last executing test programs: 5m56.559881892s ago: executing program 32 (id=221): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = socket$inet6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$HCIINQUIRY(r2, 0x800448f0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$eJzs2r9rE3EYx/Hn0tTWlPYi/qwgPuigLkeT2aFFWhADgjZCFaRXe9GQM1dyRyFFbCcFp85OncXRTZCOLl38Cxx0Kkg3O4gn6SVtUou2Nr1zeL+WPMndJ/e9e74c34Rbv778tFJKS8kOJGUYkhqVJdk0JCspaVmSa1emPl64O3X/1lihMH5HdWJsMpdX1aGLHx48e3tpNRi4927ofZ+sZR+ub+S/rJ1ZG17/Ofmk7GvZ16oXqK0znhfYM66js2W/Yqkuu47tO1qu+k6tY3vJ9ebm6mpXZwczczXH99Wu1rXi1DXwNKjV1X5sl6tqWZYOZgSHUXyzGYayEaZbHwysyuBnMcU4ocbJUeP0tHF2yRjeCENzO3MsqcHiCET9752WMAyPr+yn/2164h8vuqvtpt4v4r6cL84Xo9do+1hJyuKKIyNiyg9pTJOmqJ64WRgf0S1ZeeEuNvOL88Vocrxq5XNiSnbvfC7Ka2e+TzLtx8+LKae286PSzH/tKYznVUV+y/fL1ctteUtM+fRIPHFlVhrZneM/z6neuF3ozPcn2xcAAICjYum2xtuVb4Z0rN+snR12re+i/AHWh7vWZ2k5n0701CEifn2hYruuU4ulaMypbn6hIf8cN5oX4O87n0vFdn22isbPnjibsvA6hmNlutr3gxStPyn22ud7GP94/lT07mtCxlMkeFNCbHaanvRIAAAAAAAAAAAAAAAAAAAHseuhP3PPxyQPWSR9jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/2KwAA///LxMAU") perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x100000, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x84) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') close(r4) r5 = socket$inet6(0xa, 0x4, 0x5) recvfrom$inet6(r5, &(0x7f0000000040)=""/93, 0x5d, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x1e, &(0x7f00000002c0)={@broadcast, @empty, @void, {@can={0xc, {{0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "3aaf5c794dc3c98f"}}}}, 0x0) 3m58.726494573s ago: executing program 2 (id=1090): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff00000000000000010004c91000000000"], 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r5, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00000003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x80000008, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 3m57.631401803s ago: executing program 2 (id=1095): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000180)={[{@nodioread_nolock}, {@debug}, {@journal_checksum}]}, 0x0, 0x5fd, &(0x7f00000006c0)="$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") ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}}) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ioprio_set$uid(0x3, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r1, 0x0, 0x0, 0x2ffac000, 0x804) 3m57.233157664s ago: executing program 2 (id=1098): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x3, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0x3, 0x0, 0x10000000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x3, 0xfffffffc, 0x6, 0x7, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x3109406, &(0x7f0000000280)={[{@barrier_val={'barrier', 0x3d, 0xfffffffffffffffc}}, {@noquota}, {@dioread_lock}, {@prjquota}, {@errors_remount}, {@resuid={'resuid', 0x3d, 0xee00}}, {@test_dummy_encryption}], [{@audit}, {@obj_user={'obj_user', 0x3d, '.'}}]}, 0x3, 0x458, &(0x7f0000000680)="$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") write(r2, &(0x7f0000000100)="3a0911649332ad439f82ee8408aec590f47844b1a67993c7c16d6ae174d6fca910dc6d1f07da2ebd60e71a6a5ac8788f46a91f11c074b60f67ac2f1bdfde142f7b8527853b6dd1f9e5d1659f3a721dd74b44223b0ffd3782320c34033887901aa718526f8214945b7ac56df0012d3c6b", 0x70) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) write$cgroup_devices(r3, 0x0, 0x9) 3m57.045027299s ago: executing program 2 (id=1100): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004008, &(0x7f0000000040)=ANY=[], 0xfe, 0x1227, &(0x7f00000024c0)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000500)=""/167) 3m56.316212278s ago: executing program 2 (id=1102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a64000000060a0b0400000000000000000208000038000480340001800900010068617368000000002400028008000440ffffffed0800064000000008080007400000000108000240000000170900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) r3 = msgget$private(0x0, 0x790) msgsnd(r3, &(0x7f0000000d00)=ANY=[@ANYRES8=r2], 0x401, 0x0) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000001140)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c000000000000000000000007002000440c0943ac1414aa0000000900000000"], 0x20}, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) sendfile(r2, r1, 0x0, 0x7ffff000) 3m56.064349845s ago: executing program 2 (id=1104): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0x5}, 0xd1ec, 0x0, 0xbe, 0x8, 0x6, 0x8001, 0x7ffe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) clock_getres(0xeaffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[0x0]) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000012000103000000000000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="0000001000000006ffdfffca4ac0c2407aaff000000000"], 0x4c}}, 0x0) 3m55.995969337s ago: executing program 33 (id=1104): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0x5}, 0xd1ec, 0x0, 0xbe, 0x8, 0x6, 0x8001, 0x7ffe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) clock_getres(0xeaffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[0x0]) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000012000103000000000000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="0000001000000006ffdfffca4ac0c2407aaff000000000"], 0x4c}}, 0x0) 3m20.847869883s ago: executing program 5 (id=1332): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x218002, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@nolazytime}, {@nodioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x2000000fffb) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x40001, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002880)) 3m19.582266768s ago: executing program 5 (id=1344): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x700) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 3m19.348076284s ago: executing program 5 (id=1346): socket$nl_route(0x10, 0x3, 0x0) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000100000008000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', r7, 0x700, 0x40, 0x233, 0xa, {{0x3f, 0x4, 0x0, 0x1, 0xfc, 0x68, 0x0, 0x2, 0x2b, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x23, 0x11, [@initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @local, @rand_addr=0x64010102, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x27, 0x59, [@rand_addr=0x64010101, @private=0xa010100, @broadcast, @local, @multicast1, @empty, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0x43, [@multicast1, @private=0xa010102, @empty]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x5, [0xbc8, 0x8]}, @generic={0x83, 0xe, "2101f3c7b577ae81b8f7ede6"}, @lsrr={0x83, 0x17, 0x1d, [@rand_addr=0x64010102, @empty, @loopback, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0x8a, 0x1, 0x9, [{@private=0xa010100, 0x82da}, {@multicast2}, {@broadcast, 0x4}, {@empty, 0x9d9}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010100, 0x1e}, {@rand_addr=0x64010100, 0xfffffff8}, {@multicast1, 0x800}]}, @lsrr={0x83, 0x17, 0xc5, [@local, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1]}]}}}}}) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m18.209072205s ago: executing program 5 (id=1354): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x218002, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@nolazytime}, {@nodioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x40001, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002880)) 3m17.309495919s ago: executing program 5 (id=1357): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000240)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r4, 0x0) 3m16.484370571s ago: executing program 5 (id=1366): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x22640, 0x0) ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 3m16.284866096s ago: executing program 34 (id=1366): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x22640, 0x0) ioctl$PPPIOCGIDLE64(r1, 0x8010743f, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$eJzs3MtvG8UfAPDv2kn6Sx+/mKo8mhYIFETEI2nSUnrgAgKJA0hIcCjHkKRVqNugJki0iiAgVI6oEnfEEYm/gBNcEHBC4gp3VKlCubT0ZLT2buI4dh5uEgf8+UibzOzOaubr3bFnduIE0LWG0h9JxMGI+D0iBmrZ1QWGar/uLC1M/r20MJlEpfLWX0m13O2lhcm8aH7egTxTiih8lsSxJvXOXb12caJcnr6S5UfnL70/Onf12nMzlyYuTF+Yvjx+9uzpU2MvnBl/flviTOO6PfjR7PGjr71z443Jczfe/fnbJI+/IY4tKbQ8MrTeaU9WKm1Vt1cdqksnPSvJDU6rtH752A3FiEgvV2+1/w9EMVYu3kC8+mlHGwfsqL71Dy9WgP+wdDQPdKP8gz6d/+bbLgw79oxbL9UmQGncd7KtdqRneWrf2zC/3U5DEXFu8e5X6Rb38hwCAGCTvk/HP882G/8V4oG6cv/P1lBKEXFfRByOiDMRcSQi7o+oln0wIh7aYv2NiyRrxz+Fm20Ftknp+O/FbG1r9fhveWWiVMxyh6rx9ybnZ8rTJ7PXZDh696X5sXXq+OGV375odax+/Jduaf35WDBrx82efavPmZqYn7iXmOvd+iRisKdZ/MnySkASEUcjYrDNOmae/uZ4q2Mbx7+zKl9HPFW7/ovREH8uWX99cvR/UZ4+OZrfFWv98uv1N1vV3+n40+u/v+n9vxx/Kalfr53beh3X//i85Zym3fu/L3l71b4PJ+bnr4xF9CWv1xpdv3+8odz4Svk0/uETzfv/4Vh5JY5FRHoTPxwRj0TEo1nbH4uIxyPixDrx//TyE++1H//OSuOfioi72fOAja//SqIvGvc0TxQv/vjdqkpLW4k/vf6nq6nhbM9m3v8206727mYAAAD49ylExMFICiPL6UJhZKT2N/xHYn+hPDs3/8z52Q8uT9W+I1CK3kL+pGug7nnoWDatz/PjDflT2XPjL4v91fzI5Gx5qtPBQ5c70KL/p/4sdrp1wI7r6XQDgI7R/6F76f/QvfR/6F5N+n9/J9oB7L5q/2/4V00fd6gtwO5q+Py37AddxPwfupf+D91L/4euNNcfG39JXkJiTSIKe6IZEjuU6PQ7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPb4JwAA///5++Y6") 2m41.457014464s ago: executing program 0 (id=1590): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, r0, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r3, 0x89ee, &(0x7f0000000380)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x20000150) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010000104000000000040000000000000", @ANYRES32=0x0, @ANYBLOB="5d5800000000000008000f00590a00002c0012800b00010062726964676500001c0002800c00220002000000000000000c002100b2"], 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}}, 0x24040810) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m38.564274302s ago: executing program 0 (id=1633): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000140001032dbd7000fcdbdf250c000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) 2m38.429593826s ago: executing program 0 (id=1636): r0 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x100087}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1, 0x3000000}, 0x20) 2m38.429241995s ago: executing program 0 (id=1638): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x4a8e) 2m38.002520957s ago: executing program 0 (id=1650): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0), 0x4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) ftruncate(r0, 0xf4fc) 2m37.88745087s ago: executing program 3 (id=1654): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x114236db3b607435, 0x70bd24, 0x25dfd3fe, {0x7, 0x0, 0x0, r1, 0x4, 0xa2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) 2m37.816331752s ago: executing program 3 (id=1656): creat(&(0x7f0000000000)='./file0\x00', 0x160) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) 2m37.816202042s ago: executing program 3 (id=1657): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'bond0\x00', &(0x7f0000000000)=@ethtool_sfeatures}) 2m37.816136952s ago: executing program 3 (id=1658): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) 2m37.543347149s ago: executing program 3 (id=1665): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1000007fd) 2m37.309341676s ago: executing program 0 (id=1667): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m37.248363267s ago: executing program 35 (id=1667): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m37.184310399s ago: executing program 3 (id=1670): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 2m37.14448661s ago: executing program 36 (id=1670): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 41.645003889s ago: executing program 9 (id=2515): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30010, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) 41.517779863s ago: executing program 9 (id=2516): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x111, 0x1}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 41.488890814s ago: executing program 9 (id=2517): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$netlink(0x10, 0x3, 0x9) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x20) (async) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x44884) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x24, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xfff1}}]}}]}, 0x50}}, 0x2000c800) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ftruncate(r4, 0x1) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0x4}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="84010000190001002abd7000fbdbdf251d01090050000f801400bf00fe8000000000000000000000000000bb08009200", @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000100)={0x6, 'ip6tnl0\x00', {0xe79}, 0x2}) (async) connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0x1a, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) 41.304122748s ago: executing program 9 (id=2518): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180002000000009500000000c8ecffb56ce5778721254e44c872e1ff774cb8ec160f3e9f8af958d5b9f4db627089bf422227a35b76292e72e7"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1217, &(0x7f0000002200)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AE34uLSZOFKkCApSAaU2gitINyaGx1ynSm5Q2BEjK7c+jlcuxP8Btn4Gdxl02UX4pXe6aSTmlqEZkbs8yzmvtxzfpxzYBg4wz336N0fv9rdqbKdvB+tmZlo3YlI91KkaMXI65vD681bm+vt9sb1lK6t31h9J6W09Mavn34zFxEXPvl56Ze5OFz57Oju2u+Hlw4vH/1548tOlTpV6vb6KU+3e71+frtcStudajdL6aOyyKsidbpVsTfWXqSdtyNikPLu9uLCnb2iqlLeHaTdYpD6vdTfG6T8i7zTTVmWpcWF4LHOPbnL1k/36rqOqOtz8XzUdV2fj4W4EC/EYizFdxHxYrwUL8fFeCUuxavxWlxuek1i+gAAAAAAAAAAAAAAAAAAAPDs+Kfz/8ux4vw/AAAAAAAAAAAAAAAAAAAATMDHN29trrfbG9dTmo8of9jf2t8aXoftK/c/yijiaizHH9Gc/h8a1tc+aG9cTY2V+L48eJA/2N96rsmvj/KrzesEHuRnm7ZRfnWYTyfzc7FwP78TnSa/Fstx8fTx18byB8f5+XjrzbF8Fsvx2+fRizK2m7Ef5r9dTen9D9uPjH+l6QcAAAD/B1k6dur+Pcse1z7MH++vn/z/wCP769m4MjvdtRNRDb7ezVtlsdcU5aiY/9udsytigmM93SLibt0UcyebWmc0aCumvuSxYua/MQ3F0ynOx8k70/5lYhIefg2mPRMAAAAAAAAAAAD+jTN+rnA2Tnmy7L3pLBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiLHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMFAAD//zCxxVk=") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000001200)=""/4083, 0xff3}], 0x1, 0x0, 0x0, 0x9) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x23, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c64"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000200)={0xffffffffffffffff, 0x1, 0xee, 0x6728e395, @vifc_lcl_addr=@private=0xa010100, @rand_addr=0x64010101}, 0x10) 41.210066791s ago: executing program 9 (id=2519): socket$nl_route(0x10, 0x3, 0x0) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000100000008000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', r7, 0x700, 0x40, 0x233, 0xa, {{0x3e, 0x4, 0x0, 0x1, 0xf8, 0x68, 0x0, 0x2, 0x2b, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x23, 0x11, [@initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @local, @rand_addr=0x64010102, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x23, 0x59, [@rand_addr=0x64010101, @private=0xa010100, @broadcast, @multicast1, @empty, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0x43, [@multicast1, @private=0xa010102, @empty]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x5, [0xbc8, 0x8]}, @generic={0x83, 0xf, "2101f3c7b577ae81b8f7ede649"}, @lsrr={0x83, 0x17, 0x1d, [@rand_addr=0x64010102, @empty, @loopback, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x44, 0x8a, 0x1, 0x9, [{@private=0xa010100, 0x82da}, {@multicast2}, {@broadcast, 0x4}, {@empty, 0x9d9}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010100, 0x1e}, {@rand_addr=0x64010100, 0xfffffff8}, {@multicast1, 0x800}]}, @lsrr={0x83, 0x17, 0xc5, [@local, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1]}]}}}}}) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 40.977382517s ago: executing program 9 (id=2520): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000018c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0x5, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20004040) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 40.939978768s ago: executing program 37 (id=2520): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000018c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0x5, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20004040) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 10.816221999s ago: executing program 7 (id=2685): r0 = socket$key(0xf, 0x3, 0x2) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r5, 0x0, 0xee01) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x18, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000080000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 10.79072834s ago: executing program 4 (id=2688): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc0, 0x8}, 0x143, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00c8702cc583177e7c953d2b6c6e43b73645f2acb80cc28520c3cd61e54370886d9caa3a1ec165ec59309153922716cb0f95f435e2af"], 0x1, 0x2f0, &(0x7f0000000f80)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x4000, 0x0, 0xffffffff, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xd2483, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff0700", @ANYRES32=r3, @ANYBLOB="003000000000000014001a801000"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_pts(r0, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x8000000000000001, 0xd, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240b, 0xffffffffffffffff, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f89, 0x0, 0xffffffffffffffff}) r5 = dup3(r4, r0, 0x0) read$watch_queue(r5, &(0x7f0000000340)=""/133, 0x85) listen(0xffffffffffffffff, 0x0) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91106a000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) unshare(0x6a040000) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x2, 0xa9, 0x7fffffffffffffff, 0x1000000000000, 0xfffffffffffffff5, 0x0, 0x7fff, 0x400005}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x4000000) 9.513063254s ago: executing program 4 (id=2696): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004094}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.15852146s ago: executing program 4 (id=2700): r0 = socket(0x28, 0x801, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) eventfd2(0x2, 0x80800) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.024239755s ago: executing program 1 (id=2703): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, r0, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r3, 0x89ee, &(0x7f0000000380)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x20000150) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010000104000000000040000000000000", @ANYRES32=0x0, @ANYBLOB="5d5800000000000008000f00590a00002c0012800b00010062726964676500001c0002800c00220002000000000000000c002100b2"], 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}}, 0x24040810) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 7.243616085s ago: executing program 6 (id=2704): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x28902) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000ec0)={{0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x10000, 0x10}) r1 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xa, 0x4, 0xc, 0x2000800, 0x1, 0x0, 0x8}}, {0x4}}]}]}, 0x68}}, 0x8000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000073114200000000008510000002000000850000006e00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @mcast2}], 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 6.832789717s ago: executing program 1 (id=2706): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc0, 0x8}, 0x143, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00c8702cc583177e7c953d2b6c6e43b73645f2acb80cc28520c3cd61e54370886d9caa3a1ec165ec59309153922716cb0f95f435e2af"], 0x1, 0x2f0, &(0x7f0000000f80)="$eJzs3ctrE0EcwPFf3klrTQ8iIgpDBVGkSxPw5sEiLYgBpW0EKwhbu9WQbVKyoRAR24Pg1bOHHjyKIII3LyJee/Ev8HXrpTcLFlc2u5umyZqmlT79fg7NdOf325ndme1j2uyuXHk+W5yxtF92VJr1S1giXnlRLn5a+np2/OMx93OlRocnMlmlwiJy9/HrgQ/V3tvvjr9PyHL/vZXV7I/lMxMivyceSlgVLFWybdtWU+VyNeQkTxesoqbULdPQLUMVSpZRqSq9Xq9PmYaaMctzczWll6b7euYqhmUpvVRTRaOmqmVVrdSU/kAvlJSmaaqvR1AfLF+4rS7UKTH/as22ZdUZoMSi2LYdEL3oF2Lea+LfOouDpGX8O8a2TY7IbvYMe2HNjjbGP77F+OPoca//by+6uf5x9IzfmbwxnMuNjCmVFJl9Np+fz7uvbv2XXimIKYYsjV2aXBdnjngk5HwcvZ4bGVJ1/XJ+dsHLX5jPu98chme8/IyknZ9TmvLFz8+4+Wpzfkx6mvOzkpYTwflZP1/CTflxuXCuKV+TtHy+L2UxZVqc3I38Jxmlrt3MtbSfqscBAAAAAAAAAHAYaaphY/0+1PhTb0rTEvX/+GjUp5zNTpwb0FhfH5K0rAevzw8Fru9H5XR0Hw8cAAAAAID/iFV7VNRN06jsTiHyMtWhiZiIOAWRpwNOZzru8KTX4+5aj4tIe1WkcxObCqnLbntvxryOyW6eqB0WwiLSvMV9s4Zz8OZbPyYlQenhbU2AwXjgmU/u6SFLN8GS3NnETnQ9tVoLoXV/y6nAGDu09X5s3Yy5W/wLc6vWr27rcvhrIdl6oga/u/s1O3zR+NlY4gMAAABwiDT94gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbJjm4e5t+3f3OVeI+Ib78lW+tz4rnvPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAD6E8AAAD//+b9sCg=") perf_event_open(&(0x7f0000000000)={0x1, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x4000, 0x0, 0xffffffff, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xd2483, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff0700", @ANYRES32=r3, @ANYBLOB="003000000000000014001a801000"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_pts(r0, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x8000000000000001, 0xd, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240b, 0xffffffffffffffff, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f89, 0x0, 0xffffffffffffffff}) r5 = dup3(r4, r0, 0x0) read$watch_queue(r5, &(0x7f0000000340)=""/133, 0x85) listen(0xffffffffffffffff, 0x0) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91106a000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) unshare(0x6a040000) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000180)={0x6, 0x2, 0xa9, 0x7fffffffffffffff, 0x1000000000000, 0xfffffffffffffff5, 0x0, 0x7fff, 0x400005}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x4000000) 6.491532386s ago: executing program 6 (id=2707): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x3, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x23}], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x92, &(0x7f00000001c0)=""/146, 0x41100, 0x40, '\x00', r2, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xb, 0x3, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)=[r0, r0, r0, 0xffffffffffffffff, r0], &(0x7f00000003c0)=[{0x4, 0x2, 0x4, 0x7}, {0x1, 0x3, 0xb}, {0x4, 0x2, 0x7, 0x3}, {0x0, 0x4, 0x10, 0xb}, {0x1, 0x5, 0x1, 0xa}, {0x0, 0x4, 0x7, 0x3}, {0x1, 0x3, 0x6, 0x2}, {0x0, 0x1, 0x10, 0x8}], 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r6 = syz_open_procfs(0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="6ab282000100000095000000000025816f43ca00005768773a32c7980f18120092d46158c91ad37d53fadacf59d6d18a32322b420beeba734d4792e42774756c2225", @ANYRES32=r6, @ANYBLOB="0000000000001d00b703000000000000850000000c000000b7000002000000008113feff00000000"], &(0x7f0000000100)='syzkaller\x00', 0x3e, 0xef, &(0x7f0000000280)=""/239, 0x40f00, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000380)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xa, 0xca, 0xf}, 0x10, 0x2012c, r6, 0x2, &(0x7f0000000400)=[r6, r6, 0x1, r6, r6, r6, r6, 0xffffffffffffffff], &(0x7f0000000440)=[{0x1, 0x1, 0xe, 0x5}, {0x5, 0x5, 0x7, 0x3}], 0x10, 0xf}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r7, 0x8, 0x0, 0x9, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680), &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0xe6, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r9}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES64=r9, @ANYRES16=r5, @ANYRES32=r4, @ANYRES64=r8, @ANYRES32=r8], 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3ff}]}, &(0x7f0000000580)='syzkaller\x00', 0x14650, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xf, 0xd8, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r0, r0, r0, r0], &(0x7f0000000680)=[{0x1, 0x4, 0xd, 0x5}, {0x3, 0x2, 0xd, 0xb}, {0x10000, 0x3, 0x10, 0x4}, {0x0, 0x1, 0xd, 0x2}], 0x10, 0x81}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map=r0, r3, 0x7, 0x0, 0x0, @void, @value=r10, @void, @void, r8}, 0x20) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) dup2(r11, r0) 6.491143646s ago: executing program 1 (id=2708): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x964) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, 0x0) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) 6.229513412s ago: executing program 1 (id=2709): socket$nl_route(0x10, 0x3, 0x0) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000a40)) readv(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000100000008000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', r7, 0x700, 0x40, 0x233, 0xa, {{0x3a, 0x4, 0x0, 0x1, 0xe8, 0x68, 0x0, 0x2, 0x2b, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x23, 0x11, [@initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @local, @rand_addr=0x64010102, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x27, 0x59, [@rand_addr=0x64010101, @private=0xa010100, @broadcast, @local, @multicast1, @empty, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0x43, [@multicast1, @private=0xa010102, @empty]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0x5, [0xbc8, 0x8]}, @generic={0x83, 0xf, "2101f3c7b577ae81b8f7ede649"}, @lsrr={0x83, 0x3, 0x1d}, @timestamp_addr={0x44, 0x44, 0x8a, 0x1, 0x9, [{@private=0xa010100, 0x82da}, {@multicast2}, {@broadcast, 0x4}, {@empty, 0x9d9}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010100, 0x1e}, {@rand_addr=0x64010100, 0xfffffff8}, {@multicast1, 0x800}]}, @lsrr={0x83, 0x17, 0xc5, [@local, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1]}]}}}}}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.83547572s ago: executing program 6 (id=2711): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, &(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x9) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x8, 0x22, 0x205, 0x831a, 0x1, "03000000cb0b0e000800feffffbcd6ff0100", 0x808, 0x7fff}) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000140)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioperm(0x9, 0x6, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x400, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0x103, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x158, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x3, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x0, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0xff, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x8, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x1, 0x9, 0x401, 0x0, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x7c, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0xaa32, 0x2, 0x2, 0x4000008, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x2, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x10004, 0xb, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0xa, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x200, 0x1, 0x720a, 0xff7f, 0xfff, 0x9, 0x7fff, 0x9011, 0x3ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff802, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0x0, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x4, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0xffff, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x6c, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83d, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x83, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x100, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x10001, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x6, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x4a, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0x5, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x401, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x1, 0x8, 0x3c0, 0x9, 0x0, 0x6d3, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0xfff, 0xf2, 0x0, 0x3, 0xffff, 0x0, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe01000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x40, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x6f3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x2, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9a1, 0x5, 0x1, 0x4, 0x8, 0x5, 0x10000, 0x3, 0x2007fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 4.334823564s ago: executing program 1 (id=2714): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000300)="$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") getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @initdev, 0x0}, &(0x7f0000000080)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x42}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r1, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xaffa9c0077a76a7d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a500000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100d3f90024000380200000800c00018006000100d103000010000780090001006c61737400"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 4.196292307s ago: executing program 8 (id=2715): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup, 0x16, 0x0, 0xc, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@ifindex, 0xffffffffffffffff, 0xd, 0x8, 0xffffffffffffffff, @void, @value=r2, @void, @void, r1}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xb0493, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x1}, 0x877, 0x0, 0xffffffff, 0x2, 0x10000000002, 0x80000011, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400000000fee6df2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028005001900020000000500170000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) 3.758744579s ago: executing program 6 (id=2716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") socket$packet(0x11, 0x2, 0x300) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB]) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, 0x0, 0x0, 0x10000e0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x100000000}}]}, 0x1, 0xbd7, &(0x7f0000002380)="$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") r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) r4 = memfd_create(&(0x7f0000000740)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x9) fallocate(r4, 0x0, 0x0, 0x400001) (fail_nth: 2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) pwritev2(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) socket(0x23, 0x2, 0x7) 3.757948559s ago: executing program 4 (id=2717): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x28902) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000ec0)={{0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x10000, 0x10}) r1 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xa, 0x4, 0xc, 0x2000800, 0x1, 0x0, 0x8}}, {0x4}}]}]}, 0x68}}, 0x8000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000073114200000000008510000002000000850000006e00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @mcast2}], 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3.757462409s ago: executing program 7 (id=2718): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, &(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x8, 0x22, 0x205, 0x831a, 0x1, "03000000cb0b0e000800feffffbcd6ff0100", 0x808, 0x7fff}) ioctl$TIOCSTI(r3, 0x5412, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf250d0000007000038008000500ac14141c08000500e0000001080001000000000008000100000000001400020076657468305f766972745f77696669001400020076657468315f766c616e0000000000001400020064766d7270310000b79f00000000000008000500ac1414aa080001000200000040000180140003002001000000000000000000000000000114000300fe8000000000000000000000000000aa0c00070012000000310000000800090014000000300002800800040008000000060002004e21000014000100"/224], 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101143, 0xeaff) lsetxattr(0x0, &(0x7f0000000140)=@known='system.posix_acl_default\x00', &(0x7f0000000180)='lowerdir', 0x8, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x11, 0x8, @val=@iter={0x0}}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') exit(0x100000000000035) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="018e4f8d30690fcefd3582348a1553de2df5f2c59e395951657d308765f67d6562acd56f760747f06c359f9ee9cff5bb58a1bfab6fa7"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x40020) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x109260, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.053523698s ago: executing program 8 (id=2719): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000054b1558787bda65370b3736dc954af1567c4986d84d9170e4a0f61be5a626f7e2ad932bedf2bfb37a75e5d90fa070c09121a05bba85318905ebc94eea8cfc5b4194c567569461a66a75c812dd7d187bee06e4e3c855798996d2d7605b3ebf2ecf6074e3506c5f827934ca9c80c55fa7a06cb5a513578e5ae06fa4b45fd4d9d1a", @ANYRES16=r7, @ANYBLOB="0100000000000100000002000000"], 0x14}}, 0x800) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x68, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x48d0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r9, &(0x7f0000001240)=[{&(0x7f0000000a40), 0x17b}, {&(0x7f0000001740)="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", 0x17b}, {&(0x7f0000000500)="2a6dfe6b588f0649b7c62468b77834dbabbd4b954da4", 0x16}, {&(0x7f0000001640)="acf5964b4d2aba2c68c363b6bc49a8c7becac3bbb7dfcc8b79d6d4f52be12eeb2b79d208ff301d18aa1e5b70729f3b4aa941103981c5f58d8d4971d20b6aa6c7bc3d371b296f014d7bec9aed7f966e46d306d93dabbef889580d6d6e78ba9c72b644dfe391899db31310e59eb3e734ccda545701b2fc7dbb748af3f4f2f22510c8965985c95e73ec6c46ac80a4a74288351133b2890706681f10d66dec0d89e27fdd35fe7ddfe33b4a8d99acecc1586f6d1d257e22e1bf7e390d6d4dbe967e616ccaba4ce0491838ad8469dbfe3c4280330a5c7fc0192c113affde67d5805e2181281f44c32efa30", 0xe8}, {&(0x7f0000000d00)="35b67d93a84d33eb70ff581e3a9d9d0da6dc5d9e513fd7f0d6a7e1a170a9fd02e1e8ab7be3d54f2942d30bb052ff1db99d44bbba505f4ec35bbda360e6b433a93f22eaa64d7024893d4a99395bd583c81e435a0b3c52004bf44246828d6b76a7bdae3a6cfbb9fb", 0x67}, {&(0x7f0000000d80)="3737510ba7998eb0a92eb479b9ac482e6adde06f82a7ed40961de2f2044db9ddc090c9ad2b99c28af1c0147e8302afcf6fdcf929bec6a1a7739a151623ff9e7b9f32748cb18596b18766bb9ec5d09bce07fd8016aeef37d95a4474f8c7a9299958fe", 0x62}, {0x0, 0x7b01}, {&(0x7f0000000c00)="41c7c229ebe174b727f00ec3f1d02a27c4bab19ef5ff046bb5aaec1fa8b6d8b49c4ca80426f1d27aaa0a3a5f74b020a430b1cc1f485e8c9013fdfe42f6f11c3e2686e59c5a7738096c5826f4443b74e6640b8b42e5b049f8dd9b7ef8aca94c0a7f7553c48bca6b78498c8f52bea41749243422a96cabd158f601376639e11bd9acdcca6296ab8f4212d1c47c37329f2aa90197826b918c914e4d11f8a79eaaddf1", 0xa1}, {&(0x7f0000001040)="02e5570de9bd58f3ae924514eb95d3085d5b4ffc3ad1b8cdf7f7086f87dfad4ff604ecaacc625a44eea266710d093ac57e807436b57559bc78129208b4f028c7e81351dfef9e381d85c5d7f74e505af08f656fc416ece1fe515b610553eae1493e", 0x61}], 0x9) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r9, 0x8040942d, &(0x7f0000000340)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f00000001c0), &(0x7f0000000280)=r4}, 0x20) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80a05400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r10, 0x4, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0xc001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 2.704025827s ago: executing program 1 (id=2720): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xff80, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="2bc08d83bc010faecbe32ee2434869e19522ce7ef4c7ba363e25fbab9df252473807c63e2f4d8d9a1744d490b4f151b3c9e8b1adba34a00279898eaf60322263b8f291449e8c569dbb69d835ecd5efacd63623902ebf61ae41698e2aa160326afcd0420b3b26750c7dac942d34a19352bebde757473f1c25d687b8a2d6e59f29a33d439b88abe2054d5f3e4add55a7e15b874e82894405f8b0cac99b624f2e0e232a0eefc209353a730b74d8fd5ddb57d70822660e9fa62aebccd746a87439a067144ae108fc69ee1259ce7841749e5db5942202997981e7f9098a", 0xdb, 0xfffffffffffffff9) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r4, 0xfffffe4d}}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="a71b623c7aeb8bfd00000400000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x94) 2.62351172s ago: executing program 4 (id=2721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0x1, 0xfffffffe, 0x25dfdbfd, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') pread64(r1, &(0x7f0000002180)=""/4105, 0x137, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2d, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) r6 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r6, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0x8be}], 0x5}}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r7) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbe5df2501000000000000000941000000090018000000af75"], 0x68}, 0x1, 0x0, 0x0, 0x6004c040}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000070000000500000002000006040000000200000009000000050000000000000e0083e20c9b2e"], 0x0, 0x3b, 0x0, 0x1}, 0x28) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f01f000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x4a, &(0x7f0000000500), 0x4) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r10, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 2.61976555s ago: executing program 7 (id=2722): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r0, 0x0, 0x44) 2.151869413s ago: executing program 8 (id=2724): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff00000000000000010004c91000000000"], 0x0) r5 = socket(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00000003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x80000008, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000048000000009aaa000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000180100002020662500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000160000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 1.936265398s ago: executing program 7 (id=2725): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (fail_nth: 21) 1.935952458s ago: executing program 6 (id=2726): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff00000000000000010004c91000000000"], 0x0) r5 = socket(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00000003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x80000008, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000048000000009aaa000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000180100002020662500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000160000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 795.598029ms ago: executing program 8 (id=2727): gettid() timer_create(0x1, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x2318f000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4200, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 1) 541.106186ms ago: executing program 8 (id=2728): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") shmctl$SHM_LOCK(0x0, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80, 0x80800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000095000000000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000d3e400000000000000000082b5bc9cb1a6816dabbad66ac37fb55cf20124d5626e69ce40dea66ea6ced1e574c7be47fd4698856813e2ab970d1b"]) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") (async) shmctl$SHM_LOCK(0x0, 0xb) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, 0xffffffffffffffff, 0x0) (async) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80, 0x80800) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000095000000000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000d3e400000000000000000082b5bc9cb1a6816dabbad66ac37fb55cf20124d5626e69ce40dea66ea6ced1e574c7be47fd4698856813e2ab970d1b"]) (async) 478.463558ms ago: executing program 4 (id=2729): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup, 0x16, 0x0, 0xc, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@ifindex, 0xffffffffffffffff, 0xd, 0x8, 0xffffffffffffffff, @void, @value=r2, @void, @void, r1}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xb0493, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x1}, 0x877, 0x0, 0xffffffff, 0x2, 0x10000000002, 0x80000011, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400000000fee6df2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028005001900020000000500170000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) 164.333526ms ago: executing program 7 (id=2730): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/28) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000500)={[{@nodioread_nolock}, {@grpjquota}, {@minixdf}, {@discard}, {@prjquota}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xffff}}]}, 0x0, 0x489, &(0x7f0000000c80)="$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") 157.891136ms ago: executing program 6 (id=2731): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x28902) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000ec0)={{0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x10000, 0x10}) r1 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xa, 0x4, 0xc, 0x2000800, 0x1, 0x0, 0x8}}, {0x4}}]}]}, 0x68}}, 0x8000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000000000073114200000000008510000002000000850000006e00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @mcast2}], 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 81.722128ms ago: executing program 7 (id=2732): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2c020400) r2 = inotify_init1(0x800) quotactl_fd$Q_SYNC(r2, 0x80000304, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x2002f3f, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r3, &(0x7f00000022c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\b', 0x4}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="0198000000000000200012efab14140006000300bf00"/40], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000240)='?', 0x1, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000280)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r8, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x101, 0x10, 0x83, "000000ffff000000010100"}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000080)='./bus\x00', 0x2829406, &(0x7f0000000700)=ANY=[@ANYRESDEC=r4, @ANYBLOB="455481dcd4447add0d768e03f88cc1921e9d30140dc461d029561282703bbf6ea15e79fd12a18acace2ff667a1af7b9b5d9907c569993d977a4019541a381855202192243434766abf65039fdb1c9fb7dc6e06bee39cb2f4163049a5f693b7e722e710e4d02441c6d500c6f89667403a4d26d87bab53473a0545591ccb242db76960293821ab78212ae0c1f59917cb20aa323cb0c43c4a4abded290feb5bd2eba1b66166ab521a7f1892aee4bb722c57030b753f1613fec2997cb4699dee"], 0x1, 0x317, &(0x7f0000000880)="$eJzs3M9LG2kYwPEnml9GNDksuyzLsi+7l10WBs3eF8Ki7LKBXdSU2kJh1EkbMk0kEyyRovbUa+kf0YN405vQ9tCrl9566qU3Dy2UttLWTpnJjEYzsZVmYtt8P2Dm9X3eJ+8bkgzPO5DZPX/rarloaUW9LgMDMRkQScqeSMZpiTSch4g4nU0RiUurNflt+PmjH6dnL/yby+cnppSazM38kVVKjf5099r1jZ/v14fPbY1uJ2Qnc2n3WfbJzrc73+++m7lSslTJUpVqXelqrvq4Hp8zDbVQssqaUv/btm4ZqlR5MCvixqt13YkXzeriYkPplYWR1GLNsCylVxqqbDSUREVqDaVf1ksVpWmaGkkJPiSxPjWl59xm8tTJ8yEsCJ/s75Qc+47WajndOQ61jS2s925dAADgc3Gk/k8qp+pfa6n/XRHv6PTs27bdmu/W/y82RU6s//3icjveof736nu//jeNZv1vGbVmPOo9Qcf6v15Vdaf+j1L/n0LhsP5vs7nf69UgHE79n/K+v64bFzfG3Ab1PwAAAAAAAAAAAAAAAAAAAAAAX4I9207btp32j/5fwvtJuP//Wa8T4eD972/TymsolRQxby4VlgoiZqzZefC+GzImaXnrfh48zfbkP/mJg7sN3DNXvfzVpcKg25UrSklMMWRc0pIJzh9XTUfzY5Jqzc9KWr4Jzs8G5sfl119a8jVJy8N5qYopC+7n+jB/ZVypv/7LH8sfcscBAAAAAPA10NSBTND+XdOOxP1bAa06o6S5Pxd3fx1wfSAuIs7+eqxtf544uxcMAAAAAEAfshrLZd00jVoXGy/tk8ckRSTZ7UnbGs6rC3mK5bI+dPKYld87hiQT6sK634jJabPSLT3+laOeLz7aOql/4Smkub67fedV957wz60f3gSFXndvitHOoY84ecTCOy8BAAAA6L7Doj8oGllzHu2nPV8WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB9Jbz7rg16MwTfWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoR+8DAAD//+zLFFk=") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x2fb483, 0x2) mknodat(r11, &(0x7f0000000100)='./file0\x00', 0x100, 0xfffffffe) read$watch_queue(r10, &(0x7f0000000480)=""/142, 0x8e) fdatasync(r7) 0s ago: executing program 8 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, 0x0, 0xf0961890b4faa8d0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @remote}, 0x14) sendmmsg$sock(r2, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x4e}}], 0x1, 0x4874) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") socket$packet(0x11, 0x2, 0x300) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB]) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r4, 0x0, 0x0, 0x10000e0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x100000000}}]}, 0x1, 0xbd7, &(0x7f0000002380)="$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") r5 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) memfd_create(&(0x7f0000000740)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x9) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) fcntl$setstatus(r7, 0x4, 0x12000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) fallocate(r1, 0x4, 0x0, 0x3ffffd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) pwritev2(r5, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) kernel console output (not intermixed with test programs): 00000000 r/w without journal. Quota mode: writeback. [ 365.474678][ T28] audit: type=1326 audit(2000524494.512:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 365.509620][ T28] audit: type=1326 audit(2000524494.530:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 365.554865][T11810] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.2351: Logical block already allocated [ 365.610668][ T28] audit: type=1326 audit(2000524494.530:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 365.685518][T11812] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 365.710426][T11819] set_capacity_and_notify: 5 callbacks suppressed [ 365.710444][T11819] loop1: detected capacity change from 0 to 512 [ 365.727645][T11810] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.2351: Logical block already allocated [ 365.771590][T11823] veth0_vlan: left promiscuous mode [ 365.777985][T11823] veth0_vlan: entered promiscuous mode [ 365.843403][ T7224] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.914437][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2359'. [ 365.914578][T11834] netlink: 'syz.9.2359': attribute type 2 has an invalid length. [ 365.914598][T11834] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2359'. [ 365.957368][T11832] FAULT_INJECTION: forcing a failure. [ 365.957368][T11832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.972335][T11832] CPU: 1 UID: 0 PID: 11832 Comm: syz.6.2357 Tainted: G W syzkaller #0 PREEMPT(full) [ 365.972389][T11832] Tainted: [W]=WARN [ 365.972399][T11832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 365.972416][T11832] Call Trace: [ 365.972424][T11832] [ 365.972478][T11832] __dump_stack+0x1d/0x30 [ 365.972603][T11832] dump_stack_lvl+0x95/0xd0 [ 365.972628][T11832] dump_stack+0x15/0x1b [ 365.972656][T11832] should_fail_ex+0x263/0x280 [ 365.972729][T11832] should_fail+0xb/0x20 [ 365.972827][T11832] should_fail_usercopy+0x1a/0x20 [ 365.972904][T11832] _copy_from_iter+0xcf/0xea0 [ 365.972936][T11832] ? __pfx_woken_wake_function+0x10/0x10 [ 365.972962][T11832] file_tty_write+0x322/0x680 [ 365.973047][T11832] ? __pfx_tty_write+0x10/0x10 [ 365.973079][T11832] tty_write+0x25/0x30 [ 365.973103][T11832] vfs_write+0x5a6/0x9f0 [ 365.973167][T11832] ksys_write+0xdc/0x1a0 [ 365.973203][T11832] __x64_sys_write+0x40/0x50 [ 365.973239][T11832] x64_sys_call+0x27e1/0x3020 [ 365.973313][T11832] do_syscall_64+0x12c/0x3b0 [ 365.973344][T11832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.973424][T11832] RIP: 0033:0x7f4b3888cdd9 [ 365.973444][T11832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.973468][T11832] RSP: 002b:00007f4b372df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 365.973500][T11832] RAX: ffffffffffffffda RBX: 00007f4b38b05fa0 RCX: 00007f4b3888cdd9 [ 365.973514][T11832] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 365.973600][T11832] RBP: 00007f4b372df090 R08: 0000000000000000 R09: 0000000000000000 [ 365.973617][T11832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.973633][T11832] R13: 00007f4b38b06038 R14: 00007f4b38b05fa0 R15: 00007ffc26d60828 [ 365.973654][T11832] [ 365.991301][T11837] xt_l2tp: v2 doesn't support IP mode [ 365.999690][T11837] netlink: 'syz.9.2359': attribute type 10 has an invalid length. [ 365.999780][T11837] ipvlan1: entered allmulticast mode [ 366.013014][T11837] team0: Device ipvlan1 failed to register rx_handler [ 366.170583][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2362'. [ 366.673574][T11852] 9p: Bad value for 'wfdno' [ 366.966614][T11865] loop8: detected capacity change from 0 to 512 [ 366.978051][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2367'. [ 367.128384][T11865] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 367.138724][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2367'. [ 367.194188][T11865] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 367.253685][T11865] EXT4-fs (loop8): 1 truncate cleaned up [ 367.284343][T11862] netlink: 'syz.6.2367': attribute type 13 has an invalid length. [ 367.297044][T11865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.390731][T11862] netlink: 'syz.6.2367': attribute type 11 has an invalid length. [ 367.442624][T11865] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.2368: Logical block already allocated [ 367.544044][T11878] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.2368: Logical block already allocated [ 367.656831][T11880] loop1: detected capacity change from 0 to 8192 [ 367.669292][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2374'. [ 367.833485][ T9408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.587197][T11914] loop7: detected capacity change from 0 to 512 [ 368.610417][T11916] loop6: detected capacity change from 0 to 512 [ 368.639130][T11916] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 368.652715][T11916] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 368.661641][T11916] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.2385: bad orphan inode 4 [ 368.671684][T11916] loop6: lost filesystem error report for type 5 error -117 [ 368.672529][T11916] EXT4-fs (loop6): 1 orphan inode deleted [ 368.679895][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 368.679918][ C1] EXT4-fs (loop6): initial error at time 2000524498: ext4_orphan_get:1423 [ 368.679952][ C1] EXT4-fs (loop6): last error at time 2000524498: ext4_orphan_get:1423 [ 368.685818][T11919] loop8: detected capacity change from 0 to 512 [ 368.693150][T11916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.783894][T11914] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 368.790192][T11919] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 368.805924][T11921] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 4: comm syz.6.2385: lblock 0 mapped to illegal pblock 4 (length 1) [ 368.837645][T11919] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 368.853250][ T7224] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.862411][T11919] EXT4-fs (loop8): 1 truncate cleaned up [ 368.870401][T11919] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.885196][T11919] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.2386: Logical block already allocated [ 368.904853][T11919] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.2386: Logical block already allocated [ 369.013764][T11929] veth0_vlan: left promiscuous mode [ 369.019636][T11929] veth0_vlan: entered promiscuous mode [ 369.026339][T11933] FAULT_INJECTION: forcing a failure. [ 369.026339][T11933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.050612][ T9408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.053490][T11933] CPU: 1 UID: 0 PID: 11933 Comm: syz.1.2389 Tainted: G W syzkaller #0 PREEMPT(full) [ 369.053622][T11933] Tainted: [W]=WARN [ 369.053720][T11933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 369.053763][T11933] Call Trace: [ 369.053858][T11933] [ 369.053888][T11933] __dump_stack+0x1d/0x30 [ 369.053963][T11933] dump_stack_lvl+0x95/0xd0 [ 369.054059][T11933] dump_stack+0x15/0x1b [ 369.054124][T11933] should_fail_ex+0x263/0x280 [ 369.054250][T11933] should_fail+0xb/0x20 [ 369.054341][T11933] should_fail_usercopy+0x1a/0x20 [ 369.054442][T11933] _copy_from_user+0x1c/0xb0 [ 369.054551][T11933] kstrtouint_from_user+0x69/0xf0 [ 369.054680][T11933] ? 0xffffffff81000000 [ 369.054735][T11933] ? selinux_file_permission+0x1e1/0x320 [ 369.054848][T11933] proc_fail_nth_write+0x50/0x160 [ 369.054976][T11933] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 369.055093][T11933] vfs_write+0x269/0x9f0 [ 369.055250][T11933] ? __rcu_read_unlock+0x4e/0x70 [ 369.055332][T11933] ? __fget_files+0x184/0x1c0 [ 369.055397][T11933] ? mutex_lock+0x57/0x90 [ 369.055503][T11933] ksys_write+0xdc/0x1a0 [ 369.055596][T11933] __x64_sys_write+0x40/0x50 [ 369.055793][T11933] x64_sys_call+0x27e1/0x3020 [ 369.055875][T11933] do_syscall_64+0x12c/0x3b0 [ 369.055953][T11933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.056027][T11933] RIP: 0033:0x7f57810cd60e [ 369.056080][T11933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 369.056176][T11933] RSP: 002b:00007f577fb66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 369.056241][T11933] RAX: ffffffffffffffda RBX: 00007f577fb676c0 RCX: 00007f57810cd60e [ 369.056302][T11933] RDX: 0000000000000001 RSI: 00007f577fb670a0 RDI: 0000000000000003 [ 369.056365][T11933] RBP: 00007f577fb67090 R08: 0000000000000000 R09: 0000000000000000 [ 369.056487][T11933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.056522][T11933] R13: 00007f5781386038 R14: 00007f5781385fa0 R15: 00007fffe08e9428 [ 369.056594][T11933] [ 369.356516][T11938] FAULT_INJECTION: forcing a failure. [ 369.356516][T11938] name failslab, interval 1, probability 0, space 0, times 0 [ 369.369247][T11938] CPU: 0 UID: 0 PID: 11938 Comm: syz.1.2392 Tainted: G W syzkaller #0 PREEMPT(full) [ 369.369285][T11938] Tainted: [W]=WARN [ 369.369293][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 369.369305][T11938] Call Trace: [ 369.369314][T11938] [ 369.369323][T11938] __dump_stack+0x1d/0x30 [ 369.369385][T11938] dump_stack_lvl+0x95/0xd0 [ 369.369412][T11938] dump_stack+0x15/0x1b [ 369.369437][T11938] should_fail_ex+0x263/0x280 [ 369.369501][T11938] should_failslab+0x8c/0xb0 [ 369.369538][T11938] __kvmalloc_node_noprof+0x155/0x640 [ 369.369622][T11938] ? lapic_next_event+0x11/0x20 [ 369.369645][T11938] ? nf_hook_entries_grow+0x1cb/0x460 [ 369.369754][T11938] nf_hook_entries_grow+0x1cb/0x460 [ 369.369790][T11938] ? __rb_reserve_next+0x43a/0x6f0 [ 369.369824][T11938] __nf_register_net_hook+0x18e/0x480 [ 369.369859][T11938] nf_register_net_hook+0x88/0x130 [ 369.369893][T11938] nf_register_net_hooks+0x44/0x150 [ 369.369929][T11938] nf_defrag_ipv4_enable+0x6e/0xc0 [ 369.369968][T11938] nf_ct_netns_do_get+0x13c/0x3a0 [ 369.370030][T11938] nf_ct_netns_get+0xf1/0x2c0 [ 369.370064][T11938] connmark_mt_check+0x35/0xa0 [ 369.370100][T11938] xt_check_match+0x32d/0x590 [ 369.370131][T11938] ? xt_find_match+0x1cc/0x230 [ 369.370191][T11938] translate_table+0xb12/0x10d0 [ 369.370223][T11938] do_ipt_set_ctl+0x6d0/0x8e0 [ 369.370247][T11938] ? kstrtoull+0x111/0x140 [ 369.370274][T11938] ? _raw_spin_lock_bh+0x56/0xb0 [ 369.370315][T11938] nf_setsockopt+0x199/0x1b0 [ 369.370439][T11938] ip_setsockopt+0x102/0x110 [ 369.370464][T11938] tcp_setsockopt+0x98/0xb0 [ 369.370492][T11938] sock_common_setsockopt+0x69/0x80 [ 369.370576][T11938] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 369.370620][T11938] __sys_setsockopt+0x184/0x200 [ 369.370642][T11938] __x64_sys_setsockopt+0x64/0x80 [ 369.370697][T11938] x64_sys_call+0x2327/0x3020 [ 369.370803][T11938] do_syscall_64+0x12c/0x3b0 [ 369.370828][T11938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.370851][T11938] RIP: 0033:0x7f578110cdd9 [ 369.370872][T11938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.370894][T11938] RSP: 002b:00007f577fb67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 369.371028][T11938] RAX: ffffffffffffffda RBX: 00007f5781385fa0 RCX: 00007f578110cdd9 [ 369.371044][T11938] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 369.371127][T11938] RBP: 00007f577fb67090 R08: 00000000000002c8 R09: 0000000000000000 [ 369.371143][T11938] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 369.371155][T11938] R13: 00007f5781386038 R14: 00007f5781385fa0 R15: 00007fffe08e9428 [ 369.371175][T11938] [ 369.371186][T11938] cannot load conntrack support for proto=2 [ 369.440452][T11914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.660681][T11914] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.664972][T11949] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2395'. [ 369.677956][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2384'. [ 369.701406][T11914] bridge6: entered promiscuous mode [ 369.706750][T11914] bridge6: entered allmulticast mode [ 369.714876][T11914] team0: Port device bridge6 added [ 369.722580][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 369.722674][ T28] audit: type=1400 audit(2000524499.002:1158): avc: denied { accept } for pid=11913 comm="syz.7.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 369.725053][T11944] loop6: detected capacity change from 0 to 512 [ 369.730671][T11914] bridge0: port 3(team0) entered blocking state [ 369.763071][T11914] bridge0: port 3(team0) entered disabled state [ 369.772611][T11914] team0: entered allmulticast mode [ 369.778131][T11914] team_slave_0: entered allmulticast mode [ 369.783932][T11914] team_slave_1: entered allmulticast mode [ 369.791452][T11914] team0: entered promiscuous mode [ 369.809527][T11914] team_slave_0: entered promiscuous mode [ 369.815656][T11914] team_slave_1: entered promiscuous mode [ 369.833468][T11944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.847360][T11944] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.874148][T11944] netlink: 'syz.6.2395': attribute type 4 has an invalid length. [ 369.886804][T11944] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2395'. [ 369.909124][T11944] .`: renamed from bond0 (while UP) [ 369.996822][ T7224] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.034801][T11966] FAULT_INJECTION: forcing a failure. [ 370.034801][T11966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.071307][T11966] CPU: 1 UID: 0 PID: 11966 Comm: syz.6.2400 Tainted: G W syzkaller #0 PREEMPT(full) [ 370.071349][T11966] Tainted: [W]=WARN [ 370.071358][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 370.071372][T11966] Call Trace: [ 370.071381][T11966] [ 370.071392][T11966] __dump_stack+0x1d/0x30 [ 370.071443][T11966] dump_stack_lvl+0x95/0xd0 [ 370.071463][T11966] dump_stack+0x15/0x1b [ 370.071483][T11966] should_fail_ex+0x263/0x280 [ 370.071512][T11966] should_fail+0xb/0x20 [ 370.071616][T11966] should_fail_usercopy+0x1a/0x20 [ 370.071648][T11966] _copy_from_iter+0xcf/0xea0 [ 370.071686][T11966] ? __kmalloc_large_node_noprof+0x9c/0x150 [ 370.071734][T11966] ? __kmalloc_noprof+0x2a1/0x4d0 [ 370.071788][T11966] ? bcm_tx_setup+0x363/0xde0 [ 370.071816][T11966] bcm_tx_setup+0x43a/0xde0 [ 370.071908][T11966] bcm_sendmsg+0x357/0x4a0 [ 370.071943][T11966] ? __pfx_bcm_sendmsg+0x10/0x10 [ 370.071973][T11966] ____sys_sendmsg+0x563/0x5b0 [ 370.072002][T11966] ___sys_sendmsg+0x195/0x1e0 [ 370.072115][T11966] __x64_sys_sendmsg+0xd4/0x160 [ 370.072149][T11966] x64_sys_call+0x194c/0x3020 [ 370.072174][T11966] do_syscall_64+0x12c/0x3b0 [ 370.072201][T11966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.072290][T11966] RIP: 0033:0x7f4b3888cdd9 [ 370.072307][T11966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.072324][T11966] RSP: 002b:00007f4b372df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.072399][T11966] RAX: ffffffffffffffda RBX: 00007f4b38b05fa0 RCX: 00007f4b3888cdd9 [ 370.072471][T11966] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 370.072534][T11966] RBP: 00007f4b372df090 R08: 0000000000000000 R09: 0000000000000000 [ 370.072548][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.072559][T11966] R13: 00007f4b38b06038 R14: 00007f4b38b05fa0 R15: 00007ffc26d60828 [ 370.072579][T11966] [ 370.308033][T11973] loop6: detected capacity change from 0 to 512 [ 370.339974][T11973] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 370.358007][T11973] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 370.371649][T11973] EXT4-fs (loop6): 1 truncate cleaned up [ 370.379142][T11973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.412675][T11973] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.2401: Logical block already allocated [ 370.470692][T11973] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.2401: Logical block already allocated [ 370.607597][ T7224] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.966638][T11991] loop6: detected capacity change from 0 to 512 [ 371.032246][T11991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.045397][T11991] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 371.181432][T11991] EXT4-fs error (device loop6): ext4_group_add:1738: inode #7: comm syz.6.2402: iget: checksum invalid [ 371.207001][T11991] EXT4-fs warning (device loop6): ext4_group_add:1740: Error opening resize inode [ 371.244652][ T7224] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.502743][ T8259] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.835201][T12012] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 373.205684][T12020] loop6: detected capacity change from 0 to 512 [ 373.237285][T12020] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 373.267806][T12020] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 373.296866][T12020] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.2412: bad orphan inode 4 [ 373.328057][T12020] loop6: lost filesystem error report for type 5 error -117 [ 373.328279][T12020] EXT4-fs (loop6): 1 orphan inode deleted [ 373.335745][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 373.335768][ C0] EXT4-fs (loop6): initial error at time 2000524502: ext4_orphan_get:1423 [ 373.335792][ C0] EXT4-fs (loop6): last error at time 2000524502: ext4_orphan_get:1423 [ 373.427441][T12020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.542426][T12022] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #2: block 4: comm syz.6.2412: lblock 0 mapped to illegal pblock 4 (length 1) [ 373.575694][ T7224] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.692449][T12026] netlink: 'syz.8.2413': attribute type 13 has an invalid length. [ 373.712375][T12026] netlink: 'syz.8.2413': attribute type 17 has an invalid length. [ 373.751091][T12032] loop7: detected capacity change from 0 to 512 [ 373.786300][T12032] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 373.803954][T12026] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.811084][T12026] bridge0: port 2(bridge_slave_1) entered listening state [ 373.818385][T12026] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.825556][T12026] bridge0: port 1(bridge_slave_0) entered listening state [ 373.904498][T12026] ipvlan0: left allmulticast mode [ 373.909613][T12026] veth0_vlan: left allmulticast mode [ 373.932846][T12037] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2415'. [ 373.968163][T12026] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 373.994609][ T3397] team_slave_0: entered promiscuous mode [ 374.000373][ T3397] team_slave_1: entered promiscuous mode [ 374.019198][T12032] EXT4-fs (loop7): 1 truncate cleaned up [ 374.038835][T12032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.151614][ T28] audit: type=1400 audit(2000524503.076:1159): avc: denied { mount } for pid=12030 comm="syz.7.2409" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 374.251107][T12054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=12054 comm=syz.1.2419 [ 374.360909][ T8259] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.457121][T12058] netlink: 'syz.1.2420': attribute type 36 has an invalid length. [ 374.473926][T12058] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 374.484117][T12058] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 374.505204][T12058] netlink: 'syz.1.2420': attribute type 10 has an invalid length. [ 374.514436][T12058] team0: Device ipvlan0 failed to register rx_handler [ 374.690597][ T28] audit: type=1400 audit(2000524503.564:1160): avc: denied { append } for pid=12059 comm="syz.8.2422" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 374.720627][T12060] FAULT_INJECTION: forcing a failure. [ 374.720627][T12060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.812013][T12060] CPU: 1 UID: 0 PID: 12060 Comm: syz.8.2422 Tainted: G W syzkaller #0 PREEMPT(full) [ 374.812050][T12060] Tainted: [W]=WARN [ 374.812120][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.812137][T12060] Call Trace: [ 374.812145][T12060] [ 374.812156][T12060] __dump_stack+0x1d/0x30 [ 374.812183][T12060] dump_stack_lvl+0x95/0xd0 [ 374.812210][T12060] dump_stack+0x15/0x1b [ 374.812298][T12060] should_fail_ex+0x263/0x280 [ 374.812358][T12060] should_fail+0xb/0x20 [ 374.812382][T12060] should_fail_usercopy+0x1a/0x20 [ 374.812410][T12060] _copy_to_user+0x20/0xa0 [ 374.812506][T12060] put_sg_io_hdr+0x31e/0x360 [ 374.812535][T12060] ? __schedule+0x936/0xd20 [ 374.812572][T12060] sg_new_read+0x293/0x450 [ 374.812602][T12060] sg_ioctl+0x12d9/0x1340 [ 374.812632][T12060] ? __pfx_autoremove_wake_function+0x10/0x10 [ 374.812711][T12060] ? __pfx_sg_ioctl+0x10/0x10 [ 374.812737][T12060] __se_sys_ioctl+0xce/0x140 [ 374.812776][T12060] __x64_sys_ioctl+0x43/0x50 [ 374.812884][T12060] x64_sys_call+0x1563/0x3020 [ 374.812910][T12060] do_syscall_64+0x12c/0x3b0 [ 374.812933][T12060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.812987][T12060] RIP: 0033:0x7fcdf1b0cdd9 [ 374.813069][T12060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.813087][T12060] RSP: 002b:00007fcdf055f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.813180][T12060] RAX: ffffffffffffffda RBX: 00007fcdf1d85fa0 RCX: 00007fcdf1b0cdd9 [ 374.813198][T12060] RDX: 0000200000000000 RSI: 0000000000002285 RDI: 0000000000000003 [ 374.813215][T12060] RBP: 00007fcdf055f090 R08: 0000000000000000 R09: 0000000000000000 [ 374.813240][T12060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.813256][T12060] R13: 00007fcdf1d86038 R14: 00007fcdf1d85fa0 R15: 00007ffeafcbea38 [ 374.813279][T12060] [ 375.042652][T12062] loop8: detected capacity change from 0 to 512 [ 375.052896][T12062] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 375.069286][T12062] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 375.085082][T12062] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.2424: bad orphan inode 4 [ 375.095624][T12062] loop8: lost filesystem error report for type 5 error -117 [ 375.095789][T12062] EXT4-fs (loop8): 1 orphan inode deleted [ 375.108910][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 375.108934][ C1] EXT4-fs (loop8): initial error at time 2000524503: ext4_orphan_get:1423 [ 375.108977][ C1] EXT4-fs (loop8): last error at time 2000524503: ext4_orphan_get:1423 [ 375.132913][T12062] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.211092][T12068] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #2: block 4: comm syz.8.2424: lblock 0 mapped to illegal pblock 4 (length 1) [ 375.243450][ T9408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.924734][T12099] xt_bpf: check failed: parse error [ 377.064878][ T28] audit: type=1400 audit(2000524505.747:1161): avc: denied { read } for pid=12106 comm="syz.1.2437" name="file0" dev="tmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 377.132377][T12107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12107 comm=syz.1.2437 [ 377.318903][T12108] loop1: detected capacity change from 0 to 4096 [ 377.352517][T12108] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 377.375112][T12108] System zones: 0-5 [ 377.395971][T12108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.464096][ T28] audit: type=1400 audit(2000524506.116:1162): avc: denied { mounton } for pid=12106 comm="syz.1.2437" path="/524/file3" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.502328][T12107] 9pnet_fd: p9_fd_create_unix (12107): problem connecting socket: ./file0: -111 [ 377.516525][T12117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3600 sclass=netlink_route_socket pid=12117 comm=syz.9.2436 [ 377.544635][T12119] loop8: detected capacity change from 0 to 512 [ 377.555699][T12119] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 377.599980][T12119] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 377.619212][T12119] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.2440: bad orphan inode 4 [ 377.643519][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.654488][T12119] loop8: lost filesystem error report for type 5 error -117 [ 377.654650][T12119] EXT4-fs (loop8): 1 orphan inode deleted [ 377.662034][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 377.662054][ C0] EXT4-fs (loop8): initial error at time 2000524506: ext4_orphan_get:1423 [ 377.662098][ C0] EXT4-fs (loop8): last error at time 2000524506: ext4_orphan_get:1423 [ 377.694351][T12117] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 377.709772][T12119] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.937960][T12119] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #2: block 4: comm syz.8.2440: lblock 0 mapped to illegal pblock 4 (length 1) [ 377.980215][ T9408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.089545][ T28] audit: type=1400 audit(2000524507.628:1163): avc: denied { write } for pid=12141 comm="syz.1.2447" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 379.168836][T12146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12146 comm=syz.9.2448 [ 379.266705][T12151] FAULT_INJECTION: forcing a failure. [ 379.266705][T12151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 379.290409][T12151] CPU: 1 UID: 0 PID: 12151 Comm: syz.1.2450 Tainted: G W syzkaller #0 PREEMPT(full) [ 379.290481][T12151] Tainted: [W]=WARN [ 379.290488][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 379.290503][T12151] Call Trace: [ 379.290513][T12151] [ 379.290523][T12151] __dump_stack+0x1d/0x30 [ 379.290552][T12151] dump_stack_lvl+0x95/0xd0 [ 379.290623][T12151] dump_stack+0x15/0x1b [ 379.290650][T12151] should_fail_ex+0x263/0x280 [ 379.290685][T12151] should_fail_alloc_page+0xf2/0x100 [ 379.290727][T12151] alloc_pages_bulk_noprof+0x101/0x560 [ 379.290761][T12151] copy_splice_read+0xf3/0x6c0 [ 379.290867][T12151] ? __pfx_copy_splice_read+0x10/0x10 [ 379.290983][T12151] splice_direct_to_actor+0x26e/0x670 [ 379.291026][T12151] ? __pfx_direct_splice_actor+0x10/0x10 [ 379.291074][T12151] do_splice_direct+0x119/0x1a0 [ 379.291132][T12151] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 379.291156][T12151] do_sendfile+0x382/0x650 [ 379.291186][T12151] __x64_sys_sendfile64+0x105/0x150 [ 379.291262][T12151] x64_sys_call+0x2dc4/0x3020 [ 379.291348][T12151] do_syscall_64+0x12c/0x3b0 [ 379.291407][T12151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.291432][T12151] RIP: 0033:0x7f578110cdd9 [ 379.291447][T12151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.291470][T12151] RSP: 002b:00007f577fb46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 379.291495][T12151] RAX: ffffffffffffffda RBX: 00007f5781386090 RCX: 00007f578110cdd9 [ 379.291511][T12151] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 379.291576][T12151] RBP: 00007f577fb46090 R08: 0000000000000000 R09: 0000000000000000 [ 379.291593][T12151] R10: 000000000000ffdf R11: 0000000000000246 R12: 0000000000000001 [ 379.291609][T12151] R13: 00007f5781386128 R14: 00007f5781386090 R15: 00007fffe08e9428 [ 379.291688][T12151] [ 379.486277][T12153] netlink: 'syz.9.2451': attribute type 36 has an invalid length. [ 379.497447][T12153] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 379.507410][T12153] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 379.519457][T12152] netlink: 'syz.9.2451': attribute type 10 has an invalid length. [ 379.528538][T12152] team0: Device ipvlan0 failed to register rx_handler [ 379.705589][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2453'. [ 379.828828][T12161] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2454'. [ 379.924670][T12167] loop1: detected capacity change from 0 to 2048 [ 379.932123][ T28] audit: type=1400 audit(2000524508.383:1164): avc: denied { block_suspend } for pid=12166 comm="syz.1.2457" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 380.080240][T12167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.107743][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.156155][T12179] loop6: detected capacity change from 0 to 512 [ 380.178009][T12179] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2461: inode has both inline data and extents flags [ 380.191701][T12179] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 380.191872][T12179] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2461: couldn't read orphan inode 15 (err -117) [ 380.201088][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 380.201106][ C1] EXT4-fs (loop6): initial error at time 2000524508: ext4_orphan_get:1397: inode 15 [ 380.201153][ C1] EXT4-fs (loop6): last error at time 2000524508: ext4_orphan_get:1397: inode 15 [ 380.238756][T12179] loop6: lost filesystem error report for type 5 error -117 [ 380.239370][T12179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.272794][ T7224] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.450497][T12184] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2458'. [ 380.468422][T12184] loop7: detected capacity change from 0 to 512 [ 380.531606][ T1038] IPVS: starting estimator thread 0... [ 380.539607][T12184] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.7.2458: corrupted xattr block 95: invalid header [ 380.553588][T12184] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 380.562301][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 380.577939][ C0] EXT4-fs (loop7): initial error at time 2000524508: ext4_expand_extra_isize_ea:2810: inode 11 [ 380.588373][ C0] EXT4-fs (loop7): last error at time 2000524508: ext4_expand_extra_isize_ea:2810: inode 11 [ 380.607718][T12184] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2458: bg 0: block 7: invalid block bitmap [ 380.620284][T12184] loop7: lost filesystem error report for type 5 error -117 [ 380.620767][T12184] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 380.636797][T12184] loop7: lost filesystem error report for type 5 error -117 [ 380.637354][T12184] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2972: inode #11: comm syz.7.2458: corrupted xattr block 95: invalid header [ 380.658213][T12184] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 380.659984][T12184] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 380.678344][T12184] EXT4-fs (loop7): 1 orphan inode deleted [ 380.685038][T12184] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.731607][T12185] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2462'. [ 380.757720][T12186] IPVS: using max 2544 ests per chain, 127200 per kthread [ 380.826420][T12190] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 380.844963][T12188] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2462'. [ 382.321276][T12208] netlink: 764 bytes leftover after parsing attributes in process `syz.6.2468'. [ 382.340620][ T8259] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.372132][T12208] netlink: 'syz.6.2468': attribute type 1 has an invalid length. [ 382.411520][ T28] audit: type=1400 audit(2000524510.688:1165): avc: denied { write } for pid=12212 comm="syz.1.2470" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 382.473803][T12218] FAULT_INJECTION: forcing a failure. [ 382.473803][T12218] name failslab, interval 1, probability 0, space 0, times 0 [ 382.509280][T12216] loop9: detected capacity change from 0 to 512 [ 382.550375][T12218] CPU: 0 UID: 0 PID: 12218 Comm: syz.7.2467 Tainted: G W syzkaller #0 PREEMPT(full) [ 382.550410][T12218] Tainted: [W]=WARN [ 382.550417][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.550430][T12218] Call Trace: [ 382.550437][T12218] [ 382.550445][T12218] __dump_stack+0x1d/0x30 [ 382.550540][T12218] dump_stack_lvl+0x95/0xd0 [ 382.550561][T12218] dump_stack+0x15/0x1b [ 382.550581][T12218] should_fail_ex+0x263/0x280 [ 382.550632][T12218] should_failslab+0x8c/0xb0 [ 382.550739][T12218] __kvmalloc_node_noprof+0x155/0x640 [ 382.550768][T12218] ? file_tty_write+0x1a3/0x680 [ 382.550803][T12218] ? mutex_trylock+0x81/0xc0 [ 382.550857][T12218] file_tty_write+0x1a3/0x680 [ 382.550886][T12218] ? __pfx_tty_write+0x10/0x10 [ 382.550920][T12218] tty_write+0x25/0x30 [ 382.551026][T12218] vfs_write+0x5a6/0x9f0 [ 382.551064][T12218] ksys_write+0xdc/0x1a0 [ 382.551096][T12218] __x64_sys_write+0x40/0x50 [ 382.551198][T12218] x64_sys_call+0x27e1/0x3020 [ 382.551224][T12218] do_syscall_64+0x12c/0x3b0 [ 382.551248][T12218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.551312][T12218] RIP: 0033:0x7f70a550cdd9 [ 382.551328][T12218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.551360][T12218] RSP: 002b:00007f70a3f67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.551381][T12218] RAX: ffffffffffffffda RBX: 00007f70a5785fa0 RCX: 00007f70a550cdd9 [ 382.551395][T12218] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 382.551413][T12218] RBP: 00007f70a3f67090 R08: 0000000000000000 R09: 0000000000000000 [ 382.551497][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.551508][T12218] R13: 00007f70a5786038 R14: 00007f70a5785fa0 R15: 00007ffed79a9978 [ 382.551527][T12218] [ 382.568645][T12216] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2472: inode has both inline data and extents flags [ 382.568677][T12216] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 382.568798][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 382.568818][ C0] EXT4-fs (loop9): initial error at time 2000524510: ext4_orphan_get:1397: inode 15 [ 382.568854][ C0] EXT4-fs (loop9): last error at time 2000524510: ext4_orphan_get:1397: inode 15 [ 382.569422][T12216] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2472: couldn't read orphan inode 15 (err -117) [ 382.569448][T12216] loop9: lost filesystem error report for type 5 error -117 [ 382.575985][T12216] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.628030][ T9413] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.687120][T12231] netlink: 'syz.1.2474': attribute type 36 has an invalid length. [ 382.746459][T12228] netlink: 'syz.1.2474': attribute type 10 has an invalid length. [ 382.761458][T12231] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 382.895023][T12231] bridge22: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 382.906314][T12228] team0: Device ipvlan0 failed to register rx_handler [ 382.992678][T12239] loop9: detected capacity change from 0 to 128 [ 383.009673][T12239] FAT-fs (loop9): bogus number of reserved sectors [ 383.016231][T12239] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 383.025539][T12239] FAT-fs (loop9): Can't find a valid FAT filesystem [ 383.067790][T12239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12239 comm=syz.9.2476 [ 383.086791][T12239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12239 comm=syz.9.2476 [ 383.130112][T12245] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2480'. [ 383.210131][ T28] audit: type=1400 audit(2000524511.408:1166): avc: denied { setopt } for pid=12244 comm="syz.6.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 383.282620][T12253] FAULT_INJECTION: forcing a failure. [ 383.282620][T12253] name failslab, interval 1, probability 0, space 0, times 0 [ 383.303199][T12253] CPU: 0 UID: 0 PID: 12253 Comm: syz.6.2483 Tainted: G W syzkaller #0 PREEMPT(full) [ 383.303293][T12253] Tainted: [W]=WARN [ 383.303300][T12253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 383.303315][T12253] Call Trace: [ 383.303323][T12253] [ 383.303333][T12253] __dump_stack+0x1d/0x30 [ 383.303363][T12253] dump_stack_lvl+0x95/0xd0 [ 383.303429][T12253] dump_stack+0x15/0x1b [ 383.303448][T12253] should_fail_ex+0x263/0x280 [ 383.303482][T12253] should_failslab+0x8c/0xb0 [ 383.303512][T12253] kmem_cache_alloc_noprof+0x66/0x3f0 [ 383.303549][T12253] ? dst_alloc+0xbd/0x100 [ 383.303573][T12253] dst_alloc+0xbd/0x100 [ 383.303683][T12253] ? ip_vs_sip_ct_match+0xe2/0x360 [ 383.303718][T12253] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 383.303758][T12253] ip_route_output_flow+0x65/0x110 [ 383.303827][T12253] udp_sendmsg+0x1308/0x1500 [ 383.303867][T12253] ? __rcu_read_unlock+0x4e/0x70 [ 383.303887][T12253] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 383.303915][T12253] ? __pfx_udp_sendmsg+0x10/0x10 [ 383.304024][T12253] inet_sendmsg+0xac/0xd0 [ 383.304097][T12253] ? __pfx_inet_sendmsg+0x10/0x10 [ 383.304199][T12253] ____sys_sendmsg+0x519/0x5b0 [ 383.304252][T12253] ___sys_sendmsg+0x195/0x1e0 [ 383.304276][T12253] ? path_openat+0x1b01/0x2050 [ 383.304330][T12253] __sys_sendmmsg+0x185/0x320 [ 383.304365][T12253] __x64_sys_sendmmsg+0x57/0x70 [ 383.304387][T12253] x64_sys_call+0x27aa/0x3020 [ 383.304449][T12253] do_syscall_64+0x12c/0x3b0 [ 383.304472][T12253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.304557][T12253] RIP: 0033:0x7f4b3888cdd9 [ 383.304641][T12253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.304660][T12253] RSP: 002b:00007f4b372df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 383.304739][T12253] RAX: ffffffffffffffda RBX: 00007f4b38b05fa0 RCX: 00007f4b3888cdd9 [ 383.304753][T12253] RDX: 0000000000000002 RSI: 0000200000002140 RDI: 0000000000000003 [ 383.304766][T12253] RBP: 00007f4b372df090 R08: 0000000000000000 R09: 0000000000000000 [ 383.304781][T12253] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 383.304796][T12253] R13: 00007f4b38b06038 R14: 00007f4b38b05fa0 R15: 00007ffc26d60828 [ 383.304880][T12253] [ 383.635972][T12265] loop6: detected capacity change from 0 to 512 [ 383.664089][ T28] audit: type=1400 audit(2000524511.841:1167): avc: denied { read } for pid=12262 comm="syz.1.2486" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 383.694422][T12263] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 383.699561][T12265] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2487: inode has both inline data and extents flags [ 383.718184][T12265] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 383.718392][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 383.734021][ C0] EXT4-fs (loop6): initial error at time 2000524511: ext4_orphan_get:1397: inode 15 [ 383.743497][ C0] EXT4-fs (loop6): last error at time 2000524511: ext4_orphan_get:1397: inode 15 [ 383.752791][T12265] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2487: couldn't read orphan inode 15 (err -117) [ 383.764757][T12265] loop6: lost filesystem error report for type 5 error -117 [ 383.764878][T12263] SELinux: failed to load policy [ 383.765661][T12265] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.772631][T12259] loop9: detected capacity change from 0 to 1024 [ 383.796241][ T28] audit: type=1400 audit(2000524511.841:1168): avc: denied { open } for pid=12262 comm="syz.1.2486" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 383.824004][T12259] EXT4-fs: Ignoring removed bh option [ 383.843126][T12259] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 383.854270][ T7224] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.860038][ T28] audit: type=1400 audit(2000524511.841:1169): avc: denied { ioctl } for pid=12262 comm="syz.1.2486" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 383.889004][T12259] EXT4-fs (loop9): orphan cleanup on readonly fs [ 383.895434][T12259] EXT4-fs error (device loop9): ext4_quota_enable:7221: comm syz.9.2484: Bad quota inum: 4294934528, type: 0 [ 383.907647][T12259] loop9: lost filesystem error report for type 5 error -117 [ 383.907761][ T28] audit: type=1400 audit(2000524511.869:1170): avc: denied { load_policy } for pid=12262 comm="syz.1.2486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 383.935403][T12259] EXT4-fs (loop9): Remounting filesystem read-only [ 383.941954][T12259] EXT4-fs warning (device loop9): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 383.959731][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 383.966260][ C1] EXT4-fs (loop9): initial error at time 2000524512: ext4_quota_enable:7221 [ 383.974986][ C1] EXT4-fs (loop9): last error at time 2000524512: ext4_quota_enable:7221 [ 383.985994][T12259] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 383.994238][T12259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.093019][T12277] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2491'. [ 384.166882][T12286] loop7: detected capacity change from 0 to 128 [ 384.201902][T12286] FAT-fs (loop7): bogus number of reserved sectors [ 384.208482][T12286] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 384.218249][T12286] FAT-fs (loop7): Can't find a valid FAT filesystem [ 384.245491][T12286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12286 comm=syz.7.2492 [ 384.258650][T12286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12286 comm=syz.7.2492 [ 384.381637][T12259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.422085][T12289] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 384.450566][T12259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.792581][ T360] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.844703][ T360] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.968661][ T360] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.034721][T12296] loop6: detected capacity change from 0 to 128 [ 385.043272][T12296] FAT-fs (loop6): bogus number of reserved sectors [ 385.062106][T12296] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 385.089640][ T9413] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.281988][T12296] FAT-fs (loop6): Can't find a valid FAT filesystem [ 385.304918][ T360] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.581639][T12296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12296 comm=syz.6.2494 [ 385.765198][T12305] netlink: 'syz.1.2496': attribute type 36 has an invalid length. [ 385.776274][T12305] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 385.786224][T12305] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 385.797718][T12305] netlink: 'syz.1.2496': attribute type 10 has an invalid length. [ 385.805978][T12305] team0: Device ipvlan0 failed to register rx_handler [ 385.852160][T12296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12296 comm=syz.6.2494 [ 385.992597][T12311] loop6: detected capacity change from 0 to 512 [ 386.036394][T12311] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2498: inode has both inline data and extents flags [ 386.067038][T12311] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 386.070553][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 386.086206][ C1] EXT4-fs (loop6): initial error at time 2000524513: ext4_orphan_get:1397: inode 15 [ 386.095664][ C1] EXT4-fs (loop6): last error at time 2000524513: ext4_orphan_get:1397: inode 15 [ 386.111308][T12311] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2498: couldn't read orphan inode 15 (err -117) [ 386.126071][T12311] loop6: lost filesystem error report for type 5 error -117 [ 386.126568][T12311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.148887][T12316] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2499'. [ 386.194499][ T7224] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.346588][ T28] audit: type=1400 audit(2000524513.977:1171): avc: denied { execute } for pid=12322 comm="syz.7.2502" name="file0" dev="tmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 387.408312][T12336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2504'. [ 387.644701][T12336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12336 comm=syz.1.2504 [ 388.421344][T12332] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 388.456857][T12334] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 388.557099][T12341] loop9: detected capacity change from 0 to 2048 [ 388.567790][ T28] audit: type=1400 audit(2000524515.809:1172): avc: denied { execute_no_trans } for pid=12338 comm="syz.7.2505" path="/191/file0" dev="tmpfs" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 388.601854][T12339] loop7: detected capacity change from 0 to 512 [ 388.610582][T12341] loop9: p1 < > p2 p3 < > p4 < p5 > [ 388.616761][T12341] loop9: partition table partially beyond EOD, truncated [ 388.624453][T12341] loop9: p1 start 3405774849 is beyond EOD, truncated [ 388.837153][T12341] loop9: p3 start 4225 is beyond EOD, truncated [ 388.895274][ T3531] udevd[3531]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 388.906645][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 388.917912][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 388.946121][T12348] loop9: detected capacity change from 0 to 512 [ 389.006774][T12348] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 389.179501][T12348] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 389.220194][T12348] EXT4-fs (loop9): 1 truncate cleaned up [ 389.235861][T12348] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.299712][T12348] EXT4-fs error (device loop9): ext4_append:79: inode #2: comm syz.9.2508: Logical block already allocated [ 389.337293][T12348] EXT4-fs error (device loop9): ext4_append:79: inode #2: comm syz.9.2508: Logical block already allocated [ 389.375003][ T9413] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.413983][T12360] loop1: detected capacity change from 0 to 8192 [ 389.489841][T12339] Quota error (device loop7): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 389.503999][T12339] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 389.519316][T12339] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2505: Failed to acquire dquot type 1 [ 389.544077][T12339] loop7: lost filesystem error report for type 5 error -117 [ 389.547485][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 389.561331][ C1] EXT4-fs (loop7): initial error at time 2000524516: ext4_acquire_dquot:7034 [ 389.570148][ C1] EXT4-fs (loop7): last error at time 2000524516: ext4_acquire_dquot:7034 [ 389.776406][T12339] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.2505: corrupted inode contents [ 389.793082][T12339] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 389.803873][T12339] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #16: comm syz.7.2505: mark_inode_dirty error [ 389.828787][T12339] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 389.854657][T12339] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.2505: corrupted inode contents [ 389.884119][T12339] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 389.898270][T12339] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.2505: mark_inode_dirty error [ 389.920653][T12339] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 389.924741][T12339] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.2505: corrupted inode contents [ 389.950819][T12339] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 389.956702][T12339] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 389.974772][T12360] loop1: p1 < > p2 p4 < p5 > [ 389.979158][T12339] loop7: lost filesystem error report for type 5 error -117 [ 389.979951][T12364] loop6: detected capacity change from 0 to 128 [ 389.993669][T12360] loop1: partition table partially beyond EOD, truncated [ 390.001704][T12364] FAT-fs (loop6): bogus number of reserved sectors [ 390.008252][T12364] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 390.025061][T12366] loop9: detected capacity change from 0 to 512 [ 390.033201][T12364] FAT-fs (loop6): Can't find a valid FAT filesystem [ 390.039074][T12360] loop1: p1 start 134217728 is beyond EOD, truncated [ 390.051487][T12364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12364 comm=syz.6.2512 [ 390.059582][T12366] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2511: inode has both inline data and extents flags [ 390.093361][T12364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12364 comm=syz.6.2512 [ 390.106984][T12366] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 390.107516][T12366] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2511: couldn't read orphan inode 15 (err -117) [ 390.120837][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 390.120860][ C0] EXT4-fs (loop9): initial error at time 2000524517: ext4_orphan_get:1397: inode 15 [ 390.120895][ C0] EXT4-fs (loop9): last error at time 2000524517: ext4_orphan_get:1397: inode 15 [ 390.173376][T12360] loop1: p2 size 591360 extends beyond EOD, truncated [ 390.195626][T12366] loop9: lost filesystem error report for type 5 error -117 [ 390.218851][T12370] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 390.236690][T12360] loop1: p5 size 591360 extends beyond EOD, truncated [ 390.244494][T12366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.265380][T12339] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.2505: corrupted inode contents [ 390.300251][T12339] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 390.304000][T12339] EXT4-fs error (device loop7): ext4_truncate:4690: inode #16: comm syz.7.2505: mark_inode_dirty error [ 390.355753][ T9413] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.551294][T12382] netlink: 'syz.8.2514': attribute type 36 has an invalid length. [ 390.562193][T12382] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 390.572069][T12382] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 390.583531][T12382] netlink: 'syz.8.2514': attribute type 10 has an invalid length. [ 390.591681][T12382] ipvlan0: entered allmulticast mode [ 390.596996][T12382] veth0_vlan: entered allmulticast mode [ 390.605242][T12382] team0: Device ipvlan0 failed to register rx_handler [ 390.707332][T12384] loop9: detected capacity change from 0 to 8192 [ 390.719404][T12384] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 390.761944][T12384] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2518'. [ 390.786789][ T28] audit: type=1400 audit(2000524517.682:1173): avc: denied { mounton } for pid=12383 comm="syz.9.2518" path="/158/file1/bus" dev="loop9" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 390.819169][T12339] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 390.823291][T12339] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 390.841853][T12339] loop7: lost filesystem error report for type 5 error -117 [ 390.842314][T12339] EXT4-fs (loop7): 1 truncate cleaned up [ 390.856746][T12339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.873316][T12339] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.885478][T12339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.078742][T12387] syzkaller1: entered promiscuous mode [ 391.084784][T12387] syzkaller1: entered allmulticast mode [ 391.095755][ T28] audit: type=1400 audit(2000524517.969:1174): avc: denied { append } for pid=12386 comm="syz.7.2521" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.290364][ T5219] bridge_slave_1: left allmulticast mode [ 391.296197][T12396] loop6: detected capacity change from 0 to 128 [ 391.296457][ T5219] bridge_slave_1: left promiscuous mode [ 391.313656][T12396] FAT-fs (loop6): bogus number of reserved sectors [ 391.318630][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.333307][T12396] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 391.342723][T12396] FAT-fs (loop6): Can't find a valid FAT filesystem [ 391.343378][ T5219] bridge_slave_0: left allmulticast mode [ 391.355167][ T5219] bridge_slave_0: left promiscuous mode [ 391.360976][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.375206][T12396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12396 comm=syz.6.2523 [ 391.388439][T12396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12396 comm=syz.6.2523 [ 391.415508][ T5219] dvmrp1: left allmulticast mode [ 392.024912][ T5219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.034723][ T5219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.044728][ T5219] bond0 (unregistering): Released all slaves [ 392.099850][T12415] veth0_vlan: left promiscuous mode [ 392.117446][T12415] veth0_vlan: entered promiscuous mode [ 392.195305][T12414] ipip0: entered promiscuous mode [ 392.284094][ T5219] hsr_slave_0: left promiscuous mode [ 392.295554][ T5219] hsr_slave_1: left promiscuous mode [ 392.301562][ T5219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.309535][ T5219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.354684][ T5219] team0 (unregistering): Port device team_slave_1 removed [ 392.370561][ T5219] team0 (unregistering): Port device team_slave_0 removed [ 392.458968][T12432] program syz.8.2532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.483126][T12433] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 393.261448][T12388] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.397705][T12388] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.409260][T12388] bridge_slave_0: entered allmulticast mode [ 393.425511][T12388] bridge_slave_0: entered promiscuous mode [ 394.166657][T12463] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 394.267987][T12388] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.305293][T12388] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.329761][T12388] bridge_slave_1: entered allmulticast mode [ 394.347020][T12388] bridge_slave_1: entered promiscuous mode [ 394.776752][T12466] netlink: 'syz.1.2535': attribute type 36 has an invalid length. [ 394.788062][T12466] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 394.798006][T12466] bridge24: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 394.810097][T12466] netlink: 'syz.1.2535': attribute type 10 has an invalid length. [ 394.819109][T12466] team0: Device ipvlan0 failed to register rx_handler [ 394.841774][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 394.865905][T12388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.876836][T12388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.930915][T12388] team0: Port device team_slave_0 added [ 394.938803][T12388] team0: Port device team_slave_1 added [ 394.979471][T12388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.994360][T12388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.036661][T12388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.061279][T12388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.068551][T12388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.119928][T12388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.195768][T12388] hsr_slave_0: entered promiscuous mode [ 395.209806][T12388] hsr_slave_1: entered promiscuous mode [ 395.222659][T12388] debugfs: 'hsr0' already exists in 'hsr' [ 395.237465][T12388] Cannot create hsr debugfs directory [ 395.244921][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 395.448247][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 395.740705][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 395.935391][T12529] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 396.170894][T12531] FAULT_INJECTION: forcing a failure. [ 396.170894][T12531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.283942][T12531] CPU: 1 UID: 0 PID: 12531 Comm: syz.8.2540 Tainted: G W syzkaller #0 PREEMPT(full) [ 396.283974][T12531] Tainted: [W]=WARN [ 396.283984][T12531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.284015][T12531] Call Trace: [ 396.284023][T12531] [ 396.284032][T12531] __dump_stack+0x1d/0x30 [ 396.284063][T12531] dump_stack_lvl+0x95/0xd0 [ 396.284086][T12531] dump_stack+0x15/0x1b [ 396.284107][T12531] should_fail_ex+0x263/0x280 [ 396.284199][T12531] should_fail+0xb/0x20 [ 396.284229][T12531] should_fail_usercopy+0x1a/0x20 [ 396.284304][T12531] _copy_to_iter+0xd2/0xea0 [ 396.284342][T12531] ? chacha_block_generic+0x2dc/0x310 [ 396.284386][T12531] get_random_bytes_user+0x138/0x2b0 [ 396.284484][T12531] ? ktime_get_update_offsets_now+0x320/0x340 [ 396.284535][T12531] ? import_ubuf+0xe8/0x120 [ 396.284648][T12531] __x64_sys_getrandom+0xcf/0x1a0 [ 396.284671][T12531] x64_sys_call+0x2a28/0x3020 [ 396.284703][T12531] do_syscall_64+0x12c/0x3b0 [ 396.284764][T12531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.284790][T12531] RIP: 0033:0x7fcdf1b0cdd9 [ 396.284823][T12531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.284854][T12531] RSP: 002b:00007fcdf055f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 396.284905][T12531] RAX: ffffffffffffffda RBX: 00007fcdf1d85fa0 RCX: 00007fcdf1b0cdd9 [ 396.284922][T12531] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 396.284939][T12531] RBP: 00007fcdf055f090 R08: 0000000000000000 R09: 0000000000000000 [ 396.284979][T12531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.284991][T12531] R13: 00007fcdf1d86038 R14: 00007fcdf1d85fa0 R15: 00007ffeafcbea38 [ 396.285011][T12531] [ 396.746253][T12388] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 396.921830][T12388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.986672][T12388] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.512259][T12388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.524319][T12388] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.533599][T12388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.557285][ T28] audit: type=1326 audit(2000524522.786:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1b0cdd9 code=0x7ffc0000 [ 397.585070][T12388] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.601892][T12388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.648207][ T28] audit: type=1326 audit(2000524522.786:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1b0cdd9 code=0x7ffc0000 [ 397.749841][T12388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.756604][ T28] audit: type=1326 audit(2000524522.786:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1b0cdd9 code=0x7ffc0000 [ 397.797980][T12388] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.825518][ T28] audit: type=1326 audit(2000524522.795:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1b0cdd9 code=0x7ffc0000 [ 397.863538][T12388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.878943][T12388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.891924][ T28] audit: type=1326 audit(2000524523.295:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1b0cdd9 code=0x7ffc0000 [ 397.946608][ T28] audit: type=1326 audit(2000524523.277:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcdf1b0cdd9 code=0x7ffc0000 [ 397.970427][ T28] audit: type=1326 audit(2000524523.339:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1b0cdd9 code=0x7ffc0000 [ 397.996891][ T28] audit: type=1326 audit(2000524523.339:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1b0cdd9 code=0x7ffc0000 [ 398.020974][ T28] audit: type=1326 audit(2000524523.339:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf1b0cdd9 code=0x7ffc0000 [ 398.048373][ T28] audit: type=1326 audit(2000524523.339:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.8.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcdf1b0cdd9 code=0x7ffc0000 [ 398.107928][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.115151][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.258686][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.265988][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.374548][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'. [ 398.938910][T12603] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 399.292533][T12388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.300303][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2543'. [ 399.433340][T12625] loop1: detected capacity change from 0 to 4096 [ 399.465248][T12625] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 399.586706][T12388] veth0_vlan: entered promiscuous mode [ 399.607026][T12388] veth1_vlan: entered promiscuous mode [ 399.632066][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 399.649128][T12388] veth0_macvtap: entered promiscuous mode [ 399.655240][T12635] netlink: 'syz.1.2549': attribute type 30 has an invalid length. [ 399.665770][T12388] veth1_macvtap: entered promiscuous mode [ 399.671925][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'. [ 399.687015][T12388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.730588][T12388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.801448][ T5866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.834393][ T5866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.901198][ T5866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.932488][ T5866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.290296][T12677] netlink: 'syz.8.2558': attribute type 36 has an invalid length. [ 401.300064][T12676] loop1: detected capacity change from 0 to 512 [ 401.327554][T12676] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 401.347407][T12678] netlink: 'syz.8.2558': attribute type 10 has an invalid length. [ 401.505959][T12677] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 401.515901][T12677] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 401.528569][T12678] team0: Device ipvlan0 failed to register rx_handler [ 402.225132][ T36] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 402.274587][T12734] 9p: Bad value for 'rfdno' [ 402.609902][T12748] loop4: detected capacity change from 0 to 512 [ 403.100269][T12746] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 403.227936][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 403.231277][ T28] audit: type=1400 audit(2000524527.960:1254): avc: denied { write } for pid=12743 comm="syz.6.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 403.424256][T12748] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 403.494307][T12748] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2568: corrupted in-inode xattr: bad e_name length [ 403.572146][T12748] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 403.576329][T12754] veth0_vlan: left promiscuous mode [ 403.591255][T12754] veth0_vlan: entered promiscuous mode [ 403.596866][T12748] EXT4-fs (loop4): get orphan inode failed [ 403.602853][T12748] EXT4-fs (loop4): mount failed [ 403.741872][T12762] loop6: detected capacity change from 0 to 512 [ 403.764292][T12762] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 404.362134][T12804] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2571'. [ 404.385828][ T2793] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 404.478873][T12813] netlink: 'syz.4.2573': attribute type 36 has an invalid length. [ 404.490372][T12813] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 404.500265][T12813] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 404.511685][T12813] netlink: 'syz.4.2573': attribute type 10 has an invalid length. [ 404.519559][T12813] ipvlan0: entered allmulticast mode [ 404.524879][T12813] veth0_vlan: entered allmulticast mode [ 404.531838][T12813] team0: Device ipvlan0 failed to register rx_handler [ 404.602492][T12820] loop1: detected capacity change from 0 to 512 [ 404.632048][T12820] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 404.669139][T12820] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 404.681982][T12820] EXT4-fs (loop1): 1 truncate cleaned up [ 404.691896][T12820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.729340][ T28] audit: type=1400 audit(2000524529.815:1255): avc: denied { bind } for pid=12832 comm="syz.4.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 404.779227][T12820] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.2575: Logical block already allocated [ 404.810103][T12820] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.2575: Logical block already allocated [ 404.836950][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.306826][T12836] ipip1: entered promiscuous mode [ 405.903862][T12875] raw_sendmsg: syz.4.2582 forgot to set AF_INET. Fix it! [ 405.934361][T12875] loop4: detected capacity change from 0 to 512 [ 405.945641][T12879] loop1: detected capacity change from 0 to 512 [ 405.968281][T12879] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 405.988757][T12875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.031825][T12873] veth0_vlan: left promiscuous mode [ 406.037589][T12873] veth0_vlan: entered promiscuous mode [ 406.047744][T12875] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.051327][T12879] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 406.083702][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 406.090218][ C1] EXT4-fs (loop1): initial error at time 2000524531: ext4_mb_generate_buddy:1317 [ 406.099435][ C1] EXT4-fs (loop1): last error at time 2000524531: ext4_mb_generate_buddy:1317 [ 406.111763][ T28] audit: type=1400 audit(2000524531.089:1256): avc: denied { read } for pid=12888 comm="syz.7.2584" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 406.136651][ T28] audit: type=1400 audit(2000524531.117:1257): avc: denied { open } for pid=12888 comm="syz.7.2584" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 406.162950][T12879] Quota error (device loop1): write_blk: dquota write failed [ 406.187628][T12879] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 406.203707][T12879] Quota error (device loop1): write_blk: dquota write failed [ 406.221778][T12879] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 406.250494][T12893] netlink: 884 bytes leftover after parsing attributes in process `syz.8.2585'. [ 406.261862][T12879] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.2583: Failed to acquire dquot type 1 [ 406.273988][T12879] loop1: lost filesystem error report for type 5 error -28 [ 406.274265][T12879] EXT4-fs (loop1): 1 truncate cleaned up [ 406.274770][T12893] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2585'. [ 406.286827][T12879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.300687][T12893] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2585'. [ 406.331262][T12894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=12894 comm=syz.8.2585 [ 406.363209][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2583'. [ 406.372875][T12879] sctp: [Deprecated]: syz.1.2583 (pid 12879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 406.372875][T12879] Use struct sctp_sack_info instead [ 406.415407][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.568110][T12900] netlink: 'syz.1.2586': attribute type 36 has an invalid length. [ 406.596605][T12900] bridge25: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 406.627297][T12900] bridge25: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 406.648318][T12904] netlink: 'syz.1.2586': attribute type 10 has an invalid length. [ 406.683261][T12904] team0: Device ipvlan0 failed to register rx_handler [ 406.726098][ T28] audit: type=1400 audit(2000524531.649:1258): avc: denied { bind } for pid=12906 comm="syz.8.2590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 406.768007][T12388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.813658][T12907] loop8: detected capacity change from 0 to 512 [ 406.838568][T12907] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.2590: inode has both inline data and extents flags [ 406.883155][T12907] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 406.883910][T12907] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2590: couldn't read orphan inode 15 (err -117) [ 406.893164][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 406.893183][ C1] EXT4-fs (loop8): initial error at time 2000524531: ext4_orphan_get:1397: inode 15 [ 406.893224][ C1] EXT4-fs (loop8): last error at time 2000524531: ext4_orphan_get:1397: inode 15 [ 406.931024][T12907] loop8: lost filesystem error report for type 5 error -117 [ 406.932072][T12907] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.953319][T12907] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.141546][T12915] veth0_vlan: left promiscuous mode [ 407.148001][T12915] veth0_vlan: entered promiscuous mode [ 407.230366][T12917] veth0_vlan: left promiscuous mode [ 407.250301][T12917] veth0_vlan: entered promiscuous mode [ 407.337410][T12921] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2596'. [ 407.362333][T12921] netlink: zone id is out of range [ 407.375609][T12921] netlink: zone id is out of range [ 407.411268][T12921] netlink: set zone limit has 8 unknown bytes [ 407.966869][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 407.974030][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 408.529561][T12939] FAULT_INJECTION: forcing a failure. [ 408.529561][T12939] name failslab, interval 1, probability 0, space 0, times 0 [ 408.542429][T12939] CPU: 1 UID: 0 PID: 12939 Comm: syz.7.2601 Tainted: G W syzkaller #0 PREEMPT(full) [ 408.542469][T12939] Tainted: [W]=WARN [ 408.542476][T12939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 408.542489][T12939] Call Trace: [ 408.542495][T12939] [ 408.542509][T12939] __dump_stack+0x1d/0x30 [ 408.542533][T12939] dump_stack_lvl+0x95/0xd0 [ 408.542556][T12939] dump_stack+0x15/0x1b [ 408.542580][T12939] should_fail_ex+0x263/0x280 [ 408.542615][T12939] should_failslab+0x8c/0xb0 [ 408.542724][T12939] __kvmalloc_node_noprof+0x155/0x640 [ 408.542744][T12939] ? xt_alloc_entry_offsets+0x4d/0x60 [ 408.542770][T12939] xt_alloc_entry_offsets+0x4d/0x60 [ 408.542808][T12939] translate_table+0xa8/0x10d0 [ 408.542865][T12939] ? __memcg_slab_post_alloc_hook+0x34f/0x7d0 [ 408.542896][T12939] ? should_fail_ex+0xd9/0x280 [ 408.542956][T12939] ? _copy_from_user+0x89/0xb0 [ 408.542998][T12939] do_ipt_set_ctl+0x6d0/0x8e0 [ 408.543100][T12939] ? kstrtoull+0x111/0x140 [ 408.543128][T12939] ? _raw_spin_lock_bh+0x56/0xb0 [ 408.543169][T12939] nf_setsockopt+0x199/0x1b0 [ 408.543282][T12939] ip_setsockopt+0x102/0x110 [ 408.543304][T12939] tcp_setsockopt+0x98/0xb0 [ 408.543332][T12939] sock_common_setsockopt+0x69/0x80 [ 408.543370][T12939] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 408.543460][T12939] __sys_setsockopt+0x184/0x200 [ 408.543549][T12939] __x64_sys_setsockopt+0x64/0x80 [ 408.543577][T12939] x64_sys_call+0x2327/0x3020 [ 408.543684][T12939] do_syscall_64+0x12c/0x3b0 [ 408.543709][T12939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.543734][T12939] RIP: 0033:0x7f70a550cdd9 [ 408.543802][T12939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.543895][T12939] RSP: 002b:00007f70a3f67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.543915][T12939] RAX: ffffffffffffffda RBX: 00007f70a5785fa0 RCX: 00007f70a550cdd9 [ 408.543928][T12939] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 408.543970][T12939] RBP: 00007f70a3f67090 R08: 00000000000002f0 R09: 0000000000000000 [ 408.543987][T12939] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 408.544003][T12939] R13: 00007f70a5786038 R14: 00007f70a5785fa0 R15: 00007ffed79a9978 [ 408.544029][T12939] [ 409.017955][T12948] loop8: detected capacity change from 0 to 128 [ 409.045403][T12948] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.084843][T12948] ext4 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 409.314763][ T28] audit: type=1400 audit(2000524534.030:1259): avc: denied { read } for pid=12944 comm="syz.8.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.425636][T12956] loop4: detected capacity change from 0 to 512 [ 409.516600][T12956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.532304][T12956] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.547040][ T28] audit: type=1400 audit(2000524534.251:1260): avc: denied { getopt } for pid=12960 comm="syz.1.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 409.601290][T12956] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.2605: corrupted inode contents [ 409.617998][T12956] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #2: comm syz.4.2605: mark_inode_dirty error [ 409.630140][T12956] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.2605: corrupted inode contents [ 409.642367][T12956] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.2605: mark_inode_dirty error [ 409.661532][T12956] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.2605: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 409.661532][T12956] [ 409.668073][T12963] veth0_vlan: left promiscuous mode [ 409.690601][T12956] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.2605: corrupted inode contents [ 409.703410][T12963] veth0_vlan: entered promiscuous mode [ 409.709149][T12956] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.2605: mark_inode_dirty error [ 409.739918][T12966] loop7: detected capacity change from 0 to 512 [ 409.806030][T12956] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 409.855938][ T9408] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.871675][T12966] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 409.880432][T12966] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 409.924675][T12966] EXT4-fs (loop7): 1 truncate cleaned up [ 409.956194][T12966] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.986893][T12966] EXT4-fs error (device loop7): ext4_append:79: inode #2: comm syz.7.2608: Logical block already allocated [ 410.027166][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2612'. [ 410.427666][ T28] audit: type=1400 audit(2000524534.969:1261): avc: denied { setcurrent } for pid=12986 comm="syz.1.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 410.753052][T12979] EXT4-fs error (device loop7): ext4_append:79: inode #2: comm syz.7.2608: Logical block already allocated [ 410.774820][T12388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.787872][T12981] ipip1: entered promiscuous mode [ 410.956748][ T8259] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.563265][T13004] loop1: detected capacity change from 0 to 4096 [ 411.582580][T13004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.628023][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.693714][ T28] audit: type=1400 audit(2000524536.231:1262): avc: denied { map } for pid=13014 comm="syz.7.2617" path="socket:[45350]" dev="sockfs" ino=45350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 411.755242][T13019] loop6: detected capacity change from 0 to 128 [ 411.782842][T13019] FAT-fs (loop6): bogus number of reserved sectors [ 411.789465][T13019] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 411.798885][T13019] FAT-fs (loop6): Can't find a valid FAT filesystem [ 411.841920][T13019] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2621'. [ 411.879339][T13019] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2621'. [ 411.997319][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2623'. [ 412.038207][T13036] loop4: detected capacity change from 0 to 512 [ 412.057438][T13036] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 412.164299][T13040] loop8: detected capacity change from 0 to 8192 [ 412.170992][T13036] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 412.184127][T13036] EXT4-fs (loop4): 1 truncate cleaned up [ 412.197505][T13040] vfat: Unknown parameter '00000000000000000000003' [ 412.218450][T13036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.320792][T13047] loop7: detected capacity change from 0 to 256 [ 412.347921][T13036] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.2627: Logical block already allocated [ 412.579911][T13050] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.2627: Logical block already allocated [ 412.623186][T13046] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13046 comm=syz.6.2626 [ 412.789791][T13033] loop6: detected capacity change from 0 to 1024 [ 412.970684][T13033] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 413.005157][T12388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.108784][T13033] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 413.144151][T13033] EXT4-fs (loop6): orphan cleanup on readonly fs [ 413.185086][T13033] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.2626: Freeing blocks not in datazone - block = 0, count = 4096 [ 413.219025][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2630'. [ 413.249971][T13033] loop6: lost filesystem error report for type 5 error -117 [ 413.251080][T13033] EXT4-fs (loop6): 1 orphan inode deleted [ 413.258907][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 413.258983][ C0] EXT4-fs (loop6): initial error at time 2000524537: ext4_free_blocks:6718 [ 413.259045][ C0] EXT4-fs (loop6): last error at time 2000524537: ext4_free_blocks:6718 [ 413.335084][T13056] Cannot find add_set index 0 as target [ 413.387554][T13056] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 413.415560][T13063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2632'. [ 413.440741][T13056] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 413.459174][ T28] audit: type=1326 audit(2000524537.739:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 413.490563][T13033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 413.521489][T13060] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2630'. [ 413.566100][ T28] audit: type=1326 audit(2000524537.763:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 413.624676][T13064] loop8: detected capacity change from 0 to 8192 [ 413.638811][ T28] audit: type=1326 audit(2000524537.763:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 413.673264][T13060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.683435][ T28] audit: type=1326 audit(2000524537.763:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 413.719298][ T28] audit: type=1326 audit(2000524537.763:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 413.750536][T13060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.759845][ T28] audit: type=1326 audit(2000524537.763:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13062 comm="syz.1.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 413.875731][T13060] bond0 (unregistering): Released all slaves [ 413.884775][ T3397] syz1: Port: 1 Link DOWN [ 413.992178][ T7224] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.099818][T13067] loop4: detected capacity change from 0 to 1024 [ 414.142222][T13067] EXT4-fs: Mount option(s) incompatible with ext3 [ 414.205965][T13072] loop7: detected capacity change from 0 to 128 [ 414.216952][T13072] FAT-fs (loop7): bogus number of reserved sectors [ 414.223644][T13072] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 414.233434][T13072] FAT-fs (loop7): Can't find a valid FAT filesystem [ 414.241849][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2636'. [ 414.252161][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2636'. [ 414.324675][T13067] loop4: detected capacity change from 0 to 512 [ 414.348280][T13067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.360918][T13067] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 414.515840][T12388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.473166][T13090] FAULT_INJECTION: forcing a failure. [ 415.473166][T13090] name failslab, interval 1, probability 0, space 0, times 0 [ 415.526446][T13090] CPU: 1 UID: 0 PID: 13090 Comm: syz.4.2640 Tainted: G W syzkaller #0 PREEMPT(full) [ 415.526485][T13090] Tainted: [W]=WARN [ 415.526494][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 415.526510][T13090] Call Trace: [ 415.526519][T13090] [ 415.526529][T13090] __dump_stack+0x1d/0x30 [ 415.526589][T13090] dump_stack_lvl+0x95/0xd0 [ 415.526616][T13090] dump_stack+0x15/0x1b [ 415.526637][T13090] should_fail_ex+0x263/0x280 [ 415.526724][T13090] should_failslab+0x8c/0xb0 [ 415.526763][T13090] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 415.526807][T13090] ? __alloc_skb+0x2d6/0x690 [ 415.526876][T13090] __alloc_skb+0x2d6/0x690 [ 415.526917][T13090] ? __alloc_skb+0x200/0x690 [ 415.526954][T13090] netlink_alloc_large_skb+0xbf/0xf0 [ 415.527047][T13090] netlink_sendmsg+0x40c/0x6f0 [ 415.527090][T13090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.527125][T13090] ____sys_sendmsg+0x563/0x5b0 [ 415.527177][T13090] ___sys_sendmsg+0x195/0x1e0 [ 415.527200][T13090] ? path_openat+0x1b01/0x2050 [ 415.527278][T13090] __sys_sendmmsg+0x185/0x320 [ 415.527311][T13090] __x64_sys_sendmmsg+0x57/0x70 [ 415.527332][T13090] x64_sys_call+0x27aa/0x3020 [ 415.527411][T13090] do_syscall_64+0x12c/0x3b0 [ 415.527439][T13090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.527516][T13090] RIP: 0033:0x7f274ca3cdd9 [ 415.527536][T13090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.527576][T13090] RSP: 002b:00007f274b48f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 415.527596][T13090] RAX: ffffffffffffffda RBX: 00007f274ccb5fa0 RCX: 00007f274ca3cdd9 [ 415.527609][T13090] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 415.527626][T13090] RBP: 00007f274b48f090 R08: 0000000000000000 R09: 0000000000000000 [ 415.527667][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.527762][T13090] R13: 00007f274ccb6038 R14: 00007f274ccb5fa0 R15: 00007ffe12ffabd8 [ 415.527786][T13090] [ 415.804050][T13095] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 415.816686][T13095] EXT4-fs (loop1): 1 orphan inode deleted [ 415.822489][T13095] EXT4-fs (loop1): 1 truncate cleaned up [ 415.828703][T13095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.050921][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.247255][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 416.247340][ T28] audit: type=1400 audit(2000524540.002:1327): avc: denied { getopt } for pid=13104 comm="syz.1.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 416.480234][ T28] audit: type=1400 audit(2000524540.192:1328): avc: denied { setopt } for pid=13113 comm="syz.1.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 416.996694][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2652'. [ 417.076846][ T28] audit: type=1400 audit(2000524540.656:1329): avc: denied { accept } for pid=13132 comm="syz.8.2651" lport=55596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 417.571798][T13093] ipip0: entered promiscuous mode [ 417.654151][ T28] audit: type=1326 audit(2000524541.166:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 417.679381][ T28] audit: type=1326 audit(2000524541.191:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 417.704253][ T28] audit: type=1326 audit(2000524541.191:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 417.728261][ T28] audit: type=1326 audit(2000524541.191:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 417.752334][ T28] audit: type=1326 audit(2000524541.191:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 417.752623][T13162] set_capacity_and_notify: 1 callbacks suppressed [ 417.752666][T13162] loop1: detected capacity change from 0 to 128 [ 417.776441][ T28] audit: type=1326 audit(2000524541.191:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 417.839939][ T28] audit: type=1326 audit(2000524541.191:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.1.2655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578110cdd9 code=0x7ffc0000 [ 418.010779][T13168] usb usb7: check_ctrlrecip: process 13168 (syz.1.2657) requesting ep 01 but needs 81 [ 418.020416][T13168] usb usb7: usbfs: process 13168 (syz.1.2657) did not claim interface 0 before use [ 418.032451][T13168] loop1: detected capacity change from 0 to 128 [ 418.129756][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2660'. [ 418.142761][T13174] FAULT_INJECTION: forcing a failure. [ 418.142761][T13174] name failslab, interval 1, probability 0, space 0, times 0 [ 418.157446][T13172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2660'. [ 418.170779][T13172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2660'. [ 418.189815][T13174] CPU: 1 UID: 0 PID: 13174 Comm: syz.4.2658 Tainted: G W syzkaller #0 PREEMPT(full) [ 418.189854][T13174] Tainted: [W]=WARN [ 418.189862][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.189877][T13174] Call Trace: [ 418.189886][T13174] [ 418.189896][T13174] __dump_stack+0x1d/0x30 [ 418.190043][T13174] dump_stack_lvl+0x95/0xd0 [ 418.190073][T13174] dump_stack+0x15/0x1b [ 418.190098][T13174] should_fail_ex+0x263/0x280 [ 418.190128][T13174] ? nfc_genl_rcv_nl_event+0x6f/0x130 [ 418.190151][T13174] should_failslab+0x8c/0xb0 [ 418.190239][T13174] __kmalloc_cache_noprof+0x5f/0x400 [ 418.190284][T13174] ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10 [ 418.190374][T13174] nfc_genl_rcv_nl_event+0x6f/0x130 [ 418.190397][T13174] blocking_notifier_call_chain+0x9b/0x1e0 [ 418.190428][T13174] netlink_release+0xa8e/0xf10 [ 418.190519][T13174] sock_close+0x6b/0x150 [ 418.190551][T13174] ? __pfx_sock_close+0x10/0x10 [ 418.190676][T13174] __fput+0x29b/0x630 [ 418.190701][T13174] fput_close_sync+0xad/0x190 [ 418.190724][T13174] __x64_sys_close+0x55/0xf0 [ 418.190797][T13174] x64_sys_call+0x275d/0x3020 [ 418.190873][T13174] do_syscall_64+0x12c/0x3b0 [ 418.190903][T13174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.190981][T13174] RIP: 0033:0x7f274c9fd60e [ 418.191001][T13174] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.191024][T13174] RSP: 002b:00007f274b48df38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 418.191048][T13174] RAX: ffffffffffffffda RBX: 00007f274b48f6c0 RCX: 00007f274c9fd60e [ 418.191062][T13174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 418.191083][T13174] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 418.191096][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.191141][T13174] R13: 00007f274ccb6038 R14: 00007f274ccb5fa0 R15: 00007ffe12ffabd8 [ 418.191162][T13174] [ 418.483761][T13182] loop1: detected capacity change from 0 to 128 [ 418.578330][T13182] loop1: detected capacity change from 0 to 512 [ 418.589396][T13182] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.599115][T13182] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 418.628318][T13182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 418.636463][T13182] EXT4-fs (loop1): orphan cleanup on readonly fs [ 418.643009][T13182] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2664: bg 0: block 361: padding at end of block bitmap is not set [ 418.665424][T13186] loop4: detected capacity change from 0 to 4096 [ 418.673409][T13182] loop1: lost filesystem error report for type 5 error -117 [ 418.679619][T13182] EXT4-fs (loop1): Remounting filesystem read-only [ 418.761807][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 418.768326][ C0] EXT4-fs (loop1): initial error at time 2000524542: ext4_validate_block_bitmap:441 [ 418.777760][ C0] EXT4-fs (loop1): last error at time 2000524542: ext4_validate_block_bitmap:441 [ 418.796513][T13182] EXT4-fs (loop1): 1 truncate cleaned up [ 418.802841][T13182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 418.837881][T13186] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 418.846020][T13186] System zones: 0-5 [ 418.881012][T13186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.954615][T13164] ipip0: entered promiscuous mode [ 419.072044][T13198] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2669'. [ 419.132230][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 419.177068][T12388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.762677][T13216] loop4: detected capacity change from 0 to 128 [ 419.781730][T13216] FAT-fs (loop4): bogus number of reserved sectors [ 419.788546][T13216] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 419.842515][T13216] FAT-fs (loop4): Can't find a valid FAT filesystem [ 419.923906][T13223] loop7: detected capacity change from 0 to 128 [ 419.965592][T13223] FAT-fs (loop7): bogus number of reserved sectors [ 419.972171][T13223] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 419.981478][T13223] FAT-fs (loop7): Can't find a valid FAT filesystem [ 419.990734][T13223] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2672'. [ 420.000664][T13223] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2672'. [ 420.430721][T13250] serio: Serial port ttyS3 [ 420.888082][T13263] loop1: detected capacity change from 0 to 512 [ 420.894742][T13263] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.902139][T13263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.922753][T13263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.935819][T13263] ext4 filesystem being mounted at /586/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 421.036768][T13278] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2682'. [ 421.076394][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.306158][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'. [ 421.347483][T13302] netlink: 'syz.7.2685': attribute type 36 has an invalid length. [ 421.352719][T13297] loop4: detected capacity change from 0 to 128 [ 421.368483][T13297] FAT-fs (loop4): bogus number of reserved sectors [ 421.375389][T13297] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 421.384714][T13297] FAT-fs (loop4): Can't find a valid FAT filesystem [ 421.392685][T13304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2691'. [ 421.519583][T13307] netlink: 'syz.7.2685': attribute type 10 has an invalid length. [ 421.581109][T13309] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 421.681934][T13302] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 421.692134][T13302] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 421.943531][T13312] loop6: detected capacity change from 0 to 512 [ 422.032545][T13312] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2692: inode has both inline data and extents flags [ 422.052631][T13312] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 422.053198][T13312] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2692: couldn't read orphan inode 15 (err -117) [ 422.074213][T13312] loop6: lost filesystem error report for type 5 error -117 [ 422.075856][T13312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.166207][T13312] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 422.223719][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 422.223763][ T28] audit: type=1400 audit(2000524545.052:1474): avc: denied { write } for pid=13311 comm="syz.6.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 422.327621][T13307] team0: Device ipvlan0 failed to register rx_handler [ 422.460521][ T7224] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.681632][T13349] ipip0: entered promiscuous mode [ 424.833521][T13358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.857288][T13358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.910684][T13358] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.948465][T13358] bond0: (slave lo): Enslaving as an active interface with an up link [ 424.975986][T13358] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 425.044391][T13361] loop8: detected capacity change from 0 to 4096 [ 425.087458][T13361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 425.118600][T13361] EXT4-fs (loop8): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 425.139740][T13361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.233428][T13365] loop1: detected capacity change from 0 to 128 [ 425.381394][T13365] FAT-fs (loop1): bogus number of reserved sectors [ 425.388129][T13365] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 425.397637][T13365] FAT-fs (loop1): Can't find a valid FAT filesystem [ 426.079507][T13377] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 426.315340][ T9408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.845905][T13392] loop1: detected capacity change from 0 to 2048 [ 427.977221][T13392] Alternate GPT is invalid, using primary GPT. [ 427.999108][T13392] loop1: p1 p2 p3 [ 428.248775][T13398] loop6: detected capacity change from 0 to 512 [ 428.272450][T13398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.292915][T13398] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.306879][T13398] tmpfs: Unknown parameter './file1' [ 428.444377][ T28] audit: type=1400 audit(2000524550.151:1475): avc: denied { append } for pid=13403 comm="syz.7.2718" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 428.528648][ T28] audit: type=1400 audit(2000524550.211:1476): avc: denied { ioctl } for pid=13403 comm="syz.7.2718" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 428.970687][T13398] syz.6.2716 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 428.985077][T13398] CPU: 0 UID: 0 PID: 13398 Comm: syz.6.2716 Tainted: G W syzkaller #0 PREEMPT(full) [ 428.985130][T13398] Tainted: [W]=WARN [ 428.985139][T13398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.985228][T13398] Call Trace: [ 428.985237][T13398] [ 428.985246][T13398] __dump_stack+0x1d/0x30 [ 428.985277][T13398] dump_stack_lvl+0x95/0xd0 [ 428.985304][T13398] dump_stack+0x15/0x1b [ 428.985330][T13398] dump_header+0x80/0x240 [ 428.985381][T13398] oom_kill_process+0x295/0x350 [ 428.985420][T13398] out_of_memory+0x97d/0xb80 [ 428.985526][T13398] try_charge_memcg+0x62f/0xa10 [ 428.985622][T13398] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 428.985669][T13398] __alloc_frozen_pages_noprof+0x18a/0x350 [ 428.985703][T13398] alloc_pages_mpol+0xb3/0x260 [ 428.985732][T13398] ? mod_lruvec_state+0xe0/0xf0 [ 428.985771][T13398] alloc_pages_noprof+0x8f/0x140 [ 428.985905][T13398] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 428.985995][T13398] __kvmalloc_node_noprof+0x3d4/0x640 [ 428.986062][T13398] ? futex_hash_allocate+0x190/0x9a0 [ 428.986100][T13398] ? futex_hash_allocate+0x190/0x9a0 [ 428.986159][T13398] futex_hash_allocate+0x190/0x9a0 [ 428.986200][T13398] ? cap_task_prctl+0x13f/0x6b0 [ 428.986233][T13398] futex_hash_prctl+0xd8/0xf0 [ 428.986292][T13398] __se_sys_prctl+0x4f4/0x1400 [ 428.986321][T13398] __x64_sys_prctl+0x67/0x80 [ 428.986355][T13398] x64_sys_call+0x2533/0x3020 [ 428.986385][T13398] do_syscall_64+0x12c/0x3b0 [ 428.986408][T13398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.986512][T13398] RIP: 0033:0x7f4b3888cdd9 [ 428.986527][T13398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.986546][T13398] RSP: 002b:00007f4b372df028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 428.986566][T13398] RAX: ffffffffffffffda RBX: 00007f4b38b05fa0 RCX: 00007f4b3888cdd9 [ 428.986583][T13398] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 428.986644][T13398] RBP: 00007f4b38922d69 R08: 0000000000000000 R09: 0000000000000000 [ 428.986660][T13398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.986717][T13398] R13: 00007f4b38b06038 R14: 00007f4b38b05fa0 R15: 00007ffc26d60828 [ 428.986738][T13398] [ 429.235194][T13398] memory: usage 289780kB, limit 307200kB, failcnt 300 [ 429.251155][T13398] memory+swap: usage 287792kB, limit 9007199254740988kB, failcnt 0 [ 429.262040][T13398] kmem: usage 285316kB, limit 9007199254740988kB, failcnt 0 [ 429.273083][T13398] Memory cgroup stats for /syz6: [ 429.273475][T13398] cache 20480 [ 429.282168][T13398] rss 20480 [ 429.285592][T13398] shmem 0 [ 429.288586][T13398] mapped_file 0 [ 429.292787][T13398] dirty 0 [ 429.295803][T13398] writeback 0 [ 429.299240][T13398] workingset_refault_anon 37 [ 429.304133][T13398] workingset_refault_file 0 [ 429.308742][T13398] swap 372736 [ 429.312138][T13398] swapcached 2711552 [ 429.327831][T13398] pgpgin 344661 [ 429.374856][T13398] pgpgout 344649 [ 429.383984][T13414] __nla_validate_parse: 3 callbacks suppressed [ 429.384014][T13414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2720'. [ 429.392224][T13398] pgfault 246104 [ 429.408379][T13398] pgmajfault 21 [ 429.412157][T13398] inactive_anon 0 [ 429.415981][T13398] active_anon 24576 [ 429.420003][T13398] inactive_file 0 [ 429.423700][T13398] active_file 20480 [ 429.427522][T13398] unevictable 0 [ 429.431000][T13398] hierarchical_memory_limit 314572800 [ 429.443018][T13412] veth0_vlan: left promiscuous mode [ 429.458305][T13412] veth0_vlan: entered promiscuous mode [ 429.464628][T13398] hierarchical_memsw_limit 9223372036854771712 [ 429.470799][T13398] total_cache 20480 [ 429.474618][T13398] total_rss 20480 [ 429.478265][T13398] total_shmem 0 [ 429.481742][T13398] total_mapped_file 0 [ 429.517308][T13398] total_dirty 0 [ 429.523754][T13398] total_writeback 0 [ 429.531503][T13398] total_workingset_refault_anon 37 [ 429.543504][T13398] total_workingset_refault_file 0 [ 429.558381][ T28] audit: type=1400 audit(2000524551.098:1477): avc: denied { create } for pid=13415 comm="syz.4.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 429.578234][T13398] total_swap 372736 [ 429.582361][T13407] FAULT_INJECTION: forcing a failure. [ 429.582361][T13407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 429.595642][T13407] CPU: 0 UID: 0 PID: 13407 Comm: syz.6.2716 Tainted: G W syzkaller #0 PREEMPT(full) [ 429.595674][T13407] Tainted: [W]=WARN [ 429.595681][T13407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.595696][T13407] Call Trace: [ 429.595704][T13407] [ 429.595715][T13407] __dump_stack+0x1d/0x30 [ 429.595778][T13407] dump_stack_lvl+0x95/0xd0 [ 429.595800][T13407] dump_stack+0x15/0x1b [ 429.595851][T13407] should_fail_ex+0x263/0x280 [ 429.595879][T13407] should_fail_alloc_page+0xf2/0x100 [ 429.595918][T13407] __alloc_frozen_pages_noprof+0x108/0x350 [ 429.595952][T13407] alloc_pages_mpol+0xb3/0x260 [ 429.596042][T13407] folio_alloc_mpol_noprof+0x39/0x80 [ 429.596065][T13407] shmem_get_folio_gfp+0x3da/0xd60 [ 429.596099][T13407] shmem_fallocate+0x628/0x920 [ 429.596142][T13407] vfs_fallocate+0x3b6/0x400 [ 429.596222][T13407] __x64_sys_fallocate+0x7a/0xd0 [ 429.596264][T13407] x64_sys_call+0x298e/0x3020 [ 429.596303][T13407] do_syscall_64+0x12c/0x3b0 [ 429.596333][T13407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.596384][T13407] RIP: 0033:0x7f4b3888cdd9 [ 429.596404][T13407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.596425][T13407] RSP: 002b:00007f4b372be028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 429.596452][T13407] RAX: ffffffffffffffda RBX: 00007f4b38b06090 RCX: 00007f4b3888cdd9 [ 429.596471][T13407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 429.596509][T13407] RBP: 00007f4b372be090 R08: 0000000000000000 R09: 0000000000000000 [ 429.596526][T13407] R10: 0000000000400001 R11: 0000000000000246 R12: 0000000000000001 [ 429.596578][T13407] R13: 00007f4b38b06128 R14: 00007f4b38b06090 R15: 00007ffc26d60828 [ 429.596604][T13407] [ 429.596749][ T3376] IPVS: starting estimator thread 0... [ 429.786929][T13398] total_swapcached 2711552 [ 429.791722][T13398] total_pgpgin 344661 [ 429.795772][T13398] total_pgpgout 344649 [ 429.799901][T13398] total_pgfault 246104 [ 429.804598][T13398] total_pgmajfault 21 [ 429.808617][T13398] total_inactive_anon 0 [ 429.830247][T13398] total_active_anon 24576 [ 429.843058][T13398] total_inactive_file 0 [ 429.852614][T13398] total_active_file 20480 [ 429.859770][T13398] total_unevictable 0 [ 429.915442][T13398] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2716,pid=13397,uid=0 [ 429.965504][T13398] Memory cgroup out of memory: Killed process 13398 (syz.6.2716) total-vm:90460kB, anon-rss:1304kB, file-rss:21712kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 430.041181][ T7224] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.087969][T13422] IPVS: using max 2592 ests per chain, 129600 per kthread [ 431.218030][T13447] FAULT_INJECTION: forcing a failure. [ 431.218030][T13447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.253282][T13447] CPU: 1 UID: 0 PID: 13447 Comm: syz.8.2727 Tainted: G W syzkaller #0 PREEMPT(full) [ 431.253378][T13447] Tainted: [W]=WARN [ 431.253436][T13447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.253449][T13447] Call Trace: [ 431.253456][T13447] [ 431.253463][T13447] __dump_stack+0x1d/0x30 [ 431.253491][T13447] dump_stack_lvl+0x95/0xd0 [ 431.253537][T13447] dump_stack+0x15/0x1b [ 431.253558][T13447] should_fail_ex+0x263/0x280 [ 431.253588][T13447] should_fail+0xb/0x20 [ 431.253627][T13447] should_fail_usercopy+0x1a/0x20 [ 431.253660][T13447] _copy_from_user+0x1c/0xb0 [ 431.253693][T13447] ___sys_sendmsg+0xc1/0x1e0 [ 431.253790][T13447] __x64_sys_sendmsg+0xd4/0x160 [ 431.253819][T13447] x64_sys_call+0x194c/0x3020 [ 431.253845][T13447] do_syscall_64+0x12c/0x3b0 [ 431.253945][T13447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.253968][T13447] RIP: 0033:0x7fcdf1b0cdd9 [ 431.253986][T13447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.254006][T13447] RSP: 002b:00007fcdf055f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.254061][T13447] RAX: ffffffffffffffda RBX: 00007fcdf1d85fa0 RCX: 00007fcdf1b0cdd9 [ 431.254076][T13447] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 431.254091][T13447] RBP: 00007fcdf055f090 R08: 0000000000000000 R09: 0000000000000000 [ 431.254142][T13447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.254156][T13447] R13: 00007fcdf1d86038 R14: 00007fcdf1d85fa0 R15: 00007ffeafcbea38 [ 431.254178][T13447] [ 431.446104][T13451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13451 comm=syz.7.2725 [ 431.464203][T13453] loop8: detected capacity change from 0 to 512 [ 431.483587][T13453] EXT4-fs (loop8): 1 truncate cleaned up [ 431.490133][T13453] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.536511][T13451] FAULT_INJECTION: forcing a failure. [ 431.536511][T13451] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 431.565887][T13451] CPU: 1 UID: 0 PID: 13451 Comm: syz.7.2725 Tainted: G W syzkaller #0 PREEMPT(full) [ 431.565934][T13451] Tainted: [W]=WARN [ 431.565942][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.565955][T13451] Call Trace: [ 431.565963][T13451] [ 431.565972][T13451] __dump_stack+0x1d/0x30 [ 431.566046][T13451] dump_stack_lvl+0x95/0xd0 [ 431.566069][T13451] dump_stack+0x15/0x1b [ 431.566092][T13451] should_fail_ex+0x263/0x280 [ 431.566122][T13451] should_fail_alloc_page+0xf2/0x100 [ 431.566211][T13451] __alloc_frozen_pages_noprof+0x108/0x350 [ 431.566240][T13451] alloc_pages_mpol+0xb3/0x260 [ 431.566325][T13451] alloc_pages_noprof+0x8f/0x140 [ 431.566351][T13451] pte_alloc_one+0x1c/0xc0 [ 431.566403][T13451] __pte_alloc+0x32/0x2a0 [ 431.566424][T13451] handle_mm_fault+0x239e/0x2e70 [ 431.566453][T13451] ? vma_start_read+0x1c7/0x2c0 [ 431.566534][T13451] do_user_addr_fault+0x62f/0x1050 [ 431.566568][T13451] ? trace_page_fault_user+0x1f/0xa0 [ 431.566601][T13451] exc_page_fault+0x62/0xa0 [ 431.566697][T13451] asm_exc_page_fault+0x26/0x30 [ 431.566719][T13451] RIP: 0033:0x7f70a54ced02 [ 431.566737][T13451] Code: 8d 15 99 05 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 b8 f0 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 431.566760][T13451] RSP: 002b:00007f70a3f44d20 EFLAGS: 00010286 [ 431.566779][T13451] RAX: ffffffffffffffff RBX: 00007f709c000000 RCX: 00007f70a550cbd7 [ 431.566796][T13451] RDX: 00007f70a55bf277 RSI: 0000000000021000 RDI: 00007f709c000000 [ 431.566836][T13451] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 431.566851][T13451] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 431.566865][T13451] R13: 0000000000001000 R14: 00007f70a0000000 R15: 00000000000da000 [ 431.566888][T13451] [ 431.566899][T13451] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 431.730306][T13424] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.793275][T13469] loop7: detected capacity change from 0 to 512 [ 431.821336][T13469] EXT4-fs (loop7): #blocks per group too big: 65535 [ 431.829800][T13424] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.837170][T13424] bridge_slave_0: entered allmulticast mode [ 431.849866][T13424] bridge_slave_0: entered promiscuous mode [ 431.861297][T13424] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.868469][T13424] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.875693][T13424] bridge_slave_1: entered allmulticast mode [ 431.882277][T13424] bridge_slave_1: entered promiscuous mode [ 431.901013][T13424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.911731][T13424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.934467][T13424] team0: Port device team_slave_0 added [ 431.941382][T13424] team0: Port device team_slave_1 added [ 431.952826][ T9408] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.966818][T13424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.974033][T13424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.000856][T13424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.015248][T13424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.021866][T13477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.023538][T13424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.056687][T13424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.059300][T13476] loop8: detected capacity change from 0 to 512 [ 432.101241][T13424] hsr_slave_0: entered promiscuous mode [ 432.107494][T13424] hsr_slave_1: entered promiscuous mode [ 432.113360][T13424] debugfs: 'hsr0' already exists in 'hsr' [ 432.122977][T13424] Cannot create hsr debugfs directory [ 432.128902][T13476] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.141845][T13476] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.156173][T13476] tmpfs: Unknown parameter './file1' [ 432.282840][T13424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.319051][T13476] ================================================================== [ 432.327186][T13476] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 432.335013][T13476] [ 432.337337][T13476] write to 0xffffea0004202f58 of 8 bytes by task 13481 on cpu 0: [ 432.345064][T13476] __filemap_remove_folio+0x201/0x2e0 [ 432.350451][T13476] filemap_remove_folio+0x6d/0x1d0 [ 432.355587][T13476] truncate_inode_folio+0x42/0x50 [ 432.360616][T13476] shmem_undo_range+0x26d/0xb10 [ 432.365470][T13476] shmem_evict_inode+0x12e/0x540 [ 432.370410][T13476] evict+0x2af/0x510 [ 432.374314][T13476] iput+0x41a/0x580 [ 432.378121][T13476] dentry_unlink_inode+0x26f/0x290 [ 432.383238][T13476] __dentry_kill+0x145/0x4d0 [ 432.387841][T13476] finish_dput+0x2b/0x200 [ 432.392173][T13476] dput+0x52/0x60 [ 432.395806][T13476] __fput+0x444/0x630 [ 432.399788][T13476] fput_close_sync+0xad/0x190 [ 432.404466][T13476] __x64_sys_close+0x55/0xf0 [ 432.409076][T13476] x64_sys_call+0x275d/0x3020 [ 432.413764][T13476] do_syscall_64+0x12c/0x3b0 [ 432.418360][T13476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.424256][T13476] [ 432.426574][T13476] read to 0xffffea0004202f58 of 8 bytes by task 13476 on cpu 1: [ 432.434200][T13476] folio_mapping+0xa1/0xe0 [ 432.438626][T13476] move_folios_to_lru+0x204/0x810 [ 432.443666][T13476] evict_folios+0x2fdb/0x3370 [ 432.448367][T13476] try_to_shrink_lruvec+0x858/0xc20 [ 432.453582][T13476] shrink_lruvec+0x256/0x1bc0 [ 432.458263][T13476] shrink_node+0x697/0x20a0 [ 432.462780][T13476] do_try_to_free_pages+0x408/0xc90 [ 432.467982][T13476] try_to_free_mem_cgroup_pages+0x201/0x420 [ 432.473879][T13476] try_charge_memcg+0x373/0xa10 [ 432.478739][T13476] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 432.484288][T13476] __alloc_frozen_pages_noprof+0x18a/0x350 [ 432.490117][T13476] alloc_pages_mpol+0xb3/0x260 [ 432.494893][T13476] alloc_pages_noprof+0x8f/0x140 [ 432.499854][T13476] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 432.505758][T13476] __kvmalloc_node_noprof+0x3d4/0x640 [ 432.511133][T13476] futex_hash_allocate+0x190/0x9a0 [ 432.516265][T13476] futex_hash_prctl+0xd8/0xf0 [ 432.520961][T13476] __se_sys_prctl+0x4f4/0x1400 [ 432.525748][T13476] __x64_sys_prctl+0x67/0x80 [ 432.530348][T13476] x64_sys_call+0x2533/0x3020 [ 432.535048][T13476] do_syscall_64+0x12c/0x3b0 [ 432.539642][T13476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.545541][T13476] [ 432.547886][T13476] value changed: 0xffff8881044dd4b0 -> 0x0000000000000000 [ 432.554992][T13476] [ 432.557315][T13476] Reported by Kernel Concurrency Sanitizer on: [ 432.563467][T13476] CPU: 1 UID: 0 PID: 13476 Comm: syz.8.2733 Tainted: G W syzkaller #0 PREEMPT(full) [ 432.574404][T13476] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 432.578216][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 432.588270][T13476] ================================================================== [ 432.606736][ T28] audit: type=1400 audit(2000524553.785:1478): avc: denied { write } for pid=3283 comm="syz-executor" path="pipe:[2442]" dev="pipefs" ino=2442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 432.695973][T13482] loop7: detected capacity change from 0 to 128 [ 432.802555][T13424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.850354][T13424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.897083][T13476] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.003869][T13424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.050313][ T5866] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.151044][ T5866] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.206231][ T5866] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.261718][ T5866] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.338030][ T5866] bridge_slave_1: left allmulticast mode [ 433.343709][ T5866] bridge_slave_1: left promiscuous mode [ 433.349844][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.358172][ T5866] bridge_slave_0: left allmulticast mode [ 433.364033][ T5866] bridge_slave_0: left promiscuous mode [ 433.370543][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.749414][ T5866] bond0 (unregistering): (slave lo): Releasing backup interface [ 433.757465][ T5866] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 433.769536][ T5866] bond0 (unregistering): Released all slaves [ 433.798430][ T5866] hsr_slave_0: left promiscuous mode [ 433.804229][ T5866] hsr_slave_1: left promiscuous mode [ 433.810012][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.817687][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.826200][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.836743][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.851846][ T5866] veth1_macvtap: left promiscuous mode [ 433.857417][ T5866] veth0_macvtap: left promiscuous mode [ 433.863424][ T5866] veth1_vlan: left promiscuous mode [ 433.868720][ T5866] veth0_vlan: left promiscuous mode [ 433.951950][ T5866] team0 (unregistering): Port device team_slave_1 removed [ 433.962431][ T5866] team0 (unregistering): Port device team_slave_0 removed [ 433.999663][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 434.109159][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 434.221790][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 434.260453][ T5866] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.327347][ T5866] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.351734][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 434.370625][ T5866] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.425396][ T5866] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.499998][ T5866] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.536286][ T5866] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.590874][ T5866] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.635544][ T5866] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.647591][ T3020] 8021q: adding VLAN 0 to HW filter on device eth25 [ 434.727870][ T5866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.772219][ T3020] 8021q: adding VLAN 0 to HW filter on device eth26 [ 434.782208][ T5866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.856418][ T5866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.900338][ T5866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.915131][ T3020] 8021q: adding VLAN 0 to HW filter on device eth27 [ 434.977439][ T5866] bridge_slave_1: left allmulticast mode [ 434.983221][ T5866] bridge_slave_1: left promiscuous mode [ 434.989249][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.997508][ T5866] bridge_slave_0: left allmulticast mode [ 435.003206][ T5866] bridge_slave_0: left promiscuous mode [ 435.009247][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.019174][ T5866] team0: left allmulticast mode [ 435.024085][ T5866] team_slave_0: left allmulticast mode [ 435.029841][ T5866] team_slave_1: left allmulticast mode [ 435.035558][ T5866] team0: left promiscuous mode [ 435.040364][ T5866] team_slave_0: left promiscuous mode [ 435.046360][ T5866] team_slave_1: left promiscuous mode [ 435.054106][ T5866] bridge0: port 3(team0) entered disabled state [ 435.061139][ T5866] bridge_slave_1: left allmulticast mode [ 435.067990][ T5866] bridge_slave_1: left promiscuous mode [ 435.074647][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.082476][ T5866] bridge_slave_0: left allmulticast mode [ 435.088437][ T5866] bridge_slave_0: left promiscuous mode [ 435.094237][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.118973][ T5866] bridge_slave_1: left allmulticast mode [ 435.124823][ T5866] bridge_slave_1: left promiscuous mode [ 435.131987][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.140728][ T5866] bridge_slave_0: left allmulticast mode [ 435.146429][ T5866] bridge_slave_0: left promiscuous mode [ 435.152156][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.318063][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.327865][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.337315][ T5866] bond0 (unregistering): Released all slaves [ 435.602987][ T5866] team0: Port device bridge6 removed [ 435.790672][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.800632][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.810357][ T5866] bond0 (unregistering): Released all slaves [ 436.765972][ T5866] .` (unregistering): Released all slaves [ 436.974732][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.985285][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.995201][ T5866] bond0 (unregistering): Released all slaves [ 437.003667][ T3020] 8021q: adding VLAN 0 to HW filter on device eth28 [ 437.051375][ T5866] hsr_slave_0: left promiscuous mode [ 437.057327][ T5866] hsr_slave_1: left promiscuous mode [ 437.063369][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.070984][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.080489][ T5866] hsr_slave_0: left promiscuous mode [ 437.086557][ T5866] hsr_slave_1: left promiscuous mode [ 437.092287][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.099755][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.109158][ T5866] hsr_slave_0: left promiscuous mode [ 437.114852][ T5866] hsr_slave_1: left promiscuous mode [ 437.122272][ T5866] hsr_slave_0: left promiscuous mode [ 437.128117][ T5866] hsr_slave_1: left promiscuous mode [ 437.133756][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.141428][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.149429][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.156832][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.172545][ T5866] veth1_macvtap: left promiscuous mode [ 437.178041][ T5866] veth0_macvtap: left promiscuous mode [ 437.183868][ T5866] veth1_vlan: left promiscuous mode [ 437.189212][ T5866] veth0_vlan: left promiscuous mode [ 437.195074][ T5866] veth1_macvtap: left promiscuous mode [ 437.200565][ T5866] veth0_macvtap: left promiscuous mode [ 437.206217][ T5866] veth1_vlan: left promiscuous mode [ 437.211491][ T5866] veth0_vlan: left promiscuous mode [ 437.217268][ T5866] veth1_macvtap: left promiscuous mode [ 437.222896][ T5866] veth0_macvtap: left promiscuous mode [ 437.228488][ T5866] veth1_vlan: left promiscuous mode [ 437.233852][ T5866] veth0_vlan: left promiscuous mode [ 437.359747][ T5866] team0 (unregistering): Port device team_slave_1 removed [ 437.370379][ T5866] team0 (unregistering): Port device team_slave_0 removed [ 437.426418][ T5866] team0 (unregistering): Port device team_slave_1 removed [ 437.437740][ T5866] team0 (unregistering): Port device team_slave_0 removed [ 437.556448][ T5866] team0 (unregistering): Port device team_slave_1 removed [ 437.566513][ T5866] team0 (unregistering): Port device team_slave_0 removed [ 437.701994][ T3020] 8021q: adding VLAN 0 to HW filter on device eth29 [ 437.814366][ T3020] 8021q: adding VLAN 0 to HW filter on device eth30 [ 437.930499][ T3020] 8021q: adding VLAN 0 to HW filter on device eth31 [ 438.043975][ T3020] 8021q: adding VLAN 0 to HW filter on device eth32 [ 438.158850][ T3020] 8021q: adding VLAN 0 to HW filter on device eth33 [ 438.283549][ T3020] 8021q: adding VLAN 0 to HW filter on device eth35 [ 438.402012][ T5866] IPVS: stop unused estimator thread 0... [ 438.408811][ T5866] IPVS: stop unused estimator thread 0... [ 438.414767][ T5866] IPVS: stop unused estimator thread 0... [ 438.427876][ T3020] 8021q: adding VLAN 0 to HW filter on device eth34 [ 438.547951][ T3020] 8021q: adding VLAN 0 to HW filter on device eth36