20675bd08a91422a5c3b28924567d6470f41ec7ee9f593b53de328b98d35048d6a93d7ae0f49c7b2fdbae82892e30199feae6259b1cb552891ff2f9b21af81a3388f423092f4e949958f74340aec7873f44b509dba5234898626f8695149885b4802ecdf6885bce1f04bc59d58"], 0x50}}, 0x80) preadv(r1, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/98, 0x62}], 0x1, 0x100, 0xff) 22.454815221s ago: executing program 35 (id=1509): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000206010800000000000000000000fffd0500010006000000050005000a00000005000400000000000900020073797a300000000015000300686173683a69702c706f72742c6e657400000000aab976744f0360021ac166868f11d52583a6dd02eebdd3881f810b0c9e3fc5be416ebc7acd20675bd08a91422a5c3b28924567d6470f41ec7ee9f593b53de328b98d35048d6a93d7ae0f49c7b2fdbae82892e30199feae6259b1cb552891ff2f9b21af81a3388f423092f4e949958f74340aec7873f44b509dba5234898626f8695149885b4802ecdf6885bce1f04bc59d58"], 0x50}}, 0x80) preadv(r1, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/98, 0x62}], 0x1, 0x100, 0xff) 4.65195556s ago: executing program 3 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x4040082) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='fd\x00') open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x200000, 0x80) getdents64(r1, 0xfffffffffffffffe, 0x64) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) read$ptp(r1, &(0x7f0000000000)=""/6, 0x6) 4.325802659s ago: executing program 3 (id=1739): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x3) r1 = socket(0x10, 0x3, 0x0) fcntl$setown(r1, 0x8, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2fc, 0xd64}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x140b, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}]}, 0x50}}, 0x24004000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f00000000c0)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) 3.28931864s ago: executing program 3 (id=1744): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) 3.236648335s ago: executing program 3 (id=1746): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x2000006, &(0x7f0000000340)={[{@uni_xlateno}, {@uni_xlateno}, {@uni_xlateno}, {@utf8}, {@shortname_lower}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_lower}, {@shortname_winnt}]}, 0x25, 0x365, &(0x7f00000009c0)="$eJzs3U9oHNUfAPDvdpJsGtpfcvhB0dPqTRBpKoJ6SigVijloZfHfxcWmWrNrIYsL6SGbvSjFk+JF0JO3HvTYs3gQ8ebBqxakKl7sRQoNjuzu7OxsdqPJYWOLn88hfPN97zvvzcwjMwnJy2vt2Lg4G5du374V8/OlmFk5uxJ3SrEUxyKJvp2Y6P25yXkA4B53J03j97Tvn3t/uDCIPPsB4P7Ve/6/cXKYKB+i+NqJaUwJAJiyA37//9zE7JWpTQsAmKKx5//DI817fsw/k/9OAABw/3rh5VeeXV2LuFCpzEc03mtVW9V4eti+eikuRz3W43Qsxm5E/0Wh/7bQ/fjM+bVzpytdPy9FtVvRqkY02q1q/01hNYnLaT3KsRyLsZTVp3l90q1f7tVXImKn3Rs/GqVWdTYWsvF/WIj1OBOL8f+x+ojza+fOVLIDVBuD+nZEJ+YHJ9GdfxKL8d3rcSXqcTG6tcP5by9XKmfTtZH61vVyrx8AAAAAAAAAAAAAAAAAAAAAAEzDY5XcUr7/Tdpot969MNLhZtY/3x+n2v882x+o098fKC0Pdue5luzdH2h0f55WdSaO/WtnDQAAAAAAAAAAAAAAAAAAAPeW5tZc1Or19c3m1tWNYtAuZN7+5vOvjsegaSYrfSsZVkWWXN9szuZHHnQsHDmJfIg0L0+TkT5ZkEQMOu/Urt/IZ1zsU87HGivvBuWxplI2p1q9fvKhnz6ZVPVnN9jpZZIYuyyjQSkbv9DU+F83MR8Ru/tV7R+UJ9+LPPgjTdP9yrc/Hq+KUsRMHHoaBwi+vvXmA483Tz3Ry3yZbfrwyKOLL/740We/btTq0elfmXp9brO5m04+zoni3enOdbxPUlg/pew6lyashMlBZ5jpbDa3asn3v7304Aff7umcTF4/aTHzzv5jfbE3M9cPShFLg4vwd1OdnbD4u8GTo7fy6kbt1bv56j38jTv16UrtxvbNXw5aVfgiYaMOAAAAAAAAAAAAAAAAAAA4EoU/MD6Ep56f3owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OgN//9/IeiMZQ4S3G3HeFN5fbO57+DHj/RUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4D/srAAD//xu8baw=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002540)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) ftruncate(r0, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x110c, 0x0, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xd, 0x5}, {}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r2) sendmsg$NFC_CMD_VENDOR(r1, 0x0, 0x80) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2, 0x31c}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff}) io_uring_enter(r4, 0x7a91, 0x0, 0x0, 0x0, 0x18) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x44040001, 0x1}) write$char_usb(r0, &(0x7f00000007c0)="f691f427e4fb8ceff1f03473c2b85c097d89fcb4db3fff00e9a96370f19fe73c2932fb62357251626ab360411308a9cc902db1cb99cee9ecd284d588f7f5ca2d64d97bc49f2b48df2df98c48866da818ed9cd681b12171f57033c2dfef43eb901fca16696be8da9d5465f943e54fad690ce52297a52bb255bf7418ab42bb13489d", 0x81) getsockname$packet(r0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r7, 0x0, 0x8094) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='>'], 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181842, 0x24) 2.997931036s ago: executing program 2 (id=1748): r0 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x625, 0x4c1, 0xc1, 0x0, 0x0) 2.994476486s ago: executing program 2 (id=1749): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x63, r6}) 2.970545038s ago: executing program 8 (id=1750): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1010, r0, 0xfffff000) syz_open_pts(r0, 0x31ba02) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4) close_range(r4, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 2.868680577s ago: executing program 2 (id=1751): r0 = socket(0x18, 0x800, 0xfffffffc) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4e25, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0xfffe, 0x1, @remote, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x4e22, 0xa4fffffb, @remote}}}, 0x108) fgetxattr(r0, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00', &(0x7f0000000040)=""/100, 0x64) 2.829718091s ago: executing program 3 (id=1752): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x0) 2.773727186s ago: executing program 2 (id=1753): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x100, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0xb97e8e946f9f2f19, 0x32, 0x43a1bd76, 0x1, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x1, 0xfffff034}, {0x48, 0x0, 0x40, 0x3}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004698002c0000000000059078ac1414330a01010007020000fffd0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0200004e771ffc"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x404c004) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.704369562s ago: executing program 3 (id=1755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, &(0x7f0000000040)) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r3, 0x0, 0x81801) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0296edb3000800"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002000010300000000000000000200000003000001060000000c000c400000000000000006"], 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x44004) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffe, 0x3, 0x5, 0x100}) unshare(0x22020600) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r8, r9, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r10, 0x4) ioctl$TIOCSLCKTRMIOS(r7, 0x5457, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x400d050}, 0x240c881c) 2.547888316s ago: executing program 2 (id=1758): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) getpgid(0x0) close_range(r2, 0xffffffffffffffff, 0x6000000) 2.04461684s ago: executing program 8 (id=1765): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x0) 1.984629695s ago: executing program 7 (id=1766): syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x2, 0x0, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "2313a3101166d6c856214c013c019043"}, @md5sig={0x13, 0x12, "0945e50b171770263892a9d0853ede9d"}]}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg(r3, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$sock_attach_bpf(r3, 0x1, 0xc, &(0x7f00000002c0), 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x58010}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pipe2(&(0x7f0000000000), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x13, 0xa, 0x10b, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x80d0) 1.792214342s ago: executing program 8 (id=1768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002900)={0x40, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80a0) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, 0x0, 0x4001000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffb, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400401a}, 0x4000080) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x47, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 1.634574666s ago: executing program 2 (id=1770): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r1 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) unshare(0x22020400) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.488386669s ago: executing program 5 (id=1771): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'pimreg\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x3, "1f54d18703cc5a48f03db56f16c7395766b94a47ad4b2121ab921de003fda20d", "6c145f10385bfeaae3b0b911ce9d20c9e0897ce0c06a8c726f82227b54580eb0", "78f36de050317ab351653b0e5effa71c13397654c7326b434d0377438f4180ad", "694a51d4ae35798fa1986471a5f792db17a09a7411cc083fd92d730e98e1c49a", "dc36dc9ee5cc307e6dae5a6866dd6e09f6b9a098b0c975d60edfa38a44d17b8d", "0b94f77915cdd5166840b968", 0xa, 0x20008, 0x5, 0x5, 0xfffc}}) faccessat(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x5) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005f80)={0x34, r1, 0x219, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xff7f}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 1.431045524s ago: executing program 7 (id=1772): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r1 = socket(0x2d, 0x2, 0x0) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) close(r4) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=""/4080, 0xff0}], 0x1}, 0x10021) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r9, 0x2) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r10, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) 1.288522356s ago: executing program 5 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendto$unix(r1, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x401}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}]}, 0x50}, 0x1, 0x0, 0x0, 0x40008002}, 0x20000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000008c0)={0x84, @multicast2, 0x4e22, 0x1, 'none\x00', 0x1, 0x10005, 0x204c}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x483, &(0x7f0000000000)={0x20000000000084, @empty, 0x1ffc, 0x200000001, 'fo\x00', 0x15, 0x821, 0x1}, 0x2c) r5 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000c00)=[{r3, 0x2}, {r7, 0x2000}, {r8, 0xa000}, {r3, 0x10}], 0x4, &(0x7f0000000c40)={0x0, 0x3938700}, &(0x7f0000000c80)={[0xdc]}, 0x8) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x84, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x58, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x60, {0x9, 0x21, 0x800, 0x7f, 0x1, {0x22, 0x3a8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xff, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0xd6, 0x90}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x250, 0xb0, 0x3, 0x8, 0x20, 0x1}, 0xa6, &(0x7f00000006c0)={0x5, 0xf, 0xa6, 0x4, [@generic={0x83, 0x10, 0xb, "1c2d56b0328a264da2a7c905419d81b563b8478784f50759136ca6625a08ccdefbb3b898ab693045e66c585f25c58cab867b48129976d28c328da2e3aaa99577a02ef9491176561874f64ece71703b245502fd8a9b3edc5a98c254cb6450d890f1b2aafc0883622cf53c5b9c33b7f1d82d638c2cab7938250672f452bbcffa72"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xb, 0x7, 0xff}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "f216db12c49e159118754cff599dc85a"}]}, 0xa, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x861}}, {0x85, &(0x7f0000000840)=@string={0x85, 0x3, "6b96998a001d3e8fd0899ef23f2f60f0a2f7ab1c7ba57067ece789bed0e18dfbf61467f321f8aa384c6d3c9a7ad5ea94bf51d8b0ee077dd82785a3de2c8dbfef52d67b60bcd746a2278f118559f99485dee844805f31f0666b7f602cbf55746208978f2b48b82c74d65a59f8e0ee00ed67fa2d05ea3034d2e26f29080cf0da7aaf2708"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x444}}, {0x37, &(0x7f0000000940)=@string={0x37, 0x3, "46b6dca9a5ab5b213bf0b65fe225aae494ca18c6dc3c127b35ea271096a21d57e73b774e83e322889e2d8bd91245c1dd1a10a42404"}}, {0xcf, &(0x7f0000000980)=@string={0xcf, 0x3, "d7c1b06b9a4d680065b66330496060863dc2923f429469d54475f7a062c876a45d533bb3d794150798c20a31c7436fda416fc505b99d8101a7da8e3b26153707bb3cbbf17ff7647ec223073cc86613fb9259c61a8b8125097565349d6ddb654a5ff64c95b9b1f605a183e2400c667929827e6f47991bab79229acaf086e0f661604e9f49e05aa5c16a897672de118a8ee0a792a9bbca072b74a7d068bf028eeff6c0f184d398de06a5e876a59caeddbd20a015388d3cc596603681f351ff39205c92323d7c21782c4ab6a1c34c"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x83e}}]}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="050427bd7000fcdbdf250100010008000100", @ANYRES32=r6, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000010038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) 1.287687946s ago: executing program 7 (id=1774): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) pivot_root(0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x20, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) (async) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/101) 1.267097099s ago: executing program 8 (id=1775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r0, 0x0, 0xffffffff00000000}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.13536752s ago: executing program 7 (id=1776): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r2 = semget$private(0x0, 0x7, 0x180) semtimedop(r2, &(0x7f0000000380)=[{0x0, 0x9, 0x800}, {}], 0x2, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfd}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d0}, 0x40) semctl$GETNCNT(r2, 0x0, 0xe, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) exit(0xff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) semget$private(0x0, 0x7, 0x180) (async) semtimedop(r2, &(0x7f0000000380)=[{0x0, 0x9, 0x800}, {}], 0x2, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfd}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d0}, 0x40) (async) semctl$GETNCNT(r2, 0x0, 0xe, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) (async) exit(0xff) (async) 1.008238291s ago: executing program 8 (id=1777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./bus\x00', 0x1010000, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$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") syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2800810, &(0x7f0000002780)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16=0x0], 0x3, 0x171, &(0x7f0000000600)="$eJzs2zGLE0EUB/C3l0RPba4WiwUbq6BWloqcIC4oyhZaKZw2d3LgNatV8JPY+uEEueoKYeQcTTRsMBDXDcnv1+SFPxPehJ0dZmFfXnt7eHB88ub4yWnsFkUM70YZZ0XsxU4MIpsEALBJzlKKr2n062tKqd9+AIDu5f0/pXRxEpc+2f8BYBv8df+/01NjAEBnnP8BYPs8e/7i0b2q2n9alrsRXyZN3dT5M+cPHlb7N8sf9majTpumHkzzWzkv/8xHcflnfrs1vxA3ruf8PLv/uJrLr8RB99MHAACArTAup1rP9+PxojxXvz0fmJ3fz4fWw7g6/H/zAACWd/L+w+Gro6PX7za8GK1HG4rWYmel6/BbSmkuKpYY/vFzXgLr8if806KIiNV+p+87E9C12aLvuxMAAAAAAAAAAAAAAGCRbt9GGvQ9PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj1PQAA//9kAUaX") r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x8000, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @broadcast}}}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) setitimer(0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(0x0, r4) wait4(r4, 0x0, 0x2, 0x0) tkill(r4, 0x28) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001780)={{0x0, 0xc, 0x7fff, 0x9, 0xdef, 0x9, 0xffffffffffffff6f, 0x6, 0x0, 0x6, 0x10000000, 0x9, 0x7, 0x0, 0xdb46}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r6 = fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0x3}]}}}}}}, 0x3a) 946.089437ms ago: executing program 7 (id=1778): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62"], 0x10b8}, 0x0) 930.113318ms ago: executing program 7 (id=1779): unshare(0x24060400) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4180}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x81, 0x0, 0x0, 0x100000001, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0xdd8}, 0x4002, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d4, 0x0, &(0x7f00000000c0), 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg$inet6(r3, &(0x7f0000000c00)={&(0x7f0000000140)={0xa, 0x4e20, 0x1c000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000001c0)="9a", 0x1}], 0x1}, 0xf968b61b71bc8d37) unshare(0x22020400) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) ioctl$EVIOCRMFF(r4, 0x40085507, 0x0) 541.718752ms ago: executing program 5 (id=1781): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0x4e22, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "61eb426d5b5205f95faf5d036b2f12be5a0f33621d38fc74", "48a2ae1e253bc83bc0cbaf9cb8225a1c88c5f71af4878389e4038b8be7b8db01"}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x80001) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xfd, r7, 0x0, 0x3, 0x1}}, 0x20) socket(0x40000000015, 0x5, 0x0) unshare(0x60600) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0xfffffffd, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x6, 0xc4, 0x73b9, 0x1, 0x2, 0x5, 0x101, 0x7, 0x7, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x5, 0x100000, 0x763, 0xd, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xd, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x211000, 0x8, 0x400, 0x79b, 0x2, 0x1, 0x7f, 0x6, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860c, 0x7, 0xaa, 0x81, 0x8, 0x17fffc, 0x4007, 0xfd, 0x9, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x1, 0x4, 0x7, 0x4009, 0x800000e, 0x4, 0x8, 0x8, 0x80000752, 0x0, 0x3, 0x0, 0x10001, 0x1, 0xffffffff, 0xa, 0x6, 0x9, 0x9, 0xfdffffff, 0x2, 0x40, 0x1084, 0x9, 0x5, 0x252, 0x5, 0xf, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2e2, 0xffffdffc, 0x3, 0x2, 0x5, 0x8, 0x0, 0x101, 0x2, 0x40, 0x7, 0x9, 0x4, 0x401, 0x66d1, 0x8, 0x7, 0x1, 0x7, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r9, &(0x7f0000000300)=""/168, 0xa8) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) getdents64(r9, &(0x7f0000000240)=""/179, 0xb3) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040054) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000005403000000000000016e01232443f50b"], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 334.847221ms ago: executing program 5 (id=1782): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/ipv6_route\x00') accept$inet6(r2, &(0x7f0000000680)={0xa, 0x0, 0x0, @private2}, &(0x7f00000006c0)=0x1c) close_range(r0, r1, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000280)={{0xff039010, 0x109003fd}, {0xfd039010, 0x109003ff}, 0x1, 0x4}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000600)=[{&(0x7f0000000ac0)="4191062c1421f8d286fea25179d3bff47ffb95a24f597e0388f330e7dfb81fde917ae89f97d5fde0855ce2942ff541f21652a7409dad35f8886d587bb6e6dc67532c99235c3f4d65696cdb98986ca5f808b1b92c1a374dbcf9109eb576c388dca33df6129f9efd43ccbd58a93f146ce183a410b8959fe192652e32068e0d8e24d8eab4ecbd5ebaa165771a07c890804037074a1ebad3bcdd46b8f34ecb2f4a6e1bbc6ac3d80ea44fbfedf338583f63ba4607f430acc0a98b4fcbb501006052cb83625cbf60ebf28e9095458c1e9971417b2912bbe30037dd5c1ac06f612816e97ac304404619b0c75222e9339f6ba14eac3c1486ac997f919248498f073eb173a9b70dd4e2df0b14c490155bf06e801547ed96f1264b5c220cf3f65681d44cd20b1b2b2067fa91e1c30217b0e5f65358b8b08301da7c4349eeec41fd9a50c651d12551ceb6a6fd4989751a4bbb244b9d3d260ebeb8aad132df7ef16f67663238a327f0ab114f7241b4fb5fc9ea1813dfd2c9fba8858541166adf9cfaa6a4b7d77272d0698f742bdea73a6424f0b586cf40060000000000000031e736e2d15ae7b54e799376ddcfb2b9a8c25d1bdf50eaf8565c2b3927b5887a961fcf7ffd6847ddb974e774e3a4cd7a7766ca8500"/472, 0x1d8}, {&(0x7f0000000e40)="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", 0x224}, {&(0x7f0000000840)="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", 0x118}, {&(0x7f0000000180)="f3b4b2b2fa157df3c4b26fd19a9e8346ddfd46a52873a426006130f5ba7fbc251c8dc80c000000000000007f5d7f6b9c24d78bcabf18f75fb6045d2fcd79051b12fedf3b08cc9331c704199206d700"/91, 0x5b}, {&(0x7f0000000240)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a5d7ca234f8852df8f05000f02b5258ec56ec5fdd5f3c2", 0x44}, {&(0x7f0000000680)="5494c523fb985f80cd31e2ec2d5a", 0xe}], 0x6, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r7, 0x0, 0x2000000002ffff, 0x0) syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01", @ANYRES16=r4], 0x1, 0x11cc, &(0x7f0000003640)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r7, @ANYRES16=r9, @ANYRESHEX=r6], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001240)=ANY=[@ANYBLOB="ac9d00002578ae579ea496b4a550d0798bd014a3122520f3d373c7bbe972342a7f51e574f70c4a3d74b219d5904d52128a245daa3a59a307e295a793359900b642ae81ed996bb4ac04bc18153cd38c25edd25e7afc27bc7e4ba6f16a983999c755d436bebca102435b27206efb96e932d51c24caf494d9339c29a4663e160c1d115be50f589941437d1cfa5b02", @ANYRES16=r9, @ANYBLOB="04002cbd7000ffdbdf2517000000a8000180080003000100ffff08000300000000802400028008000200090000000800040001000000080003000600000008000200000000002c0004001400010002004e22ac1e000100000000000000001400020002004e21000000000000000000000000440002800800020001000000080001000100000008000300030000000800030005000000080003000600000008000100070000000800040002000000080002000180ffff380007800c000300070000000000000008000200060000000800010004000000080002004701000008000200050000000800010001000000040001800c00068008000100080000000400018014000980080002000900000008000100000000803400098008000200060000000800020006000000080002000104000008000200810000000800010008000000080002006a3c00005c00018008000300080000002c0004001400010002004e216401010200000000000000001400020002004e2000000000000000000000000008000300000012001200010069623a76657468315f766c616e00000008000300ff0f0000"], 0x1ac}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="2b0026bd7000fb643fe2b84e13baff69031e48dd9ddbdf251300d50000080003", @ANYRES32=r11, @ANYBLOB="05001301010000000800a40002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048801}, 0x8815) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fb, &(0x7f0000000500)=0x0) io_submit(r13, 0x4, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x3, r8, &(0x7f0000000700)="ae7e00d6a5415b9ed934ccbecaa2fbb406f095b68d06c5f63c74c45c85d59bc898f45a0d246ef139790a45865859ffab2195f9d1947195a256c3dda0a7abe72891c48b410d6b5866d1c8235e9b4ae63325ae43081e6c85c1bde6caea4a489f6617c24777de380bc8d83140e9c91815b27dc8305ab9354adf4144a545eab083ba248d4f4c41fdb687fb3d17ca58d8d687718e4ddb89b8f652e3b15c8a4c5ff66362720aa1094b476b648cff243431a5366a801f22b48183e7ab55d990f18102a70f0fdc47a872e169a00f7714cc2b784aa4", 0xd1, 0x5, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x6, r3, &(0x7f0000000980)="2244b9919d8dfec032515c90e5d25f7aa810465fd60a920f0b5a76a3945e74eec4bbab5b74b98a4e11d2bb0eacd107574ac62bae76e5410f2e26d880b3cdcbdafb058c472a80a083e623ae9756a89424a8d7c818986bbe984ce1437424a3eca748ad6adaad4a51c20a87b32d8335ccc1b739e145978dc170cd13a21f42126d0105ca7fbae57a967dddd074d686fada19e299aebcd61fa2282800d527b3f1c5357a6f901cfdee5a9f04a6cf7d4136d574686ffb662ecec6a4fceb26e4215a4a4ff8de1118420368308b7270337b40fd6dde7d58d366f16ed1d436b57c04ec5a537f3c677832edd4", 0xe7, 0x1, 0x0, 0x3, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x400, 0xffffffffffffffff, &(0x7f0000000cc0)="fa478c26a705e04091be4fb2f5ac5025d0c6cf5d9bc38ab0eba7efbdb83ea2709e374e7106832b91448b50ea02d45357d73930311a96206e6a5125da7f34b2657e37e57970988b20e083389f4a63807f2f843ae6327506dd6b5384509fe1cc3af50c9e4a1607aa9d797d2c5f5ddac638dc30164af04a3a985049146fa21e15c8ad7757f736669985fe1a86ea9699c42e507ffe44b8f3917f6604e320561ee3e0084e27daeb85587c2c914549104b21d0e935117ec0a04defa5844a0d5dd8ba850f19b023faa5331344eca47cd4b345c315090c51f3a04bd3f42c595fa7247876d11fb9f5", 0xe4, 0xfffffffffffff87b, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0xfff9, 0xffffffffffffffff, &(0x7f0000001080)="f1cc4d0d1366930f5783810cea248325576bee1e28bba744c33660e3423d18e684d20b5f94d8fb3856251435e5024c813ba20d26e5795b68f49536cceb0572b77048b8b4842e03218f10a65e59a685811d80ed683cde7225", 0x58, 0x6, 0x0, 0x2, r12}]) 146.117807ms ago: executing program 5 (id=1783): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3e56b40046545a9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2dc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x315b, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x1, 0x106) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 52.578905ms ago: executing program 5 (id=1784): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e2", 0xc7}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=1785): socket(0x2c, 0x2, 0x0) (async) r0 = socket(0x2c, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x100c404, &(0x7f0000000000)=ANY=[@ANYBLOB="2bc2200596041a00646f747369643d00000000", @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c646f74732c6e6f646f74732c6e6f646f74732c7379735f696d6d757461626c652c73686f77657865632c6e6f646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c646d61736b3d30303030303030303030303030303030303030303030362c6e66732c636865636b3d7374726963742c646d61736b3d30303030303030303030303030303030303030303030332c666c7573682c666d61736b3d30303030303030303030303030303030303030303030322c646f74732c6e6f636173652c7375626a5f726f6c653d402ccc252c61707072616973652c6f626a5f757365723d666fe205320c3c2c666f776e65723c", @ANYRESDEC=r1, @ANYBLOB=',appraise,fsuuid=f7be587b-de7b-ad87-ee6e-909ed541,audit,\x00'], 0x1, 0x206, &(0x7f0000000600)="$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") r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x80000, 0x2) futimesat(r2, 0x0, &(0x7f0000000440)={{}, {0x0, 0x2710}}) (async) futimesat(r2, 0x0, &(0x7f0000000440)={{}, {0x0, 0x2710}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r3, @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4000050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) kernel console output (not intermixed with test programs): 2781][ T8790] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1226: corrupted in-inode xattr: e_name out of bounds [ 160.155571][ T8790] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.155837][ T8790] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1226: couldn't read orphan inode 15 (err -117) [ 160.165037][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 160.165060][ C0] EXT4-fs (loop6): initial error at time 1771858905: ext4_iget_extra_inode:5025: inode 15 [ 160.165090][ C0] EXT4-fs (loop6): last error at time 1771858905: ext4_iget_extra_inode:5025: inode 15 [ 160.239083][ T8790] loop6: lost filesystem error report for type 5 error -117 [ 160.887157][ T8797] team0: Port device syz_tun removed [ 160.939397][ T8797] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 161.036327][ T8807] syzkaller0: entered promiscuous mode [ 161.042112][ T8807] syzkaller0: entered allmulticast mode [ 161.048188][ T8811] netlink: 604 bytes leftover after parsing attributes in process `syz.3.1235'. [ 161.300331][ T8823] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.547309][ T8826] FAT-fs (loop5): Directory bread(block 64) failed [ 161.629904][ T8826] FAT-fs (loop5): Directory bread(block 65) failed [ 161.702655][ T8826] FAT-fs (loop5): Directory bread(block 66) failed [ 161.778549][ T8826] FAT-fs (loop5): Directory bread(block 67) failed [ 161.847829][ T8826] FAT-fs (loop5): Directory bread(block 68) failed [ 161.900530][ T8826] FAT-fs (loop5): Directory bread(block 69) failed [ 161.974969][ T8826] FAT-fs (loop5): Directory bread(block 70) failed [ 162.002705][ T8826] FAT-fs (loop5): Directory bread(block 71) failed [ 162.023047][ T8826] FAT-fs (loop5): Directory bread(block 72) failed [ 162.052417][ T8826] FAT-fs (loop5): Directory bread(block 73) failed [ 162.293042][ T8844] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.461706][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 162.461810][ T28] audit: type=1400 audit(1771858908.028:1157): avc: denied { name_bind } for pid=8848 comm="syz.6.1241" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 162.685091][ T28] audit: type=1400 audit(1771858908.258:1158): avc: denied { create } for pid=8848 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 163.023178][ T8863] set_capacity_and_notify: 5 callbacks suppressed [ 163.023199][ T8863] loop5: detected capacity change from 0 to 512 [ 163.087722][ T8863] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.130268][ T8863] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 163.167330][ T8863] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1244: Corrupt directory, running e2fsck is recommended [ 163.197962][ T8863] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 163.244597][ T8863] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1244: corrupted in-inode xattr: e_name out of bounds [ 163.297120][ T8863] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.297559][ T8863] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1244: couldn't read orphan inode 15 (err -117) [ 163.306747][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 163.306769][ C0] EXT4-fs (loop5): initial error at time 1771858908: ext4_iget_extra_inode:5025: inode 15 [ 163.306813][ C0] EXT4-fs (loop5): last error at time 1771858908: ext4_iget_extra_inode:5025: inode 15 [ 163.345852][ T8863] loop5: lost filesystem error report for type 5 error -117 [ 163.385686][ T8872] loop6: detected capacity change from 0 to 512 [ 163.400593][ T28] audit: type=1400 audit(1771858908.948:1159): avc: denied { getopt } for pid=8874 comm="syz.5.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.455559][ T8872] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 163.513618][ T28] audit: type=1326 audit(1771858909.078:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.6.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400a0c629 code=0x7ffc0000 [ 163.576014][ T28] audit: type=1326 audit(1771858909.108:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.6.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f3400a0c629 code=0x7ffc0000 [ 163.604178][ T28] audit: type=1326 audit(1771858909.108:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.6.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400a0c629 code=0x7ffc0000 [ 163.629424][ T8882] netlink: 604 bytes leftover after parsing attributes in process `syz.3.1252'. [ 163.642082][ T28] audit: type=1326 audit(1771858909.108:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8871 comm="syz.6.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400a0c629 code=0x7ffc0000 [ 163.736402][ T8878] loop7: detected capacity change from 0 to 512 [ 163.935537][ T8878] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 164.008036][ T28] audit: type=1400 audit(1771858909.578:1164): avc: denied { shutdown } for pid=8885 comm="syz.6.1253" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.048340][ T28] audit: type=1400 audit(1771858909.618:1165): avc: denied { listen } for pid=8885 comm="syz.6.1253" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.176560][ T8878] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 164.185654][ T8878] System zones: 1-12 [ 164.195626][ T8878] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.1250: corrupted in-inode xattr: e_value size too large [ 164.226555][ T8878] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.232373][ T8878] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1250: couldn't read orphan inode 15 (err -117) [ 164.242449][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 164.242527][ C1] EXT4-fs (loop7): initial error at time 1771858909: ext4_iget_extra_inode:5025: inode 15 [ 164.242700][ C1] EXT4-fs (loop7): last error at time 1771858909: ext4_iget_extra_inode:5025: inode 15 [ 164.302202][ T8878] loop7: lost filesystem error report for type 5 error -117 [ 164.345098][ T8893] loop6: detected capacity change from 0 to 512 [ 164.346344][ T8891] netlink: 'syz.2.1255': attribute type 12 has an invalid length. [ 164.398019][ T8893] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 164.423947][ T8893] EXT4-fs (loop6): group descriptors corrupted! [ 164.544611][ T8899] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 164.620986][ T8905] syzkaller0: entered promiscuous mode [ 164.635037][ T8905] syzkaller0: entered allmulticast mode [ 164.646957][ T8903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.661293][ T8903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.691708][ T8909] loop2: detected capacity change from 0 to 512 [ 164.886236][ T8909] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.004362][ T8916] loop5: detected capacity change from 0 to 1024 [ 165.036024][ T8916] EXT4-fs: inline encryption not supported [ 165.054608][ T8916] EXT4-fs: inline encryption not supported [ 165.276580][ T8933] loop3: detected capacity change from 0 to 512 [ 165.293550][ T8933] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 165.312119][ T8936] netlink: 604 bytes leftover after parsing attributes in process `syz.5.1268'. [ 165.344028][ T8933] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1267: invalid indirect mapped block 4294967295 (level 0) [ 165.371805][ T8933] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 165.372000][ T8933] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1267: invalid indirect mapped block 4294967295 (level 1) [ 165.381252][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 165.381268][ C1] EXT4-fs (loop3): initial error at time 1771858910: ext4_free_branches:1023: inode 16 [ 165.381316][ C1] EXT4-fs (loop3): last error at time 1771858910: ext4_free_branches:1023: inode 16 [ 165.492765][ T8933] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 165.495043][ T8933] EXT4-fs (loop3): 1 orphan inode deleted [ 165.513948][ T8933] EXT4-fs (loop3): 1 truncate cleaned up [ 165.731000][ T28] audit: type=1400 audit(1771858911.298:1166): avc: denied { map } for pid=8960 comm="syz.3.1275" path="pipe:[21034]" dev="pipefs" ino=21034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 165.731654][ T8961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1275'. [ 165.776879][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 165.810108][ T8961] netlink: 'syz.3.1275': attribute type 8 has an invalid length. [ 166.092769][ T8983] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1282'. [ 166.105143][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1282'. [ 166.114173][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1282'. [ 166.157913][ T8988] loop2: detected capacity change from 0 to 512 [ 166.209053][ T8988] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 166.234135][ T8988] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 166.264914][ T8988] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1283: Corrupt directory, running e2fsck is recommended [ 166.289991][ T8988] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 166.306262][ T8988] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1283: corrupted in-inode xattr: e_name out of bounds [ 166.320716][ T8988] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.321385][ T8988] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1283: couldn't read orphan inode 15 (err -117) [ 166.330568][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 166.330609][ C0] EXT4-fs (loop2): initial error at time 1771858911: ext4_iget_extra_inode:5025: inode 15 [ 166.330648][ C0] EXT4-fs (loop2): last error at time 1771858911: ext4_iget_extra_inode:5025: inode 15 [ 166.351640][ T8999] loop3: detected capacity change from 0 to 512 [ 166.359005][ T8988] loop2: lost filesystem error report for type 5 error -117 [ 166.381826][ T8988] EXT4-fs mount: 16 callbacks suppressed [ 166.381846][ T8988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.408448][ T8999] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 166.448103][ T8998] netlink: 'syz.5.1286': attribute type 12 has an invalid length. [ 166.457830][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.465093][ T8999] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 166.487918][ T8999] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1285: Corrupt directory, running e2fsck is recommended [ 166.555642][ T8999] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 166.587751][ T8999] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1285: corrupted in-inode xattr: e_name out of bounds [ 166.603617][ T9008] loop2: detected capacity change from 0 to 256 [ 166.607793][ T8999] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 166.610199][ T8999] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1285: couldn't read orphan inode 15 (err -117) [ 166.619535][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 166.619555][ C0] EXT4-fs (loop3): initial error at time 1771858912: ext4_iget_extra_inode:5025: inode 15 [ 166.619580][ C0] EXT4-fs (loop3): last error at time 1771858912: ext4_iget_extra_inode:5025: inode 15 [ 166.623073][ T9008] msdos: Bad value for 'tz' [ 166.662732][ T8999] loop3: lost filesystem error report for type 5 error -117 [ 166.667357][ T8999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.762488][ T9008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 166.789552][ T9008] ext4 filesystem being mounted at /277/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.810101][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.821399][ T9013] mmap: syz.7.1292 (9013): VmData 29204480 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 166.845075][ T9008] 9p: Bad value for 'rfdno' [ 166.882139][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 166.922201][ T9018] netlink: 604 bytes leftover after parsing attributes in process `syz.5.1294'. [ 167.145742][ T9033] netlink: 'syz.3.1298': attribute type 12 has an invalid length. [ 167.174511][ T9034] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 167.244202][ T9034] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 167.289697][ T9034] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1297: Corrupt directory, running e2fsck is recommended [ 167.322830][ T9034] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 167.341199][ T9034] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.1297: corrupted in-inode xattr: e_name out of bounds [ 167.371168][ T9034] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.374676][ T9034] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1297: couldn't read orphan inode 15 (err -117) [ 167.384011][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 167.384032][ C0] EXT4-fs (loop7): initial error at time 1771858912: ext4_iget_extra_inode:5025: inode 15 [ 167.384063][ C0] EXT4-fs (loop7): last error at time 1771858912: ext4_iget_extra_inode:5025: inode 15 [ 167.450317][ T9034] loop7: lost filesystem error report for type 5 error -117 [ 167.452994][ T9034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.481103][ T9041] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 167.505782][ T9041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 167.518262][ T9041] System zones: 1-12 [ 167.526128][ T7263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.539900][ T9041] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1300: corrupted in-inode xattr: e_value size too large [ 167.578398][ T9041] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 167.579682][ T9041] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1300: couldn't read orphan inode 15 (err -117) [ 167.589426][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 167.589562][ C0] EXT4-fs (loop3): initial error at time 1771858913: ext4_iget_extra_inode:5025: inode 15 [ 167.590060][ C0] EXT4-fs (loop3): last error at time 1771858913: ext4_iget_extra_inode:5025: inode 15 [ 167.637083][ T9041] loop3: lost filesystem error report for type 5 error -117 [ 167.641109][ T9041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.650389][ T9054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.676426][ T9054] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.780185][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.833998][ T9068] 9p: Bad value for 'rfdno' [ 167.864398][ T9068] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1308'. [ 167.908931][ T9074] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 167.917552][ T9074] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 167.925861][ T119] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 167.941257][ T9074] EXT4-fs (loop3): 1 truncate cleaned up [ 167.972213][ T9074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.986270][ T9079] netlink: 'syz.2.1311': attribute type 12 has an invalid length. [ 167.999258][ T119] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 168.015006][ T119] EXT4-fs (loop7): This should not happen!! Data will be lost [ 168.015006][ T119] [ 168.026833][ T9074] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 168.041518][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 168.041531][ T28] audit: type=1400 audit(1771858913.598:1168): avc: denied { create } for pid=9073 comm="syz.3.1310" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 168.091908][ T119] EXT4-fs (loop7): Total free blocks count 0 [ 168.098013][ T119] EXT4-fs (loop7): Free/Dirty block details [ 168.114405][ T119] EXT4-fs (loop7): free_blocks=65280 [ 168.119890][ T119] EXT4-fs (loop7): dirty_blocks=31 [ 168.125328][ T119] EXT4-fs (loop7): Block reservation details [ 168.131376][ T119] EXT4-fs (loop7): i_reserved_data_blocks=31 [ 168.149240][ T7263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.174269][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.186932][ T9087] set_capacity_and_notify: 6 callbacks suppressed [ 168.186951][ T9087] loop2: detected capacity change from 0 to 512 [ 168.221194][ T9087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.249703][ T9087] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.310116][ T28] audit: type=1400 audit(1771858913.878:1169): avc: denied { read } for pid=9092 comm="syz.3.1313" path="socket:[20463]" dev="sockfs" ino=20463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.335842][ T9087] syzkaller0: entered promiscuous mode [ 168.341347][ T9087] syzkaller0: entered allmulticast mode [ 168.394666][ T9114] netlink: 604 bytes leftover after parsing attributes in process `syz.7.1316'. [ 168.537797][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.610085][ T9135] loop2: detected capacity change from 0 to 512 [ 168.628797][ T9136] lo speed is unknown, defaulting to 1000 [ 168.630053][ T9135] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 168.646865][ T9135] System zones: 0-2, 18-18, 34-35 [ 168.654000][ T9135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.684654][ T9135] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.707295][ T9135] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1319'. [ 168.776612][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.865671][ T28] audit: type=1400 audit(1771858914.428:1170): avc: denied { create } for pid=9155 comm="syz.2.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 168.912277][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1322'. [ 168.927980][ T28] audit: type=1400 audit(1771858914.498:1171): avc: denied { sys_admin } for pid=9155 comm="syz.2.1320" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 168.961959][ T9160] loop6: detected capacity change from 0 to 1024 [ 168.998493][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1322'. [ 169.038961][ T9160] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1322'. [ 169.058469][ T9173] netlink: 'syz.2.1324': attribute type 12 has an invalid length. [ 169.109898][ T9160] vlan4: entered allmulticast mode [ 169.124559][ T9160] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 169.136884][ T3672] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.223763][ T28] audit: type=1326 audit(1771858914.788:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.6.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400a0c629 code=0x7ffc0000 [ 169.265439][ T28] audit: type=1326 audit(1771858914.788:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.6.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400a0c629 code=0x7ffc0000 [ 169.344886][ T28] audit: type=1326 audit(1771858914.788:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.6.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f3400a0c629 code=0x7ffc0000 [ 169.396121][ T28] audit: type=1326 audit(1771858914.788:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.6.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400a0c629 code=0x7ffc0000 [ 169.635578][ T28] audit: type=1326 audit(1771858914.788:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.6.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3400a0c629 code=0x7ffc0000 [ 169.777898][ T28] audit: type=1326 audit(1771858914.788:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9187 comm="syz.6.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3400a0c629 code=0x7ffc0000 [ 169.823195][ T9211] loop5: detected capacity change from 0 to 2048 [ 169.895055][ T9211] EXT4-fs: Ignoring removed i_version option [ 169.901206][ T9211] ext4: Unknown parameter 'uid<00000000000000000000' [ 169.971922][ T9223] syzkaller0: entered promiscuous mode [ 169.982917][ T9223] syzkaller0: entered allmulticast mode [ 171.109742][ T9243] loop6: detected capacity change from 0 to 512 [ 171.194859][ T3875] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 171.279961][ T9255] loop7: detected capacity change from 0 to 512 [ 171.318431][ T9258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.340882][ T9255] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 171.355765][ T9258] team0: Unable to change to the same mode the team is in [ 171.488072][ T9263] netlink: 604 bytes leftover after parsing attributes in process `syz.5.1343'. [ 171.505818][ T9255] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 171.555339][ T9255] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1339: Corrupt directory, running e2fsck is recommended [ 171.685092][ T9272] loop3: detected capacity change from 0 to 512 [ 171.720235][ T9255] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 171.778705][ T9272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.809184][ T9255] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.1339: corrupted in-inode xattr: e_name out of bounds [ 171.887060][ T9272] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.932260][ T9255] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.934101][ T9255] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1339: couldn't read orphan inode 15 (err -117) [ 171.943307][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 171.943328][ C0] EXT4-fs (loop7): initial error at time 1771858917: ext4_iget_extra_inode:5025: inode 15 [ 171.943358][ C0] EXT4-fs (loop7): last error at time 1771858917: ext4_iget_extra_inode:5025: inode 15 [ 172.004900][ T9255] loop7: lost filesystem error report for type 5 error -117 [ 172.019853][ T9255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.107135][ T9272] syzkaller0: entered promiscuous mode [ 172.152104][ T9272] syzkaller0: entered allmulticast mode [ 172.205596][ T7263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.251068][ T9288] loop2: detected capacity change from 0 to 512 [ 172.590754][ T9296] loop2: detected capacity change from 0 to 8192 [ 172.602659][ T9296] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.630373][ T9298] FAULT_INJECTION: forcing a failure. [ 172.630373][ T9298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.660381][ T9298] CPU: 0 UID: 0 PID: 9298 Comm: syz.5.1353 Not tainted syzkaller #0 PREEMPT(full) [ 172.660417][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.660435][ T9298] Call Trace: [ 172.660517][ T9298] [ 172.660527][ T9298] __dump_stack+0x1d/0x30 [ 172.660561][ T9298] dump_stack_lvl+0x95/0xd0 [ 172.660651][ T9298] dump_stack+0x15/0x1b [ 172.660681][ T9298] should_fail_ex+0x263/0x280 [ 172.660706][ T9298] should_fail+0xb/0x20 [ 172.660724][ T9298] should_fail_usercopy+0x1a/0x20 [ 172.660817][ T9298] _copy_from_user+0x1c/0xb0 [ 172.660872][ T9298] ___sys_sendmsg+0xc1/0x1e0 [ 172.660950][ T9298] __x64_sys_sendmsg+0xd4/0x160 [ 172.660990][ T9298] x64_sys_call+0x194c/0x3020 [ 172.661026][ T9298] do_syscall_64+0x12c/0x370 [ 172.661168][ T9298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.661198][ T9298] RIP: 0033:0x7fc8b63ac629 [ 172.661216][ T9298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.661242][ T9298] RSP: 002b:00007fc8b4dff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.661266][ T9298] RAX: ffffffffffffffda RBX: 00007fc8b6625fa0 RCX: 00007fc8b63ac629 [ 172.661280][ T9298] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000005 [ 172.661292][ T9298] RBP: 00007fc8b4dff090 R08: 0000000000000000 R09: 0000000000000000 [ 172.661314][ T9298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.661325][ T9298] R13: 00007fc8b6626038 R14: 00007fc8b6625fa0 R15: 00007ffd7562b248 [ 172.661349][ T9298] [ 172.866204][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.913194][ T9303] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.029393][ T9303] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.088056][ T9303] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.135057][ T9303] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.138144][ T9330] netlink: 604 bytes leftover after parsing attributes in process `syz.5.1361'. [ 173.224945][ T3641] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.242283][ T3641] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.254128][ T3641] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.265943][ T3641] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.505373][ T9345] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1366'. [ 173.529206][ T9345] lo speed is unknown, defaulting to 1000 [ 174.038619][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1368'. [ 174.071294][ T9353] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.079237][ T9353] bond2: (slave bond3): Enslaving as an active interface with an up link [ 174.090572][ T9353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1368'. [ 174.101338][ T9353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.180767][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 174.180785][ T28] audit: type=1326 audit(1771858919.748:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b63ac629 code=0x7ffc0000 [ 174.211085][ T28] audit: type=1326 audit(1771858919.748:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b63ac629 code=0x7ffc0000 [ 174.235263][ T28] audit: type=1326 audit(1771858919.748:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc8b63ac629 code=0x7ffc0000 [ 174.259358][ T28] audit: type=1326 audit(1771858919.748:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b63ac629 code=0x7ffc0000 [ 174.283017][ T28] audit: type=1326 audit(1771858919.748:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b63ac629 code=0x7ffc0000 [ 174.306594][ T28] audit: type=1326 audit(1771858919.748:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc8b63ac629 code=0x7ffc0000 [ 174.330228][ T28] audit: type=1326 audit(1771858919.748:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b63ac629 code=0x7ffc0000 [ 174.356878][ T28] audit: type=1326 audit(1771858919.748:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b63ac629 code=0x7ffc0000 [ 174.380655][ T28] audit: type=1326 audit(1771858919.748:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc8b63ac629 code=0x7ffc0000 [ 174.406796][ T28] audit: type=1326 audit(1771858919.748:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9360 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b63ac629 code=0x7ffc0000 [ 174.502427][ T9365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.512013][ T9365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.522872][ T9365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.532063][ T9365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.541210][ T9365] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1373'. [ 174.612137][ T9367] qrtr: Invalid version 86 [ 174.718481][ T9369] loop5: detected capacity change from 0 to 512 [ 174.897794][ T9373] loop5: detected capacity change from 0 to 512 [ 174.907228][ T9373] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 174.919470][ T9373] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 174.929975][ T9373] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1376: Corrupt directory, running e2fsck is recommended [ 174.944225][ T9373] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 174.952556][ T9373] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1376: corrupted in-inode xattr: e_name out of bounds [ 174.966658][ T9373] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.966887][ T9373] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1376: couldn't read orphan inode 15 (err -117) [ 174.976109][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 174.976132][ C0] EXT4-fs (loop5): initial error at time 1771858920: ext4_iget_extra_inode:5025: inode 15 [ 174.976173][ C0] EXT4-fs (loop5): last error at time 1771858920: ext4_iget_extra_inode:5025: inode 15 [ 175.014172][ T9373] loop5: lost filesystem error report for type 5 error -117 [ 175.014741][ T9373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.097632][ T9381] netlink: 604 bytes leftover after parsing attributes in process `syz.2.1378'. [ 175.959177][ T9305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.034715][ T4427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.081892][ T9393] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.143102][ T9393] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.233457][ T9393] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.251443][ T9409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1388'. [ 176.381026][ T9412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 176.432607][ T9413] team0: Unable to change to the same mode the team is in [ 176.450077][ T9393] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.674311][ T9418] netlink: 604 bytes leftover after parsing attributes in process `syz.5.1391'. [ 176.919419][ T3641] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.951867][ T3641] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.059087][ T3641] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.067974][ T3641] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.083750][ T9423] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 177.115649][ T9423] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 177.353372][ T9443] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 177.422697][ T9450] tipc: Enabled bearer , priority 0 [ 177.452282][ T9450] syzkaller0: entered promiscuous mode [ 177.539618][ T9450] syzkaller0: entered allmulticast mode [ 177.558869][ T9450] 9pnet_fd: Insufficient options for proto=fd [ 177.567667][ T9449] tipc: Resetting bearer [ 177.606828][ T9449] tipc: Disabling bearer [ 177.639756][ T9458] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=9458 comm=syz.5.1404 [ 178.173704][ T9470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.189379][ T9470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.278153][ T9477] loop6: detected capacity change from 0 to 128 [ 178.335656][ T9479] syzkaller0: entered promiscuous mode [ 178.344502][ T9479] syzkaller0: entered allmulticast mode [ 178.361219][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1410'. [ 178.370476][ T9477] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1410'. [ 178.500924][ T9484] loop2: detected capacity change from 0 to 128 [ 178.559395][ T9484] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.604231][ T9484] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.694310][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.075497][ T9500] loop7: detected capacity change from 0 to 1764 [ 179.096189][ T9504] loop5: detected capacity change from 0 to 512 [ 179.111857][ T9500] iso9660: Bad value for 'sbsector' [ 179.125753][ T9504] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 179.133976][ T9504] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 179.150511][ T9504] EXT4-fs (loop5): 1 truncate cleaned up [ 179.157020][ T9504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.219283][ T3393] infiniband syz1: ib_query_port failed (-19) [ 179.240463][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1420'. [ 179.322580][ T28] kauditd_printk_skb: 227 callbacks suppressed [ 179.322598][ T28] audit: type=1400 audit(1771858924.888:1435): avc: denied { create } for pid=9503 comm="syz.5.1418" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 179.335704][ T9510] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 4: comm syz.5.1418: lblock 0 mapped to illegal pblock 4 (length 1) [ 179.405079][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1420'. [ 179.413414][ T9510] EXT4-fs (loop5): Remounting filesystem read-only [ 179.459534][ T9515] loop7: detected capacity change from 0 to 512 [ 179.498206][ T9515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.530793][ T9515] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.598131][ T7263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.643672][ T28] audit: type=1326 audit(1771858925.208:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9522 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504cbdc629 code=0x7ffc0000 [ 179.668243][ T9523] FAULT_INJECTION: forcing a failure. [ 179.668243][ T9523] name failslab, interval 1, probability 0, space 0, times 0 [ 179.683050][ T28] audit: type=1326 audit(1771858925.208:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9522 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504cbdc629 code=0x7ffc0000 [ 179.683755][ T9523] CPU: 0 UID: 0 PID: 9523 Comm: syz.2.1426 Not tainted syzkaller #0 PREEMPT(full) [ 179.683868][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.683910][ T9523] Call Trace: [ 179.683930][ T9523] [ 179.684034][ T9523] __dump_stack+0x1d/0x30 [ 179.684112][ T9523] dump_stack_lvl+0x95/0xd0 [ 179.684193][ T9523] dump_stack+0x15/0x1b [ 179.684289][ T9523] should_fail_ex+0x263/0x280 [ 179.684368][ T9523] should_failslab+0x8c/0xb0 [ 179.684431][ T9523] kmem_cache_alloc_noprof+0x66/0x400 [ 179.684508][ T9523] ? audit_log_start+0x34c/0x730 [ 179.684581][ T9523] audit_log_start+0x34c/0x730 [ 179.684745][ T9523] ? kstrtouint_from_user+0xa8/0xf0 [ 179.684817][ T9523] audit_seccomp+0x47/0x100 [ 179.684912][ T9523] ? __seccomp_filter+0x8db/0x1350 [ 179.685057][ T9523] __seccomp_filter+0x8ec/0x1350 [ 179.685166][ T9523] ? __rcu_read_unlock+0x4e/0x70 [ 179.685230][ T9523] ? __fget_files+0x184/0x1c0 [ 179.685304][ T9523] ? mutex_lock+0x57/0x90 [ 179.685415][ T9523] ? mutex_unlock+0x4e/0x90 [ 179.685514][ T9523] __secure_computing+0x81/0x150 [ 179.685612][ T9523] do_syscall_64+0xd3/0x370 [ 179.685741][ T9523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.685852][ T9523] RIP: 0033:0x7f504cbdc629 [ 179.685903][ T9523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.686038][ T9523] RSP: 002b:00007f504b62f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 179.686141][ T9523] RAX: ffffffffffffffda RBX: 00007f504ce55fa0 RCX: 00007f504cbdc629 [ 179.686190][ T9523] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 179.686231][ T9523] RBP: 00007f504b62f090 R08: 0000000000000000 R09: 0000000000000000 [ 179.686271][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.686311][ T9523] R13: 00007f504ce56038 R14: 00007f504ce55fa0 R15: 00007ffefd094b48 [ 179.686373][ T9523] [ 179.686559][ T9523] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 179.737961][ T28] audit: type=1326 audit(1771858925.238:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9522 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f504cbdc629 code=0x7ffc0000 [ 179.742127][ T9523] audit: out of memory in audit_log_start [ 179.765488][ T28] audit: type=1326 audit(1771858925.238:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9522 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504cbdc629 code=0x7ffc0000 [ 179.962681][ T28] audit: type=1326 audit(1771858925.238:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9522 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f504cbdc629 code=0x7ffc0000 [ 179.987531][ T28] audit: type=1326 audit(1771858925.238:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9522 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504cbdc629 code=0x7ffc0000 [ 179.988065][ T4427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.011026][ T28] audit: type=1326 audit(1771858925.238:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9522 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f504cb9cece code=0x7ffc0000 [ 180.063889][ T9526] netlink: 'syz.7.1424': attribute type 12 has an invalid length. [ 180.071791][ T9533] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 180.074679][ T9533] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.117031][ T9536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1428'. [ 180.176798][ T9540] netlink: 'syz.7.1431': attribute type 1 has an invalid length. [ 180.199747][ T9540] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 180.218987][ T9540] veth3: entered promiscuous mode [ 180.225933][ T9540] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 180.236505][ T9540] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1431'. [ 180.253845][ T9540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.255153][ T3639] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 180.397710][ T4012] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 180.429244][ T9550] loop5: detected capacity change from 0 to 512 [ 180.443294][ T9557] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.464624][ T9550] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 180.493939][ T9545] FAULT_INJECTION: forcing a failure. [ 180.493939][ T9545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.519653][ T9550] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 180.538865][ T9557] team0: Unable to change to the same mode the team is in [ 180.546370][ T9545] CPU: 0 UID: 0 PID: 9545 Comm: syz.2.1434 Not tainted syzkaller #0 PREEMPT(full) [ 180.546473][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.546494][ T9545] Call Trace: [ 180.546505][ T9545] [ 180.546515][ T9545] __dump_stack+0x1d/0x30 [ 180.546598][ T9545] dump_stack_lvl+0x95/0xd0 [ 180.546629][ T9545] dump_stack+0x15/0x1b [ 180.546718][ T9545] should_fail_ex+0x263/0x280 [ 180.546743][ T9545] should_fail+0xb/0x20 [ 180.546765][ T9545] should_fail_usercopy+0x1a/0x20 [ 180.546796][ T9545] _copy_from_iter+0xcf/0xea0 [ 180.546829][ T9545] ? __tsan_memcpy+0x26c/0x3c0 [ 180.546987][ T9545] netlink_sendmsg+0x4ae/0x6f0 [ 180.547025][ T9545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.547067][ T9545] ____sys_sendmsg+0x5af/0x600 [ 180.547100][ T9545] ___sys_sendmsg+0x195/0x1e0 [ 180.547148][ T9545] __x64_sys_sendmsg+0xd4/0x160 [ 180.547280][ T9545] x64_sys_call+0x194c/0x3020 [ 180.547351][ T9545] do_syscall_64+0x12c/0x370 [ 180.547399][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.547426][ T9545] RIP: 0033:0x7f504cbdc629 [ 180.547444][ T9545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.547464][ T9545] RSP: 002b:00007f504b62f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.547535][ T9545] RAX: ffffffffffffffda RBX: 00007f504ce55fa0 RCX: 00007f504cbdc629 [ 180.547559][ T9545] RDX: 0000000020048040 RSI: 0000200000000280 RDI: 0000000000000008 [ 180.547620][ T9545] RBP: 00007f504b62f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.547634][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.547648][ T9545] R13: 00007f504ce56038 R14: 00007f504ce55fa0 R15: 00007ffefd094b48 [ 180.547778][ T9545] [ 180.575200][ T9550] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1435: Corrupt directory, running e2fsck is recommended [ 180.704674][ T9567] loop7: detected capacity change from 0 to 128 [ 180.708003][ T9550] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 180.715285][ T9567] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.729524][ T9550] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1435: corrupted in-inode xattr: e_name out of bounds [ 180.786973][ T9550] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.797066][ T9550] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1435: couldn't read orphan inode 15 (err -117) [ 180.806247][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 180.806267][ C1] EXT4-fs (loop5): initial error at time 1771858926: ext4_iget_extra_inode:5025: inode 15 [ 180.806308][ C1] EXT4-fs (loop5): last error at time 1771858926: ext4_iget_extra_inode:5025: inode 15 [ 180.844895][ T9550] loop5: lost filesystem error report for type 5 error -117 [ 180.845600][ T9550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.866251][ T9567] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.896325][ T9567] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1440'. [ 180.921818][ T9571] loop3: detected capacity change from 0 to 512 [ 180.949863][ T9571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.981793][ T9571] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.006269][ T4427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.023842][ T9578] bond1: option min_links: invalid value (18446744073709551601) [ 181.033455][ T9578] bond1: option min_links: allowed values 0 - 2147483647 [ 181.071961][ T9578] bond1 (unregistering): Released all slaves [ 181.085308][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.105536][ T9582] lo speed is unknown, defaulting to 1000 [ 181.131736][ T9585] af_packet: tpacket_rcv: packet too big, clamped from 65536 to 3952. macoff=96 [ 181.535076][ T3677] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.887511][ T9617] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1455'. [ 181.910198][ T9614] loop6: detected capacity change from 0 to 512 [ 181.919165][ T9614] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 181.931949][ T9614] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 181.942528][ T9614] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1454: Corrupt directory, running e2fsck is recommended [ 181.957456][ T9614] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 181.973129][ T9614] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1454: corrupted in-inode xattr: e_name out of bounds [ 181.995063][ T9614] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 182.004835][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 182.020515][ C0] EXT4-fs (loop6): initial error at time 1771858927: ext4_iget_extra_inode:5025: inode 15 [ 182.030504][ C0] EXT4-fs (loop6): last error at time 1771858927: ext4_iget_extra_inode:5025: inode 15 [ 182.070360][ T9614] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1454: couldn't read orphan inode 15 (err -117) [ 182.085208][ T9622] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1456' sets config #0 [ 182.087842][ T9614] loop6: lost filesystem error report for type 5 error -117 [ 182.106107][ T9622] Unsupported ieee802154 address type: 0 [ 182.164287][ T9614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.225569][ T4458] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.240876][ T9628] loop3: detected capacity change from 0 to 1024 [ 182.339080][ T9647] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.429723][ T9647] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.462658][ T9655] lo speed is unknown, defaulting to 1000 [ 182.520042][ T9647] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.584722][ T9647] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.613491][ T9659] loop5: detected capacity change from 0 to 512 [ 182.691533][ T9659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.755706][ T4012] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.785547][ T3677] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.794223][ T3641] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.824866][ T3641] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.940990][ T9659] EXT4-fs (loop5): orphan cleanup on readonly fs [ 182.963119][ T9659] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 182.992385][ T9659] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 183.017049][ T9659] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.1468: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 183.036626][ T9679] lo speed is unknown, defaulting to 1000 [ 183.081167][ T9687] loop2: detected capacity change from 0 to 512 [ 183.105293][ T9659] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 183.113451][ T9689] FAULT_INJECTION: forcing a failure. [ 183.113451][ T9689] name failslab, interval 1, probability 0, space 0, times 0 [ 183.122653][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 183.122676][ C1] EXT4-fs (loop5): last error at time 1771858928: ext4_ext_check_inode:521: inode 13 [ 183.153528][ T9659] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1468: couldn't read orphan inode 13 (err -117) [ 183.174576][ T9687] EXT4-fs (loop2): 1 truncate cleaned up [ 183.180864][ T9687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.195320][ T9659] loop5: lost filesystem error report for type 5 error -117 [ 183.208105][ T9659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.239062][ T9689] CPU: 1 UID: 0 PID: 9689 Comm: syz.7.1475 Not tainted syzkaller #0 PREEMPT(full) [ 183.239093][ T9689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.239110][ T9689] Call Trace: [ 183.239117][ T9689] [ 183.239127][ T9689] __dump_stack+0x1d/0x30 [ 183.239161][ T9689] dump_stack_lvl+0x95/0xd0 [ 183.239266][ T9689] dump_stack+0x15/0x1b [ 183.239288][ T9689] should_fail_ex+0x263/0x280 [ 183.239320][ T9689] should_failslab+0x8c/0xb0 [ 183.239345][ T9689] kmem_cache_alloc_noprof+0x66/0x400 [ 183.239429][ T9689] ? audit_log_start+0x34c/0x730 [ 183.239463][ T9689] audit_log_start+0x34c/0x730 [ 183.239487][ T9689] ? kstrtouint_from_user+0xa8/0xf0 [ 183.239581][ T9689] audit_seccomp+0x47/0x100 [ 183.239713][ T9689] ? __seccomp_filter+0x8db/0x1350 [ 183.239784][ T9689] __seccomp_filter+0x8ec/0x1350 [ 183.239823][ T9689] ? __rcu_read_unlock+0x4e/0x70 [ 183.239845][ T9689] ? __fget_files+0x184/0x1c0 [ 183.239952][ T9689] ? mutex_lock+0x57/0x90 [ 183.239985][ T9689] ? mutex_unlock+0x4e/0x90 [ 183.240024][ T9689] __secure_computing+0x81/0x150 [ 183.240096][ T9689] do_syscall_64+0xd3/0x370 [ 183.240140][ T9689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.240195][ T9689] RIP: 0033:0x7f194ba3c629 [ 183.240211][ T9689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.240233][ T9689] RSP: 002b:00007f194a48f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 183.240258][ T9689] RAX: ffffffffffffffda RBX: 00007f194bcb5fa0 RCX: 00007f194ba3c629 [ 183.240330][ T9689] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 183.240342][ T9689] RBP: 00007f194a48f090 R08: 0000000000000000 R09: 0000000000000000 [ 183.240354][ T9689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.240372][ T9689] R13: 00007f194bcb6038 R14: 00007f194bcb5fa0 R15: 00007ffe94134168 [ 183.240418][ T9689] [ 183.479537][ T4427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.501904][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.647114][ T9692] loop6: detected capacity change from 0 to 128 [ 183.994295][ T9714] loop7: detected capacity change from 0 to 512 [ 184.116699][ T9714] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.161102][ T9714] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.261738][ T9726] loop5: detected capacity change from 0 to 1024 [ 184.268900][ T9726] EXT4-fs: Ignoring removed bh option [ 184.276796][ T9727] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.305826][ T9726] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 184.351732][ T9725] lo speed is unknown, defaulting to 1000 [ 184.538901][ T9714] syzkaller0: entered promiscuous mode [ 184.611265][ T9736] 0: reclassify loop, rule prio 0, protocol 800 [ 184.671688][ T9714] syzkaller0: entered allmulticast mode [ 184.823450][ T7263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.948373][ T9742] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1491'. [ 184.984362][ T9748] netlink: 'syz.5.1493': attribute type 3 has an invalid length. [ 184.992301][ T9748] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1493'. [ 185.197460][ T9764] FAULT_INJECTION: forcing a failure. [ 185.197460][ T9764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.226891][ T9764] CPU: 0 UID: 0 PID: 9764 Comm: syz.7.1499 Not tainted syzkaller #0 PREEMPT(full) [ 185.226923][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 185.226936][ T9764] Call Trace: [ 185.226942][ T9764] [ 185.226949][ T9764] __dump_stack+0x1d/0x30 [ 185.226978][ T9764] dump_stack_lvl+0x95/0xd0 [ 185.227065][ T9764] dump_stack+0x15/0x1b [ 185.227095][ T9764] should_fail_ex+0x263/0x280 [ 185.227123][ T9764] should_fail+0xb/0x20 [ 185.227141][ T9764] should_fail_usercopy+0x1a/0x20 [ 185.227165][ T9764] _copy_from_user+0x1c/0xb0 [ 185.227295][ T9764] ___sys_sendmsg+0xc1/0x1e0 [ 185.227416][ T9764] __x64_sys_sendmsg+0xd4/0x160 [ 185.227449][ T9764] x64_sys_call+0x194c/0x3020 [ 185.227476][ T9764] do_syscall_64+0x12c/0x370 [ 185.227583][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.227605][ T9764] RIP: 0033:0x7f194ba3c629 [ 185.227686][ T9764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.227705][ T9764] RSP: 002b:00007f194a48f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.227739][ T9764] RAX: ffffffffffffffda RBX: 00007f194bcb5fa0 RCX: 00007f194ba3c629 [ 185.227758][ T9764] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 185.227775][ T9764] RBP: 00007f194a48f090 R08: 0000000000000000 R09: 0000000000000000 [ 185.227792][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.227808][ T9764] R13: 00007f194bcb6038 R14: 00007f194bcb5fa0 R15: 00007ffe94134168 [ 185.227828][ T9764] [ 185.457465][ T9766] loop6: detected capacity change from 0 to 1024 [ 185.464365][ T9766] EXT4-fs: Ignoring removed bh option [ 185.761850][ T9772] loop7: detected capacity change from 0 to 512 [ 185.891864][ T9772] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.7.1501: corrupted xattr block 95: invalid header [ 185.906048][ T9766] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 185.943871][ T9772] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 185.944184][ T9772] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 185.953421][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 185.953441][ C0] EXT4-fs (loop7): initial error at time 1771858931: ext4_expand_extra_isize_ea:2808: inode 11 [ 185.953474][ C0] EXT4-fs (loop7): last error at time 1771858931: ext4_expand_extra_isize_ea:2808: inode 11 [ 185.994138][ T9772] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1501: bg 0: block 7: invalid block bitmap [ 186.015035][ T9772] loop7: lost filesystem error report for type 5 error -117 [ 186.025099][ T9772] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 186.055159][ T9772] loop7: lost filesystem error report for type 5 error -117 [ 186.138178][ T9788] loop6: detected capacity change from 0 to 1024 [ 186.152117][ T9772] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2970: inode #11: comm syz.7.1501: corrupted xattr block 95: invalid header [ 186.169658][ T9788] EXT4-fs: Ignoring removed orlov option [ 186.178984][ T9788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.194982][ T9772] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 186.218534][ T9772] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117) [ 186.237405][ T9772] EXT4-fs (loop7): 1 orphan inode deleted [ 186.240002][ T9791] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1514'. [ 186.244241][ T9772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.265305][ T9788] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c118, mo2=0002] [ 186.276530][ T9788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.368556][ T9795] loop3: detected capacity change from 0 to 1024 [ 186.376282][ T9795] EXT4-fs: Ignoring removed bh option [ 186.458147][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 186.458162][ T28] audit: type=1400 audit(1771858932.028:1490): avc: denied { create } for pid=9771 comm="syz.7.1501" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 186.525182][ T9795] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 186.586368][ T28] audit: type=1400 audit(1771858932.068:1491): avc: denied { mounton } for pid=9787 comm="syz.6.1505" path="/256/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 186.864931][ T9788] loop6: detected capacity change from 1024 to 64 [ 186.884544][ T9772] syz.7.1501 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 186.900629][ T4458] EXT4-fs error (device loop6): ext4_lookup:1785: inode #11: comm syz-executor: iget: bogus i_mode (101) [ 186.913588][ T4458] EXT4-fs error (device loop6): ext4_lookup:1785: inode #11: comm syz-executor: iget: bogus i_mode (101) [ 186.926211][ T9772] CPU: 0 UID: 0 PID: 9772 Comm: syz.7.1501 Not tainted syzkaller #0 PREEMPT(full) [ 186.926246][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.926263][ T9772] Call Trace: [ 186.926272][ T9772] [ 186.926282][ T9772] __dump_stack+0x1d/0x30 [ 186.926333][ T9772] dump_stack_lvl+0x95/0xd0 [ 186.926366][ T9772] dump_stack+0x15/0x1b [ 186.926396][ T9772] dump_header+0x80/0x240 [ 186.926428][ T9772] oom_kill_process+0x295/0x350 [ 186.926455][ T9772] out_of_memory+0x97d/0xb80 [ 186.926504][ T9772] try_charge_memcg+0x62e/0xa10 [ 186.926558][ T9772] obj_cgroup_charge_pages+0x23/0xc0 [ 186.926639][ T9772] __memcg_kmem_charge_page+0x9e/0x170 [ 186.926675][ T9772] __alloc_frozen_pages_noprof+0x18a/0x360 [ 186.926715][ T9772] alloc_pages_bulk_noprof+0x4aa/0x530 [ 186.926785][ T9772] ? policy_nodemask+0x417/0x5e0 [ 186.926821][ T9772] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 186.926881][ T9772] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 186.926972][ T9772] ? alloc_pages_mpol+0x217/0x260 [ 186.927010][ T9772] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 186.927057][ T9772] __kvmalloc_node_noprof+0x3d4/0x650 [ 186.927115][ T9772] ? futex_hash_allocate+0x190/0x9d0 [ 186.927161][ T9772] ? futex_hash_allocate+0x190/0x9d0 [ 186.927202][ T9772] futex_hash_allocate+0x190/0x9d0 [ 186.927323][ T9772] ? cap_task_prctl+0x13f/0x6e0 [ 186.927350][ T9772] futex_hash_prctl+0xd8/0xf0 [ 186.927389][ T9772] __se_sys_prctl+0xa3d/0x13f0 [ 186.927497][ T9772] __x64_sys_prctl+0x67/0x80 [ 186.927533][ T9772] x64_sys_call+0x2533/0x3020 [ 186.927568][ T9772] do_syscall_64+0x12c/0x370 [ 186.927645][ T9772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.927675][ T9772] RIP: 0033:0x7f194ba3c629 [ 186.927695][ T9772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.927721][ T9772] RSP: 002b:00007f194a48f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 186.927813][ T9772] RAX: ffffffffffffffda RBX: 00007f194bcb5fa0 RCX: 00007f194ba3c629 [ 186.927840][ T9772] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 186.927857][ T9772] RBP: 00007f194bad2b39 R08: 0000000000000000 R09: 0000000000000000 [ 186.927875][ T9772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.927905][ T9772] R13: 00007f194bcb6038 R14: 00007f194bcb5fa0 R15: 00007ffe94134168 [ 186.927950][ T9772] [ 186.928088][ T9772] memory: usage 283016kB, limit 307200kB, failcnt 55 [ 187.174948][ T9772] memory+swap: usage 95908kB, limit 9007199254740988kB, failcnt 0 [ 187.182822][ T9772] kmem: usage 90492kB, limit 9007199254740988kB, failcnt 0 [ 187.190174][ T9772] Memory cgroup stats for /syz7: [ 187.190514][ T9772] cache 12288 [ 187.198916][ T9772] rss 32768 [ 187.202069][ T9772] shmem 0 [ 187.205223][ T9772] mapped_file 0 [ 187.208742][ T9772] dirty 0 [ 187.211747][ T9772] writeback 0 [ 187.215166][ T9772] workingset_refault_anon 473 [ 187.219897][ T9772] workingset_refault_file 0 [ 187.224473][ T9772] swap 626688 [ 187.227856][ T9772] swapcached 17416192 [ 187.231894][ T9772] pgpgin 73546 [ 187.235437][ T9772] pgpgout 73535 [ 187.239039][ T9772] pgfault 67333 [ 187.242557][ T9772] pgmajfault 15 [ 187.246119][ T9772] inactive_anon 0 [ 187.249895][ T9772] active_anon 24576 [ 187.253749][ T9772] inactive_file 12288 [ 187.257901][ T9772] active_file 0 [ 187.261409][ T9772] unevictable 0 [ 187.264944][ T9772] hierarchical_memory_limit 314572800 [ 187.270358][ T9772] hierarchical_memsw_limit 9223372036854771712 [ 187.303153][ T9772] total_cache 12288 [ 187.307130][ T9772] total_rss 32768 [ 187.310814][ T9772] total_shmem 0 [ 187.314295][ T9772] total_mapped_file 0 [ 187.318552][ T9772] total_dirty 0 [ 187.322170][ T9772] total_writeback 0 [ 187.374227][ T9772] total_workingset_refault_anon 473 [ 187.380659][ T9772] total_workingset_refault_file 0 [ 187.386203][ T9772] total_swap 626688 [ 187.390291][ T9772] total_swapcached 17416192 [ 187.396672][ T9772] total_pgpgin 73546 [ 187.400601][ T9772] total_pgpgout 73535 [ 187.404604][ T9772] total_pgfault 67333 [ 187.408772][ T9772] total_pgmajfault 15 [ 187.412781][ T9772] total_inactive_anon 0 [ 187.417484][ T9772] total_active_anon 24576 [ 187.421910][ T9772] total_inactive_file 12288 [ 187.426497][ T9772] total_active_file 0 [ 187.430495][ T9772] total_unevictable 0 [ 187.434524][ T9772] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1501,pid=9771,uid=0 [ 187.449856][ T9772] Memory cgroup out of memory: Killed process 9772 (syz.7.1501) total-vm:94296kB, anon-rss:1252kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 187.557461][ T4458] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.574483][ T9793] kmmpd-loop6: attempt to access beyond end of device [ 187.574483][ T9793] loop6: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 187.589120][ T9793] buffer_io_error: 8 callbacks suppressed [ 187.589140][ T9793] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 187.604123][ T7263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.647028][ T9805] netlink: 'syz.7.1508': attribute type 10 has an invalid length. [ 187.655706][ T9805] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1508'. [ 187.664935][ T9805] dummy0: entered promiscuous mode [ 187.670191][ T9805] dummy0: entered allmulticast mode [ 187.676302][ T9805] bridge0: port 1(dummy0) entered blocking state [ 187.682916][ T9805] bridge0: port 1(dummy0) entered disabled state [ 187.690630][ T9805] bridge0: port 1(dummy0) entered blocking state [ 187.697072][ T9805] bridge0: port 1(dummy0) entered forwarding state [ 187.705219][ T9807] loop7: detected capacity change from 0 to 128 [ 187.716518][ T9807] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.737607][ T9807] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.815456][ T9806] lo speed is unknown, defaulting to 1000 [ 187.882286][ T9806] chnl_net:caif_netlink_parms(): no params data found [ 187.928896][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.936478][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.943898][ T9806] bridge_slave_0: entered allmulticast mode [ 187.951753][ T9806] bridge_slave_0: entered promiscuous mode [ 187.958969][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.967017][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.974255][ T9806] bridge_slave_1: entered allmulticast mode [ 187.981030][ T3672] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.981889][ T9806] bridge_slave_1: entered promiscuous mode [ 188.021693][ T9806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.032340][ T9806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.052913][ T9806] team0: Port device team_slave_0 added [ 188.059457][ T9806] team0: Port device team_slave_1 added [ 188.077318][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.084274][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.110316][ T9806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.121735][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.128740][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.154887][ T9806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.183039][ T9806] hsr_slave_0: entered promiscuous mode [ 188.189291][ T9806] hsr_slave_1: entered promiscuous mode [ 188.195381][ T9806] debugfs: 'hsr0' already exists in 'hsr' [ 188.201123][ T9806] Cannot create hsr debugfs directory [ 188.843839][ T9777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.864042][ T9806] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 188.896707][ T9806] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 188.911404][ T9828] loop7: detected capacity change from 0 to 512 [ 188.921788][ T9806] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 188.947722][ T9806] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 188.983768][ T9828] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.997414][ T9828] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.018153][ T9845] loop5: detected capacity change from 0 to 1024 [ 189.066778][ T9845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.091713][ T9806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.100066][ T9828] syzkaller0: entered promiscuous mode [ 189.105617][ T9828] syzkaller0: entered allmulticast mode [ 189.125046][ T9828] 0: reclassify loop, rule prio 0, protocol 800 [ 189.125555][ T9806] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.154305][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.161444][ T3641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.193759][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.200891][ T3641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.237283][ T9845] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1517: missing EA_INODE flag [ 189.251288][ T9806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.256616][ T9845] EXT4-fs (loop5): Remounting filesystem read-only [ 189.284203][ T9845] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1517'. [ 189.287424][ T9806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.314327][ T7263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.400028][ T9861] loop7: detected capacity change from 0 to 256 [ 189.401705][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'. [ 189.429913][ T4427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.473429][ T9806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.484985][ T28] audit: type=1326 audit(1771858935.048:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9865 comm="syz.3.1524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff53637c629 code=0x0 [ 189.488830][ T9861] FAT-fs (loop7): IO charset cp737 not found [ 189.520435][ T9870] FAULT_INJECTION: forcing a failure. [ 189.520435][ T9870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.535850][ T9871] 9p: Bad value for 'wfdno' [ 189.559699][ T9870] CPU: 0 UID: 0 PID: 9870 Comm: syz.5.1523 Not tainted syzkaller #0 PREEMPT(full) [ 189.559814][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.559830][ T9870] Call Trace: [ 189.559839][ T9870] [ 189.559930][ T9870] __dump_stack+0x1d/0x30 [ 189.560009][ T9870] dump_stack_lvl+0x95/0xd0 [ 189.560100][ T9870] dump_stack+0x15/0x1b [ 189.560122][ T9870] should_fail_ex+0x263/0x280 [ 189.560150][ T9870] should_fail+0xb/0x20 [ 189.560249][ T9870] should_fail_usercopy+0x1a/0x20 [ 189.560339][ T9870] _copy_to_user+0x20/0xa0 [ 189.560367][ T9870] simple_read_from_buffer+0xb5/0x130 [ 189.560390][ T9870] proc_fail_nth_read+0x10e/0x150 [ 189.560419][ T9870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.560526][ T9870] vfs_read+0x1ab/0x7f0 [ 189.560573][ T9870] ? __rcu_read_unlock+0x4e/0x70 [ 189.560606][ T9870] ? __fget_files+0x184/0x1c0 [ 189.560636][ T9870] ? mutex_lock+0x57/0x90 [ 189.560665][ T9870] ksys_read+0xdc/0x1a0 [ 189.560766][ T9870] __x64_sys_read+0x40/0x50 [ 189.560802][ T9870] x64_sys_call+0x2886/0x3020 [ 189.560905][ T9870] do_syscall_64+0x12c/0x370 [ 189.560945][ T9870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.560974][ T9870] RIP: 0033:0x7fc8b636cece [ 189.560994][ T9870] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 189.561065][ T9870] RSP: 002b:00007fc8b4dfefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.561157][ T9870] RAX: ffffffffffffffda RBX: 00007fc8b4dff6c0 RCX: 00007fc8b636cece [ 189.561235][ T9870] RDX: 000000000000000f RSI: 00007fc8b4dff0a0 RDI: 0000000000000003 [ 189.561322][ T9870] RBP: 00007fc8b4dff090 R08: 0000000000000000 R09: 0000000000000000 [ 189.561335][ T9870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.561350][ T9870] R13: 00007fc8b6626038 R14: 00007fc8b6625fa0 R15: 00007ffd7562b248 [ 189.561370][ T9870] [ 189.987640][ T9896] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.997760][ T9901] netlink: 'syz.5.1530': attribute type 83 has an invalid length. [ 190.045119][ T9806] veth0_vlan: entered promiscuous mode [ 190.053839][ T9806] veth1_vlan: entered promiscuous mode [ 190.077177][ T9806] veth0_macvtap: entered promiscuous mode [ 190.085845][ T9806] veth1_macvtap: entered promiscuous mode [ 190.096775][ T9896] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.111970][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.126219][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.142387][ T4012] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.151964][ T4012] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.162368][ T9896] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.173341][ T4012] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.182134][ T4012] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.219725][ T9896] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.332195][ T3677] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.402793][ T3623] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.468624][ T3623] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.583485][ T3623] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.929425][ T9925] loop7: detected capacity change from 0 to 512 [ 190.972443][ T9926] loop2: detected capacity change from 0 to 1024 [ 190.979283][ T9926] EXT4-fs: Ignoring removed bh option [ 191.001784][ T9926] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 191.419651][ T9931] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1539'. [ 191.481606][ T9937] loop5: detected capacity change from 0 to 512 [ 191.491225][ T9937] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 191.544999][ T9937] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 191.582577][ T9937] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1541: Corrupt directory, running e2fsck is recommended [ 191.596921][ T9937] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 191.598084][ T9917] loop3: detected capacity change from 0 to 512 [ 191.606962][ T9937] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1541: corrupted in-inode xattr: e_name out of bounds [ 191.625622][ T9937] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.626046][ T9937] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1541: couldn't read orphan inode 15 (err -117) [ 191.635277][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 191.635293][ C1] EXT4-fs (loop5): initial error at time 1771858937: ext4_iget_extra_inode:5025: inode 15 [ 191.635317][ C1] EXT4-fs (loop5): last error at time 1771858937: ext4_iget_extra_inode:5025: inode 15 [ 191.673454][ T9937] loop5: lost filesystem error report for type 5 error -117 [ 191.700778][ T9942] lo speed is unknown, defaulting to 1000 [ 191.735075][ T9937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.750676][ T9917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.767184][ T9917] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.805915][ T9946] loop8: detected capacity change from 0 to 128 [ 191.837927][ T9917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=9917 comm=syz.3.1534 [ 191.852146][ T9952] loop7: detected capacity change from 0 to 128 [ 191.902559][ T4427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.947277][ T9956] loop2: detected capacity change from 0 to 512 [ 191.996733][ T9956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.016414][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.027725][ T9956] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.063076][ T9956] tmpfs: Bad value for 'nr_inodes' [ 192.103006][ T28] audit: type=1400 audit(1771858937.658:1493): avc: denied { watch watch_reads } for pid=9963 comm="syz.3.1548" path="/proc/sys" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1 [ 192.135590][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.172613][ T9970] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.178573][ T28] audit: type=1326 audit(1771858937.718:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9966 comm="syz.5.1550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8b63ac629 code=0x0 [ 192.244445][ T9977] FAULT_INJECTION: forcing a failure. [ 192.244445][ T9977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.291295][ T9982] loop3: detected capacity change from 0 to 512 [ 192.311844][ T9977] CPU: 0 UID: 0 PID: 9977 Comm: syz.2.1552 Not tainted syzkaller #0 PREEMPT(full) [ 192.311877][ T9977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.311911][ T9977] Call Trace: [ 192.311919][ T9977] [ 192.311927][ T9977] __dump_stack+0x1d/0x30 [ 192.311954][ T9977] dump_stack_lvl+0x95/0xd0 [ 192.311977][ T9977] dump_stack+0x15/0x1b [ 192.311999][ T9977] should_fail_ex+0x263/0x280 [ 192.312028][ T9977] should_fail+0xb/0x20 [ 192.312142][ T9977] should_fail_usercopy+0x1a/0x20 [ 192.312170][ T9977] _copy_from_user+0x1c/0xb0 [ 192.312226][ T9977] ___sys_sendmsg+0xc1/0x1e0 [ 192.312267][ T9977] __x64_sys_sendmsg+0xd4/0x160 [ 192.312309][ T9977] x64_sys_call+0x194c/0x3020 [ 192.312346][ T9977] do_syscall_64+0x12c/0x370 [ 192.312455][ T9977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.312481][ T9977] RIP: 0033:0x7f504cbdc629 [ 192.312501][ T9977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.312520][ T9977] RSP: 002b:00007f504b62f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.312593][ T9977] RAX: ffffffffffffffda RBX: 00007f504ce55fa0 RCX: 00007f504cbdc629 [ 192.312622][ T9977] RDX: 0000000024040090 RSI: 0000200000000040 RDI: 0000000000000004 [ 192.312639][ T9977] RBP: 00007f504b62f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.312655][ T9977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.312671][ T9977] R13: 00007f504ce56038 R14: 00007f504ce55fa0 R15: 00007ffefd094b48 [ 192.312698][ T9977] [ 192.501057][ T28] audit: type=1400 audit(1771858938.058:1495): avc: denied { wake_alarm } for pid=9983 comm="syz.8.1557" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.523688][ T9982] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 192.540491][ T9982] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 192.576596][ T9984] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1557'. [ 192.587999][ T9982] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1556: Corrupt directory, running e2fsck is recommended [ 192.603394][ T28] audit: type=1400 audit(1771858938.168:1496): avc: denied { read } for pid=9986 comm="syz.2.1558" path="socket:[25441]" dev="sockfs" ino=25441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 192.626138][ T9984] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1557'. [ 192.636753][ T9982] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 192.645377][ T9982] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1556: corrupted in-inode xattr: e_name out of bounds [ 192.663955][ T9982] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.664165][ T9982] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1556: couldn't read orphan inode 15 (err -117) [ 192.673438][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 192.673456][ C0] EXT4-fs (loop3): initial error at time 1771858938: ext4_iget_extra_inode:5025: inode 15 [ 192.673491][ C0] EXT4-fs (loop3): last error at time 1771858938: ext4_iget_extra_inode:5025: inode 15 [ 192.713103][ T9982] loop3: lost filesystem error report for type 5 error -117 [ 192.713837][ T9982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.809271][ T9992] loop2: detected capacity change from 0 to 8192 [ 192.823143][ T9999] lo speed is unknown, defaulting to 1000 [ 192.879626][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.905383][T10005] netlink: 'syz.7.1565': attribute type 1 has an invalid length. [ 192.934489][ T9992] loop2: p1 < > p3[EZD] [ 192.939710][ T9992] loop2: p3 start 3238002688 is beyond EOD, truncated [ 192.983773][ T3000] loop2: p1 < > p3[EZD] [ 192.993501][ T3000] loop2: p3 start 3238002688 is beyond EOD, truncated [ 193.056742][T10008] loop8: detected capacity change from 0 to 512 [ 193.098684][ T28] audit: type=1400 audit(1771858938.668:1497): avc: denied { setopt } for pid=10015 comm="syz.3.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.164927][ T28] audit: type=1400 audit(1771858938.668:1498): avc: denied { mounton } for pid=10015 comm="syz.3.1569" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 193.190138][T10008] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.240295][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 193.266787][T10008] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.302665][T10026] netlink: 'syz.2.1571': attribute type 12 has an invalid length. [ 193.644006][T10037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.657499][T10037] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.688078][T10037] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 193.698965][T10037] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 193.709143][T10037] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.1575: Failed to acquire dquot type 1 [ 193.905793][T10045] EXT4-fs: inline encryption not supported [ 193.972681][T10045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.076739][ T28] audit: type=1400 audit(1771858939.648:1499): avc: denied { lock } for pid=10044 comm="syz.7.1577" path="socket:[26500]" dev="sockfs" ino=26500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 194.488648][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.498507][ T9806] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.583259][T10078] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.738601][ T7263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.232261][T10078] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.304249][T10109] hub 8-0:1.0: USB hub found [ 195.309006][T10109] hub 8-0:1.0: 8 ports detected [ 195.384692][T10109] all (unregistering): Released all slaves [ 195.411520][T10078] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.490417][T10078] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.524100][T10115] EXT4-fs: Ignoring removed orlov option [ 195.574095][T10115] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 195.655001][T10115] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 195.676192][ T3645] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.737583][T10115] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.1585: corrupted in-inode xattr: e_value size too large [ 195.799070][ T3645] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.824886][ T3645] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.833215][T10115] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 195.833493][T10115] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1585: couldn't read orphan inode 15 (err -117) [ 195.842677][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 195.842698][ C1] EXT4-fs (loop8): initial error at time 1771858941: ext4_iget_extra_inode:5025: inode 15 [ 195.842750][ C1] EXT4-fs (loop8): last error at time 1771858941: ext4_iget_extra_inode:5025: inode 15 [ 195.884887][T10115] loop8: lost filesystem error report for type 5 error -117 [ 195.890987][ T3645] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.958552][T10121] set_capacity_and_notify: 3 callbacks suppressed [ 195.958566][T10121] loop3: detected capacity change from 0 to 512 [ 195.976251][T10122] veth1_macvtap: left promiscuous mode [ 196.030802][T10121] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.082055][T10118] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 196.115990][T10121] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 196.127135][ T28] audit: type=1326 audit(1771858941.698:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10128 comm="syz.2.1589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f504cbdc629 code=0x0 [ 196.156282][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1582'. [ 196.626782][ T3312] EXT4-fs unmount: 3 callbacks suppressed [ 196.626808][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.054753][T10163] loop3: detected capacity change from 0 to 256 [ 197.118247][T10163] FAT-fs (loop3): IO charset cp737 not found [ 197.157950][T10163] loop3: detected capacity change from 0 to 128 [ 197.198222][T10164] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1601'. [ 197.215345][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'. [ 197.223079][T10177] netlink: 'syz.8.1605': attribute type 12 has an invalid length. [ 197.258554][T10164] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1601'. [ 197.326097][T10182] loop2: detected capacity change from 0 to 512 [ 197.365076][T10182] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 197.378094][T10182] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 197.388616][T10182] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1607: Corrupt directory, running e2fsck is recommended [ 197.409352][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 197.409451][ T28] audit: type=1326 audit(1771858942.968:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.8.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 197.410568][T10182] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 197.448629][T10182] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1607: corrupted in-inode xattr: e_name out of bounds [ 197.450274][ T28] audit: type=1326 audit(1771858942.968:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.8.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 197.462678][T10182] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.495030][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 197.511666][ C1] EXT4-fs (loop2): initial error at time 1771858943: ext4_iget_extra_inode:5025: inode 15 [ 197.512166][ C1] EXT4-fs (loop2): last error at time 1771858943: ext4_iget_extra_inode:5025: inode 15 [ 197.536934][T10182] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1607: couldn't read orphan inode 15 (err -117) [ 197.536988][T10182] loop2: lost filesystem error report for type 5 error -117 [ 197.537606][T10182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.546568][ T28] audit: type=1326 audit(1771858942.968:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.8.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 197.546613][ T28] audit: type=1326 audit(1771858942.968:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.8.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 197.546673][ T28] audit: type=1326 audit(1771858942.968:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.8.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 197.546707][ T28] audit: type=1326 audit(1771858942.968:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.8.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 197.546740][ T28] audit: type=1326 audit(1771858942.978:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.8.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 197.546843][ T28] audit: type=1326 audit(1771858942.978:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.8.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 197.546868][ T28] audit: type=1326 audit(1771858942.978:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.8.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 197.546893][ T28] audit: type=1326 audit(1771858942.978:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10183 comm="syz.8.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 197.603218][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.714589][T10184] batman_adv: batadv0: Adding interface: dummy0 [ 197.861391][T10184] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.886958][T10184] batman_adv: batadv0: Interface activated: dummy0 [ 198.020772][T10190] batadv0: mtu less than device minimum [ 198.034975][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.052352][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.064785][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.078529][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.094844][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.112233][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.128525][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.146902][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.161683][T10190] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.218845][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1614'. [ 198.230407][T10212] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.297614][T10212] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.313046][T10247] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.1618'. [ 198.358692][T10212] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.394582][T10256] loop8: detected capacity change from 0 to 512 [ 198.405317][T10249] netlink: 'syz.2.1619': attribute type 12 has an invalid length. [ 198.406731][T10212] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.429290][T10256] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 198.443524][T10259] loop5: detected capacity change from 0 to 512 [ 198.450964][T10256] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 198.461706][T10256] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1621: Corrupt directory, running e2fsck is recommended [ 198.478328][T10259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.492196][T10256] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 198.515734][T10256] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.1621: corrupted in-inode xattr: e_name out of bounds [ 198.530507][T10259] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.557556][ T3667] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.565427][T10256] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 198.566007][T10256] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1621: couldn't read orphan inode 15 (err -117) [ 198.575186][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 198.575218][ C0] EXT4-fs (loop8): initial error at time 1771858944: ext4_iget_extra_inode:5025: inode 15 [ 198.575260][ C0] EXT4-fs (loop8): last error at time 1771858944: ext4_iget_extra_inode:5025: inode 15 [ 198.620417][ T3645] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.624922][T10256] loop8: lost filesystem error report for type 5 error -117 [ 198.630926][ T3645] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.646727][T10256] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.671636][ T3612] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.685006][T10259] syzkaller0: entered promiscuous mode [ 198.690576][T10259] syzkaller0: entered allmulticast mode [ 198.732823][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1626'. [ 198.742978][ T9806] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.862550][T10275] loop8: detected capacity change from 0 to 512 [ 198.870567][T10275] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 198.895363][T10275] EXT4-fs (loop8): 1 truncate cleaned up [ 198.907572][T10275] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.981183][ T9806] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.003166][T10286] veth1_macvtap: left promiscuous mode [ 199.024215][T10286] netlink: 'syz.8.1632': attribute type 21 has an invalid length. [ 199.032430][T10286] netlink: 144 bytes leftover after parsing attributes in process `syz.8.1632'. [ 199.055834][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1632'. [ 199.102477][T10289] netlink: 'syz.8.1633': attribute type 10 has an invalid length. [ 199.186271][T10294] loop8: detected capacity change from 0 to 512 [ 199.219834][T10294] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1635: inode has both inline data and extents flags [ 199.233687][T10294] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 199.233878][T10294] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1635: couldn't read orphan inode 15 (err -117) [ 199.243180][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 199.243204][ C0] EXT4-fs (loop8): initial error at time 1771858944: ext4_orphan_get:1391: inode 15 [ 199.243254][ C0] EXT4-fs (loop8): last error at time 1771858944: ext4_orphan_get:1391: inode 15 [ 199.281037][T10294] loop8: lost filesystem error report for type 5 error -117 [ 199.281760][T10294] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.404270][ T9806] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.443176][T10299] loop8: detected capacity change from 0 to 512 [ 199.458087][T10299] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.469933][T10299] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 199.480451][T10299] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1637: Corrupt directory, running e2fsck is recommended [ 199.494824][T10299] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 199.503121][T10299] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.1637: corrupted in-inode xattr: e_name out of bounds [ 199.517264][T10299] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 199.521262][T10299] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1637: couldn't read orphan inode 15 (err -117) [ 199.529062][ T4427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.530656][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 199.557762][ C1] EXT4-fs (loop8): initial error at time 1771858945: ext4_iget_extra_inode:5025: inode 15 [ 199.567735][ C1] EXT4-fs (loop8): last error at time 1771858945: ext4_iget_extra_inode:5025: inode 15 [ 199.577685][T10299] loop8: lost filesystem error report for type 5 error -117 [ 199.578413][T10299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.628700][ T9806] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.641272][T10304] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.690928][T10314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1643'. [ 199.702589][T10304] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.757021][T10304] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.807616][T10304] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.820950][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'. [ 199.860135][ T3636] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.868574][ T3636] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.882551][ T3636] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.895821][ T3636] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.905442][T10325] netlink: 'syz.7.1647': attribute type 12 has an invalid length. [ 199.927026][T10331] loop2: detected capacity change from 0 to 512 [ 199.946366][T10331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.071745][T10342] FAULT_INJECTION: forcing a failure. [ 200.071745][T10342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.090643][T10342] CPU: 0 UID: 0 PID: 10342 Comm: syz.5.1652 Not tainted syzkaller #0 PREEMPT(full) [ 200.090693][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.090708][T10342] Call Trace: [ 200.090716][T10342] [ 200.090724][T10342] __dump_stack+0x1d/0x30 [ 200.090755][T10342] dump_stack_lvl+0x95/0xd0 [ 200.090782][T10342] dump_stack+0x15/0x1b [ 200.090823][T10342] should_fail_ex+0x263/0x280 [ 200.090924][T10342] should_fail+0xb/0x20 [ 200.090945][T10342] should_fail_usercopy+0x1a/0x20 [ 200.090971][T10342] _copy_from_user+0x1c/0xb0 [ 200.091029][T10342] ___sys_sendmsg+0xc1/0x1e0 [ 200.091113][T10342] __x64_sys_sendmsg+0xd4/0x160 [ 200.091149][T10342] x64_sys_call+0x194c/0x3020 [ 200.091237][T10342] do_syscall_64+0x12c/0x370 [ 200.091277][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.091302][T10342] RIP: 0033:0x7fc8b63ac629 [ 200.091320][T10342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.091342][T10342] RSP: 002b:00007fc8b4dff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.091415][T10342] RAX: ffffffffffffffda RBX: 00007fc8b6625fa0 RCX: 00007fc8b63ac629 [ 200.091434][T10342] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 200.091449][T10342] RBP: 00007fc8b4dff090 R08: 0000000000000000 R09: 0000000000000000 [ 200.091463][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.091477][T10342] R13: 00007fc8b6626038 R14: 00007fc8b6625fa0 R15: 00007ffd7562b248 [ 200.091570][T10342] [ 200.972424][T10365] loop7: detected capacity change from 0 to 1024 [ 201.213923][T10380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.222652][T10380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.801787][T10388] bridge0: port 1(dummy0) entered disabled state [ 202.809981][T10331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.855207][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.926122][T10405] __nla_validate_parse: 66 callbacks suppressed [ 202.926144][T10405] netlink: 564 bytes leftover after parsing attributes in process `syz.2.1673'. [ 202.944883][ T28] kauditd_printk_skb: 2644 callbacks suppressed [ 202.944901][ T28] audit: type=1400 audit(1771858948.508:4156): avc: denied { listen } for pid=10406 comm="syz.7.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.072589][T10417] loop7: detected capacity change from 0 to 164 [ 203.098938][T10417] ISOFS: unable to read i-node block [ 203.110614][T10417] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 203.143553][T10422] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1681'. [ 203.224628][ T28] audit: type=1400 audit(1771858948.788:4157): avc: denied { listen } for pid=10427 comm="syz.3.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.264642][T10430] loop7: detected capacity change from 0 to 512 [ 203.272100][T10432] loop3: detected capacity change from 0 to 256 [ 203.283763][T10426] batman_adv: batadv0: Interface deactivated: dummy0 [ 203.292501][T10426] batman_adv: batadv0: Removing interface: dummy0 [ 203.311264][T10426] bridge_slave_0: left allmulticast mode [ 203.324740][T10426] bridge_slave_0: left promiscuous mode [ 203.337087][T10430] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.339851][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.360820][T10426] bridge_slave_1: left allmulticast mode [ 203.366959][T10426] bridge_slave_1: left promiscuous mode [ 203.372844][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.383066][T10426] bond0: (slave bond_slave_0): Releasing backup interface [ 203.393836][T10426] bond0: (slave bond_slave_1): Releasing backup interface [ 203.401194][T10430] EXT4-fs error (device loop7): ext4_add_entry:2415: inode #2: comm syz.7.1684: Directory hole found for htree leaf block 0 [ 203.420255][T10426] team0: Failed to send options change via netlink (err -105) [ 203.428220][T10426] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 203.438133][T10426] team0: Port device team_slave_0 removed [ 203.447449][T10426] team0: Failed to send options change via netlink (err -105) [ 203.455373][T10426] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 203.465416][T10426] team0: Port device team_slave_1 removed [ 203.488280][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.512907][ T7263] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 203.523161][T10426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.551067][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.559607][T10426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.569947][T10426] net_ratelimit: 13 callbacks suppressed [ 203.569963][T10426] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.592928][T10433] team0: Failed to send options change via netlink (err -105) [ 203.629420][T10433] team0: Mode changed to "loadbalance" [ 203.642334][T10447] netlink: 'syz.7.1689': attribute type 10 has an invalid length. [ 203.692369][T10453] syz_tun: entered allmulticast mode [ 203.738930][T10456] lo speed is unknown, defaulting to 1000 [ 203.745378][T10451] syz_tun: left allmulticast mode [ 203.757873][ T28] audit: type=1326 audit(1771862995.328:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10457 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53637c629 code=0x7ffc0000 [ 203.804341][ T28] audit: type=1326 audit(1771862995.348:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10457 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53637c629 code=0x7ffc0000 [ 203.842168][ T28] audit: type=1326 audit(1771862995.348:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10457 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7ff53637c629 code=0x7ffc0000 [ 203.884606][ T28] audit: type=1326 audit(1771862995.348:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10457 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53637c629 code=0x7ffc0000 [ 203.908529][ T28] audit: type=1326 audit(1771862995.348:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10457 comm="syz.3.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53637c629 code=0x7ffc0000 [ 203.940884][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1696'. [ 203.999880][ T28] audit: type=1326 audit(1771862995.528:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 204.043715][ T28] audit: type=1326 audit(1771862995.528:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 204.047867][T10473] loop8: detected capacity change from 0 to 764 [ 204.118194][ T28] audit: type=1326 audit(1771862995.528:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10464 comm="syz.8.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e725c629 code=0x7ffc0000 [ 204.351530][T10492] netlink: 'syz.8.1706': attribute type 12 has an invalid length. [ 204.391405][T10487] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 204.408492][T10493] team0: Unable to change to the same mode the team is in [ 204.467056][T10498] loop8: detected capacity change from 0 to 512 [ 204.489160][T10503] loop2: detected capacity change from 0 to 512 [ 204.521241][T10498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.536559][T10498] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.547399][T10503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.564519][T10511] loop5: detected capacity change from 0 to 512 [ 204.572677][T10503] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.583896][T10511] EXT4-fs: Ignoring removed bh option [ 204.592600][T10498] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.1708: iget: bad i_size value: 2533274857506816 [ 204.606958][T10511] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 204.620478][T10511] EXT4-fs (loop5): 1 truncate cleaned up [ 204.627082][T10498] EXT4-fs warning (device loop8): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 204.636823][T10511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.664605][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.692127][ T9806] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.711912][T10511] random: crng reseeded on system resumption [ 204.766450][ T4427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.892089][T10537] loop5: detected capacity change from 0 to 512 [ 204.917096][T10534] netlink: 'syz.8.1719': attribute type 12 has an invalid length. [ 204.927297][T10537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.958157][ T4427] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.016421][T10546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 205.048993][T10546] team0: Unable to change to the same mode the team is in [ 205.124277][T10560] FAULT_INJECTION: forcing a failure. [ 205.124277][T10560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.137900][T10560] CPU: 0 UID: 0 PID: 10560 Comm: syz.5.1728 Not tainted syzkaller #0 PREEMPT(full) [ 205.137928][T10560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.137942][T10560] Call Trace: [ 205.137949][T10560] [ 205.137957][T10560] __dump_stack+0x1d/0x30 [ 205.138087][T10560] dump_stack_lvl+0x95/0xd0 [ 205.138111][T10560] dump_stack+0x15/0x1b [ 205.138173][T10560] should_fail_ex+0x263/0x280 [ 205.138203][T10560] should_fail+0xb/0x20 [ 205.138221][T10560] should_fail_usercopy+0x1a/0x20 [ 205.138275][T10560] _copy_from_user+0x1c/0xb0 [ 205.138302][T10560] ucma_write+0xd8/0x260 [ 205.138355][T10560] vfs_writev+0x42b/0x900 [ 205.138379][T10560] ? __pfx_ucma_write+0x10/0x10 [ 205.138424][T10560] do_writev+0xe9/0x210 [ 205.138513][T10560] __x64_sys_writev+0x45/0x50 [ 205.138563][T10560] x64_sys_call+0x1c0c/0x3020 [ 205.138592][T10560] do_syscall_64+0x12c/0x370 [ 205.138628][T10560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.138652][T10560] RIP: 0033:0x7fc8b63ac629 [ 205.138733][T10560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.138750][T10560] RSP: 002b:00007fc8b4dff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 205.138781][T10560] RAX: ffffffffffffffda RBX: 00007fc8b6625fa0 RCX: 00007fc8b63ac629 [ 205.138795][T10560] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 205.138808][T10560] RBP: 00007fc8b4dff090 R08: 0000000000000000 R09: 0000000000000000 [ 205.138821][T10560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.138843][T10560] R13: 00007fc8b6626038 R14: 00007fc8b6625fa0 R15: 00007ffd7562b248 [ 205.138941][T10560] [ 206.097787][T10601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=10601 comm=syz.3.1739 [ 206.451545][T10590] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.631710][T10594] team0: Unable to change to the same mode the team is in [ 206.708780][T10605] loop2: detected capacity change from 0 to 256 [ 206.796756][T10605] FAT-fs (loop2): IO charset cp737 not found [ 206.836156][T10605] loop2: detected capacity change from 0 to 128 [ 206.859444][T10614] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.903718][T10617] loop3: detected capacity change from 0 to 256 [ 206.928882][T10614] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.939227][T10617] FAT-fs (loop3): IO charset cp737 not found [ 206.960137][T10617] loop3: detected capacity change from 0 to 128 [ 207.038152][T10614] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.118218][T10614] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.212875][ T3645] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.228779][ T3636] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.238697][T10633] loop8: detected capacity change from 0 to 128 [ 207.268125][ T3636] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.296420][T10633] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.314995][ T3645] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.360404][T10633] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.477714][T10642] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 207.535400][T10647] team0: Unable to change to the same mode the team is in [ 207.890194][T10671] loop7: detected capacity change from 0 to 512 [ 207.900858][T10671] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 207.921283][T10671] EXT4-fs (loop7): orphan cleanup on readonly fs [ 207.928222][T10671] EXT4-fs error (device loop7): __ext4_iget:5378: inode #11: block 8: comm syz.7.1764: invalid block [ 207.939705][T10671] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 207.939961][T10671] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1764: couldn't read orphan inode 11 (err -117) [ 207.949139][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 207.949164][ C0] EXT4-fs (loop7): initial error at time 1771862999: __ext4_iget:5378: inode 11: block 8 [ 207.949205][ C0] EXT4-fs (loop7): last error at time 1771862999: __ext4_iget:5378: inode 11: block 8 [ 207.987608][T10671] loop7: lost filesystem error report for type 5 error -117 [ 207.988424][T10671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 208.089289][ T9806] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.107633][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 208.107649][ T28] audit: type=1400 audit(1771862999.678:4263): avc: denied { remount } for pid=10670 comm="syz.7.1764" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 208.154415][ T7263] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.204288][T10676] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.347393][T10676] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.392355][T10686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10686 comm=syz.5.1769 [ 208.421006][T10684] loop8: detected capacity change from 0 to 512 [ 208.436786][T10676] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.474977][T10684] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 208.497596][T10676] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.521749][T10684] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 208.544598][T10690] netlink: 'syz.5.1780': attribute type 12 has an invalid length. [ 208.563834][ T3637] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.593233][T10684] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.1768: Corrupt directory, running e2fsck is recommended [ 208.611632][ T3637] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.653343][ T3637] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.663391][T10684] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 208.682645][ T3637] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.705005][T10684] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.1768: corrupted in-inode xattr: e_name out of bounds [ 208.719844][T10684] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 208.720023][T10684] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1768: couldn't read orphan inode 15 (err -117) [ 208.729278][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 208.729318][ C1] EXT4-fs (loop8): initial error at time 1771863000: ext4_iget_extra_inode:5025: inode 15 [ 208.729363][ C1] EXT4-fs (loop8): last error at time 1771863000: ext4_iget_extra_inode:5025: inode 15 [ 208.777418][T10684] loop8: lost filesystem error report for type 5 error -117 [ 208.778187][T10684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.836765][T10701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 208.844999][ T1032] IPVS: starting estimator thread 0... [ 208.855537][ T9806] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.882430][ T28] audit: type=1326 audit(1771863000.448:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.7.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194ba3c629 code=0x7ffc0000 [ 208.889533][T10701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.955710][T10701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.961005][T10702] IPVS: using max 2256 ests per chain, 112800 per kthread [ 208.972427][ T28] audit: type=1326 audit(1771863000.448:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.7.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f194ba3c629 code=0x7ffc0000 [ 208.999865][T10701] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1773'. [ 209.097276][T10715] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 209.097276][T10715] The task syz.7.1776 (10715) triggered the difference, watch for misbehavior. [ 209.160566][T10717] loop8: detected capacity change from 0 to 256 [ 209.244563][T10717] FAT-fs (loop8): Directory bread(block 64) failed [ 209.254980][T10717] FAT-fs (loop8): Directory bread(block 65) failed [ 209.261626][T10717] FAT-fs (loop8): Directory bread(block 66) failed [ 209.268374][T10717] FAT-fs (loop8): Directory bread(block 67) failed [ 209.280501][T10717] FAT-fs (loop8): Directory bread(block 68) failed [ 209.304861][T10717] FAT-fs (loop8): Directory bread(block 69) failed [ 209.321641][T10717] FAT-fs (loop8): Directory bread(block 70) failed [ 209.338398][T10717] FAT-fs (loop8): Directory bread(block 71) failed [ 209.372452][T10717] FAT-fs (loop8): Directory bread(block 72) failed [ 209.394898][T10717] FAT-fs (loop8): Directory bread(block 73) failed [ 209.436800][T10717] syz.8.1777 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 209.906444][T10732] loop5: detected capacity change from 0 to 8192 [ 209.996819][T10735] netlink: 'syz.5.1783': attribute type 12 has an invalid length. [ 210.159606][T10739] ================================================================== [ 210.167755][T10739] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 210.175087][T10739] [ 210.177439][T10739] write to 0xffff88810cb66e00 of 8 bytes by task 10738 on cpu 1: [ 210.185182][T10739] mas_wmb_replace+0x20d/0x1610 [ 210.190079][T10739] mas_wr_store_entry+0x16b6/0x2ed0 [ 210.195327][T10739] mas_store_prealloc+0x72e/0xa70 [ 210.200397][T10739] vma_complete+0x3c7/0x850 [ 210.204938][T10739] __split_vma+0x5db/0x640 [ 210.209382][T10739] vma_modify+0xbc9/0xd00 [ 210.213751][T10739] vma_modify_flags+0x182/0x210 [ 210.218650][T10739] mprotect_fixup+0x312/0x5d0 [ 210.223393][T10739] do_mprotect_pkey+0x67b/0x920 [ 210.228371][T10739] __x64_sys_mprotect+0x48/0x60 [ 210.233261][T10739] x64_sys_call+0x2768/0x3020 [ 210.238016][T10739] do_syscall_64+0x12c/0x370 [ 210.242654][T10739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.248577][T10739] [ 210.250927][T10739] read to 0xffff88810cb66e00 of 8 bytes by task 10739 on cpu 0: [ 210.258589][T10739] mas_state_walk+0x485/0x650 [ 210.263304][T10739] mas_walk+0x60/0x150 [ 210.267405][T10739] lock_vma_under_rcu+0xc9/0x210 [ 210.272370][T10739] do_user_addr_fault+0x232/0x1050 [ 210.277528][T10739] exc_page_fault+0x62/0xa0 [ 210.282062][T10739] asm_exc_page_fault+0x26/0x30 [ 210.286940][T10739] [ 210.289450][T10739] value changed: 0xffff888104b74a81 -> 0xffff88810cb66e00 [ 210.296570][T10739] [ 210.298912][T10739] Reported by Kernel Concurrency Sanitizer on: [ 210.305108][T10739] CPU: 0 UID: 0 PID: 10739 Comm: syz.8.1785 Not tainted syzkaller #0 PREEMPT(full) [ 210.314519][T10739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.324597][T10739] ================================================================== [ 210.385741][T10739] loop8: detected capacity change from 0 to 256 [ 210.392740][T10739] msdos: Unknown parameter '+Â –'