last executing test programs: 1m26.294727036s ago: executing program 4 (id=5): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendto(r0, &(0x7f0000000600)="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", 0xfa, 0x4, &(0x7f0000000500)=@nfc={0x27, r1, 0xffffffffffffffff, 0x2}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x8088}, 0x8090) r3 = syz_io_uring_complete(0x0) recvmmsg$unix(r3, &(0x7f0000005c00)=[{{&(0x7f00000007c0), 0x6e, &(0x7f0000000d80)=[{&(0x7f00000003c0)=""/11, 0xb}, {&(0x7f0000000840)=""/199, 0xc7}, {&(0x7f0000000940)=""/216, 0xd8}, {&(0x7f0000000a40)=""/233, 0xe9}, {&(0x7f0000000b40)=""/134, 0x86}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f0000000c00)=""/222, 0xde}, {&(0x7f0000000d00)=""/113, 0x71}], 0xa, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000e40)=""/162, 0xa2}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000000fc0)=""/155, 0x9b}, {&(0x7f0000001080)=""/2, 0x2}, {&(0x7f0000001100)=""/157, 0x9d}, {&(0x7f00000011c0)=""/84, 0x54}, {&(0x7f0000002280)=""/157, 0x9d}], 0x7, &(0x7f0000004680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f00000023c0), 0x6e, &(0x7f0000005b80)=[{&(0x7f00000047c0)=""/195, 0xc3}, {&(0x7f00000048c0)=""/223, 0xdf}, {&(0x7f00000049c0)=""/245, 0xf5}, {&(0x7f0000004ac0)=""/154, 0x9a}, {&(0x7f0000002440)=""/51, 0x33}, {&(0x7f0000004b80)=""/4096, 0x1000}], 0x6}}], 0x3, 0x20, &(0x7f0000005cc0)={0x0, 0x989680}) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x186905c, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r4) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[], 0x94}}, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x219d88b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000069118a0000000000851000000200000085000d0005000000950000000f0000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1m25.78896964s ago: executing program 4 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) write(r3, 0x0, 0x0) r4 = dup2(r0, r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$rxrpc(0x21, 0x2, 0xa) r10 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc242, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r11, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r11, 0x0) connect$bt_sco(r11, &(0x7f0000000500)={0x1f, @none}, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r10, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast1, @remote}, &(0x7f0000000240)=0xc) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000002c0)={r12, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) r13 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCGKEY(r13, 0x80404518, 0x0) 1m25.095820471s ago: executing program 4 (id=19): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000980)=""/4083, 0xff3}, {&(0x7f0000001980)=""/213, 0xd5}, {&(0x7f0000001a80)=""/180, 0xb4}], 0x3) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1m25.095619031s ago: executing program 32 (id=19): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000980)=""/4083, 0xff3}, {&(0x7f0000001980)=""/213, 0xd5}, {&(0x7f0000001a80)=""/180, 0xb4}], 0x3) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1m7.324932537s ago: executing program 1 (id=183): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb1800000000000000290000000400000002ab", @ANYRES64=r0, @ANYRES32=r0], 0x58}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0xc) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_setup(0x70ca, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x503, &(0x7f0000000740)="$eJzs3ctvU1caAPDPTpwXgcAMi5nRzMAwtLRCOA8gQmwKmz6EkKqirrqANDFRFBtHcVBJyiIsu0cqUlftn9BdF5VYddFdd+2uG7qoRFvUilTqwtW9NolDnm0ebuLfT7q595xj/J0Tc87xPWCfAFrW8YiYj4iOiLgREX31/Ez9iEu1I3nc0yd3Rxee3B3NRLV67cdMWp7kRcOfSRyoP2dXRLz1WsS7mZVxK7NzkyPFYmG6nu6fKU31V2bnzkxk6zlDw4PDAxfOnh/atrYeK336+NWJK29//tl/Hn01//L7SbV6PziYljW2YzvVmp6L3oa89oi4shPBmqS9/veHvSfpbX+LiBNp/++LtvTVBAD2s2q1L6p9jWkAYL9L7v97I5PN19cCeiObzedra3hHoydbLFdmTveVb98ai3QN63DksjcnioWB+lrh4chlkvRger2UHlqWvl84GxFHIuJ+Z3danh8tF8ea+cYHAFrYgeXz/+u/dNbmfwBgn+tqdgUAgF1n/geA1mP+B4DW8wfmf58OBIB9wv0/ALQe8z8AtJ4N5/97u1MPAGBXvHn1anJUF2rff/3sm7rPjBUqk/nS7dH8aHl6Kj9eLo8XC/nRanWj5yuWy1OD5xaTldm566Xy7Vsz1ydKI+OF64XcTjYGANiUI8cefpNM+vMXu9MjGvZyMFfD/pZtdgWApmlrdgWApvF5Hmhdm7jHtwwA+9wqW/Qus+Z/EXpg81fYq079s7b+392QZ/0fWsNW1v+tHcDe9ufW/1/Z9noAu88cDq2rWs3Y8x8AWow1fmBL//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao3PTLZfLoX+HzyM5vPRxyMiMORy9ycKBYGIuJQRHzdmetM0oPNrjQAsEXZ7zP1/b9O9Z3sfb60I/NrZ3qOiPc+uvbhnZGZmenBJP+nxfyZB/X8oY5mNAAAaHRpZVZtnq6fG27knz65O/rs2M0qPr5c21w0ibtQP2ol7dGenrsiFxE9P2fq6Zrk/UrbNsSfvxcR/1hq/52GCL3pGkht59Pn4yexD+5A/KXf//Pxs8viZ9Oy5JxLfxd/34a6QKt5eLk2Ttb7XtLF6v0vG8fT8+r9vysdobYuGf+SsWRhxfiXXRz/2lbEz6R9/vhiev2aPD73xRsrMqt9tbJ7Ef9qXy1+ZjF+ZvXxN3dyk2389t//PbFWWfXjiFOrtv/ZjtSldJjtnylN9Vdm585MlEbGC+OFW0NDw4PDAxfOnh/qT9eoaz+/XC3GDxdPH1orftL+njXid63f/nhhk+3/5Lcb7/xvnfgv/X/11//oOvGTOfHFTcYf6bm05vbdSfyxNdq/wesfpzcZ/9F3c2ObfCgAsAsqs3OTI8ViYXqDi+S95kaPcbE3L2I+YrueMF2UiIi/Qrv29kVHk6vR7JEJ2GlLnb7ZNQEAAAAAAAAAAAAAANZS6Z6b7NzhT2s1u40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsX78HAAD//6QDxzY=") setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1m7.219403906s ago: executing program 1 (id=185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "e68e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x30, 0xe, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000c10}, 0x4040) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x101, 0xd1, &(0x7f0000000340)=""/209, 0x41100, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x396a, 0xffffffffffffffff, 0x5, &(0x7f0000000180)=[0x1], &(0x7f0000000440)=[{0x0, 0x5, 0x4, 0xc}, {0x1, 0x1, 0x2, 0x4}, {0x5, 0x2, 0x8, 0x1}, {0x3, 0x5, 0x5, 0x6}, {0x4, 0x3, 0x2, 0x6}], 0x10, 0xc0}, 0x94) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x101, 0xd1, &(0x7f0000000340)=""/209, 0x41100, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x396a, 0xffffffffffffffff, 0x5, &(0x7f0000000180)=[0x1], &(0x7f0000000440)=[{0x0, 0x5, 0x4, 0xc}, {0x1, 0x1, 0x2, 0x4}, {0x5, 0x2, 0x8, 0x1}, {0x3, 0x5, 0x5, 0x6}, {0x4, 0x3, 0x2, 0x6}], 0x10, 0xc0}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)={0x2}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback, r3, 0x34, 0x2034, 0x0, @void, @void, @value=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r5], 0x20}}, 0x4000) 1m7.113786076s ago: executing program 1 (id=187): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x71}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x80, 0x8}}, 0x120) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m6.152341481s ago: executing program 1 (id=199): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) syz_clone3(&(0x7f00000000c0)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f0000000100)='./file1\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000700)=[{&(0x7f0000000000)="d362bbd834458edbef0b67e570f2f67b30af8ef408e0b944c2b4db7929b30150b3fe983dd0649f05293adca39d4da1cae83257", 0x33}, {&(0x7f0000000040)="05670f08bceebe8be2aa8c8529219e4a3cbd45f919d62c41209475c9a4", 0x1d}, {&(0x7f0000000140)="d7d4be1046105bc4a78d18c751062720", 0x10}, {&(0x7f0000000180)="2f61056dffdb97c363121ba65c2f5fde1ffe6bda665d43dd2b6b0fdacdf426f02083c4704fa8aaf5f5a2be29c648e0968c0791b90029f95a6c27dcc5ab8dc0e2310c7c87a70f7ad2ef74ef27b8329e748cabb6ef2e292603e69f4ddd0ace564151069c5b89f42164c1591eefb8fb82ee2ce1790ab914b3db65a88dd9893dc3791f6360c1bb1f87327fa8b142816be3da901072d2af7f34a5a9d659591e709411478b6b64f44769311a", 0xa9}, {&(0x7f0000000240)="38d3d15de2e29f3ab44ed582bebff695456883bc06814501a8578353d33c3af206ba02f712c68215acf6306c104ce6a34d8dd69c651b3596f642eb85c0ff32d98f01c069317b9141e7f2e477f225b7f98cbd571cc22d5428172f496c28818b0f", 0x60}, {&(0x7f00000002c0)="af53e9077143f3c188570f41ab7154a1f66880280fca0a555865d2f757a5a2acea7e51d7aab6bac282f305650665ca9b69d7d7f41a04f00800522b347f190337c62a188300b5eb58841fa1c7355fa731112708cc91122970a38d1cd4f6f99bf7f25d12fe328b8dced0c71417567ce2829b27fba975eacce93b4fe64e8a112bb8ebf7212748b710e43d8971ff1f896aa7d5721e612f3c4bc32083e4a08605444c51a0c2f3a143", 0xa6}, {&(0x7f0000000380)="64e6c60b69e64a6df4656cd82484a7962aad2bc7db46e32755bd7ffc3cd42899af1104630ed1044672a18cd13648b64c29958af90bc96f72b2f761548b2a154e40983477676af0cbd016ec843863239406e62d97b2d1800bf73c56072a67e248046651f0afe0cae18bf78654120edbf3dfc4be5fb0d864aab3573eb3f27597db828771429362e7a604547e18ca4b2f8c26561676de3a88acb0e732b8c29208cf51595355eba4ad66272f8683db4daebc963a482464be85510f93e333ee56069c0f9df7a2eb1f8b187621824dda3683c372863ede9e5c780ea3b8b4a99fe32755632c", 0xe2}, {&(0x7f00000007c0)="d20eeaf974a8cf5832e3d3b27899b75128de2c3380290e8f58", 0x19}, {&(0x7f0000000540)="bfd0c2aa555c869e573c1e7c966592273c82d67e07ecd5764f6d7025ecd75f0d3eb887b4049ec0038bb67e3a1cc407a741605486cff2ac9457e5733c506aed5f2382eea86a9fdbb7fd1e5c559bf55c2fe742f96c4a38c8d3ae6f51a1d20de5e153fc7c7300358d878c3d3dfe5fadbab5853f5858aab1d8dda70e0d334b437aeb3fc6680bec8775cac5e8ed35f5ddfb58dbb460004453cc19229695650bafc321b1dd4fa23435564ad905", 0xaa}, {&(0x7f0000000600)="0cfe3150dc682ef6915400502fa1ca769cd606cbd7e6b97806b5edd137a2ae3e43ae6c6f07f49c44980a09694ecc39079db876c8d88da4a83ac64fe697d3b89aa7e3798197abc6fe509838037c745ebbb0b6037579adf85f8339063c4dba20b8c907ddc694c7bb454c4fe4b0556faa096436593b54d953618a87fc72f8e35af1d613aef48c4398dfbd8ab725b2ff364b000290194080ddf076c71fb3b814af87138a7043c309f4edb6f07b79f0c0a08201d7c016ad4d625394a6bc391a4775257aa3108f7ec458bae35de2440b3a7ad387466ac689a2672aaef84a7e33df437c0190a481cabf73", 0xe7}], 0xa, 0x7800, 0x0, 0x3) 1m5.859790026s ago: executing program 1 (id=200): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61158c0000000a0061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m4.847739786s ago: executing program 1 (id=210): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x3, 0x75c, 0x0, 0x1000, 0x4, 0x2, 0x80000000, 0xffff, r3}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x3, 0xc, 0x10001, 0x3, 0xfffffffd, 0x1, 0xfffffffa, r3}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x8000000, @mcast1={0xff, 0x7}, 0x8}}, {{0xa, 0xffff, 0x0, @remote, 0x7fff}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0xffffffff, @private0, 0x1}}}, 0x108) r6 = syz_open_pts(r4, 0x141601) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fsetxattr$security_selinux(r8, 0x0, 0x0, 0x0, 0x2) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b70800000000000043010902"], 0x0) unshare(0x0) unshare(0x20050040) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @private, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @multicast2}, "09eeb315b0e18750"}}}}}, 0x0) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0xfffffffb, 0x1ffffffe, 0x0, 0x200007, 0x19, "680c1acfa4a5000000070000faffffff000800"}) 1m4.7993221s ago: executing program 33 (id=210): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x3, 0x75c, 0x0, 0x1000, 0x4, 0x2, 0x80000000, 0xffff, r3}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x3, 0xc, 0x10001, 0x3, 0xfffffffd, 0x1, 0xfffffffa, r3}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x8000000, @mcast1={0xff, 0x7}, 0x8}}, {{0xa, 0xffff, 0x0, @remote, 0x7fff}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0xffffffff, @private0, 0x1}}}, 0x108) r6 = syz_open_pts(r4, 0x141601) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fsetxattr$security_selinux(r8, 0x0, 0x0, 0x0, 0x2) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b70800000000000043010902"], 0x0) unshare(0x0) unshare(0x20050040) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @private, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @multicast2}, "09eeb315b0e18750"}}}}}, 0x0) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0xfffffffb, 0x1ffffffe, 0x0, 0x200007, 0x19, "680c1acfa4a5000000070000faffffff000800"}) 48.402780885s ago: executing program 3 (id=388): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = memfd_create(&(0x7f00000006c0)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6\xcf\xcc\xe0\x04\x93>\xb8\x88\xc0\xad\x97\xd3.\x04\xc4n\x83Sb\x83\xf6L\xb7$\xb4\xeb\x91\x88\xcfn\xccwN\x9c\x8a\xb7\xfd\x83G\x18[\x00\xee\xfe\x9e\xab\xc4\xb3\x1d-q]\vep\xee\x18\xa9\x86\xa5\x1a\xd5\x92\n,\x14\x96~\x0fW\xbb\x8a:\xf5\xa3\x9b\x004\xd8\xf8_\x0e\xee\xbe>\xd7\x90\x95\xcb^\xe2a\xf4\xe5Z5\x92~@ \x00\x9b\xca\xea\xa8\xc0,\xcc\xe9s\xca\xd3\"\x14\xf3\x11\xe5\x0e\x93\x9aY\xb6\xa2|\xe8\xfe0\x9e\xc2\x99b\xd7\xd9\xa6\x15oO\xe2\xfe\xd0F\xcc\xeb\x1a\x84\x06E\xec\xf5\x9e\xea\xccB\xdd\xd84f\xb2O\r\x12\x1a\x1d\xb8\x92Q)=\xaa?\x13T\x82\xdf-E\xa4>c\xcd\xf57\xde\x17_\xfa\x9dd]-\xdd3.\x91\xd9/r\xc6>\xe4]\x8b', 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000001800)='\x00', 0x1}, {&(0x7f0000000580)="d18a9a05", 0x4}, {&(0x7f0000000440)="a703648b07", 0x5}], 0x3, 0x2) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x25a5, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x4, 0x3}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000121) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 47.972089813s ago: executing program 3 (id=391): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x102260, 0x10000, 0x0, 0x1, 0x40000c, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x7, 0x0, &(0x7f0000000300)) timer_gettime(0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xff}, 0x14) 45.543756786s ago: executing program 3 (id=399): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000002380)=""/4107, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 44.847682338s ago: executing program 3 (id=403): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)={[{@nojournal_checksum}, {@orlov}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file3\x00', 0x165840, 0x2) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x22020400) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000024000000", @ANYRES32, @ANYBLOB="0b0700000000000000b123c0ca11d8353b5d82c2beae830314b859c1f99f000000000000000000000080", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11fd, &(0x7f0000000400)="$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") unshare(0x10010680) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r5, 0x0) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffe, @empty}, 0x2}}, 0x2e) 44.124339892s ago: executing program 3 (id=407): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) (fail_nth: 8) 43.4606092s ago: executing program 3 (id=412): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100001b040000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x4, 0x4, 0x12, 0x0, r3, 0x7}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, r8, 0x4}, 0x38) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000680)={'gre0\x00', r7, 0x1, 0x10, 0x3ff, 0x6, {{0x20, 0x4, 0x2, 0x2b, 0x80, 0x66, 0x0, 0xff, 0x29, 0x0, @multicast1, @empty, {[@end, @rr={0x7, 0xb, 0xaf, [@empty, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xbb, 0x1, 0x3, [{@remote, 0x7fff}, {@rand_addr=0x64010100, 0x4}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x23, 0x45, [@dev={0xac, 0x14, 0x14, 0x33}, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @noop, @cipso={0x86, 0x15, 0x0, [{0x1, 0xf, "f44e1894092d70051dbdfd64ea"}]}, @rr={0x7, 0x7, 0xda, [@empty]}, @end]}}}}}) r9 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r9, 0x0) read(r9, &(0x7f0000000000)=""/269, 0xfffffdef) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f00000004c0)="$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") r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r10, r10, 0x0, 0x800000009) gettid() sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x30, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x1) unshare(0x22020400) r11 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x1223, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000009c0)=@IORING_OP_UNLINKAT={0x24, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r11, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 43.420167214s ago: executing program 34 (id=412): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100001b040000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x4, 0x4, 0x12, 0x0, r3, 0x7}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, r8, 0x4}, 0x38) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000680)={'gre0\x00', r7, 0x1, 0x10, 0x3ff, 0x6, {{0x20, 0x4, 0x2, 0x2b, 0x80, 0x66, 0x0, 0xff, 0x29, 0x0, @multicast1, @empty, {[@end, @rr={0x7, 0xb, 0xaf, [@empty, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xbb, 0x1, 0x3, [{@remote, 0x7fff}, {@rand_addr=0x64010100, 0x4}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x23, 0x45, [@dev={0xac, 0x14, 0x14, 0x33}, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @noop, @cipso={0x86, 0x15, 0x0, [{0x1, 0xf, "f44e1894092d70051dbdfd64ea"}]}, @rr={0x7, 0x7, 0xda, [@empty]}, @end]}}}}}) r9 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r9, 0x0) read(r9, &(0x7f0000000000)=""/269, 0xfffffdef) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f00000004c0)="$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") r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r10, r10, 0x0, 0x800000009) gettid() sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x30, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x1) unshare(0x22020400) r11 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x1223, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000009c0)=@IORING_OP_UNLINKAT={0x24, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r11, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 28.236755282s ago: executing program 2 (id=535): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 27.590485809s ago: executing program 2 (id=546): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c010000", @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 27.530765264s ago: executing program 2 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x1200, @loopback={0x2d5f}, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 26.791019589s ago: executing program 2 (id=550): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)={[{@nojournal_checksum}, {@orlov}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file3\x00', 0x165840, 0x2) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x22020400) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000024000000", @ANYRES32, @ANYBLOB="0b0700000000000000b123c0ca11d8353b5d82c2beae830314b859c1f99f000000000000000000000080", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11fd, &(0x7f0000000400)="$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") unshare(0x10010680) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r4, 0x0) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 26.498869515s ago: executing program 2 (id=564): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0x66) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r2, r2, 0x1, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x21}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x6}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7f}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x54}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x5423, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2000000000b, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x33}, 0x18) 25.110565367s ago: executing program 2 (id=566): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x71}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x80, 0x8}}, 0x120) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 25.08171956s ago: executing program 35 (id=566): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x71}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x80, 0x8}}, 0x120) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 4.727401693s ago: executing program 7 (id=784): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000500)=""/228, 0xe4}], 0x1, 0xfffffe01, 0x800) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075, r6}, 0x38) epoll_create1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240004000c30800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000001508000240000000040900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 3.17833004s ago: executing program 7 (id=788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xff}, 0x14) 3.06597726s ago: executing program 8 (id=789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x24, &(0x7f0000000200), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000080)='./file1\x00', 0x90) write$cgroup_type(r4, &(0x7f0000000000), 0xd4ba103) link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='./file1\x00') r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0xffff}, [@IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1, 0x1, 0x10, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x370, 0x2c, 0x8, 0x70bd28, 0x25dfdbfe, {0x1a}, [@generic="048be904cc56edd896d5c85cd9c0b70bc7704975762cc0b80e8bd137b8", @generic="46b293081b2332f09276830e1559094ec77173c1094c850710cacb8911e4b0de818b20a3dc91e7d64bd08c5272ac2a83fbf17c5f9cbb6f78581722909cad1620b8bdd7aa82b183d3e66810614e3e914705c10f45b2f9a3789ef12d302720da80697e44bfa7b0ba863deffda37e7c04ee62", @generic="02c8abb9d3506504ba7ac8eb923169e634bb087699914ddf5da839d8161501a1fad7951679965df7a5cd7cd2fbc82c466097f353ff73bc8646fc031a7a00e85baff27c21f35bd4fd08090741f09de73da21106cdb7d83572b1b4057c4c36acdad3679b85418c2796e7856f394e258cdaf90ef7b4e2d4fea0444a8f4848d2ee1516d44806afd5c10193768ce8e584cdfcd51dd3955af14fb949f677ea763ca060945ff27721ff0baf914740510ef60a034edf4379b7c56564ac899523952418900091cd43306b66072314cdfc34cf48ecfd69dc63eeafdc9e2fb3c9d3eb8ff06afe4e664fd8c7d318100bd90312", @nested={0x71, 0x7d, 0x0, 0x1, [@generic="37fe75c18329db4abeb74647c6b3cf2d3e1a2c2511df0ad4593ae7f748b6a7b9e4f6b3698164add120f623c13acfc1316eb9d7db17eaec4941", @typed={0x2f, 0x4d, 0x0, 0x0, @binary="90f5d3e0ee9004e37744aa0be492180aac98e4cfaa60c276051734b6ed37ba6e2a7115ea17b2251c759c33"}, @nested={0x4, 0xc6}]}, @generic="949551226050d656622f9a0834e6d9d64da74a453d90bfe634431376e601b0d20d7b446cf2b22b976b147040744d7d27353c6e6c8b35ee054056ce40afde9e9bd97224b098c55246c65b38d2d367a799af7e29e5e6ee696319f8c740c8db1f946c7e45be18be22eaefbfe695a633240f857e970b8d313ff8c55cd5e8721959a17585a9f505741843e7d6e03c5e575cbac21e199d1410b1968e4498ba73de522830968cc2cd4f822d715d7794f5cdc772a2ce5dec32e781b88806840f786008362fc81c8e118e64e8325771a27a", @generic="2f6fea38a58e662c800287f6c0aefa47dc28f8ae618f897eb0287ac091fca2806923545f2d1d60b14373fbd2446cbad1589348d419847fffb8b446a479e3f04396c0dcb1b953a3d5c91fb5e105380153d63602f938bab2b24108401c80ee43a070f4b8e67ef880e270a18722f47ac9ca5de21741d427ba2f9168edb5c61e17edc1664c1ebf8f7a351bc4fb7d1d63afef6b9d943fb92ff41939dbfa5ab754c3"]}, 0x370}, 0x1, 0x0, 0x0, 0x10}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@getneightbl={0x14, 0x42, 0x214, 0x70bd28, 0x25dfdbdf, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240408c0}, 0x0) 2.582243122s ago: executing program 6 (id=793): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x71}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x80, 0x8}}, 0x120) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.332656715s ago: executing program 7 (id=796): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4000800}, 0x0) 2.272969839s ago: executing program 8 (id=798): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.006889463s ago: executing program 6 (id=799): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0x66) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r2, r2, 0x1, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x21}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x6}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7f}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x54}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x33}, 0x18) 1.971627976s ago: executing program 6 (id=800): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x3, 0x7, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x0, 0x0}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x3, 0x4}, 0x2}}, 0x10) 1.911841331s ago: executing program 6 (id=803): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x58}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_setup(0x70ca, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1) 1.911732072s ago: executing program 0 (id=804): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'pim6reg1\x00'}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x1902, &(0x7f0000000480)={0x0, 0x45a5, 0x10, 0x1, 0x12d}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20}) io_uring_enter(r1, 0x22d0, 0x20, 0x0, 0x0, 0x0) 1.879097014s ago: executing program 6 (id=805): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000500)=""/228, 0xe4}], 0x1, 0xfffffe01, 0x800) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075, r6}, 0x38) epoll_create1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240004000c30800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000001508000240000000040900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 1.878958724s ago: executing program 5 (id=806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xff}, 0x14) 1.809459961s ago: executing program 0 (id=807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000190000"], 0x0, 0x0, 0x51}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x12, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/166, 0xa6}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4f2c, 0x3, @empty, 0x5}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000080)={{r7}}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffca}}, {{0x0, 0x0, 0x0, 0xfffffe39, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000b50000c8390400000000000000cdf152d0"], 0x18}}], 0x2, 0x4000008) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x200, @loopback, 0x9}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xf2458beb6064325d, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000280)='./bus\x00', 0x3d3c9b, 0x0, 0x81, 0x0, &(0x7f0000000600)) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r14, @ANYRES64=r13, @ANYRES16=r12, @ANYRES16=r14, @ANYRES64, @ANYRES16=r11, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r10], 0x5, 0x0, &(0x7f0000000000)) 1.727860257s ago: executing program 5 (id=808): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x38}, 0x1, 0x0, 0x0, 0xc880}, 0x20000000) 1.351654631s ago: executing program 8 (id=809): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x71}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x80, 0x8}}, 0x120) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.289640066s ago: executing program 7 (id=810): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0x66) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r2, r2, 0x1, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x21}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x6}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7f}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x54}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x33}, 0x18) 1.168653927s ago: executing program 0 (id=811): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004000000040000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fc4fffff050000000089a3f0390200"/28], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) sendmsg$inet_sctp(r4, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) geteuid() sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) r10 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r10, 0x0, 0x0) 1.118141492s ago: executing program 7 (id=812): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x25, 0x29, 0x2}}, @ip_tos_u8={{0xffff0000, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) unshare(0x60000600) sync() r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = dup(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) 1.004084481s ago: executing program 5 (id=813): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c010000"], 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 941.287317ms ago: executing program 7 (id=814): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x40000022, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x3, 0xe, 0x13e, 0x89, 0xffffffff, 0x30}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0), 0x0, 0x0, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000023c000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000481000/0x2000)=nil) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800000000020, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000d0000002f49000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f0000000280), &(0x7f0000001340)=""/87}, 0x20) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x51, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea53492b38978defbb39a1ffa8a175", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) socket$nl_route(0x10, 0x3, 0x0) 940.140017ms ago: executing program 5 (id=815): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x58}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_setup(0x70ca, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1) 883.988992ms ago: executing program 5 (id=816): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0xc) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_setup(0x70ca, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x503, &(0x7f0000000740)="$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") setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x5, 0x5, 0x38, 0x81, 0x0, 0x1ff, 0x100, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0xa7, 0xe, 0x5, 0xffffffffffffffff, 0x5, 0xfff1, 0x0, 0x34, 0x0, 0x10000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x106200, 0x1000, 0x4, 0x0, 0xa, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffe, r3, 0xb) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000080), 0x2000011a) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 834.246486ms ago: executing program 0 (id=817): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'pim6reg1\x00'}) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20}) io_uring_enter(0xffffffffffffffff, 0x22d0, 0x20, 0x0, 0x0, 0x0) 684.06359ms ago: executing program 0 (id=818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xff}, 0x14) 578.875259ms ago: executing program 5 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0xffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "cc8023796960336b", "bfe4e643d249a133dd52c2808b4aab51", "289f0a09", "f5647318a9929c75"}, 0x28) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) fallocate(r8, 0x3, 0x4100, 0x8000c62) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") r9 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xa419, 0x10000, 0xfffffffe, 0x2d0}, &(0x7f0000001040), &(0x7f0000001080)) io_uring_enter(r9, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 558.828931ms ago: executing program 0 (id=820): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x71}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 541.986112ms ago: executing program 8 (id=821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000190000"], 0x0, 0x0, 0x51}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x12, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/166, 0xa6}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4f2c, 0x3, @empty, 0x5}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000080)={{r7}}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffca}}, {{0x0, 0x0, 0x0, 0xfffffe39, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000b50000c8390400000000000000cdf152d0"], 0x18}}], 0x2, 0x4000008) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x200, @loopback, 0x9}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xf2458beb6064325d, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000280)='./bus\x00', 0x3d3c9b, 0x0, 0x81, 0x0, &(0x7f0000000600)) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r14, @ANYRES64=r13, @ANYRES16=r12, @ANYRES16=r14, @ANYRES64, @ANYRES16=r11, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r10], 0x5, 0x0, &(0x7f0000000000)) 146.441707ms ago: executing program 6 (id=822): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0x66) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r2, r2, 0x1, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x21}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x6}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7f}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x54}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x33}, 0x18) 126.816419ms ago: executing program 8 (id=823): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x6, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0x7dd6, 0x8, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) syz_io_uring_setup(0x4200, &(0x7f0000000140)={0x0, 0x9e96, 0x0, 0x0, 0x60, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000200)) fcntl$setlease(r0, 0x400, 0x0) 0s ago: executing program 8 (id=824): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x25, 0x29, 0x2}}, @ip_tos_u8={{0xffff0000, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) unshare(0x60000600) sync() r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = dup(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) kernel console output (not intermixed with test programs): ure. [ 72.206980][ T4798] name failslab, interval 1, probability 0, space 0, times 0 [ 72.226762][ T4786] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.317'. [ 72.236986][ T4798] CPU: 0 UID: 0 PID: 4798 Comm: syz.5.321 Not tainted syzkaller #0 PREEMPT(full) [ 72.237016][ T4798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.237028][ T4798] Call Trace: [ 72.237035][ T4798] [ 72.237057][ T4789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.237043][ T4798] __dump_stack+0x1d/0x30 [ 72.237194][ T4798] dump_stack_lvl+0x95/0xd0 [ 72.237263][ T4798] dump_stack+0x15/0x1b [ 72.237343][ T4798] should_fail_ex+0x263/0x280 [ 72.237491][ T4798] ? vlan_vid_add+0x1af/0x490 [ 72.237617][ T4798] should_failslab+0x8c/0xb0 [ 72.237681][ T4798] __kmalloc_cache_noprof+0x5f/0x410 [ 72.237764][ T4798] vlan_vid_add+0x1af/0x490 [ 72.237861][ T4798] ? sized_strscpy+0x121/0x1a0 [ 72.237976][ T4798] register_vlan_dev+0x6b/0x470 [ 72.238073][ T4798] ? validate_linkmsg+0x574/0x5f0 [ 72.238149][ T4798] ? vlan_changelink+0x29f/0x2e0 [ 72.238236][ T4798] vlan_newlink+0x32a/0x370 [ 72.238332][ T4798] ? __pfx_vlan_newlink+0x10/0x10 [ 72.238482][ T4798] rtnl_newlink_create+0x1e4/0x650 [ 72.238554][ T4798] ? security_capable+0x7b/0x90 [ 72.238658][ T4798] ? netlink_ns_capable+0x86/0xa0 [ 72.238784][ T4798] rtnl_newlink+0x10a0/0x1330 [ 72.238911][ T4798] ? __memcg_slab_free_hook+0x154/0x250 [ 72.239009][ T4798] ? __rcu_read_unlock+0x4e/0x70 [ 72.239132][ T4798] ? avc_has_perm_noaudit+0xab/0x130 [ 72.239217][ T4798] ? cred_has_capability+0x224/0x2a0 [ 72.239288][ T4798] ? selinux_capable+0x31/0x40 [ 72.239373][ T4798] ? security_capable+0x7b/0x90 [ 72.239439][ T4798] ? ns_capable+0x7c/0xb0 [ 72.239559][ T4798] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.239655][ T4798] rtnetlink_rcv_msg+0x64b/0x720 [ 72.239732][ T4798] netlink_rcv_skb+0x123/0x220 [ 72.239801][ T4798] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.239977][ T4798] rtnetlink_rcv+0x1c/0x30 [ 72.240100][ T4798] netlink_unicast+0x5c0/0x690 [ 72.240184][ T4798] netlink_sendmsg+0x5c8/0x6f0 [ 72.240344][ T4798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.240429][ T4798] ____sys_sendmsg+0x5af/0x600 [ 72.240530][ T4798] ___sys_sendmsg+0x195/0x1e0 [ 72.240712][ T4798] __x64_sys_sendmsg+0xd4/0x160 [ 72.240817][ T4798] x64_sys_call+0x194c/0x3020 [ 72.240962][ T4798] do_syscall_64+0x12c/0x370 [ 72.241080][ T4798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.241147][ T4798] RIP: 0033:0x7fa1c2a5c629 [ 72.241318][ T4798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.241396][ T4798] RSP: 002b:00007fa1c14b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.241484][ T4798] RAX: ffffffffffffffda RBX: 00007fa1c2cd5fa0 RCX: 00007fa1c2a5c629 [ 72.241535][ T4798] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 72.241590][ T4798] RBP: 00007fa1c14b7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.241632][ T4798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.241673][ T4798] R13: 00007fa1c2cd6038 R14: 00007fa1c2cd5fa0 R15: 00007fff7cb93b28 [ 72.241738][ T4798] [ 72.258603][ T4786] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.317'. [ 72.379022][ T4789] __find_get_block_slow() failed. block=144115188075855873, b_blocknr=1, b_state=0x00000019, b_size=4096, device loop3 blocksize: 4096 [ 72.517433][ T4806] netlink: 'syz.5.324': attribute type 4 has an invalid length. [ 72.548928][ T4789] grow_buffers: requested out-of-range block 144115188075855873 for device loop3 [ 72.555243][ T28] audit: type=1400 audit(1771593845.793:627): avc: denied { create } for pid=4802 comm="syz.6.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 72.556900][ T4789] EXT4-fs warning (device loop3): ext4_resize_fs:2019: can't read last block, resize aborted [ 72.622606][ T4809] netlink: 40 bytes leftover after parsing attributes in process `syz.6.322'. [ 72.665178][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.696656][ T4816] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.711186][ T4816] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.822999][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.952253][ T3416] IPVS: starting estimator thread 0... [ 72.963809][ T4306] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.981134][ T4828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.330'. [ 72.990739][ T3380] hid-generic 0080:0008:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 73.038516][ T4835] IPVS: using max 2160 ests per chain, 108000 per kthread [ 73.151896][ T4843] set_capacity_and_notify: 1 callbacks suppressed [ 73.151917][ T4843] loop6: detected capacity change from 0 to 2048 [ 73.208267][ T4849] netlink: 'syz.5.336': attribute type 4 has an invalid length. [ 73.231681][ T316] IPVS: stop unused estimator thread 0... [ 73.235853][ T4851] loop5: detected capacity change from 0 to 128 [ 73.246232][ T4851] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.259640][ T4851] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.438736][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 73.510323][ T3543] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.530374][ T4861] loop2: detected capacity change from 0 to 512 [ 73.558490][ T4861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.581718][ T4863] syzkaller0: entered promiscuous mode [ 73.600922][ T4863] syzkaller0: entered allmulticast mode [ 73.622929][ T4861] __find_get_block_slow() failed. block=144115188075855873, b_blocknr=1, b_state=0x00000019, b_size=4096, device loop2 blocksize: 4096 [ 73.637517][ T4861] grow_buffers: requested out-of-range block 144115188075855873 for device loop2 [ 73.647035][ T4861] EXT4-fs warning (device loop2): ext4_resize_fs:2019: can't read last block, resize aborted [ 73.686725][ T4869] FAULT_INJECTION: forcing a failure. [ 73.686725][ T4869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.700052][ T4869] CPU: 0 UID: 0 PID: 4869 Comm: syz.0.342 Not tainted syzkaller #0 PREEMPT(full) [ 73.700092][ T4869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 73.700107][ T4869] Call Trace: [ 73.700137][ T4869] [ 73.700144][ T4869] __dump_stack+0x1d/0x30 [ 73.700168][ T4869] dump_stack_lvl+0x95/0xd0 [ 73.700189][ T4869] dump_stack+0x15/0x1b [ 73.700296][ T4869] should_fail_ex+0x263/0x280 [ 73.700336][ T4869] should_fail+0xb/0x20 [ 73.700351][ T4869] should_fail_usercopy+0x1a/0x20 [ 73.700371][ T4869] _copy_from_user+0x1c/0xb0 [ 73.700437][ T4869] ___sys_sendmsg+0xc1/0x1e0 [ 73.700524][ T4869] __x64_sys_sendmsg+0xd4/0x160 [ 73.700552][ T4869] x64_sys_call+0x194c/0x3020 [ 73.700576][ T4869] do_syscall_64+0x12c/0x370 [ 73.700675][ T4869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.700695][ T4869] RIP: 0033:0x7f2f39b7c629 [ 73.700801][ T4869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.700817][ T4869] RSP: 002b:00007f2f385d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.700835][ T4869] RAX: ffffffffffffffda RBX: 00007f2f39df5fa0 RCX: 00007f2f39b7c629 [ 73.700848][ T4869] RDX: 000000002404c002 RSI: 0000200000000000 RDI: 0000000000000003 [ 73.700875][ T4869] RBP: 00007f2f385d7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.700886][ T4869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.700934][ T4869] R13: 00007f2f39df6038 R14: 00007f2f39df5fa0 R15: 00007fff7f9dc0e8 [ 73.700952][ T4869] [ 73.891275][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.978729][ T4884] netlink: 'syz.2.349': attribute type 4 has an invalid length. [ 74.078679][ T3416] hid-generic 0080:0008:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 74.290049][ T4906] loop6: detected capacity change from 0 to 512 [ 74.329493][ T4906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.372769][ T4917] netlink: 'syz.3.360': attribute type 4 has an invalid length. [ 74.416458][ T4923] bridge_slave_0: left allmulticast mode [ 74.422451][ T4923] bridge_slave_0: left promiscuous mode [ 74.428352][ T4923] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.441380][ T4923] bond0: (slave bridge_slave_1): Releasing backup interface [ 74.441963][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.460278][ T4923] bond0: (slave bond_slave_0): Releasing backup interface [ 74.482805][ T4923] bond0: (slave bond_slave_1): Releasing backup interface [ 74.498525][ T4923] team0: Port device team_slave_0 removed [ 74.505294][ T4923] team0: Port device team_slave_1 removed [ 74.511653][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.519750][ T4927] loop6: detected capacity change from 0 to 1024 [ 74.531844][ T4927] EXT4-fs: Ignoring removed orlov option [ 74.540375][ T4923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.547709][ T4927] EXT4-fs: inline encryption not supported [ 74.555123][ T4923] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 74.575960][ T4927] EXT4-fs: Invalid want_extra_isize 35766 [ 74.604115][ T4927] loop6: detected capacity change from 0 to 512 [ 74.621091][ T4927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.672618][ T4936] loop2: detected capacity change from 0 to 512 [ 74.681743][ T4927] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 6: comm syz.6.362: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=4, size=4096 fake=1 [ 74.740895][ T4936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.759545][ T4936] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.781722][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.834359][ T4936] netlink: 'syz.2.366': attribute type 4 has an invalid length. [ 74.894573][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.086314][ T4958] can0: slcan on ttyS3. [ 75.208571][ T4958] can0 (unregistered): slcan off ttyS3. [ 75.221627][ T4962] team0: entered promiscuous mode [ 75.230169][ T4954] loop5: detected capacity change from 0 to 2048 [ 75.238172][ T4962] team_slave_0: entered promiscuous mode [ 75.250164][ T4962] team_slave_1: entered promiscuous mode [ 75.257227][ T4962] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.266352][ T4962] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 75.302780][ T4954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.396772][ T4954] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.527009][ T4954] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.372: corrupted xattr block 128: overlapping e_value [ 75.578660][ T4954] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 75.590579][ T4963] syzkaller0: entered promiscuous mode [ 75.596112][ T4963] syzkaller0: entered allmulticast mode [ 75.602517][ T4954] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.372: corrupted xattr block 128: overlapping e_value [ 75.627963][ T4954] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 75.646005][ T4954] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.372: corrupted xattr block 128: overlapping e_value [ 75.660111][ T4954] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 75.715232][ T4979] loop3: detected capacity change from 0 to 512 [ 75.742769][ T3543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.750446][ T4979] msdos: Unknown parameter 'rrG;ors' [ 75.798850][ T28] kauditd_printk_skb: 239 callbacks suppressed [ 75.798877][ T28] audit: type=1400 audit(1771593849.053:867): avc: denied { write } for pid=4978 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.836584][ T4992] loop6: detected capacity change from 0 to 1024 [ 75.886424][ T4992] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 75.918778][ T4992] System zones: 0-1, 3-36 [ 75.923644][ T4992] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.379: bad orphan inode 134217728 [ 75.934809][ T4992] loop6: lost filesystem error report for type 5 error -117 [ 75.935408][ T4992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.976024][ T28] audit: type=1400 audit(1771593849.233:868): avc: denied { bind } for pid=5003 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.997281][ T5006] FAULT_INJECTION: forcing a failure. [ 75.997281][ T5006] name failslab, interval 1, probability 0, space 0, times 0 [ 76.064511][ T5006] CPU: 0 UID: 0 PID: 5006 Comm: syz.3.382 Not tainted syzkaller #0 PREEMPT(full) [ 76.064596][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.064609][ T5006] Call Trace: [ 76.064668][ T5006] [ 76.064677][ T5006] __dump_stack+0x1d/0x30 [ 76.064772][ T5006] dump_stack_lvl+0x95/0xd0 [ 76.064800][ T5006] dump_stack+0x15/0x1b [ 76.064825][ T5006] should_fail_ex+0x263/0x280 [ 76.064849][ T5006] should_failslab+0x8c/0xb0 [ 76.064951][ T5006] kmem_cache_alloc_noprof+0x66/0x400 [ 76.065113][ T5006] ? __kernfs_new_node+0x70/0x3c0 [ 76.065148][ T5006] __kernfs_new_node+0x70/0x3c0 [ 76.065182][ T5006] ? kernfs_add_one+0x212/0x280 [ 76.065254][ T5006] kernfs_new_node+0xd0/0x140 [ 76.065280][ T5006] kernfs_create_link+0x70/0x130 [ 76.065368][ T5006] sysfs_do_create_link_sd+0x6a/0x100 [ 76.065396][ T5006] sysfs_create_link+0x51/0x70 [ 76.065425][ T5006] device_add_class_symlinks+0x8e/0x1d0 [ 76.065503][ T5006] device_add+0x359/0x770 [ 76.065538][ T5006] hci_register_dev+0x24c/0x570 [ 76.065564][ T5006] hci_uart_tty_ioctl+0x520/0x5c0 [ 76.065670][ T5006] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 76.065689][ T5006] tty_ioctl+0x83e/0xb80 [ 76.065711][ T5006] ? __pfx_tty_ioctl+0x10/0x10 [ 76.065788][ T5006] __se_sys_ioctl+0xce/0x140 [ 76.065845][ T5006] __x64_sys_ioctl+0x43/0x50 [ 76.065875][ T5006] x64_sys_call+0x1563/0x3020 [ 76.065901][ T5006] do_syscall_64+0x12c/0x370 [ 76.065945][ T5006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.066048][ T5006] RIP: 0033:0x7fc8989cc629 [ 76.066068][ T5006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.066090][ T5006] RSP: 002b:00007fc89741f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.066127][ T5006] RAX: ffffffffffffffda RBX: 00007fc898c45fa0 RCX: 00007fc8989cc629 [ 76.066145][ T5006] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 76.066156][ T5006] RBP: 00007fc89741f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.066168][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.066244][ T5006] R13: 00007fc898c46038 R14: 00007fc898c45fa0 R15: 00007ffd62320c18 [ 76.066265][ T5006] [ 76.066426][ T5006] Bluetooth: Can't register HCI device [ 76.241534][ T5018] FAULT_INJECTION: forcing a failure. [ 76.241534][ T5018] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 76.328120][ T5018] CPU: 1 UID: 0 PID: 5018 Comm: syz.2.383 Not tainted syzkaller #0 PREEMPT(full) [ 76.328171][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.328183][ T5018] Call Trace: [ 76.328192][ T5018] [ 76.328242][ T5018] __dump_stack+0x1d/0x30 [ 76.328276][ T5018] dump_stack_lvl+0x95/0xd0 [ 76.328335][ T5018] dump_stack+0x15/0x1b [ 76.328419][ T5018] should_fail_ex+0x263/0x280 [ 76.328520][ T5018] should_fail_alloc_page+0xf2/0x100 [ 76.328549][ T5018] __alloc_frozen_pages_noprof+0x108/0x360 [ 76.328588][ T5018] alloc_pages_mpol+0xb3/0x260 [ 76.328706][ T5018] vma_alloc_folio_noprof+0x1a9/0x300 [ 76.328741][ T5018] handle_mm_fault+0x111f/0x3020 [ 76.328776][ T5018] ? mt_find+0x291/0x3d0 [ 76.328811][ T5018] do_user_addr_fault+0x3fd/0x1050 [ 76.328893][ T5018] exc_page_fault+0x62/0xa0 [ 76.328928][ T5018] asm_exc_page_fault+0x26/0x30 [ 76.329026][ T5018] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 76.329050][ T5018] Code: 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 76.329073][ T5018] RSP: 0018:ffffc900019d7d38 EFLAGS: 00050206 [ 76.329127][ T5018] RAX: ffff888104a58a78 RBX: 0000000000001000 RCX: 0000000000000200 [ 76.329198][ T5018] RDX: 0000000000000000 RSI: ffff88811b7d4e00 RDI: 000020000000a000 [ 76.329228][ T5018] RBP: ffff88811b7d4000 R08: 00000000000009df R09: 0000000000000000 [ 76.329244][ T5018] R10: 000188811b7d4000 R11: 000188811b7d4fff R12: 000020000000a200 [ 76.329263][ T5018] R13: 00007ffffffff000 R14: 0000200000009200 R15: ffff88811b7d4000 [ 76.329283][ T5018] _copy_to_user+0x7c/0xa0 [ 76.329355][ T5018] pagemap_read+0x3ac/0x610 [ 76.329391][ T5018] ? __pfx_pagemap_read+0x10/0x10 [ 76.329421][ T5018] vfs_read+0x1ab/0x7f0 [ 76.329449][ T5018] ? __rcu_read_unlock+0x4e/0x70 [ 76.329502][ T5018] ? __fget_files+0x184/0x1c0 [ 76.329587][ T5018] ? mutex_unlock+0x4e/0x90 [ 76.329618][ T5018] __x64_sys_pread64+0xfd/0x150 [ 76.329660][ T5018] x64_sys_call+0x27b5/0x3020 [ 76.329702][ T5018] do_syscall_64+0x12c/0x370 [ 76.329836][ T5018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.329863][ T5018] RIP: 0033:0x7fc1f1c0c629 [ 76.329882][ T5018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.329960][ T5018] RSP: 002b:00007fc1f0646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 76.329984][ T5018] RAX: ffffffffffffffda RBX: 00007fc1f1e86090 RCX: 00007fc1f1c0c629 [ 76.330030][ T5018] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000006 [ 76.330046][ T5018] RBP: 00007fc1f0646090 R08: 0000000000000000 R09: 0000000000000000 [ 76.330061][ T5018] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.330077][ T5018] R13: 00007fc1f1e86128 R14: 00007fc1f1e86090 R15: 00007ffe90f11ca8 [ 76.330100][ T5018] [ 76.556124][ T28] audit: type=1326 audit(1771593849.813:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8989cc629 code=0x7ffc0000 [ 76.652782][ T28] audit: type=1326 audit(1771593849.863:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8989cc629 code=0x7ffc0000 [ 76.676722][ T28] audit: type=1326 audit(1771593849.863:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8989cc629 code=0x7ffc0000 [ 76.701432][ T28] audit: type=1326 audit(1771593849.863:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8989cc629 code=0x7ffc0000 [ 76.709747][ T5031] __nla_validate_parse: 13 callbacks suppressed [ 76.709802][ T5031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.384'. [ 76.754900][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.890465][ T28] audit: type=1400 audit(1771593850.143:873): avc: denied { setopt } for pid=5048 comm="syz.6.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.960651][ T28] audit: type=1400 audit(1771593850.213:874): avc: denied { create } for pid=5048 comm="syz.6.385" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 77.241275][ T5068] FAT-fs (loop2): Directory bread(block 64) failed [ 77.247992][ T5068] FAT-fs (loop2): Directory bread(block 65) failed [ 77.254647][ T5068] FAT-fs (loop2): Directory bread(block 66) failed [ 77.261355][ T5068] FAT-fs (loop2): Directory bread(block 67) failed [ 77.267932][ T5068] FAT-fs (loop2): Directory bread(block 68) failed [ 77.274686][ T5068] FAT-fs (loop2): Directory bread(block 69) failed [ 77.280475][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.281840][ T5068] FAT-fs (loop2): Directory bread(block 70) failed [ 77.300119][ T5068] FAT-fs (loop2): Directory bread(block 71) failed [ 77.306928][ T5068] FAT-fs (loop2): Directory bread(block 72) failed [ 77.313557][ T5068] FAT-fs (loop2): Directory bread(block 73) failed [ 77.533281][ T5072] netlink: 56 bytes leftover after parsing attributes in process `syz.6.389'. [ 77.592607][ T28] audit: type=1400 audit(1771593850.853:875): avc: denied { setopt } for pid=5071 comm="syz.6.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.580494][ T28] audit: type=1326 audit(1771593851.313:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8989cc629 code=0x7ffc0000 [ 78.607112][ T5078] syzkaller0: entered promiscuous mode [ 78.826435][ T5083] netlink: 48 bytes leftover after parsing attributes in process `syz.5.390'. [ 78.999998][ T5087] netlink: 'syz.0.392': attribute type 4 has an invalid length. [ 79.048624][ T5078] syzkaller0: entered allmulticast mode [ 79.100266][ T5083] can0: slcan on ttyS3. [ 79.120256][ T5096] set_capacity_and_notify: 1 callbacks suppressed [ 79.120274][ T5096] loop2: detected capacity change from 0 to 128 [ 79.153520][ T5096] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.180156][ T5103] loop6: detected capacity change from 0 to 128 [ 79.189105][ T5096] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.224004][ T5103] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.226611][ T5106] Driver unsupported XDP return value 0 on prog (id 82) dev N/A, expect packet loss! [ 79.248517][ T5082] can0 (unregistered): slcan off ttyS3. [ 79.298835][ T5103] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.408868][ T5107] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.394'. [ 79.419168][ T5107] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.394'. [ 80.000882][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.130908][ T4306] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.224348][ T3389] hid_parser_main: 119 callbacks suppressed [ 80.224366][ T3389] hid-generic 0080:0008:0000.000B: unknown main item tag 0x0 [ 80.268239][ T3389] hid-generic 0080:0008:0000.000B: unknown main item tag 0x0 [ 80.343262][ T3389] hid-generic 0080:0008:0000.000B: unknown main item tag 0x0 [ 80.362190][ T3389] hid-generic 0080:0008:0000.000B: unknown main item tag 0x0 [ 80.392546][ T3389] hid-generic 0080:0008:0000.000B: unknown main item tag 0x0 [ 80.414985][ T3389] hid-generic 0080:0008:0000.000B: unknown main item tag 0x0 [ 80.437956][ T3389] hid-generic 0080:0008:0000.000B: unknown main item tag 0x0 [ 80.458451][ T3389] hid-generic 0080:0008:0000.000B: unknown main item tag 0x0 [ 80.483742][ T3389] hid-generic 0080:0008:0000.000B: unknown main item tag 0x0 [ 80.513524][ T3389] hid-generic 0080:0008:0000.000B: unknown main item tag 0x0 [ 80.564719][ T3389] hid-generic 0080:0008:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 80.624625][ T5131] fido_id[5131]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.653785][ T5134] loop3: detected capacity change from 0 to 512 [ 80.669191][ T5134] EXT4-fs: Ignoring removed orlov option [ 80.720911][ T5134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.902278][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 80.902294][ T28] audit: type=1326 audit(1771593854.163:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f1c0c629 code=0x7ffc0000 [ 80.985184][ T5140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.404'. [ 80.997426][ T28] audit: type=1326 audit(1771593854.163:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f1c0c629 code=0x7ffc0000 [ 81.068475][ T28] audit: type=1326 audit(1771593854.163:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f1c0c629 code=0x7ffc0000 [ 81.114304][ T28] audit: type=1326 audit(1771593854.163:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1f1c0c629 code=0x7ffc0000 [ 81.165370][ T5144] loop5: detected capacity change from 0 to 1024 [ 81.203873][ T5144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 81.220938][ T5144] System zones: 0-1, 3-36 [ 81.237308][ T5144] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.406: bad orphan inode 134217728 [ 81.255909][ T5144] loop5: lost filesystem error report for type 5 error -117 [ 81.257141][ T5144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.279549][ T28] audit: type=1326 audit(1771593854.163:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f1c0c629 code=0x7ffc0000 [ 81.303281][ T28] audit: type=1326 audit(1771593854.163:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc1f1c0c629 code=0x7ffc0000 [ 81.327149][ T28] audit: type=1326 audit(1771593854.163:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f1c0c629 code=0x7ffc0000 [ 81.360691][ T28] audit: type=1326 audit(1771593854.173:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f1c0c629 code=0x7ffc0000 [ 81.363005][ T3318] EXT4-fs error (device loop3): ext4_readdir:225: inode #12: comm syz-executor: path /77/file1/file0: directory fails checksum at offset 0 [ 81.404883][ T28] audit: type=1326 audit(1771593854.173:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1f1c0c629 code=0x7ffc0000 [ 81.428705][ T28] audit: type=1326 audit(1771593854.173:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5137 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f1c0c629 code=0x7ffc0000 [ 81.452802][ T3318] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 81.476007][ T3543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.485446][ T3318] EXT4-fs error (device loop3): ext4_readdir:225: inode #12: comm syz-executor: path /77/file1/file0: directory fails checksum at offset 0 [ 81.515639][ T3318] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 81.552528][ T3318] EXT4-fs error (device loop3): ext4_readdir:225: inode #12: comm syz-executor: path /77/file1/file0: directory fails checksum at offset 0 [ 81.570884][ T3318] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 81.584214][ T3318] EXT4-fs error (device loop3): ext4_readdir:225: inode #12: comm syz-executor: path /77/file1/file0: directory fails checksum at offset 0 [ 81.603033][ T3318] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 81.633440][ T3318] EXT4-fs error (device loop3): ext4_readdir:225: inode #12: comm syz-executor: path /77/file1/file0: directory fails checksum at offset 0 [ 81.677098][ T5156] netlink: 48 bytes leftover after parsing attributes in process `syz.2.409'. [ 81.686435][ T3318] EXT4-fs error (device loop3): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 81.726681][ T5157] can0: slcan on ttyS3. [ 81.818595][ T5157] can0 (unregistered): slcan off ttyS3. [ 81.876831][ T5159] netlink: 388 bytes leftover after parsing attributes in process `syz.5.410'. [ 81.941518][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.953014][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.968384][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 82.039862][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.058543][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 82.139769][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.181795][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 82.262092][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.290230][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 82.626212][ T5188] loop6: detected capacity change from 0 to 512 [ 82.636648][ T12] bond0 (unregistering): Released all slaves [ 82.702285][ T5188] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.715250][ T12] hsr_slave_0: left promiscuous mode [ 82.752776][ T5188] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.766728][ T12] hsr_slave_1: left promiscuous mode [ 82.823275][ T5188] netlink: 'syz.6.416': attribute type 4 has an invalid length. [ 83.006935][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.042885][ T5200] loop2: detected capacity change from 0 to 4096 [ 83.061907][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.069283][ T5163] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.115809][ T5200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.183961][ T5163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.204222][ T5163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.275308][ T5205] tipc: Started in network mode [ 83.280330][ T5205] tipc: Node identity ac1414aa, cluster identity 4711 [ 83.287497][ T5205] tipc: Enabled bearer , priority 2 [ 83.299231][ T50] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.313296][ T5208] loop5: detected capacity change from 0 to 512 [ 83.315202][ T50] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.343768][ T50] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.358377][ T5208] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 83.361074][ T50] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.370200][ T5208] EXT4-fs (loop5): orphan cleanup on readonly fs [ 83.383315][ T5208] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.420: bg 0: block 248: padding at end of block bitmap is not set [ 83.397916][ T5208] loop5: lost filesystem error report for type 5 error -117 [ 83.398184][ T5208] EXT4-fs error (device loop5): ext4_acquire_dquot:7003: comm syz.5.420: Failed to acquire dquot type 1 [ 83.405725][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 83.405743][ C1] EXT4-fs (loop5): last error at time 1771593856: ext4_validate_block_bitmap:441 [ 83.456344][ T5208] loop5: lost filesystem error report for type 5 error -117 [ 83.457101][ T5208] EXT4-fs (loop5): 1 truncate cleaned up [ 83.473495][ T5165] chnl_net:caif_netlink_parms(): no params data found [ 83.479692][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.490394][ T5208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.535748][ T5208] netlink: 64 bytes leftover after parsing attributes in process `syz.5.420'. [ 83.555484][ T5208] syz.5.420 (5208) used greatest stack depth: 9240 bytes left [ 83.579430][ T3543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.595877][ T5228] syzkaller0: entered promiscuous mode [ 83.601816][ T5228] syzkaller0: entered allmulticast mode [ 83.618696][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.626013][ T5165] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.657236][ T5165] bridge_slave_0: entered allmulticast mode [ 83.670235][ T5165] bridge_slave_0: entered promiscuous mode [ 83.679488][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.686580][ T5165] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.702909][ T5165] bridge_slave_1: entered allmulticast mode [ 83.710364][ T5165] bridge_slave_1: entered promiscuous mode [ 83.729974][ T5165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.752340][ T5165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.795285][ T5165] team0: Port device team_slave_0 added [ 83.811042][ T5165] team0: Port device team_slave_1 added [ 83.846477][ T5247] loop6: detected capacity change from 0 to 1024 [ 83.854881][ T5165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.864302][ T5247] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 83.872644][ T5165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.896220][ T5247] System zones: [ 83.898725][ T5165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.914207][ T5165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.926179][ T5247] 0-1, 3-36 [ 83.928866][ T5165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.959286][ T5247] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.427: bad orphan inode 134217728 [ 83.975420][ T5165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.986270][ T5247] loop6: lost filesystem error report for type 5 error -117 [ 83.987087][ T5247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.014057][ T5165] hsr_slave_0: entered promiscuous mode [ 84.020644][ T5165] hsr_slave_1: entered promiscuous mode [ 84.026770][ T5165] debugfs: 'hsr0' already exists in 'hsr' [ 84.042905][ T5165] Cannot create hsr debugfs directory [ 84.059780][ T5260] loop2: detected capacity change from 0 to 512 [ 84.072941][ T5260] EXT4-fs: Ignoring removed orlov option [ 84.095577][ T5260] EXT4-fs (loop2): 1 truncate cleaned up [ 84.119863][ T5260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.189485][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.209671][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.263053][ T5165] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 84.288037][ T3666] tipc: Node number set to 2886997162 [ 84.303909][ T5165] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 84.317823][ T5278] loop5: detected capacity change from 0 to 256 [ 84.326864][ T5165] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 84.338374][ T5278] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.367521][ T5278] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.396313][ T5165] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 84.407585][ T5291] syzkaller0: entered promiscuous mode [ 84.413528][ T5291] syzkaller0: entered allmulticast mode [ 84.425828][ T5300] coredump: 1(syz.5.436): Core dump to core aborted: cannot preserve file permissions [ 84.498257][ T5165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.541714][ T5308] netlink: 48 bytes leftover after parsing attributes in process `syz.2.439'. [ 84.611640][ T5309] can0: slcan on ttyS3. [ 84.649553][ T3543] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 84.848737][ T5309] can0 (unregistered): slcan off ttyS3. [ 84.864353][ T3543] FAT-fs (loop5): Filesystem has been set read-only [ 84.920030][ T3543] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 85.076917][ T5165] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.105992][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.113194][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.122405][ T5319] loop6: detected capacity change from 0 to 1024 [ 85.143646][ T5319] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 85.149065][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.158908][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.172258][ T5319] System zones: 0-1, 3-36 [ 85.178141][ T5319] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.443: bad orphan inode 134217728 [ 85.190013][ T5319] loop6: lost filesystem error report for type 5 error -117 [ 85.193395][ T5319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.384565][ T5165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.601680][ T5165] veth0_vlan: entered promiscuous mode [ 85.629070][ T5165] veth1_vlan: entered promiscuous mode [ 85.654127][ T5165] veth0_macvtap: entered promiscuous mode [ 85.662365][ T5165] veth1_macvtap: entered promiscuous mode [ 85.675276][ T5165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.687651][ T5165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.739893][ T30] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.766125][ T1694] bridge_slave_1: left allmulticast mode [ 85.782133][ T1694] bridge_slave_1: left promiscuous mode [ 85.798252][ T1694] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.815741][ T1694] bridge_slave_0: left allmulticast mode [ 85.829246][ T1694] bridge_slave_0: left promiscuous mode [ 85.838765][ T1694] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.976199][ T1694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.001728][ T1694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.018984][ T1694] bond0 (unregistering): Released all slaves [ 86.033462][ T30] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.048690][ T30] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.063014][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.083699][ T1694] IPVS: stopping master sync thread 4669 ... [ 86.096908][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 86.096926][ T28] audit: type=1400 audit(1771593859.363:973): avc: denied { mounton } for pid=5165 comm="syz-executor" path="/root/syzkaller.ymVuOo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 86.170300][ T1694] hsr_slave_0: left promiscuous mode [ 86.177323][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.191381][ T28] audit: type=1326 audit(1771593859.453:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 86.206129][ T1694] hsr_slave_1: left promiscuous mode [ 86.230054][ T28] audit: type=1326 audit(1771593859.483:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 86.254067][ T1694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.273808][ T28] audit: type=1326 audit(1771593859.483:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 86.279850][ T1694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.317504][ T28] audit: type=1326 audit(1771593859.483:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 86.344370][ T28] audit: type=1326 audit(1771593859.483:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 86.370918][ T28] audit: type=1326 audit(1771593859.493:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 86.423325][ T1694] team0 (unregistering): Port device team_slave_1 removed [ 86.433386][ T28] audit: type=1326 audit(1771593859.493:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 86.460273][ T1694] team0 (unregistering): Port device team_slave_0 removed [ 86.490478][ T28] audit: type=1326 audit(1771593859.493:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 86.514160][ T28] audit: type=1326 audit(1771593859.493:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.0.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 86.604377][ T5386] syzkaller0: entered promiscuous mode [ 86.616852][ T5386] syzkaller0: entered allmulticast mode [ 86.845458][ T1694] IPVS: stop unused estimator thread 0... [ 86.882691][ T5370] chnl_net:caif_netlink_parms(): no params data found [ 86.971501][ T3380] hid_parser_main: 33 callbacks suppressed [ 86.971520][ T3380] hid-generic 0080:0008:0000.000C: unknown main item tag 0x0 [ 86.995124][ T3380] hid-generic 0080:0008:0000.000C: unknown main item tag 0x0 [ 87.015849][ T3380] hid-generic 0080:0008:0000.000C: unknown main item tag 0x0 [ 87.026512][ T3380] hid-generic 0080:0008:0000.000C: unknown main item tag 0x0 [ 87.034245][ T3380] hid-generic 0080:0008:0000.000C: unknown main item tag 0x0 [ 87.042309][ T3380] hid-generic 0080:0008:0000.000C: unknown main item tag 0x0 [ 87.065913][ T5432] netlink: 48 bytes leftover after parsing attributes in process `syz.6.455'. [ 87.237151][ T5436] netlink: 'syz.7.458': attribute type 83 has an invalid length. [ 87.273509][ T3380] hid-generic 0080:0008:0000.000C: unknown main item tag 0x0 [ 87.298509][ T3380] hid-generic 0080:0008:0000.000C: unknown main item tag 0x0 [ 87.352834][ T3380] hid-generic 0080:0008:0000.000C: unknown main item tag 0x0 [ 87.383994][ T3380] hid-generic 0080:0008:0000.000C: unknown main item tag 0x0 [ 87.396097][ T5439] loop7: detected capacity change from 0 to 1024 [ 87.408349][ T3380] hid-generic 0080:0008:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 87.456169][ T5439] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 87.518013][ T5439] System zones: 0-1, 3-36 [ 87.547873][ T5439] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.459: bad orphan inode 134217728 [ 87.605769][ T5439] loop7: lost filesystem error report for type 5 error -117 [ 87.606473][ T5439] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.632211][ T5433] can0: slcan on ttyS3. [ 87.668725][ T5434] can0 (unregistered): slcan off ttyS3. [ 87.699974][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.707247][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.714767][ T5370] bridge_slave_0: entered allmulticast mode [ 87.721720][ T5370] bridge_slave_0: entered promiscuous mode [ 87.739280][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.750666][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.760036][ T5165] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.769528][ T5370] bridge_slave_1: entered allmulticast mode [ 87.779897][ T5370] bridge_slave_1: entered promiscuous mode [ 88.527241][ T5370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.561037][ T5370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.601182][ T5370] team0: Port device team_slave_0 added [ 88.608006][ T5370] team0: Port device team_slave_1 added [ 88.635460][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.642739][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.729555][ T5504] loop2: detected capacity change from 0 to 512 [ 88.774354][ T5370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.785676][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.792804][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.818913][ T5370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.845326][ T5504] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.470: couldn't read orphan inode 26 (err -116) [ 88.861632][ T5370] hsr_slave_0: entered promiscuous mode [ 88.867931][ T5370] hsr_slave_1: entered promiscuous mode [ 88.873807][ T5504] loop2: lost filesystem error report for type 5 error -116 [ 88.874278][ T5370] debugfs: 'hsr0' already exists in 'hsr' [ 88.881642][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 88.881669][ C1] EXT4-fs (loop2): initial error at time 1771593862: ext4_orphan_get:1396 [ 88.881697][ C1] EXT4-fs (loop2): last error at time 1771593862: ext4_orphan_get:1396 [ 88.910559][ T5504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.932541][ T5504] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.943770][ T5370] Cannot create hsr debugfs directory [ 88.968176][ T5504] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.470: corrupted inode contents [ 88.992559][ T5504] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #3: comm syz.2.470: mark_inode_dirty error [ 89.014466][ T5504] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.470: bg 0: block 64: padding at end of block bitmap is not set [ 89.031060][ T5504] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.470: Failed to acquire dquot type 0 [ 89.113996][ T5504] syz.2.470 (5504) used greatest stack depth: 8440 bytes left [ 89.123523][ T5513] loop6: detected capacity change from 0 to 1024 [ 89.131632][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.149310][ T5513] EXT4-fs: Ignoring removed nobh option [ 89.182804][ T5513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.239829][ T5513] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 89.349415][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.403369][ T5370] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.433903][ T5370] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.460056][ T5530] loop6: detected capacity change from 0 to 1024 [ 89.478291][ T5370] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.486577][ T5530] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 89.516208][ T5370] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.543963][ T5530] System zones: 0-1, 3-36 [ 89.588903][ T5530] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.472: bad orphan inode 134217728 [ 89.625709][ T5544] netlink: 48 bytes leftover after parsing attributes in process `syz.0.473'. [ 89.893458][ T5530] loop6: lost filesystem error report for type 5 error -117 [ 89.898854][ T5530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.049090][ T5370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.164838][ T5370] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.174488][ T3689] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.181614][ T3689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.199711][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.207029][ T5437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.236373][ T5370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.249212][ T5370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.279486][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.997674][ T5569] netlink: 48 bytes leftover after parsing attributes in process `syz.2.476'. [ 91.051543][ T5570] can0: slcan on ttyS3. [ 91.328981][ T5570] can0 (unregistered): slcan off ttyS3. [ 91.366429][ T5370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.599887][ T5583] syzkaller0: entered promiscuous mode [ 91.615735][ T5583] syzkaller0: entered allmulticast mode [ 91.946673][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 91.946690][ T28] audit: type=1326 audit(1771593865.203:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.7.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 92.008496][ T28] audit: type=1326 audit(1771593865.243:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.7.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 92.038107][ T28] audit: type=1326 audit(1771593865.243:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.7.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 92.082851][ T28] audit: type=1326 audit(1771593865.243:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.7.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 92.140326][ T28] audit: type=1326 audit(1771593865.243:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.7.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 92.174559][ T28] audit: type=1326 audit(1771593865.243:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.7.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 92.198826][ T28] audit: type=1326 audit(1771593865.243:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.7.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 92.225067][ T28] audit: type=1326 audit(1771593865.243:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.7.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 92.267792][ T28] audit: type=1326 audit(1771593865.263:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.7.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 92.313012][ T28] audit: type=1326 audit(1771593865.263:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.7.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 92.607530][ T5370] veth0_vlan: entered promiscuous mode [ 92.625020][ T5370] veth1_vlan: entered promiscuous mode [ 92.645294][ T5370] veth0_macvtap: entered promiscuous mode [ 92.667608][ T5370] veth1_macvtap: entered promiscuous mode [ 92.700584][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.732484][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.770159][ T5437] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.792166][ T5437] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.806591][ T5628] loop6: detected capacity change from 0 to 1024 [ 92.825144][ T5437] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.834495][ T5437] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.850883][ T5628] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 92.880423][ T5628] System zones: 0-1, 3-36 [ 92.899797][ T5628] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.484: bad orphan inode 134217728 [ 92.928460][ T5628] loop6: lost filesystem error report for type 5 error -117 [ 92.929212][ T5628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.955872][ T5638] loop5: detected capacity change from 0 to 512 [ 93.052614][ T5638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.113766][ T5638] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.147780][ T5638] netlink: 'syz.5.449': attribute type 4 has an invalid length. [ 93.180620][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.239086][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.278789][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 93.302805][ T5662] tipc: Enabling of bearer rejected, failed to enable media [ 94.297157][ T5747] tipc: Started in network mode [ 94.308677][ T5747] tipc: Node identity ac1414aa, cluster identity 4711 [ 94.325941][ T5747] tipc: Enabled bearer , priority 2 [ 94.384359][ T5751] FAULT_INJECTION: forcing a failure. [ 94.384359][ T5751] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.398011][ T5751] CPU: 1 UID: 0 PID: 5751 Comm: syz.7.502 Not tainted syzkaller #0 PREEMPT(full) [ 94.398041][ T5751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.398053][ T5751] Call Trace: [ 94.398060][ T5751] [ 94.398168][ T5751] __dump_stack+0x1d/0x30 [ 94.398196][ T5751] dump_stack_lvl+0x95/0xd0 [ 94.398223][ T5751] dump_stack+0x15/0x1b [ 94.398329][ T5751] should_fail_ex+0x263/0x280 [ 94.398355][ T5751] should_fail_alloc_page+0xf2/0x100 [ 94.398378][ T5751] __alloc_frozen_pages_noprof+0x108/0x360 [ 94.398421][ T5751] alloc_pages_mpol+0xb3/0x260 [ 94.398532][ T5751] folio_alloc_mpol_noprof+0x39/0x80 [ 94.398568][ T5751] shmem_get_folio_gfp+0x3da/0xd60 [ 94.398640][ T5751] shmem_write_begin+0xfc/0x1f0 [ 94.398675][ T5751] generic_perform_write+0x183/0x490 [ 94.398713][ T5751] shmem_file_write_iter+0xc5/0xf0 [ 94.398753][ T5751] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 94.398829][ T5751] vfs_write+0x5a6/0x9f0 [ 94.398874][ T5751] ksys_write+0xdc/0x1a0 [ 94.398915][ T5751] __x64_sys_write+0x40/0x50 [ 94.398982][ T5751] x64_sys_call+0x27e1/0x3020 [ 94.399014][ T5751] do_syscall_64+0x12c/0x370 [ 94.399054][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.399080][ T5751] RIP: 0033:0x7ff80467cece [ 94.399096][ T5751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.399186][ T5751] RSP: 002b:00007ff80310eda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.399237][ T5751] RAX: ffffffffffffffda RBX: 00007ff80310f6c0 RCX: 00007ff80467cece [ 94.399286][ T5751] RDX: 0000000000040000 RSI: 00007ff7facef000 RDI: 0000000000000006 [ 94.399298][ T5751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.399415][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 94.399431][ T5751] R13: 00007ff80310eee0 R14: 00007ff80310eea0 R15: 00007ff7facef000 [ 94.399451][ T5751] [ 94.551916][ T5758] loop5: detected capacity change from 0 to 512 [ 94.723082][ T5765] macvtap1: entered promiscuous mode [ 94.728852][ T5765] macvtap1: entered allmulticast mode [ 94.742235][ T5758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.770997][ T5758] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.794521][ T5756] netlink: 'syz.5.505': attribute type 4 has an invalid length. [ 94.954743][ T5779] syzkaller0: entered promiscuous mode [ 94.960762][ T5779] syzkaller0: entered allmulticast mode [ 95.167312][ T5792] loop2: detected capacity change from 0 to 512 [ 95.239402][ T5792] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.258919][ T5794] netlink: 48 bytes leftover after parsing attributes in process `syz.6.513'. [ 95.313628][ T5796] can0: slcan on ttyS3. [ 95.506558][ T3409] tipc: Node number set to 2886997162 [ 95.513756][ T5796] can0 (unregistered): slcan off ttyS3. [ 95.620552][ T5792] netlink: 'syz.2.515': attribute type 4 has an invalid length. [ 95.885351][ T5810] loop2: detected capacity change from 0 to 1024 [ 95.901264][ T5810] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 95.914579][ T5810] System zones: 0-1, 3-36 [ 95.967321][ T5798] FAULT_INJECTION: forcing a failure. [ 95.967321][ T5798] name failslab, interval 1, probability 0, space 0, times 0 [ 95.984533][ T5798] CPU: 0 UID: 0 PID: 5798 Comm: syz.0.516 Not tainted syzkaller #0 PREEMPT(full) [ 95.984602][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.984614][ T5798] Call Trace: [ 95.984547][ T5810] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.520: bad orphan inode 134217728 [ 95.984622][ T5798] [ 95.984631][ T5798] __dump_stack+0x1d/0x30 [ 95.984867][ T5798] dump_stack_lvl+0x95/0xd0 [ 95.984948][ T5798] dump_stack+0x15/0x1b [ 95.985031][ T5798] should_fail_ex+0x263/0x280 [ 95.985107][ T5798] should_failslab+0x8c/0xb0 [ 95.985172][ T5798] __kvmalloc_node_noprof+0x155/0x650 [ 95.985279][ T5798] ? traverse+0xa2/0x3a0 [ 95.985419][ T5798] ? path_openat+0x1ab2/0x2050 [ 95.985516][ T5798] traverse+0xa2/0x3a0 [ 95.985613][ T5798] seq_read_iter+0x85f/0x940 [ 95.985774][ T5798] ? _parse_integer+0x27/0x40 [ 95.985883][ T5798] seq_read+0x279/0x2c0 [ 95.985982][ T5798] ? __pfx_seq_read+0x10/0x10 [ 95.986104][ T5798] vfs_readv+0x432/0x6e0 [ 95.986223][ T5798] __x64_sys_preadv+0xfd/0x1c0 [ 95.986355][ T5798] x64_sys_call+0x2915/0x3020 [ 95.986442][ T5798] do_syscall_64+0x12c/0x370 [ 95.986591][ T5798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.986659][ T5798] RIP: 0033:0x7f2f39b7c629 [ 95.986675][ T5798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.986722][ T5798] RSP: 002b:00007f2f385d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 95.986866][ T5798] RAX: ffffffffffffffda RBX: 00007f2f39df5fa0 RCX: 00007f2f39b7c629 [ 95.986910][ T5798] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 95.986952][ T5798] RBP: 00007f2f385d7090 R08: 0000000000000005 R09: 0000000000000000 [ 95.986994][ T5798] R10: 0000000000005fae R11: 0000000000000246 R12: 0000000000000001 [ 95.987039][ T5798] R13: 00007f2f39df6038 R14: 00007f2f39df5fa0 R15: 00007fff7f9dc0e8 [ 95.987104][ T5798] [ 96.182208][ T5810] loop2: lost filesystem error report for type 5 error -117 [ 96.204192][ T5816] loop6: detected capacity change from 0 to 1024 [ 96.283032][ T5816] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 96.314190][ T5816] EXT4-fs (loop6): Remounting filesystem read-only [ 96.342120][ T5816] tipc: Enabling of bearer rejected, failed to enable media [ 96.527225][ T5832] loop6: detected capacity change from 0 to 256 [ 96.534432][ T5832] msdos: Bad value for 'time_offset' [ 96.848896][ T5839] loop7: detected capacity change from 0 to 512 [ 96.869935][ T5839] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.529: inode has both inline data and extents flags [ 96.884554][ T5839] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.888460][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 96.888723][ T5839] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.529: couldn't read orphan inode 15 (err -117) [ 96.897705][ C0] EXT4-fs (loop7): initial error at time 1771593870: ext4_orphan_get:1391: inode 15 [ 96.925413][ C0] EXT4-fs (loop7): last error at time 1771593870: ext4_orphan_get:1391: inode 15 [ 96.935232][ T5839] loop7: lost filesystem error report for type 5 error -117 [ 97.023322][ T5845] loop7: detected capacity change from 0 to 8192 [ 97.089182][ T5845] loop7: p1 p2 p4 [ 97.093960][ T5845] loop7: p1 start 4294967280 is beyond EOD, truncated [ 97.101744][ T5845] loop7: p2 size 590592 extends beyond EOD, truncated [ 97.112152][ T5845] loop7: p4 size 33554432 extends beyond EOD, truncated [ 97.187359][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 97.187375][ T28] audit: type=1326 audit(1771593870.443:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.5.532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f573681c629 code=0x0 [ 97.477338][ T28] audit: type=1400 audit(1771593870.733:1027): avc: denied { setopt } for pid=5861 comm="syz.5.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.815013][ T28] audit: type=1400 audit(1771593871.053:1028): avc: denied { load_policy } for pid=5843 comm="syz.7.531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 98.553139][ T5889] tipc: Started in network mode [ 98.558109][ T5889] tipc: Node identity 0000000000002d5f0000000000000001, cluster identity 4711 [ 98.597563][ T5889] tipc: Enabling of bearer rejected, failed to enable media [ 98.693830][ T5908] loop2: detected capacity change from 0 to 512 [ 98.704608][ T5907] loop6: detected capacity change from 0 to 512 [ 98.719277][ T5908] EXT4-fs: Ignoring removed orlov option [ 98.759115][ T5907] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.775726][ T5907] netlink: 'syz.6.551': attribute type 4 has an invalid length. [ 98.858982][ T5927] loop6: detected capacity change from 0 to 128 [ 98.941948][ T3316] EXT4-fs error (device loop2): ext4_readdir:225: inode #12: comm syz-executor: path /126/file1/file0: directory fails checksum at offset 0 [ 98.981151][ T3316] EXT4-fs error (device loop2): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 99.030040][ T3316] EXT4-fs error (device loop2): ext4_readdir:225: inode #12: comm syz-executor: path /126/file1/file0: directory fails checksum at offset 0 [ 99.093508][ T3316] EXT4-fs error (device loop2): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 99.108019][ T5946] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.164742][ T28] audit: type=1400 audit(1771593872.423:1029): avc: denied { setattr } for pid=5945 comm="syz.5.556" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.206159][ T5946] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 99.221947][ T3316] EXT4-fs error (device loop2): ext4_readdir:225: inode #12: comm syz-executor: path /126/file1/file0: directory fails checksum at offset 0 [ 99.237466][ T5946] bond1 (unregistering): Released all slaves [ 99.320452][ T3316] EXT4-fs error (device loop2): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 99.348467][ T3316] EXT4-fs error (device loop2): ext4_readdir:225: inode #12: comm syz-executor: path /126/file1/file0: directory fails checksum at offset 0 [ 99.435606][ T3316] EXT4-fs error (device loop2): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 99.468080][ T3316] EXT4-fs error (device loop2): ext4_readdir:225: inode #12: comm syz-executor: path /126/file1/file0: directory fails checksum at offset 0 [ 99.508877][ T3316] EXT4-fs error (device loop2): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 99.707824][ T28] audit: type=1400 audit(1771593872.963:1030): avc: denied { setopt } for pid=5982 comm="syz.6.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.732363][ T5983] set_capacity_and_notify: 1 callbacks suppressed [ 99.732395][ T5983] loop6: detected capacity change from 0 to 512 [ 99.765387][ T5987] netlink: 64 bytes leftover after parsing attributes in process `syz.0.561'. [ 99.779677][ T5983] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.833187][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 99.905980][ T4306] EXT4-fs unmount: 15 callbacks suppressed [ 99.906001][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.990536][ T3389] hid_parser_main: 33 callbacks suppressed [ 99.990557][ T3389] hid-generic 0080:0008:0000.000D: unknown main item tag 0x0 [ 100.022613][ T3389] hid-generic 0080:0008:0000.000D: unknown main item tag 0x0 [ 100.038619][ T3389] hid-generic 0080:0008:0000.000D: unknown main item tag 0x0 [ 100.046282][ T3389] hid-generic 0080:0008:0000.000D: unknown main item tag 0x0 [ 100.055769][ T4858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.076538][ T3389] hid-generic 0080:0008:0000.000D: unknown main item tag 0x0 [ 100.084858][ T3389] hid-generic 0080:0008:0000.000D: unknown main item tag 0x0 [ 100.093018][ T3389] hid-generic 0080:0008:0000.000D: unknown main item tag 0x0 [ 100.100741][ T3389] hid-generic 0080:0008:0000.000D: unknown main item tag 0x0 [ 100.108356][ T3389] hid-generic 0080:0008:0000.000D: unknown main item tag 0x0 [ 100.116058][ T3389] hid-generic 0080:0008:0000.000D: unknown main item tag 0x0 [ 100.128159][ T3389] hid-generic 0080:0008:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 100.157099][ T5997] fido_id[5997]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.366917][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.422388][ T6002] loop5: detected capacity change from 0 to 128 [ 100.436393][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.495303][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.541836][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.589365][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.570'. [ 100.605328][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.570'. [ 100.615070][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.570'. [ 100.628343][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.570'. [ 100.721164][ T12] bridge_slave_1: left allmulticast mode [ 100.726923][ T12] bridge_slave_1: left promiscuous mode [ 100.735639][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.746027][ T28] audit: type=1400 audit(1771593874.003:1031): avc: denied { append } for pid=6020 comm="syz.7.573" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.773273][ T6021] FAULT_INJECTION: forcing a failure. [ 100.773273][ T6021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.792264][ T6021] CPU: 0 UID: 0 PID: 6021 Comm: syz.7.573 Not tainted syzkaller #0 PREEMPT(full) [ 100.792300][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.792315][ T6021] Call Trace: [ 100.792321][ T6021] [ 100.792328][ T6021] __dump_stack+0x1d/0x30 [ 100.792354][ T6021] dump_stack_lvl+0x95/0xd0 [ 100.792441][ T6021] dump_stack+0x15/0x1b [ 100.792468][ T6021] should_fail_ex+0x263/0x280 [ 100.792493][ T6021] should_fail+0xb/0x20 [ 100.792510][ T6021] should_fail_usercopy+0x1a/0x20 [ 100.792545][ T6021] _copy_from_user+0x1c/0xb0 [ 100.792575][ T6021] mon_bin_ioctl+0x99/0x960 [ 100.792626][ T6021] ? __fget_files+0x184/0x1c0 [ 100.792722][ T6021] ? mutex_lock+0x57/0x90 [ 100.792755][ T6021] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 100.792785][ T6021] __se_sys_ioctl+0xce/0x140 [ 100.792824][ T6021] __x64_sys_ioctl+0x43/0x50 [ 100.792920][ T6021] x64_sys_call+0x1563/0x3020 [ 100.793035][ T6021] do_syscall_64+0x12c/0x370 [ 100.793132][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.793216][ T6021] RIP: 0033:0x7ff8046bc629 [ 100.793235][ T6021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.793259][ T6021] RSP: 002b:00007ff80310f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.793284][ T6021] RAX: ffffffffffffffda RBX: 00007ff804935fa0 RCX: 00007ff8046bc629 [ 100.793302][ T6021] RDX: 0000200000000180 RSI: 00000000c0109207 RDI: 0000000000000005 [ 100.793318][ T6021] RBP: 00007ff80310f090 R08: 0000000000000000 R09: 0000000000000000 [ 100.793348][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.793360][ T6021] R13: 00007ff804936038 R14: 00007ff804935fa0 R15: 00007fff40716c28 [ 100.793454][ T6021] [ 100.984789][ T12] bridge_slave_0: left allmulticast mode [ 100.997693][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.053702][ T12] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 101.064064][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 101.072780][ T12] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - be:e7:40:53:30:7f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 101.136535][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.147069][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.157094][ T12] bond0 (unregistering): Released all slaves [ 101.165484][ T12] bond1 (unregistering): (slave veth3): Releasing backup interface [ 101.177852][ T12] bond1 (unregistering): Released all slaves [ 101.256995][ T28] audit: type=1400 audit(1771593874.513:1032): avc: denied { create } for pid=6030 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 101.300226][ T12] tipc: Left network mode [ 101.300573][ T6003] chnl_net:caif_netlink_parms(): no params data found [ 101.347888][ T12] hsr_slave_0: left promiscuous mode [ 101.455973][ T12] hsr_slave_1: left promiscuous mode [ 101.461935][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.469861][ T12] batadv0: mtu less than device minimum [ 101.476174][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.487263][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.498277][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.509404][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.520324][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.531457][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.542465][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.553719][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.564931][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 101.611231][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.620153][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.639461][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.647679][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 101.654557][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 101.665892][ T12] veth1_vlan: left promiscuous mode [ 101.671354][ T12] veth0_vlan: left promiscuous mode [ 101.740319][ T12] team0 (unregistering): Port device team_slave_1 removed [ 101.750302][ T12] team0 (unregistering): Port device team_slave_0 removed [ 101.842744][ T6056] mmap: syz.5.578 (6056) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.928887][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.945797][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.969793][ T6003] bridge_slave_0: entered allmulticast mode [ 101.990268][ T6003] bridge_slave_0: entered promiscuous mode [ 101.997431][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.004850][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.012261][ T6003] bridge_slave_1: entered allmulticast mode [ 102.018925][ T6003] bridge_slave_1: entered promiscuous mode [ 102.039681][ T6003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.056083][ T6003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.081313][ T6003] team0: Port device team_slave_0 added [ 102.088271][ T6003] team0: Port device team_slave_1 added [ 102.111820][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.123937][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.163474][ T6003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.170818][ T6070] loop5: detected capacity change from 0 to 512 [ 102.177620][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.189053][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.215546][ T6003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.276004][ T6003] hsr_slave_0: entered promiscuous mode [ 102.282550][ T6003] hsr_slave_1: entered promiscuous mode [ 102.295994][ T6081] loop6: detected capacity change from 0 to 512 [ 102.301752][ T6003] debugfs: 'hsr0' already exists in 'hsr' [ 102.305990][ T6070] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.308662][ T6003] Cannot create hsr debugfs directory [ 102.343127][ T6070] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.363139][ T6081] EXT4-fs (loop6): 1 truncate cleaned up [ 102.388247][ T6070] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 102.399284][ T6081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.419183][ T3389] hid-generic 0080:0008:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 102.456352][ T6090] fido_id[6090]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.471529][ T6070] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 102.474762][ T6081] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.581: bg 0: block 465: padding at end of block bitmap is not set [ 102.484960][ T28] audit: type=1400 audit(1771593875.753:1033): avc: denied { bind } for pid=6069 comm="syz.5.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.537072][ T6070] FAULT_INJECTION: forcing a failure. [ 102.537072][ T6070] name failslab, interval 1, probability 0, space 0, times 0 [ 102.543126][ T6081] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 102.554965][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz.5.580 Not tainted syzkaller #0 PREEMPT(full) [ 102.555071][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.555126][ T6070] Call Trace: [ 102.555147][ T6070] [ 102.555171][ T6070] __dump_stack+0x1d/0x30 [ 102.555266][ T6070] dump_stack_lvl+0x95/0xd0 [ 102.555408][ T6070] dump_stack+0x15/0x1b [ 102.555485][ T6070] should_fail_ex+0x263/0x280 [ 102.555579][ T6070] ? sctp_add_bind_addr+0x71/0x1e0 [ 102.555675][ T6070] should_failslab+0x8c/0xb0 [ 102.555740][ T6070] __kmalloc_cache_noprof+0x5f/0x410 [ 102.555978][ T6070] sctp_add_bind_addr+0x71/0x1e0 [ 102.556097][ T6070] sctp_copy_local_addr_list+0x1b3/0x250 [ 102.556207][ T6070] sctp_copy_one_addr+0x7f/0x280 [ 102.556336][ T6070] sctp_bind_addr_copy+0x79/0x290 [ 102.556455][ T6070] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 102.556593][ T6070] sctp_connect_new_asoc+0x1c3/0x3a0 [ 102.556690][ T6070] __sctp_connect+0x424/0x7a0 [ 102.556857][ T6070] ? selinux_sctp_bind_connect+0x20d/0x250 [ 102.556965][ T6070] sctp_getsockopt_connectx3+0x269/0x340 [ 102.557074][ T6070] sctp_getsockopt+0x910/0xaa0 [ 102.557264][ T6070] sock_common_getsockopt+0x60/0x70 [ 102.557426][ T6070] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 102.557585][ T6070] do_sock_getsockopt+0x1c4/0x210 [ 102.557681][ T6070] __x64_sys_getsockopt+0x11d/0x1a0 [ 102.557842][ T6070] x64_sys_call+0x2dcf/0x3020 [ 102.557968][ T6070] do_syscall_64+0x12c/0x370 [ 102.558074][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.558148][ T6070] RIP: 0033:0x7f573681c629 [ 102.558201][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.558265][ T6070] RSP: 002b:00007f5735277028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 102.558408][ T6070] RAX: ffffffffffffffda RBX: 00007f5736a95fa0 RCX: 00007f573681c629 [ 102.558451][ T6070] RDX: 000000000000006f RSI: 0000000000000084 RDI: 000000000000000b [ 102.558493][ T6070] RBP: 00007f5735277090 R08: 00002000000002c0 R09: 0000000000000000 [ 102.558619][ T6070] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 102.558661][ T6070] R13: 00007f5736a96038 R14: 00007f5736a95fa0 R15: 00007fffadd8b1d8 [ 102.558729][ T6070] [ 102.560196][ T28] audit: type=1400 audit(1771593875.823:1034): avc: denied { map } for pid=6079 comm="syz.6.581" path="/70/file1/file1" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.637835][ T6003] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 102.728285][ T28] audit: type=1400 audit(1771593875.993:1035): avc: denied { ioctl } for pid=6069 comm="syz.5.580" path="socket:[13102]" dev="sockfs" ino=13102 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 102.742522][ T6081] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.581: invalid indirect mapped block 234881024 (level 0) [ 102.877157][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.919657][ T6003] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 102.964308][ T6003] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 102.987724][ T6003] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 103.113336][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.171845][ T6137] macvlan2: entered allmulticast mode [ 103.177475][ T6137] vlan1: entered allmulticast mode [ 103.202068][ T6137] veth0_vlan: entered allmulticast mode [ 103.215844][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.255890][ T6003] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.268088][ T6146] loop5: detected capacity change from 0 to 512 [ 103.293724][ T6146] /dev/loop5: Can't open blockdev [ 103.313490][ T5437] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.320740][ T5437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.337816][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.345302][ T5437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.406714][ T6003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.527337][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.943521][ T6003] veth0_vlan: entered promiscuous mode [ 104.049524][ T3416] hid-generic 0080:0008:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 104.212806][ T6003] veth1_vlan: entered promiscuous mode [ 104.269470][ T6003] veth0_macvtap: entered promiscuous mode [ 104.289599][ T6003] veth1_macvtap: entered promiscuous mode [ 104.314587][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.330496][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.364972][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.374254][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.422250][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.438550][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.714310][ T6227] macvlan3: entered allmulticast mode [ 104.749070][ T6227] vlan1: entered allmulticast mode [ 104.764274][ T6227] veth0_vlan: entered allmulticast mode [ 105.009542][ T6242] loop8: detected capacity change from 0 to 256 [ 105.059023][ T6242] FAT-fs (loop8): Directory bread(block 64) failed [ 105.065611][ T6242] FAT-fs (loop8): Directory bread(block 65) failed [ 105.111768][ T6242] FAT-fs (loop8): Directory bread(block 66) failed [ 105.127094][ T6242] FAT-fs (loop8): Directory bread(block 67) failed [ 105.137770][ T6242] FAT-fs (loop8): Directory bread(block 68) failed [ 105.158419][ T6242] FAT-fs (loop8): Directory bread(block 69) failed [ 105.165159][ T6242] FAT-fs (loop8): Directory bread(block 70) failed [ 105.178470][ T6242] FAT-fs (loop8): Directory bread(block 71) failed [ 105.185188][ T6242] FAT-fs (loop8): Directory bread(block 72) failed [ 105.195726][ T6242] FAT-fs (loop8): Directory bread(block 73) failed [ 105.261279][ T6252] loop6: detected capacity change from 0 to 512 [ 105.280819][ T6242] netlink: 31 bytes leftover after parsing attributes in process `syz.8.610'. [ 105.298907][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.8.610'. [ 105.321856][ T6252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.365951][ T6252] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.403409][ T6252] netlink: 'syz.6.611': attribute type 4 has an invalid length. [ 105.497709][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.575731][ T6263] loop8: detected capacity change from 0 to 512 [ 105.599579][ T3370] hid_parser_main: 119 callbacks suppressed [ 105.599607][ T3370] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 105.648385][ T3370] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 105.651705][ T6265] syzkaller0: entered promiscuous mode [ 105.656117][ T3370] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 105.663960][ T6263] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.671381][ T3370] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 105.689643][ T3370] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 105.697248][ T3370] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 105.705041][ T3370] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 105.714507][ T3370] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 105.716290][ T6265] syzkaller0: entered allmulticast mode [ 105.722067][ T3370] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 105.722097][ T3370] hid-generic 0080:0008:0000.0010: unknown main item tag 0x0 [ 105.743366][ T3370] hid-generic 0080:0008:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 105.831092][ T6003] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.940598][ T6285] netlink: 24 bytes leftover after parsing attributes in process `syz.5.622'. [ 105.941710][ T6283] loop8: detected capacity change from 0 to 512 [ 106.014753][ T6285] loop5: detected capacity change from 0 to 4096 [ 106.030657][ T6290] macvlan2: entered allmulticast mode [ 106.051760][ T6283] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.054800][ T28] audit: type=1400 audit(1771596458.313:1036): avc: denied { remount } for pid=6280 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.067228][ T6283] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.097263][ T6290] vlan1: entered allmulticast mode [ 106.116439][ T6285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.120421][ T6283] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 106.129489][ T6290] veth0_vlan: entered allmulticast mode [ 106.209289][ T6292] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 106.266565][ T6283] FAULT_INJECTION: forcing a failure. [ 106.266565][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 106.281444][ T6283] CPU: 1 UID: 0 PID: 6283 Comm: syz.8.620 Not tainted syzkaller #0 PREEMPT(full) [ 106.281479][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.281494][ T6283] Call Trace: [ 106.281500][ T6283] [ 106.281508][ T6283] __dump_stack+0x1d/0x30 [ 106.281619][ T6283] dump_stack_lvl+0x95/0xd0 [ 106.281645][ T6283] dump_stack+0x15/0x1b [ 106.281668][ T6283] should_fail_ex+0x263/0x280 [ 106.281701][ T6283] should_failslab+0x8c/0xb0 [ 106.281728][ T6283] kmem_cache_alloc_noprof+0x66/0x400 [ 106.281832][ T6283] ? do_getname+0x2e/0x1c0 [ 106.281862][ T6283] do_getname+0x2e/0x1c0 [ 106.281888][ T6283] getname_flags+0x1d/0x30 [ 106.281913][ T6283] do_sys_openat2+0x60/0x130 [ 106.281949][ T6283] __x64_sys_openat+0xf2/0x120 [ 106.282066][ T6283] x64_sys_call+0x1e39/0x3020 [ 106.282093][ T6283] do_syscall_64+0x12c/0x370 [ 106.282130][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.282165][ T6283] RIP: 0033:0x7f6a61a3c629 [ 106.282235][ T6283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.282330][ T6283] RSP: 002b:00007f6a60497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.282357][ T6283] RAX: ffffffffffffffda RBX: 00007f6a61cb5fa0 RCX: 00007f6a61a3c629 [ 106.282375][ T6283] RDX: 000000000000275a RSI: 0000200000000600 RDI: ffffffffffffff9c [ 106.282391][ T6283] RBP: 00007f6a60497090 R08: 0000000000000000 R09: 0000000000000000 [ 106.282423][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.282438][ T6283] R13: 00007f6a61cb6038 R14: 00007f6a61cb5fa0 R15: 00007fff876c54b8 [ 106.282463][ T6283] [ 106.496533][ T6301] loop7: detected capacity change from 0 to 512 [ 106.513990][ T6003] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.559527][ T6301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.598478][ T6301] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.782475][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.873584][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.7.626'. [ 106.890588][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.7.626'. [ 107.322319][ T6323] loop6: detected capacity change from 0 to 512 [ 107.410689][ T5165] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.422024][ T6323] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.609345][ T6342] netlink: 48 bytes leftover after parsing attributes in process `syz.7.634'. [ 107.645946][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.830942][ T6343] can0: slcan on ttyS3. [ 107.932566][ T3416] hid-generic 0080:0008:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 107.958764][ T6346] can0 (unregistered): slcan off ttyS3. [ 109.105467][ T3389] hid-generic 0080:0008:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 109.266153][ T6375] FAULT_INJECTION: forcing a failure. [ 109.266153][ T6375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.280324][ T6375] CPU: 0 UID: 0 PID: 6375 Comm: syz.5.646 Not tainted syzkaller #0 PREEMPT(full) [ 109.280358][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.280372][ T6375] Call Trace: [ 109.280378][ T6375] [ 109.280385][ T6375] __dump_stack+0x1d/0x30 [ 109.280431][ T6375] dump_stack_lvl+0x95/0xd0 [ 109.280454][ T6375] dump_stack+0x15/0x1b [ 109.280480][ T6375] should_fail_ex+0x263/0x280 [ 109.280508][ T6375] should_fail+0xb/0x20 [ 109.280556][ T6375] should_fail_usercopy+0x1a/0x20 [ 109.280579][ T6375] _copy_from_user+0x1c/0xb0 [ 109.280656][ T6375] __sys_sendto+0x1ca/0x4d0 [ 109.280690][ T6375] __x64_sys_sendto+0x76/0x90 [ 109.280783][ T6375] x64_sys_call+0x2d35/0x3020 [ 109.280812][ T6375] do_syscall_64+0x12c/0x370 [ 109.280863][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.280886][ T6375] RIP: 0033:0x7f57367dcece [ 109.280903][ T6375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.280930][ T6375] RSP: 002b:00007f5735275e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 109.280955][ T6375] RAX: ffffffffffffffda RBX: 00007f57352776c0 RCX: 00007f57367dcece [ 109.280973][ T6375] RDX: 0000000000000020 RSI: 00007f5735276000 RDI: 0000000000000003 [ 109.280989][ T6375] RBP: 0000000000000000 R08: 00007f5735275f04 R09: 000000000000000c [ 109.281018][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 109.281029][ T6375] R13: 00007f5735275f58 R14: 00007f5735276000 R15: 0000000000000000 [ 109.281048][ T6375] [ 109.701262][ T6377] bridge0: entered allmulticast mode [ 109.706870][ T6377] net_ratelimit: 30 callbacks suppressed [ 109.706886][ T6377] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 109.795825][ T6389] netlink: 48 bytes leftover after parsing attributes in process `syz.7.642'. [ 109.869006][ T6390] can0: slcan on ttyS3. [ 110.087886][ T6390] can0 (unregistered): slcan off ttyS3. [ 110.215004][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.652'. [ 110.224503][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.652'. [ 110.238979][ T6400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.652'. [ 110.254211][ T6400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.652'. [ 110.533150][ T6412] macvlan2: entered allmulticast mode [ 110.539315][ T6412] vlan1: entered allmulticast mode [ 110.544835][ T6412] veth0_vlan: entered allmulticast mode [ 110.707466][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.658'. [ 110.808407][ T6424] loop8: detected capacity change from 0 to 128 [ 110.815974][ T6422] loop6: detected capacity change from 0 to 512 [ 110.835659][ T6424] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.853445][ T6422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.890398][ T6424] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.901314][ T6422] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.917415][ T6422] netlink: 'syz.6.670': attribute type 4 has an invalid length. [ 110.958147][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.051579][ T6424] netlink: 1216 bytes leftover after parsing attributes in process `syz.8.660'. [ 111.062671][ T6424] netlink: 4436 bytes leftover after parsing attributes in process `syz.8.660'. [ 111.277267][ T6430] loop6: detected capacity change from 0 to 1764 [ 111.305716][ T28] audit: type=1400 audit(1771596463.563:1037): avc: denied { mount } for pid=6429 comm="syz.6.661" name="/" dev="loop6" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 111.311411][ T6003] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.391411][ T28] audit: type=1400 audit(1771596463.603:1038): avc: denied { watch } for pid=6429 comm="syz.6.661" path="/88/file0/file0" dev="loop6" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 111.415161][ T28] audit: type=1400 audit(1771596463.633:1039): avc: denied { unmount } for pid=4306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 111.598221][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.6.669'. [ 111.693687][ T6451] loop6: detected capacity change from 0 to 128 [ 111.725482][ T6451] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.750612][ T6451] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.792741][ T6454] loop8: detected capacity change from 0 to 512 [ 111.814841][ T6454] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.828224][ T6454] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.839967][ T6454] netlink: 'syz.8.672': attribute type 4 has an invalid length. [ 111.907774][ T6003] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.949730][ T6460] netlink: 1216 bytes leftover after parsing attributes in process `syz.6.671'. [ 111.959285][ T6460] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.671'. [ 112.216932][ T6463] syzkaller0: entered promiscuous mode [ 112.226489][ T6463] syzkaller0: entered allmulticast mode [ 112.391698][ T4306] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.608697][ T6489] macvlan3: entered allmulticast mode [ 112.692799][ T6493] loop7: detected capacity change from 0 to 128 [ 113.013352][ T6497] loop7: detected capacity change from 0 to 128 [ 113.224086][ T6502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'. [ 113.339574][ T6511] loop5: detected capacity change from 0 to 128 [ 113.353138][ T6511] /dev/loop5: Can't open blockdev [ 113.365671][ T3389] hid_parser_main: 119 callbacks suppressed [ 113.365694][ T3389] hid-generic 0080:0008:0000.0013: unknown main item tag 0x0 [ 113.397580][ T3389] hid-generic 0080:0008:0000.0013: unknown main item tag 0x0 [ 113.414783][ T3389] hid-generic 0080:0008:0000.0013: unknown main item tag 0x0 [ 113.432574][ T3389] hid-generic 0080:0008:0000.0013: unknown main item tag 0x0 [ 113.451320][ T3389] hid-generic 0080:0008:0000.0013: unknown main item tag 0x0 [ 113.487402][ T3389] hid-generic 0080:0008:0000.0013: unknown main item tag 0x0 [ 113.501064][ T3389] hid-generic 0080:0008:0000.0013: unknown main item tag 0x0 [ 113.513233][ T3389] hid-generic 0080:0008:0000.0013: unknown main item tag 0x0 [ 113.533273][ T3389] hid-generic 0080:0008:0000.0013: unknown main item tag 0x0 [ 113.553043][ T6511] netlink: 1216 bytes leftover after parsing attributes in process `syz.5.686'. [ 113.563163][ T3389] hid-generic 0080:0008:0000.0013: unknown main item tag 0x0 [ 113.577134][ T3389] hid-generic 0080:0008:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 113.586967][ T6511] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.686'. [ 113.620596][ T6519] fido_id[6519]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.664400][ T6522] netlink: 20 bytes leftover after parsing attributes in process `syz.8.690'. [ 113.701490][ T6528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.692'. [ 113.957507][ T6538] syzkaller0: entered promiscuous mode [ 113.963405][ T6538] syzkaller0: entered allmulticast mode [ 114.275686][ T6571] FAULT_INJECTION: forcing a failure. [ 114.275686][ T6571] name failslab, interval 1, probability 0, space 0, times 0 [ 114.346672][ T6571] CPU: 1 UID: 0 PID: 6571 Comm: syz.8.702 Not tainted syzkaller #0 PREEMPT(full) [ 114.346707][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.346738][ T6571] Call Trace: [ 114.346747][ T6571] [ 114.346757][ T6571] __dump_stack+0x1d/0x30 [ 114.346787][ T6571] dump_stack_lvl+0x95/0xd0 [ 114.346810][ T6571] dump_stack+0x15/0x1b [ 114.346900][ T6571] should_fail_ex+0x263/0x280 [ 114.346921][ T6571] should_failslab+0x8c/0xb0 [ 114.346940][ T6571] kmem_cache_alloc_noprof+0x66/0x400 [ 114.346964][ T6571] ? skb_clone+0x151/0x1f0 [ 114.347010][ T6571] skb_clone+0x151/0x1f0 [ 114.347042][ T6571] __netlink_deliver_tap+0x2c9/0x500 [ 114.347075][ T6571] netlink_unicast+0x66b/0x690 [ 114.347120][ T6571] netlink_sendmsg+0x5c8/0x6f0 [ 114.347157][ T6571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.347231][ T6571] ____sys_sendmsg+0x5af/0x600 [ 114.347269][ T6571] ___sys_sendmsg+0x195/0x1e0 [ 114.347347][ T6571] __x64_sys_sendmsg+0xd4/0x160 [ 114.347387][ T6571] x64_sys_call+0x194c/0x3020 [ 114.347415][ T6571] do_syscall_64+0x12c/0x370 [ 114.347490][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.347511][ T6571] RIP: 0033:0x7f6a61a3c629 [ 114.347525][ T6571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.347546][ T6571] RSP: 002b:00007f6a60497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.347579][ T6571] RAX: ffffffffffffffda RBX: 00007f6a61cb5fa0 RCX: 00007f6a61a3c629 [ 114.347611][ T6571] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 114.347627][ T6571] RBP: 00007f6a60497090 R08: 0000000000000000 R09: 0000000000000000 [ 114.347642][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.347655][ T6571] R13: 00007f6a61cb6038 R14: 00007f6a61cb5fa0 R15: 00007fff876c54b8 [ 114.347695][ T6571] [ 114.777529][ T28] audit: type=1400 audit(1771596467.034:1040): avc: denied { bind } for pid=6585 comm="syz.8.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.809010][ T28] audit: type=1400 audit(1771596467.064:1041): avc: denied { getopt } for pid=6582 comm="syz.6.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.705694][ T6613] netlink: 'syz.0.709': attribute type 4 has an invalid length. [ 115.871639][ T28] audit: type=1326 audit(1771596468.134:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 115.910759][ T6622] syzkaller0: entered promiscuous mode [ 115.924756][ T6622] syzkaller0: entered allmulticast mode [ 115.934625][ T28] audit: type=1326 audit(1771596468.134:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 115.989446][ T28] audit: type=1326 audit(1771596468.134:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 116.041602][ T28] audit: type=1326 audit(1771596468.134:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 116.075006][ T28] audit: type=1326 audit(1771596468.134:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 116.329908][ T6655] loop8: detected capacity change from 0 to 128 [ 116.396535][ T6656] loop5: detected capacity change from 0 to 128 [ 117.119578][ T6663] loop7: detected capacity change from 0 to 128 [ 117.281824][ T6669] loop6: detected capacity change from 0 to 512 [ 117.317378][ T6669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.331257][ T6669] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.359656][ T6669] netlink: 'syz.6.723': attribute type 4 has an invalid length. [ 117.453219][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.541232][ T6678] syzkaller0: entered promiscuous mode [ 117.549242][ T6678] syzkaller0: entered allmulticast mode [ 117.588081][ T6687] loop6: detected capacity change from 0 to 512 [ 117.617155][ T6687] EXT4-fs (loop6): 1 truncate cleaned up [ 117.638976][ T6687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.718035][ T6687] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.729: bg 0: block 465: padding at end of block bitmap is not set [ 117.732429][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 117.732443][ T28] audit: type=1400 audit(1771596469.974:1065): avc: denied { rename } for pid=6686 comm="syz.6.729" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.782751][ T6687] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 117.791730][ T28] audit: type=1400 audit(1771596469.974:1066): avc: denied { unlink } for pid=6686 comm="syz.6.729" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.817487][ T6687] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.729: invalid indirect mapped block 234881024 (level 0) [ 117.837292][ T6698] __nla_validate_parse: 3 callbacks suppressed [ 117.837310][ T6698] netlink: 28 bytes leftover after parsing attributes in process `syz.7.730'. [ 117.856956][ T28] audit: type=1400 audit(1771596469.974:1067): avc: denied { read write } for pid=6686 comm="syz.6.729" name="file1" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.880679][ T28] audit: type=1400 audit(1771596469.974:1068): avc: denied { open } for pid=6686 comm="syz.6.729" path="/102/file1/file1" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.905147][ T28] audit: type=1400 audit(1771596469.974:1069): avc: denied { ioctl } for pid=6686 comm="syz.6.729" path="/102/file1/file1" dev="loop6" ino=13 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.943892][ T28] audit: type=1326 audit(1771596470.024:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.7.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 117.954154][ T6703] loop5: detected capacity change from 0 to 512 [ 117.969974][ T28] audit: type=1326 audit(1771596470.024:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.7.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 117.997918][ T28] audit: type=1326 audit(1771596470.024:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.7.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 118.021686][ T28] audit: type=1326 audit(1771596470.024:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.7.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 118.070223][ T28] audit: type=1326 audit(1771596470.034:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.7.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8046bc629 code=0x7ffc0000 [ 118.095713][ T6703] EXT4-fs (loop5): 1 truncate cleaned up [ 118.101918][ T6703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.135150][ T6703] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.735: bg 0: block 465: padding at end of block bitmap is not set [ 118.197018][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.233085][ T6707] loop7: detected capacity change from 0 to 512 [ 118.254847][ T6707] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.268582][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.281665][ T6707] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.298019][ T6707] netlink: 'syz.7.738': attribute type 4 has an invalid length. [ 118.325211][ T5165] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.403717][ T6716] macvlan3: entered allmulticast mode [ 118.530208][ T6725] syzkaller0: entered promiscuous mode [ 118.535986][ T6725] syzkaller0: entered allmulticast mode [ 118.627390][ T6733] capability: warning: `syz.7.745' uses deprecated v2 capabilities in a way that may be insecure [ 118.652075][ T6735] loop6: detected capacity change from 0 to 512 [ 118.695510][ T6735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.710473][ T6735] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.736294][ T6735] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 1986356271 (only 1 groups) [ 118.827196][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.934837][ T6751] loop6: detected capacity change from 0 to 512 [ 118.959863][ T6751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.972991][ T6751] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.996424][ T6751] ext4: Unknown parameter '@LqE: 艞t}0$' [ 119.045705][ T6747] netlink: 20 bytes leftover after parsing attributes in process `syz.7.748'. [ 119.068678][ T4306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.179828][ T6770] syzkaller0: entered promiscuous mode [ 119.185355][ T6770] syzkaller0: entered allmulticast mode [ 119.219948][ T6779] loop6: detected capacity change from 0 to 128 [ 119.286299][ T6785] netlink: 24 bytes leftover after parsing attributes in process `syz.8.762'. [ 119.329387][ T6779] batman_adv: batadv0: Adding interface: dummy0 [ 119.336233][ T6779] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.366100][ T6785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.385124][ T6779] batman_adv: batadv0: Interface activated: dummy0 [ 119.446032][ T6790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.520556][ T6793] EXT4-fs: Mount option(s) incompatible with ext2 [ 119.569871][ T6795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.586830][ T6795] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.657684][ T6795] ext4: Unknown parameter '@LqE: 艞t}0$' [ 119.690094][ T5165] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.959529][ T6003] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.012265][ T6817] syzkaller0: entered promiscuous mode [ 120.018242][ T6817] syzkaller0: entered allmulticast mode [ 120.045054][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.7.771'. [ 120.052868][ T6824] EXT4-fs (loop5): 1 truncate cleaned up [ 120.069348][ T6824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.085023][ T6824] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.775: bg 0: block 465: padding at end of block bitmap is not set [ 120.100393][ T6824] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 120.116777][ T6824] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.775: invalid indirect mapped block 234881024 (level 0) [ 120.178762][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.194231][ T6831] macvlan2: entered allmulticast mode [ 120.202976][ T6831] vlan1: entered allmulticast mode [ 120.208691][ T6831] veth0_vlan: entered allmulticast mode [ 120.218819][ T6832] ext2: Unknown parameter 'func' [ 120.291932][ T6835] syz.5.776: attempt to access beyond end of device [ 120.291932][ T6835] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 120.305735][ T6835] syz.5.776: attempt to access beyond end of device [ 120.305735][ T6835] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 120.320312][ T6835] syz.5.776: attempt to access beyond end of device [ 120.320312][ T6835] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 120.333544][ T6835] syz.5.776: attempt to access beyond end of device [ 120.333544][ T6835] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 120.346907][ T6835] syz.5.776: attempt to access beyond end of device [ 120.346907][ T6835] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 120.360713][ T6835] syz.5.776: attempt to access beyond end of device [ 120.360713][ T6835] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 120.375100][ T6835] syz.5.776: attempt to access beyond end of device [ 120.375100][ T6835] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 120.388532][ T6835] syz.5.776: attempt to access beyond end of device [ 120.388532][ T6835] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 120.403179][ T6835] syz.5.776: attempt to access beyond end of device [ 120.403179][ T6835] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 120.417386][ T6835] syz.5.776: attempt to access beyond end of device [ 120.417386][ T6835] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 120.720863][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.783'. [ 120.879333][ T6857] netlink: 48 bytes leftover after parsing attributes in process `syz.7.784'. [ 120.950924][ T6858] can0: slcan on ttyS3. [ 121.176531][ T6858] can0 (unregistered): slcan off ttyS3. [ 121.333292][ T6863] EXT4-fs (loop8): 1 truncate cleaned up [ 121.407294][ T6863] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.501669][ T3666] hid_parser_main: 33 callbacks suppressed [ 121.501775][ T3666] hid-generic 0080:0008:0000.0014: unknown main item tag 0x0 [ 121.539057][ T6863] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.785: bg 0: block 465: padding at end of block bitmap is not set [ 121.543230][ T3666] hid-generic 0080:0008:0000.0014: unknown main item tag 0x0 [ 121.587048][ T3666] hid-generic 0080:0008:0000.0014: unknown main item tag 0x0 [ 121.657132][ T6003] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.286185][ T3666] hid-generic 0080:0008:0000.0014: unknown main item tag 0x0 [ 122.293725][ T3666] hid-generic 0080:0008:0000.0014: unknown main item tag 0x0 [ 122.301217][ T3666] hid-generic 0080:0008:0000.0014: unknown main item tag 0x0 [ 122.308796][ T3666] hid-generic 0080:0008:0000.0014: unknown main item tag 0x0 [ 122.316415][ T3666] hid-generic 0080:0008:0000.0014: unknown main item tag 0x0 [ 122.323830][ T3666] hid-generic 0080:0008:0000.0014: unknown main item tag 0x0 [ 122.331347][ T3666] hid-generic 0080:0008:0000.0014: unknown main item tag 0x0 [ 122.342509][ T3666] hid-generic 0080:0008:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 122.369506][ T6870] fido_id[6870]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.484967][ T6875] FAULT_INJECTION: forcing a failure. [ 122.484967][ T6875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.518062][ T6875] CPU: 1 UID: 0 PID: 6875 Comm: syz.0.790 Not tainted syzkaller #0 PREEMPT(full) [ 122.518097][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.518115][ T6875] Call Trace: [ 122.518124][ T6875] [ 122.518172][ T6875] __dump_stack+0x1d/0x30 [ 122.518201][ T6875] dump_stack_lvl+0x95/0xd0 [ 122.518224][ T6875] dump_stack+0x15/0x1b [ 122.518249][ T6875] should_fail_ex+0x263/0x280 [ 122.518295][ T6875] should_fail+0xb/0x20 [ 122.518312][ T6875] should_fail_usercopy+0x1a/0x20 [ 122.518335][ T6875] _copy_to_user+0x20/0xa0 [ 122.518446][ T6875] simple_read_from_buffer+0xb5/0x130 [ 122.518594][ T6875] proc_fail_nth_read+0x10e/0x150 [ 122.518683][ T6875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.518712][ T6875] vfs_read+0x1ab/0x7f0 [ 122.518745][ T6875] ? __rcu_read_unlock+0x4e/0x70 [ 122.518780][ T6875] ? __fget_files+0x184/0x1c0 [ 122.518809][ T6875] ? mutex_lock+0x57/0x90 [ 122.518838][ T6875] ksys_read+0xdc/0x1a0 [ 122.518880][ T6875] __x64_sys_read+0x40/0x50 [ 122.518984][ T6875] x64_sys_call+0x2886/0x3020 [ 122.519010][ T6875] do_syscall_64+0x12c/0x370 [ 122.519047][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.519075][ T6875] RIP: 0033:0x7f2f39b3cece [ 122.519136][ T6875] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.519205][ T6875] RSP: 002b:00007f2f385d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.519229][ T6875] RAX: ffffffffffffffda RBX: 00007f2f385d76c0 RCX: 00007f2f39b3cece [ 122.519242][ T6875] RDX: 000000000000000f RSI: 00007f2f385d70a0 RDI: 0000000000000005 [ 122.519255][ T6875] RBP: 00007f2f385d7090 R08: 0000000000000000 R09: 0000000000000000 [ 122.519267][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.519281][ T6875] R13: 00007f2f39df6038 R14: 00007f2f39df5fa0 R15: 00007fff7f9dc0e8 [ 122.519387][ T6875] [ 122.916033][ T3666] hid-generic 0080:0008:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 122.982701][ T6887] fido_id[6887]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 123.002197][ T6886] syzkaller0: entered promiscuous mode [ 123.008095][ T6886] syzkaller0: entered allmulticast mode [ 123.107830][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 123.107850][ T28] audit: type=1326 audit(1771596475.375:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 123.151300][ T28] audit: type=1326 audit(1771596475.375:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 123.176565][ T28] audit: type=1326 audit(1771596475.375:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 123.228515][ T28] audit: type=1326 audit(1771596475.375:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 123.252430][ T28] audit: type=1326 audit(1771596475.375:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 123.260374][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.794'. [ 123.288644][ T6904] macvlan3: entered allmulticast mode [ 123.301742][ T28] audit: type=1326 audit(1771596475.375:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 123.349483][ T28] audit: type=1326 audit(1771596475.375:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 123.373432][ T28] audit: type=1326 audit(1771596475.375:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 123.397794][ T28] audit: type=1326 audit(1771596475.375:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 123.423156][ T28] audit: type=1326 audit(1771596475.375:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6889 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2f39b7c629 code=0x7ffc0000 [ 123.518081][ T6911] tipc: Can't bind to reserved service type 3 [ 123.733973][ T6926] netlink: 48 bytes leftover after parsing attributes in process `syz.6.805'. [ 123.810425][ T6927] can0: slcan on ttyS3. [ 124.066295][ T6927] can0 (unregistered): slcan off ttyS3. [ 124.275786][ T3370] hid-generic 0080:0008:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 124.437967][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 124.678947][ T6957] set_capacity_and_notify: 7 callbacks suppressed [ 124.678965][ T6957] loop5: detected capacity change from 0 to 512 [ 124.757760][ T6957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.793106][ T6957] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.838966][ T12] tipc: Subscription rejected, illegal request [ 124.894965][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.025614][ T6976] loop8: detected capacity change from 0 to 512 [ 125.071913][ T6976] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.104736][ T6976] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.166446][ T6976] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 125.276160][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 125.356521][ T6003] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.377915][ T6981] netlink: 24 bytes leftover after parsing attributes in process `syz.5.819'. [ 125.448107][ T6981] loop5: detected capacity change from 0 to 4096 [ 125.475329][ T3000] ================================================================== [ 125.483765][ T3000] BUG: KCSAN: data-race in set_nlink / set_nlink [ 125.490136][ T3000] [ 125.492534][ T3000] read to 0xffff888107d682b0 of 4 bytes by task 3301 on cpu 0: [ 125.500108][ T3000] set_nlink+0x29/0xb0 [ 125.504205][ T3000] kernfs_iop_permission+0x1e2/0x220 [ 125.509785][ T3000] inode_permission+0x31f/0x3b0 [ 125.514677][ T3000] link_path_walk+0x779/0xe30 [ 125.519391][ T3000] path_openat+0x1c6/0x2050 [ 125.523943][ T3000] do_file_open+0x16c/0x290 [ 125.528480][ T3000] do_sys_openat2+0x94/0x130 [ 125.533113][ T3000] __x64_sys_openat+0xf2/0x120 [ 125.537907][ T3000] x64_sys_call+0x1e39/0x3020 [ 125.542642][ T3000] do_syscall_64+0x12c/0x370 [ 125.547449][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.553376][ T3000] [ 125.555725][ T3000] write to 0xffff888107d682b0 of 4 bytes by task 3000 on cpu 1: [ 125.563374][ T3000] set_nlink+0x99/0xb0 [ 125.567605][ T3000] kernfs_iop_permission+0x1e2/0x220 [ 125.573121][ T3000] inode_permission+0x31f/0x3b0 [ 125.578104][ T3000] link_path_walk+0x779/0xe30 [ 125.582828][ T3000] path_lookupat+0x8c/0x500 [ 125.587601][ T3000] filename_lookup+0x190/0x390 [ 125.592444][ T3000] vfs_statx+0x96/0x170 [ 125.596920][ T3000] vfs_fstatat+0x118/0x170 [ 125.601385][ T3000] __se_sys_newfstatat+0x55/0x3e0 [ 125.606541][ T3000] __x64_sys_newfstatat+0x55/0x70 [ 125.611621][ T3000] x64_sys_call+0x2c64/0x3020 [ 125.616343][ T3000] do_syscall_64+0x12c/0x370 [ 125.620977][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.626924][ T3000] [ 125.629272][ T3000] value changed: 0x00000008 -> 0x00000009 [ 125.635014][ T3000] [ 125.637362][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 125.643552][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 125.652623][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.662719][ T3000] ================================================================== [ 125.689566][ T6981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.258388][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.