last executing test programs: 2m54.88588928s ago: executing program 3 (id=44): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730121000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x100000, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x2, 0x1, 0x8c7}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c06000000696f6e3d3970323030302c00"]) getsockopt$inet_buf(r0, 0x0, 0x20, 0x0, &(0x7f0000000000)) 2m54.614517237s ago: executing program 3 (id=48): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x100, 0x1c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x70, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x6b]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0xd8, r8, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0xa8, 0x8, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x7c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r9 = socket(0x1, 0x803, 0x0) r10 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r11 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) keyctl$search(0xa, r10, &(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, r11) keyctl$KEYCTL_MOVE(0x1e, r10, 0xffffffffffffffff, r11, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) 2m54.04943083s ago: executing program 3 (id=52): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f00000000c0)) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) io_getevents(0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d215c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a80016002900014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2m53.783742146s ago: executing program 3 (id=55): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x9, 0x1, 0x9, 0xe, 0x0, 0x9, 0x86340, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10, 0x2, @perf_config_ext={0x8, 0xfffffffffffffffa}, 0x100000, 0x3ff, 0x9, 0x1, 0x0, 0xb, 0x9, 0x0, 0xffffffff, 0x0, 0x200}, r0, 0x4, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xd, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000020786c2500000000002020207b1af8ff000000d13604b08bae6d89000701000000b7030000070000008500000046000000"], &(0x7f0000000880)='GPL\x00', 0x9, 0x56, &(0x7f00000008c0)=""/86, 0x41000, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) setxattr$incfs_id(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x3, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0xeb20, 0x8}, {0xc, 0x2}]}, 0x18, 0x1) ftruncate(0xffffffffffffffff, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003900)=@newtfilter={0x24, 0x2c, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xe, 0xfff1}, {0xf}}}, 0x24}}, 0x0) fstatfs(r6, &(0x7f0000000500)=""/131) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$notify(r10, 0x402, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 2m53.657760302s ago: executing program 3 (id=58): mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000000c0)=0xf, 0x7e, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000001000010428bd70000000000000030000", @ANYRES32=0x0, @ANYBLOB="0000000000040000300012800b00010067656e657665000020000280080001000100170014000700000000000000000000000000000000011400030067656e65766531"], 0x64}}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1, {0x1}}) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2a}, @empty, 0x2, 0x0, 0x4, 0x500, 0xd5000000000}) 2m53.256997476s ago: executing program 3 (id=63): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8800) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000bc7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000707000/0x4000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket(0x11, 0x80803, 0x0) setsockopt(r7, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) dup3(r0, r4, 0x80000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000200)=0x30) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r2, 0x25, 0x0, @void}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000380)=0x400, 0x4) syz_emit_ethernet(0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="0199c20000004d00"/22], 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) 2m53.20062903s ago: executing program 32 (id=63): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8800) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000bc7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000707000/0x4000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket(0x11, 0x80803, 0x0) setsockopt(r7, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) dup3(r0, r4, 0x80000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000200)=0x30) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r2, 0x25, 0x0, @void}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000380)=0x400, 0x4) syz_emit_ethernet(0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="0199c20000004d00"/22], 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) 2m13.187261079s ago: executing program 4 (id=700): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x10000, 0xfffd, 0x8, 0x6, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x2, 0x80010, 0xdd70, 0x7, 0x3, "03e702ffffffffffff04fdd0ff932926b86e0e", 0x2000002, 0x8001}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) syz_clone3(&(0x7f0000000500)={0x10000000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x12}, &(0x7f00000003c0)=""/9, 0x9, &(0x7f0000000400)=""/187, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x6, 0x48}, 0x2c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x44000006) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd89, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) socket(0x10, 0x3, 0x0) 2m13.135665502s ago: executing program 4 (id=702): socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000004000/0x2000)=nil) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setresuid(0xee01, 0xee00, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x6}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x6198, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x3}, 0x200, 0x1ff, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x2) socket(0x10, 0x3, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) 2m13.071416426s ago: executing program 4 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)='./file2\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, 0x0, 0x0, 0x9000) 2m12.744612165s ago: executing program 4 (id=713): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, r3, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}, 0x7, 0xf, 0x9, 0x5, 0x8}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r4, 0xfffffffe}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r2, 0xb5, "c75869d00d7fb92acdb1e0e22925abf22c568fb2c0888b3b0cfa2d0e8bddf80dd4ceaf0cc9ecd6d5d018c2ddcd3442cfe0eae5a83750b71fc59209a07a66d555bffdae72146e401c742a17f90886d96c04283891221c719c7af978aec6433bc8a98d413cd66e65568de5bbc1deef2561c69356b0a255bbe9b3e2fba885885aa86fc04b76f95986a968d617163e3d9e9c39d7d193c8682c53f2cbad92e8527a85a8820925efb7db20a3010b6da8d2ba79adcb419258"}, &(0x7f00000000c0)=0xbd) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f00000006c0)={@empty, @local}) 2m12.565181726s ago: executing program 4 (id=715): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x4, 0x0, 0x9, 0x652c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x81, 0x31, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1, 0xff9, 0x7) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2m12.260222104s ago: executing program 4 (id=721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x80000001, @empty, 0x4}, 0xfffffc19) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) personality(0xfc6703a0ffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="020707fe02000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x8, @void}, 0x10) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0xff, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r5, r7, 0x4, r1}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r8, 0x8800000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f900850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0xd1, 0x0, 0x9, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) write$P9_RGETLOCK(r8, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r10], 0x200002e6) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r12, r8, 0x0, 0x558410e9) 2m12.200682967s ago: executing program 33 (id=721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x80000001, @empty, 0x4}, 0xfffffc19) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) personality(0xfc6703a0ffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="020707fe02000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x8, @void}, 0x10) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0xff, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r5, r7, 0x4, r1}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r8, 0x8800000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f900850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0xd1, 0x0, 0x9, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) write$P9_RGETLOCK(r8, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r10], 0x200002e6) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r12, r8, 0x0, 0x558410e9) 2.936962617s ago: executing program 6 (id=2738): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="883add7a", 0x4}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x3e, 0x32}, 0x20) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x20, 0x2004, 0x0, @value=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x48}}, 0x0) 2.849841613s ago: executing program 1 (id=2739): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="9800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a64001280110001006272696467655f736c617665000001004c0005800500130001000000050005000000000005001c00000000000500060001000000060002000100000005001e0000000000050009000100000006001f00060000000500090000000000140003006272696467655f736c6176655f30"], 0x98}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000240)='./bus\x00', 0xc2) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.849221873s ago: executing program 5 (id=2740): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x3, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0xc4d}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0xd, 0x0, 0x802e77, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0xce72, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0xa19a, 0x1008}, 0x100000, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001400)={0x0, 0x48, &(0x7f0000000280)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x2, @private0, 0xe}, @in6={0xa, 0x4e23, 0x88, @mcast2, 0x30d3}]}, &(0x7f0000000240)=0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xa, {"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", 0x5b6}}, 0x1006) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) rt_sigsuspend(&(0x7f0000000840)={[0x2]}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x76, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) r10 = socket(0x840000000002, 0x3, 0x100) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @remote}, &(0x7f00000001c0)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x35, r3, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r13) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000220a06004100000001000008800000003d9b44b191098ae2e2e8a24e533739a835e11766da8a51597eac4232561aff82f680c33b5e02ca80db3a79954120c450a29524afb83ab064101f334707e6424ac5cea75b5ca97e8388", @ANYRES32=r11, @ANYBLOB="0f00"/20, @ANYRES32=r12, @ANYRES32, @ANYBLOB="04000000040000000400"/28, @ANYRES16=r1, @ANYRES64=r6], 0x50) setsockopt(r4, 0x0, 0x82, 0x0, 0x0) 2.760863537s ago: executing program 1 (id=2742): r0 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000040)=0x2c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000100), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r6, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r6, r4, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x5}, 0x8) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) 2.679615952s ago: executing program 5 (id=2744): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000001100010000000000ffdbdf25180000001300000056c380300a00744ffafe3d5eb0771ccc7b88693f6940057895692edf88ff7163ef50c6f1e937116b4750f3f49ad5f58dd25ddbbec31294113de36308186dfb5970cc3f328f2a156a7bbf416ff7fd6fda6740e4662587fd13d4679782cb2934b4e47ac0d18adc9cb935cd2b8b4bf5eb9b941bc01d109f2af52f5d90fa139b4fb885077fb4541b1adaf6e5091e550c810636c5e0f44a096e4628b34cee80227758"], 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 2.672272143s ago: executing program 6 (id=2745): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x10000, 0xfffd, 0x8, 0x6, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x2, 0x80010, 0xdd70, 0x7, 0x3, "03e702ffffffffffff04fdd0ff932926b86e0e", 0x2000002, 0x8001}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) syz_clone3(&(0x7f0000000500)={0x10000000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x12}, &(0x7f00000003c0)=""/9, 0x9, &(0x7f0000000400)=""/187, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x6, 0x48}, 0x2c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket(0x10, 0x3, 0x0) 2.651673554s ago: executing program 2 (id=2746): r0 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x2, 0x379}, &(0x7f0000000040)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x2c, 0x0, 0x0) 2.606338137s ago: executing program 6 (id=2747): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7000, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000040)={0xd, 0x8}) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000440)={0x0, 0x5}, 0x8) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xd, 0x1}, 0x8, 0x1, &(0x7f00000000c0)="8121359baefe0ff71ef234eda62ef36da658b5a0c1733b7839f8d42f6981d5c1623ee47f514b45b2fb44789a2c2cc128f07cdcecf89d1f8f66c429cc87ac14f8224eb3088d", 0x45, 0x101, 0x400, 0x0, 0x3, 0x200, &(0x7f0000000240)="4945834733dd1a24703e1e04fcdf10bbf9f21c404889e8f59f8ebcf9dcb10cc82216239c072b0d846bf5819669ce99a48e39ed111aab6e95beb874b1d927e8c559936b56536e6e65f9c7eb"}) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000000)=0x80000000, 0x4) 2.54605483s ago: executing program 5 (id=2748): r0 = syz_create_resource$binfmt(0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xdc, 0x1, 0x3, 0xfffffffffffffff9, 0x3, 0x3e, 0x1001, 0x101, 0x40, 0x2001df, 0x0, 0x3b, 0x38, 0x1, 0x27, 0x5, 0xff}, [{0x3, 0x0, 0x7fffffffffffffff, 0x2, 0x6, 0xffc, 0x80059b4, 0x8}]}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x12, 0x8, 0xd, "fee8a2ab78fc179fcff8a0e91ddaaca7bd6447a4b4e00d9683dda1afb94c1956b7fb0a018c060000000000000300000000000000000000000000e0ffffff00", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c5f00", [0x4, 0x5]}}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0x18, 0x8a, 0x0, 0x1, [0x39d, 0xfffffffc, 0x9, 0xaf8, 0xa]}, @lsrr={0x83, 0x3, 0x19}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xf4, 0x1, 0x3, [{@private=0xa010102, 0x2}, {@dev, 0xf9}, {@multicast2}, {@remote, 0x2}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xde, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x5}, {@private=0xa010101, 0x1}, {@rand_addr=0x64010101, 0x54aadfa6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x1}, {@private=0xa010100, 0x9}]}]}}}}}) 2.475984044s ago: executing program 2 (id=2749): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="883add7a", 0x4}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x3e, 0x32}, 0x20) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x20, 0x2004, 0x0, @value=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x48}}, 0x0) 2.025419391s ago: executing program 5 (id=2751): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="9800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a64001280110001006272696467655f736c617665000001004c0005800500130001000000050005000000000005001c00000000000500060001000000060002000100000005001e0000000000050009000100000006001f00060000000500090000000000140003006272696467655f736c6176655f30"], 0x98}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x2010, r4, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r4, 0x10000000) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={0x0, 0x80}, &(0x7f0000000740)=0x8) bind$inet(r4, &(0x7f0000000a80)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x6666, 0x8804, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0xf1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0xe, {0x9, 0x21, 0x5, 0x6b, 0x1, {0x22, 0xd6e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x10, 0x8}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x110, 0xc, 0x5, 0x6, 0x8, 0x2}, 0x35, &(0x7f0000000b40)={0x5, 0xf, 0x35, 0x3, [@generic={0x11, 0x10, 0x3, "25a9c16e07dcde2074cdd5f667c7"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x80, 0xf, 0x3, [0x60c0, 0xc000, 0x3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x0, 0x5}]}, 0x3, [{0x51, &(0x7f0000000b80)=@string={0x51, 0x3, "b9b369f62ae894398e8c4df2a8da64cf9429d51422064fa1a624f5560d071b707073472cd2c1b325830fa6aaad9a925b83c5126fa2de19b6d1eaa32be24ab9284ec55489444b26901345b216e61877"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x409}}, {0x36, &(0x7f0000000c80)=@string={0x36, 0x3, "5e97fa58b462b9c5d8590eed73d221494a0826547f2e28d418648ebaf96e7979392a6c2f43a6d50bf230aba35b522e69143f4dd2"}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010000467d3b6b81c"], 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r7 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) sendmsg$sock(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)="11b7717f573e634f939acaf1426b842fc96c80c87d75a245b7e580b29cac91bcd0f5eefa0042580d8db936f2c429020f41ae77dc0bb023c2dc464e5a64cd67d05e938617fc0d57cbd5bbebb98991a221c011450cc42d617665e7369ea646d6f1eb864e77c7d42ee3c1f7579cd2d98f24ae6ac382f5c7ca518b6597a606c6bcb4b1c9ae4f10c1e01ac7fd0857d59b3076675fa2", 0x93}, {&(0x7f0000000440)="4cff98c8c19fdff64f0bfa1bfd0e6d97c1225ac3b5f7440348f16530042ea2ea0f97441c5c22312a4ca818cfcbbed1aa84513cda10125c403ece1642150f0f7c48355d036be34f32e27294d98d597a433d1b388e4ecc3f44c87d92742c30985268093cb21b57fc39c02f6e6f3cf84f375c8104cad3ee08200e781f72c63b1a3f7db824d22733c3b405473111bc3bbd05e34b9d4098f851a72e1b52a079", 0x9d}, {&(0x7f0000000500)="3851dbf46ebaa4568d8510d79f195ae76ca3d680aad8d67fd72151e3b777954df0a033778522c7c18b4fb905447f724a6746ee412055af511f1fc8fc1239283b26c57cc4e1aeb1fecae9602327ed4fbdbb5c6ef33cd714f31c86a513a76ff1572c87d5a00231c9b0fa28dc59b4d03707b2d1932f6e0149db874afa65943b0482a29b9afe829fd6841f321c5feb323543b8b9b5971e109dcf534a9a31a69e9030155aafb8ec9085741f015fc247c1465bc0d625055e81e5d9e5f171a122e626c9d89d846ba9df01deea3c707828d5dd35eb447e50cf9f716b05a03df366", 0xdd}, {&(0x7f0000000740)="98da0be7874524f303b2811510e5889a90eed50406b4d121584a4098c3b2457dff608199dd60466f403f7301a379d297ee38406fd581e500cab558fc509b36ef161567f8ff7ef21612e9d8c3630eb6f89c833bfd69c78d4bf155bc39cdc1f415901f2c6ff3bd01400eef15b7f7127b8049b37fb2b7a5d7b30e0c97d700339d728098a3bd4ea1a47cc37b192c2aa37c48220142c15a8bc26bd2bb39226678fe997d18b8cace15471fcd73d148dd5b0f32656392", 0xb3}, {&(0x7f0000000600)="7965a8ce9cdfe2e1f9ff95441f4d3e24d6598404134981b660704bdc58b710c22cb6ea8661029e6a5f935a599fe6a43d7834e4df0d6faf8f7ee7ec33613962eee349d0506d75a6cbbfeccc2f61db7200c9bd141e6f", 0x55}, {&(0x7f0000000200)="ac4704d4b51bf9e38662c119f596251f61d0cfeef141e855e6b493ed24cef23ef5829837efd0651da50eedd3b49f323ccb3aa02aea5bc7", 0x37}, {&(0x7f0000000800)="30382594f59fd292701adf3be7089e008f325c9ffe7d4e33b1c05662312c7b9293226679758bc7d7612e60c4684465305c60908eca8ff0b3d224a7ee6c5bfc64391ee337f05b1b091656184e9525217c9d155ed0a4c0f06de95679c7e3214d4dbb8bc07ea1d9c365df6c59d91f7d66673f9570e382059735f8e227749f4c54434f08f2c4cc319eb55c04375c245317f3e02a17bab8720d8cf7207c5ae9d97226dec7e015d2", 0xa5}, {&(0x7f00000008c0)="64ee890ee8ee19007ede44a1aab311218286", 0x12}], 0x8, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x7c000000}}, @timestamping={{0x14, 0x1, 0x25, 0x90}}], 0x90}, 0x800) 1.963937724s ago: executing program 6 (id=2753): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r4, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x80a00, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r9) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl0\x00', r2, 0x29, 0x8, 0x4, 0xbc66, 0x4, @loopback, @private2, 0x700, 0x7800, 0x8, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000780)={'syztnl0\x00', r2, 0x7800, 0x10, 0x9656, 0x5, {{0xd, 0x4, 0x3, 0x32, 0x34, 0x68, 0x0, 0x10, 0x4, 0x0, @broadcast, @empty, {[@timestamp={0x44, 0x20, 0xef, 0x0, 0x6, [0x2, 0x7f, 0x9, 0x8, 0x4, 0xffffffff, 0xa63]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000ac0)={0x188, r10, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x800}, 0x4001) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r12}, &(0x7f0000000a00), &(0x7f0000000a40)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r12}, &(0x7f0000000880), &(0x7f00000008c0)=r9}, 0x20) 1.771341696s ago: executing program 1 (id=2754): r0 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x60, &(0x7f0000000040)=ANY=[], 0xfe, 0x122f, &(0x7f0000001280)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffd17, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x24004080) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000580)={0x1, 0x0, 0x1000, 0x38, &(0x7f00000002c0)="bb064275635c24e0209516ea2778ef08b262a9607503b341a88a6a1b147be3e4e4c6e1ef33ae394c6960f1b10c00f318cd2cc9dc4ed4726a", 0x2b, 0x0, &(0x7f0000000300)="915286730b85637e9ba37cf4a8a2c37731138226d5a1f224e6a3bd384e497debbe57a4ac7c7b21be9775a9"}) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) socket$caif_stream(0x25, 0x1, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="796100000000fedbdf257e000000f5893ed902ee3db6f40c0099"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000640)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=@newtaction={0x1e0, 0x30, 0x208, 0x70bd2d, 0x25dfdbfb, {}, [{0x1cc, 0x1, [@m_ife={0x1c8, 0x16, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x57, 0x2, 0x20000000, 0xfffffff7, 0x9f0d}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xf9, 0x0, 0x20000000, 0x2, 0x8}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x10000000, 0x4, 0x6}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x20000000, 0x401, 0x57}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x0, 0x3, 0x80}, 0x1}}]}, {0xdf, 0x6, "12fa7b9d3fe5b3e2ae591ba0499f695068d0fc5d1206a05c691b30c1e69ee1d23d4a41ae4b84f9105bd063595ba6eb810f22fcb064acb49489b943b16ae2bfb52824742b0f86580cae8ee73b9984571531c4119526aeaf7ce3a77ea3568d74552e03621c6c9b1357ff80d000dcb5f7f0a49b9c938caa315f9241fbdc6eed17000686e668e1c76a1e6d2737b358bfb04656dac0cf04e6eb5b7550f7c811900a1121f15fd1f62f3b7b1b5d765e8403c9751d6420cbeb744c088814fc00dc7e62609b13907172ce2e2f94caa880d35667f7efacdabc3753934aff2a4b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) fstat(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r8, r8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r10, 0x0) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000100)={0x3, 0x10000000002}) 1.738919197s ago: executing program 0 (id=2755): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, 0x0, 0x0) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6000c8b4cb82e28abe030800783a00fc010000000000000000000000000000fe8000000000000000000000000000aa0200907800000000605b52ab00002b00fc00000000000000000000fc2000000000000000000000000000000004040201000000fc020000000000000000000000000000fe8800000000000000000000000000018802000000000000c910fe8000"/167], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101000000000000080002"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) bind$inet(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.641804953s ago: executing program 0 (id=2756): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800000000000000", @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000"], 0x30}}, 0x0) 1.584663477s ago: executing program 2 (id=2757): r0 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x60, &(0x7f0000000040)=ANY=[], 0xfe, 0x122f, &(0x7f0000001280)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffd17, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x24004080) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000580)={0x1, 0x0, 0x1000, 0x38, &(0x7f00000002c0)="bb064275635c24e0209516ea2778ef08b262a9607503b341a88a6a1b147be3e4e4c6e1ef33ae394c6960f1b10c00f318cd2cc9dc4ed4726a", 0x2b, 0x0, &(0x7f0000000300)="915286730b85637e9ba37cf4a8a2c37731138226d5a1f224e6a3bd384e497debbe57a4ac7c7b21be9775a9"}) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="796100000000fedbdf257e000000f5893ed902ee3db6f40c0099"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000640)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=@newtaction={0x1e0, 0x30, 0x208, 0x70bd2d, 0x25dfdbfb, {}, [{0x1cc, 0x1, [@m_ife={0x1c8, 0x16, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x57, 0x2, 0x20000000, 0xfffffff7, 0x9f0d}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xf9, 0x0, 0x20000000, 0x2, 0x8}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x10000000, 0x4, 0x6}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x20000000, 0x401, 0x57}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x0, 0x3, 0x80}, 0x1}}]}, {0xdf, 0x6, "12fa7b9d3fe5b3e2ae591ba0499f695068d0fc5d1206a05c691b30c1e69ee1d23d4a41ae4b84f9105bd063595ba6eb810f22fcb064acb49489b943b16ae2bfb52824742b0f86580cae8ee73b9984571531c4119526aeaf7ce3a77ea3568d74552e03621c6c9b1357ff80d000dcb5f7f0a49b9c938caa315f9241fbdc6eed17000686e668e1c76a1e6d2737b358bfb04656dac0cf04e6eb5b7550f7c811900a1121f15fd1f62f3b7b1b5d765e8403c9751d6420cbeb744c088814fc00dc7e62609b13907172ce2e2f94caa880d35667f7efacdabc3753934aff2a4b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) fstat(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r8, r8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r10, 0x0) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000100)={0x3, 0x10000000002}) 1.399311507s ago: executing program 0 (id=2758): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x10000, 0xfffd, 0x8, 0x6, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x2, 0x80010, 0xdd70, 0x7, 0x3, "03e702ffffffffffff04fdd0ff932926b86e0e", 0x2000002, 0x8001}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) syz_clone3(&(0x7f0000000500)={0x10000000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x12}, &(0x7f00000003c0)=""/9, 0x9, &(0x7f0000000400)=""/187, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x6, 0x48}, 0x2c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x44000006) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) socket(0x10, 0x3, 0x0) 1.338843761s ago: executing program 0 (id=2759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) io_setup(0x5, &(0x7f0000000000)=0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20f42, 0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xc, r5, &(0x7f0000000080)='E', 0x1, 0x8000}]) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="65e2960000000000000000000000000000000000eeca5fac74e5ae11096445bf05d90033d6cbb1efa0996f638e1d818a23f27fca4a301c13f270318e577063cc5985acff6ea8989019654a6a6c090352b711a814328ee5ad7f5e6ebd860e1c83ea8252f2c916bfe16143e91c9a3fb4fd69662f14fbe4c2cd6ff381b62a144a4985936043da289fd5798ee23e841ddf1dee814d7689193f4a896f4ab709daa1be2705210490f28bccd1105479b4c38d9934b21922298525d19dfe40ae433ecd88cc98a998decf5ef80e6419f97fcb4099abd7dfdc16b49147571f6233b535c826f82fb5", @ANYRES32=0x0, @ANYBLOB="0198060000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000020a01010000000000000000b0f9020000000900010073797a31000000f2140000001100010000000000000000000a00"/72], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000808) socket$netlink(0x10, 0x3, 0x12) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r6 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x81, 0xa0, 0x4, 0x7, 0x0, 0x1, 0x20002, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000300), 0x9}, 0x100c0, 0x4, 0x1000, 0x7, 0x3, 0xff, 0x6, 0x0, 0x2c9e, 0x0, 0x3}, r5, 0x8, r5, 0xe) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x100, 0x3fff8000}, 0x81, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x7, r6, 0xb) socket(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r7 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x2, 0x379}, &(0x7f0000000040)=0x0, &(0x7f00000003c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000440)=0x2) ioctl$PPPIOCSFLAGS(r9, 0x40047459, &(0x7f0000000000)=0x420) io_uring_enter(r7, 0x47ba, 0x3e82, 0x2c, 0x0, 0x0) 1.119423374s ago: executing program 6 (id=2760): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="883add7a", 0x4}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x3e, 0x32}, 0x20) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x20, 0x2004, 0x0, @value=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x48}}, 0x0) 1.006001851s ago: executing program 1 (id=2761): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x3e, 0x32}, 0x20) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x20, 0x2004, 0x0, @value=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 927.396385ms ago: executing program 2 (id=2762): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x3e, 0x32}, 0x20) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x20, 0x2004, 0x0, @value=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 853.926059ms ago: executing program 5 (id=2763): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4d0fb, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x85c, &(0x7f0000000300)={0x0, 0x3052, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[], [], 0x22}, 0x0, 0x47c, &(0x7f0000000440)="$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") syz_pidfd_open(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") setresuid(0xee00, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000100070000000900020073797a32000000000c00078005001500080000000500050002000000"], 0x58}}, 0x0) mlockall(0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='.-}\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x30) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 720.885027ms ago: executing program 2 (id=2764): socket$inet(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x206d}, 0x94) connect$unix(r2, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) 613.473934ms ago: executing program 2 (id=2765): r0 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000040)=0x2c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000100), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r6, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r6, r4, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x5}, 0x8) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) 445.964773ms ago: executing program 5 (id=2766): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) brk(0x689d80000003) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001800290200000000ffdbdf250a00000008000000040000000400088008001e0067"], 0x28}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r5, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x34000}], 0x1, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}], 0x30}], 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@getpolicy={0xbc, 0x15, 0x1, 0x70bd2d, 0x25dfdbff, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, @in6=@mcast1, 0x4e20, 0x2, 0x4e20, 0xb4, 0xa, 0xa0, 0x0, 0x33}, 0x6e6bb6, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x60}, 0xa, @in6=@loopback, 0x3507, 0x2, 0x2, 0xe, 0x5, 0xfffffc01, 0x3}]}, @srcaddr={0x14, 0xd, @in6=@private2}, @mark={0xc, 0x15, {0x350759, 0xffff}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xbc}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffaffffff07000000faffffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8a, 0x0, 0x0, 0x10, 0x3}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 417.387635ms ago: executing program 1 (id=2767): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="883add7a", 0x4}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x3e, 0x32}, 0x20) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x20, 0x2004, 0x0, @value=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x48}}, 0x0) 325.091171ms ago: executing program 0 (id=2768): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000000c0)=0x84) 260.736054ms ago: executing program 6 (id=2769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000280)={0x394e}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) 213.910597ms ago: executing program 0 (id=2770): sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x2000000c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000280)={[{@errors_continue}, {@init_itable_val}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7df15ebf}}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@nodioread_nolock}, {}, {@noblock_validity}, {@nodiscard}]}, 0x1, 0x475, &(0x7f0000000780)="$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") syz_emit_ethernet(0xd5, &(0x7f00000001c0)=ANY=[], 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc2042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r3, &(0x7f0000000240)=""/123, 0x7b) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x84, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x2000007, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x1, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xc, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x4, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x10001, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0xa, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x10000, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xfffffe00, 0x71, 0xfff, 0x5, 0x8]}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8c2b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000001540)=""/136) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0e08004510d12c0000000000069078ac1414bbac1434aa00004e229e6bc784862dbfec698199c1ddb1496da9c5eb65211941ef5acbb78867aec6886b68a25c34288f391078733e4c01484a22e632e780984249c08213bd650625480e34e3e1f455bb9787580def90edfeebf83e4ef1b934505f8e3d6d900e9754134dad4f37b6c6e19f1fc550f05158cd49faf2c7aab0ca85ff9ee25aa6d4df300e78cc9241a86ea3c403a6fbff163d59ef12d393201734aa20e91d7ffb95f2cf9096163ec295402cde65893df9ba89a56033f290f38ad44d3f0354e25d1164dc092810dcd8f13127cc3528671725", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c2000069078000802020000"], 0x0) fsync(r2) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$eventfd(r8, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3}) 0s ago: executing program 1 (id=2771): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) personality(0xfc6703a0ffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f90085000000770000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0xd1, 0x0, 0x9, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x200002e6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) kernel console output (not intermixed with test programs): 140.274379][ T8677] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 140.291963][ T8681] bridge0: port 3(gretap0) entered disabled state [ 140.350076][ T8681] gretap0: entered allmulticast mode [ 140.366112][ T8692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8692 comm=syz.1.1728 [ 140.372668][ T8681] gretap0: entered promiscuous mode [ 140.393589][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1728'. [ 140.544177][ T8681] bridge0: port 3(gretap0) entered blocking state [ 140.551064][ T8681] bridge0: port 3(gretap0) entered forwarding state [ 140.786719][ T28] audit: type=1400 audit(1771263944.930:763): avc: denied { wake_alarm } for pid=8711 comm="syz.0.1737" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.931534][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1737'. [ 141.157462][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 141.187308][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 141.276967][ T8725] set_capacity_and_notify: 10 callbacks suppressed [ 141.276984][ T8725] loop1: detected capacity change from 0 to 512 [ 141.311071][ T8725] ext3: Unknown parameter '" ' [ 141.323260][ T8725] loop1: detected capacity change from 0 to 256 [ 141.375744][ T8730] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1742'. [ 141.524200][ T8743] sctp: [Deprecated]: syz.5.1747 (pid 8743) Use of int in max_burst socket option. [ 141.524200][ T8743] Use struct sctp_assoc_value instead [ 141.524202][ T28] audit: type=1400 audit(1771263945.670:764): avc: denied { getopt } for pid=8742 comm="syz.5.1747" lport=51531 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 141.597976][ T28] audit: type=1400 audit(1771263945.750:765): avc: denied { write } for pid=8742 comm="syz.5.1747" lport=51531 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 141.634771][ T28] audit: type=1400 audit(1771263945.770:766): avc: denied { setopt } for pid=8742 comm="syz.5.1747" lport=51531 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 141.688542][ T8751] FAULT_INJECTION: forcing a failure. [ 141.688542][ T8751] name failslab, interval 1, probability 0, space 0, times 0 [ 141.710579][ T8751] CPU: 0 UID: 0 PID: 8751 Comm: syz.6.1751 Not tainted syzkaller #0 PREEMPT(full) [ 141.710643][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.710656][ T8751] Call Trace: [ 141.710662][ T8751] [ 141.710668][ T8751] __dump_stack+0x1d/0x30 [ 141.710691][ T8751] dump_stack_lvl+0x95/0xd0 [ 141.710714][ T8751] dump_stack+0x15/0x1b [ 141.710732][ T8751] should_fail_ex+0x263/0x280 [ 141.710776][ T8751] should_failslab+0x8c/0xb0 [ 141.710855][ T8751] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 141.710884][ T8751] ? __alloc_skb+0x2d6/0x690 [ 141.710972][ T8751] __alloc_skb+0x2d6/0x690 [ 141.710990][ T8751] ? __alloc_skb+0x200/0x690 [ 141.711021][ T8751] netlink_alloc_large_skb+0xbf/0xf0 [ 141.711047][ T8751] netlink_sendmsg+0x40c/0x6f0 [ 141.711098][ T8751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.711121][ T8751] ____sys_sendmsg+0x5af/0x600 [ 141.711149][ T8751] ___sys_sendmsg+0x195/0x1e0 [ 141.711229][ T8751] __x64_sys_sendmsg+0xd4/0x160 [ 141.711261][ T8751] x64_sys_call+0x194c/0x3020 [ 141.711285][ T8751] do_syscall_64+0x12c/0x370 [ 141.711320][ T8751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.711383][ T8751] RIP: 0033:0x7fa73d1dbf79 [ 141.711400][ T8751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.711421][ T8751] RSP: 002b:00007fa73bc37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.711440][ T8751] RAX: ffffffffffffffda RBX: 00007fa73d455fa0 RCX: 00007fa73d1dbf79 [ 141.711475][ T8751] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 141.711540][ T8751] RBP: 00007fa73bc37090 R08: 0000000000000000 R09: 0000000000000000 [ 141.711555][ T8751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.711569][ T8751] R13: 00007fa73d456038 R14: 00007fa73d455fa0 R15: 00007ffc5c4090f8 [ 141.711670][ T8751] [ 142.051211][ T8762] loop1: detected capacity change from 0 to 512 [ 142.062692][ T8762] ext4: Unknown parameter 'smackfsfloor' [ 142.304837][ T8764] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1752'. [ 142.694824][ T8776] loop0: detected capacity change from 0 to 256 [ 142.702854][ T8776] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 142.921736][ T8787] support for cryptoloop has been removed. Use dm-crypt instead. [ 143.035726][ T8797] loop1: detected capacity change from 0 to 512 [ 143.043771][ T8797] ext3: Unknown parameter '" ' [ 143.085142][ T8797] loop1: detected capacity change from 0 to 256 [ 143.095747][ T8800] loop6: detected capacity change from 0 to 512 [ 143.134798][ T8800] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.216434][ T8800] EXT4-fs error (device loop6): ext4_add_entry:2415: inode #2: comm syz.6.1766: Directory hole found for htree leaf block 0 [ 143.230825][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'. [ 143.259815][ T8800] EXT4-fs error (device loop6): ext4_add_entry:2415: inode #2: comm syz.6.1766: Directory hole found for htree leaf block 0 [ 143.354779][ T28] audit: type=1326 audit(1771263947.500:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8799 comm="syz.6.1766" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa73d1dbf79 code=0x0 [ 143.378417][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.386869][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.670486][ T8823] loop2: detected capacity change from 0 to 8192 [ 143.709357][ T8823] syz_tun: entered allmulticast mode [ 143.944391][ T5784] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 144.029446][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1774'. [ 144.213873][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'. [ 144.341944][ T8857] netlink: 'syz.2.1786': attribute type 2 has an invalid length. [ 144.369505][ T8857] netlink: 'syz.2.1786': attribute type 8 has an invalid length. [ 144.369522][ T8857] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1786'. [ 144.384304][ T8857] loop2: detected capacity change from 0 to 512 [ 144.406038][ T8857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.478247][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.488296][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.498765][ T8865] loop1: detected capacity change from 0 to 256 [ 144.534258][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.539668][ T8865] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 144.579392][ T8871] FAULT_INJECTION: forcing a failure. [ 144.579392][ T8871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.619556][ T8871] CPU: 0 UID: 0 PID: 8871 Comm: syz.2.1791 Not tainted syzkaller #0 PREEMPT(full) [ 144.619587][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.619601][ T8871] Call Trace: [ 144.619677][ T8871] [ 144.619684][ T8871] __dump_stack+0x1d/0x30 [ 144.619709][ T8871] dump_stack_lvl+0x95/0xd0 [ 144.619732][ T8871] dump_stack+0x15/0x1b [ 144.619792][ T8871] should_fail_ex+0x263/0x280 [ 144.619821][ T8871] should_fail+0xb/0x20 [ 144.619859][ T8871] should_fail_usercopy+0x1a/0x20 [ 144.619899][ T8871] strncpy_from_user+0x27/0x250 [ 144.619928][ T8871] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 144.619961][ T8871] do_getname+0x59/0x1c0 [ 144.619979][ T8871] getname_flags+0x1d/0x30 [ 144.620046][ T8871] do_sys_openat2+0x60/0x130 [ 144.620068][ T8871] __x64_sys_openat+0xf2/0x120 [ 144.620092][ T8871] x64_sys_call+0x1e39/0x3020 [ 144.620117][ T8871] do_syscall_64+0x12c/0x370 [ 144.620209][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.620229][ T8871] RIP: 0033:0x7fc9fe4abf79 [ 144.620243][ T8871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.620260][ T8871] RSP: 002b:00007fc9fceff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 144.620381][ T8871] RAX: ffffffffffffffda RBX: 00007fc9fe725fa0 RCX: 00007fc9fe4abf79 [ 144.620395][ T8871] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 144.620407][ T8871] RBP: 00007fc9fceff090 R08: 0000000000000000 R09: 0000000000000000 [ 144.620423][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.620434][ T8871] R13: 00007fc9fe726038 R14: 00007fc9fe725fa0 R15: 00007ffcef4a35c8 [ 144.620451][ T8871] [ 144.801967][ T8873] support for cryptoloop has been removed. Use dm-crypt instead. [ 144.899720][ T8878] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 144.997410][ T28] audit: type=1400 audit(1771264205.139:768): avc: denied { append } for pid=8879 comm="syz.2.1796" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 145.136749][ T8890] FAULT_INJECTION: forcing a failure. [ 145.136749][ T8890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.150118][ T8890] CPU: 1 UID: 0 PID: 8890 Comm: syz.1.1801 Not tainted syzkaller #0 PREEMPT(full) [ 145.150218][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.150231][ T8890] Call Trace: [ 145.150238][ T8890] [ 145.150246][ T8890] __dump_stack+0x1d/0x30 [ 145.150273][ T8890] dump_stack_lvl+0x95/0xd0 [ 145.150298][ T8890] dump_stack+0x15/0x1b [ 145.150365][ T8890] should_fail_ex+0x263/0x280 [ 145.150391][ T8890] should_fail+0xb/0x20 [ 145.150413][ T8890] should_fail_usercopy+0x1a/0x20 [ 145.150476][ T8890] _copy_from_user+0x1c/0xb0 [ 145.150578][ T8890] __sys_bpf+0x183/0x7e0 [ 145.150617][ T8890] __x64_sys_bpf+0x41/0x50 [ 145.150643][ T8890] x64_sys_call+0x10cb/0x3020 [ 145.150738][ T8890] do_syscall_64+0x12c/0x370 [ 145.150817][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.150895][ T8890] RIP: 0033:0x7f809b17bf79 [ 145.150909][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.150932][ T8890] RSP: 002b:00007f8099bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.150950][ T8890] RAX: ffffffffffffffda RBX: 00007f809b3f5fa0 RCX: 00007f809b17bf79 [ 145.150963][ T8890] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 145.150975][ T8890] RBP: 00007f8099bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.151049][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.151063][ T8890] R13: 00007f809b3f6038 R14: 00007f809b3f5fa0 R15: 00007ffc2fa74aa8 [ 145.151084][ T8890] [ 145.349640][ T28] audit: type=1401 audit(1771264205.469:769): op=setxattr invalid_context="" [ 145.387466][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1804'. [ 145.487565][ T28] audit: type=1400 audit(1771264205.589:770): avc: denied { create } for pid=8902 comm="syz.1.1806" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_socket permissive=1 [ 145.628345][ T8915] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 146.029343][ T8930] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 146.536091][ T8960] set_capacity_and_notify: 4 callbacks suppressed [ 146.536108][ T8960] loop1: detected capacity change from 0 to 4096 [ 146.539554][ T8962] support for cryptoloop has been removed. Use dm-crypt instead. [ 146.721075][ T28] audit: type=1400 audit(1771264206.869:771): avc: denied { read write } for pid=8970 comm="syz.2.1830" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 146.824965][ T28] audit: type=1400 audit(1771264206.869:772): avc: denied { open } for pid=8970 comm="syz.2.1830" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 146.885500][ T28] audit: type=1400 audit(1771264206.869:773): avc: denied { create } for pid=8970 comm="syz.2.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 147.594211][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.612163][ T9005] support for cryptoloop has been removed. Use dm-crypt instead. [ 147.624505][ T9007] loop0: detected capacity change from 0 to 256 [ 147.631316][ T9007] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 147.662075][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.093215][ T9021] loop5: detected capacity change from 0 to 1024 [ 148.117540][ T9021] EXT4-fs: Ignoring removed nobh option [ 148.225455][ T9021] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.285783][ T9021] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 148.305611][ T9021] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 149.131338][ T28] audit: type=1400 audit(1771264209.279:774): avc: denied { mount } for pid=9063 comm="syz.1.1861" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 149.195820][ T28] audit: type=1400 audit(1771264209.309:775): avc: denied { create } for pid=9063 comm="syz.1.1861" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=qipcrtr_socket permissive=1 [ 149.256380][ T9066] loop0: detected capacity change from 0 to 256 [ 149.264339][ T9066] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 149.440012][ T9071] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 149.501966][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 149.626272][ T9083] loop1: detected capacity change from 0 to 512 [ 149.633015][ T9083] ext3: Unknown parameter '" ' [ 149.731172][ T9092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9092 comm=syz.1.1871 [ 149.770281][ T9094] support for cryptoloop has been removed. Use dm-crypt instead. [ 149.800884][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1871'. [ 149.883191][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1876'. [ 150.062050][ T9115] loop0: detected capacity change from 0 to 512 [ 150.086046][ T9115] ext3: Unknown parameter '" J' [ 150.128107][ T9115] loop0: detected capacity change from 0 to 256 [ 150.140957][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1884'. [ 150.388082][ T9133] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 150.408725][ T9133] futex_wake_op: syz.0.1886 tries to shift op by -3; fix this program [ 150.662831][ T9131] loop2: detected capacity change from 0 to 8192 [ 150.961658][ T9137] loop1: detected capacity change from 0 to 256 [ 150.983159][ T9137] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 151.124060][ T9140] support for cryptoloop has been removed. Use dm-crypt instead. [ 151.173959][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'. [ 151.248053][ T9149] loop6: detected capacity change from 0 to 512 [ 151.256540][ T9149] ext3: Unknown parameter '" ;' [ 151.365056][ T9153] ext3: Unknown parameter '" ;' [ 151.434165][ T9157] ext3: Unknown parameter '"' [ 151.551245][ T9166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1898'. [ 151.610964][ T9170] set_capacity_and_notify: 3 callbacks suppressed [ 151.610980][ T9170] loop5: detected capacity change from 0 to 512 [ 151.651345][ T9170] ext3: Unknown parameter '"޾' [ 151.803977][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.823411][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.307336][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1909'. [ 152.405192][ T9215] loop0: detected capacity change from 0 to 256 [ 152.422019][ T9215] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 152.479689][ T9222] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 152.663849][ T9228] loop6: detected capacity change from 0 to 512 [ 152.684362][ T9228] ext3: Unknown parameter '" ;' [ 152.917901][ T9240] loop6: detected capacity change from 0 to 512 [ 152.998103][ T9240] ext3: Unknown parameter '" ;' [ 153.043816][ T9240] loop6: detected capacity change from 0 to 256 [ 153.092425][ T9244] loop0: detected capacity change from 0 to 512 [ 153.111421][ T9244] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.143585][ T9244] EXT4-fs (loop0): 1 truncate cleaned up [ 153.151446][ T9244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.212857][ T9234] loop5: detected capacity change from 0 to 512 [ 153.233662][ T9254] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 153.257855][ T28] audit: type=1400 audit(1771264213.399:776): avc: denied { map } for pid=9243 comm="syz.0.1924" path="/381/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.342279][ T28] audit: type=1400 audit(1771264213.399:777): avc: denied { execute } for pid=9243 comm="syz.0.1924" path="/381/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.350072][ T9234] EXT4-fs: dax option not supported [ 153.704489][ T9270] netlink: 'syz.1.1932': attribute type 1 has an invalid length. [ 153.753723][ T9270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.805161][ T9272] bond2: (slave ip6gretap1): making interface the new active one [ 153.859563][ T9272] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 153.941095][ T9270] veth3: entered promiscuous mode [ 154.045367][ T9270] bond2: (slave veth3): Enslaving as an active interface with a down link [ 154.061525][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.085347][ T9279] loop5: detected capacity change from 0 to 512 [ 154.102467][ T9279] ext3: Unknown parameter '"޾' [ 154.123570][ T9272] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 154.136788][ T9279] loop5: detected capacity change from 0 to 256 [ 154.268742][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1937'. [ 154.275696][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1938'. [ 154.479089][ T9297] loop6: detected capacity change from 0 to 256 [ 154.512907][ T9297] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 154.550292][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 154.595171][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.605258][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.621748][ T9300] netlink: 'syz.5.1941': attribute type 2 has an invalid length. [ 154.630812][ T9300] netlink: 'syz.5.1941': attribute type 8 has an invalid length. [ 154.640247][ T9300] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1941'. [ 154.641507][ T9296] netlink: 'syz.1.1940': attribute type 16 has an invalid length. [ 154.678066][ T9296] netlink: 'syz.1.1940': attribute type 17 has an invalid length. [ 154.689662][ T9300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.768621][ T3717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.780696][ T9296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.903671][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 154.944499][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1950'. [ 154.959811][ T9325] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 154.972350][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1949'. [ 155.014588][ T28] audit: type=1326 audit(1771264215.159:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.6.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73d1dbf79 code=0x7ffc0000 [ 155.047614][ T28] audit: type=1326 audit(1771264215.159:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.6.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa73d1dbf79 code=0x7ffc0000 [ 155.073496][ T9330] support for cryptoloop has been removed. Use dm-crypt instead. [ 155.081379][ T28] audit: type=1326 audit(1771264215.189:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.6.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa73d1dbf79 code=0x7ffc0000 [ 155.081457][ T28] audit: type=1326 audit(1771264215.189:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.6.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa73d1dbce2 code=0x7ffc0000 [ 155.081560][ T28] audit: type=1326 audit(1771264215.189:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.6.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa73d19c84e code=0x7ffc0000 [ 155.081586][ T28] audit: type=1326 audit(1771264215.189:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.6.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa73d1dbda7 code=0x7ffc0000 [ 155.081613][ T28] audit: type=1326 audit(1771264215.189:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.6.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa73d19c84e code=0x7ffc0000 [ 155.081638][ T28] audit: type=1326 audit(1771264215.189:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.6.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa73d1dbc0b code=0x7ffc0000 [ 155.081689][ T28] audit: type=1326 audit(1771264215.189:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.6.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa73d19c84e code=0x7ffc0000 [ 155.081784][ T28] audit: type=1326 audit(1771264215.189:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9327 comm="syz.6.1952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa73d1dbc0b code=0x7ffc0000 [ 155.338634][ T3301] Alternate GPT is invalid, using primary GPT. [ 155.345016][ T3301] loop6: p2 p3 p7 [ 155.370820][ T9328] Alternate GPT is invalid, using primary GPT. [ 155.377229][ T9328] loop6: p2 p3 p7 [ 155.461861][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1961'. [ 155.483454][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.508109][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.508841][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 155.533688][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 155.548971][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 155.568082][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 155.587384][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 155.599742][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 155.707015][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'. [ 156.031939][ T9371] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 156.098433][ T9371] bond4: entered promiscuous mode [ 156.114847][ T9371] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.189239][ T9375] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 156.202948][ T9375] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 156.229681][ T9375] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 156.283529][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1973'. [ 156.392285][ T9396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.405044][ T9396] ext4 filesystem being mounted at /422/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.429861][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.554360][ T9414] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.581617][ T9414] EXT4-fs error (device loop2): ext4_add_entry:2415: inode #2: comm syz.2.1983: Directory hole found for htree leaf block 0 [ 156.601148][ T9414] EXT4-fs error (device loop2): ext4_add_entry:2415: inode #2: comm syz.2.1983: Directory hole found for htree leaf block 0 [ 156.716359][ T9422] set_capacity_and_notify: 8 callbacks suppressed [ 156.716377][ T9422] loop0: detected capacity change from 0 to 512 [ 156.733466][ T9422] ext3: Unknown parameter '" J' [ 156.868778][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1988'. [ 156.880339][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1988'. [ 157.058459][ T9447] netlink: 'syz.0.1995': attribute type 2 has an invalid length. [ 157.070578][ T9447] netlink: 'syz.0.1995': attribute type 8 has an invalid length. [ 157.084202][ T9447] loop0: detected capacity change from 0 to 512 [ 157.189197][ T9447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.277336][ T9453] loop1: detected capacity change from 0 to 512 [ 157.410104][ T9453] EXT4-fs: dax option not supported [ 157.742164][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.762288][ T3315] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 157.813796][ T9471] loop6: detected capacity change from 0 to 512 [ 157.829844][ T9471] EXT4-fs: Ignoring removed i_version option [ 157.877240][ T9471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.894720][ T9471] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.976656][ T9485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.986683][ T9485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.998399][ T9485] netlink: 'syz.1.2009': attribute type 16 has an invalid length. [ 158.022246][ T9485] netlink: 'syz.1.2009': attribute type 17 has an invalid length. [ 158.084883][ T9485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.151306][ T5784] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.164551][ T9495] FAULT_INJECTION: forcing a failure. [ 158.164551][ T9495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.210661][ T9497] support for cryptoloop has been removed. Use dm-crypt instead. [ 158.226644][ T9495] CPU: 0 UID: 0 PID: 9495 Comm: syz.0.2010 Not tainted syzkaller #0 PREEMPT(full) [ 158.226672][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.226685][ T9495] Call Trace: [ 158.226693][ T9495] [ 158.226724][ T9495] __dump_stack+0x1d/0x30 [ 158.226749][ T9495] dump_stack_lvl+0x95/0xd0 [ 158.226817][ T9495] dump_stack+0x15/0x1b [ 158.226907][ T9495] should_fail_ex+0x263/0x280 [ 158.226929][ T9495] should_fail+0xb/0x20 [ 158.226950][ T9495] should_fail_usercopy+0x1a/0x20 [ 158.226977][ T9495] _copy_to_user+0x20/0xa0 [ 158.227129][ T9495] simple_read_from_buffer+0xb5/0x130 [ 158.227163][ T9495] proc_fail_nth_read+0x10e/0x150 [ 158.227243][ T9495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.227266][ T9495] vfs_read+0x1ab/0x7f0 [ 158.227322][ T9495] ? __rcu_read_unlock+0x4e/0x70 [ 158.227343][ T9495] ? __fget_files+0x184/0x1c0 [ 158.227364][ T9495] ? mutex_lock+0x57/0x90 [ 158.227392][ T9495] ksys_read+0xdc/0x1a0 [ 158.227462][ T9495] __x64_sys_read+0x40/0x50 [ 158.227492][ T9495] x64_sys_call+0x2886/0x3020 [ 158.227516][ T9495] do_syscall_64+0x12c/0x370 [ 158.227550][ T9495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.227635][ T9495] RIP: 0033:0x7f4afe44c84e [ 158.227652][ T9495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.227671][ T9495] RSP: 002b:00007f4afcec5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.227696][ T9495] RAX: ffffffffffffffda RBX: 00007f4afcec66c0 RCX: 00007f4afe44c84e [ 158.227837][ T9495] RDX: 000000000000000f RSI: 00007f4afcec60a0 RDI: 0000000000000005 [ 158.227850][ T9495] RBP: 00007f4afcec6090 R08: 0000000000000000 R09: 0000000000000000 [ 158.227868][ T9495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.227879][ T9495] R13: 00007f4afe706128 R14: 00007f4afe706090 R15: 00007ffe08853b88 [ 158.227900][ T9495] [ 158.462452][ T9503] support for cryptoloop has been removed. Use dm-crypt instead. [ 158.519766][ T9505] loop5: detected capacity change from 0 to 512 [ 158.526854][ T9505] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.569547][ T9505] EXT4-fs (loop5): orphan cleanup on readonly fs [ 158.581485][ T9505] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 158.591547][ T9505] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2016: attempt to clear invalid blocks 2 len 1 [ 158.608203][ T9505] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 158.608443][ T9505] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 158.633146][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 158.633165][ C0] EXT4-fs (loop5): initial error at time 1771264474: ext4_clear_blocks:876: inode 13 [ 158.633200][ C0] EXT4-fs (loop5): last error at time 1771264474: ext4_clear_blocks:876: inode 13 [ 158.664237][ T9505] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2016: invalid indirect mapped block 1819239214 (level 0) [ 158.679608][ T9505] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 158.688045][ T9505] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2016: invalid indirect mapped block 1819239214 (level 1) [ 158.737991][ T9505] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 158.739992][ T9505] EXT4-fs (loop5): 1 truncate cleaned up [ 158.764248][ T9505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.828672][ T3717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.841761][ T9517] loop0: detected capacity change from 0 to 4096 [ 158.959778][ T9517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.040751][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.614749][ T9548] __nla_validate_parse: 5 callbacks suppressed [ 159.614764][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'. [ 159.632922][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'. [ 159.646733][ T9548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.657379][ T9548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.749633][ T9558] netlink: 'syz.0.2029': attribute type 16 has an invalid length. [ 159.766316][ T9558] netlink: 'syz.0.2029': attribute type 17 has an invalid length. [ 159.790774][ T9560] netlink: 'syz.6.2034': attribute type 7 has an invalid length. [ 159.799961][ T9560] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2034'. [ 160.081736][ T9558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.101837][ T9565] support for cryptoloop has been removed. Use dm-crypt instead. [ 160.368772][ T9573] loop5: detected capacity change from 0 to 512 [ 160.381072][ T9573] ext3: Unknown parameter '"޾' [ 160.453489][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 160.453570][ T28] audit: type=1326 audit(1771264476.605:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee04dbf79 code=0x7ffc0000 [ 160.491294][ T28] audit: type=1326 audit(1771264476.605:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee04dbf79 code=0x7ffc0000 [ 160.516360][ T28] audit: type=1326 audit(1771264476.635:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbee04dbf79 code=0x7ffc0000 [ 160.540684][ T28] audit: type=1326 audit(1771264476.635:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbee04dbce2 code=0x7ffc0000 [ 160.563949][ T28] audit: type=1326 audit(1771264476.645:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbee049c84e code=0x7ffc0000 [ 160.615051][ T28] audit: type=1326 audit(1771264476.715:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbee04dbda7 code=0x7ffc0000 [ 160.659680][ T28] audit: type=1326 audit(1771264476.765:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbee049c84e code=0x7ffc0000 [ 160.700023][ T28] audit: type=1326 audit(1771264476.765:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbee04dbc0b code=0x7ffc0000 [ 160.732830][ T28] audit: type=1326 audit(1771264476.765:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbee04dbc0b code=0x7ffc0000 [ 160.793780][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2044'. [ 160.802931][ T28] audit: type=1326 audit(1771264476.765:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.5.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbee049c84e code=0x7ffc0000 [ 161.091748][ T9596] loop5: detected capacity change from 0 to 1024 [ 161.110423][ T9600] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 161.225207][ T9596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.254020][ T9603] loop0: detected capacity change from 0 to 512 [ 161.309851][ T9596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 161.321758][ T9603] EXT4-fs: Ignoring removed oldalloc option [ 161.331897][ T9596] System zones: 0-1, 3-36 [ 161.341651][ T9596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.381683][ T9603] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.2047: Parent and EA inode have the same ino 15 [ 161.419378][ T9603] loop0: lost filesystem error report for type 5 error -117 [ 161.426933][ T9603] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.2047: Parent and EA inode have the same ino 15 [ 161.434287][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 161.434302][ C0] EXT4-fs (loop0): initial error at time 1771264477: ext4_xattr_inode_iget:437 [ 161.434321][ C0] EXT4-fs (loop0): last error at time 1771264477: ext4_xattr_inode_iget:437 [ 161.515487][ T3717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.538380][ T9603] loop0: lost filesystem error report for type 5 error -117 [ 161.538616][ T9603] EXT4-fs (loop0): 1 orphan inode deleted [ 161.551771][ T9610] loop6: detected capacity change from 0 to 8192 [ 161.552782][ T9603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.580149][ T9610] syz_tun: entered allmulticast mode [ 161.645510][ T9620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9620 comm=syz.2.2055 [ 161.671617][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 161.682364][ T9602] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.2047: deleted inode referenced: 15 [ 161.786192][ T9628] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 161.786404][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.804785][ T9630] support for cryptoloop has been removed. Use dm-crypt instead. [ 161.910805][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2049'. [ 161.928883][ T9639] loop2: detected capacity change from 0 to 128 [ 161.946170][ T9635] loop0: detected capacity change from 0 to 512 [ 162.293470][ T9653] mmap: syz.6.2063 (9653) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.323094][ T9656] loop0: detected capacity change from 0 to 512 [ 162.338257][ T9656] ext3: Unknown parameter '" J' [ 162.398329][ T9656] loop0: detected capacity change from 0 to 256 [ 162.474108][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2066'. [ 162.517285][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2066'. [ 162.554037][ T9670] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 162.566523][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2066'. [ 162.575823][ T9665] loop1: detected capacity change from 0 to 1768 [ 162.576155][ T9665] iso9660: Bad value for 'dmode' [ 162.701972][ T9675] loop0: detected capacity change from 0 to 8192 [ 162.712375][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2066'. [ 162.789744][ T9675] syz_tun: entered allmulticast mode [ 162.844709][ T9639] bio_check_eod: 74 callbacks suppressed [ 162.844723][ T9639] syz.2.2060: attempt to access beyond end of device [ 162.844723][ T9639] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 162.864869][ T9639] buffer_io_error: 46 callbacks suppressed [ 162.864884][ T9639] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 162.944612][ T9680] loop2: detected capacity change from 0 to 2048 [ 163.028371][ T3301] Alternate GPT is invalid, using primary GPT. [ 163.039587][ T3301] loop2: p2 p3 p7 [ 163.075394][ T9680] Alternate GPT is invalid, using primary GPT. [ 163.089958][ T9680] loop2: p2 p3 p7 [ 163.144426][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 163.146655][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 163.173285][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 163.243012][ T9693] loop1: detected capacity change from 0 to 512 [ 163.250387][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 163.250930][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 163.268991][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 163.292108][ T9695] loop6: detected capacity change from 0 to 512 [ 163.298864][ T9696] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 163.357376][ T9702] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 163.359046][ T9695] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.402946][ T9704] netlink: 'syz.1.2083': attribute type 1 has an invalid length. [ 163.439080][ T9704] bond3: entered promiscuous mode [ 163.442932][ T9695] EXT4-fs error (device loop6): ext4_add_entry:2415: inode #2: comm syz.6.2080: Directory hole found for htree leaf block 0 [ 163.444367][ T9704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.479520][ T9704] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.493364][ T9704] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 163.512493][ T9704] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 163.529317][ T9708] loop2: detected capacity change from 0 to 1024 [ 163.547670][ T9708] EXT4-fs: inline encryption not supported [ 163.560606][ T9708] EXT4-fs: old and new quota format mixing [ 163.625085][ T9713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9713 comm=syz.0.2085 [ 164.040465][ T9729] lo: entered allmulticast mode [ 164.186962][ T5784] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 164.747425][ T9750] ext3: Unknown parameter '"' [ 164.797208][ T9752] ext3: Unknown parameter '"޾' [ 164.952195][ T9767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9767 comm=syz.1.2104 [ 165.004694][ T9767] __nla_validate_parse: 4 callbacks suppressed [ 165.004709][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2104'. [ 165.075075][ T9777] support for cryptoloop has been removed. Use dm-crypt instead. [ 165.258203][ T9781] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 165.528858][ T9791] netlink: 'syz.6.2111': attribute type 25 has an invalid length. [ 165.552926][ T9791] netlink: 'syz.6.2111': attribute type 3 has an invalid length. [ 165.564113][ T9786] Alternate GPT is invalid, using primary GPT. [ 165.570687][ T9786] loop1: p2 p3 p7 [ 165.577264][ T9791] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2111'. [ 165.700683][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 165.700697][ T28] audit: type=1400 audit(1771264737.846:825): avc: denied { shutdown } for pid=9782 comm="syz.2.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.747169][ T9800] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.772418][ T9800] EXT4-fs (loop1): 1 orphan inode deleted [ 165.779755][ T9800] EXT4-fs (loop1): 1 truncate cleaned up [ 165.785867][ T9800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.886481][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.944402][ T9811] ext3: Unknown parameter '"' [ 166.403880][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2122'. [ 166.412850][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2122'. [ 166.459053][ T28] audit: type=1326 audit(1771264738.596:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 166.463996][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2123'. [ 166.485634][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.494493][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2123'. [ 166.512122][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.523380][ T9831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.527181][ T28] audit: type=1326 audit(1771264738.596:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 166.539670][ T9831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.555643][ T28] audit: type=1326 audit(1771264738.596:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 166.601115][ T28] audit: type=1326 audit(1771264738.606:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 166.627866][ T9822] netlink: 'syz.5.2122': attribute type 16 has an invalid length. [ 166.635872][ T9822] netlink: 'syz.5.2122': attribute type 17 has an invalid length. [ 166.643946][ T28] audit: type=1326 audit(1771264738.606:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 166.671118][ T28] audit: type=1326 audit(1771264738.606:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 166.715925][ T28] audit: type=1326 audit(1771264738.606:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 166.739584][ T28] audit: type=1326 audit(1771264738.606:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 166.827037][ T9822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.866013][ T28] audit: type=1326 audit(1771264738.606:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.2.2121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 166.973372][ T9826] bridge0: port 3(gretap0) entered disabled state [ 166.988399][ T9848] set_capacity_and_notify: 10 callbacks suppressed [ 166.988415][ T9848] loop7: detected capacity change from 0 to 16384 [ 167.003015][ T9831] netlink: 'syz.6.2123': attribute type 16 has an invalid length. [ 167.070240][ T9831] netlink: 'syz.6.2123': attribute type 17 has an invalid length. [ 167.385370][ T9831] bridge0: port 3(gretap0) entered blocking state [ 167.391906][ T9831] bridge0: port 3(gretap0) entered forwarding state [ 167.408919][ T9850] loop7: detected capacity change from 16384 to 0 [ 167.415646][ C1] I/O error, dev loop7, sector 11264 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 167.425610][ C1] I/O error, dev loop7, sector 11520 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 167.546386][ T9831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.652558][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 167.842167][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2136'. [ 168.019713][ T9875] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2139'. [ 168.046354][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'. [ 168.057464][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.067434][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.106154][ T9881] loop5: detected capacity change from 0 to 512 [ 168.113532][ T9881] ext3: Unknown parameter '"' [ 168.135446][ T9882] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 168.144683][ T9882] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 168.304517][ T9898] loop6: detected capacity change from 0 to 512 [ 168.611716][ T9910] FAULT_INJECTION: forcing a failure. [ 168.611716][ T9910] name failslab, interval 1, probability 0, space 0, times 0 [ 168.624493][ T9910] CPU: 1 UID: 0 PID: 9910 Comm: syz.6.2152 Not tainted syzkaller #0 PREEMPT(full) [ 168.624517][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.624567][ T9910] Call Trace: [ 168.624573][ T9910] [ 168.624599][ T9910] __dump_stack+0x1d/0x30 [ 168.624624][ T9910] dump_stack_lvl+0x95/0xd0 [ 168.624695][ T9910] dump_stack+0x15/0x1b [ 168.624714][ T9910] should_fail_ex+0x263/0x280 [ 168.624813][ T9910] ? alloc_fs_context+0x46/0x580 [ 168.624832][ T9910] should_failslab+0x8c/0xb0 [ 168.624888][ T9910] __kmalloc_cache_noprof+0x5f/0x410 [ 168.624908][ T9910] alloc_fs_context+0x46/0x580 [ 168.624926][ T9910] fs_context_for_mount+0x22/0x30 [ 168.624994][ T9910] do_new_mount+0xe7/0x8d0 [ 168.625023][ T9910] ? security_capable+0x7b/0x90 [ 168.625109][ T9910] path_mount+0x4d0/0xbc0 [ 168.625140][ T9910] __se_sys_mount+0x28c/0x2e0 [ 168.625158][ T9910] __x64_sys_mount+0x67/0x80 [ 168.625185][ T9910] x64_sys_call+0x2d61/0x3020 [ 168.625258][ T9910] do_syscall_64+0x12c/0x370 [ 168.625354][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.625407][ T9910] RIP: 0033:0x7fa73d1dbf79 [ 168.625500][ T9910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.625519][ T9910] RSP: 002b:00007fa73bc37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.625546][ T9910] RAX: ffffffffffffffda RBX: 00007fa73d455fa0 RCX: 00007fa73d1dbf79 [ 168.625587][ T9910] RDX: 0000200000000040 RSI: 0000200000000d40 RDI: 0000000000000000 [ 168.625599][ T9910] RBP: 00007fa73bc37090 R08: 0000000000000000 R09: 0000000000000000 [ 168.625611][ T9910] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 168.625626][ T9910] R13: 00007fa73d456038 R14: 00007fa73d455fa0 R15: 00007ffc5c4090f8 [ 168.625647][ T9910] [ 168.848973][ T9914] loop5: detected capacity change from 0 to 512 [ 168.859609][ T9914] ext3: Unknown parameter '"޾' [ 168.873397][ T9920] FAULT_INJECTION: forcing a failure. [ 168.873397][ T9920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.893122][ T9922] SELinux: security_context_str_to_sid (O*3!L;(x?8>${S7#!g.&[n٦9P9\ETWq3H*8YYLGR!I*' CDX [ 168.893122][ T9922] s0dnph5L0|qD81A{ꈆnK P) failed with errno=-22 [ 168.937147][ T9914] loop5: detected capacity change from 0 to 256 [ 168.966670][ T9920] CPU: 0 UID: 0 PID: 9920 Comm: syz.0.2157 Not tainted syzkaller #0 PREEMPT(full) [ 168.966698][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.966709][ T9920] Call Trace: [ 168.966715][ T9920] [ 168.966773][ T9920] __dump_stack+0x1d/0x30 [ 168.966796][ T9920] dump_stack_lvl+0x95/0xd0 [ 168.966894][ T9920] dump_stack+0x15/0x1b [ 168.966914][ T9920] should_fail_ex+0x263/0x280 [ 168.966936][ T9920] should_fail+0xb/0x20 [ 168.966955][ T9920] should_fail_usercopy+0x1a/0x20 [ 168.966991][ T9920] _copy_from_user+0x1c/0xb0 [ 168.967073][ T9920] __x64_sys_epoll_ctl+0x92/0x100 [ 168.967096][ T9920] x64_sys_call+0x2a8b/0x3020 [ 168.967120][ T9920] do_syscall_64+0x12c/0x370 [ 168.967189][ T9920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.967210][ T9920] RIP: 0033:0x7f4afe48bf79 [ 168.967224][ T9920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.967240][ T9920] RSP: 002b:00007f4afcee7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 168.967266][ T9920] RAX: ffffffffffffffda RBX: 00007f4afe705fa0 RCX: 00007f4afe48bf79 [ 168.967280][ T9920] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 168.967291][ T9920] RBP: 00007f4afcee7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.967304][ T9920] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 168.967317][ T9920] R13: 00007f4afe706038 R14: 00007f4afe705fa0 R15: 00007ffe08853b88 [ 168.967335][ T9920] [ 169.191394][ T9934] loop1: detected capacity change from 0 to 512 [ 169.235132][ T9938] netlink: 'syz.6.2165': attribute type 1 has an invalid length. [ 169.251743][ T9938] bond1: entered promiscuous mode [ 169.257035][ T9938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.360065][ T9934] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.891880][ T9953] syzkaller1: entered promiscuous mode [ 169.911630][ T9953] syzkaller1: entered allmulticast mode [ 169.959574][ T9957] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.2163: Directory hole found for htree leaf block 0 [ 169.980739][ T9958] loop0: detected capacity change from 0 to 512 [ 169.993378][ T9959] loop6: detected capacity change from 0 to 128 [ 170.000859][ T9934] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.2163: Directory hole found for htree leaf block 0 [ 170.014289][ T9958] ext3: Unknown parameter '"J' [ 170.021979][ T9959] EXT4-fs: Ignoring removed nobh option [ 170.036078][ T9958] loop0: detected capacity change from 0 to 256 [ 170.163797][ T9959] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.177474][ T9959] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.218493][ T3311] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 170.266370][ T9967] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 170.346611][ T9967] bond5: entered promiscuous mode [ 170.358481][ T9967] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.449570][ T9980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9980 comm=syz.5.2177 [ 170.562945][ T9989] support for cryptoloop has been removed. Use dm-crypt instead. [ 170.575193][ T9975] __nla_validate_parse: 5 callbacks suppressed [ 170.575209][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2177'. [ 170.611518][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2182'. [ 170.620605][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2182'. [ 170.636397][ T9990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.649678][ T9990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.742012][ T5784] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.758321][ T9995] netlink: 'syz.1.2182': attribute type 16 has an invalid length. [ 170.766233][ T9995] netlink: 'syz.1.2182': attribute type 17 has an invalid length. [ 170.860881][ T9995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.006084][T10011] netlink: 'syz.0.2190': attribute type 5 has an invalid length. [ 171.049352][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2190'. [ 171.121323][T10011] ip6erspan0: entered promiscuous mode [ 171.214606][T10017] netlink: 'syz.2.2193': attribute type 16 has an invalid length. [ 171.222662][T10017] netlink: 'syz.2.2193': attribute type 17 has an invalid length. [ 171.247308][T10017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.288472][T10020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10020 comm=syz.2.2193 [ 171.327884][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 171.327902][ T28] audit: type=1400 audit(1771264999.458:862): avc: denied { sys_module } for pid=10018 comm="syz.5.2194" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 171.361451][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.371821][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.384431][T10015] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.427597][T10015] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.442838][ T28] audit: type=1400 audit(1771264999.588:863): avc: denied { read write } for pid=10014 comm="syz.0.2192" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.475323][ T28] audit: type=1400 audit(1771264999.588:864): avc: denied { open } for pid=10014 comm="syz.0.2192" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 171.538234][ T28] audit: type=1326 audit(1771264999.588:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10014 comm="syz.0.2192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4afe48bf79 code=0x0 [ 171.593728][T10035] netlink: 'syz.6.2199': attribute type 1 has an invalid length. [ 171.610280][T10035] bond2: entered promiscuous mode [ 171.615683][T10035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.656034][T10042] FAULT_INJECTION: forcing a failure. [ 171.656034][T10042] name failslab, interval 1, probability 0, space 0, times 0 [ 171.675226][T10042] CPU: 0 UID: 0 PID: 10042 Comm: syz.6.2202 Not tainted syzkaller #0 PREEMPT(full) [ 171.675279][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.675292][T10042] Call Trace: [ 171.675308][T10042] [ 171.675315][T10042] __dump_stack+0x1d/0x30 [ 171.675337][T10042] dump_stack_lvl+0x95/0xd0 [ 171.675417][T10042] dump_stack+0x15/0x1b [ 171.675440][T10042] should_fail_ex+0x263/0x280 [ 171.675464][T10042] should_failslab+0x8c/0xb0 [ 171.675544][T10042] __kvmalloc_node_noprof+0x155/0x650 [ 171.675571][T10042] ? traverse+0xa2/0x3a0 [ 171.675635][T10042] traverse+0xa2/0x3a0 [ 171.675726][T10042] seq_read_iter+0x85f/0x940 [ 171.675754][T10042] ? _parse_integer_limit+0x170/0x190 [ 171.675819][T10042] seq_read+0x279/0x2c0 [ 171.675845][T10042] ? __pfx_seq_read+0x10/0x10 [ 171.675866][T10042] proc_reg_read+0x128/0x1c0 [ 171.675889][T10042] ? __pfx_proc_reg_read+0x10/0x10 [ 171.675988][T10042] vfs_readv+0x432/0x6e0 [ 171.676015][T10042] __x64_sys_preadv+0xfd/0x1c0 [ 171.676046][T10042] x64_sys_call+0x2915/0x3020 [ 171.676076][T10042] do_syscall_64+0x12c/0x370 [ 171.676185][T10042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.676264][T10042] RIP: 0033:0x7fa73d1dbf79 [ 171.676281][T10042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.676300][T10042] RSP: 002b:00007fa73bc37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 171.676341][T10042] RAX: ffffffffffffffda RBX: 00007fa73d455fa0 RCX: 00007fa73d1dbf79 [ 171.676357][T10042] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 171.676372][T10042] RBP: 00007fa73bc37090 R08: 00000000000006b8 R09: 0000000000000000 [ 171.676387][T10042] R10: 000000000000008f R11: 0000000000000246 R12: 0000000000000001 [ 171.676402][T10042] R13: 00007fa73d456038 R14: 00007fa73d455fa0 R15: 00007ffc5c4090f8 [ 171.676438][T10042] [ 171.873335][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2201'. [ 171.884794][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2201'. [ 171.907203][T10047] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.922569][T10047] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.2203: Directory hole found for htree leaf block 0 [ 171.937189][T10039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.972663][T10039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.985393][T10056] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.2203: Directory hole found for htree leaf block 0 [ 172.081822][ T28] audit: type=1326 audit(1771265000.228:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz.1.2203" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f809b17bf79 code=0x0 [ 172.087217][T10048] netlink: 'syz.5.2201': attribute type 16 has an invalid length. [ 172.155688][T10048] netlink: 'syz.5.2201': attribute type 17 has an invalid length. [ 172.236232][T10048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.350262][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 172.359253][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 172.369227][T10067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.377726][T10067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.439618][T10069] netlink: 'syz.2.2208': attribute type 16 has an invalid length. [ 172.457655][T10069] netlink: 'syz.2.2208': attribute type 17 has an invalid length. [ 172.503088][T10069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.533116][ T3311] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 172.801309][T10076] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 172.952126][T10081] set_capacity_and_notify: 4 callbacks suppressed [ 172.952140][T10081] loop6: detected capacity change from 0 to 512 [ 172.981330][T10081] ext3: Unknown parameter '" ;' [ 173.020159][T10081] loop6: detected capacity change from 0 to 256 [ 173.096200][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2216'. [ 173.148148][T10090] bond3: entered promiscuous mode [ 173.153368][T10090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.260104][T10095] loop2: detected capacity change from 0 to 512 [ 173.272872][T10095] EXT4-fs error (device loop2): ext4_quota_enable:7194: inode #3: comm syz.2.2220: iget: checksum invalid [ 173.300024][T10095] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -74 [ 173.301393][T10095] EXT4-fs error (device loop2): ext4_quota_enable:7197: comm syz.2.2220: Bad quota inode: 3, type: 0 [ 173.310417][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 173.310437][ C1] EXT4-fs (loop2): initial error at time 1771265257: ext4_quota_enable:7194: inode 3 [ 173.310464][ C1] EXT4-fs (loop2): last error at time 1771265257: ext4_quota_enable:7194: inode 3 [ 173.321485][T10097] loop6: detected capacity change from 0 to 8192 [ 173.357317][T10095] loop2: lost filesystem error report for type 5 error -117 [ 173.362765][T10095] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 173.396157][T10101] loop5: detected capacity change from 0 to 512 [ 173.429736][T10101] ext3: Unknown parameter '"޾' [ 173.450443][T10095] EXT4-fs (loop2): mount failed [ 173.457494][T10101] loop5: detected capacity change from 0 to 256 [ 173.517170][ T28] audit: type=1326 audit(1771265257.665:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.2.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 173.564085][ T28] audit: type=1326 audit(1771265257.665:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.2.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 173.625217][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2221'. [ 173.657908][ T28] audit: type=1326 audit(1771265257.695:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.2.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 173.726168][ T28] audit: type=1326 audit(1771265257.695:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.2.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 173.726360][ T28] audit: type=1326 audit(1771265257.695:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10094 comm="syz.2.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 174.387469][T10131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10131 comm=syz.6.2230 [ 174.525582][T10137] support for cryptoloop has been removed. Use dm-crypt instead. [ 174.589414][T10144] support for cryptoloop has been removed. Use dm-crypt instead. [ 174.836198][T10153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.879441][T10153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.071567][T10165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.584140][T10181] loop1: detected capacity change from 0 to 512 [ 175.728636][T10185] loop5: detected capacity change from 0 to 128 [ 175.758382][T10181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.774635][T10185] FAT-fs (loop5): error, clusters badly computed (4 != 3) [ 175.776953][T10181] ext4 filesystem being mounted at /471/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.793663][T10185] FAT-fs (loop5): Filesystem has been set read-only [ 175.812264][T10185] FAT-fs (loop5): error, clusters badly computed (5 != 4) [ 175.844586][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.953297][T10194] support for cryptoloop has been removed. Use dm-crypt instead. [ 176.115357][T10196] dummy0: entered allmulticast mode [ 176.146908][T10196] loop5: detected capacity change from 0 to 512 [ 176.228527][T10196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.338438][T10196] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.368711][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 176.368726][ T28] audit: type=1400 audit(1771265260.515:904): avc: denied { ioctl } for pid=10192 comm="syz.5.2251" path="/392/file1/file1" dev="loop5" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.495186][ T28] audit: type=1400 audit(1771265260.625:905): avc: denied { connect } for pid=10192 comm="syz.5.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 176.556693][ T28] audit: type=1400 audit(1771265260.635:906): avc: denied { read } for pid=10192 comm="syz.5.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 176.557152][T10209] FAULT_INJECTION: forcing a failure. [ 176.557152][T10209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.608294][T10209] CPU: 1 UID: 0 PID: 10209 Comm: syz.2.2254 Not tainted syzkaller #0 PREEMPT(full) [ 176.608339][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.608353][T10209] Call Trace: [ 176.608360][T10209] [ 176.608367][T10209] __dump_stack+0x1d/0x30 [ 176.608394][T10209] dump_stack_lvl+0x95/0xd0 [ 176.608444][T10209] dump_stack+0x15/0x1b [ 176.608542][T10209] should_fail_ex+0x263/0x280 [ 176.608569][T10209] should_fail+0xb/0x20 [ 176.608591][T10209] should_fail_usercopy+0x1a/0x20 [ 176.608660][T10209] _copy_to_iter+0x251/0xea0 [ 176.608689][T10209] ? traverse+0x379/0x3a0 [ 176.608763][T10209] seq_read_iter+0x1d5/0x940 [ 176.608793][T10209] ? _parse_integer_limit+0x170/0x190 [ 176.608856][T10209] seq_read+0x279/0x2c0 [ 176.608887][T10209] ? __pfx_seq_read+0x10/0x10 [ 176.608913][T10209] proc_reg_read+0x128/0x1c0 [ 176.608962][T10209] ? __pfx_proc_reg_read+0x10/0x10 [ 176.609002][T10209] vfs_readv+0x432/0x6e0 [ 176.609028][T10209] __x64_sys_preadv+0xfd/0x1c0 [ 176.609064][T10209] x64_sys_call+0x2915/0x3020 [ 176.609091][T10209] do_syscall_64+0x12c/0x370 [ 176.609142][T10209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.609163][T10209] RIP: 0033:0x7fc9fe4abf79 [ 176.609226][T10209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.609242][T10209] RSP: 002b:00007fc9fceff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 176.609306][T10209] RAX: ffffffffffffffda RBX: 00007fc9fe725fa0 RCX: 00007fc9fe4abf79 [ 176.609321][T10209] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 176.609334][T10209] RBP: 00007fc9fceff090 R08: 0000000000000000 R09: 0000000000000000 [ 176.609349][T10209] R10: 0000000000000144 R11: 0000000000000246 R12: 0000000000000001 [ 176.609438][T10209] R13: 00007fc9fe726038 R14: 00007fc9fe725fa0 R15: 00007ffcef4a35c8 [ 176.609459][T10209] [ 176.621646][T10212] loop0: detected capacity change from 0 to 512 [ 176.692726][ T28] audit: type=1400 audit(1771265260.845:907): avc: denied { setopt } for pid=10213 comm="syz.1.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 176.739408][T10212] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.807702][T10212] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.2253: Directory hole found for htree leaf block 0 [ 176.843203][T10220] __nla_validate_parse: 4 callbacks suppressed [ 176.843219][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2256'. [ 176.867480][T10221] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.2253: Directory hole found for htree leaf block 0 [ 176.932353][T10223] ext3: Unknown parameter '" ' [ 176.968947][ T28] audit: type=1326 audit(1771265261.125:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.0.2253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4afe48bf79 code=0x0 [ 177.014799][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'. [ 177.025834][ T3717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.033581][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'. [ 177.065524][T10225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.078165][T10225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.126591][T10233] validate_nla: 3 callbacks suppressed [ 177.126606][T10233] netlink: 'syz.6.2261': attribute type 16 has an invalid length. [ 177.164225][T10233] netlink: 'syz.6.2261': attribute type 17 has an invalid length. [ 177.172520][T10234] netlink: 'syz.2.2258': attribute type 16 has an invalid length. [ 177.190656][T10234] netlink: 'syz.2.2258': attribute type 17 has an invalid length. [ 177.235086][T10237] syz_tun: entered allmulticast mode [ 177.266596][T10233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.357852][T10234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.453356][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2260'. [ 177.476976][ T3317] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 177.679292][T10245] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 177.730597][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2267'. [ 177.741869][T10251] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2266'. [ 177.774693][T10247] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2265'. [ 177.806851][T10251] ip6t_rpfilter: unknown options [ 177.820478][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2268'. [ 177.827235][T10247] bond0: entered promiscuous mode [ 177.858823][T10247] bond_slave_0: entered promiscuous mode [ 177.869930][T10247] bond_slave_1: entered promiscuous mode [ 177.891637][T10247] bond0: left promiscuous mode [ 177.896897][T10247] bond_slave_0: left promiscuous mode [ 177.931931][T10247] bond_slave_1: left promiscuous mode [ 177.933042][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2269'. [ 177.948065][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2269'. [ 177.979169][T10263] syz.1.2266: attempt to access beyond end of device [ 177.979169][T10263] loop1: rw=2049, sector=817, nr_sectors = 1 limit=128 [ 177.990277][T10262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.013881][T10263] syz.1.2266: attempt to access beyond end of device [ 178.013881][T10263] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 178.040736][T10263] syz.1.2266: attempt to access beyond end of device [ 178.040736][T10263] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 178.061908][T10262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.066533][T10263] syz.1.2266: attempt to access beyond end of device [ 178.066533][T10263] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 178.071216][T10261] set_capacity_and_notify: 3 callbacks suppressed [ 178.071309][T10261] loop2: detected capacity change from 0 to 512 [ 178.091599][T10263] syz.1.2266: attempt to access beyond end of device [ 178.091599][T10263] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 178.099585][T10261] ext3: Unknown parameter '"' [ 178.141849][T10261] loop2: detected capacity change from 0 to 256 [ 178.159120][T10263] syz.1.2266: attempt to access beyond end of device [ 178.159120][T10263] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 178.172446][T10262] netlink: 'syz.5.2269': attribute type 16 has an invalid length. [ 178.172460][T10262] netlink: 'syz.5.2269': attribute type 17 has an invalid length. [ 178.239337][ T28] audit: type=1400 audit(1771265518.392:909): avc: denied { getopt } for pid=10267 comm="syz.0.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.241578][T10263] syz.1.2266: attempt to access beyond end of device [ 178.241578][T10263] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 178.279413][T10262] dummy0: left allmulticast mode [ 178.287098][T10270] support for cryptoloop has been removed. Use dm-crypt instead. [ 178.296251][T10263] syz.1.2266: attempt to access beyond end of device [ 178.296251][T10263] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 178.296337][T10263] syz.1.2266: attempt to access beyond end of device [ 178.296337][T10263] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 178.296377][T10263] syz.1.2266: attempt to access beyond end of device [ 178.296377][T10263] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 178.400752][T10275] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.490707][T10262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.506477][T10278] loop1: detected capacity change from 0 to 8192 [ 178.533070][ T28] audit: type=1326 audit(1771265518.672:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10280 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 178.579132][ T28] audit: type=1326 audit(1771265518.672:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10280 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 178.641357][ T28] audit: type=1326 audit(1771265518.682:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10280 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 178.821436][ T28] audit: type=1326 audit(1771265518.682:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10280 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9fe4abf79 code=0x7ffc0000 [ 179.501378][T10305] wireguard0: entered promiscuous mode [ 179.507034][T10305] wireguard0: entered allmulticast mode [ 179.559216][T10315] loop2: detected capacity change from 0 to 512 [ 179.567334][T10315] ext3: Unknown parameter '"' [ 179.643568][T10317] loop2: detected capacity change from 0 to 512 [ 179.654970][T10317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.681733][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.813734][T10333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10333 comm=syz.5.2294 [ 180.206107][T10352] FAULT_INJECTION: forcing a failure. [ 180.206107][T10352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.257869][T10352] CPU: 0 UID: 0 PID: 10352 Comm: syz.6.2300 Not tainted syzkaller #0 PREEMPT(full) [ 180.257934][T10352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.257945][T10352] Call Trace: [ 180.257951][T10352] [ 180.257958][T10352] __dump_stack+0x1d/0x30 [ 180.257983][T10352] dump_stack_lvl+0x95/0xd0 [ 180.258004][T10352] dump_stack+0x15/0x1b [ 180.258096][T10352] should_fail_ex+0x263/0x280 [ 180.258118][T10352] should_fail+0xb/0x20 [ 180.258185][T10352] should_fail_usercopy+0x1a/0x20 [ 180.258206][T10352] _copy_from_user+0x1c/0xb0 [ 180.258302][T10352] ___sys_sendmsg+0xc1/0x1e0 [ 180.258380][T10352] __x64_sys_sendmsg+0xd4/0x160 [ 180.258405][T10352] x64_sys_call+0x194c/0x3020 [ 180.258428][T10352] do_syscall_64+0x12c/0x370 [ 180.258459][T10352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.258478][T10352] RIP: 0033:0x7fa73d1dbf79 [ 180.258492][T10352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.258581][T10352] RSP: 002b:00007fa73bc37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.258598][T10352] RAX: ffffffffffffffda RBX: 00007fa73d455fa0 RCX: 00007fa73d1dbf79 [ 180.258611][T10352] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000003 [ 180.258624][T10352] RBP: 00007fa73bc37090 R08: 0000000000000000 R09: 0000000000000000 [ 180.258636][T10352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.258647][T10352] R13: 00007fa73d456038 R14: 00007fa73d455fa0 R15: 00007ffc5c4090f8 [ 180.258696][T10352] [ 180.728650][T10368] loop6: detected capacity change from 0 to 8192 [ 180.957259][T10390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.967116][T10390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.039231][T10396] netlink: 'syz.2.2313': attribute type 16 has an invalid length. [ 181.097967][T10396] netlink: 'syz.2.2313': attribute type 17 has an invalid length. [ 181.206123][T10396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.387458][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.400366][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.419081][T10415] netlink: 'syz.1.2322': attribute type 16 has an invalid length. [ 181.427058][T10415] netlink: 'syz.1.2322': attribute type 17 has an invalid length. [ 181.542791][T10415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.657079][T10428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.667051][T10428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.831858][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 181.831873][ T28] audit: type=1400 audit(1771265521.982:924): avc: denied { create } for pid=10434 comm="syz.2.2329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 182.261372][ T28] audit: type=1400 audit(1771265522.412:925): avc: denied { create } for pid=10455 comm="syz.2.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.281376][T10446] loop0: detected capacity change from 0 to 8192 [ 182.288294][ T28] audit: type=1400 audit(1771265522.432:926): avc: denied { ioctl } for pid=10455 comm="syz.2.2338" path="socket:[34277]" dev="sockfs" ino=34277 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.350071][T10464] __nla_validate_parse: 9 callbacks suppressed [ 182.350085][T10464] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2340'. [ 182.444087][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2343'. [ 182.469872][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2343'. [ 182.508683][T10477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.527599][T10477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.615376][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2334'. [ 182.922441][T10485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10485 comm=syz.2.2345 [ 182.937352][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'. [ 183.001658][T10491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10491 comm=syz.2.2348 [ 183.040615][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2348'. [ 183.052241][T10494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.074556][T10494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.163706][T10499] xt_CT: No such helper "netbios-ns" [ 183.202312][T10499] 9p: Could not find request transport: uni^ek}toر)&KpJws A4}(3ݒ [ 183.236527][T10499] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2352'. [ 183.238216][ T28] audit: type=1400 audit(1771265523.352:927): avc: denied { mounton } for pid=10498 comm="syz.2.2352" path=2F3530322FE91F7189591E9233614B dev="tmpfs" ino=2763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 183.272619][T10499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2352'. [ 183.559320][T10520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10520 comm=syz.5.2358 [ 183.577776][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2358'. [ 183.692465][T10528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.699740][T10528] IPv6: NLM_F_CREATE should be set when creating new route [ 183.756717][T10526] loop5: detected capacity change from 0 to 8192 [ 183.790106][T10533] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 183.829798][T10531] bridge0: port 3(gretap0) entered disabled state [ 184.110694][T10539] loop0: detected capacity change from 0 to 512 [ 184.171844][T10539] ext3: Unknown parameter '" J' [ 184.235634][T10539] loop0: detected capacity change from 0 to 256 [ 184.311278][T10531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.338821][T10531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.415696][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2360'. [ 184.499141][T10533] bond4: entered promiscuous mode [ 184.504542][T10533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.523681][T10532] syz1: Port: 1 Link DOWN [ 184.549165][ T56] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.569448][ T56] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.602923][ T28] audit: type=1400 audit(1771265524.742:928): avc: denied { read } for pid=10562 comm="syz.2.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.622590][ T56] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.622635][ T56] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.745269][T10575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10575 comm=syz.1.2370 [ 184.815072][T10578] loop2: detected capacity change from 0 to 1024 [ 184.838499][T10578] EXT4-fs: Ignoring removed oldalloc option [ 184.866150][T10578] EXT4-fs: Ignoring removed bh option [ 184.922838][T10578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.263226][T10619] netlink: 'syz.0.2385': attribute type 1 has an invalid length. [ 185.280943][T10619] bond6: entered promiscuous mode [ 185.286363][T10619] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.532098][T10631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.553349][T10631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.659851][T10643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.670228][T10643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.680911][T10643] netlink: 'syz.1.2392': attribute type 16 has an invalid length. [ 185.695400][T10643] netlink: 'syz.1.2392': attribute type 17 has an invalid length. [ 185.775026][T10643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.806051][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.941406][T10662] syzkaller1: entered promiscuous mode [ 185.946909][T10662] syzkaller1: entered allmulticast mode [ 185.982885][T10662] loop2: detected capacity change from 0 to 128 [ 185.990870][T10662] EXT4-fs: Ignoring removed nobh option [ 186.002006][T10662] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.002252][T10665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.022604][T10662] ext4 filesystem being mounted at /513/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.044293][T10665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.326481][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.439098][T10680] loop1: detected capacity change from 0 to 512 [ 186.468339][T10680] ext3: Unknown parameter '" ' [ 186.522073][T10680] loop1: detected capacity change from 0 to 256 [ 187.200222][T10699] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.304327][T10701] loop6: detected capacity change from 0 to 8192 [ 187.385623][T10706] __nla_validate_parse: 14 callbacks suppressed [ 187.385640][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2418'. [ 187.403941][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2418'. [ 187.414402][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2418'. [ 187.475666][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.493022][T10710] loop5: detected capacity change from 0 to 512 [ 187.528672][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.536116][T10710] ext3: Unknown parameter '"޾' [ 187.672481][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2417'. [ 187.720793][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2424'. [ 187.762070][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'. [ 187.956723][T10736] netlink: 'syz.5.2432': attribute type 1 has an invalid length. [ 187.970273][T10736] bond2: entered promiscuous mode [ 187.975602][T10736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.120669][T10750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2441'. [ 188.221091][T10759] mmap: syz.5.2445 (10759): VmData 16494592 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 188.241423][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2443'. [ 188.284866][T10761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.293410][T10761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.313180][T10761] netlink: 'syz.1.2443': attribute type 16 has an invalid length. [ 188.375671][T10769] netlink: 'syz.6.2448': attribute type 1 has an invalid length. [ 188.387387][T10772] loop5: detected capacity change from 0 to 512 [ 188.390157][T10769] bond4: entered promiscuous mode [ 188.401189][T10769] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.418372][T10772] ext3: Unknown parameter '"޾' [ 188.461364][T10776] netlink: 'syz.6.2449': attribute type 1 has an invalid length. [ 188.487388][T10776] bond5: entered promiscuous mode [ 188.512145][T10776] 8021q: adding VLAN 0 to HW filter on device bond5 [ 188.590058][T10782] dummy0: entered allmulticast mode [ 188.655532][T10785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.669220][T10785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.691098][T10782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.709341][T10782] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.795049][T10792] set_capacity_and_notify: 2 callbacks suppressed [ 188.795063][T10792] loop2: detected capacity change from 0 to 512 [ 188.821039][T10792] ext3: Unknown parameter '"' [ 188.866505][T10792] loop2: detected capacity change from 0 to 256 [ 188.896808][T10797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2455'. [ 188.982304][T10807] FAULT_INJECTION: forcing a failure. [ 188.982304][T10807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.014237][T10807] CPU: 0 UID: 0 PID: 10807 Comm: syz.2.2458 Not tainted syzkaller #0 PREEMPT(full) [ 189.014466][T10807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.014487][T10807] Call Trace: [ 189.014534][T10807] [ 189.014541][T10807] __dump_stack+0x1d/0x30 [ 189.014589][T10807] dump_stack_lvl+0x95/0xd0 [ 189.014614][T10807] dump_stack+0x15/0x1b [ 189.014637][T10807] should_fail_ex+0x263/0x280 [ 189.014663][T10807] should_fail+0xb/0x20 [ 189.014686][T10807] should_fail_usercopy+0x1a/0x20 [ 189.014781][T10807] _copy_to_user+0x20/0xa0 [ 189.014812][T10807] simple_read_from_buffer+0xb5/0x130 [ 189.014842][T10807] proc_fail_nth_read+0x10e/0x150 [ 189.014900][T10807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.014927][T10807] vfs_read+0x1ab/0x7f0 [ 189.015066][T10807] ? __rcu_read_unlock+0x4e/0x70 [ 189.015088][T10807] ? __fget_files+0x184/0x1c0 [ 189.015110][T10807] ? mutex_lock+0x57/0x90 [ 189.015137][T10807] ksys_read+0xdc/0x1a0 [ 189.015237][T10807] __x64_sys_read+0x40/0x50 [ 189.015261][T10807] x64_sys_call+0x2886/0x3020 [ 189.015289][T10807] do_syscall_64+0x12c/0x370 [ 189.015321][T10807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.015357][T10807] RIP: 0033:0x7fc9fe46c84e [ 189.015415][T10807] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 189.015435][T10807] RSP: 002b:00007fc9fcefefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.015463][T10807] RAX: ffffffffffffffda RBX: 00007fc9fceff6c0 RCX: 00007fc9fe46c84e [ 189.015479][T10807] RDX: 000000000000000f RSI: 00007fc9fceff0a0 RDI: 0000000000000004 [ 189.015517][T10807] RBP: 00007fc9fceff090 R08: 0000000000000000 R09: 0000000000000000 [ 189.015531][T10807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.015546][T10807] R13: 00007fc9fe726038 R14: 00007fc9fe725fa0 R15: 00007ffcef4a35c8 [ 189.015571][T10807] [ 189.344819][ T28] audit: type=1400 audit(1771265529.492:929): avc: denied { setopt } for pid=10799 comm="syz.1.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 189.378738][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2460'. [ 189.499465][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.521457][T10855] netlink: 'syz.2.2463': attribute type 4 has an invalid length. [ 190.188684][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.197272][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.218392][T10923] netlink: 'syz.1.2465': attribute type 16 has an invalid length. [ 190.229607][T10928] tmpfs: Unknown parameter 'mpoind' [ 190.244214][T10928] loop0: detected capacity change from 0 to 1024 [ 190.657284][T10949] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 190.863216][T10964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.889456][T10964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.972454][T10973] netlink: 'syz.0.2486': attribute type 1 has an invalid length. [ 191.117394][T10981] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 191.509396][T11010] netlink: 'syz.6.2499': attribute type 1 has an invalid length. [ 191.655809][T11022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.666120][T11022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.685968][T11022] netlink: 'syz.6.2502': attribute type 16 has an invalid length. [ 191.706291][T11022] netlink: 'syz.6.2502': attribute type 17 has an invalid length. [ 191.741961][T11022] ip6gretap0: left promiscuous mode [ 191.748344][T11022] bridge0: port 3(gretap0) entered blocking state [ 191.754828][T11022] bridge0: port 3(gretap0) entered forwarding state [ 191.764732][T11022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.781139][T11022] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.793417][T11022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.846686][T11031] loop1: detected capacity change from 0 to 512 [ 191.856058][T10546] syz1: Port: 1 Link ACTIVE [ 191.880609][T11031] ext3: Unknown parameter '" ' [ 191.909485][T11031] loop1: detected capacity change from 0 to 256 [ 192.552823][ T28] audit: type=1400 audit(1771265532.702:930): avc: denied { read } for pid=11053 comm="syz.6.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.553384][T11054] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11054 comm=syz.6.2512 [ 192.870108][T11067] __nla_validate_parse: 10 callbacks suppressed [ 192.870125][T11067] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2517'. [ 193.082232][T11077] loop5: detected capacity change from 0 to 1024 [ 193.120099][T11078] netlink: 'syz.1.2521': attribute type 1 has an invalid length. [ 193.155809][T11077] EXT4-fs: Ignoring removed oldalloc option [ 193.185663][T11077] EXT4-fs: Ignoring removed bh option [ 193.219020][T11086] loop6: detected capacity change from 0 to 512 [ 193.375021][T11086] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.383027][T11077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.400291][T11090] loop1: detected capacity change from 0 to 8192 [ 193.419998][T11086] EXT4-fs error (device loop6): ext4_add_entry:2415: inode #2: comm syz.6.2524: Directory hole found for htree leaf block 0 [ 193.473137][T11086] EXT4-fs error (device loop6): ext4_add_entry:2415: inode #2: comm syz.6.2524: Directory hole found for htree leaf block 0 [ 193.941692][ T28] audit: type=1326 audit(1771265533.792:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.6.2524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa73d1dbf79 code=0x0 [ 194.098275][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2527'. [ 194.115699][ T5784] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 194.151323][ T3717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.281153][T11112] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2530'. [ 194.291800][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2528'. [ 194.301647][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2528'. [ 194.341490][T11107] netlink: 'syz.6.2528': attribute type 16 has an invalid length. [ 194.372320][T11107] netlink: 'syz.6.2528': attribute type 17 has an invalid length. [ 194.478045][T11107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.605361][T11127] loop1: detected capacity change from 0 to 1024 [ 194.612188][T11127] EXT4-fs: Ignoring removed oldalloc option [ 194.618954][T11127] EXT4-fs: Ignoring removed bh option [ 194.639629][T11127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.767615][ T28] audit: type=1400 audit(1771265790.913:932): avc: denied { append } for pid=11128 comm="syz.6.2536" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 195.391314][T11139] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 195.474545][T11143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2542'. [ 195.549898][T11145] loop2: detected capacity change from 0 to 1024 [ 195.556681][T11145] EXT4-fs: Ignoring removed oldalloc option [ 195.584318][T11145] EXT4-fs: Ignoring removed bh option [ 195.600129][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.638967][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2547'. [ 195.652936][T11145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.671882][T11150] netlink: 'syz.0.2547': attribute type 16 has an invalid length. [ 195.700569][T11156] netlink: 'syz.5.2546': attribute type 1 has an invalid length. [ 195.720324][T11150] netlink: 'syz.0.2547': attribute type 17 has an invalid length. [ 195.769601][T11150] dummy0: left allmulticast mode [ 195.778919][T11150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.407134][T11161] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4224: comm syz.2.2543: Allocating blocks 1-17 which overlap fs metadata [ 196.453186][T11145] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4224: comm syz.2.2543: Allocating blocks 1-17 which overlap fs metadata [ 196.509732][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.527146][T11179] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2554'. [ 196.607356][T11183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2556'. [ 197.216845][T11213] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 197.436363][T11216] loop0: detected capacity change from 0 to 512 [ 198.492727][ T28] audit: type=1400 audit(1771265794.603:933): avc: denied { ioctl } for pid=11258 comm="syz.2.2579" path="socket:[35565]" dev="sockfs" ino=35565 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.815644][T11266] loop2: detected capacity change from 0 to 1024 [ 198.881321][T11266] EXT4-fs: Ignoring removed oldalloc option [ 198.914357][T11266] EXT4-fs: Ignoring removed bh option [ 198.958052][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2584'. [ 198.987738][T11266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.275260][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'. [ 199.295117][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'. [ 199.362350][T11298] loop5: detected capacity change from 0 to 4096 [ 199.410064][ T28] audit: type=1400 audit(1771265795.563:934): avc: denied { map } for pid=11297 comm="syz.5.2592" path="socket:[35651]" dev="sockfs" ino=35651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.448170][T11302] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 199.464626][ T28] audit: type=1400 audit(1771265795.583:935): avc: denied { read } for pid=11297 comm="syz.5.2592" path="socket:[35651]" dev="sockfs" ino=35651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.579255][T11306] loop6: detected capacity change from 0 to 256 [ 199.593355][T11306] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 199.605316][T11308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11308 comm=syz.0.2596 [ 199.628767][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'. [ 199.679162][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.693712][T11311] loop1: detected capacity change from 0 to 256 [ 199.730562][T11311] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 200.077836][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2599'. [ 200.407566][T11334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.433740][T11334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.474952][T11337] netlink: 'syz.1.2605': attribute type 1 has an invalid length. [ 200.631414][T11314] loop2: detected capacity change from 0 to 2048 [ 200.720884][T11314] EXT4-fs: Ignoring removed orlov option [ 200.728835][T11314] EXT4-fs: Ignoring removed oldalloc option [ 200.869110][T11314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.895172][T11347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11347 comm=syz.0.2608 [ 200.926274][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 200.943934][T11314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.119658][T11352] netlink: 'syz.6.2610': attribute type 2 has an invalid length. [ 201.127441][T11352] netlink: 'syz.6.2610': attribute type 8 has an invalid length. [ 201.127553][T11350] loop0: detected capacity change from 0 to 8192 [ 201.138542][T11352] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2610'. [ 201.167307][T11354] dummy0: entered allmulticast mode [ 201.187870][T11355] loop6: detected capacity change from 0 to 512 [ 201.227707][T11355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.245395][T11354] loop5: detected capacity change from 0 to 512 [ 201.319766][T11354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.344900][T11354] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.367251][ T5784] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.443250][T11360] loop6: detected capacity change from 0 to 1024 [ 201.458394][T11360] EXT4-fs: Ignoring removed oldalloc option [ 201.508735][T11360] EXT4-fs: Ignoring removed bh option [ 201.515243][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2609'. [ 201.540185][T11360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.556146][T11370] netlink: 'syz.1.2613': attribute type 1 has an invalid length. [ 201.591798][T11372] loop1: detected capacity change from 0 to 1024 [ 201.599705][T11372] EXT4-fs: Ignoring removed oldalloc option [ 201.608194][T11372] EXT4-fs: Ignoring removed bh option [ 201.643806][T11372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.685549][T11379] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 201.850244][T11384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11384 comm=syz.2.2619 [ 201.865844][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2619'. [ 201.936704][T11386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2620'. [ 201.962960][T11388] netlink: 'syz.0.2621': attribute type 39 has an invalid length. [ 202.054256][ T3717] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.342797][ T5784] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.447430][T11404] loop0: detected capacity change from 0 to 1024 [ 202.477501][T11404] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 202.490510][T11404] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 202.547539][T11404] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 202.576715][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.644000][T11407] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 202.870989][T11412] loop1: detected capacity change from 0 to 512 [ 202.895746][T11412] ext3: Unknown parameter '" ' [ 203.054019][ T28] audit: type=1400 audit(1771265799.203:936): avc: denied { connect } for pid=11426 comm="syz.0.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 203.054138][T11429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11429 comm=syz.2.2638 [ 203.194598][T11428] loop0: detected capacity change from 0 to 512 [ 203.230473][T11441] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 203.324497][T11446] netlink: 'syz.1.2645': attribute type 1 has an invalid length. [ 203.332752][ T28] audit: type=1400 audit(1771265799.473:937): avc: denied { connect } for pid=11448 comm="syz.6.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.343131][T11428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.459400][T11428] ext4 filesystem being mounted at /538/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.067148][T11432] syz.0.2639 (11432) used greatest stack depth: 6088 bytes left [ 204.103049][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.796893][T11512] __nla_validate_parse: 6 callbacks suppressed [ 204.796911][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2667'. [ 204.818479][T11497] FAT-fs (loop0): Directory bread(block 64) failed [ 204.826774][T11497] FAT-fs (loop0): Directory bread(block 65) failed [ 204.850432][T11497] FAT-fs (loop0): Directory bread(block 66) failed [ 204.857496][T11497] FAT-fs (loop0): Directory bread(block 67) failed [ 204.869557][T11497] FAT-fs (loop0): Directory bread(block 68) failed [ 204.887132][T11497] FAT-fs (loop0): Directory bread(block 69) failed [ 204.914107][T11497] FAT-fs (loop0): Directory bread(block 70) failed [ 204.935288][T11497] FAT-fs (loop0): Directory bread(block 71) failed [ 204.959183][T11497] FAT-fs (loop0): Directory bread(block 72) failed [ 204.985702][T11497] FAT-fs (loop0): Directory bread(block 73) failed [ 205.066450][T11527] xt_hashlimit: overflow, rate too high: 0 [ 205.413108][T11497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2659'. [ 205.483570][T11540] batadv_slave_0: entered promiscuous mode [ 205.492850][T11539] batadv_slave_0: left promiscuous mode [ 205.710014][ T28] audit: type=1400 audit(1771265801.863:938): avc: denied { bind } for pid=11544 comm="syz.6.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.742367][T11547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=11547 comm=syz.6.2680 [ 205.756070][ T28] audit: type=1400 audit(1771265801.863:939): avc: denied { connect } for pid=11544 comm="syz.6.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.783410][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2682'. [ 205.785177][T11546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=11546 comm=syz.6.2680 [ 205.853352][T11554] set_capacity_and_notify: 2 callbacks suppressed [ 205.853368][T11554] loop0: detected capacity change from 0 to 512 [ 205.885434][T11554] ext3: Unknown parameter '" J' [ 205.904402][T11554] loop0: detected capacity change from 0 to 256 [ 205.921378][T11561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11561 comm=syz.6.2686 [ 205.973305][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2686'. [ 206.057777][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2690'. [ 206.083367][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2690'. [ 206.087617][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2692'. [ 206.102275][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2692'. [ 206.102450][T11569] netlink: 'syz.0.2690': attribute type 16 has an invalid length. [ 206.120512][ T28] audit: type=1326 audit(1771265802.263:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee04dbf79 code=0x7ffc0000 [ 206.145356][T11569] netlink: 'syz.0.2690': attribute type 17 has an invalid length. [ 206.153306][ T28] audit: type=1326 audit(1771265802.263:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee04dbf79 code=0x7ffc0000 [ 206.153741][T11580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.190188][ T28] audit: type=1326 audit(1771265802.263:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee04dbf79 code=0x7ffc0000 [ 206.226469][T11569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.243497][ T28] audit: type=1326 audit(1771265802.263:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fbee04dbf79 code=0x7ffc0000 [ 206.267202][ T28] audit: type=1326 audit(1771265802.263:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee04dbf79 code=0x7ffc0000 [ 206.293888][ T28] audit: type=1326 audit(1771265802.263:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11576 comm="syz.5.2693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee04dbf79 code=0x7ffc0000 [ 206.298271][T11580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.442287][T11574] bridge0: port 3(gretap0) entered disabled state [ 206.489704][T11574] netlink: 'syz.6.2692': attribute type 16 has an invalid length. [ 206.497569][T11574] netlink: 'syz.6.2692': attribute type 17 has an invalid length. [ 206.519218][T11597] SELinux: policydb string does not match my string SE Linux [ 206.529636][T11597] SELinux: failed to load policy [ 206.542637][T11574] bridge0: port 3(gretap0) entered blocking state [ 206.549187][T11574] bridge0: port 3(gretap0) entered forwarding state [ 206.572250][T11574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.574197][T11601] loop0: detected capacity change from 0 to 128 [ 206.654769][T11603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11603 comm=syz.1.2702 [ 206.685650][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2702'. [ 206.749265][T11614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11614 comm=syz.1.2707 [ 206.767339][T11613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2705'. [ 206.900897][T11623] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 206.907530][T11623] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.915694][T11623] vhci_hcd vhci_hcd.0: Device attached [ 206.935515][T11623] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 206.942202][T11623] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.950848][T11623] vhci_hcd vhci_hcd.0: Device attached [ 206.961754][T11623] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 206.968360][T11623] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 206.979394][T11628] loop1: detected capacity change from 0 to 512 [ 206.986041][T11628] ext3: Unknown parameter '" ' [ 206.992811][T11623] vhci_hcd vhci_hcd.0: Device attached [ 207.002816][T11628] loop1: detected capacity change from 0 to 256 [ 207.026320][T11623] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 207.032981][T11623] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.043751][T11623] vhci_hcd vhci_hcd.0: Device attached [ 207.081876][T11634] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 207.088520][T11634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.115389][T11634] vhci_hcd vhci_hcd.0: Device attached [ 207.151945][T11642] loop0: detected capacity change from 0 to 8192 [ 207.167157][T11623] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(20) [ 207.173767][T11623] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.181296][T10549] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 207.248654][T11623] vhci_hcd vhci_hcd.0: Device attached [ 207.263140][T11623] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.270871][T11634] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.288843][T11623] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 207.291056][T11655] tipc: Started in network mode [ 207.303588][T11655] tipc: Node identity e0000001, cluster identity 4711 [ 207.311681][T11632] vhci_hcd: connection closed [ 207.311917][T11635] vhci_hcd: connection closed [ 207.311945][T10902] vhci_hcd vhci_hcd.2: stop threads [ 207.316721][T11647] vhci_hcd: connection closed [ 207.322030][T11624] vhci_hcd: connection reset by peer [ 207.326991][T11655] tipc: Enabling of bearer rejected, failed to enable media [ 207.331515][T11630] vhci_hcd: connection closed [ 207.345368][T11627] vhci_hcd: connection closed [ 207.367514][T10902] vhci_hcd vhci_hcd.2: release socket [ 207.391851][T10902] vhci_hcd vhci_hcd.2: disconnect device [ 207.401684][T10902] vhci_hcd vhci_hcd.2: stop threads [ 207.406882][T10902] vhci_hcd vhci_hcd.2: release socket [ 207.419340][T10902] vhci_hcd vhci_hcd.2: disconnect device [ 207.429429][T10902] vhci_hcd vhci_hcd.2: stop threads [ 207.434666][T10902] vhci_hcd vhci_hcd.2: release socket [ 207.448108][T10902] vhci_hcd vhci_hcd.2: disconnect device [ 207.459408][T10902] vhci_hcd vhci_hcd.2: stop threads [ 207.468019][T10902] vhci_hcd vhci_hcd.2: release socket [ 207.474102][T10902] vhci_hcd vhci_hcd.2: disconnect device [ 207.489380][T10902] vhci_hcd vhci_hcd.2: stop threads [ 207.494627][T10902] vhci_hcd vhci_hcd.2: release socket [ 207.504754][T10902] vhci_hcd vhci_hcd.2: disconnect device [ 207.514273][T10902] vhci_hcd vhci_hcd.2: stop threads [ 207.528173][T10902] vhci_hcd vhci_hcd.2: release socket [ 207.547844][T10902] vhci_hcd vhci_hcd.2: disconnect device [ 207.580016][T11665] loop1: detected capacity change from 0 to 512 [ 207.609232][T11665] ext3: Unknown parameter '" ' [ 207.687521][T11667] loop0: detected capacity change from 0 to 512 [ 207.694771][T11667] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 207.824605][T11672] loop0: detected capacity change from 0 to 1024 [ 207.913039][T11672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.930035][T11681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.955405][T11681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.095567][T11681] netlink: 'syz.2.2728': attribute type 16 has an invalid length. [ 208.130768][T11681] netlink: 'syz.2.2728': attribute type 17 has an invalid length. [ 208.288173][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.316566][T11681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.541214][T11689] syzkaller0: entered promiscuous mode [ 208.546779][T11689] syzkaller0: entered allmulticast mode [ 208.598858][ T3611] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 208.600080][T11693] netlink: 'syz.1.2732': attribute type 1 has an invalid length. [ 208.824874][T11713] netlink: 'syz.1.2739': attribute type 16 has an invalid length. [ 208.824891][T11713] netlink: 'syz.1.2739': attribute type 17 has an invalid length. [ 208.862983][T11713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.925891][T11724] loop1: detected capacity change from 0 to 1024 [ 208.945096][T11724] EXT4-fs: Ignoring removed oldalloc option [ 208.954225][T11724] EXT4-fs: Ignoring removed bh option [ 209.002356][T11724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.093730][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 209.093746][ T28] audit: type=1400 audit(1771265805.243:998): avc: denied { read } for pid=11735 comm="syz.6.2747" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 209.142182][ T28] audit: type=1400 audit(1771265805.243:999): avc: denied { open } for pid=11735 comm="syz.6.2747" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 209.585421][T11747] ext3: Unknown parameter '" J' [ 209.726170][T11750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.738090][T11750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.744165][T11754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11754 comm=syz.0.2752 [ 209.827276][T11757] netlink: 'syz.5.2751': attribute type 16 has an invalid length. [ 209.863870][T11756] can0: slcan on ttyS3. [ 209.921292][T11757] dummy0: left allmulticast mode [ 209.952874][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.035105][T11764] __nla_validate_parse: 10 callbacks suppressed [ 210.035121][T11764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2756'. [ 210.164827][T11757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.203597][T11757] macsec1: left promiscuous mode [ 210.216257][T11757] bond2: left promiscuous mode [ 210.359453][ T28] audit: type=1400 audit(1771265806.503:1000): avc: denied { read write } for pid=11753 comm="syz.6.2753" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 210.404226][ T28] audit: type=1400 audit(1771265806.503:1001): avc: denied { open } for pid=11753 comm="syz.6.2753" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 210.427958][ T28] audit: type=1400 audit(1771265806.523:1002): avc: denied { ioctl } for pid=11753 comm="syz.6.2753" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 210.498600][T11753] can0 (unregistered): slcan off ttyS3. [ 210.611645][T11766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2757'. [ 210.897672][T11814] set_capacity_and_notify: 3 callbacks suppressed [ 210.897689][T11814] loop5: detected capacity change from 0 to 512 [ 211.001262][T11814] ext3: Unknown parameter '"޾' [ 211.038847][T11814] loop5: detected capacity change from 0 to 256 [ 211.100773][T11820] loop2: detected capacity change from 0 to 1024 [ 211.118411][T11820] EXT4-fs: Ignoring removed oldalloc option [ 211.147674][T11820] EXT4-fs: Ignoring removed bh option [ 211.208024][T11820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.426071][T11836] loop0: detected capacity change from 0 to 512 [ 211.440207][T11836] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.460923][T11836] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.2770: Directory hole found for htree leaf block 0 [ 211.505010][T11836] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.2770: Directory hole found for htree leaf block 0 [ 211.816501][ T28] audit: type=1326 audit(1771265807.833:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11835 comm="syz.0.2770" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4afe48bf79 code=0x0 [ 211.921818][T11826] ================================================================== [ 211.929931][T11826] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 211.937939][T11826] [ 211.940250][T11826] write to 0xffff88811b06212c of 4 bytes by task 11820 on cpu 1: [ 211.947949][T11826] xas_set_mark+0x12b/0x140 [ 211.952448][T11826] __folio_start_writeback+0x17b/0x370 [ 211.957902][T11826] ext4_bio_write_folio+0x5ad/0x9f0 [ 211.963102][T11826] mpage_process_page_bufs+0x4a1/0x620 [ 211.968562][T11826] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 211.974374][T11826] ext4_do_writepages+0xa07/0x2840 [ 211.979481][T11826] ext4_writepages+0x18f/0x320 [ 211.984229][T11826] do_writepages+0x1c6/0x310 [ 211.988812][T11826] file_write_and_wait_range+0x178/0x2f0 [ 211.994452][T11826] generic_buffers_fsync_noflush+0x45/0x130 [ 212.000332][T11826] ext4_sync_file+0x1aa/0x6b0 [ 212.005010][T11826] vfs_fsync_range+0xc5/0xe0 [ 212.009583][T11826] ext4_buffered_write_iter+0x34f/0x3c0 [ 212.015125][T11826] ext4_file_write_iter+0x380/0xfa0 [ 212.020317][T11826] iter_file_splice_write+0x6bc/0xa80 [ 212.025689][T11826] direct_splice_actor+0x156/0x2a0 [ 212.030795][T11826] splice_direct_to_actor+0x311/0x670 [ 212.036160][T11826] do_splice_direct+0x119/0x1a0 [ 212.041008][T11826] do_sendfile+0x382/0x650 [ 212.045410][T11826] __x64_sys_sendfile64+0x105/0x150 [ 212.050594][T11826] x64_sys_call+0x2dc4/0x3020 [ 212.055265][T11826] do_syscall_64+0x12c/0x370 [ 212.059853][T11826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.065742][T11826] [ 212.068048][T11826] read to 0xffff88811b06212c of 4 bytes by task 11826 on cpu 0: [ 212.075659][T11826] file_write_and_wait_range+0x130/0x2f0 [ 212.081287][T11826] generic_buffers_fsync_noflush+0x45/0x130 [ 212.087166][T11826] ext4_sync_file+0x1aa/0x6b0 [ 212.091839][T11826] vfs_fsync_range+0xc5/0xe0 [ 212.096415][T11826] ext4_buffered_write_iter+0x34f/0x3c0 [ 212.101953][T11826] ext4_file_write_iter+0x380/0xfa0 [ 212.107142][T11826] iter_file_splice_write+0x6bc/0xa80 [ 212.112513][T11826] direct_splice_actor+0x156/0x2a0 [ 212.117621][T11826] splice_direct_to_actor+0x311/0x670 [ 212.122989][T11826] do_splice_direct+0x119/0x1a0 [ 212.127839][T11826] do_sendfile+0x382/0x650 [ 212.132239][T11826] __x64_sys_sendfile64+0x105/0x150 [ 212.137422][T11826] x64_sys_call+0x2dc4/0x3020 [ 212.142092][T11826] do_syscall_64+0x12c/0x370 [ 212.146678][T11826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.152556][T11826] [ 212.154861][T11826] value changed: 0x0a000021 -> 0x0c000021 [ 212.160558][T11826] [ 212.162864][T11826] Reported by Kernel Concurrency Sanitizer on: [ 212.168997][T11826] CPU: 0 UID: 0 PID: 11826 Comm: syz.2.2765 Not tainted syzkaller #0 PREEMPT(full) [ 212.178361][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.188402][T11826] ================================================================== [ 212.199930][T10549] usb 5-1: enqueue for inactive port 0 [ 212.205481][T10549] usb 5-1: enqueue for inactive port 0 [ 212.277456][ T3317] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 212.278234][T10549] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 212.299961][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.