last executing test programs: 7m30.072586251s ago: executing program 4 (id=248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfff5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}], {0x14}}, 0x68}}, 0x0) 7m29.991925294s ago: executing program 4 (id=252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x109342, 0x0) bind$inet6(r3, &(0x7f0000001040)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xeeb}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x44, r9, 0x1, 0xfffffffd, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0c5}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000100)) listen(r1, 0x5) r11 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 7m29.720902362s ago: executing program 4 (id=253): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x553380, 0x22) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') execveat$binfmt(r0, r1, &(0x7f00000001c0)={[&(0x7f0000000080)='$}-)-\x00', &(0x7f00000000c0)='\\]@\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00']}, &(0x7f0000000300)={[&(0x7f0000000200)='\x00', &(0x7f0000000240)='\\\\b#/\x00', &(0x7f0000000280)='+\\$\'\x00', &(0x7f00000002c0)='.\x00']}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000003c0)="9701a5746da48852bb147068565fe8135a1da2aad119484ac4321a5bc3b3843489e6c7a4f648a779fa0c707205e5d187c352495937e497bc12d25d79dd8bee963253d1f66958b57c134377f5467848fc92e76c4e23fdff415b018233197be7abf210ac928d0fe4aa4da35255664644acf5a0758556d9b9976fac65d6934403bf057d4d8d870900c777e772235f56d2012fbe3561975b6ed36302fd05ec5a6b26cf9ff31d8b12941bc3859c340e10f1a67b7a3b1001aaeddd", 0xb8}, {&(0x7f0000000480)="cd547e4c19a9ccae05992ca20e92119a8b21122f22eb89f35c9b46bce2050ba5f9cf4163d8c4d4d13dd2472c87", 0x2d}, {&(0x7f00000004c0)="5e314eb1ec97ba19c8d40efa7fe8fa80c9423962fe9de1c0", 0x18}, {&(0x7f0000000500)="ce7297f1f49fa76555d5fac5df4f5e6564386754f257a23c0cb884babb3503383e47248dc5c0365f6f25367a83fd46d5a6bbd2812c60fa1cc0b127fb6f467f1f85c62832b88a594ee370b2b11c49bb0d570f256bf90d041245500ae4ffbacc243b3fb8e5498faa363b92e7643d3ee151920237cc489c000f38cf00558baa8f4afce84a10eeecc202d1c646ae9b076ed9952c3abe453501539fe848fb58a28ad70e343cee3dcf88e5fd61b020fa075b0d1a25fa5289f2575add44e97ecf4d59fd602aca925349f1f80bf7f39bdfd6e547508722e755084a999c0a180091d523ae4f5b", 0xe2}], 0x4, &(0x7f0000000640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}, 0x20008051) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000006c0)=""/192, 0xc0, 0x0, &(0x7f0000000780)=@caif=@rfm={0x25, 0xb, "6bd1ec21cbf7b39657873a3b9b76d683"}, 0x80) r4 = epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x34004045}, 0x8805) r7 = dup3(r4, r0, 0x80000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000940)={0x0, 0x8}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000009c0)={r8, 0x6, 0x1, [0x9]}, 0xa) ioctl$BTRFS_IOC_QUOTA_RESCAN(r7, 0x4040942c, &(0x7f0000000a00)={0x0, 0x6, [0x3, 0x10, 0xb, 0x80, 0x3, 0x2]}) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a80), r7) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r9, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x40) fchdir(r4) connect$unix(r7, &(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setxattr$trusted_overlay_opaque(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), &(0x7f0000000c80), 0x2, 0x3) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000cc0)='hsr0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000d80)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000e80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000fc0)=0xe8) mount$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x2040000, &(0x7f0000001000)={[{}], [{@uid_lt={'uid<', r10}}, {@fowner_gt={'fowner>', r11}}, {@euid_gt={'euid>', 0xee00}}, {@appraise}, {@flag='mand'}, {@fsname={'fsname', 0x3d, '\x00'}}]}) socket$inet(0x2, 0x80000, 0x3b6eae6c) sendmsg$kcm(r7, &(0x7f00000013c0)={&(0x7f0000001080)=@l2={0x1f, 0x7, @none, 0x2, 0x2}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001100)="02a3b163", 0x4}, {&(0x7f0000001140)="042133f955b4ae4da56f1d48c22bee28e4d9d26819b443cd2a08cba2ffd894cde30d469bc6e57a7a2a7ecc177dca20d794a3dcc04f", 0x35}, {&(0x7f0000001180)="5710e7b92ca5c3930807a5a1452a10db3aa3918c92fbf84c7c265de3231ca4365099735e6c7a976e8c52d73398ba7731b7866a9395dc8264d6186315a7bb951d82fa3a3f77575731d599119d8f7618aafb7ec3f2122cf2f7d5957a3c7e0fb31e55348e2f09b0ac9d75cc309175e0e7020b19b38dc414240484d22e6e7de07f04e498953425720adb42ecc2afcbfded146e87fd6de4c9f458ae7b14e057ef697c83c7d0462adf23409f66efd9a225c77ca390b12ab91622ccdb7def24cc7151a0470cb8e0039d1ddd015236", 0xcb}, {&(0x7f0000001280)="ce210c3135ae8d3dfc59c635d7de11f35d390e07aadea9a3cb07598dda39e282986767923cca4357755d370344e289ca0faad25a6bff211d862117e64a60b0a2203a326dfd5d46a54a6def31ea37ab5886a369", 0x53}], 0x4, &(0x7f0000001340)=[{0x68, 0x84, 0x7, "6041448ca2adc8afff56661de40615ada8a8722ab94dadf1fece1b0d79c3275eee1031ecb9f2dd6af1b147a50a273e6a3fe8fa7bcd8f7f992f6a4b85300e152751a352661e372e7b1bb4c6e6d5c40198dc"}], 0x68}, 0x4001) writev(r2, &(0x7f0000001500)=[{&(0x7f0000001400)="a363ddafaf0ac3adb6094eb9ceeb2b2d1e62e3e4dc0e7c5163c296e4ebf56e916c0bb5bd2bd459b0c749c7d096ad25b4d1e21aea9509e6552ac7d20d4f1317bc3d88eba28a91645feafe0dfe1b3f3118f9b9f0605bf9c2484c0a453e7c3ba73184de5df6e1a5d43cea1f633b4fa40b2b3732e3c75286e75d58ddec99969f29140e7903ea99364b243cd61e61aa57db4e8f222b3fec59a62b1387b9f834e86d33745fe2ec61301e8b4a102ea1855c7de263acb9aaec9028d2263f413617cec99271f7cdc9679a29452119a6e697a0fefab9ed464f514e457a8b8c085f8a78e5ab91a968532bb95da13cc6c48ab2c6", 0xee}], 0x1) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x44}, 0xc) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0xa0, r12, 0xc16340b6e280e6ee, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x437d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x22}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0xa0}}, 0x24000000) getpeername$packet(r7, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001780)=0x14) 7m29.595748476s ago: executing program 4 (id=254): socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) msgctl$IPC_SET(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x3, 0x0, &(0x7f0000000100), 0x9, 0xb, 0x5, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r0, @ANYRES64=r2, @ANYBLOB="99da0ea8ca07d8c68a6b9de0a39b4fc02ff3c905adbc4c6737a1b76729e966a29d92c2ab25c3b4d6c5dc9a0cc3694b", @ANYRESDEC=0x0], 0x0, 0x3f, 0x0, 0x5}, 0x28) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x8) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xfffffffc, 0x1}) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) io_setup(0x3, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x80800400, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_pgetevents(r4, 0x80000000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m29.041700144s ago: executing program 4 (id=255): openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x6da24b7ebfdfaf83}, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) lseek(r0, 0x334, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106320, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020786c2500000000002020647f00000000000000bfa100000000000007010000ffffffffb702000008000000b703000000000000850000009b00000095"], 0x0}, 0x94) r1 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="a1d6", 0x2}], 0x1, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001"], 0x38}, 0x8841) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x0, r1}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r4, r2, 0x80000) 7m28.767703052s ago: executing program 4 (id=257): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mknodat(0xffffffffffffffff, 0x0, 0x4802, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) (async) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) getdents64(r0, 0x0, 0x0) 7m28.694262204s ago: executing program 32 (id=257): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mknodat(0xffffffffffffffff, 0x0, 0x4802, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) (async) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) getdents64(r0, 0x0, 0x0) 3m29.076102259s ago: executing program 2 (id=1979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 3m29.03237021s ago: executing program 2 (id=1980): socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be4220000000000dff2badc958845d800000000000000004000", 0x17}, 0x60) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x800) 3m28.151116847s ago: executing program 2 (id=1989): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mq_open(0x0, 0xc1, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="ac01000001010102000000000000000005000003ec00068014000400ff01000000000000000000000000000114000400200100000000000000000000000000011c000380060002004e230000060001004e230000060001004e22000014000500fc0200000000000000000000000000000c000380060001004e2300000c000380060001004e22000014000400fc02000000000000000000000000000114000500fc0100000000000000000000000000013c000380060001004e210000060001004e200000060001004e210000060001004e200000060002004e240000060002004e210000060001004e220000140004000000000000000000000000000000000008001640000000061800018006000340000300000c000280050001008800000040000d801c000380060002004e240000060002004e240000060002004e21000014000400fc0000000000000000000000000000000c000380060002004e230000240018800800024000000087256e7e40000000070800024000000080080001400000000c200004801c0003800800024000000006080002400000000405000100100000000800074000000008"], 0x1ac}}, 0x4040) socket$inet(0x2, 0x0, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:*\t9'], 0xa) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/24) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000010c0)={'gretap0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendto(r2, &(0x7f0000000100)="bb1338ea0d6c017f4163f2164d028f8a629a1643021539db2f66", 0x1a, 0x40010, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002780)=[{{&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000900)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000800)=""/204, 0xcc}], 0x2}, 0xaa}, {{&(0x7f0000000a40)=@llc, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)=""/219, 0xdb}, {&(0x7f0000000bc0)=""/201, 0xc9}], 0x2}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002200)=""/82, 0x52}, {&(0x7f0000002280)=""/113, 0x71}, {&(0x7f0000002300)=""/141, 0x8d}, {&(0x7f00000023c0)=""/85, 0x55}, {&(0x7f0000002440)=""/189, 0xbd}, {&(0x7f0000002500)}, {&(0x7f0000002540)=""/177, 0xb1}, {&(0x7f0000002600)=""/48, 0x30}], 0x9, &(0x7f0000002700)=""/126, 0x7e}, 0x10}], 0x3, 0x0, &(0x7f0000002840)={0x0, 0x989680}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") 3m27.231310776s ago: executing program 2 (id=1997): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@jqfmt_vfsv0}, {@grpid}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000000000469ba013000000f803"]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) unlink(&(0x7f0000000280)='./file1\x00') shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) syz_clone3(&(0x7f00000003c0)={0x8000080, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m26.753583401s ago: executing program 2 (id=1998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xffffffffffffffa1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xb5, 0x8, 0xffffffffffffff64, &(0x7f0000000100)}}, 0xfffffffffffffde5) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f00000004c0)) (async) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f00000004c0)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @local}, 0x10) mkdir(&(0x7f0000000480)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {}, [], {}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) 3m24.837510671s ago: executing program 2 (id=2020): sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r5 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3") setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3e8, 0xe8, 0xe8, 0xe8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x5, 0x1, 0x1, 0x0, "247ac4067fed6b7983c0735464dc42c6bc6ea6c4c742b38fb6ba9123c34eb70fa0fd51d019706e73cf1a27baeb6f54c674c9ddca79751b9619874193362e2e04"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b70300000000002885000000c700000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = socket(0x18, 0x800, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'xfrm0\x00'}}, 0x1e) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000010c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x20008000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000500)={0x6, 0x400, 0x727, 0x7, 0x9}, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) r9 = socket(0x2d, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000440)={0x2d, 0xffffffff, 0xffff8001}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r8, 0x2}}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='attr/prev\x00') 3m24.830531621s ago: executing program 33 (id=2020): sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r5 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3e8, 0xe8, 0xe8, 0xe8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x5, 0x1, 0x1, 0x0, "247ac4067fed6b7983c0735464dc42c6bc6ea6c4c742b38fb6ba9123c34eb70fa0fd51d019706e73cf1a27baeb6f54c674c9ddca79751b9619874193362e2e04"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b70300000000002885000000c700000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = socket(0x18, 0x800, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'xfrm0\x00'}}, 0x1e) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000010c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2400c840}, 0x20008000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000500)={0x6, 0x400, 0x727, 0x7, 0x9}, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) r9 = socket(0x2d, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000440)={0x2d, 0xffffffff, 0xffff8001}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r8, 0x2}}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='attr/prev\x00') 14.75428127s ago: executing program 0 (id=3911): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0xa, 0x7}) prctl$PR_SET_FPEMU(0xa, 0x3) 14.360672161s ago: executing program 0 (id=3912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) 14.144122568s ago: executing program 0 (id=3915): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x200000000000000, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff00000000000000000000000000000000020001000000000000000000ce91912f030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) 14.046552821s ago: executing program 0 (id=3916): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000c2e000/0x4000)=nil) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x7ffffffe) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x25, 0x1, @val=@tracing={0xffffffffffffffff, 0x3}}, 0x20) r6 = syz_open_dev$vcsu(&(0x7f0000000180), 0xffffffffffff7fff, 0x40080) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000200)={r1, r6, 0x8}) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000a80)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}, 0x0}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nouid32}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x0, &(0x7f0000000f00)}) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc) socket$inet6(0xa, 0x2, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100040000000180000001000000000000000c4100000014001462726f6164636173742d6c696e6b00003ea2c1acd338b9539092872fbc27e080bb74"], 0x30}}, 0x0) 13.460966189s ago: executing program 0 (id=3918): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) listen(r0, 0x7866) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x2, 0xf3, 0xa, 0x0, 0x7343, 0xd006e1258c48754c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4c30, 0xc8, 0x7, 0x4, 0x0, 0x43a, 0x0, 0x0, 0x7ff}, r2, 0x9, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000008000000000000000000800095"], &(0x7f0000000340)='GPL\x00', 0x1002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) fcntl$setpipe(r3, 0x407, 0xfab4) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c200007"], 0xfdef) shutdown(r0, 0x0) io_uring_setup(0x40000a71, &(0x7f0000000240)={0x0, 0x86a1, 0x10, 0x3, 0x277}) poll(&(0x7f0000b2c000)=[{0xffffffffffffffff, 0x5063}], 0xfdfe, 0xffffffffffbffff8) syz_read_part_table(0x621, &(0x7f0000000800)="$eJzs3M1rHGUYAPBn9mNmN7YE/wKLl8ZeWgh6KS1ICYsItiDaHqTai/Sypxw8ra4akR7SevADelkPghgDvXiSIAQkJEEIRBBF8BRFgoLgQQ3oyHysbkJOsh7E3+8w7/PM+7zzvCTvHmeC/7RGfPBaNIsoz47OlTdaZZgXl6QKhvXCiHhq5erC069cebSaKx389kZEtPNmlY6feqIauuOy+bVWf3kli4cj4qNT2Y/3lY3SGJbPjTS2716PTkQjPXbbSaseq6HcUvO4wkdO1sEX1UaOLeIfm1s8s54Md2NUpedn+tdupvFQY3XnoMj/qP7qraPLTsWT0+l/78LGbKc+ZV/2Bnu97xs//9SLGJ1N70Qk++fKqkP/9ZnxqUmm0L//+9X0w/c+vbT0bXd+s1PfHCy0ozq3t24c5JWJX9eJKfQFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODfMbd4Zv2BZPf+j7vx7tbFrfMz/Ws3V09feml150o7It5P6rqzWTUmfy99eRr9713YmH11Kc9jtsgGe70fIoneE++MLqZ3unF6/1xd91x5Xf7q+ReqPN/qdKbRv9+dSB6/fPnNdrwVg/hk6cVWRKS3bkRdkEQa0Ujj87efzSOyafQGAAAAAAAAAAAAAAAAAACAsYUsWuP4mTQiRo99XcR5Frf/KkojHqzDb7JiMmJ+rdVfXum9fnsufs2LifqN+GHjZAwj4rvtu9cnvhCwWb2sv1b0+qy6Vbb9Jc/zwxsajoPF5uGJdDJJisKpfADgf+7PAAAA//9h9XZb") r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x40, 0x2, 0x0, 0x0, 0x6, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x1234, 0x5, 0x0, 0x8, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r5, 0x6dfd7dc40e923379) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000280)={[{@mb_optimize_scan}, {@nobh}, {@acl}]}, 0x1, 0xbdd, &(0x7f0000000f00)="$eJzs3M1rXF0ZAPDn3ky+2tRJRcS6aUSkBXGaVlJsEWyl4saFoFuhQzopIdMPMpGaNIuJ/gOirgU3glqULuy6GwW3brRuLS6EIrFReHk/5uXORz5nkrSZ5OZNfz84uefcc+89z5ObyT0HZiaAd9ZE9iONOBcRt5OIYnt/GhFDzdpIRL113Nrq8vT/V5enk2g0vvefJJKIeL26PN25VtLenm43RiLir99M4tM/2TlubXFprlytVubb7UsL9x5eqi0ufWX2Xvlu5W7l/uWrX5u6MnV18tpU33J97583nv3vC9/+V/3933745L8//3USN2Ks3bc5j3bWBzYRE+u/k80KEVHuw/WPg4F2PpvzTAp7nJQeclAAAPSUbprDfTaKMRAbk7di/OlvuQYHAAAA9EVjIKIBAAAAnHCJ9T8AAACccJ33AbxeXZ7ulHzfkXC0Xt2MiPFW/mvt0uopRL25HYnBiDj1OonNH2tNWqcd2EREvPzHtT9kJbp8Dvmw1Vci4nPd7n/SzH+8/Uno7fmnETHZh/EntrU/Sfnf6MP4eecPwLvp+c3Wg2zn8y9dn/9El+dfocuz623k/fzrzP/Wdsz/NvIf6DH/++4+x3j8m18+2rKjsfFtKVn+X3/2rd93SjZ+tj14ZvvzaiXi84X1/EcjYsv8J8s/6ZH/7X2OUfzoUaVXX975N34VcSG63f+Ne5Ts/v1El2Zmq5XJ1s+uY6z8Zep3vcbPO//s/p/qkf8u938k2/dwy5V6f6nPD27detqrb+/8038PJd9v1obae35UXliYvxwxlHxn5/4ru+fbOaZzjSz/i1/c/fXf7e8/+59Qb/9tZJmvtLdZ+8fbxvzGk8d/3C3/bO2X5/2/s9f9/6DRaHR5/f90n2N86c8/u9irb/P6NyvZ+C+T1loYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrSiBiLJC1FRNKsp2mpFHE6Ij4Tp9Lqg9rCl2ce/PD+nawvYjwG05nZamUyIoqtdpK1LzfrG+0r29pfjYizEfGL4mizXZp+UL2Td/IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsOx0RY5GkpYhII2KtmKalUt5RAQAAAH03nncAAAAAwKGz/gcAAICTz/ofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQ3b2/PMXSUTUr482S2ao3TeYa2TAYUvzDgDIzUDeAQC5KeQdAJCbN1zjmy7ACZTs0T/Ss2e477EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHxdOPf8RRIR9eujzZIZavcNdj3j/BFGBxymNO8AgNwM7NZZOLo4gKP31i/xM/2NAzh63df4wLsk2aN/ZOOY+tae4UOLCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjZ6xZkrQUEWmznqalUsSZiBiPwWRmtlqZjIhPRcTfi4XI2sN5Bw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDf1RaX5srVamX+bSrJwU5XUcmh0hg+FmF0qSTHI4za4lJarub9nwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDzUFpfmytVqZb6WdyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3mqLS3PlarUyv4/K0zc5eFMl7xwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjPxwEAAP//t28PFw==") openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) 12.788244559s ago: executing program 0 (id=3923): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000003fc0), 0x101, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x9, {{0xa, 0x4e22, 0xc58, @rand_addr=' \x01\x00', 0x62725575}}}, 0x88) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e000000106000e00118c"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f0000000000)="110000000200000000000c000000ea55", 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 12.76665436s ago: executing program 34 (id=3923): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000003fc0), 0x101, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x9, {{0xa, 0x4e22, 0xc58, @rand_addr=' \x01\x00', 0x62725575}}}, 0x88) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e000000106000e00118c"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f0000000000)="110000000200000000000c000000ea55", 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 5.660504637s ago: executing program 1 (id=3988): set_mempolicy(0x3, 0x0, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f000000000000000000000000100000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000001000000"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20082, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_vlan\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x60184, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) lsm_set_self_attr(0x64, 0x0, 0xf1, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) acct(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x20}, 0xffffffff, 0xff, 'pim6reg\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x1, 0x3, 0x1}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x16, 0xffff, 0x8, 0x8001, '\x00', 'syz1\x00', {0x288}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0xfc, 0x0}, 0xffffffff, 0xffffff00, 'vlan1\x00', 'macsec0\x00', {}, {0xff}, 0x67, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0x300, 0x80100, 0xffffffff, '\x00', 'syz1\x00', {0x7fffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) fchdir(r3) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x7c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xcb75}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1c4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x11) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000040)) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r5, 0x2000) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 5.441678654s ago: executing program 5 (id=3993): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0xfbffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff00000000000000000000000000000000020001000000000000000000ce91912f030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) 5.337523297s ago: executing program 5 (id=3995): sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000700)={@val={0xa, 0x6007}, @void, @eth={@broadcast, @random="cf3f53f449aa", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="87c877eb0a97", @local, @multicast, @broadcast}}}}}, 0x2e) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaf}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000000010904000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x48}, 0x1, 0x0, 0x0, 0x8c04}, 0x40c0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$kcm(r6, &(0x7f0000000a40)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)="59f62cfbfb6dd796aa76a8032f810855e8ce1b945898d2dff1aaeb44dcb276d28590031a671bb4f8541a7e339b019369b80f8ab227a02fd1246007cc8db8e4b712e69754ca86b054ff76ea1fe953dd2b46e8fbf20bea73f3", 0x58}, {&(0x7f0000000200)="627f2f3585fb10bf97c68532f0f604dbad37fa07070e6853fe708c49538d6411fb9d289b30ed8132c9360437aebda1204a779494d5a723a33d9cd21b49554a8f5cbbaee920f85f0deba6d822c4901dc5c5f3f7d8811908feb0a5cc76d99b45cd1b319522a635f23950d37d19c6564d25f7c998ea7c8d7ba49f2d83b1dc218baf196e2a48fd36c5e3c0ab97d1ad9e25bb8bad0853548e84aa90d888d7a4ef7c872c6437", 0xa3}, {&(0x7f0000000380)="6000f1f6e1012951e31d79dfb49d3ad69d68be94084deb044746728db04e1a86a1235f4b3ab5d5ab419c8f35001df11511dabced8b58a2fbba4182e1b4ccdf14146171df8328fccebcc04fbeee238ad35ef3d2a81b52b9a009839d91f38f2b4bfbe3d24f76f76610c9a88d08892c8b6d20eb404d1786a550a95bc0bc577df89dd860cfef76c30c20fe52f646b8824e59dad233ef4df9922a07759b56348f302eaf", 0xa1}, {&(0x7f0000000440)="a07deee46c1b464c864e5f628dff77f87588edc3b60ca1602396f2f2a29da23cf45dbd77dd987f3b6cbda8d9bea15e236ede46c5beebe7ad89bfaad99c25701e2d7544f3b4be5a1d4fa3dde2ce8da926ce7802358fc5acc1cc74476e7d9609cf434c5b5c4b0fb19bb0a4af6cf5a64a647f66d8d74eb32ec27fcf6bcbfd92466bb4cbe9596f5604afc61c1294c547c5e494a2b276151178b91e2eb068a535ac742e8d5b7631e55bfa", 0xa8}], 0x4, &(0x7f0000000740)=[{0xb0, 0x10f, 0x6, "29ef2467467c81005aef3f80b2fc30480cb21f994878fa678f3c6a2255e811fc0e843f7e5bb21c713b535b0110dac0ceddf7c24fc13607288a88701f47e76d27cbdfaf2a6f9534f02f9cb99fa1f90914265fee345fd61929a2798b1c94547b87cf9a75820b496f2124c6fc2b657ef29f63449c682aa55b46a10e2e8648eb2289d836a7d69caa290c88d7625a1c9ce7e608627b425e67ce7cd9c243"}, {0x50, 0x1, 0x3ff, "efb934814892081ffb54b8a3994d8e4f6d2e3cd6461de7a02a674047bd56daa2a54679c87d45bc25fc457cc7acfc5de66f9cbfca1d91ec750888c42e"}, {0x48, 0x110, 0x8, "a0bf810d73bc3513360d354bd37cd7fe5e49928cffc81a99b7fe350c3733a2311508a4c1a21d19eabeeff78d6cb64476bb"}, {0x108, 0x10f, 0x80, "012aad8b44855c6f71c3f62d29deb4a40c940151bfab8e2ed64a68996a0c981b16a42e7689ced3b542f428c3d7b70c5841028cb2b7527e60abd1fdfbf1ef8383a41e2315d724a20d786a5b6171de83d0b5284e5f1f9c1960c87dbc169084f19368e974801fee2a25f685fc3f77255ced46a35c815e970b738d173c1e8262c1285a37aaca5eff5766d1283c67b2a9093656bf2c9db5db398c4031ed0f6a31330495c539a9a3ad04662f99430369e7a6c30a7a11e4f3068657d5f90ce0bbec406185a13363a613d1d5a6206520abc0d5b878d19dde628bf554e23acb1c055181a62fc8e6b0f9fa373c6bbec0e41b7d9be50e81565fd78873"}, {0x78, 0x103, 0x80, "7f7f489461e4aa6f19d36d163b264463b30dd817f9a2a1576c0f1b3d7a5d4b29d248c79b52bda578ee572eb2cd1d9bf0144f37424e1702576a09888a0f3fd1519bf65a12603a6613456b94a02ca85555805529e9a5aebd73ef5e91840545216e5d"}, {0x10, 0x108, 0x2}], 0x2d8}, 0x10) 5.196222062s ago: executing program 1 (id=3997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000480)={[{@lazytime}, {@nogrpid}]}, 0x1, 0x54e, &(0x7f0000001e00)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'bond0\x00', {0x9}, 0xdfc}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x80) lseek(r1, 0x100, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x20200) syz_usb_disconnect(r2) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x4) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x550c, &(0x7f0000000100)=0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c90c, &(0x7f0000001340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$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") getdents64(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.978657528s ago: executing program 5 (id=4001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x1ba2, 0x0) getdents64(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '}'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.861401482s ago: executing program 5 (id=4005): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xffffffff00000003, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0xfffb, 0x0}) 4.851091712s ago: executing program 5 (id=4007): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3efd7ab4c41335d9, @perf_config_ext={0x6, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r4, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r2, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @GTPA_FAMILY={0x5, 0xd, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000300)='syz_tun\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000640)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.810520293s ago: executing program 7 (id=4008): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x2800800, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f646f74732c6e66732c646f733178666c6f7070792c6572726f01ceedb16f6e74696e75652c6e6f646f74732c6e710e16e26c492aaf9d21c50dcb643391a0c8c15d2fdceded73bd"], 0x1, 0x549, &(0x7f0000000b40)="$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") r1 = socket$inet(0x2, 0x802, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d020000000000000600"/94], 0xffffffffffffffff, 0x3e, 0xb1, 0xa}, 0x1b) recvmmsg(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = epoll_create1(0x80000) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f00000000c0)={r3}) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x1, {0x60, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xfffd, 0x5, 0x6, 0xc4f4}, {0x74, 0x1, 0x8, 0x576, 0x8001, 0x2}, 0xa, 0xc0000, 0xb43}}, @TCA_TBF_PTAB={0x0, 0x3, [0x80000000, 0x81, 0x997, 0x0, 0x7, 0x6, 0x6, 0x3, 0xf601eeff, 0x5, 0x5, 0x4, 0xfffffff9, 0x8, 0x7fff, 0x2, 0x5, 0x5, 0xfa1, 0xd0, 0x10001, 0x7, 0x4, 0xf, 0x4, 0x3, 0x7fffffff, 0x7f, 0x0, 0x140e, 0xfd, 0x8, 0xe998, 0x1, 0xa4b, 0x4, 0x6, 0x9, 0x0, 0x8, 0x3ba2, 0xf89, 0x8, 0x7, 0x4, 0x1, 0x7, 0x2, 0x5, 0x2, 0x0, 0x7ff, 0x401, 0x1, 0x9, 0x3, 0x4, 0x9af, 0x59be665a, 0x5, 0x2d, 0x7, 0xd25, 0x80, 0x9348, 0x60000000, 0x9, 0x101, 0x9, 0x8, 0x1, 0x96, 0x8, 0x99, 0x7, 0x0, 0x6, 0x5, 0x400, 0x2, 0xfb6, 0x1, 0xc, 0x7, 0x1, 0x3, 0x498fe38a, 0xf4, 0x9742, 0x8, 0x8c48, 0x9, 0xd, 0xf, 0x3, 0x7, 0x8, 0x4, 0x7a2, 0x4, 0x6, 0x0, 0x80000000, 0x701e, 0x7, 0x0, 0x2, 0x2, 0x2, 0x76da, 0xf94c, 0x4, 0x32ce5349, 0xa, 0x0, 0x5, 0x8cdc, 0x8, 0x3, 0x2, 0x3ff, 0x6, 0x81, 0x1, 0x99, 0x4, 0x101, 0x40, 0x8, 0x5, 0x9, 0x81, 0x8000000, 0x3, 0x4f88, 0x9, 0x98, 0x37, 0x3, 0x8001, 0x31, 0x2, 0x3fd4, 0x5, 0x0, 0x200, 0x6, 0xc, 0xd, 0x5, 0xc55ee, 0x1000, 0xf, 0x400, 0x3, 0x100, 0x2, 0x0, 0xffff, 0x5, 0x9d, 0x80000001, 0xffffff81, 0x6, 0x3ff, 0xffffffff, 0x7, 0xd83, 0x343, 0x9, 0x400, 0x5, 0xfffffff7, 0x0, 0x200, 0xf, 0x8, 0x5, 0x1, 0x9, 0x7, 0x6, 0x7, 0x81, 0x2, 0xff, 0x6a, 0xfff, 0x1, 0x5, 0x9, 0x8000, 0xaf, 0x1, 0x5, 0x7, 0x2, 0x0, 0x7, 0x7, 0x3ff, 0x7, 0x1, 0xa4, 0x3a, 0x9, 0x1, 0x3, 0x6, 0x8000, 0x27, 0x2, 0x3, 0x4, 0xff, 0x1, 0x5, 0x1c000000, 0x7, 0x7, 0x8, 0x4, 0x5, 0xffffffbe, 0x8, 0x5, 0x7ff, 0x9, 0x1ff, 0x413b, 0x5, 0x0, 0x5, 0xd8, 0x1, 0x100, 0x9, 0x2, 0x1ff, 0x2, 0x8, 0xfffffffa, 0x1, 0x4, 0x8, 0x9, 0x1ff, 0x38, 0x2, 0xc, 0x6164, 0x9, 0xec, 0xffffffff, 0x56, 0xfa53]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x67eb6bf12151d490}]}}]}, 0xad}, 0x1, 0x0, 0x0, 0x80}, 0x40) r6 = socket(0x1, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104009527000000000000801000", @ANYRES32=r6, @ANYRESHEX=r3, @ANYRESDEC=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) 4.23989574s ago: executing program 7 (id=4011): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000300000100c280000800050058a3cacc08000500", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0xc8d4}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x14, 0x0, 0x0, 0x80000001, {0x0, 0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000300000100c280000800050058a3cacc08000500", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0xc8d4}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={r4}, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x14, 0x0, 0x0, 0x80000001, {0x0, 0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) (async) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x400000}, 0xc) (async) 3.772790585s ago: executing program 7 (id=4013): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r3, 0x4}, &(0x7f00000000c0)=0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {}, {0xfffe, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 3.446524365s ago: executing program 6 (id=4014): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) read(r0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x120, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xfffe, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xec, 0x2, [@TCA_MATCHALL_ACT={0xdc, 0x2, [@m_bpf={0xd8, 0xd, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xe, 0xe3, 0xfc, 0x1}, {0xffff, 0x6, 0x6, 0x8}, {0x5, 0x5a, 0x1, 0x4}, {0xfc85, 0x59, 0x63, 0x9000}, {0x1552, 0xf, 0xc, 0x9}, {0x7, 0x33, 0x10, 0x4}, {0xfffa, 0x6, 0x7, 0x6}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0x6, 0x8, 0x786f}, {0xa016, 0x5, 0x10, 0x80000000}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0x45, 0x6, "8d7130434da70c63552f49a20789de752bde33c5316d3f8377c6ab87f9d6c3267b45018f18d8f9dde1127e889a0b85695f7a4eaa16eb3d943cdcaa0cb675ca69f1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f20) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000140)="a2", 0x1}, {&(0x7f00000000c0)="0fa346550ff3fa762e5641083a539408abe3b5", 0x13}, {&(0x7f0000000680)="d838ce25bcfeba82142c05f8330385d66678c54d3110367b554a5f2a2f367b850d302da8e2f080ed4740bbf93888a22af69ad332801012a0d0dbcb38b590d0228a755107118343aa1d57f877663b0c8794e09bbec9bf5cdef9572b015b8a56d1b359288544b6d98c0adf984ee51a7c27eb13a5859e5bac549c292dc7297e7f182f46a3304e931a3857e2562465bd8ba9a8ee6a9770d8db062aabddbba6846ba59e8979c009e26a6123600355b45f1feb04884c7ae19fe49a7d8090fe599c7422b35f", 0xc2}, {&(0x7f0000000c40)="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", 0x108}, {&(0x7f0000000940)="c7d5d09607d70a3682d909365c8217a18f6afd39543b4321de26cc4d9c8f1c0bdf9260106e4529aff11befac57d3c1c6addfc9efb78be91619ba6139", 0x3c}, {&(0x7f0000000ac0)="20ef11be12beb6459982be7cfc37e832d831129e55adecc9ad9c2b1bd6ba8cc8d1e32e52472f63b80aa53e46d3a5a0135df487402f3a0caff044fc8682827d440d1048c10537465e89a95e4bde609401ce29d99a4f01fb6e85d8099208bc9788f4969d60dd3a23d9fed38f7f06f91a5ec190859e0655ad6c7fc975b866eb3dc8b2a27e62c729c5a4d397ea8680a6734320f6c7ea27a7e2bd346fce90e3f31b1fc866d87a6cd48346afe9ad5735a75d7aabff616509caaa7a1e8a30db72d8bfd2731d7c1c538b906701ec803601bb289b441ac02dfc9762626107363332bca039f12d994995873955c048ca3971d23aebc95f7cbc8dd798c4a8", 0xf9}, {&(0x7f0000000bc0)="92dca566dcff04c21f131d4875bfc2a9cbd0bbebd4271abd9ccd653ab13f2147f6bd41cb9c395472a1ab614be999a1b49db4f9835ebc2dd687cc3b8f68a4dd8968d9a907ad50ae608b99d7f627a6c3b0884bb200"/98, 0x62}, {&(0x7f0000001340)="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", 0x1000}], 0x8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x88, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x8000080, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.444570725s ago: executing program 5 (id=4015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c0002"], 0x168}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x44000840) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.383604757s ago: executing program 7 (id=4016): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) epoll_create1(0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) 3.329942879s ago: executing program 6 (id=4017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b"], 0x30}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xc}, {0x5, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x24040000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfa, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3.28820317s ago: executing program 7 (id=4018): bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="050000000a0000000a0000000902000040000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00c7d0260010"], 0x50) 3.201634392s ago: executing program 7 (id=4019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c0002"], 0x168}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x44000840) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.105328015s ago: executing program 1 (id=4020): socket$kcm(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@nolazytime}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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") r8 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001d000101290b7000fedbdf2507000000", @ANYRES32=r9, @ANYBLOB="020000050a000200aaaaaaaaaa1c"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 1.931674811s ago: executing program 6 (id=4024): setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x4, 0x28ce, 0x1, @private1, @private0, 0x7, 0x40, 0x5, 0x1000}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000140)=@deltclass={0x938, 0x29, 0x800, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x7, 0xffe0}, {0x6, 0x2}, {0xa, 0xfff2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x7f}}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x0, 0x0, 0x6, 0x2}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x8}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x8}}}, @c_cbq={{0x8}, {0x834, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0xf}, 0x595, 0x7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0x8, 0x1, 0x98d, 0x11, 0x5, 0x9, 0x2, 0x5, 0x4, 0x47, 0x10001, 0x8000, 0x1, 0x3, 0x7, 0xfffffffe, 0x1, 0x3, 0x3c, 0x1, 0x80000001, 0x4, 0xf, 0x60000000, 0x2, 0x7, 0x80000001, 0x0, 0x7, 0x8, 0x10001, 0x93a2, 0x4fb3, 0x7, 0x4, 0x2, 0xb6e6, 0xf, 0x50, 0x9, 0x5, 0x8, 0xa, 0x9, 0x6, 0x10000, 0xae4, 0x6, 0x5, 0xd, 0x3, 0xed, 0x2, 0x7, 0x6, 0x2, 0x80, 0x2, 0x8000, 0x8, 0x1, 0x2, 0x5, 0x800, 0x4, 0x7, 0x10000, 0x1000, 0xf0000000, 0x80, 0x6, 0xc5d6, 0x7, 0x1, 0x2, 0x400, 0x7, 0x1c, 0xa3d, 0x800, 0x5, 0xffffffff, 0x3, 0x3, 0x7, 0x5, 0xc, 0x200, 0xed1d, 0x9, 0x9, 0x5, 0x7fffffff, 0x3, 0x80000001, 0x2, 0xb, 0x2, 0x80000000, 0x3, 0x5, 0x78f, 0xda, 0x7, 0x5, 0x0, 0x81, 0x1, 0x1e000, 0x4, 0x9, 0x3, 0x6, 0x7, 0x4, 0x3, 0xa23, 0x7, 0x0, 0x8a, 0x10000, 0x5aa8, 0x1c00000, 0x5, 0x4, 0x7, 0x8, 0x10000, 0x9, 0x80800, 0xb32f, 0x80000000, 0xd95, 0x80000001, 0x2, 0x2, 0x2, 0x3c, 0x7fff, 0x3, 0x3c5, 0x8, 0x6, 0x0, 0x5, 0x7fff, 0x9, 0x800, 0xff, 0x9, 0x7, 0x6, 0xff, 0x0, 0x4, 0x4, 0xa1, 0xc22c, 0x8, 0x650f, 0x1, 0xff, 0x0, 0x8, 0x1, 0x8b, 0x7ff, 0x40, 0xac619b9e, 0x9, 0x85, 0x4, 0x40, 0x3, 0x9, 0x401, 0x1, 0x8, 0x9, 0xacc, 0x6, 0x7, 0x4cb6528f, 0x6, 0x0, 0x1, 0x7, 0xc1, 0x4c8, 0x2, 0x7fff, 0x4, 0x7, 0x6, 0xffffffff, 0xff, 0x4, 0x1, 0x9, 0x4, 0x8001, 0x7c3e, 0x9, 0xd1, 0xdecf, 0x6, 0x4, 0x4, 0x80000001, 0xfffffff9, 0x1000, 0x8, 0x6, 0xb9, 0x6, 0x65, 0x8, 0x0, 0x4, 0x2, 0x2, 0x0, 0x5, 0x8, 0x3, 0x7, 0x3ff, 0x0, 0x2e, 0xda, 0x2, 0xff, 0x5, 0x9, 0x6, 0x6, 0x2, 0xc95c7adf, 0xe000000, 0x9, 0xac50, 0x6, 0x80000001, 0x4, 0x7, 0xfffffff9, 0x6, 0x7fffffff, 0x8001, 0x7, 0x9, 0x59, 0xfffffffd, 0x5, 0x2]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2f, 0x1, 0x1b, 0xd3, 0xe, 0x4, 0x4, 0x2}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x9, 0xfffffffe, 0x6, 0x6, 0x0, 0x6, 0x1000, 0x6, 0x9, 0xfffffff7, 0x7fff, 0xfff, 0x800, 0x1ff, 0x1ff, 0x5, 0xa0, 0xac00, 0x100, 0x2, 0x8eb1, 0x4, 0x101, 0x2, 0x1, 0x2, 0x1, 0xffffffff, 0x1, 0x4f21712b, 0xd, 0x6, 0xec0, 0xc0, 0x100, 0x1b, 0x7f0000, 0x0, 0xffff, 0x2, 0x4, 0x7, 0x80000001, 0x6, 0x9, 0x7, 0x101, 0x3, 0x120000, 0xd73, 0x3, 0x5, 0x7a, 0x7fff, 0x5, 0xffffffff, 0x8, 0x8, 0x1, 0x2cc0000, 0x80000001, 0x28000000, 0xffff0ec1, 0x6, 0x0, 0x7ff, 0xf, 0x10, 0x9, 0x97b, 0x800, 0x5, 0x7f, 0x0, 0x8, 0x8, 0xfffffffc, 0xe4, 0x7, 0xf, 0x7fff, 0x0, 0x5, 0x8, 0x9, 0x7, 0x6, 0x3, 0x7ff, 0x6, 0x8001, 0x0, 0x800, 0x0, 0x10000, 0x7, 0x97d4, 0x2, 0x3, 0x7, 0x7, 0x4, 0x6, 0x10000, 0x5, 0x6, 0x5, 0x8, 0x488, 0x9, 0x7, 0x6, 0x4, 0x0, 0xe8f8, 0x1c, 0x42e5, 0x9, 0x2, 0x912a, 0x9, 0xfffffff8, 0xf, 0x2, 0x7, 0x7, 0x62b, 0x2ad7, 0x180000, 0x80, 0x3, 0x8, 0x1, 0x2, 0x9, 0xc, 0x6fc, 0x8, 0x6a47, 0x100, 0x3, 0x6, 0x7fff8, 0x7, 0x5, 0xf60e, 0x0, 0x96c, 0x8001, 0x1ff00, 0x3, 0x5, 0x8, 0x22f, 0x100, 0x4, 0x3, 0x3, 0x808, 0x0, 0xd502, 0x3, 0x98c, 0x7, 0x2, 0x1, 0x8, 0xc0000000, 0x20000000, 0xd, 0x2, 0x6, 0x9, 0x8f46, 0x4, 0x0, 0xf, 0x2, 0x508, 0xffffff01, 0x7, 0x6, 0x1, 0x80000001, 0x7bc785c4, 0x2, 0x5, 0x6, 0x5, 0x0, 0x2, 0x5, 0x0, 0x389, 0x4, 0x0, 0x1, 0x5, 0x80000000, 0x4, 0x2, 0x84, 0x1000, 0x5, 0x4, 0x7, 0x3, 0x0, 0x1, 0x3, 0x800, 0x9, 0x10000, 0x5, 0x2, 0x3, 0x0, 0xfffffffb, 0x3, 0x7, 0x7, 0x5, 0x5d, 0x5, 0x8, 0x6, 0x5, 0x6ac0e794, 0x9, 0x3, 0x2, 0x401, 0x6, 0x947, 0x8, 0x7ff, 0x4, 0x3, 0x78, 0xfffffffc, 0xd378, 0x2, 0x2, 0x3, 0xfffffff2, 0x7f, 0x0, 0x4, 0x1ff, 0x7, 0x7ff, 0x6, 0x7, 0x52e, 0x9]}]}}, @c_atm={{0x8}, {0x6c, 0x2, [@TCA_ATM_HDR={0x36, 0x3, "5164cc0a2f88bb96ef30cabdbdf002b42ec96075426a4b4573fe429c675ff791a60943f318c31b2ad754d147660e5fba42e8"}, @TCA_ATM_HDR={0x2d, 0x3, "720d1d7bf5d6dc46c843a0f2e5ea0a538a8c615951d178b9f4c6a5a8965c546d49831951bc42d66c8a"}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000b40)={0x3, &(0x7f0000000b00)=[{0xff, 0x8, 0x6, 0x5}, {0x5, 0x5, 0xfe}, {0x8, 0x0, 0x9, 0x4}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x200, 0x82) write(0xffffffffffffffff, &(0x7f0000000bc0)="d80ca73a5ea72f9f163439ddaa244d48433a8977550e1a9acf0dac10d7a422da4ae35c30a68da373b67298aa3173f6f2c35d3f66455c17fc690118f96fd910ab140c2f27db4a343725f979ac7f437a6d9b02a5c02a0d9ff0a50634834396b9d8c1d9e6640039484a7dfbd3410bc72fda3bb6a99a4d16b0430d7063dd2899ede77ca9765cbd4debab6a43250c6057e3d8fd9fd581d974cb151b27e5d7fb6c08fb3f1e4ac4c2853c1274786a2e6de0a250855f713be7e77b", 0xb7) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x1a8, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x8880) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000f40), 0x4000, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000f80), 0x3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000011c0)={'syztnl0\x00', &(0x7f0000001140)={'ip6_vti0\x00', r1, 0x29, 0x1, 0x79, 0x5, 0x10, @private1, @empty, 0x40, 0x1, 0x13, 0x2}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x10, &(0x7f0000000fc0)=@raw=[@jmp={0x5, 0x1, 0x5, 0x8, 0x7, 0xc, 0x4}, @alu={0x7, 0x1, 0x9, 0x0, 0xa, 0x50, 0xffffffffffffffff}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_fd={0x18, 0xb, 0x1, 0x0, r4}], &(0x7f0000001040)='GPL\x00', 0xfffffffe, 0xa1, &(0x7f0000001080)=""/161, 0x41100, 0x9, '\x00', r5, 0x0, r4, 0x8, &(0x7f0000001200)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x0, 0xa, 0xaae6, 0x4}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001280)=[{0x4, 0x5, 0x6, 0x5}, {0x3, 0x3, 0x5, 0x4}, {0x5, 0x5, 0x10, 0x3}], 0x10, 0x4}, 0x94) capget(&(0x7f0000001380)={0x20080522}, &(0x7f00000013c0)={0x2, 0x401, 0x2, 0x2, 0x401, 0x4}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001500)={'tunl0\x00', &(0x7f0000001480)={'syztnl1\x00', r1, 0x10, 0x20, 0x1, 0x5, {{0xa, 0x4, 0x0, 0x25, 0x28, 0x65, 0x0, 0x9, 0x29, 0x0, @empty, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x35, [@remote, @empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001540)={0x0, @rand_addr, @empty}, &(0x7f0000001580)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000001680)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20080100}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x6c, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x20000011) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000016c0), 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000001700)={0x0, 0x0, 0x6, 0xa6, 0x1, 0x0, 0x1, 0x2, 0x2, 0x7, 0xe8, 0x8, 0x8a}, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001800)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001740)="5b24396f20b2f2adc7aa0256c05828d2af1f6385a843001ccb51411ae5c087529afc61abd7c525b5d975d19d64f622fa86fab59dfe0b6267e43406837d49b08ba2e7f5f613fa7877c6c34e9a6cc30182b6b42eb4bf07c037b76148727dd2fea6b22962ad81b10a0fc08916029813761ddaaf0a6560b86b7833ff7b09443f192ea750f1b204c06c2e3b94073e74d7c0cadf2caf0410133c4703dd6e434336981677d18d283dfdf5b7c34ebb6fb26d67ba6a44fcd877", 0xb5, r6}, 0x68) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000001880), &(0x7f0000001900)=0x68) r12 = syz_open_dev$sg(&(0x7f0000001940), 0x7f, 0x94002) ioctl$SG_SET_TIMEOUT(r12, 0x2201, &(0x7f0000001980)=0xdadd) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000001a80)={'tunl0\x00', &(0x7f00000019c0)={'gre0\x00', 0x0, 0x8, 0x40, 0x7, 0xa9, {{0x24, 0x4, 0x0, 0x3d, 0x90, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x23, 0xb5, [@remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @remote, @remote, @local]}, @timestamp_addr={0x44, 0x24, 0xa3, 0x1, 0x3, [{@rand_addr=0x64010101, 0xf1}, {@remote, 0xe}, {@empty, 0x2}, {@remote, 0x7}]}, @cipso={0x86, 0x34, 0x3, [{0x1, 0x12, "28a7038fe3724d484784687aef6dc232"}, {0x2, 0xa, "aa99f5c3ac4d0000"}, {0x7, 0x12, "dbc725693e1d8e1216fa3c19609298cf"}]}]}}}}}) sendto$packet(r2, &(0x7f0000001ac0)="6ed0f05eaf3de07102371bcd83736bd5a7aaf09b727061df5b24e9a7cb2815e5c674bee72ef4fefff3da23f0f15e35332d18608b5f2ecd7e6e19819e8c37612920a313883a94f1169670ce2c92ffea3749f1833a5ee5e128c2d20e3c38544aa42466182ef4a97788c257d624cf22340ae2166bc62dce7f40e7", 0x79, 0x1, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000001c40)={&(0x7f0000001b40)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001b80)="e4bb490a04c17252ba73301d743abb9ef7dc75416f853fc8c2121fe581e0ed56b4f59b434ce1d89b7a6c21047a964b6c9f6ec6dd7edf104ac93b1ca9a42dc9f20e4fd5804ed498a840a7ec0efa82", 0x4e}], 0x1}, 0x44000) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001c80)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001cc0)='geneve0\x00', 0x10) 1.849721744s ago: executing program 1 (id=4025): ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB="00000039915a400000000000000000009c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x8, 0xac75, 0x73, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x7, 0x700, 0x9, 0x9}}) 1.846164644s ago: executing program 6 (id=4026): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000040)="7bf6040000ffffffffffffe7faf0d903fa3b1000", 0x14) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000400000100c280000800050058a3cacc08000500", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0xc8d4}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x200040, 0x10) r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c2100801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080007"], 0x104}}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(r7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x0, r7}}, './file0\x00'}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10801, &(0x7f0000000800)=ANY=[@ANYBLOB="6e6f646f74732c73686fd1007865632c646f74732c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=r7, @ANYBLOB=',nodots,dots,dots,nodots,nodots,dots,nfs=nostale_ro,showexec,nodots,nodots,dos1xfloppy,nodots,check=normal,nodots,nodots,nfs=stale_rw,nodots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r8, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmmsg$inet(r1, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x40}}], 0x1, 0x64008004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)="7f4d2b9ff0f6be6f00e35c029afbeba77c26afa9fa915c19f70d78c1656972f346957070e860172fa760a08ce491272c074f4df1f734425a9be6217605980650a4b1e65f30f1d80903fc1065c46a559668500f208124c1c7660f8b8aa210fc913a95e5d62bab40644a8b2238f881c0b52d3d23d8099774a6fcba88a0a7d3cfffe8238b762e6c30451a47831dd6e59f35663860e561224326b09e4e4ea08c5e661d8e9b985a2d3af2530b9892e863c1ec1c8d678b82b9783bc4818857557beb46bb5394a7298636049cfd1dfbac24027b5b1170b38a98e8a05eb7e7b493b525b8d5acb803", 0xe4, 0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRESOCT=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000400)) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES32=r0, @ANYRES8=r9, @ANYBLOB="5073de02f6fcf87350da6ed2ce233b33e9ac96c8a854d31aa41e92302a82a50103ac80842c7005d4198f5554dbdfbaee8bd5be6034e2afa3d74fee97ad4e2b25fda00c1dc737957a88dcfe94ba45fa805dd1aca766", @ANYRES8, @ANYRES8=0x0], 0x2, 0xa13, &(0x7f0000002180)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.745543267s ago: executing program 6 (id=4027): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000010008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 1.677461049s ago: executing program 6 (id=4028): bpf$MAP_CREATE(0x300000000000018, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x1, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) (async) bpf$MAP_CREATE(0x300000000000018, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x1, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) (async) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r1, 0x0, 0x0) (async) fchown(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r7, 0x100) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$kcm(0x10, 0x2, 0x4) (async) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="40a3000000000000240012800b0001006d616373656300001400028005000b00000000000500", @ANYRES32=r2, @ANYBLOB="c5f86e065184478bbac6e617c26770b0bc0300becff6b06ec623ff6ad7138172142bf248a80b831693eae8f191d21f39cb0ce553807b2cb448f4d6a295c32794650dc9436e23"], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r10, 0x4, 0x2400) 821.535655ms ago: executing program 1 (id=4039): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) read(r0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x124, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xfffe, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xf0, 0x2, [@TCA_MATCHALL_ACT={0xe0, 0x2, [@m_bpf={0xdc, 0xd, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xe, 0xe3, 0xfc, 0x1}, {0xffff, 0x6, 0x6, 0x8}, {0x5, 0x5a, 0x1, 0x4}, {0xfc85, 0x59, 0x63, 0x9000}, {0x1552, 0xf, 0xc, 0x9}, {0x7, 0x33, 0x10, 0x4}, {0xfffa, 0x6, 0x7, 0x6}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0x6, 0x8, 0x786f}, {0xa016, 0x5, 0x10, 0x80000000}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_OPS={0x4}]}, {0x45, 0x6, "8d7130434da70c63552f49a20789de752bde33c5316d3f8377c6ab87f9d6c3267b45018f18d8f9dde1127e889a0b85695f7a4eaa16eb3d943cdcaa0cb675ca69f1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f20) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000140)="a2", 0x1}, {&(0x7f00000000c0)="0fa346550ff3fa762e5641083a539408abe3b5", 0x13}, {&(0x7f0000000680)="d838ce25bcfeba82142c05f8330385d66678c54d3110367b554a5f2a2f367b850d302da8e2f080ed4740bbf93888a22af69ad332801012a0d0dbcb38b590d0228a755107118343aa1d57f877663b0c8794e09bbec9bf5cdef9572b015b8a56d1b359288544b6d98c0adf984ee51a7c27eb13a5859e5bac549c292dc7297e7f182f46a3304e931a3857e2562465bd8ba9a8ee6a9770d8db062aabddbba6846ba59e8979c009e26a6123600355b45f1feb04884c7ae19fe49a7d8090fe599c7422b35f", 0xc2}, {&(0x7f0000000c40)="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", 0x108}, {&(0x7f0000000940)="c7d5d09607d70a3682d909365c8217a18f6afd39543b4321de26cc4d9c8f1c0bdf9260106e4529aff11befac57d3c1c6addfc9efb78be91619ba6139", 0x3c}, {&(0x7f0000000ac0)="20ef11be12beb6459982be7cfc37e832d831129e55adecc9ad9c2b1bd6ba8cc8d1e32e52472f63b80aa53e46d3a5a0135df487402f3a0caff044fc8682827d440d1048c10537465e89a95e4bde609401ce29d99a4f01fb6e85d8099208bc9788f4969d60dd3a23d9fed38f7f06f91a5ec190859e0655ad6c7fc975b866eb3dc8b2a27e62c729c5a4d397ea8680a6734320f6c7ea27a7e2bd346fce90e3f31b1fc866d87a6cd48346afe9ad5735a75d7aabff616509caaa7a1e8a30db72d8bfd2731d7c1c538b906701ec803601bb289b441ac02dfc9762626107363332bca039f12d994995873955c048ca3971d23aebc95f7cbc8dd798c4a8", 0xf9}, {&(0x7f0000000bc0)="92dca566dcff04c21f131d4875bfc2a9cbd0bbebd4271abd9ccd653ab13f2147f6bd41cb9c395472a1ab614be999a1b49db4f9835ebc2dd687cc3b8f68a4dd8968d9a907ad50ae608b99d7f627a6c3b0884bb200"/98, 0x62}, {&(0x7f0000001340)="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", 0x1000}], 0x8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x88, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x8000080, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) 801.134426ms ago: executing program 1 (id=4040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x204, 0x82) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x800, 0xf535, 0x7}, {0x0, 0x805, 0x1, 0x7, 0x60d8, 0x1}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x20200) syz_usb_disconnect(r5) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x4004550a, 0x0) close(r1) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xc}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10}, 0x18) connect$can_j1939(r9, &(0x7f0000000080)={0x1d, r10, 0x0, {0x1, 0xf0, 0x4}, 0x2}, 0x18) socket$packet(0x11, 0x3, 0x300) 243.582523ms ago: executing program 3 (id=4049): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000100), 0x8) 223.074034ms ago: executing program 3 (id=4050): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="280000002d000100000000000000000008000c00", @ANYRES32=0x0, @ANYBLOB="09000080976b64086800160004000180"], 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7ffefffe}, {0x100, 0x0, 0x1, 0x4}, {0x9e0d, 0x7, 0x5, 0x2}]}) brk(0x20000005b000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) brk(0x81) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x7ffe, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x55}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000640)=0xcbb9, 0x6, 0x1) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) sendmsg$NFT_BATCH(r1, 0x0, 0x4028800) dup(0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x4080, &(0x7f0000000040)={[{@nodiscard}]}, 0x1, 0x4a8, &(0x7f0000000300)="$eJzs3LtvHMUfAPDvrl+/X54GAiQhAkOEsHjYsRMgBQ0IJIogQFAEqIztRFGcGMVGwlGUGIRCg4QiQQ2USPwFdDQIqJCQqKBHQRGkSUAUh/ZuNzmvffEj5zsn9/lIZ8/c7N7M7Ozszs74HEDHGsh+JBFbIuLXiNheiy7cYKD26+rlM+N/Xz4znkSl8tqfETEfceXymfFi02K/zXlkMI1IP0zyTBaamTt9fGxqavJUHh+ePfHO8Mzc6SeOnRg7Onl08uTowYMH9o88/dTok02pZ1avK7vPTu/Z9eIbF14aP3zh7R++zsq7JU+vr8ea9C5+ayCr+F+VqnLaw/H/m8puo9laF06621gQVqUrIrLm6sn6f6VSOVeXtj1e+GCZ3Tevc/GAdZTdm/qWeD+/L85XGkpumArcCpJodwmA9iju99nzb/Fq4fCj7S49W3sAyup9NX/VUrojzbfpKT3fNtNARBye/+fz7BXNmIcAAFjGx+OfHYrHlxr/pXFPLfBH9mNbvobSHxF3RMSdEXFXROyIiLsjqtveGxE7V5Jp3QJBeWlo8fgnvVjapKmrC9n475l8bWvh+K8Y/UV/Vx7bWq1/T3Lk2NTkvvyYDEZPXxYfuUEe3z7/8yeN0urHf9kry78YC+bluNhdmqCbGJsdqw5Km+DS+xG7u+PfSqVSqn9y7UAnEbErInav7qO3FYFjj361p9FGy9d/0cdd14QzofJlxCO19p+PUv0LyeL1yd6t19cnh/8XU5P7houzYrEffzr/SqP8V17/9ZG1/6aF53+e8sVcHuh/q369diYarFxuaZjH+d8+avhMs9bzvzd5vXo9KpZd3xubnT01EtGbHKrGF7w/en3fIl5sn9V/cG9EZHlU61/smVavcZG3/30RsSdfL7s/Ih7Iy/5gRDwUEXsb1j7i++cap22E9p+oa/8kyuf/zrO130X7z6060HX8u28a5b+y9j9QDQ3m71Svf8tYaQHXfuQAAADg1pFWZ26SdOhaOE2Hhmp/2LsjNqVT0zOzjx2ZfvfkRG2Gpz960mKma3vdfOhIMp9/Yi0+ms8VF+n783njT7uiGh8an56aaHPdodNtbtD/M793tbt0wLpbah1tdIkvtAG3n3L/TxdGz73cysIALeX72tC5lun/aavKAbSe+z90rqX6/7lS3FoA3J7c/6Fz6f/QufR/6Fyl/t8Vv7SrJEALreHr/AIbJvDq0Gr26otm5h7pBjkI5UDx70nqklb+/yBuGOi7+RK+eZPFSKNVB7PNFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm+S8AAP//i1LmAQ==") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=0x64010101, 0xb, 0x10}}) bind$inet6(r2, 0x0, 0x0) 81.739688ms ago: executing program 3 (id=4051): socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x3026, 0x32, 0x43a1bd56, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xffffffff00000003, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0xfffffffb, 0x0}) 70.644478ms ago: executing program 3 (id=4052): socket$kcm(0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattr$incfs_id(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, 0xffffffffffffff8c, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x3, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) 23.720209ms ago: executing program 3 (id=4053): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000680)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 0s ago: executing program 3 (id=4054): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r1 = syz_clone3(&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r1, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) tgkill(r0, r1, 0x30) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x1000000000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0) kernel console output (not intermixed with test programs): ditd_printk_skb: 31 callbacks suppressed [ 450.652290][ T28] audit: type=1400 audit(2000046231.649:14996): avc: denied { watch } for pid=16105 comm="syz.3.3600" path="/142/file0" dev="tmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 450.691079][T16110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.758846][ T28] audit: type=1400 audit(2000046231.759:14997): avc: denied { write } for pid=16106 comm="syz.1.3601" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 450.789417][ T28] audit: type=1326 audit(2000046231.789:14998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.6.3605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033142ce59 code=0x7ffc0000 [ 450.818873][ T28] audit: type=1326 audit(2000046231.789:14999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.6.3605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033142ce59 code=0x7ffc0000 [ 450.848884][ T28] audit: type=1326 audit(2000046231.819:15000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.6.3605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033142ce59 code=0x7ffc0000 [ 450.876487][ T28] audit: type=1326 audit(2000046231.819:15001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.6.3605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033142ce59 code=0x7ffc0000 [ 450.906166][ T28] audit: type=1326 audit(2000046231.819:15002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.6.3605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033142ce59 code=0x7ffc0000 [ 450.932875][ T28] audit: type=1326 audit(2000046231.819:15003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.6.3605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f033142ce59 code=0x7ffc0000 [ 450.963411][ T28] audit: type=1326 audit(2000046231.819:15004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.6.3605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f033142ce59 code=0x7ffc0000 [ 451.460575][ T28] audit: type=1326 audit(2000046231.819:15005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.6.3605" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f033142ce59 code=0x7ffc0000 [ 451.763271][T16136] random: crng reseeded on system resumption [ 451.822523][T16136] dummy0: entered allmulticast mode [ 451.829915][T16136] dummy0: left allmulticast mode [ 451.983775][T13971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.075950][T16144] loop3: detected capacity change from 0 to 512 [ 452.091772][T16144] ext2: Unknown parameter 'fsname' [ 452.192911][T16145] loop3: detected capacity change from 0 to 164 [ 452.232374][T16145] iso9660: Unknown parameter 'ext2' [ 452.343658][T16145] 0cY9O-: renamed from dummy0 (while UP) [ 452.353477][T16148] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3615'. [ 452.362559][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3615'. [ 452.597452][T16148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.656598][T16148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.736101][T16148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.789833][T16150] loop1: detected capacity change from 0 to 512 [ 452.850736][T16148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.919721][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3616'. [ 452.928750][T16154] netlink: 'syz.3.3616': attribute type 5 has an invalid length. [ 452.936558][T16154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3616'. [ 452.995502][T16157] xt_hashlimit: size too large, truncated to 1048576 [ 453.056019][T16158] loop1: detected capacity change from 0 to 512 [ 453.165723][T16154] geneve2: entered promiscuous mode [ 453.193302][T16154] geneve2: entered allmulticast mode [ 453.440370][T16168] FAULT_INJECTION: forcing a failure. [ 453.440370][T16168] name failslab, interval 1, probability 0, space 0, times 0 [ 453.453766][T16168] CPU: 1 UID: 0 PID: 16168 Comm: syz.1.3620 Tainted: G W syzkaller #0 PREEMPT(full) [ 453.453981][T16168] Tainted: [W]=WARN [ 453.453990][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 453.454007][T16168] Call Trace: [ 453.454014][T16168] [ 453.454024][T16168] __dump_stack+0x1d/0x30 [ 453.454052][T16168] dump_stack_lvl+0x95/0xd0 [ 453.454143][T16168] dump_stack+0x15/0x1b [ 453.454167][T16168] should_fail_ex+0x263/0x280 [ 453.454203][T16168] ? genl_start+0x117/0x390 [ 453.454229][T16168] should_failslab+0x8c/0xb0 [ 453.454277][T16168] __kmalloc_cache_noprof+0x5f/0x400 [ 453.454320][T16168] ? finish_task_switch+0x128/0x320 [ 453.454349][T16168] genl_start+0x117/0x390 [ 453.454406][T16168] __netlink_dump_start+0x334/0x520 [ 453.454451][T16168] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 453.454481][T16168] ? __pfx_genl_start+0x10/0x10 [ 453.454504][T16168] ? __pfx_genl_dumpit+0x10/0x10 [ 453.454530][T16168] ? __pfx_genl_done+0x10/0x10 [ 453.454630][T16168] genl_rcv_msg+0x400/0x470 [ 453.454659][T16168] ? __pfx_nl80211_dump_station+0x10/0x10 [ 453.454694][T16168] netlink_rcv_skb+0x123/0x220 [ 453.454730][T16168] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.454792][T16168] genl_rcv+0x28/0x40 [ 453.454811][T16168] netlink_unicast+0x5a8/0x680 [ 453.454855][T16168] netlink_sendmsg+0x5c8/0x6f0 [ 453.454899][T16168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.455009][T16168] ____sys_sendmsg+0x563/0x5b0 [ 453.455057][T16168] ___sys_sendmsg+0x195/0x1e0 [ 453.455128][T16168] __x64_sys_sendmsg+0xd4/0x160 [ 453.455158][T16168] x64_sys_call+0x194c/0x3020 [ 453.455204][T16168] do_syscall_64+0x12c/0x3b0 [ 453.455243][T16168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.455269][T16168] RIP: 0033:0x7fbee301ce59 [ 453.455287][T16168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.455362][T16168] RSP: 002b:00007fbee1a6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.455387][T16168] RAX: ffffffffffffffda RBX: 00007fbee3295fa0 RCX: 00007fbee301ce59 [ 453.455404][T16168] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 453.455417][T16168] RBP: 00007fbee1a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 453.455449][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.455464][T16168] R13: 00007fbee3296038 R14: 00007fbee3295fa0 R15: 00007fff36622548 [ 453.455488][T16168] [ 453.464995][ T9688] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 56544 - 0 [ 453.837978][ T9688] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 47403 - 0 [ 453.847222][ T9688] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 56544 - 0 [ 453.856994][ T9688] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 47403 - 0 [ 453.865579][ T9688] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 56544 - 0 [ 453.874064][ T9688] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 47403 - 0 [ 453.883181][ T9688] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 56544 - 0 [ 453.892250][ T9688] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 47403 - 0 [ 453.948317][ T4218] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.995918][ T4218] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.024409][ T4218] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.039675][ T4218] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.089939][T16178] loop6: detected capacity change from 0 to 2048 [ 454.120685][T16178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.317201][T16193] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 454.328550][T16193] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 454.370587][T16196] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 454.379353][T16196] ref_ctr increment failed for inode: 0x31a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881143157c0 [ 454.400496][T16196] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 454.409324][T16196] ref_ctr decrement failed for inode: 0x31a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881143157c0 [ 454.420302][T16196] uprobe: syz.3.3627:16196 failed to unregister, leaking uprobe [ 454.472530][T16193] macvlan2: entered promiscuous mode [ 454.478234][T16193] macvlan2: entered allmulticast mode [ 454.486056][T16193] bond1: entered promiscuous mode [ 454.501047][T16193] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 454.526422][T10839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.552822][T16193] bond1: left promiscuous mode [ 454.778203][T16212] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3635'. [ 454.787578][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3635'. [ 454.808420][T16213] loop3: detected capacity change from 0 to 1024 [ 454.818349][T16213] EXT4-fs: Ignoring removed orlov option [ 454.851094][T16213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.891009][T16212] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.011260][T16212] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.152278][T13546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.414346][ C0] net_ratelimit: 19082 callbacks suppressed [ 455.414385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.432517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 455.436431][T16210] SELinux: ebitmap: truncated map [ 455.444637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.444814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 455.445515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.451392][T16210] SELinux: failed to load policy [ 455.462413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 455.503169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.515347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 455.534472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.546739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 455.929444][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 455.929462][ T28] audit: type=1400 audit(2000046236.929:15092): avc: denied { create } for pid=16228 comm="syz.5.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 455.995104][ T28] audit: type=1400 audit(2000046236.959:15093): avc: denied { write } for pid=16228 comm="syz.5.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 456.016409][ T28] audit: type=1400 audit(2000046236.959:15094): avc: denied { nlmsg_write } for pid=16228 comm="syz.5.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 456.039000][T16212] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.059280][T16231] bridge0: port 3(batadv1) entered blocking state [ 456.066598][T16231] bridge0: port 3(batadv1) entered disabled state [ 456.073218][T16231] batadv1: entered allmulticast mode [ 456.080895][T16231] batadv1: entered promiscuous mode [ 456.574237][ T9694] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 456.583522][ T9694] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 456.700497][T16212] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.735723][ T4315] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.752710][ T4315] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.792806][ T4315] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.807437][T16234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3638'. [ 456.826151][ T4315] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.850453][T16234] loop3: detected capacity change from 0 to 512 [ 457.566253][ T28] audit: type=1400 audit(2000046238.249:15095): avc: denied { create } for pid=16235 comm="syz.1.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 457.855179][T16234] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 457.873148][ T28] audit: type=1400 audit(2000046238.339:15096): avc: denied { bind } for pid=16235 comm="syz.1.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 457.928128][T16237] loop1: detected capacity change from 0 to 512 [ 457.983599][T16237] EXT4-fs: Ignoring removed orlov option [ 458.303367][T16237] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 458.485231][ T28] audit: type=1400 audit(2000046238.419:15097): avc: denied { connect } for pid=16235 comm="syz.1.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 458.522306][ T28] audit: type=1400 audit(2000046238.479:15098): avc: denied { write } for pid=16235 comm="syz.1.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 458.561859][ T28] audit: type=1400 audit(2000046238.549:15099): avc: denied { ioctl } for pid=16235 comm="syz.1.3642" path="socket:[52540]" dev="sockfs" ino=52540 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 458.578365][T16237] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.3642: invalid indirect mapped block 32768 (level 2) [ 458.588051][T16234] EXT4-fs error (device loop3): ext4_quota_enable:7221: comm syz.3.3638: Bad quota inum: 2, type: 1 [ 458.588301][T16234] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 458.588583][ T28] audit: type=1326 audit(2000046238.899:15100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16221 comm="syz.0.3637" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0b7347ce59 code=0x7ffc0000 [ 458.588694][ T28] audit: type=1400 audit(2000046239.249:15101): avc: denied { remount } for pid=16233 comm="syz.3.3638" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 459.036966][T16237] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 459.045265][T16234] ext4: Unknown parameter 'memory.events' [ 459.060226][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 459.066712][ C0] EXT4-fs (loop1): initial error at time 2000046240: ext4_free_branches:1023: inode 16 [ 459.076426][ C0] EXT4-fs (loop1): last error at time 2000046240: ext4_free_branches:1023: inode 16 [ 459.133024][T16237] EXT4-fs (loop1): 1 orphan inode deleted [ 459.152289][T16234] Process accounting paused [ 459.166355][T16237] EXT4-fs (loop1): 1 truncate cleaned up [ 459.259913][T13546] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 459.259977][T16237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.436386][T16254] sctp: [Deprecated]: syz.3.3646 (pid 16254) Use of int in max_burst socket option deprecated. [ 459.436386][T16254] Use struct sctp_assoc_value instead [ 459.567804][T16260] netlink: 'syz.0.3648': attribute type 28 has an invalid length. [ 459.628968][T13971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.658247][T16260] netlink: 'syz.0.3648': attribute type 10 has an invalid length. [ 459.700669][T16264] loop1: detected capacity change from 0 to 2048 [ 459.710932][T16260] team0: Port device vlan0 added [ 459.746153][T16264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.845317][T16269] netlink: 'syz.5.3651': attribute type 28 has an invalid length. [ 459.854154][T16269] netlink: 'syz.5.3651': attribute type 3 has an invalid length. [ 459.862280][T16269] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3651'. [ 459.874711][T16269] tipc: Started in network mode [ 459.882530][T16269] tipc: Node identity ac14140f, cluster identity 4711 [ 459.889683][T16269] tipc: New replicast peer: 255.255.255.255 [ 459.896269][T16269] tipc: Enabled bearer , priority 10 [ 460.146274][T16273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16273 comm=syz.6.3652 [ 460.394919][T13971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.404157][ C0] net_ratelimit: 14135 callbacks suppressed [ 460.404175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.422293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.434382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.446519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 460.459023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.471270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.483393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.495534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 460.508011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.520190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.542889][T16284] Process accounting paused [ 461.029408][T12093] tipc: Node number set to 2886997007 [ 461.195738][T16279] loop3: detected capacity change from 0 to 512 [ 461.202355][T16279] EXT4-fs: Ignoring removed mblk_io_submit option [ 461.209484][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 461.209501][ T28] audit: type=1400 audit(2000046242.227:15131): avc: denied { create } for pid=16276 comm="syz.3.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 461.239684][T16297] loop0: detected capacity change from 0 to 512 [ 461.267281][T16297] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 461.291725][ T28] audit: type=1400 audit(2000046242.317:15132): avc: denied { mount } for pid=16287 comm="syz.0.3657" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 461.332234][T16279] EXT4-fs (loop3): orphan cleanup on readonly fs [ 461.338782][T16279] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 461.349509][T16279] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3653: attempt to clear invalid blocks 2 len 1 [ 461.362410][T16279] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 461.362675][T16279] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, [ 461.371881][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 461.371899][ C1] EXT4-fs (loop3): initial error at time 2000046242: ext4_clear_blocks:876: inode 13 [ 461.371931][ C1] EXT4-fs (loop3): last error at time 2000046242: ext4_clear_blocks:876: inode 13 [ 461.405923][T16279] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 461.414917][T16279] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3653: invalid indirect mapped block 1819239214 (level 0) [ 461.428863][T16279] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 461.429178][T16279] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3653: invalid indirect mapped block 1819239214 (level 1) [ 461.452953][T16279] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 461.491049][T16279] EXT4-fs (loop3): 1 truncate cleaned up [ 461.507190][T16279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 461.520172][T16279] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.582191][ T28] audit: type=1400 audit(2000046242.615:15133): avc: denied { mount } for pid=16293 comm="syz.1.3656" name="/" dev="hugetlbfs" ino=54563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 462.487526][T16303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3656'. [ 462.611951][T16303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3656'. [ 463.246810][ T28] audit: type=1400 audit(2000046244.239:15134): avc: denied { unmount } for pid=14834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 463.275618][ T4217] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 463.315386][ T28] audit: type=1400 audit(2000046244.287:15135): avc: denied { create } for pid=16311 comm="syz.6.3661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 463.373753][ T28] audit: type=1400 audit(2000046244.335:15136): avc: denied { read } for pid=16311 comm="syz.6.3661" dev="nsfs" ino=4026532822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 463.454576][ T28] audit: type=1400 audit(2000046244.335:15137): avc: denied { open } for pid=16311 comm="syz.6.3661" path="net:[4026532822]" dev="nsfs" ino=4026532822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 463.560288][ T28] audit: type=1400 audit(2000046244.335:15138): avc: denied { bind } for pid=16313 comm="syz.0.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 463.621612][T16324] loop6: detected capacity change from 0 to 512 [ 463.694278][T16324] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.3664: dx entry: limit 0 != root limit 125 [ 463.725961][ T28] audit: type=1400 audit(2000046244.345:15139): avc: denied { setopt } for pid=16313 comm="syz.0.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 463.767925][T16324] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3664: Corrupt directory, running e2fsck is recommended [ 463.821676][T16324] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 8: comm syz.6.3664: lblock 11 mapped to illegal pblock 8 (length 1) [ 463.880889][T16324] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 463.881193][T16324] EXT4-fs (loop6): Remounting filesystem read-only [ 463.890318][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 463.890339][ C1] EXT4-fs (loop6): initial error at time 2000046244: ext4_map_blocks:791: inode 2: block 8 [ 463.890383][ C1] EXT4-fs (loop6): last error at time 2000046244: ext4_map_blocks:791: inode 2: block 8 [ 464.054130][T16324] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 464.091228][T16324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.157724][T16324] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.3664: dx entry: limit 0 != root limit 125 [ 464.213334][T16324] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3664: Corrupt directory, running e2fsck is recommended [ 464.246032][ T28] audit: type=1400 audit(2000046245.199:15140): avc: denied { unmount } for pid=13971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 464.339944][T16333] loop1: detected capacity change from 0 to 2048 [ 464.353414][T10839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.401879][T16333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.445025][T13971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.836629][T16343] netlink: 'syz.6.3670': attribute type 1 has an invalid length. [ 464.922000][T16349] loop1: detected capacity change from 0 to 512 [ 464.953720][T16343] macvlan2: entered promiscuous mode [ 464.959708][T16343] macvlan2: entered allmulticast mode [ 464.965832][T16343] bond0: entered promiscuous mode [ 464.977129][T16349] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #14: comm syz.1.3672: invalid orphan symlink nlink 1 [ 464.991465][T16343] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 464.998530][T16349] loop1: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 464.998758][T16349] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3672: couldn't read orphan inode 14 (err -117) [ 465.007961][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 465.007981][ C1] EXT4-fs (loop1): initial error at time 2000046245: ext4_orphan_get:1397: inode 14 [ 465.008011][ C1] EXT4-fs (loop1): last error at time 2000046245: ext4_orphan_get:1397: inode 14 [ 465.047813][T16349] loop1: lost filesystem error report for type 5 error -117 [ 465.048584][T16349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.069227][T16349] ext4 filesystem being mounted at /141/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.098240][T13971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.107732][T16343] bond0: left promiscuous mode [ 465.215494][T16355] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3673'. [ 465.230519][T16356] netlink: 'syz.3.3674': attribute type 1 has an invalid length. [ 465.243538][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3673'. [ 465.267081][T16347] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 465.279828][T16347] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 465.325001][T16355] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.368046][T16358] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 465.381300][T16358] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 465.524748][T16356] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 465.537700][T16362] macvlan2: entered promiscuous mode [ 465.543312][T16362] macvlan2: entered allmulticast mode [ 465.548770][ C0] net_ratelimit: 17740 callbacks suppressed [ 465.548787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.549239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 465.557410][T16362] bond1: entered promiscuous mode [ 465.567042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.567158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.567324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.592167][T16362] gretap1: entered promiscuous mode [ 465.596903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 465.613060][T16362] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 465.621149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.656358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 465.668458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.680557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 465.697959][T16362] bond1: left promiscuous mode [ 465.703065][T16362] gretap1: left promiscuous mode [ 465.744854][T16355] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.802424][T16365] FAULT_INJECTION: forcing a failure. [ 465.802424][T16365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.864880][T16366] loop6: detected capacity change from 0 to 512 [ 465.876194][T16366] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 465.887854][T16366] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 465.898004][T16366] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3675: Corrupt directory, running e2fsck is recommended [ 465.914902][T16366] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 465.925430][T16366] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.3675: corrupted in-inode xattr: e_name out of bounds [ 465.939371][T16366] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.939779][T16366] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3675: couldn't read orphan inode 15 (err -117) [ 465.960902][T16366] loop6: lost filesystem error report for type 5 error -117 [ 465.981253][T16366] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.019956][T16366] tap0: tun_chr_ioctl cmd 1074025677 [ 466.025422][T16366] tap0: linktype set to 774 [ 466.108764][T16365] CPU: 1 UID: 0 PID: 16365 Comm: syz.0.3676 Tainted: G W syzkaller #0 PREEMPT(full) [ 466.108806][T16365] Tainted: [W]=WARN [ 466.108816][T16365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 466.108831][T16365] Call Trace: [ 466.108857][T16365] [ 466.108867][T16365] __dump_stack+0x1d/0x30 [ 466.108959][T16365] dump_stack_lvl+0x95/0xd0 [ 466.108986][T16365] dump_stack+0x15/0x1b [ 466.109007][T16365] should_fail_ex+0x263/0x280 [ 466.109101][T16365] should_fail+0xb/0x20 [ 466.109167][T16365] should_fail_usercopy+0x1a/0x20 [ 466.109206][T16365] _copy_from_user+0x1c/0xb0 [ 466.109250][T16365] __sys_bpf+0x183/0x7e0 [ 466.109299][T16365] __x64_sys_bpf+0x41/0x50 [ 466.109351][T16365] x64_sys_call+0x10cb/0x3020 [ 466.109427][T16365] do_syscall_64+0x12c/0x3b0 [ 466.109471][T16365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.109498][T16365] RIP: 0033:0x7f0b7347ce59 [ 466.109519][T16365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.109543][T16365] RSP: 002b:00007f0b71ed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 466.109629][T16365] RAX: ffffffffffffffda RBX: 00007f0b736f5fa0 RCX: 00007f0b7347ce59 [ 466.109648][T16365] RDX: 0000000000000050 RSI: 0000200000000a00 RDI: 0000000000000000 [ 466.109665][T16365] RBP: 00007f0b71ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 466.109682][T16365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.109698][T16365] R13: 00007f0b736f6038 R14: 00007f0b736f5fa0 R15: 00007ffcf6422488 [ 466.109739][T16365] [ 466.407551][T16375] loop3: detected capacity change from 0 to 2048 [ 466.462919][T16375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.515162][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 466.515177][ T28] audit: type=1400 audit(2000046247.350:15201): avc: denied { write } for pid=16374 comm="syz.3.3678" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 466.643798][T13546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.779827][T16355] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.455311][T10839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.468670][T16355] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.582232][ T28] audit: type=1400 audit(2000046249.280:15202): avc: denied { mount } for pid=16393 comm="syz.3.3680" name="/" dev="rpc_pipefs" ino=54857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 468.620560][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3684'. [ 468.689492][ T28] audit: type=1400 audit(2000046249.317:15203): avc: denied { create } for pid=16390 comm="syz.6.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 468.737618][T16398] loop3: detected capacity change from 0 to 1764 [ 469.018117][T16402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3687'. [ 469.052663][T16404] loop3: detected capacity change from 0 to 2048 [ 469.113048][T16405] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3688'. [ 469.132340][T16402] SELinux: ebitmap: truncated map [ 469.141813][T16402] SELinux: failed to load policy [ 469.155464][ T28] audit: type=1400 audit(2000046249.820:15204): avc: denied { name_bind } for pid=16401 comm="syz.0.3687" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 469.247641][ T28] audit: type=1400 audit(2000046249.904:15205): avc: denied { relabelfrom } for pid=16401 comm="syz.0.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 469.316047][T16409] syzkaller0: create flow: hash 3218810667 index 1 [ 469.346447][T16404] loop3: p2 p3 p7 [ 469.384977][ T28] audit: type=1400 audit(2000046249.904:15206): avc: denied { relabelto } for pid=16401 comm="syz.0.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 469.423211][ T4315] syzkaller0: tun_net_xmit 76 [ 469.445133][ T4315] syzkaller0: tun_net_xmit 48 [ 469.454514][T12095] syzkaller0: tun_net_xmit 76 [ 469.540206][T12095] syzkaller0: tun_net_xmit 76 [ 469.550648][ T28] audit: type=1400 audit(2000046249.932:15207): avc: denied { connect } for pid=16406 comm="syz.5.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 469.720430][ T28] audit: type=1400 audit(2000046249.932:15208): avc: denied { ioctl } for pid=16406 comm="syz.5.3689" path="socket:[54925]" dev="sockfs" ino=54925 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 469.819135][T12095] syzkaller0: tun_net_xmit 76 [ 469.886670][T16420] netlink: 'syz.5.3693': attribute type 1 has an invalid length. [ 469.908244][T16401] syzkaller0: delete flow: hash 3218810667 index 1 [ 469.949166][ T28] audit: type=1400 audit(2000046250.556:15209): avc: denied { create } for pid=16418 comm="syz.5.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 469.994196][ T28] audit: type=1400 audit(2000046250.584:15210): avc: denied { shutdown } for pid=16418 comm="syz.5.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 470.044185][T16420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.126520][T16420] bond1: (slave veth5): Enslaving as an active interface with a down link [ 470.211671][T16420] bond2: entered allmulticast mode [ 470.228679][T16420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.237884][T16420] bond1: (slave bond2): Enslaving as an active interface with a down link [ 470.425345][T16427] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3694'. [ 470.443186][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3694'. [ 470.518454][T16427] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.548985][T16427] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 56544 - 0 [ 470.585660][T16427] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 47403 - 0 [ 470.766739][T16427] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.802674][T16427] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 56544 - 0 [ 470.828276][T16427] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 47403 - 0 [ 470.905839][ C0] net_ratelimit: 15599 callbacks suppressed [ 470.905859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 470.924373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.936537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.948613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.960760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 470.973224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.985369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.997533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.009674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 471.022105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.187145][T16427] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.213456][T16427] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 56544 - 0 [ 471.242940][T16427] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 47403 - 0 [ 471.359505][T16427] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.391889][T16427] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 56544 - 0 [ 471.425942][T16427] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 47403 - 0 [ 471.550117][ T4217] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 47403 - 0 [ 471.567514][ T4217] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 56544 - 0 [ 471.590360][ T4217] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 471.627728][ T4217] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 47403 - 0 [ 471.648508][ T4217] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 56544 - 0 [ 471.669459][ T4217] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 471.689334][ T4217] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 47403 - 0 [ 471.703533][ T4217] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 56544 - 0 [ 471.722948][ T4217] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 471.747784][ T4217] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 47403 - 0 [ 471.780969][ T4217] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 56544 - 0 [ 471.800839][ T4217] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 471.984019][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 471.984095][ T28] audit: type=1400 audit(2000046252.450:15213): avc: denied { setopt } for pid=16434 comm="syz.3.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 472.071850][ T1036] Process accounting resumed [ 472.077739][T16437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3698'. [ 472.092567][T16437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3698'. [ 472.125906][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3698'. [ 472.148798][T16437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.196424][T16437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.292036][T16439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3699'. [ 472.579609][T16444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3700'. [ 473.017334][T16447] loop0: detected capacity change from 0 to 1024 [ 473.050030][T16447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 473.080115][T16447] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.095457][ T28] audit: type=1400 audit(2000046253.488:15214): avc: denied { write } for pid=16446 comm="syz.0.3702" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 473.138175][ T28] audit: type=1400 audit(2000046253.525:15215): avc: denied { read write } for pid=16446 comm="syz.0.3702" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 473.180073][ T28] audit: type=1400 audit(2000046253.534:15216): avc: denied { open } for pid=16446 comm="syz.0.3702" path="/98/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 473.324914][ T28] audit: type=1400 audit(2000046253.692:15217): avc: denied { write } for pid=16446 comm="syz.0.3702" path="socket:[52566]" dev="sockfs" ino=52566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 473.352781][T16447] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.3702: lblock 3 mapped to illegal pblock 3 (length 3) [ 473.376667][T16447] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 473.402416][T16447] EXT4-fs (loop0): This should not happen!! Data will be lost [ 473.402416][T16447] [ 473.429754][ T28] audit: type=1400 audit(2000046253.794:15218): avc: denied { map } for pid=16446 comm="syz.0.3702" path="/98/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 473.453784][T16451] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.3702: lblock 3 mapped to illegal pblock 3 (length 1) [ 473.469808][T16446] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.3702: lblock 3 mapped to illegal pblock 3 (length 1) [ 473.484988][T16446] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.3702: lblock 3 mapped to illegal pblock 3 (length 1) [ 473.499540][T16446] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.3702: lblock 3 mapped to illegal pblock 3 (length 1) [ 473.514323][T16446] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.3702: lblock 3 mapped to illegal pblock 3 (length 1) [ 473.529489][T16451] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.3702: lblock 3 mapped to illegal pblock 3 (length 1) [ 473.553360][T16446] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.3702: lblock 3 mapped to illegal pblock 3 (length 1) [ 473.586060][T16451] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.3702: lblock 3 mapped to illegal pblock 3 (length 1) [ 473.624843][T16446] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.3702: lblock 3 mapped to illegal pblock 3 (length 1) [ 473.681169][ T28] audit: type=1326 audit(2000046254.025:15219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16454 comm="syz.1.3704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee301ce59 code=0x7ffc0000 [ 473.711735][T16456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.721309][T16455] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 473.738838][T16455] audit: out of memory in audit_log_start [ 473.753708][T16456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.771269][ T28] audit: type=1400 audit(2000046254.044:15220): avc: denied { read write } for pid=16452 comm="syz.5.3703" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 474.015603][ T4217] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 474.048627][ T4217] EXT4-fs (loop0): This should not happen!! Data will be lost [ 474.048627][ T4217] [ 474.062778][T14834] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 474.075014][T14834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 474.114416][T16458] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3706'. [ 474.123862][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3706'. [ 474.144949][ T4217] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.162296][ T4217] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.174808][ T4217] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.189501][ T9688] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.422139][T16475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3711'. [ 474.654290][T16472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.744145][T16485] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3715'. [ 474.769261][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3715'. [ 474.814046][T16472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.825507][T16485] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.880714][T16472] loop1: detected capacity change from 0 to 1024 [ 474.904104][T16472] EXT4-fs: Ignoring removed bh option [ 474.913082][T16485] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.949238][T16472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.002122][T16485] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.081004][T16491] loop6: detected capacity change from 0 to 1024 [ 475.109788][T16491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 475.122729][T16491] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.135733][T16485] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.165655][T16491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16491 comm=syz.6.3716 [ 475.194964][T10839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 475.269056][ T9688] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.292194][ T9696] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.305646][ T9696] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.317234][ T9696] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.631864][T13971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.712251][T16514] netlink: 'syz.1.3725': attribute type 3 has an invalid length. [ 476.315813][ C0] net_ratelimit: 24807 callbacks suppressed [ 476.315830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 476.334258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.346424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 476.358539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.370634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 476.382735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 476.395437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.407689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 476.419799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.431949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 476.755115][T16538] loop6: detected capacity change from 0 to 764 [ 476.768622][T16532] Symlink component flag not implemented [ 476.774296][T16532] Symlink component flag not implemented [ 477.398859][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 477.398875][ T28] audit: type=1400 audit(2000046257.465:15261): avc: denied { read } for pid=16561 comm="syz.6.3744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 477.576272][T16567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.587143][T16567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.915749][ T28] audit: type=1400 audit(2000046257.937:15262): avc: denied { setopt } for pid=16568 comm="syz.3.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 477.942152][ T28] audit: type=1400 audit(2000046257.965:15263): avc: denied { execheap } for pid=16568 comm="syz.3.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 478.342267][T16578] __nla_validate_parse: 1 callbacks suppressed [ 478.342296][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3750'. [ 478.517116][T16585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3753'. [ 478.584210][T16576] SELinux: ebitmap: truncated map [ 478.589865][T16576] SELinux: failed to load policy [ 478.602634][T16588] netlink: 'syz.3.3754': attribute type 1 has an invalid length. [ 478.674906][T16588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3754'. [ 478.694900][T16588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.726298][T16588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.763255][T16588] bond2: (slave geneve3): making interface the new active one [ 478.771655][T16588] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 478.788971][T16594] netlink: 'syz.5.3756': attribute type 1 has an invalid length. [ 478.806463][T16594] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3756'. [ 478.829364][ T9688] netdevsim netdevsim3 eth0: set [1, 3] type 2 family 0 port 20004 - 0 [ 478.864362][ T28] audit: type=1400 audit(2000046258.815:15264): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 478.886155][ T9688] netdevsim netdevsim3 eth1: set [1, 3] type 2 family 0 port 20004 - 0 [ 478.895202][ T9688] netdevsim netdevsim3 eth2: set [1, 3] type 2 family 0 port 20004 - 0 [ 478.903874][ T9688] netdevsim netdevsim3 eth3: set [1, 3] type 2 family 0 port 20004 - 0 [ 478.940330][ T28] audit: type=1400 audit(2000046258.879:15265): avc: denied { search } for pid=3021 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.982165][ T28] audit: type=1400 audit(2000046258.907:15266): avc: denied { search } for pid=3021 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.004713][ T28] audit: type=1400 audit(2000046258.907:15267): avc: denied { search } for pid=3021 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.027377][ T28] audit: type=1400 audit(2000046258.907:15268): avc: denied { read } for pid=3021 comm="dhcpcd" name="n49" dev="tmpfs" ino=22422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 479.051557][ T28] audit: type=1400 audit(2000046258.907:15269): avc: denied { open } for pid=3021 comm="dhcpcd" path="/run/udev/data/n49" dev="tmpfs" ino=22422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 479.076224][ T28] audit: type=1400 audit(2000046258.907:15270): avc: denied { getattr } for pid=3021 comm="dhcpcd" path="/run/udev/data/n49" dev="tmpfs" ino=22422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 479.206352][T16613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3764'. [ 479.442116][T16620] FAULT_INJECTION: forcing a failure. [ 479.442116][T16620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.487315][T16620] CPU: 1 UID: 0 PID: 16620 Comm: syz.5.3767 Tainted: G W syzkaller #0 PREEMPT(full) [ 479.487421][T16620] Tainted: [W]=WARN [ 479.487431][T16620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 479.487448][T16620] Call Trace: [ 479.487455][T16620] [ 479.487462][T16620] __dump_stack+0x1d/0x30 [ 479.487491][T16620] dump_stack_lvl+0x95/0xd0 [ 479.487518][T16620] dump_stack+0x15/0x1b [ 479.487591][T16620] should_fail_ex+0x263/0x280 [ 479.487627][T16620] should_fail+0xb/0x20 [ 479.487658][T16620] should_fail_usercopy+0x1a/0x20 [ 479.487724][T16620] _copy_from_iter+0xcf/0xea0 [ 479.487764][T16620] ? __alloc_skb+0x4f6/0x690 [ 479.487800][T16620] ? __alloc_skb+0x200/0x690 [ 479.487829][T16620] netlink_sendmsg+0x4ae/0x6f0 [ 479.487916][T16620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.487958][T16620] ____sys_sendmsg+0x563/0x5b0 [ 479.488019][T16620] ___sys_sendmsg+0x195/0x1e0 [ 479.488097][T16620] __x64_sys_sendmsg+0xd4/0x160 [ 479.488137][T16620] x64_sys_call+0x194c/0x3020 [ 479.488203][T16620] do_syscall_64+0x12c/0x3b0 [ 479.488238][T16620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.488330][T16620] RIP: 0033:0x7f470623ce59 [ 479.488394][T16620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.488417][T16620] RSP: 002b:00007f4704c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.488442][T16620] RAX: ffffffffffffffda RBX: 00007f47064b5fa0 RCX: 00007f470623ce59 [ 479.488456][T16620] RDX: 0000000020004090 RSI: 0000200000009b40 RDI: 0000000000000003 [ 479.488518][T16620] RBP: 00007f4704c97090 R08: 0000000000000000 R09: 0000000000000000 [ 479.488533][T16620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.488548][T16620] R13: 00007f47064b6038 R14: 00007f47064b5fa0 R15: 00007fff9303d7e8 [ 479.488617][T16620] [ 479.688786][T16625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3769'. [ 479.707976][T16625] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3769'. [ 479.949066][T16616] SELinux: ebitmap: truncated map [ 479.954569][T16616] SELinux: failed to load policy [ 480.000774][T16635] netlink: 'syz.1.3773': attribute type 3 has an invalid length. [ 481.738578][ C0] net_ratelimit: 20895 callbacks suppressed [ 481.738600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.756740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.768873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.780985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.793195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.805381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.817616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 481.830401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.842582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.854785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.975231][T16670] loop6: detected capacity change from 0 to 4096 [ 482.006901][T16670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.931309][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 482.931327][ T28] audit: type=1326 audit(2000046262.574:15275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.5.3786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470623ce59 code=0x7ffc0000 [ 483.022337][ T28] audit: type=1326 audit(2000046262.592:15276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.5.3786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470623ce59 code=0x7ffc0000 [ 483.047928][ T28] audit: type=1326 audit(2000046262.601:15277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.5.3786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f470623ce59 code=0x7ffc0000 [ 483.153409][ T28] audit: type=1326 audit(2000046262.601:15278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.5.3786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470623ce59 code=0x7ffc0000 [ 483.225764][T10839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.238802][ T28] audit: type=1326 audit(2000046262.601:15279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.5.3786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47061fd68e code=0x7ffc0000 [ 483.265554][ T28] audit: type=1326 audit(2000046262.601:15280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.5.3786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470623ce59 code=0x7ffc0000 [ 483.301048][T16681] netlink: 'syz.0.3785': attribute type 3 has an invalid length. [ 483.315786][ T28] audit: type=1326 audit(2000046262.610:15281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.5.3786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470623ce59 code=0x7ffc0000 [ 483.370402][T16684] FAULT_INJECTION: forcing a failure. [ 483.370402][T16684] name failslab, interval 1, probability 0, space 0, times 0 [ 483.403501][T16684] CPU: 1 UID: 0 PID: 16684 Comm: syz.6.3789 Tainted: G W syzkaller #0 PREEMPT(full) [ 483.403538][T16684] Tainted: [W]=WARN [ 483.403547][T16684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.403562][T16684] Call Trace: [ 483.403570][T16684] [ 483.403578][T16684] __dump_stack+0x1d/0x30 [ 483.403602][T16684] dump_stack_lvl+0x95/0xd0 [ 483.403632][T16684] dump_stack+0x15/0x1b [ 483.403654][T16684] should_fail_ex+0x263/0x280 [ 483.403748][T16684] should_failslab+0x8c/0xb0 [ 483.403781][T16684] kmem_cache_alloc_noprof+0x66/0x3f0 [ 483.403885][T16684] ? skb_clone+0x151/0x1f0 [ 483.404019][T16684] skb_clone+0x151/0x1f0 [ 483.404069][T16684] __netlink_deliver_tap+0x2c9/0x500 [ 483.404107][T16684] netlink_unicast+0x653/0x680 [ 483.404142][T16684] netlink_sendmsg+0x5c8/0x6f0 [ 483.404244][T16684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.404316][T16684] ____sys_sendmsg+0x563/0x5b0 [ 483.404344][T16684] ___sys_sendmsg+0x195/0x1e0 [ 483.404387][T16684] __x64_sys_sendmsg+0xd4/0x160 [ 483.404441][T16684] x64_sys_call+0x194c/0x3020 [ 483.404470][T16684] do_syscall_64+0x12c/0x3b0 [ 483.404505][T16684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.404603][T16684] RIP: 0033:0x7f033142ce59 [ 483.404620][T16684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.404642][T16684] RSP: 002b:00007f032fe87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.404665][T16684] RAX: ffffffffffffffda RBX: 00007f03316a5fa0 RCX: 00007f033142ce59 [ 483.404755][T16684] RDX: 0000000020004090 RSI: 0000200000009b40 RDI: 0000000000000003 [ 483.404769][T16684] RBP: 00007f032fe87090 R08: 0000000000000000 R09: 0000000000000000 [ 483.404784][T16684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.404799][T16684] R13: 00007f03316a6038 R14: 00007f03316a5fa0 R15: 00007ffeda973698 [ 483.404884][T16684] [ 483.599526][ T28] audit: type=1326 audit(2000046262.610:15282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.5.3786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470623ce59 code=0x7ffc0000 [ 483.625937][ T28] audit: type=1326 audit(2000046262.610:15283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.5.3786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f470623ce59 code=0x7ffc0000 [ 483.663942][ T28] audit: type=1326 audit(2000046262.610:15284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16674 comm="syz.5.3786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470623ce59 code=0x7ffc0000 [ 484.055511][T16704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3797'. [ 484.188010][T16702] netlink: 'syz.3.3795': attribute type 1 has an invalid length. [ 484.195791][T16702] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3795'. [ 484.307784][T16711] sit1: entered allmulticast mode [ 484.458515][T16711] loop6: detected capacity change from 0 to 512 [ 484.612117][T16711] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.3794: corrupted inode contents [ 484.632419][T16711] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.634021][T16711] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.3794: mark_inode_dirty error [ 484.643422][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 484.643497][ C1] EXT4-fs (loop6): initial error at time 2000046264: ext4_do_update_inode:5690: inode 16 [ 484.643638][ C1] EXT4-fs (loop6): last error at time 2000046264: ext4_do_update_inode:5690: inode 16 [ 484.690593][T16711] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.693928][T16711] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.3794: corrupted inode contents [ 484.723353][T16711] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.726710][T16711] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.3794: mark_inode_dirty error [ 484.747100][T16711] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.747878][T16711] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.3794: corrupted inode contents [ 484.768884][T16711] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.769506][T16711] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 484.787227][T16711] loop6: lost filesystem error report for type 5 error -117 [ 484.787408][T16711] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.3794: corrupted inode contents [ 484.806562][T16711] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.806819][T16711] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.3794: mark_inode_dirty error [ 484.835930][T16711] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.840160][T16711] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 484.859563][T16711] loop6: lost filesystem error report for type 5 error -117 [ 484.866918][T16711] EXT4-fs (loop6): 1 truncate cleaned up [ 484.880583][T16711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.893250][T16711] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.283256][ T9694] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:58: Failed to release dquot type 1 [ 486.323451][T16732] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3806'. [ 486.787292][T16749] loop0: detected capacity change from 0 to 256 [ 486.972042][T10839] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.164446][ C0] net_ratelimit: 16322 callbacks suppressed [ 487.164462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 487.182751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.194896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.207048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.219192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.231294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.243500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.255829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 487.268407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 487.280760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.320454][T16763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3814'. [ 487.897287][T16795] FAULT_INJECTION: forcing a failure. [ 487.897287][T16795] name failslab, interval 1, probability 0, space 0, times 0 [ 487.910794][T16795] CPU: 1 UID: 0 PID: 16795 Comm: syz.1.3826 Tainted: G W syzkaller #0 PREEMPT(full) [ 487.910899][T16795] Tainted: [W]=WARN [ 487.910907][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 487.910922][T16795] Call Trace: [ 487.910931][T16795] [ 487.910941][T16795] __dump_stack+0x1d/0x30 [ 487.910969][T16795] dump_stack_lvl+0x95/0xd0 [ 487.911044][T16795] dump_stack+0x15/0x1b [ 487.911068][T16795] should_fail_ex+0x263/0x280 [ 487.911106][T16795] should_failslab+0x8c/0xb0 [ 487.911149][T16795] __kvmalloc_node_noprof+0x155/0x640 [ 487.911174][T16795] ? alloc_netdev_mqs+0xa5/0xa70 [ 487.911206][T16795] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 487.911236][T16795] alloc_netdev_mqs+0xa5/0xa70 [ 487.911348][T16795] rtnl_create_link+0x239/0x720 [ 487.911387][T16795] rtnl_newlink_create+0x174/0x650 [ 487.911432][T16795] ? security_capable+0x7b/0x90 [ 487.911519][T16795] ? netlink_ns_capable+0x86/0xa0 [ 487.911556][T16795] rtnl_newlink+0x1185/0x1400 [ 487.911662][T16795] ? sk_skb_reason_drop+0xbd/0x230 [ 487.911769][T16795] ? packet_rcv+0x49d/0xab0 [ 487.911807][T16795] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 487.911840][T16795] ? __rcu_read_unlock+0x4e/0x70 [ 487.911942][T16795] ? avc_has_perm_noaudit+0xab/0x130 [ 487.912113][T16795] ? cred_has_capability+0x224/0x2a0 [ 487.912145][T16795] ? selinux_capable+0x31/0x40 [ 487.912185][T16795] ? security_capable+0x7b/0x90 [ 487.912218][T16795] ? ns_capable+0x7c/0xb0 [ 487.912312][T16795] ? __pfx_rtnl_newlink+0x10/0x10 [ 487.912349][T16795] rtnetlink_rcv_msg+0x64b/0x720 [ 487.912394][T16795] netlink_rcv_skb+0x123/0x220 [ 487.912492][T16795] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 487.912538][T16795] rtnetlink_rcv+0x1c/0x30 [ 487.912614][T16795] netlink_unicast+0x5a8/0x680 [ 487.912649][T16795] netlink_sendmsg+0x5c8/0x6f0 [ 487.912698][T16795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.912739][T16795] ____sys_sendmsg+0x563/0x5b0 [ 487.912811][T16795] ___sys_sendmsg+0x195/0x1e0 [ 487.912935][T16795] __x64_sys_sendmsg+0xd4/0x160 [ 487.913036][T16795] x64_sys_call+0x194c/0x3020 [ 487.913069][T16795] do_syscall_64+0x12c/0x3b0 [ 487.913112][T16795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.913137][T16795] RIP: 0033:0x7fbee301ce59 [ 487.913211][T16795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.913308][T16795] RSP: 002b:00007fbee1a6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.913333][T16795] RAX: ffffffffffffffda RBX: 00007fbee3295fa0 RCX: 00007fbee301ce59 [ 487.913350][T16795] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 487.913368][T16795] RBP: 00007fbee1a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 487.913385][T16795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.913452][T16795] R13: 00007fbee3296038 R14: 00007fbee3295fa0 R15: 00007fff36622548 [ 487.913479][T16795] [ 488.828555][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 488.828572][ T28] audit: type=1400 audit(2000046268.012:15422): avc: denied { write } for pid=16817 comm="syz.6.3836" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 488.869915][T16818] random: crng reseeded on system resumption [ 488.884190][ T28] audit: type=1400 audit(2000046268.058:15423): avc: denied { open } for pid=16817 comm="syz.6.3836" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 489.078988][T16832] loop6: detected capacity change from 0 to 7 [ 489.094986][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.104317][ C1] buffer_io_error: 53480 callbacks suppressed [ 489.104341][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.119405][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.128687][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.142578][T16832] loop6: unable to read partition table [ 489.162727][T16832] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 489.169342][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.184379][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.196273][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.205451][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.241469][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.250637][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.262512][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.271759][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.280624][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.289810][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.408972][T16840] loop0: detected capacity change from 0 to 512 [ 489.436472][T16844] FAULT_INJECTION: forcing a failure. [ 489.436472][T16844] name failslab, interval 1, probability 0, space 0, times 0 [ 489.451829][T16840] EXT4-fs: Ignoring removed nobh option [ 489.487714][T16840] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 489.497325][T16844] CPU: 1 UID: 0 PID: 16844 Comm: syz.3.3844 Tainted: G W syzkaller #0 PREEMPT(full) [ 489.497414][T16844] Tainted: [W]=WARN [ 489.497424][T16844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 489.497440][T16844] Call Trace: [ 489.497449][T16844] [ 489.497460][T16844] __dump_stack+0x1d/0x30 [ 489.497489][T16844] dump_stack_lvl+0x95/0xd0 [ 489.497567][T16844] dump_stack+0x15/0x1b [ 489.497592][T16844] should_fail_ex+0x263/0x280 [ 489.497628][T16844] should_failslab+0x8c/0xb0 [ 489.497709][T16844] __kvmalloc_node_noprof+0x155/0x640 [ 489.497733][T16844] ? nf_tables_newset+0xf51/0x16d0 [ 489.497781][T16844] nf_tables_newset+0xf51/0x16d0 [ 489.497831][T16844] nfnetlink_rcv+0xc15/0x1720 [ 489.497918][T16844] netlink_unicast+0x5a8/0x680 [ 489.497956][T16844] netlink_sendmsg+0x5c8/0x6f0 [ 489.498064][T16844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.498102][T16844] ____sys_sendmsg+0x563/0x5b0 [ 489.498138][T16844] ___sys_sendmsg+0x195/0x1e0 [ 489.498187][T16844] __x64_sys_sendmsg+0xd4/0x160 [ 489.498246][T16844] x64_sys_call+0x194c/0x3020 [ 489.498278][T16844] do_syscall_64+0x12c/0x3b0 [ 489.498318][T16844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.498403][T16844] RIP: 0033:0x7fb2a0c9ce59 [ 489.498422][T16844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.498461][T16844] RSP: 002b:00007fb29f6f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.498649][T16844] RAX: ffffffffffffffda RBX: 00007fb2a0f15fa0 RCX: 00007fb2a0c9ce59 [ 489.498718][T16844] RDX: 0000000020004090 RSI: 0000200000009b40 RDI: 0000000000000003 [ 489.498734][T16844] RBP: 00007fb29f6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 489.498747][T16844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.498761][T16844] R13: 00007fb2a0f16038 R14: 00007fb2a0f15fa0 R15: 00007ffed7b29c18 [ 489.498811][T16844] [ 489.744101][T16840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.764611][T16840] ext4 filesystem being mounted at /130/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.777941][T16848] loop1: detected capacity change from 0 to 512 [ 489.790823][T16848] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 489.854383][T16848] EXT4-fs (loop1): 1 truncate cleaned up [ 489.866970][T14834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.876623][T16848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.891484][ T28] audit: type=1400 audit(2000046268.990:15424): avc: denied { write } for pid=16847 comm="syz.1.3845" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.995044][ T28] audit: type=1400 audit(2000046269.018:15425): avc: denied { create } for pid=16847 comm="syz.1.3845" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 490.022260][T13971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.092157][ T28] audit: type=1400 audit(2000046269.018:15426): avc: denied { write } for pid=16847 comm="syz.1.3845" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.155848][ T28] audit: type=1400 audit(2000046269.018:15427): avc: denied { write } for pid=16847 comm="syz.1.3845" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.210582][ T28] audit: type=1400 audit(2000046269.027:15428): avc: denied { rename } for pid=16847 comm="syz.1.3845" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 490.255512][ T28] audit: type=1400 audit(2000046269.027:15429): avc: denied { rmdir } for pid=16847 comm="syz.1.3845" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.365470][ T28] audit: type=1326 audit(2000046269.424:15430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.3853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee301ce59 code=0x7ffc0000 [ 490.394116][ T28] audit: type=1326 audit(2000046269.424:15431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.3853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee301ce59 code=0x7ffc0000 [ 490.431878][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3853'. [ 490.441253][T16878] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3853'. [ 490.508470][T16883] FAULT_INJECTION: forcing a failure. [ 490.508470][T16883] name failslab, interval 1, probability 0, space 0, times 0 [ 490.523589][T16883] CPU: 1 UID: 0 PID: 16883 Comm: syz.5.3856 Tainted: G W syzkaller #0 PREEMPT(full) [ 490.523640][T16883] Tainted: [W]=WARN [ 490.523648][T16883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 490.523663][T16883] Call Trace: [ 490.523671][T16883] [ 490.523680][T16883] __dump_stack+0x1d/0x30 [ 490.523735][T16883] dump_stack_lvl+0x95/0xd0 [ 490.523758][T16883] dump_stack+0x15/0x1b [ 490.523781][T16883] should_fail_ex+0x263/0x280 [ 490.523815][T16883] should_failslab+0x8c/0xb0 [ 490.523863][T16883] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 490.523897][T16883] ? __d_alloc+0x37/0x340 [ 490.523924][T16883] __d_alloc+0x37/0x340 [ 490.524021][T16883] ? default_pointer+0xf2/0x5e0 [ 490.524055][T16883] d_alloc+0x2e/0x100 [ 490.524082][T16883] lookup_one_qstr_excl+0x95/0x240 [ 490.524114][T16883] start_dirop+0x3e/0x70 [ 490.524159][T16883] simple_start_creating+0xa2/0xd0 [ 490.524193][T16883] debugfs_start_creating+0xda/0x150 [ 490.524242][T16883] __debugfs_create_file+0x70/0x2b0 [ 490.524278][T16883] debugfs_create_file_full+0x3f/0x60 [ 490.524363][T16883] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 490.524394][T16883] ref_tracker_dir_debugfs+0x10e/0x220 [ 490.524437][T16883] alloc_netdev_mqs+0x1a7/0xa70 [ 490.524471][T16883] rtnl_create_link+0x239/0x720 [ 490.524566][T16883] rtnl_newlink_create+0x174/0x650 [ 490.524608][T16883] ? security_capable+0x7b/0x90 [ 490.524638][T16883] ? netlink_ns_capable+0x86/0xa0 [ 490.524671][T16883] rtnl_newlink+0x1185/0x1400 [ 490.524796][T16883] ? strlen+0x19/0x40 [ 490.524827][T16883] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 490.524934][T16883] ? __rcu_read_unlock+0x4e/0x70 [ 490.524959][T16883] ? avc_has_perm_noaudit+0xab/0x130 [ 490.524992][T16883] ? cred_has_capability+0x224/0x2a0 [ 490.525026][T16883] ? selinux_capable+0x31/0x40 [ 490.525086][T16883] ? security_capable+0x7b/0x90 [ 490.525118][T16883] ? ns_capable+0x7c/0xb0 [ 490.525152][T16883] ? __pfx_rtnl_newlink+0x10/0x10 [ 490.525327][T16883] rtnetlink_rcv_msg+0x64b/0x720 [ 490.525387][T16883] netlink_rcv_skb+0x123/0x220 [ 490.525422][T16883] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 490.525480][T16883] rtnetlink_rcv+0x1c/0x30 [ 490.525577][T16883] netlink_unicast+0x5a8/0x680 [ 490.525612][T16883] netlink_sendmsg+0x5c8/0x6f0 [ 490.525649][T16883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.525764][T16883] ____sys_sendmsg+0x563/0x5b0 [ 490.525799][T16883] ___sys_sendmsg+0x195/0x1e0 [ 490.525900][T16883] __x64_sys_sendmsg+0xd4/0x160 [ 490.525956][T16883] x64_sys_call+0x194c/0x3020 [ 490.525980][T16883] do_syscall_64+0x12c/0x3b0 [ 490.526024][T16883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.526050][T16883] RIP: 0033:0x7f470623ce59 [ 490.526069][T16883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.526089][T16883] RSP: 002b:00007f4704c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.526113][T16883] RAX: ffffffffffffffda RBX: 00007f47064b5fa0 RCX: 00007f470623ce59 [ 490.526166][T16883] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 490.526183][T16883] RBP: 00007f4704c97090 R08: 0000000000000000 R09: 0000000000000000 [ 490.526196][T16883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.526212][T16883] R13: 00007f47064b6038 R14: 00007f47064b5fa0 R15: 00007fff9303d7e8 [ 490.526239][T16883] [ 490.904040][T16886] loop0: detected capacity change from 0 to 2048 [ 490.922748][T16886] EXT4-fs: dax option not supported [ 491.332192][T16905] netlink: 'syz.5.3862': attribute type 29 has an invalid length. [ 491.365274][T16906] netlink: 'syz.5.3862': attribute type 29 has an invalid length. [ 491.463602][T16910] loop3: detected capacity change from 0 to 8192 [ 491.472450][T16911] random: crng reseeded on system resumption [ 491.988861][T16922] netlink: 288 bytes leftover after parsing attributes in process `syz.6.3870'. [ 492.001511][T16920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3869'. [ 492.010701][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3870'. [ 492.031989][T16920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3869'. [ 492.052077][T16920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3869'. [ 492.071300][T16920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3869'. [ 492.109977][T16923] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.197626][T16931] loop3: detected capacity change from 0 to 2048 [ 492.334341][T16931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.353953][T16935] netlink: 'syz.0.3875': attribute type 28 has an invalid length. [ 492.362502][T16935] netlink: 'syz.0.3875': attribute type 3 has an invalid length. [ 492.370685][T16935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3875'. [ 492.581221][T16923] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.591109][ C0] net_ratelimit: 21183 callbacks suppressed [ 492.591130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.591231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.591348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.591510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.591672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.605110][T16945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3875'. [ 492.610059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.678401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 492.690987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 492.703340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.715525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.741943][T16935] tipc: Started in network mode [ 492.747081][T16935] tipc: Node identity ac14140f, cluster identity 4711 [ 492.769055][T16935] tipc: New replicast peer: 255.255.255.255 [ 492.790325][T16935] tipc: Enabled bearer , priority 10 [ 492.919741][T16923] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.985026][T13546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.041185][T16923] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.075505][T16954] random: crng reseeded on system resumption [ 493.477164][T16961] loop3: detected capacity change from 0 to 512 [ 493.498459][T16961] EXT4-fs: Ignoring removed orlov option [ 493.566394][T16961] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 493.647354][ T4316] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.660231][T16961] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3880: invalid indirect mapped block 32768 (level 2) [ 493.682431][T16961] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 493.687193][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 493.702858][ C0] EXT4-fs (loop3): initial error at time 2000046272: ext4_free_branches:1023: inode 16 [ 493.712566][ C0] EXT4-fs (loop3): last error at time 2000046272: ext4_free_branches:1023: inode 16 [ 493.726488][T16961] EXT4-fs (loop3): 1 orphan inode deleted [ 493.782441][T16961] EXT4-fs (loop3): 1 truncate cleaned up [ 493.798688][T16961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.894228][ T4316] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.924694][ T4316] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.946785][T12093] tipc: Node number set to 2886997007 [ 493.956748][ T4316] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.983041][T16969] random: crng reseeded on system resumption [ 494.009123][T16969] dummy0: entered allmulticast mode [ 494.022052][T16969] dummy0: left allmulticast mode [ 494.433873][T16976] loop1: detected capacity change from 0 to 512 [ 494.472237][T16976] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 494.653166][T16976] EXT4-fs (loop1): 1 truncate cleaned up [ 494.660503][T16976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.677511][ T28] kauditd_printk_skb: 234 callbacks suppressed [ 494.677527][ T28] audit: type=1400 audit(2000046273.413:15666): avc: denied { block_suspend } for pid=16975 comm="syz.1.3886" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 494.948167][T13971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.173244][ T28] audit: type=1400 audit(2000046273.874:15667): avc: denied { mounton } for pid=16992 comm="syz.0.3892" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 495.216550][T16997] loop1: detected capacity change from 0 to 2048 [ 495.263013][T16997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.290980][T16921] Process accounting resumed [ 495.309886][ T28] audit: type=1400 audit(2000046273.893:15668): avc: denied { mount } for pid=16992 comm="syz.0.3892" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 495.334324][ T28] audit: type=1400 audit(2000046273.902:15669): avc: denied { setopt } for pid=16992 comm="syz.0.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 495.400973][ T28] audit: type=1400 audit(2000046274.077:15670): avc: denied { write } for pid=16994 comm="syz.1.3890" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 495.532299][T13971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.576833][ T28] audit: type=1400 audit(2000046274.244:15671): avc: denied { name_bind } for pid=17004 comm="syz.6.3893" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 495.890528][ T28] audit: type=1400 audit(2000046274.530:15672): avc: denied { create } for pid=17008 comm="syz.1.3895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 495.918396][T17009] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 496.014687][ T28] audit: type=1400 audit(2000046274.650:15673): avc: denied { create } for pid=17008 comm="syz.1.3895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 496.059798][ T28] audit: type=1400 audit(2000046274.677:15674): avc: denied { mount } for pid=17008 comm="syz.1.3895" name="/" dev="configfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 496.193623][T17012] random: crng reseeded on system resumption [ 496.218196][T17012] dummy0: entered allmulticast mode [ 496.224459][T17012] dummy0: left allmulticast mode [ 496.442964][T17015] bond2: option mode: invalid value (9) [ 496.479348][T17015] bond2 (unregistering): Released all slaves [ 496.542142][T16965] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 496.634341][T17031] netlink: 'syz.1.3903': attribute type 16 has an invalid length. [ 496.643128][ T28] audit: type=1400 audit(2000046275.222:15675): avc: denied { getopt } for pid=17030 comm="syz.1.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 496.731770][T17033] __nla_validate_parse: 4 callbacks suppressed [ 496.731789][T17033] netlink: 600 bytes leftover after parsing attributes in process `syz.1.3903'. [ 496.877054][T17031] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.884275][T17031] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.202739][T17044] random: crng reseeded on system resumption [ 497.345361][T17031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.361842][T17047] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3907'. [ 497.413625][T17031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.855352][T17053] loop1: detected capacity change from 0 to 256 [ 497.870924][T17046] dummy0: entered allmulticast mode [ 497.993840][T17046] dummy0: left allmulticast mode [ 498.017724][ C0] net_ratelimit: 25778 callbacks suppressed [ 498.017743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.035865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.048055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 498.060938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e6:6a:5f:fa:9f:50, vlan:0) [ 498.073298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.085465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.097589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.109730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.121848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.134018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.148725][ T4218] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.162313][ T4218] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.210026][ T4218] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.263751][ T4218] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.587439][T17068] loop0: detected capacity change from 0 to 512 [ 498.643168][T17068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.770145][T17068] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.998218][T17077] SELinux: failed to load policy [ 499.075527][T14834] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 499.103695][T14834] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 499.394821][T17078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.425156][T13546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.437247][T17085] FAULT_INJECTION: forcing a failure. [ 499.437247][T17085] name failslab, interval 1, probability 0, space 0, times 0 [ 499.496517][ T4316] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.505581][T17085] CPU: 0 UID: 0 PID: 17085 Comm: syz.1.3921 Tainted: G W syzkaller #0 PREEMPT(full) [ 499.505873][T17085] Tainted: [W]=WARN [ 499.505895][T17085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 499.505937][T17085] Call Trace: [ 499.505957][T17085] [ 499.505987][T17085] __dump_stack+0x1d/0x30 [ 499.506061][T17085] dump_stack_lvl+0x95/0xd0 [ 499.506131][T17085] dump_stack+0x15/0x1b [ 499.506262][T17085] should_fail_ex+0x263/0x280 [ 499.506321][T17085] should_failslab+0x8c/0xb0 [ 499.506403][T17085] __kmalloc_noprof+0xb8/0x4d0 [ 499.506518][T17085] ? nft_trans_alloc+0x1e/0x100 [ 499.506607][T17085] nft_trans_alloc+0x1e/0x100 [ 499.506668][T17085] nf_tables_newsetelem+0x219f/0x2e60 [ 499.506831][T17085] ? __account_obj_stock+0x3ba/0x5f0 [ 499.507032][T17085] nfnetlink_rcv+0xc15/0x1720 [ 499.507198][T17085] netlink_unicast+0x5a8/0x680 [ 499.507299][T17085] netlink_sendmsg+0x5c8/0x6f0 [ 499.507483][T17085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.507584][T17085] ____sys_sendmsg+0x563/0x5b0 [ 499.507678][T17085] ___sys_sendmsg+0x195/0x1e0 [ 499.507861][T17085] __x64_sys_sendmsg+0xd4/0x160 [ 499.508028][T17085] x64_sys_call+0x194c/0x3020 [ 499.508101][T17085] do_syscall_64+0x12c/0x3b0 [ 499.508271][T17085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.508343][T17085] RIP: 0033:0x7fbee301ce59 [ 499.508477][T17085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.508538][T17085] RSP: 002b:00007fbee1a6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.508601][T17085] RAX: ffffffffffffffda RBX: 00007fbee3295fa0 RCX: 00007fbee301ce59 [ 499.508683][T17085] RDX: 0000000020004090 RSI: 0000200000009b40 RDI: 0000000000000003 [ 499.508725][T17085] RBP: 00007fbee1a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 499.508772][T17085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.508816][T17085] R13: 00007fbee3296038 R14: 00007fbee3295fa0 R15: 00007fff36622548 [ 499.508885][T17085] [ 499.885880][T17088] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 499.993112][ T4316] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.245414][T17109] can0: slcan on ttyS3. [ 500.295597][ T4316] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.331055][T17107] can0 (unregistered): slcan off ttyS3. [ 500.401617][ T4316] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.460935][ T28] kauditd_printk_skb: 387 callbacks suppressed [ 500.460961][ T28] audit: type=1400 audit(2000046278.758:16063): avc: denied { ioctl } for pid=17114 comm="syz.5.3930" path="socket:[57814]" dev="sockfs" ino=57814 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 500.641361][ T28] audit: type=1400 audit(2000046278.804:16064): avc: denied { getopt } for pid=17114 comm="syz.5.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 500.891131][ T28] audit: type=1400 audit(2000046279.155:16065): avc: denied { read } for pid=17128 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.944600][ T28] audit: type=1400 audit(2000046279.173:16066): avc: denied { read open } for pid=17128 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.974041][ T4316] veth0_to_bridge: left allmulticast mode [ 500.980552][ T4316] veth0_to_bridge: left promiscuous mode [ 500.995307][T17129] loop1: detected capacity change from 0 to 512 [ 501.003491][ T4316] bridge0: port 3(veth0_to_bridge) entered disabled state [ 501.055447][T17129] EXT4-fs: Ignoring removed orlov option [ 501.079773][ T4316] bridge_slave_1: left allmulticast mode [ 501.090607][ T28] audit: type=1400 audit(2000046279.173:16067): avc: denied { getattr } for pid=17128 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.116164][T17129] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 501.127799][T17129] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.3927: invalid indirect mapped block 32768 (level 2) [ 501.128158][ T4316] bridge_slave_1: left promiscuous mode [ 501.194457][T17129] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 501.195037][T17129] EXT4-fs (loop1): 1 orphan inode deleted [ 501.199911][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.204395][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 501.223635][ C0] EXT4-fs (loop1): initial error at time 2000046279: ext4_free_branches:1023: inode 16 [ 501.233349][ C0] EXT4-fs (loop1): last error at time 2000046279: ext4_free_branches:1023: inode 16 [ 501.244356][T17129] EXT4-fs (loop1): 1 truncate cleaned up [ 501.250641][T17129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.267497][ T4316] bridge_slave_0: left allmulticast mode [ 501.278547][ T4316] bridge_slave_0: left promiscuous mode [ 501.292258][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.327483][ T28] audit: type=1400 audit(2000046279.552:16068): avc: denied { write } for pid=17127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.360127][ T28] audit: type=1400 audit(2000046279.552:16069): avc: denied { add_name } for pid=17127 comm="dhcpcd-run-hook" name="resolv.conf.eth10.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.407812][ T28] audit: type=1400 audit(2000046279.552:16070): avc: denied { create } for pid=17127 comm="dhcpcd-run-hook" name="resolv.conf.eth10.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 501.458066][ T28] audit: type=1400 audit(2000046279.552:16071): avc: denied { write } for pid=17127 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth10.link" dev="tmpfs" ino=23321 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 501.508251][T17152] loop3: detected capacity change from 0 to 512 [ 501.527185][ T4316] team0: Port device gretap1 removed [ 501.532622][ T28] audit: type=1400 audit(2000046279.552:16072): avc: denied { append } for pid=17127 comm="dhcpcd-run-hook" name="resolv.conf.eth10.link" dev="tmpfs" ino=23321 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 501.566814][T17134] loop6: detected capacity change from 0 to 512 [ 501.577197][T17152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 501.647602][T17152] System zones: 1-12 [ 501.669785][T17152] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.3935: Directory hole found for htree index block 0 [ 501.706989][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.745013][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.764997][T17152] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 501.765494][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 501.781043][ C0] EXT4-fs (loop3): initial error at time 2000046279: dx_probe:791: inode 2 [ 501.789706][ C0] EXT4-fs (loop3): last error at time 2000046279: dx_probe:791: inode 2 [ 501.798586][T17152] EXT4-fs (loop3): Remounting filesystem read-only [ 501.816134][T17152] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 501.817969][ T4316] bond0 (unregistering): Released all slaves [ 501.851755][ T4316] bond1 (unregistering): Released all slaves [ 501.864715][T17152] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 501.879935][T17159] SELinux: ebitmap: truncated map [ 501.885377][T17159] SELinux: failed to load policy [ 501.892059][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 501.926988][ T4316] tipc: Disabling bearer [ 501.935520][ T4316] tipc: Left network mode [ 501.950969][T17152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.963690][ T4316] hsr_slave_0: left promiscuous mode [ 501.971995][ T4316] hsr_slave_1: left promiscuous mode [ 501.977613][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.985190][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.004164][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.014643][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.038207][ T4316] veth1_macvtap: left promiscuous mode [ 502.049929][ T4316] veth0_macvtap: left promiscuous mode [ 502.066909][ T4316] veth1_vlan: left promiscuous mode [ 502.074594][T13546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.077762][ T4316] veth0_vlan: left promiscuous mode [ 502.357189][ T4316] team0 (unregistering): Port device vlan0 removed [ 502.365920][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3941'. [ 502.420899][T17184] tmpfs: Bad value for 'mpol' [ 502.428963][ T4316] team0 (unregistering): Port device team_slave_1 removed [ 502.447183][ T4316] team0 (unregistering): Port device team_slave_0 removed [ 502.498472][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 502.520610][T17186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3942'. [ 502.591084][T17186] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 502.613887][T17186] bond3 (unregistering): Released all slaves [ 502.727338][T17092] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.775182][T17092] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.811341][T17092] bridge_slave_0: entered allmulticast mode [ 502.833475][T17092] bridge_slave_0: entered promiscuous mode [ 502.875617][T17092] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.900117][T17092] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.918403][T17092] bridge_slave_1: entered allmulticast mode [ 502.938071][T17092] bridge_slave_1: entered promiscuous mode [ 502.990171][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 503.015405][T17092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.077107][T17092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.138821][ T4316] Bluetooth: hci0: Frame reassembly failed (-84) [ 503.156595][T17092] team0: Port device team_slave_0 added [ 503.181889][T17092] team0: Port device team_slave_1 added [ 503.227967][T17223] syz_tun: entered allmulticast mode [ 503.283562][T17092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.290613][T17092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.346132][T17092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.376519][T17092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.388141][T17092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.444428][T17092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.513002][T17092] hsr_slave_0: entered promiscuous mode [ 503.532772][T17092] hsr_slave_1: entered promiscuous mode [ 503.547765][T17092] debugfs: 'hsr0' already exists in 'hsr' [ 503.563254][T17092] Cannot create hsr debugfs directory [ 503.640553][T17074] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 503.761889][T17092] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 503.777732][T17092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.793648][T17092] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 503.817733][T17092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.837011][T17092] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 503.853729][T17092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.870249][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 503.882684][T17092] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 503.901940][T17092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.001981][T17092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.037475][T17092] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.059872][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.067029][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.092273][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.099471][ T4316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.200123][T17278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.222649][T17278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.350679][T17092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.546202][T17092] veth0_vlan: entered promiscuous mode [ 504.555629][T17092] veth1_vlan: entered promiscuous mode [ 504.573568][T17092] veth0_macvtap: entered promiscuous mode [ 504.581277][T17092] veth1_macvtap: entered promiscuous mode [ 504.594195][T17092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.609174][T17092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.630627][ T4218] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.648989][ T4218] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.660080][ T4218] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.673248][ T4218] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.090311][T17320] netlink: 'syz.5.3963': attribute type 1 has an invalid length. [ 505.132612][T17318] loop6: detected capacity change from 0 to 512 [ 505.146437][T17320] xt_socket: unknown flags 0x48 [ 505.161256][T17318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=17318 comm=syz.6.3962 [ 505.211283][T13971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.266670][T17324] loop1: detected capacity change from 0 to 128 [ 505.373285][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 505.380583][T17221] syz_tun: left allmulticast mode [ 505.445861][T17327] netlink: 'syz.6.3965': attribute type 15 has an invalid length. [ 505.481733][T17327] netlink: 'syz.6.3965': attribute type 7 has an invalid length. [ 505.578215][T17327] SELinux: failed to load policy [ 505.931799][T17354] netlink: 'syz.6.3975': attribute type 1 has an invalid length. [ 506.040086][T17354] macvlan2: entered promiscuous mode [ 506.060126][T17354] macvlan2: entered allmulticast mode [ 506.076972][T17354] bond6: entered promiscuous mode [ 506.095387][T17354] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 506.118981][T17354] bond6: left promiscuous mode [ 506.134612][T17358] SELinux: ebitmap: truncated map [ 506.142448][ C0] Adjusting tsc more than 11% (6079458 vs 8464875) [ 506.150677][T17358] SELinux: failed to load policy [ 506.244934][T17361] loop7: detected capacity change from 0 to 128 [ 506.295804][T17365] loop6: detected capacity change from 0 to 256 [ 506.307650][T17365] msdos: Bad value for 'umask' [ 506.371994][T17372] loop6: detected capacity change from 0 to 256 [ 506.640095][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 506.640114][ T28] audit: type=1400 audit(2000046284.393:16185): avc: denied { bind } for pid=17384 comm="syz.3.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 506.838514][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3986'. [ 506.968216][T17380] SELinux: ebitmap: truncated map [ 506.976281][T17380] SELinux: failed to load policy [ 507.033937][ T28] audit: type=1400 audit(2000046284.704:16186): avc: denied { bind } for pid=17406 comm="syz.7.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 507.070265][T17411] No such timeout policy "syz1" [ 507.080017][ T28] audit: type=1400 audit(2000046284.743:16187): avc: denied { listen } for pid=17406 comm="syz.7.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 507.136487][ T28] audit: type=1400 audit(2000046284.743:16188): avc: denied { connect } for pid=17406 comm="syz.7.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 507.189296][ T28] audit: type=1400 audit(2000046284.743:16189): avc: denied { accept } for pid=17406 comm="syz.7.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 507.248992][ T28] audit: type=1400 audit(2000046284.863:16190): avc: denied { execute } for pid=17401 comm="syz.1.3988" path="/memory.swap.current" dev="ramfs" ino=58568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 507.319547][ T28] audit: type=1400 audit(2000046284.935:16191): avc: denied { bind } for pid=17420 comm="syz.5.3995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 507.341112][ T28] audit: type=1400 audit(2000046284.935:16192): avc: denied { setopt } for pid=17420 comm="syz.5.3995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 507.373400][T17426] loop1: detected capacity change from 0 to 512 [ 507.411155][T17426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.490395][ T28] audit: type=1400 audit(2000046285.073:16193): avc: denied { write } for pid=17432 comm="syz.6.3998" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 507.515750][T17426] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.551887][ T28] audit: type=1400 audit(2000046285.114:16194): avc: denied { ioctl } for pid=17425 comm="syz.1.3997" path="socket:[58596]" dev="sockfs" ino=58596 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 507.772303][T17455] loop7: detected capacity change from 0 to 2048 [ 507.827594][T17453] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 507.870968][T17455] msdos: Unknown parameter 'erroontinue' [ 507.934328][T17455] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4008'. [ 507.943425][T17455] sch_tbf: peakrate 2 is lower than or equals to rate 50420 ! [ 508.342539][T17467] FAULT_INJECTION: forcing a failure. [ 508.342539][T17467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.410888][T17467] CPU: 1 UID: 0 PID: 17467 Comm: syz.6.4012 Tainted: G W syzkaller #0 PREEMPT(full) [ 508.410931][T17467] Tainted: [W]=WARN [ 508.410940][T17467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 508.411015][T17467] Call Trace: [ 508.411022][T17467] [ 508.411031][T17467] __dump_stack+0x1d/0x30 [ 508.411155][T17467] dump_stack_lvl+0x95/0xd0 [ 508.411180][T17467] dump_stack+0x15/0x1b [ 508.411202][T17467] should_fail_ex+0x263/0x280 [ 508.411309][T17467] should_fail+0xb/0x20 [ 508.411340][T17467] should_fail_usercopy+0x1a/0x20 [ 508.411376][T17467] _copy_from_user+0x1c/0xb0 [ 508.411427][T17467] ___sys_sendmsg+0xc1/0x1e0 [ 508.411471][T17467] __x64_sys_sendmsg+0xd4/0x160 [ 508.411506][T17467] x64_sys_call+0x194c/0x3020 [ 508.411602][T17467] do_syscall_64+0x12c/0x3b0 [ 508.411775][T17467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.411947][T17467] RIP: 0033:0x7f033142ce59 [ 508.411966][T17467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.411989][T17467] RSP: 002b:00007f032fe87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.412013][T17467] RAX: ffffffffffffffda RBX: 00007f03316a5fa0 RCX: 00007f033142ce59 [ 508.412029][T17467] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 508.412042][T17467] RBP: 00007f032fe87090 R08: 0000000000000000 R09: 0000000000000000 [ 508.412078][T17467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.412109][T17467] R13: 00007f03316a6038 R14: 00007f03316a5fa0 R15: 00007ffeda973698 [ 508.412133][T17467] [ 509.122748][T17474] netlink: 288 bytes leftover after parsing attributes in process `syz.5.4015'. [ 509.152578][T17474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4015'. [ 509.332604][T17487] netlink: 288 bytes leftover after parsing attributes in process `syz.7.4019'. [ 509.341844][T17487] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4019'. [ 509.410278][T17488] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.429149][T17482] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.456417][T17490] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.473607][T13971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.484702][T17482] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.508197][T17482] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.515638][T17488] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.604164][ T6357] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.610781][T17482] infiniband syz2: set down [ 509.616585][T17482] infiniband syz2: added ip6_vti0 [ 509.644247][T17482] RDS/IB: syz2: added [ 509.648871][T17482] smc: adding ib device syz2 with port count 1 [ 509.665641][T17482] smc: ib device syz2 port 1 has no pnetid [ 509.677054][T17488] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.709554][ T6357] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.710316][T17496] FAULT_INJECTION: forcing a failure. [ 509.710316][T17496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.772998][T17496] CPU: 0 UID: 0 PID: 17496 Comm: syz.3.4021 Tainted: G W syzkaller #0 PREEMPT(full) [ 509.773030][T17496] Tainted: [W]=WARN [ 509.773109][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 509.773126][T17496] Call Trace: [ 509.773135][T17496] [ 509.773144][T17496] __dump_stack+0x1d/0x30 [ 509.773213][T17496] dump_stack_lvl+0x95/0xd0 [ 509.773238][T17496] dump_stack+0x15/0x1b [ 509.773262][T17496] should_fail_ex+0x263/0x280 [ 509.773302][T17496] should_fail+0xb/0x20 [ 509.773334][T17496] should_fail_usercopy+0x1a/0x20 [ 509.773374][T17496] _copy_from_user+0x1c/0xb0 [ 509.773409][T17496] ip_mcast_join_leave+0xab/0x1b0 [ 509.773445][T17496] do_ip_setsockopt+0x18de/0x2290 [ 509.773480][T17496] ip_setsockopt+0x58/0x110 [ 509.773539][T17496] udp_setsockopt+0x89/0xa0 [ 509.773572][T17496] sock_common_setsockopt+0x69/0x80 [ 509.773675][T17496] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 509.773717][T17496] __sys_setsockopt+0x184/0x200 [ 509.773743][T17496] __x64_sys_setsockopt+0x64/0x80 [ 509.773773][T17496] x64_sys_call+0x2327/0x3020 [ 509.773798][T17496] do_syscall_64+0x12c/0x3b0 [ 509.773828][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.773874][T17496] RIP: 0033:0x7fb2a0c9ce59 [ 509.773893][T17496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.773914][T17496] RSP: 002b:00007fb29f6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 509.773962][T17496] RAX: ffffffffffffffda RBX: 00007fb2a0f15fa0 RCX: 00007fb2a0c9ce59 [ 509.774054][T17496] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000005 [ 509.774066][T17496] RBP: 00007fb29f6f7090 R08: 0000000000000088 R09: 0000000000000000 [ 509.774135][T17496] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 509.774152][T17496] R13: 00007fb2a0f16038 R14: 00007fb2a0f15fa0 R15: 00007ffed7b29c18 [ 509.774174][T17496] [ 509.774237][T17482] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.981621][T17488] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.044284][T17482] ip6_vti0 speed is unknown, defaulting to 1000 [ 510.074188][ T9694] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.097914][ T9694] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.131053][ T838] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.148116][ T838] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.211609][T17482] ip6_vti0 speed is unknown, defaulting to 1000 [ 510.228452][T17501] loop1: detected capacity change from 0 to 512 [ 510.249742][T17501] EXT4-fs: Ignoring removed orlov option [ 510.263636][T17501] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 510.309583][T17490] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.321806][T17501] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.4020: invalid indirect mapped block 32768 (level 2) [ 510.335677][T17501] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 510.336174][T17501] EXT4-fs (loop1): 1 orphan inode deleted [ 510.345397][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 510.345416][ C1] EXT4-fs (loop1): initial error at time 2000046287: ext4_free_branches:1023: inode 16 [ 510.345460][ C1] EXT4-fs (loop1): last error at time 2000046287: ext4_free_branches:1023: inode 16 [ 510.379252][T17482] ip6_vti0 speed is unknown, defaulting to 1000 [ 510.400776][T17501] EXT4-fs (loop1): 1 truncate cleaned up [ 510.412756][T17501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.436610][T17490] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.459562][T17482] ip6_vti0 speed is unknown, defaulting to 1000 [ 510.494260][T17490] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.518511][T17482] ip6_vti0 speed is unknown, defaulting to 1000 [ 510.533582][ T9694] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.549480][ T9694] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.564817][ T9694] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.597476][ T9694] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.671047][T13971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.701312][T17512] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4026'. [ 510.720018][T17512] loop6: detected capacity change from 0 to 256 [ 510.727785][T17512] msdos: Unknown parameter 'sho' [ 510.770522][T17512] loop6: detected capacity change from 0 to 1764 [ 511.088126][T17524] netlink: 'syz.3.4029': attribute type 1 has an invalid length. [ 511.096001][T17524] netlink: 'syz.3.4029': attribute type 2 has an invalid length. [ 511.365260][T17537] loop3: detected capacity change from 0 to 128 [ 511.397969][T17537] syz.3.4035: attempt to access beyond end of device [ 511.397969][T17537] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 511.482561][T17539] loop3: detected capacity change from 0 to 2048 [ 511.508190][T17539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.551901][T13546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.615634][T17546] loop3: detected capacity change from 0 to 128 [ 511.793634][T17554] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4041'. [ 512.356590][T17575] loop3: detected capacity change from 0 to 512 [ 512.366403][T17575] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 512.573645][T17583] ================================================================== [ 512.581814][T17583] BUG: KCSAN: data-race in __percpu_counter_init_many / copy_mm [ 512.589481][T17583] [ 512.591822][T17583] write to 0xffff888168468bd8 of 8 bytes by task 17584 on cpu 0: [ 512.599546][T17583] __percpu_counter_init_many+0x292/0x310 [ 512.605307][T17583] mm_init+0x505/0x680 [ 512.609395][T17583] copy_mm+0x100/0x370 [ 512.613488][T17583] copy_process+0x1087/0x2370 [ 512.618187][T17583] kernel_clone+0x1a5/0x5e0 [ 512.622713][T17583] __se_sys_clone3+0x1f5/0x230 [ 512.627505][T17583] __x64_sys_clone3+0x31/0x40 [ 512.632211][T17583] x64_sys_call+0x580/0x3020 [ 512.636839][T17583] do_syscall_64+0x12c/0x3b0 [ 512.641466][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.647388][T17583] [ 512.649736][T17583] read to 0xffff8881684686c0 of 1664 bytes by task 17583 on cpu 1: [ 512.657643][T17583] copy_mm+0xe1/0x370 [ 512.661651][T17583] copy_process+0x1087/0x2370 [ 512.666344][T17583] kernel_clone+0x1a5/0x5e0 [ 512.670866][T17583] __se_sys_clone3+0x1f5/0x230 [ 512.675655][T17583] __x64_sys_clone3+0x31/0x40 [ 512.680356][T17583] x64_sys_call+0x580/0x3020 [ 512.684976][T17583] do_syscall_64+0x12c/0x3b0 [ 512.689589][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.695501][T17583] [ 512.697830][T17583] Reported by Kernel Concurrency Sanitizer on: [ 512.703989][T17583] CPU: 1 UID: 0 PID: 17583 Comm: syz.3.4054 Tainted: G W syzkaller #0 PREEMPT(full) [ 512.714949][T17583] Tainted: [W]=WARN [ 512.718765][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 512.728834][T17583] ================================================================== [ 512.765826][T17583] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 512.776734][T17583] bridge1: entered promiscuous mode [ 514.650674][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 514.650690][ T28] audit: type=1400 audit(2000046291.327:16205): avc: denied { write } for pid=17587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.689232][ T28] audit: type=1400 audit(2000046291.354:16206): avc: denied { write } for pid=17598 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.435785][ T28] audit: type=1400 audit(2000046292.943:16207): avc: denied { write } for pid=17601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.471729][ T28] audit: type=1400 audit(2000046292.971:16208): avc: denied { write } for pid=17612 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.563130][ T28] audit: type=1400 audit(2000046293.062:16209): avc: denied { write } for pid=17615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.598284][ T28] audit: type=1400 audit(2000046293.098:16210): avc: denied { write } for pid=17626 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.239495][ T28] audit: type=1400 audit(2000046293.673:16211): avc: denied { write } for pid=17629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.274918][ T28] audit: type=1400 audit(2000046293.710:16212): avc: denied { write } for pid=17640 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1