last executing test programs: 5m28.565919309s ago: executing program 32 (id=61): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) set_mempolicy(0x6005, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x7a, 0xfffff00c}, {0x6, 0x0, 0x5, 0x9a5a}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWSET={0x320, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFTA_SET_DESC={0x2e8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, @NFTA_SET_DESC_CONCAT={0x12c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffdc9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfabd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9e}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x9c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x354}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x354f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x38}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf4000000}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0xe0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xec12}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x83}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x74}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xda43}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa6}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x348}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x1f, 0x18, 0x35f32a6dfa748ddd, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 5m9.923003267s ago: executing program 33 (id=168): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000080)={{[0x0, 0x8000, 0x200, 0x5910e737]}, 0x0, 0x1, 0x9, 0x0, &(0x7f0000000240)=[{{@_ha_fsid={[0x8, 0x91c]}, {0xffff, 0x7, 0xfffffff2, 0x7fffffff}}, 0x5, 0x0, '\x00'}, {{@align=0x1, {0x5, 0x9, 0xc2, 0x9}}, 0xe, 0x0, 'dos1xfloppy'}, {{@align=0x101, {0x8, 0x726a, 0x7, 0x3ff}}, 0xfffffff9, 0x0, '%-/\x00'}, {{@_ha_fsid={[0x1, 0x6]}, {0x6, 0x6, 0x6, 0x5}}, 0xd, 0x0, 'rodir'}, {{@_ha_fsid={[0x10, 0xa4]}, {0x9a, 0x1a, 0xff, 0x12000000000000}}, 0xaf62, 0x0, '-:](\x00'}, {{@align=0x1, {0x564c, 0x0, 0xe9e, 0x4}}, 0x9, 0x0, '\x88\xc8&(\x00'}, {{@_ha_fsid={[0xfffffffc, 0x7]}, {0x5, 0x4, 0x1}}, 0x8, 0x0, ',-\x00'}, {{@_ha_fsid={[0x2, 0x7]}, {0x4, 0x103e, 0x5, 0x4}}, 0xd, 0x0, '-\x00'}]}) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, 0x0, &(0x7f0000000080)) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x401, 0x253237844f167991, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x8}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (rerun: 64) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version']) write$P9_RVERSION(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff"], 0x15) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0xfe8e, 0x12) (async, rerun: 64) dup2(r0, r0) (rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/mdstat\x00', 0x0, 0x0) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000c1000000000000000180000018118000a85e1288b654a03d3f66d290e47b66a3f92b924e8a335c113c9d5d88cc2f9f91e40f68bc52591b97a81dd584044929ae7f0d16efaad5db4758c86844f09e7520acab58670956c89299d3af272f4917e5cfa5c2c97ca4051e7dbb6f68c3e72791e4739aeae96e897b9e0b5005d9822532", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x143c, 0x0, 0x0, 0x3dcc551a0ea075f3, 0x3c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r8, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) creat(&(0x7f0000000200)='./file1\x00', 0x1e3) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r11, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) 4m54.960310907s ago: executing program 34 (id=303): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/72, 0x508000, 0x800, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x100000000007, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[0x0]) 4m8.896456974s ago: executing program 35 (id=697): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100ffffffffffffc0fe0a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000002100)=0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, r4, 0x10, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m0.726988288s ago: executing program 4 (id=765): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x10}}, './file0\x00'}) socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r3, @ANYBLOB="14000100fff1ffffffffffffff00000000000001080008000204"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r5, @ANYBLOB="080008000604000014000100ff"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000400)=0x11) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r9], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r6, &(0x7f00000003c0)="060000000000000500000000000000cd86dd", 0x12, 0x40015, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0x5, 0x6, @remote}, 0x14) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB="3030303030308bd811871f780be8c63073241dec4a81773cee303030608d47db00bba0d572696465726f636b7065726d2c63727566742c6d61703d6f66662c73686f77"], 0x1, 0x3e9, &(0x7f0000000840)="$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") 4m0.380459239s ago: executing program 4 (id=768): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0xffffff7f, 0x20004810}, 0x0) 4m0.28508095s ago: executing program 4 (id=771): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00004000010000000500070000000000080009000000001008000a0000000000060002000000000006001a004e210000"], 0x3c}, 0x1, 0x620b, 0x0, 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r3, 0x100, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) r4 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x20000088) 3m59.001155764s ago: executing program 4 (id=781): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b707005a546b0007b8f1171900000000000080000088000000100025f0000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xbd, &(0x7f000000cf3d)=""/189}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000400)={0x1}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x25, &(0x7f0000000400)={0x0, 0xd568, 0x8, 0x7, 0xc0}, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x5, @remote, 0x3}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000480)='\a', 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x40}, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000180)=0x80000001, 0x4) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x40800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080), &(0x7f00000000c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r6 = syz_open_dev$loop(&(0x7f0000000600), 0x7f, 0x40001) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x5, 0x1, "11e6fda78303d1ef94718639edfa9579638fda7f8d4794b95840a3b6301137ad4cb50d1efba74b70c603579b01e7950532a76c4e032cb0348ee6539e14d78d1e", "fd601c3d49410c5acc92dd0b4a3f8fc08e17bdacbd4928735fcf02cba92096c56ecb65e7d8e05b88e9376b1500711eecfd85fd6a0e40e1a2045eb734d520490f", "8866fc05ef7aa45ee6855bc1b3bae55d5438b4aa51ac8bc63936874d6c5577ce", [0x10001, 0x4]}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0xd, 0x80070}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3m58.849683383s ago: executing program 4 (id=783): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x100) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000100)={0x1f}) 3m58.749467044s ago: executing program 4 (id=784): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000018000000324900008218000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000b4"], 0x50) 3m43.635305904s ago: executing program 36 (id=784): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000018000000324900008218000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000b4"], 0x50) 3m37.08894795s ago: executing program 9 (id=983): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000580)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0xb00000000000000}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, 0x10000006, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) r3 = open_tree(r1, &(0x7f0000000300)='./cgroup\x00', 0x89801) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x50) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = open_tree(r3, &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x801) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=r1, 0x1c, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback=r2, r1, 0x15, 0x0, r1, @void, @value=r1, @void, @void, r8}, 0x20) move_mount(r3, 0x0, r5, 0x0, 0x46) syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x5e32, &(0x7f00000000c0)={0x0, 0x334c, 0x800, 0x6, 0x275}, &(0x7f0000000000)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r9, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f0000000080)=@file={0x1, './cgroup\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) 3m36.897081792s ago: executing program 9 (id=986): bpf$MAP_CREATE(0x0, &(0x7f0000003cc0)=@bloom_filter={0x1e, 0x4, 0x1000, 0xc, 0x100, 0xffffffffffffffff, 0xf5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x8}, 0x50) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$MAP_CREATE(0x0, &(0x7f0000003cc0)=@bloom_filter={0x1e, 0x4, 0x1000, 0xc, 0x100, 0xffffffffffffffff, 0xf5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x8}, 0x50) (async) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101042, 0x0) (async) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async) 3m36.403934124s ago: executing program 9 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4b}, @map_fd, @generic, @initr0, @exit, @alu={0x0, 0x0, 0x0, 0x0, 0xc}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x1a0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0x3, 0xc, 0x21, 0x4, 0x0, 0x2, 0x42900, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x10000, 0xc}, 0x2000, 0x6, 0x9, 0x9, 0x7, 0x101, 0x767, 0x0, 0xb, 0x0, 0x1000}, 0x0, 0x5, 0xffffffffffffffff, 0xa) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r5, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x2c}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x4f}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xb424, 0x31}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4004) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) sendmsg$sock(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006d80)}, 0x20000800) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r1, 0x731, 0x1, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752b}, 0x40) 3m36.315438866s ago: executing program 9 (id=992): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040), 0xfd, 0x4c8, &(0x7f0000000c00)="$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") r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429a, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x98100, 0xccf8, 0x0, 0x1, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) read$char_usb(r1, &(0x7f0000000180)=""/147, 0xfdef) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) 3m35.845804083s ago: executing program 9 (id=1001): r0 = memfd_create(&(0x7f0000000680)='\x00\xc7\x8c\xa3I6\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\b\x00\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R:\xf6\xff\xff\xff\xff\xff\xff\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8\'K\xb6o\x9a\x9e~\xf0|\xe6\xe4ZW\xbe2\xc9\xe4R$\xaa\x00U\x92\xd2\x99\xb8\x00Q\xe6\f\b\xcf\xdd\xdc+]\xe7\x87H\xcb\x9f\x91=\xe4K\xaf\xea\x14G\x19\r\xec6\xd4\xd0L\xb1UH_\xe8m\nP\x0f\xdcP\xcb\xd9\x0592\xcae\xec$gy!9\xf08\xf1V\x1a\xae\xbe\xb1\xc9\x9bB\x05\xcd\xc7\x9f\xe8\x19\x93\x87\xf4\n\x8e\x919\x9e\x15\x18\xb1\v\x81\x89\x17\x993>\x8d\xfd\xa3\x10\xb0\xcaRGTZS\x167.\x17\xcc\xc0P\xeb\x94fz\xfe\xf0\xdb\xa5x&\xff\f\xdc\xe0\x89|\xdaB\xc6Kp\xc0\xad\'\v\"V\x89I\xee\xef<\x17Z\xaf\xb4\x11\xf9\a\xfa\x9a\x97\x90\xf2\x01\'\xecCh\xd1g=\x96\x9f\xafk\x02\xd7\xb8\x8e\x81\xae(\xe6HNx\xedD\x9b\xc4\xc2\xe7&\xdb\x05\xac', 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) fsetxattr$security_selinux(r0, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0xa1) 3m34.500286375s ago: executing program 9 (id=1018): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0xe8a, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x875b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0xfff2, 0x80}, 0x20000800) 3m34.467030368s ago: executing program 37 (id=1018): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0xe8a, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x875b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0xfff2, 0x80}, 0x20000800) 3m30.706359539s ago: executing program 7 (id=1049): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 3m30.636931046s ago: executing program 7 (id=1051): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109301) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_dev$loop(&(0x7f00000001c0), 0x6, 0x202100) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbe}, [@ldst={0x7}]}, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) poll(0x0, 0x0, 0x72) close_range(r3, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe020002000000f4", 0x1c) 3m30.176559204s ago: executing program 7 (id=1055): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000900)={0x1d, r1, 0x1}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x400) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000002900)={&(0x7f0000002380)={0xa, 0x4e21, 0x3dcc, @ipv4={'\x00', '\xff\xff', @empty}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000740)}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = syz_io_uring_setup(0x10b4, &(0x7f0000000040)={0x0, 0x1c6, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x28, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x3a3eb290e11579fa, 0x0, r7, 0x0, &(0x7f0000000480)="bb7def8613f328acc11904210a63b1dad8e76aef6470e7942338094210e5d32e748b7bbf43be9b6ea255c1bb3597c7c1de75b37e17e1da877edb9f3787bac068", 0x40, 0x4008000, 0x0, {0x0, r8}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00ccfa8e9fd43c68ab523d000000b7080000000000007b8af0ff00000000bfa100e2ffffffff06010000f8ffffffbfa400000800000007040000f0ffffffb702", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) close(r11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x20}}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") 3m29.171474924s ago: executing program 7 (id=1064): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x80ffffff}, {0x2, 0x9, 0x80}}, [@tmpl={0x144, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x4, 0x3, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x3, 0x0, 0x8}, {{@in=@multicast1, 0x4d4, 0x32}, 0x0, @in=@local, 0x4, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x2b}, 0xa, @in6=@mcast1, 0x0, 0x1, 0x2, 0x0, 0x10000}]}]}, 0x1fc}}, 0x0) 3m29.110981421s ago: executing program 7 (id=1065): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2010871, &(0x7f0000000300)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) close(r0) syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff8000481100fe0000000000000000000000bbff02000000000000000000000000000100004e220048907804000000000000007d91b3ccaf4c2c440fb0558fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc901c7ae6f5d70cb9483b26bed124f6d727b41515931db2a74c8db30257d9d12f392b193a3f14962299b9c3debf2373fa52ba3b762d95af047e135aa55682c6d17e6ffe2be516c63271fec04f9e3a70640eb11c06298642844e700"/211], 0x0) r1 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4) 3m28.897344529s ago: executing program 7 (id=1066): r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) arch_prctl$ARCH_SET_GS(0x1001, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000003701000205000000000000000900000000000000", @ANYRES32=r1, @ANYBLOB="0a076c9cefa6df1ed2e52f76"], 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) acct(&(0x7f0000000100)='./file1\x00') sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 3m20.301343557s ago: executing program 8 (id=1152): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="280000000000000029000000390000002f0202"], 0x28}, 0x922bac8576bdadce) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x70800f5, @private2, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x2, 0xc040) 3m20.289608715s ago: executing program 8 (id=1154): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}, 0x0) 3m20.239965555s ago: executing program 8 (id=1155): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x810, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 3m20.084921844s ago: executing program 8 (id=1157): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000ac0)={r5, @in6={{0xa, 0x4e24, 0xb7, @empty, 0xe}}, [0x5, 0x2, 0x9, 0xe, 0x42f, 0x8, 0x7, 0x2, 0x2, 0x6, 0xc, 0x2, 0x4, 0xb98c, 0x6]}, &(0x7f0000000180)=0x100) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x1005) 3m18.698684908s ago: executing program 8 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000028000000000000060018200000", @ANYBLOB="0000000007000000c3000940000000"], &(0x7f0000000180)='GPL\x00', 0xc}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x2}, 0x26, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000080)) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r5, 0x0) r6 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r8}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) munlockall() 3m13.900570173s ago: executing program 38 (id=1066): r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) arch_prctl$ARCH_SET_GS(0x1001, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000003701000205000000000000000900000000000000", @ANYRES32=r1, @ANYBLOB="0a076c9cefa6df1ed2e52f76"], 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) acct(&(0x7f0000000100)='./file1\x00') sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 3m9.717728359s ago: executing program 8 (id=1224): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48) 3m9.683143693s ago: executing program 39 (id=1224): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48) 2m7.619563134s ago: executing program 1 (id=1794): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x804) socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00'}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r3, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000440)={'team_slave_1\x00', {0x2, 0x4e23, @loopback}}) r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x1}, 0x204, 0x0, 0x43a1b976, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0xd, &(0x7f00000002c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0xb900, 0x9f, &(0x7f0000000780)=""/159, 0x41000, 0x14, '\x00', 0x0, @fallback=0x6ce11b7c02f0e4db, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xa, 0x401, 0x5}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xe96a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = getpid() process_vm_readv(r7, &(0x7f0000000400)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000840)=[{0x0}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x2, 0x0) unshare(0x24020400) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb201, 0x0) r8 = socket(0x2, 0x80805, 0x0) syz_open_procfs(r7, &(0x7f0000000a00)='cgroup\x00') r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) r10 = socket(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040040}, 0x4080) close(r8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 2m7.452643371s ago: executing program 1 (id=1795): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) r1 = socket(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) preadv2(r0, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/244, 0xf4}, {0x0}], 0x2, 0x6, 0x88, 0x1) 2m7.30139547s ago: executing program 1 (id=1796): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b00000000003c721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 2m7.294816369s ago: executing program 1 (id=1797): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r1 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0xf9ffa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0xc, 0x401}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000340)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000140)={0x1, {{0x29, 0x0, 0x4000000, @local}}}, 0xfe48) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r9, r9, 0x4) 2m7.069029334s ago: executing program 1 (id=1799): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 2m6.59335557s ago: executing program 1 (id=1802): io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc, 0x13b}, &(0x7f0000000080), &(0x7f00000014c0)) io_submit(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r1 = inotify_init() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_mrelease(0xffffffffffffffff, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x55000be3) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60000, 0x3) getdents(r2, &(0x7f0000000380)=""/4088, 0xff8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mknod$loop(0x0, 0xc000, 0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045505, &(0x7f00000001c0)) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000001740)='9', 0x1}, {&(0x7f0000000000)="e5d362", 0x3}], 0x2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000080)=0x7) 2m6.59314292s ago: executing program 40 (id=1802): io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc, 0x13b}, &(0x7f0000000080), &(0x7f00000014c0)) io_submit(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r1 = inotify_init() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_mrelease(0xffffffffffffffff, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x55000be3) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60000, 0x3) getdents(r2, &(0x7f0000000380)=""/4088, 0xff8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mknod$loop(0x0, 0xc000, 0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045505, &(0x7f00000001c0)) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000001740)='9', 0x1}, {&(0x7f0000000000)="e5d362", 0x3}], 0x2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000080)=0x7) 4.784367383s ago: executing program 3 (id=2976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"/1247], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000380)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRESHEX], 0x3, 0x241, &(0x7f00000007c0)="$eJzs2k9rXFUYB+D3xjZpU9KJ+I8WxIMu1M2lydpFg7QgBhRthCpIb82NDrnOhNwhMCJ2Vrr1I7gWl+4E6dJNNn4CF+6yybIL8cp0Ru2U2VRjZtTn2cwLZ35n3sOceziLe/TKlx/v7tT5TtGLhSyLhasxiHtZrMZC/G4QL79484dn37757usbm5vX3krp+saNtfWU0sXnvn/v02+ev9u78M63F79bisPV94+O138+fPrw0tGvNz5q16ldp063l4p0u9vtFberMm236908pTersqjL1O7U5f7E+E7V3dvrp6KzvbK8t1/WdSo6/bRb9lOvm3r7/VR8WLQ7Kc/ztLIc/B1bX99rmjhuzt6KpmnOfxUX7sbKT9GK7PGUPXE1e+pW9swgu3TcNK1Zt8o/wv////bAoX4uovriYOtga/Q5Gt/YiXZUUcaVaMUvMdwmY6P6+mub166k+1bj8+rOOH/nYOuxyfxatGJ1en5tlE+T+aVYjjgbMc6vRyuenJ5fn5o/Fy+98MDv59GKHz+IblSxHcPsn/nP1lJ69Y3Nh/KX738PAOC/Jk9/mHp/y/Pp44vj/CPcDx+6X52Jy2dmunQiou5/sltUVbk/P8X5cWsnNOFwqrlYl+LkiqV4pFQWMRjug7lofvEvPHqLp9/qzI4kTtHkOQkAAAAAAAAAAMC/xWm8TjjrNQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPttwAAAP//oiLHlw==") r1 = syz_open_dev$sg(&(0x7f0000001000), 0x80000000, 0x141800) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000001040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x70}}, 0x4880) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8800, 0xe9) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r4) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000000c0)={'vlan0\x00', @multicast}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0xb68c}, {0x60}, {0x2}, {0x6, 0x0, 0x0, 0x2}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000108c00"/20, @ANYRES32=r7, @ANYBLOB="8304050000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r7, @ANYBLOB="2008020000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000b80)=ANY=[@ANYBLOB="7472616e7342f1e3e70f42e70500000000e6ff004c3042f90000800000000000000000", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@fallback=r0, 0x8, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="160000001000000000000000fac0d451d59a5e3c6a13b58044cd2f477bdc9e7fe50df22701b7f6ebf9bb1929756e7e7d5a82d2ff995b13", @ANYRES32=r4, @ANYBLOB, @ANYRES64=r8], 0x20) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5fe, &(0x7f00000002c0)="$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") timer_create(0x5, &(0x7f0000000f00)={0x0, 0x2, 0x4, @thr={&(0x7f0000000d80)="0ff1a784103d2a14bf5d5711f84585adaeefd1f9e466ea7e11f2df6307b592ec334f3961ad8e514050c6449b0a140cae74a829ebc4ce03940d42e1fca320b75ebe1c4028527442e108cabe44594049060875298bc4b05534c14a117311cb9d2a2845ec982e9e1975452b0b1b412a6a301218add2fac22c3bf5f1543e214e3ac8de7a331a7f0be9ec535b1e1c03c24cc271c31030af52e27733d151084c", &(0x7f0000000e40)="b502346e59431cd14baf854dd5b83a4b57df47b6d658c28358e8aa47df1cdc33319b09b4519d68fc47e08bea0158f93d207d9feb53c972ef71a73739d2528bb483bc15fb9c3a3824e9c260e8ee94f3f50a905ce781c954204e01fc6c8789c3756812031245a38532867ca3c38cc66e42a551a2facded2c826d595301874389530f5f608c549a8f11c08d43c9a6462d2123093be0"}}, &(0x7f0000000f40)=0x0) timer_settime(r9, 0x0, &(0x7f0000000f80)={{0x0, 0x989680}}, &(0x7f0000000fc0)) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0/file1\x00', &(0x7f00000008c0), 0x0, 0x0, 0x0) getdents(r3, 0xfffffffffffffffd, 0xbb) 4.544951315s ago: executing program 6 (id=2980): syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = creat(0x0, 0x108) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x8) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a48313714001f0069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 4.52087298s ago: executing program 6 (id=2981): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r1 = dup3(r0, r0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x483e}]}}}]}, 0x3c}}, 0x0) 4.46657718s ago: executing program 6 (id=2983): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffff85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x8028451f, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9f08000000000000006beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9ab97800001022f987617c31850000000000000000000900008000", 0x3c}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000003c0)="3005df", 0x3, r6) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r6) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) 3.5142771s ago: executing program 3 (id=2988): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0xd1, 0x0, 0x8000, 0x40100, r0, 0x615b, '\x00', r1, r0, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xcf}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) 3.512425279s ago: executing program 6 (id=2989): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x141600, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [0x23194b53, 0x7c0, 0x1e8, 0x3ff, 0xffffffff, 0xdb6]}, &(0x7f00000004c0)=0x78) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x4b73, &(0x7f0000000000)={0x0, 0x3e1d, 0x4, 0x2, 0x23d}, &(0x7f0000000080), &(0x7f00000001c0)) cachestat(r1, &(0x7f0000000500)={0x3, 0x4000}, &(0x7f0000000580), 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000002d00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000000140)=ANY=[@ANYBLOB='fscontext=unconfined_u,']) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r8, 0x0, 0xffff, 0x4) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) 3.41338388s ago: executing program 3 (id=2990): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x6, 0x0, 0x2}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x15c, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0x13c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x3ffd}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0x0, 0x0, 0x0, 0x1}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.398961447s ago: executing program 3 (id=2994): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1e, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000600000000000000f6ffffff18110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000b"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) setreuid(0xffffffffffffffff, 0xee01) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) setresuid(0xee00, 0xee01, 0xee01) setfsuid(0xee00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 3.369439581s ago: executing program 3 (id=2995): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x99af, 0xffffffffffffffff, 'id1\x00'}) r1 = timerfd_create(0x6, 0x800) close_range(r0, r1, 0x2) unshare(0x6a040000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500340012800e0001006970366772657461700000001a4102800600"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3.018913952s ago: executing program 0 (id=3001): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) exit(0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000010, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) setrlimit(0xc, &(0x7f0000000000)={0x2}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000200)='./file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtfilter={0xd08, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xcd4, 0x2, [@TCA_U32_POLICE={0xcac, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0xb, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x7, 0xffff519d, 0x9, 0x7, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x8, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x7fffffff, 0x9, 0x0, {0x5, 0x0, 0x2, 0x8, 0x5, 0xe}, {0x7, 0x0, 0x3, 0xfffe, 0x7e55, 0x7}, 0x5, 0x15, 0x200}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0xfffffffb, 0xc, 0x5, 0x1, 0x200, 0x4, 0x0, 0x3, 0x8, 0x0, 0x3, 0x3cc, 0x180000, 0x5, 0xc, 0x7, 0xb, 0x0, 0x9, 0x2e, 0x1, 0x4, 0x40, 0x6, 0x4, 0xc, 0x81, 0x8, 0xf1, 0x9, 0xffff009f, 0x8, 0x5, 0x1, 0xa3, 0x2, 0x9, 0x9, 0x31, 0x6, 0x9a6, 0x80, 0x1, 0x516, 0xfffffffe, 0x1000, 0x800, 0x5, 0x1000, 0x80000001, 0x7ff, 0x5, 0xf8, 0x2d, 0x5, 0x3, 0x0, 0x7, 0xa1, 0x723c, 0x1ff, 0x3, 0x8, 0x7, 0xd, 0x6, 0x3, 0x800, 0xfffffffb, 0x0, 0x7f, 0x1, 0x8001, 0xfffffffe, 0x7d, 0x3c, 0x1, 0xe, 0xffff9c56, 0x5, 0x9, 0x9, 0x8000, 0x2, 0x7, 0xfffffff8, 0x14b, 0xfffff800, 0x400, 0x5, 0x7, 0x7, 0xaf28, 0xffffffff, 0x10, 0xffffff01, 0x8000, 0x90d8, 0xb359, 0x800, 0x6, 0x6, 0x1000, 0x5, 0x20000, 0x8, 0x8, 0x0, 0x7fffffff, 0x1, 0x1, 0x1766, 0x0, 0x200, 0x401, 0x7, 0x7, 0xffffff86, 0x3, 0x0, 0x80, 0x3, 0x5, 0x9, 0x0, 0x9, 0x5, 0x8, 0x3, 0x7, 0x3, 0x1, 0x0, 0x6c, 0x800, 0xe, 0xf1, 0x0, 0x3, 0x3, 0xeaf, 0x2, 0x6, 0x7fff, 0x3, 0x47fd, 0x40, 0x6, 0xfffffffd, 0x4, 0xffffffff, 0x8, 0x5, 0x8, 0x9, 0x6, 0x4a, 0x7639, 0xf, 0x2, 0x3, 0x8, 0x80000000, 0x7, 0x5e4, 0x4, 0x2, 0x3, 0x9, 0x3, 0xc, 0x400, 0x6b9d, 0x0, 0x5, 0x3, 0x80, 0x8, 0x101, 0x9, 0xca5, 0x80, 0xf, 0xf, 0x9, 0x8, 0x10001, 0x6, 0xffff54fb, 0x1e, 0xffffffff, 0x9, 0x7, 0x3, 0x2, 0x7, 0xfffffff8, 0x6, 0x101, 0x4, 0x58, 0x98e, 0xff8000, 0x9, 0x3, 0xffff4cb3, 0xf0, 0x9, 0x6, 0x0, 0xf5df, 0xf, 0x0, 0xb3, 0x52, 0x4, 0x9, 0x9, 0x0, 0xe, 0x4, 0x80, 0x1, 0x80000001, 0x2, 0xe, 0xe7, 0xc89, 0x0, 0x0, 0x7, 0x10001, 0xc5c, 0xe, 0x3, 0x9, 0x4, 0x4, 0x5, 0x1, 0x5, 0x5, 0xb76, 0xf, 0x8001, 0x0, 0x8, 0x7, 0x7, 0xffffb62d, 0x1ff, 0x3, 0x3, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xd08}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.669189182s ago: executing program 3 (id=3004): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x300}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) tkill(r0, 0x13) 2.634228215s ago: executing program 2 (id=3005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0, 0x0, 0x0, 0x20}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 2.330949294s ago: executing program 2 (id=3007): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x7, r1, 0x2}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100000006000000000000000000", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) 2.315659671s ago: executing program 5 (id=3008): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x18}, 0x48) 2.270286113s ago: executing program 5 (id=3009): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(r0, 0x0, &(0x7f00000000c0)={0x99, 0x6}, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x400, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x4200) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000340)={0x0, 0x9, 0x5a74, 0x4}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0xbbd, 0x2, {{0x23, 0x4, 0x3, 0x1, 0x8c, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}, {[@cipso={0x86, 0x39, 0x3, [{0x5, 0x7, "43d07cc096"}, {0xd742cd34d659f1, 0xf, "89affa1d505a2b2d5b15c30f27"}, {0x7, 0xb, "000000000000d35c00"}, {0x1, 0x12, "ff39e2f0470bc9eef88e6d62b90af8a6"}]}, @ssrr={0x89, 0xf, 0x94, [@empty, @dev={0xac, 0x14, 0x14, 0x12}, @empty]}, @rr={0x7, 0x1f, 0xc2, [@remote, @local, @multicast1, @multicast1, @broadcast, @rand_addr=0x64010102, @empty]}, @timestamp={0x44, 0x8, 0x1b, 0x0, 0x6, [0x7f]}, @lsrr={0x83, 0x7, 0x4a, [@multicast1]}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000a00)={@private0={0xfc, 0x0, '\x00', 0x1}, r5}, 0x14) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000300)=""/25, &(0x7f0000000280)=0x19) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000003c0)=0x3, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000e79c82fb1eb924bd620937d900328dc26d63726ae8afc8845a65da381b824af125d3ed2488bac149bb52ab58f791af326d06074997883432449865eee7337fbf5d701ab891d3d54f621153ae6b432b4795751046a1a09854c7caf3a34bb29dcba0ac219d871410e28aeb417ed5244cbd57330c2774b0469cc5e1", @ANYRES16=r7, @ANYBLOB="11050000400000000000090000000c0003800800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x40850}, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, &(0x7f0000002000)="054471de96fdcae518fd187c3646da0e51ffa25bfb3d7efe22503f868b2824a4076ebfc8c8a158a6efa10b7f43ec65d4cb354b8dca6ff907112ada911d29127e77e0cedfe5970ea102ef896b7d57c610b3a4f28f1edf4792317290b56e565a26a4da03cf703884a3e3e5a459defc55f8868a3e65660dafee2c6f2ed401b730e4410dcab5cc927abe5754f0d66f64d0f38756aa7b6ba9f2cc09bcf62ec92ccbbd35ed797cf31ab9e7de65ffb8b37ede64496de4132202822030bc11d3018bb08d5ec4776db26efb1cfb4cf389ead78dbb83a1a6c48fbce4614354d7b4bf9d6d42b613f7aeefdeeaac248067bec4f4218e65363761c2e701c2a47fc9133af503bb128e2361705b6aeab8e3cf69f948bfb3fcca5011197f9d2ab96ae7fedaf3bea44fc9d64066f6c2a9aad385079d2ad3c3e4c5b2220eac0da587d7171c9ba2243941ec3cb505cd50ebdbb78b0d89133443a012f46581450d2e3a643183857a0cbff7331e547d87876a1815db778c9dfeb9940610295b97f2699ea55a706d0bc8ceca712787ba905ce747864dd8d628abe08781e51fffcda753a76d59da41790ac5bdab086abdef8c30cc85e3baff168a64bedb95e21eddf205cb1ca12b6d772d2b256d7a63d3ab06a7499e809e3b3061d0db755f3f5847e8e8b4bf7ad6309e7046ad0c935028170c078523e6dda9910e2ded2aa9f4488dbef15e32fa694bd12b656e9e93e732504c6fdfd180064b22baf4a12641f29829f84fa30eb9dd31cc8931245b95d676f7e31bdf68e27a59ff630a86796caff810ac7d628aa1d9991340580a75c0fed265a37305a36b86e55958b8540efae89be29a575bb6922dae74c5398812f08a624c2b262b53e168ca60895dbe998f1991fb86a9ba589b66a0b042062754ced9cbb33de20aa9259d5cd3e0940415fff2f7b3986d1121186a01e8a623c15660cab70e6faa4230d8d732088abe69b03a26490581bea25d3a5211593c2e3ec2ab061aa381d5eb6f768027c270b3b563d3e07083993316777281556c15a2dda62a2bd2d205403da596ea3a0091f89d5887fef91ae315c37c51af09754f441b66a69c0f02759c565eeaade72a3574d353b1b6e9b5707d2cf1a58291fbb018b81993f4609446f39c9797a4b5be870cd2ca2024935b582670b61da218c741191e7e285c8de2bcd0fdca4966cdbaa1a58f42d783e5d32748f2ceb7a67be8146a47776f6a4405cc523b2b208b766d28c203d8230a0a0076e5901251bc5c8805d82695daf50f54a5307c3f5f3891737426cbda76dd85d959c5b922c5c040800c228041cb05bf479f74249d2fa27e362b4735b5bbe210c53ca90e74b45e523fc781f18704b8aed06f9ad37ed4c7f00f12d0354eec069d0c0c1f7b45e0e38bf0913a25ddeb8d71cd6be0ba634f48aa014d9c24c3c52af87a26acae9780d76345c54fa3a6c245ee864bb09aa73650c693d90d1fb049c479010740b9f889582514555be24db68561f05cb91bac8fe1b2f2cc8b8d1759ec3b497dfbb2166dc84226053519661a483c9f62de495693c63326f42f44c77270e94bd31b02f8339537f9200f44222909d33142071973d502c836ddb690886908943c546f60f5085157ff9f4c1e99af9a01ed1c564d738dabbbc0938c529344d206bbd107bb1e19f94cd1cc7f9c8cd84843294d5f6825a8aa1a983961307b2a66e7599ffb2ab7cadd17446fb35926401d2e3ceb68fcf0dd7ebfdb9d861b81a096b4347a29f26fe4757732153a250428b7b9dbef17c9a0e33cb66c84965024cfe2410a3b7d02d3ce513050240ff2848e7c38682468dd876eb2e0ed032effdecd0b4b7045ee0dd5f947aa02c218cfcab76368fbd6f3b03078b11b95c80bbfb62e2709fb2472318d2ee54dc795a931b8432cbe408abaa14801a7c8d41ea28da16414621fb4255a9b069d3b826b0f96ea6381725ee82a79eda61bc06d6df362f5d813bf43af6ef8bff566fd784e95d0247cca9cdb30f006f899be10df0c72163ebd42f65a148c0c6a15a572fddab10a7af0d1b5c38ccfd20584e6b4ed775bc1740fbd1c6b72402e20cb24932e0280d8a0e56e6cb4acdb264b43414b3f06738c7d304a1ea5217c7b4eac3a07c4b3c41bf577b0ea5964f76952a775e9ec59e1149be1ad9012a0a8398f6123bdc38e05d71b2a8f2ae07e601a32754c875c9859c5ae669f42751133dd91e5c0f2a86ff5b604967bdcba0b186ce29ce957bdd3f767bbd05570751a5138911404a1add0eee9aa439ff474dcdfd681d6d8e69b64b96df7e23ba6e4ed3851212064ec8e23c1494fe7539baed04fcc90eccc31158f8ac0dfafdd837a9fa2230345cb3015c85040197b3a041bfdca1b88a0a759ca03dcad2910b71319d6e30773c0dce4151426d83186f9e258385ee3a03149cc662d1e787debda1d89de8fc8059abce0d4fdbb7eeb7ee2ef5f728cb30322935a70e5920842a879abc0240cd02f9c9b41ea8b240c3b1832383afb6eef08fa68fa9a5106585fc87d6cbc612015824cf347b66bf56dede424d7dd7109cde13a7bbbf624bf80028211e8c9dba917e50f8c90f710f17f05cc94db2ddd0e23bb10a49b8f2e8a76569a4aaf56e4fd885057141b6df7f8fb8f738a305f8ce4f21bceca7026432113b88c85aa2ff1dfb2a5d207290aaa573efb741aa4ca4dcabfc0d40152f0bd229f165a32c4e09cde24c6d896cff32e5f55774318d8596d50d29bb46061f82187066e408535298e2e58496dee6fef733595f055cff89ed4782c081b89b002b7a1c73d45e919967e93f9e93d6dcb3776c309dbff5e3806b3577d6e205a294ec860b157ff3d269ece6b4ba86a200ca906b5b6840c4555dcb12a046aedac7a4e5ca263ca7d0e8c4cc608d905ad6c65d44b5b8148317d40f98c3325996900e1be122d697daa008f491d9f299806cdaabd77fc5f6671eec695a501f45b265acc976b9c6faf50ea3afca9585dd0f518694f534a80ed0785a4144d4e5030c64100744f0c94dd3d049dd108c573533f8b8eff2b1b3c3d47b665288f0c1127f15a63c1637005a59ab68fb5fd2b5ca580c6a9c2e57327359137edcff908c1c1af2f53a3eb951b26cdb48df3aba6e1e7a0560e32e70a314a0e34f9110864af2e215389d3a9e02c772cfbb3e6d725994d6d0817d3c301f0ae90e197eae54b24e6b66f825bc236a3b9b882d8d8a8d65ac23a5170f29e08792d9103592469e9f3eb50c4ea0f86b4dfc73c205f2bbfb99ec546d1c28e7434d3e9c35f67c5abaaa80a4f7ad393f3c3d96c224e061e885439c05549d5df7a9018e75f9a6002d6d1a24c2c603e8f507f3f08e01caeeaa1763191f7684557bc78d787e18824356b99615738f0b3ba55abaa486b7441063563d19c240df76c6abcf9780215e20fdbd6a7adcefa82b2beac1dbf4e308041d2a7f120b4825273b2e375d13a75e36dc421e66c4a1c56d84d5ccac180418ed2cd815919d5cb9d4b9be7258eb0fd1319d79ec2afb1117d5153fac3becfb964ebf0ba0a82364a5d342be7dca192d0c601b196e56e4ec0f8d4f662174be054c133c80a11fc7c8562b0ba17aee6d191dc45297b720f239b499179a577b9b2c72de752c23260d9c0b35e451ba5349635bf33a4ecc2ba4ef7d37a303b7119d3ddf6e559a594e6771ab14956fc9fd8ca5b54b97605c25a1a7f979d3f2be7172585392e6d21790d6c3809454407044c4e35f96015a6e01e3e71b6a1fa1f4255956ed5eb3d449f0fc49ec5fe16d6f4dbc5ab6dcd3a5afd3a9d05cc0999d439a479915effae056fad7b78b8f9af1e128ead14c52542c603187b801abd102292c5bb74728dc621f1dc85b36baa22cd49d2462555db201db11f5ad640ec5730c462934ecf1cdf4bf1013b4011a86d90370b7534e1f4f701e2fbdc9a0bc1a4308c76572286c42c0d3c6634f883dd481d98a983cd24ba3b89cbc02ccf284e46d63e7b9a5e8488ec0a62136631ce319cabef86eeabd8354c02f154b463945c3f7292d2304a1b96593d392fc265ca977b21e902fa6ac7dc307d8b4a55fa767380fab6575ba334fd90d1c8fcab8b7136a6b858791b7ea9a317600dcad157488ffa24ce416dad61b91ab36b27ef00002ad6cd0906b5fd348095e64fee899731b8c2ef431729cbcaf522731a528472e44699b1bc993ed99435d051519b0eba080979ef27f3ab5cff679c7358fa80c1d8d636e7a9744de0a9de2628792acd386ec156cc15b546882b8b3ff1bad52d5142aaa950a9c677755daaf286f9c0fcbdf3cf558a4f863bf575b49ce822977e2f0dbea41a02c6ec3a8f4be5137a86828bd0d03912df19ea119ff13c95a2a08bca1ac4356b65ee79ae785c26aeba1424e383222b5f69be3f5297c9ef5685279e1298bf441b1324a3f64bcc2d3fab88f0ba3ac1fa926dca57bb9e90e7427a07d0b8ab308b2fe087e837e95d7903e0ec98f51debdb1d720a404866fc654ac1e68a84b58daaa05864762ce105a5dc6eb91ec37a316648e6dce3ace28d2529ccc6093be188b562c80d727d8540fbe4ce35d21c0f247281c9e11f780801564a5ebed417004d107e3b7528a4bc140d7d92976c3663d2f6783d3fe323cbe723c6373dc8923785974aa7db60b35666e53c2c57dbfa5adb7fe3f42258d6740baf61347539b5b7a3ee6719fc9b011bb87a9f009e1899ec1ee037e0be3a5fc8566dd7f0ff3aee35f39d83e5263f40edc00eedb4fc77ccb672f5f9cdf83d49cb57a717aff555358bf0b2636adef321478ecbd25262c1aad33cf0d0926a462abb78d969a6e080739882df933bf0977b76da19b202a7d7f906f107c9ab7be66dbfd567dc17461e6626b997cba461b6197eb2ff569e764a1ee1f4003d7389ae91c23b43de0c301fe95bf652504ae146ab88130ab07422c07faf62826cb923b0a67b1611c4e179c04453b5ddcafbe560c91b1f62631530151ca7fb71dfbfa823895ed6c778a482976c6139a0ff7ff23c17a361cd72b4c1d5fa4bf975db61d1a72aa978d9008fb0c9c040f48d3b7c33fcec0b455d00fc422f41be3092155bc5599a68b72cd399815ff06f22058aac2d9ee43dee7ee601bd38a8af8bc0b3382bae6acb2cb2c9c3e24eb9765fc29ec0456d9af3bddea1d8abb34805e17b02e9a6d469d5e377ee69d191cf687857f2977ea5d675a18c54f0286b5144d195beac2601376cb26fbc538e71f2be3c5c6cb8252a5ec9e58322f13c2aa2895218018ae3b44ee26e09857d3d88e2de251013611680fa5df07aee66fceb59ab5588bf1aa19de43b705584b844db6bb03a9163f3a25b9903f51af2b17a6fdd2f2ed34fd53c2ec6c6806a244aa0b4cbaa529bca4435d5048f03b33632c346129dc88187db639f1fa4c98b9a39befcb682015b3ee8d44f2c6ba45ca83561cdd9e4b276571d9cab04ee6290bcbfd15a308fcfafcd8a836a16ae7635be6a05b8c2c3669b43c98f506acb61b4b624ca4f6f2e47d6678f99de04d1b068de209edca995f643b7c0191ce2a6a21e121612616bebf44895ff84a7f0225082788c816a7eed49af37b0d2de6d2ce2787c542a17a144e2557ae4eb66eef87ba023b9ca5a2764b3352a64f56ef5b571fd32174672b5933bb583e07e04fbddae405be73ee75c1fcef6a27ea8403b73375a20cfe77083dc8ae8c4afb21c14bf5422582b903de25db7043ddfd90f1b6f6bd13139cfe19596c6fa77b18c55ac78c5d6099b94bf96c0aa8f0e53f3c69740d2e2bf6751ada108f018cc68220e2732af7affbdf93dac19056d1562997bca437d693e21f5a5208fc17d72", 0x1000, 0x200c08d1, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x4}, 0x10) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}]}, 0x3}, 0x1) 1.785418396s ago: executing program 2 (id=3010): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb70b, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x7e00, 0x0, 0x8004}, 0x24000800) 1.784396175s ago: executing program 0 (id=3011): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000240)}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x2f, 0xe, 0x2, 0xff, 0x51, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8700, 0x6790, 0x7f}}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x5}, 0x4044, 0x0, 0x80000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x0, &(0x7f0000000240)}) (async) capset(&(0x7f0000000080)={0x20080522}, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x109f80, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0x7040, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) (async) r2 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x24, 0x1, 0x5, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xf}, 0x6025, 0x4005, 0x6, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000001}, 0x0, 0x7, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000002c0)) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x80) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r5 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0xff, 0x0, 0x8, 0x40049, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xd, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socket$kcm(0x23, 0x2, 0x0) (rerun: 32) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001c80)=ANY=[@ANYRES64=r2, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRES16, @ANYBLOB="1c3ec04f2599102664d4d22600bda9ce32d67c2de1e40429674974d34e7a5f871e660719eda2f088befe74d35da23c059f8458e8d32d14ddc28673d6a89c8ac69e962c30efe66d1e8955cd2260", @ANYRESOCT=0x0, @ANYRESHEX=r2, @ANYRESHEX=r4, @ANYRESHEX=r1], 0x32661) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r6 = openat(r5, &(0x7f0000000180)='./bus\x00', 0x40840, 0x0) (async, rerun: 64) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x55) (async, rerun: 64) prlimit64(r3, 0x9, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0xcb748000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) ioctl$SG_GET_LOW_DMA(r6, 0x227a, 0x0) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) 1.746818328s ago: executing program 5 (id=3012): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc00000014000704ab5b2509b868030040ab087a0100000002481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 1.704011309s ago: executing program 5 (id=3013): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4300, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x40, 0x64b}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x15, 0x800, 0xfd, &(0x7f00000000c0)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.601426859s ago: executing program 2 (id=3014): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003e0000000000000000000a000000020000006bd1d0327c9d2e0000"], 0x18}}, 0x0) 1.601019769s ago: executing program 2 (id=3015): r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x4e8, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4d4, 0x3, 0x0, 0x1, [{0x4d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c8, 0x1, "7b90c155a85520ed195949a062ad254b84a63d87101a8a4558143cbe9b57a0802c99cfb21f9885d07fa19146301869917aaec51e261dce49b4055eca08b36b977f9ce23c84579276b01e9268c1bf9b59a6b775ea68c672b691a33f2719d8e6294b13b28c53336f182bffc85002de6df44acc0ca124c75586ff20fc8c3fe7438a79e88baf24d6a2f210587e01925ddf0c02df2a07e775b751182ac66ac6506880585b629ead1a788e5052ba17ddf498967cb17ca3d7b653cb423cb3fe3963c11fab563594dce6225ca941a44fbca93f4ab13def5f892a263e6a761eb3175e4567fc32592cdd7f780c421efd34890643baf3a5aa4d00ed3e801983cffaf9436d52343dbcaf9def2d32eab4b37f14d316ac5d83787355d930369a9c0ef05e20a81d1fa18b3bdc0c3dc9a03b65ba4b8f2cf731f82f0c456e1592f338b46ddbceb53b7bba97c8d397878da7edd3e72c7ed0813608698ade4d3172f5d38ed0eee134ecb8c99c586ed6bdb0cfe3a5d08f153add4a895930a1267eb2bbdc70e78339f228ee98cb7322f1412c3d327f9f200574297a4796b7bb6c8da9380c098b3ea51a0a539f3e5099bcc9386ab60f5448c5397480913a7d838dfdfee4a5d696a067cd8d0f2c19e30594277c6dc433876401f90b681c8c7a003f62613e1435d85566a44f25f3551cccecbb7b4512709b2867fc81e350a8848511c4d7e4db74ac6f2dc0621c4bc5f3de95484469c1b75b6e4fbb5c92967c5e6eeb9e8bf12371192ee0a85e69231f4ddf294ca6e7790e89cfbf5862d66b2eb237ff01cd105e22621db79069f3ce6f1c66fae7f2478aa5ee13ab82664e84c715e8f54f15cad6a552e568be4c12f85d11e0ff3a4bcc3e73f17d142cb993f650ad73f91c15c50ca240282f9667761a3c78c926f7fd544c23a000ecca6dd7b4b7f190f13bf6319bfd87538b9df3c55d841a0f4de23dc8cb75cb4bd9ffc1c1c98aa7170c735adcaadd292c2fee8488321d8db1f2a528feacf5d8740d5b185a1ccd3dab5a1b279d6a51726ea88c72f3f4ccb151a33172babc16c8353473a72e4ffa3d91833dd3a60b7c36eb90e855dd46ef569ffda0152a9ef351a108c33d1498ee9da932618a801dc0f0bf2f6e66b2c72b5945914747cd95722dc26d2b599c5882a8780667b61d062c25e81427549430980c31b00c44eb0e93ac686172840f9d1b700aa47b017616849e3281feb7a30b34640515283aca7d55b925fb151bd08a6cb2ea1036d5e8da2ed11226314c5a1e322db9b0c2bc512ac6edcf5527c75fa62681e7deb8ea3608b9fe6eb52846276f7d8a88177fe2e305822906240dd3fb2fe7636841c0d811569b64ac7fc6b88a5e22f87dd4bd433e817a6c3e660c390ee163bfb42fa561046e93781166364ab02590f02fed87585a1c097178e3d106ba8aab871ede4c6a7fc448546e503fc7466ca094fa5bbca88ab55fc5fc240568e617c372e49cfc84ba003493b96e95d3692e7cf331d1afce4fb4a425f2b83bd6833f422b98a8f2855c036ec89467bc504df2754f943381acc88da1548de5960ba53db41d1ef687f1205fbb02d928c48fcfd491f90652e9e5c32d72f2ededdd904d1f6aa350a3a1195e3b97839ace5a7e3fefd84bdc37b71e4ef664fd906a8908b789d1692dbb7ed31b748ce4a560be1b95cfc38d7bcfd1ff74dcf7ccaaf11b77cbef856580d82d49b988576892c5711fcc5940c8"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x524}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000001080)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={0xfffffffffffffffc}}, 0x4000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000088) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x1, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xee01}, {0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 1.527440244s ago: executing program 5 (id=3016): r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x4e8, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4d4, 0x3, 0x0, 0x1, [{0x4d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c8, 0x1, "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"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x524}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000001080)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={0xfffffffffffffffc}}, 0x4000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000088) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x1, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xee01}, {0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 1.193126058s ago: executing program 0 (id=3017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.036413717s ago: executing program 0 (id=3018): prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000100)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000480)={{0xffffffffffffffff, &(0x7f0000000180)='!\x00', 0x420005, &(0x7f00000001c0)={@align=0x2, {0x3, 0x2, 0x7, 0x2}}, 0x80000000, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x1}, 0x2, &(0x7f0000000440)=[{0x2, 0x3, &(0x7f0000000280)='!*-{\x00', &(0x7f00000002c0)="bba5c9b8ec16430afb917a7aa9bfe479236d58757385fe94716748b38fa4b05e1714141907eadbac9d3f6eb324c678c41a660caf1f1ca2923f8f4f5914768ad3b484d637a09cd0eaaa71a6da1bc64aa6263697b96cafd1c5e342ab1f04dec98c4194befee58cae3104d60f40afad1bfeddae0c798725271cda3c576c7965e07445c2be70319b0b9dc65a01b8baa4b4a1e031868e6a7d68e9a902957f71a3360f11529632a8665b97dc2abbd45078aa3f3301f082baabc37314ecdb5585c5eb2d87b8a258f93e8cb26344df761dc9401bd894ff8ea8edeafb0431df2b991060", 0xdf, 0x2a}, {0x3, 0x6b6, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="f2a7a7cd4f06066b3d5c97a759b256c714d6ca3cd24e3af2943b720938dfb7114b", 0x21, 0x2}]}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x7, 0x7, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20044850}, 0x44040) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000680)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000006c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x10) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000880)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000008c0)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000900)) socket$inet6(0xa, 0x5, 0x80000001) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x65) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xc0000c1}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r3, 0x800, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x40) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000a80)={0x1, {{0xa, 0x4e20, 0xffff, @loopback, 0xf8481a4}}}, 0x88) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000b40)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e23, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0xffffff79}}, 0x5, 0xff, 0x100, 0x5, 0xe316}, &(0x7f0000000c40)=0x98) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000c80)={r5, 0x0, 0x5}, 0x8) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000cc0)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000d00)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000d40)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000d80)) 1.022710364s ago: executing program 0 (id=3019): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") r0 = creat(&(0x7f0000012300)='./file0\x00', 0x53) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/239, 0xef}], 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200) 575.874385ms ago: executing program 2 (id=3020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x9d35, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000000, 0x1}, 0x501, 0x2000007fff, 0x0, 0x6, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x29, 0x1, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) r10 = fsmount(r5, 0x0, 0x2) fchdir(r10) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x5}, 0x18) 509.244411ms ago: executing program 0 (id=3021): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7efc1ffb}]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0x200, 0x824, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x71f2f6bc, 0x5}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfe, r7}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x65) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000001c0)=0x8) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 393.411238ms ago: executing program 6 (id=3022): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f0000000000)='nojournal_checksum', 0x1, &(0x7f0000000040)={@_ha_fsid={[0x6, 0x80000001]}, {0x81, 0xb9d, 0x9a, 0xd}}, 0x10, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x1}, 0x3, &(0x7f0000000440)=[{0x2, 0x5, &(0x7f0000000140)='ext4\x00', &(0x7f0000000180)="53484303b45f15f20078df9afee8f83298281b4ef8b421d0ec94ca6cd89d054db18c8d9a190a59f17c6c5b882e933b23524c301e40513c5b250a06b87f2c2b26278fc37d784b9b7b87c07570634410e9af6a6997ea0e74b598c8d0173e9a704ee3049e490be265a4e4720fd008c9e4209869cefed828db3dfed271a4e539680a1c430b4c1bbead41c0814f019d8d", 0x8e, 0x27b5adb5ee1d4ca8}, {0x3, 0x3, &(0x7f0000000240)='ext4\x00', &(0x7f0000000280)="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", 0xfb, 0x28}, {0x1, 0x6, &(0x7f0000000380)='nojournal_checksum', &(0x7f00000003c0)="bc6ecb61822af4aa6843ab724c6e9c05522332b477df199c25483d6592ebad7bf3acc816a6f74c68f2eee2114f458627729886c6e01c51f6fde7a2ff8708004c3a50c0394bb282dd3b253ca1ca71122f8e376650989467e52a", 0x59, 0x28}]}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0x4e, 0xfff9, 0x9, 0x8007, 0xa, "7e77672dffffff00"}) mkdir(&(0x7f0000000080)='./bus\x00', 0x4) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 356.893381ms ago: executing program 6 (id=3023): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="3c00000010000d042abd", @ANYBLOB="01000000000000001c00128009000100626f6e64000000"], 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x60040004}, 0x0) r10 = socket(0x11, 0x3, 0x0) recvmsg(r10, 0x0, 0x40) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000340)=0x4) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000004c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1c, r11}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 0s ago: executing program 5 (id=3024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) kernel console output (not intermixed with test programs): itial error at time 2000002211: ext4_validate_block_bitmap:441 [ 324.375139][T13147] veth7: entered allmulticast mode [ 324.383428][ C1] EXT4-fs (loop6): last error at time 2000002211: ext4_validate_block_bitmap:441 [ 324.398159][T13138] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 324.409874][T13138] loop6: lost filesystem error report for type 5 error -117 [ 324.418718][T13138] EXT4-fs (loop6): 1 truncate cleaned up [ 324.434505][T13153] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 324.441129][T13138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.454254][T13153] netlink: 'syz.0.2565': attribute type 10 has an invalid length. [ 324.510777][T13138] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.2561: bad symlink. [ 324.561448][T13161] netlink: 'syz.6.2561': attribute type 15 has an invalid length. [ 324.571583][T13138] netlink: 'syz.6.2561': attribute type 15 has an invalid length. [ 324.656413][ T8939] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.717250][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.016518][T13190] netlink: 'syz.5.2576': attribute type 21 has an invalid length. [ 325.039527][T13192] FAULT_INJECTION: forcing a failure. [ 325.039527][T13192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.087453][T13192] CPU: 0 UID: 0 PID: 13192 Comm: syz.6.2577 Tainted: G W syzkaller #0 PREEMPT(full) [ 325.087482][T13192] Tainted: [W]=WARN [ 325.087488][T13192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.087499][T13192] Call Trace: [ 325.087506][T13192] [ 325.087521][T13192] __dump_stack+0x1d/0x30 [ 325.087611][T13192] dump_stack_lvl+0x95/0xd0 [ 325.087634][T13192] dump_stack+0x15/0x1b [ 325.087655][T13192] should_fail_ex+0x263/0x280 [ 325.087731][T13192] should_fail+0xb/0x20 [ 325.087751][T13192] should_fail_usercopy+0x1a/0x20 [ 325.087800][T13192] _copy_from_user+0x1c/0xb0 [ 325.087826][T13192] do_sock_getsockopt+0xf1/0x210 [ 325.087872][T13192] __x64_sys_getsockopt+0x11d/0x1a0 [ 325.087900][T13192] x64_sys_call+0x2dcf/0x3020 [ 325.087925][T13192] do_syscall_64+0x12c/0x370 [ 325.087967][T13192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.087986][T13192] RIP: 0033:0x7f8b63dec799 [ 325.088002][T13192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.088020][T13192] RSP: 002b:00007f8b6283f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 325.088041][T13192] RAX: ffffffffffffffda RBX: 00007f8b64065fa0 RCX: 00007f8b63dec799 [ 325.088069][T13192] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 325.088083][T13192] RBP: 00007f8b6283f090 R08: 0000200000000240 R09: 0000000000000000 [ 325.088097][T13192] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000001 [ 325.088108][T13192] R13: 00007f8b64066038 R14: 00007f8b64065fa0 R15: 00007ffc8d6fbb18 [ 325.088130][T13192] [ 325.264167][ T28] kauditd_printk_skb: 210 callbacks suppressed [ 325.264183][ T28] audit: type=1400 audit(2000002212.376:2725): avc: denied { recv } for pid=6041 comm="kworker/u8:17" saddr=10.128.0.163 src=44266 daddr=10.128.0.42 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 325.350087][T13201] tipc: Enabled bearer , priority 0 [ 325.374711][T13201] syzkaller0: entered promiscuous mode [ 325.380215][T13201] syzkaller0: entered allmulticast mode [ 325.413028][T13201] tipc: Resetting bearer [ 325.453022][ T28] audit: type=1400 audit(2000002212.676:2726): avc: denied { create } for pid=13204 comm="syz.3.2582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 325.550092][T13158] set_capacity_and_notify: 11 callbacks suppressed [ 325.550114][T13158] loop0: detected capacity change from 0 to 1024 [ 325.588716][T13200] tipc: Resetting bearer [ 325.594624][ T28] audit: type=1400 audit(2000002212.816:2727): avc: denied { create } for pid=13204 comm="syz.3.2582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 325.617177][ T28] audit: type=1400 audit(2000002212.816:2728): avc: denied { write } for pid=13204 comm="syz.3.2582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 325.657213][T13200] tipc: Disabling bearer [ 325.678045][T13158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.695657][T13205] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 325.713683][ T28] audit: type=1400 audit(2000002212.896:2729): avc: denied { create } for pid=13204 comm="syz.3.2582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 325.834148][ T28] audit: type=1400 audit(2000002212.896:2730): avc: denied { setopt } for pid=13204 comm="syz.3.2582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 325.836313][T13221] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2587'. [ 325.884878][T12441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.894095][ T28] audit: type=1400 audit(2000002212.896:2731): avc: denied { create } for pid=13204 comm="syz.3.2582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 325.932667][ T28] audit: type=1400 audit(2000002212.896:2732): avc: denied { write } for pid=13204 comm="syz.3.2582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 325.954883][ T28] audit: type=1400 audit(2000002212.896:2733): avc: denied { nlmsg_write } for pid=13204 comm="syz.3.2582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 325.976375][ T28] audit: type=1400 audit(2000002213.006:2734): avc: denied { write } for pid=13204 comm="syz.3.2582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 326.031039][T13235] tipc: Cannot configure node identity twice [ 326.103192][T13243] loop5: detected capacity change from 0 to 256 [ 326.124941][T13243] syzkaller0: entered promiscuous mode [ 326.130673][T13243] syzkaller0: entered allmulticast mode [ 326.130774][T13228] futex_wake_op: syz.6.2590 tries to shift op by 32; fix this program [ 326.371227][T13251] loop0: detected capacity change from 0 to 256 [ 326.565953][T13251] FAT-fs (loop0): Directory bread(block 64) failed [ 326.572600][T13251] FAT-fs (loop0): Directory bread(block 65) failed [ 326.579201][T13251] FAT-fs (loop0): Directory bread(block 66) failed [ 326.586226][T13251] FAT-fs (loop0): Directory bread(block 67) failed [ 326.592889][T13251] FAT-fs (loop0): Directory bread(block 68) failed [ 326.599547][T13251] FAT-fs (loop0): Directory bread(block 69) failed [ 326.606225][T13251] FAT-fs (loop0): Directory bread(block 70) failed [ 326.612792][T13251] FAT-fs (loop0): Directory bread(block 71) failed [ 326.619457][T13251] FAT-fs (loop0): Directory bread(block 72) failed [ 326.626210][T13251] FAT-fs (loop0): Directory bread(block 73) failed [ 327.958264][T13260] loop3: detected capacity change from 0 to 512 [ 328.081944][T13267] netlink: 'syz.3.2604': attribute type 10 has an invalid length. [ 328.107249][T13267] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2604'. [ 328.118879][T13267] bond0: entered promiscuous mode [ 328.124651][T13267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.134747][ T6041] bio_check_eod: 2403 callbacks suppressed [ 328.134764][ T6041] kworker/u8:17: attempt to access beyond end of device [ 328.134764][ T6041] loop0: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 328.224456][ T6041] kworker/u8:17: attempt to access beyond end of device [ 328.224456][ T6041] loop0: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 328.316507][ T6041] kworker/u8:17: attempt to access beyond end of device [ 328.316507][ T6041] loop0: rw=1, sector=1960, nr_sectors = 8008 limit=256 [ 328.388671][ T6041] kworker/u8:17: attempt to access beyond end of device [ 328.388671][ T6041] loop0: rw=1, sector=9968, nr_sectors = 8216 limit=256 [ 328.433875][ T6041] kworker/u8:17: attempt to access beyond end of device [ 328.433875][ T6041] loop0: rw=1, sector=18184, nr_sectors = 6048 limit=256 [ 328.467079][ T6041] kworker/u8:17: attempt to access beyond end of device [ 328.467079][ T6041] loop0: rw=1, sector=24264, nr_sectors = 32 limit=256 [ 328.495492][ T6041] kworker/u8:17: attempt to access beyond end of device [ 328.495492][ T6041] loop0: rw=1, sector=24328, nr_sectors = 32 limit=256 [ 328.524373][ T6041] kworker/u8:17: attempt to access beyond end of device [ 328.524373][ T6041] loop0: rw=1, sector=24392, nr_sectors = 32 limit=256 [ 328.548608][ T6041] kworker/u8:17: attempt to access beyond end of device [ 328.548608][ T6041] loop0: rw=1, sector=24456, nr_sectors = 32 limit=256 [ 328.593273][T13269] loop5: detected capacity change from 0 to 1024 [ 328.604288][ T6041] kworker/u8:17: attempt to access beyond end of device [ 328.604288][ T6041] loop0: rw=1, sector=24520, nr_sectors = 32 limit=256 [ 328.727870][T13269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.755470][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2605'. [ 328.809268][T13280] chnl_net:caif_netlink_parms(): no params data found [ 328.844074][T10896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.019866][T13288] loop5: detected capacity change from 0 to 512 [ 329.110610][T13288] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.2611: corrupted inode contents [ 329.154232][T13288] fserror_report: 12 callbacks suppressed [ 329.154248][T13288] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 329.164149][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 329.179612][ C1] EXT4-fs (loop5): initial error at time 2000002216: ext4_do_update_inode:5569: inode 3 [ 329.189378][ C1] EXT4-fs (loop5): last error at time 2000002216: ext4_do_update_inode:5569: inode 3 [ 329.218210][T13288] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.2611: mark_inode_dirty error [ 329.246881][T13288] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 329.247307][T13288] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.2611: corrupted inode contents [ 329.307974][T13288] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 329.308134][T13288] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.2611: mark_inode_dirty error [ 329.364234][T13288] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 329.377197][T13288] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2611: Failed to acquire dquot type 0 [ 329.414236][T13288] loop5: lost filesystem error report for type 5 error -117 [ 329.424374][T13288] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2611: corrupted inode contents [ 329.454229][T13288] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 329.454378][T13288] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.2611: mark_inode_dirty error [ 329.490599][T13288] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 329.490791][T13288] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2611: corrupted inode contents [ 329.543204][T13288] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 329.543439][T13288] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.2611: mark_inode_dirty error [ 329.581110][T13288] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 329.581376][T13288] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2611: corrupted inode contents [ 329.602822][T13288] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 329.603031][T13288] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 329.621195][T13288] loop5: lost filesystem error report for type 5 error -117 [ 329.621393][T13288] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2611: corrupted inode contents [ 329.642619][T13288] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 329.642870][T13288] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.2611: mark_inode_dirty error [ 329.670206][T13288] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 329.682289][T13288] loop5: lost filesystem error report for type 5 error -117 [ 329.686672][T13288] EXT4-fs (loop5): 1 truncate cleaned up [ 329.706704][T13288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.723381][T13288] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.926497][T13322] random: crng reseeded on system resumption [ 329.935405][T13322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13322 comm=syz.2.2621 [ 329.948458][T13322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=13322 comm=syz.2.2621 [ 330.497770][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 330.497799][ T28] audit: type=1326 audit(2000002217.726:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13325 comm="syz.2.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 330.536857][ T28] audit: type=1326 audit(2000002217.726:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13325 comm="syz.2.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 330.560668][ T28] audit: type=1326 audit(2000002217.726:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13325 comm="syz.2.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 330.574587][T10896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.606569][ T28] audit: type=1326 audit(2000002217.726:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13325 comm="syz.2.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 330.631009][ T28] audit: type=1326 audit(2000002217.726:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13325 comm="syz.2.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 330.692800][T13338] loop6: detected capacity change from 0 to 512 [ 330.693193][T13339] loop0: detected capacity change from 0 to 256 [ 330.717253][ T28] audit: type=1326 audit(2000002217.726:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13325 comm="syz.2.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 330.753018][T13338] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 330.812210][ T28] audit: type=1326 audit(2000002217.726:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13325 comm="syz.2.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 330.855445][T13349] loop5: detected capacity change from 0 to 256 [ 330.863851][T13339] FAULT_INJECTION: forcing a failure. [ 330.863851][T13339] name failslab, interval 1, probability 0, space 0, times 0 [ 330.872290][T13349] msdos: Unknown parameter 'nodo' [ 330.886672][ T28] audit: type=1326 audit(2000002217.726:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13325 comm="syz.2.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 330.920400][T13339] CPU: 1 UID: 0 PID: 13339 Comm: syz.0.2629 Tainted: G W syzkaller #0 PREEMPT(full) [ 330.920430][T13339] Tainted: [W]=WARN [ 330.920438][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.920451][T13339] Call Trace: [ 330.920457][T13339] [ 330.920464][T13339] __dump_stack+0x1d/0x30 [ 330.920496][T13339] dump_stack_lvl+0x95/0xd0 [ 330.920516][T13339] dump_stack+0x15/0x1b [ 330.920537][T13339] should_fail_ex+0x263/0x280 [ 330.920571][T13339] ? vfat_add_entry+0x17e/0x2280 [ 330.920599][T13339] should_failslab+0x8c/0xb0 [ 330.920620][T13339] __kmalloc_cache_noprof+0x5f/0x410 [ 330.920645][T13339] vfat_add_entry+0x17e/0x2280 [ 330.920707][T13339] ? fat_search_long+0x93a/0x9b0 [ 330.920739][T13339] ? __pfx_vfat_create+0x10/0x10 [ 330.920867][T13339] vfat_create+0xb2/0x1b0 [ 330.920894][T13339] ? __pfx_vfat_create+0x10/0x10 [ 330.920917][T13339] path_openat+0xd75/0x2050 [ 330.921031][T13339] do_file_open+0x16c/0x290 [ 330.921063][T13339] do_sys_openat2+0x94/0x130 [ 330.921187][T13339] __x64_sys_creat+0x65/0x90 [ 330.921208][T13339] x64_sys_call+0x2ea0/0x3020 [ 330.921228][T13339] do_syscall_64+0x12c/0x370 [ 330.921249][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.921313][T13339] RIP: 0033:0x7f972115c799 [ 330.921327][T13339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.921342][T13339] RSP: 002b:00007f971fbaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 330.921359][T13339] RAX: ffffffffffffffda RBX: 00007f97213d5fa0 RCX: 00007f972115c799 [ 330.921436][T13339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 330.921447][T13339] RBP: 00007f971fbaf090 R08: 0000000000000000 R09: 0000000000000000 [ 330.921458][T13339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 330.921468][T13339] R13: 00007f97213d6038 R14: 00007f97213d5fa0 R15: 00007ffcf0790e68 [ 330.921559][T13339] [ 331.094176][ T28] audit: type=1326 audit(2000002217.726:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13325 comm="syz.2.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 331.196685][T13353] loop0: detected capacity change from 0 to 256 [ 331.237262][T13353] lo speed is unknown, defaulting to 1000 [ 331.245970][ T28] audit: type=1400 audit(2000002217.756:2745): avc: denied { write } for pid=13327 comm="syz.6.2623" name="file0" dev="tmpfs" ino=1369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 331.400730][T13357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2635'. [ 331.511592][T13362] lo speed is unknown, defaulting to 1000 [ 331.653681][T13365] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 331.945714][T13376] loop2: detected capacity change from 0 to 512 [ 332.012991][T13376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.035813][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2637'. [ 332.110372][T13376] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.176099][T13380] loop5: detected capacity change from 0 to 1024 [ 332.224568][T13380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 332.266094][T13380] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.298805][T13377] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2643: lblock 0 mapped to illegal pblock 0 (length 1) [ 332.312593][T13377] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 332.324981][T13377] EXT4-fs (loop5): This should not happen!! Data will be lost [ 332.324981][T13377] [ 332.338008][T13377] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.2643: lblock 0 mapped to illegal pblock 0 (length 1) [ 332.351944][T13377] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.2643: lblock 3 mapped to illegal pblock 3 (length 1) [ 332.374938][T13377] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 332.387600][T13377] EXT4-fs (loop5): This should not happen!! Data will be lost [ 332.387600][T13377] [ 332.402315][T13377] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2643'. [ 332.471300][T13388] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2646'. [ 332.500619][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2646'. [ 332.527714][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2646'. [ 332.529991][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2645'. [ 332.536926][T13388] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2646'. [ 332.648831][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.659004][T10896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 332.695141][T13389] lo speed is unknown, defaulting to 1000 [ 332.766572][T13410] x_tables: duplicate underflow at hook 2 [ 332.776026][T13409] netlink: 'syz.5.2650': attribute type 10 has an invalid length. [ 332.784094][T13410] loop2: detected capacity change from 0 to 512 [ 332.789155][T13405] lo speed is unknown, defaulting to 1000 [ 332.790729][T13410] ext4: Bad value for 'barrier' [ 332.808359][T13409] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2650'. [ 332.822267][T13409] bridge0: port 1(dummy0) entered blocking state [ 332.835467][T13409] bridge0: port 1(dummy0) entered disabled state [ 332.842282][T13409] dummy0: entered allmulticast mode [ 332.848472][T13409] dummy0: entered promiscuous mode [ 332.854147][T13409] bridge0: port 1(dummy0) entered blocking state [ 332.860695][T13409] bridge0: port 1(dummy0) entered forwarding state [ 332.938529][T13419] netlink: 'syz.5.2653': attribute type 10 has an invalid length. [ 332.978813][T13389] chnl_net:caif_netlink_parms(): no params data found [ 332.988354][T13425] loop6: detected capacity change from 0 to 512 [ 333.018983][T13425] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.2656: corrupted inode contents [ 333.042372][T13425] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #3: comm syz.6.2656: mark_inode_dirty error [ 333.053646][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 333.053668][ C0] EXT4-fs (loop6): initial error at time 2000002220: ext4_do_update_inode:5569: inode 3 [ 333.053721][ C0] EXT4-fs (loop6): last error at time 2000002220: ext4_do_update_inode:5569: inode 3 [ 333.080745][T13425] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.2656: corrupted inode contents [ 333.083665][T13432] loop5: detected capacity change from 0 to 512 [ 333.092772][T13425] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.2656: mark_inode_dirty error [ 333.111226][T13425] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2656: Failed to acquire dquot type 0 [ 333.126184][T13436] loop2: detected capacity change from 0 to 512 [ 333.136734][T13425] loop6: lost filesystem error report for type 5 error -117 [ 333.141658][T13436] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 333.159211][T13432] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.2657: corrupted inode contents [ 333.196756][T13432] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.2657: mark_inode_dirty error [ 333.208083][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 333.208112][ C0] EXT4-fs (loop5): initial error at time 2000002220: ext4_do_update_inode:5569: inode 3 [ 333.208145][ C0] EXT4-fs (loop5): last error at time 2000002220: ext4_do_update_inode:5569: inode 3 [ 333.208557][T13436] EXT4-fs (loop2): orphan cleanup on readonly fs [ 333.214743][T13425] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2656: corrupted inode contents [ 333.224637][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.235131][T13425] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.2656: mark_inode_dirty error [ 333.240811][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.252229][T13432] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.2657: corrupted inode contents [ 333.261440][T13436] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.2658: Allocating blocks 41-42 which overlap fs metadata [ 333.271087][T13432] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.2657: mark_inode_dirty error [ 333.278458][T13389] bridge_slave_0: entered allmulticast mode [ 333.289977][T13432] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2657: Failed to acquire dquot type 0 [ 333.303630][T13436] loop2: lost filesystem error report for type 5 error -117 [ 333.314471][T13432] loop5: lost filesystem error report for type 5 error -117 [ 333.321842][T13425] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2656: corrupted inode contents [ 333.334151][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 333.354172][T13425] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.2656: mark_inode_dirty error [ 333.358085][ C0] EXT4-fs (loop2): initial error at time 2000002220: ext4_mb_mark_diskspace_used:4222 [ 333.366897][T13389] bridge_slave_0: entered promiscuous mode [ 333.375805][ C0] [ 333.375813][ C0] EXT4-fs (loop2): last error at time 2000002220: ext4_mb_mark_diskspace_used:4222 [ 333.394956][T13436] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.2658: Failed to acquire dquot type 1 [ 333.405258][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.421194][T13436] loop2: lost filesystem error report for type 5 error -117 [ 333.421330][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.424422][T13425] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2656: corrupted inode contents [ 333.429228][T13389] bridge_slave_1: entered allmulticast mode [ 333.436040][T13432] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2657: corrupted inode contents [ 333.467445][T13425] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 333.467744][T13432] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.2657: mark_inode_dirty error [ 333.476137][T13436] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 333.502121][T13425] loop6: lost filesystem error report for type 5 error -117 [ 333.505397][T13432] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2657: corrupted inode contents [ 333.507135][T13425] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2656: corrupted inode contents [ 333.513360][T13389] bridge_slave_1: entered promiscuous mode [ 333.534277][T13436] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.2658: corrupted inode contents [ 333.558113][T13432] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.2657: mark_inode_dirty error [ 333.558265][T13425] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.2656: mark_inode_dirty error [ 333.558640][T13436] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #12: comm syz.2.2658: mark_inode_dirty error [ 333.581018][T13436] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.2658: corrupted inode contents [ 333.612915][T13432] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2657: corrupted inode contents [ 333.620252][T13389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.624847][T13425] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 333.635445][T13436] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.2658: mark_inode_dirty error [ 333.654329][T13432] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 333.656063][T13389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.662876][T13425] loop6: lost filesystem error report for type 5 error -117 [ 333.672146][T13432] loop5: lost filesystem error report for type 5 error -117 [ 333.679956][T13432] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2657: corrupted inode contents [ 333.680211][T13436] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.2658: corrupted inode contents [ 333.687473][T13432] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.2657: mark_inode_dirty error [ 333.704762][T13436] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 333.711389][T13425] EXT4-fs (loop6): 1 truncate cleaned up [ 333.723533][T13436] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #12: comm syz.2.2658: corrupted inode contents [ 333.730913][T13432] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 333.738319][T13436] EXT4-fs error (device loop2): ext4_truncate:4587: inode #12: comm syz.2.2658: mark_inode_dirty error [ 333.748829][T13425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.780987][T13436] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 333.783456][T13425] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.792194][T13436] EXT4-fs (loop2): 1 truncate cleaned up [ 333.801278][T13432] EXT4-fs (loop5): 1 truncate cleaned up [ 333.806537][T13436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 333.813472][T13432] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.841224][T13389] team0: Port device team_slave_0 added [ 333.851021][T13389] team0: Port device team_slave_1 added [ 333.904604][T13389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.911720][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.964189][T13389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.053232][T13389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.060362][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.087179][T13389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.197760][ T30] bridge0: port 1(dummy0) entered disabled state [ 334.350929][T13474] tmpfs: Bad value for 'mpol' [ 334.367533][T13469] FAT-fs (loop2): Directory bread(block 64) failed [ 334.378295][T13469] FAT-fs (loop2): Directory bread(block 65) failed [ 334.399060][T13469] FAT-fs (loop2): Directory bread(block 66) failed [ 334.416435][T10896] EXT4-fs unmount: 3 callbacks suppressed [ 334.416451][T10896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.425861][T13469] FAT-fs (loop2): Directory bread(block 67) failed [ 334.443071][ T30] dvmrp0 (unregistering): left allmulticast mode [ 334.447315][T13469] FAT-fs (loop2): Directory bread(block 68) failed [ 334.456364][T13469] FAT-fs (loop2): Directory bread(block 69) failed [ 334.462908][T13469] FAT-fs (loop2): Directory bread(block 70) failed [ 334.469801][T13469] FAT-fs (loop2): Directory bread(block 71) failed [ 334.492429][T13469] FAT-fs (loop2): Directory bread(block 72) failed [ 334.499279][T13469] FAT-fs (loop2): Directory bread(block 73) failed [ 334.548471][ T30] team0: Port device gtp1 removed [ 334.567372][ T30] team0: Port device gtp0 removed [ 334.587699][T13491] EXT4-fs: inline encryption not supported [ 334.598824][T13491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 334.608076][T13491] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.619683][T13491] EXT4-fs (loop5): orphan cleanup on readonly fs [ 334.627522][T13491] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.2669: Allocating blocks 41-42 which overlap fs metadata [ 334.641296][T13491] fserror_report: 3 callbacks suppressed [ 334.641309][T13491] loop5: lost filesystem error report for type 5 error -117 [ 334.649865][T13491] EXT4-fs (loop5): Remounting filesystem read-only [ 334.657220][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 334.657245][ C0] EXT4-fs (loop5): initial error at time 2000002221: ext4_mb_mark_diskspace_used:4222 [ 334.657273][ C0] EXT4-fs (loop5): last error at time 2000002221: ext4_mb_mark_diskspace_used:4222 [ 334.689663][T13491] EXT4-fs (loop5): 1 truncate cleaned up [ 334.711416][T13491] EXT4-fs (loop5): pa ffff888100622d90: logic 1, phys. 41, len 23 [ 334.736856][T13491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 334.761568][T10896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.808610][T13503] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3734202528/3734202530 [ 334.818087][T13503] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3734202528/3734202529 [ 334.831008][T13503] FAT-fs (loop5): bogus logical sector size 65535 [ 334.839180][ T30] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 334.848376][T13503] FAT-fs (loop5): Can't find a valid FAT filesystem [ 334.859534][ T30] bond0 (unregistering): Released all slaves [ 334.869572][ T30] bond1 (unregistering): Released all slaves [ 334.880744][ T30] bond2 (unregistering): Released all slaves [ 334.892519][ T30] bond3 (unregistering): Released all slaves [ 334.910635][T13389] hsr_slave_0: entered promiscuous mode [ 334.916919][T13389] hsr_slave_1: entered promiscuous mode [ 334.923376][T13389] debugfs: 'hsr0' already exists in 'hsr' [ 334.930759][T13389] Cannot create hsr debugfs directory [ 334.936502][T13470] syzkaller0: entered promiscuous mode [ 334.941999][T13470] syzkaller0: entered allmulticast mode [ 334.971419][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2672'. [ 335.000343][ T30] tipc: Left network mode [ 335.106297][T13517] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.2674: corrupted inode contents [ 335.119420][T13517] fserror_report: 30 callbacks suppressed [ 335.119434][T13517] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 335.132988][ T30] hsr_slave_0: left promiscuous mode [ 335.133617][T13517] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #3: comm syz.6.2674: mark_inode_dirty error [ 335.148063][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 335.148102][ C1] EXT4-fs (loop6): initial error at time 2000002222: ext4_do_update_inode:5569: inode 3 [ 335.148166][ C1] EXT4-fs (loop6): last error at time 2000002222: ext4_do_update_inode:5569: inode 3 [ 335.190772][T13517] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 335.218262][T13517] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.2674: corrupted inode contents [ 335.267108][T13517] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 335.267247][T13517] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.2674: mark_inode_dirty error [ 335.288971][T13517] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 335.289467][T13517] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2674: Failed to acquire dquot type 0 [ 335.310910][T13517] loop6: lost filesystem error report for type 5 error -117 [ 335.311523][T13517] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2674: corrupted inode contents [ 335.332247][T13517] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 335.332443][T13517] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.2674: mark_inode_dirty error [ 335.353142][T13517] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 335.354279][T13517] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2674: corrupted inode contents [ 335.375398][T13517] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 335.385851][T13517] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.2674: mark_inode_dirty error [ 335.406389][T13517] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 335.406544][T13517] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2674: corrupted inode contents [ 335.428189][T13517] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 335.428318][T13517] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 335.448092][T13517] loop6: lost filesystem error report for type 5 error -117 [ 335.448396][T13517] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2674: corrupted inode contents [ 335.467895][T13517] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 335.468122][T13517] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.2674: mark_inode_dirty error [ 335.488765][T13517] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 335.512866][T13517] loop6: lost filesystem error report for type 5 error -117 [ 335.513251][T13517] EXT4-fs (loop6): 1 truncate cleaned up [ 335.527856][T13533] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 335.543645][T13517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.582212][T13517] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.592888][T13533] EXT4-fs (loop5): 1 truncate cleaned up [ 335.604620][T13533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.649942][T13389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.675261][T13533] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.5.2675: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 335.764467][T13533] EXT4-fs (loop5): Remounting filesystem read-only [ 335.771125][T13533] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #2: comm syz.5.2675: Deleting old file: nlink 5, error=-117 [ 335.795123][T13389] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.851421][ T8939] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.868349][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.875583][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.884353][T13548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.892963][T13548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.892993][T13389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.912128][T13389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.925194][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.932342][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.947086][T13550] tmpfs: Bad value for 'mpol' [ 335.998222][T13559] xt_hashlimit: max too large, truncated to 1048576 [ 336.027756][T13389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.089064][ T30] IPVS: stop unused estimator thread 0... [ 336.176421][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 336.176478][ T28] audit: type=1400 audit(2000002223.396:2746): avc: denied { watch watch_reads } for pid=13575 comm="syz.6.2681" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 336.265728][T13389] veth0_vlan: entered promiscuous mode [ 336.282221][T13389] veth1_vlan: entered promiscuous mode [ 336.339090][T13389] veth0_macvtap: entered promiscuous mode [ 336.356638][T13389] veth1_macvtap: entered promiscuous mode [ 336.377297][T13389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.388538][T13389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.433205][T13595] set_capacity_and_notify: 5 callbacks suppressed [ 336.433309][T13595] loop6: detected capacity change from 0 to 512 [ 336.489423][T13609] loop3: detected capacity change from 0 to 512 [ 336.520545][T10896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.574037][T13595] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 336.636127][T13629] __nla_validate_parse: 3 callbacks suppressed [ 336.636143][T13629] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2690'. [ 336.637769][T13595] EXT4-fs (loop6): 1 truncate cleaned up [ 336.662671][T13633] loop3: detected capacity change from 0 to 128 [ 336.666304][T13595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.696437][T13633] vfat: Unknown parameter '' [ 336.834705][T13651] loop0: detected capacity change from 0 to 1024 [ 336.866438][T13651] loop0: detected capacity change from 0 to 512 [ 336.896645][ T28] audit: type=1400 audit(2000002224.126:2747): avc: denied { mounton } for pid=13650 comm="syz.0.2694" path="/file0" dev="autofs" ino=46048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 337.002881][T13651] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2694: EA inode hash validation failed [ 337.034908][T13641] loop3: detected capacity change from 0 to 1024 [ 337.110516][T13651] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 337.157708][T13651] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2694: corrupted inode contents [ 337.188885][T13651] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.2694: mark_inode_dirty error [ 337.197238][T13665] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2695'. [ 337.200385][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 337.215647][ C1] EXT4-fs (loop0): initial error at time 2000002224: ext4_do_update_inode:5569: inode 15 [ 337.226619][ C1] EXT4-fs (loop0): last error at time 2000002224: ext4_do_update_inode:5569: inode 15 [ 337.254735][T13651] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2694: corrupted inode contents [ 337.280393][T13651] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.2694: mark_inode_dirty error [ 337.294602][T13651] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.2694: mark inode dirty (error -117) [ 337.314807][T13651] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 337.352337][T13651] EXT4-fs (loop0): 1 orphan inode deleted [ 337.364939][T13651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.396496][T13651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.454624][T13673] FAULT_INJECTION: forcing a failure. [ 337.454624][T13673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.493636][T13673] CPU: 1 UID: 0 PID: 13673 Comm: syz.2.2698 Tainted: G W syzkaller #0 PREEMPT(full) [ 337.493666][T13673] Tainted: [W]=WARN [ 337.493673][T13673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.493683][T13673] Call Trace: [ 337.493689][T13673] [ 337.493708][T13673] __dump_stack+0x1d/0x30 [ 337.493773][T13673] dump_stack_lvl+0x95/0xd0 [ 337.493840][T13673] dump_stack+0x15/0x1b [ 337.493924][T13673] should_fail_ex+0x263/0x280 [ 337.493943][T13673] should_fail+0xb/0x20 [ 337.493959][T13673] should_fail_usercopy+0x1a/0x20 [ 337.494007][T13673] _copy_from_user+0x1c/0xb0 [ 337.494043][T13673] do_ipv6_getsockopt+0x161/0x15f0 [ 337.494137][T13673] ? avc_has_perm_noaudit+0xab/0x130 [ 337.494161][T13673] ? avc_has_perm+0x101/0x190 [ 337.494182][T13673] ipv6_getsockopt+0x71/0x1e0 [ 337.494201][T13673] ? selinux_socket_getsockopt+0x150/0x1c0 [ 337.494308][T13673] ? selinux_socket_getsockopt+0x150/0x1c0 [ 337.494398][T13673] tcp_getsockopt+0xad/0xe0 [ 337.494421][T13673] sock_common_getsockopt+0x60/0x70 [ 337.494439][T13673] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 337.494456][T13673] do_sock_getsockopt+0x1c4/0x210 [ 337.494537][T13673] __x64_sys_getsockopt+0x11d/0x1a0 [ 337.494563][T13673] x64_sys_call+0x2dcf/0x3020 [ 337.494586][T13673] do_syscall_64+0x12c/0x370 [ 337.494607][T13673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.494626][T13673] RIP: 0033:0x7f9298bdc799 [ 337.494720][T13673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.494737][T13673] RSP: 002b:00007f929762f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 337.494759][T13673] RAX: ffffffffffffffda RBX: 00007f9298e55fa0 RCX: 00007f9298bdc799 [ 337.494773][T13673] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 337.494786][T13673] RBP: 00007f929762f090 R08: 0000200000000240 R09: 0000000000000000 [ 337.494852][T13673] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000001 [ 337.494865][T13673] R13: 00007f9298e56038 R14: 00007f9298e55fa0 R15: 00007ffdff3b5dc8 [ 337.494886][T13673] [ 337.728445][T13677] 9p: Bad value for 'wfdno' [ 337.742923][T13677] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 337.753806][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'. [ 337.805253][T13689] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2702'. [ 337.845103][T13689] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2702'. [ 337.957907][T13691] loop5: detected capacity change from 0 to 128 [ 338.874087][T13718] netlink: 'syz.5.2714': attribute type 5 has an invalid length. [ 339.084214][T13724] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2717'. [ 339.104426][T13724] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2717'. [ 339.113876][T13724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.147562][T13726] netlink: 'syz.2.2718': attribute type 32 has an invalid length. [ 339.235331][T13730] loop2: detected capacity change from 0 to 2048 [ 339.304035][ T8939] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.488418][T13730] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 339.497908][T13730] FAT-fs (loop2): Filesystem has been set read-only [ 339.538230][T13740] loop0: detected capacity change from 0 to 8192 [ 339.550510][T13730] netlink: 'syz.2.2720': attribute type 50 has an invalid length. [ 339.559984][T13740] vfat: Unknown parameter 'Ô.:t†' [ 339.657184][T13737] lo speed is unknown, defaulting to 1000 [ 339.724188][T13748] netlink: 'syz.0.2727': attribute type 5 has an invalid length. [ 339.754530][T13746] loop3: detected capacity change from 0 to 1024 [ 339.766933][T13746] EXT4-fs: Ignoring removed mblk_io_submit option [ 339.899818][T13756] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 340.050879][T13756] EXT4-fs (loop0): 1 orphan inode deleted [ 340.069312][T13756] EXT4-fs (loop0): 1 truncate cleaned up [ 340.103917][T13756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.186024][T12441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.282675][T13770] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2733'. [ 340.669464][T13787] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2738'. [ 340.679321][T13787] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2738'. [ 340.712617][ T28] audit: type=1400 audit(2000002227.936:2748): avc: denied { lock } for pid=13782 comm="syz.3.2738" path="socket:[46246]" dev="sockfs" ino=46246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 340.838197][T13775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.905729][T12441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.249179][ T28] audit: type=1326 audit(2000002228.476:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13803 comm="syz.2.2743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9298bdc799 code=0x0 [ 341.443402][T13807] FAULT_INJECTION: forcing a failure. [ 341.443402][T13807] name failslab, interval 1, probability 0, space 0, times 0 [ 341.474233][T13807] CPU: 1 UID: 0 PID: 13807 Comm: syz.3.2744 Tainted: G W syzkaller #0 PREEMPT(full) [ 341.474266][T13807] Tainted: [W]=WARN [ 341.474295][T13807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.474305][T13807] Call Trace: [ 341.474312][T13807] [ 341.474320][T13807] __dump_stack+0x1d/0x30 [ 341.474350][T13807] dump_stack_lvl+0x95/0xd0 [ 341.474373][T13807] dump_stack+0x15/0x1b [ 341.474412][T13807] should_fail_ex+0x263/0x280 [ 341.474578][T13807] should_failslab+0x8c/0xb0 [ 341.474597][T13807] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 341.474621][T13807] ? security_netlbl_sid_to_secattr+0xd1/0x150 [ 341.474722][T13807] ? should_fail_ex+0xd9/0x280 [ 341.474770][T13807] kstrdup+0x3e/0xd0 [ 341.474788][T13807] security_netlbl_sid_to_secattr+0xd1/0x150 [ 341.474810][T13807] selinux_netlbl_sock_genattr+0xa8/0x260 [ 341.474912][T13807] selinux_netlbl_socket_post_create+0x68/0x100 [ 341.474943][T13807] selinux_socket_post_create+0x219/0x290 [ 341.474970][T13807] security_socket_post_create+0x59/0xa0 [ 341.475048][T13807] __sock_create+0x35a/0x580 [ 341.475068][T13807] sock_create_kern+0x38/0x50 [ 341.475087][T13807] udp_sock_create4+0x68/0x2e0 [ 341.475109][T13807] rxrpc_lookup_local+0x851/0xce0 [ 341.475160][T13807] rxrpc_sendmsg+0x2f3/0x590 [ 341.475184][T13807] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 341.475204][T13807] ____sys_sendmsg+0x5af/0x600 [ 341.475228][T13807] ___sys_sendmsg+0x195/0x1e0 [ 341.475313][T13807] __x64_sys_sendmsg+0xd4/0x160 [ 341.475388][T13807] x64_sys_call+0x194c/0x3020 [ 341.475410][T13807] do_syscall_64+0x12c/0x370 [ 341.475431][T13807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.475485][T13807] RIP: 0033:0x7f7b11b1c799 [ 341.475500][T13807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.475515][T13807] RSP: 002b:00007f7b1056f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.475533][T13807] RAX: ffffffffffffffda RBX: 00007f7b11d95fa0 RCX: 00007f7b11b1c799 [ 341.475548][T13807] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 341.475559][T13807] RBP: 00007f7b1056f090 R08: 0000000000000000 R09: 0000000000000000 [ 341.475616][T13807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.475630][T13807] R13: 00007f7b11d96038 R14: 00007f7b11d95fa0 R15: 00007ffeac281258 [ 341.475651][T13807] [ 342.099820][T13824] netlink: 'syz.2.2751': attribute type 10 has an invalid length. [ 342.118957][T13823] netlink: 'syz.0.2750': attribute type 1 has an invalid length. [ 342.158293][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2752'. [ 342.188206][T13823] bond2: entered promiscuous mode [ 342.214196][ T28] audit: type=1400 audit(2000002229.436:2750): avc: denied { connect } for pid=13825 comm="syz.2.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 342.244613][T13823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 342.302966][T13828] bond2: (slave bridge1): making interface the new active one [ 342.318507][T13828] bridge1: entered promiscuous mode [ 342.339907][T13828] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 342.359647][T13820] set_capacity_and_notify: 4 callbacks suppressed [ 342.359689][T13820] loop3: detected capacity change from 0 to 1024 [ 342.413124][T13839] loop0: detected capacity change from 0 to 128 [ 342.461706][T13839] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.481850][T13839] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 342.493064][T13842] loop2: detected capacity change from 0 to 512 [ 342.705239][T13848] loop2: detected capacity change from 0 to 1024 [ 342.716493][ T28] audit: type=1326 audit(2000002229.926:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 342.734936][T13848] EXT4-fs: Ignoring removed orlov option [ 342.740474][ T28] audit: type=1326 audit(2000002229.926:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 342.771270][ T28] audit: type=1326 audit(2000002229.926:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9298bdc502 code=0x7ffc0000 [ 342.794714][T13851] 9p: Bad value for 'rfdno' [ 342.829179][ T28] audit: type=1326 audit(2000002229.926:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9298b9cfce code=0x7ffc0000 [ 342.989778][T13848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.126053][ T28] audit: type=1326 audit(2000002229.936:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9298bdc5c7 code=0x7ffc0000 [ 343.451403][ T28] audit: type=1326 audit(2000002229.936:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9298b9cfce code=0x7ffc0000 [ 343.513837][T13862] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2759'. [ 343.639942][ T28] audit: type=1326 audit(2000002229.936:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9298bdc42b code=0x7ffc0000 [ 343.804243][ T28] audit: type=1326 audit(2000002229.966:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.2.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9298b9cfce code=0x7ffc0000 [ 344.386582][T13875] bond_slave_0: entered promiscuous mode [ 344.392288][T13875] bond_slave_1: entered promiscuous mode [ 344.428273][T13875] macvtap1: entered promiscuous mode [ 344.446842][T13875] bond0: entered promiscuous mode [ 344.466008][T13875] macvtap1: entered allmulticast mode [ 344.486018][T13875] bond0: entered allmulticast mode [ 344.503581][T13875] bond_slave_0: entered allmulticast mode [ 344.528659][T13875] bond_slave_1: entered allmulticast mode [ 344.553340][T13875] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 344.586515][T13875] bond0: left allmulticast mode [ 344.591711][T13875] bond_slave_0: left allmulticast mode [ 344.597637][T13875] bond_slave_1: left allmulticast mode [ 344.607092][T13875] bond0: left promiscuous mode [ 344.625305][T13875] bond_slave_0: left promiscuous mode [ 344.630716][T13875] bond_slave_1: left promiscuous mode [ 344.875520][T12441] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.981540][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2769'. [ 345.004636][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.062668][T13881] loop6: detected capacity change from 0 to 512 [ 345.064962][T13901] cgroup: Need name or subsystem set [ 345.127328][T13881] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 345.150924][T13895] loop5: detected capacity change from 0 to 512 [ 345.173922][T13881] EXT4-fs (loop6): orphan cleanup on readonly fs [ 345.207583][T13895] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 345.245831][T13881] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 345.287596][T13895] EXT4-fs (loop5): 1 truncate cleaned up [ 345.309352][T13895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.331846][T13921] loop2: detected capacity change from 0 to 1764 [ 345.339111][T13881] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 345.348649][ T9360] Process accounting resumed [ 345.374771][T13881] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.2765: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 345.434312][T13881] fserror_report: 6 callbacks suppressed [ 345.434609][T13881] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 345.459634][T13881] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2765: couldn't read orphan inode 13 (err -117) [ 345.469353][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 345.469405][ C0] EXT4-fs (loop6): last error at time 2000002232: ext4_ext_check_inode:521: inode 13 [ 345.514495][T13881] loop6: lost filesystem error report for type 5 error -117 [ 345.572744][T13881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.661875][T13938] random: crng reseeded on system resumption [ 345.670302][T13938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13938 comm=syz.0.2787 [ 345.673259][T13881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.683172][T13938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=13938 comm=syz.0.2787 [ 345.709842][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'. [ 345.729976][T13930] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2781'. [ 345.739862][T10896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.774821][T13881] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2765'. [ 345.789736][T13941] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 345.838876][T13941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.874716][T13941] bond2: Unable to set down delay as MII monitoring is disabled [ 345.885519][T13941] bond2 (unregistering): Released all slaves [ 346.258517][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2808'. [ 346.369134][T13997] loop3: detected capacity change from 0 to 512 [ 346.375922][T13997] EXT4-fs: Ignoring removed nobh option [ 346.393748][T13997] EXT4-fs (loop3): invalid inodes per group: 0 [ 346.393748][T13997] [ 346.451163][T13998] bridge3: entered promiscuous mode [ 346.478134][T13995] loop6: detected capacity change from 0 to 512 [ 346.500578][T14002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2806 sclass=netlink_route_socket pid=14002 comm=syz.0.2811 [ 346.536813][T13995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.561862][T13995] ext4 filesystem being mounted at /283/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.590731][ T8939] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.623773][T14010] syzkaller0: entered promiscuous mode [ 346.629338][T14010] syzkaller0: entered allmulticast mode [ 346.805531][T14034] FAULT_INJECTION: forcing a failure. [ 346.805531][T14034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.820166][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'. [ 346.864225][T14034] CPU: 0 UID: 0 PID: 14034 Comm: syz.6.2825 Tainted: G W syzkaller #0 PREEMPT(full) [ 346.864253][T14034] Tainted: [W]=WARN [ 346.864274][T14034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.864286][T14034] Call Trace: [ 346.864292][T14034] [ 346.864299][T14034] __dump_stack+0x1d/0x30 [ 346.864325][T14034] dump_stack_lvl+0x95/0xd0 [ 346.864348][T14034] dump_stack+0x15/0x1b [ 346.864435][T14034] should_fail_ex+0x263/0x280 [ 346.864454][T14034] should_fail+0xb/0x20 [ 346.864472][T14034] should_fail_usercopy+0x1a/0x20 [ 346.864502][T14034] _copy_from_user+0x1c/0xb0 [ 346.864546][T14034] kstrtouint_from_user+0x69/0xf0 [ 346.864630][T14034] proc_fail_nth_write+0x50/0x160 [ 346.864654][T14034] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 346.864677][T14034] vfs_write+0x269/0x9f0 [ 346.864719][T14034] ? __rcu_read_unlock+0x4e/0x70 [ 346.864764][T14034] ? __fget_files+0x184/0x1c0 [ 346.864847][T14034] ? mutex_lock+0x57/0x90 [ 346.864874][T14034] ksys_write+0xdc/0x1a0 [ 346.864904][T14034] __x64_sys_write+0x40/0x50 [ 346.864924][T14034] x64_sys_call+0x27e1/0x3020 [ 346.864964][T14034] do_syscall_64+0x12c/0x370 [ 346.864981][T14034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.865000][T14034] RIP: 0033:0x7f8b63dacfce [ 346.865016][T14034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 346.865060][T14034] RSP: 002b:00007f8b6283efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.865079][T14034] RAX: ffffffffffffffda RBX: 00007f8b6283f6c0 RCX: 00007f8b63dacfce [ 346.865092][T14034] RDX: 0000000000000001 RSI: 00007f8b6283f0a0 RDI: 0000000000000003 [ 346.865106][T14034] RBP: 00007f8b6283f090 R08: 0000000000000000 R09: 0000000000000000 [ 346.865120][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.865203][T14034] R13: 00007f8b64066038 R14: 00007f8b64065fa0 R15: 00007ffc8d6fbb18 [ 346.865219][T14034] [ 347.098937][T14042] tipc: Enabled bearer , priority 0 [ 347.105997][T14042] syzkaller0: entered promiscuous mode [ 347.111649][T14042] syzkaller0: entered allmulticast mode [ 347.163181][T14044] loop6: detected capacity change from 0 to 4096 [ 347.188439][T14042] tipc: Resetting bearer [ 347.214347][T14044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.251606][T14041] tipc: Resetting bearer [ 347.263852][ T8939] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.275111][T14041] tipc: Disabling bearer [ 347.372784][T14067] loop2: detected capacity change from 0 to 1024 [ 347.388858][T14058] loop0: detected capacity change from 0 to 1024 [ 347.389218][T14058] EXT4-fs: Ignoring removed orlov option [ 347.404253][T14067] EXT4-fs: Ignoring removed orlov option [ 347.406222][T14067] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 347.416140][T14058] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 347.427900][T14067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.429667][T14058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.446226][ T1032] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 347.448663][T12993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 347.494811][T14088] netlink: 'syz.6.2839': attribute type 3 has an invalid length. [ 347.494838][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2839'. [ 347.537812][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.629878][T12441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.998574][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.974706][ T6041] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.974770][ T6041] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.174216][T14100] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2841'. [ 349.665702][T14103] loop3: detected capacity change from 0 to 256 [ 349.784338][ T7598] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.835028][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 349.835043][ T28] audit: type=1400 audit(2000002237.066:2830): avc: denied { ioctl } for pid=14107 comm="syz.3.2843" path="socket:[47471]" dev="sockfs" ino=47471 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 349.948882][T14128] FAULT_INJECTION: forcing a failure. [ 349.948882][T14128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.966862][T14130] batadv_slave_0: entered promiscuous mode [ 349.975223][T14133] macvlan0: entered allmulticast mode [ 349.980963][T14133] veth1_vlan: entered allmulticast mode [ 349.988151][T14133] veth1_vlan: left allmulticast mode [ 349.989699][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2849'. [ 349.994088][T14128] CPU: 1 UID: 0 PID: 14128 Comm: syz.5.2847 Tainted: G W syzkaller #0 PREEMPT(full) [ 349.994122][T14128] Tainted: [W]=WARN [ 349.994129][T14128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.994142][T14128] Call Trace: [ 349.994179][T14128] [ 349.994188][T14128] __dump_stack+0x1d/0x30 [ 349.994282][T14128] dump_stack_lvl+0x95/0xd0 [ 349.994308][T14128] dump_stack+0x15/0x1b [ 349.994324][T14128] should_fail_ex+0x263/0x280 [ 349.994388][T14128] should_fail+0xb/0x20 [ 349.994406][T14128] should_fail_usercopy+0x1a/0x20 [ 349.994478][T14128] _copy_from_user+0x1c/0xb0 [ 349.994503][T14128] ___sys_sendmsg+0xc1/0x1e0 [ 349.994596][T14128] ? path_openat+0x1b01/0x2050 [ 349.994635][T14128] __sys_sendmmsg+0x185/0x320 [ 349.994704][T14128] __x64_sys_sendmmsg+0x57/0x70 [ 349.994730][T14128] x64_sys_call+0x27aa/0x3020 [ 349.994754][T14128] do_syscall_64+0x12c/0x370 [ 349.994774][T14128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.994804][T14128] RIP: 0033:0x7f02d8f9c799 [ 349.994822][T14128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.994838][T14128] RSP: 002b:00007f02d79f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 349.994858][T14128] RAX: ffffffffffffffda RBX: 00007f02d9215fa0 RCX: 00007f02d8f9c799 [ 349.994952][T14128] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 349.994965][T14128] RBP: 00007f02d79f7090 R08: 0000000000000000 R09: 0000000000000000 [ 349.994979][T14128] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000001 [ 349.995045][T14128] R13: 00007f02d9216038 R14: 00007f02d9215fa0 R15: 00007ffe40a2ee08 [ 349.995065][T14128] [ 350.157074][T14136] loop5: detected capacity change from 0 to 512 [ 350.182100][T14133] macvlan0 (unregistering): left allmulticast mode [ 350.183300][T14088] loop6: detected capacity change from 0 to 1024 [ 350.201143][T14088] EXT4-fs: Ignoring removed orlov option [ 350.222163][T14130] batadv_slave_0 (unregistering): left promiscuous mode [ 350.231153][T14136] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.2850: corrupted inode contents [ 350.231313][T14088] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 350.256834][T14136] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 350.257041][T14136] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.2850: mark_inode_dirty error [ 350.266428][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 350.266447][ C0] EXT4-fs (loop5): initial error at time 2000002237: ext4_do_update_inode:5569: inode 3 [ 350.266477][ C0] EXT4-fs (loop5): last error at time 2000002237: ext4_do_update_inode:5569: inode 3 [ 350.328766][T14088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.351742][T14136] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 350.398130][T14074] 9pnet_fd: Insufficient options for proto=fd [ 350.421827][T14153] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2854'. [ 350.432983][T14136] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.2850: corrupted inode contents [ 350.471790][T14136] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 350.471983][T14136] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.2850: mark_inode_dirty error [ 350.494655][ T8939] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.517080][T14136] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 350.518145][T14136] Quota error (device loop5): write_blk: dquota write failed [ 350.541696][T14136] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 350.557389][ T28] audit: type=1400 audit(2000002237.786:2831): avc: denied { setopt } for pid=14159 comm="syz.2.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 350.570502][T14136] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2850: Failed to acquire dquot type 0 [ 350.594295][T14176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2859'. [ 350.754213][T14136] loop5: lost filesystem error report for type 5 error -117 [ 350.754843][T14136] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2850: corrupted inode contents [ 350.800117][T14136] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 350.800360][T14136] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.2850: mark_inode_dirty error [ 350.871403][T14136] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 350.871678][T14136] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2850: corrupted inode contents [ 350.916895][T14136] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 350.917057][T14136] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.2850: mark_inode_dirty error [ 350.959188][T14136] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 350.959389][T14136] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2850: corrupted inode contents [ 351.003365][T14136] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 351.003788][T14136] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 351.041966][T14136] loop5: lost filesystem error report for type 5 error -117 [ 351.042323][T14136] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.2850: corrupted inode contents [ 351.087410][T14136] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 351.088470][T14136] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.2850: mark_inode_dirty error [ 351.115418][T14136] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 351.115693][T14136] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 351.135761][T14136] loop5: lost filesystem error report for type 5 error -117 [ 351.136311][T14136] EXT4-fs (loop5): 1 truncate cleaned up [ 351.150461][T14136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.163323][T14136] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.353330][T14197] FAULT_INJECTION: forcing a failure. [ 351.353330][T14197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.510507][T14197] CPU: 1 UID: 0 PID: 14197 Comm: syz.2.2860 Tainted: G W syzkaller #0 PREEMPT(full) [ 351.510572][T14197] Tainted: [W]=WARN [ 351.510579][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.510591][T14197] Call Trace: [ 351.510597][T14197] [ 351.510604][T14197] __dump_stack+0x1d/0x30 [ 351.510688][T14197] dump_stack_lvl+0x95/0xd0 [ 351.510753][T14197] dump_stack+0x15/0x1b [ 351.510772][T14197] should_fail_ex+0x263/0x280 [ 351.510792][T14197] should_fail+0xb/0x20 [ 351.510821][T14197] should_fail_usercopy+0x1a/0x20 [ 351.510844][T14197] _copy_to_user+0x20/0xa0 [ 351.510871][T14197] simple_read_from_buffer+0xb5/0x130 [ 351.510951][T14197] proc_fail_nth_read+0x10e/0x150 [ 351.510980][T14197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.511005][T14197] vfs_read+0x1ab/0x7f0 [ 351.511071][T14197] ? __rcu_read_unlock+0x4e/0x70 [ 351.511092][T14197] ? __fget_files+0x184/0x1c0 [ 351.511111][T14197] ? mutex_lock+0x57/0x90 [ 351.511134][T14197] ksys_read+0xdc/0x1a0 [ 351.511280][T14197] __x64_sys_read+0x40/0x50 [ 351.511390][T14197] x64_sys_call+0x2886/0x3020 [ 351.511413][T14197] do_syscall_64+0x12c/0x370 [ 351.511435][T14197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.511516][T14197] RIP: 0033:0x7f9298b9cfce [ 351.511534][T14197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.511553][T14197] RSP: 002b:00007f929762efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.511648][T14197] RAX: ffffffffffffffda RBX: 00007f929762f6c0 RCX: 00007f9298b9cfce [ 351.511663][T14197] RDX: 000000000000000f RSI: 00007f929762f0a0 RDI: 0000000000000008 [ 351.511677][T14197] RBP: 00007f929762f090 R08: 0000000000000000 R09: 0000000000000000 [ 351.511691][T14197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.511703][T14197] R13: 00007f9298e56038 R14: 00007f9298e55fa0 R15: 00007ffdff3b5dc8 [ 351.511744][T14197] [ 351.840971][T14202] netlink: 'syz.3.2861': attribute type 4 has an invalid length. [ 351.858884][T14201] FAULT_INJECTION: forcing a failure. [ 351.858884][T14201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.899725][T14201] CPU: 1 UID: 0 PID: 14201 Comm: syz.2.2862 Tainted: G W syzkaller #0 PREEMPT(full) [ 351.899753][T14201] Tainted: [W]=WARN [ 351.899760][T14201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.899773][T14201] Call Trace: [ 351.899778][T14201] [ 351.899786][T14201] __dump_stack+0x1d/0x30 [ 351.899878][T14201] dump_stack_lvl+0x95/0xd0 [ 351.899948][T14201] dump_stack+0x15/0x1b [ 351.899970][T14201] should_fail_ex+0x263/0x280 [ 351.899992][T14201] should_fail+0xb/0x20 [ 351.900008][T14201] should_fail_usercopy+0x1a/0x20 [ 351.900028][T14201] _copy_from_user+0x1c/0xb0 [ 351.900065][T14201] ___sys_recvmsg+0xaa/0x3b0 [ 351.900100][T14201] do_recvmmsg+0x1ef/0x560 [ 351.900131][T14201] ? fput+0x8f/0xc0 [ 351.900227][T14201] __x64_sys_recvmmsg+0xe5/0x170 [ 351.900324][T14201] x64_sys_call+0x80f/0x3020 [ 351.900345][T14201] do_syscall_64+0x12c/0x370 [ 351.900366][T14201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.900388][T14201] RIP: 0033:0x7f9298bdc799 [ 351.900442][T14201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.900463][T14201] RSP: 002b:00007f929762f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 351.900482][T14201] RAX: ffffffffffffffda RBX: 00007f9298e55fa0 RCX: 00007f9298bdc799 [ 351.900494][T14201] RDX: 0000000000000002 RSI: 000020000000ad00 RDI: 0000000000000004 [ 351.900506][T14201] RBP: 00007f929762f090 R08: 0000000000000000 R09: 0000000000000000 [ 351.900520][T14201] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 351.900534][T14201] R13: 00007f9298e56038 R14: 00007f9298e55fa0 R15: 00007ffdff3b5dc8 [ 351.900621][T14201] [ 352.093532][T10896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.163252][ T28] audit: type=1400 audit(2000002239.386:2832): avc: denied { read } for pid=14215 comm="syz.3.2869" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 352.190133][ T28] audit: type=1400 audit(2000002239.386:2833): avc: denied { open } for pid=14215 comm="syz.3.2869" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 352.190431][T14213] tipc: Enabled bearer , priority 0 [ 352.277748][T14224] loop3: detected capacity change from 0 to 512 [ 352.295113][T14217] loop5: detected capacity change from 0 to 8192 [ 352.323205][T14213] syzkaller0: entered promiscuous mode [ 352.344165][T14213] syzkaller0: entered allmulticast mode [ 352.383095][T14213] tipc: Resetting bearer [ 352.400092][T14212] tipc: Resetting bearer [ 352.410463][T14212] tipc: Disabling bearer [ 352.470264][ T28] audit: type=1326 audit(2000002239.696:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 352.506222][T14233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2875'. [ 352.517811][ T28] audit: type=1326 audit(2000002239.696:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 352.544014][ T28] audit: type=1326 audit(2000002239.696:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 352.567621][ T28] audit: type=1326 audit(2000002239.696:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.2.2875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9298bdc799 code=0x7ffc0000 [ 352.675228][T14242] loop6: detected capacity change from 0 to 512 [ 352.686263][T14242] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 352.722164][T14242] EXT4-fs (loop6): 1 orphan inode deleted [ 352.732940][T14242] EXT4-fs (loop6): 1 truncate cleaned up [ 352.758081][T14242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.774288][T14253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2883'. [ 352.799994][ T8939] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.870097][T14269] tmpfs: Bad value for 'mpol' [ 352.906047][T14273] loop2: detected capacity change from 0 to 1024 [ 352.929742][T14271] lo speed is unknown, defaulting to 1000 [ 352.932265][T14279] loop6: detected capacity change from 0 to 512 [ 352.954330][T14273] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 352.954458][T14279] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 352.962241][T14273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2891'. [ 352.986607][T14279] EXT4-fs (loop6): 1 truncate cleaned up [ 352.995137][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.996248][T14279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.004069][T14273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2891'. [ 353.076513][T14283] loop5: detected capacity change from 0 to 512 [ 353.098085][ T8939] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.113230][T14273] netlink: 'syz.2.2891': attribute type 1 has an invalid length. [ 353.114207][T14283] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 353.138923][T14283] EXT4-fs (loop5): 1 truncate cleaned up [ 353.145290][T14283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.176477][T10896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.267245][T14271] loop3: detected capacity change from 0 to 512 [ 353.283303][T14297] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2900'. [ 353.307287][T14302] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2899'. [ 353.365088][T14311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2904'. [ 353.531882][T14334] loop2: detected capacity change from 0 to 512 [ 353.694844][T14343] lo speed is unknown, defaulting to 1000 [ 353.699101][T14334] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.2910: corrupted inode contents [ 353.754273][T14334] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 353.764142][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 353.779735][ C0] EXT4-fs (loop2): initial error at time 2000002240: ext4_do_update_inode:5569: inode 3 [ 353.789511][ C0] EXT4-fs (loop2): last error at time 2000002240: ext4_do_update_inode:5569: inode 3 [ 353.881778][T14334] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #3: comm syz.2.2910: mark_inode_dirty error [ 353.996918][T14334] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.2910: corrupted inode contents [ 354.129634][T14334] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.2910: mark_inode_dirty error [ 354.185856][T14334] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.2910: Failed to acquire dquot type 0 [ 354.191836][T14352] loop0: detected capacity change from 0 to 512 [ 354.200061][T14334] loop2: lost filesystem error report for type 5 error -117 [ 354.205516][T14334] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.2910: corrupted inode contents [ 354.235873][T14352] ext2: Unknown parameter 'permit_directio' [ 354.273277][T14360] loop6: detected capacity change from 0 to 1024 [ 354.282011][T14360] EXT4-fs: dax option not supported [ 354.296252][T14334] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.2910: mark_inode_dirty error [ 354.317029][T14334] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.2910: corrupted inode contents [ 354.329540][T14334] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.2910: mark_inode_dirty error [ 354.341176][T14334] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.2910: corrupted inode contents [ 354.353298][T14334] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 354.361848][T14334] loop2: lost filesystem error report for type 5 error -117 [ 354.362064][T14334] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.2910: corrupted inode contents [ 354.381658][T14334] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.2910: mark_inode_dirty error [ 354.393067][T14334] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 354.401995][T14334] loop2: lost filesystem error report for type 5 error -117 [ 354.402445][T14334] EXT4-fs (loop2): 1 truncate cleaned up [ 354.445466][T14334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.459783][T14364] loop5: detected capacity change from 0 to 256 [ 354.484368][T14334] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.530075][T14364] FAT-fs (loop5): count of clusters too big (178174) [ 354.553051][T14364] FAT-fs (loop5): Can't find a valid FAT filesystem [ 354.553450][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.584575][T14376] loop3: detected capacity change from 0 to 512 [ 354.591281][T14376] EXT4-fs: Ignoring removed orlov option [ 354.646496][T14376] ext4: Unknown parameter 'udit' [ 354.654991][T14382] SET target dimension over the limit! [ 354.683794][T14384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2927'. [ 354.714884][T14384] ip6gre2: entered promiscuous mode [ 354.731479][T14384] ip6gre2: entered allmulticast mode [ 354.762331][T14384] netlink: 'syz.2.2927': attribute type 6 has an invalid length. [ 354.788868][T14384] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2927'. [ 354.813747][T14386] msdos: Unknown parameter 'noLots' [ 354.978309][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 354.978324][ T28] audit: type=1326 audit(2000002242.206:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972115c799 code=0x7ffc0000 [ 355.008306][ T28] audit: type=1326 audit(2000002242.236:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972115c799 code=0x7ffc0000 [ 355.066138][ T28] audit: type=1326 audit(2000002242.296:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f972115c799 code=0x7ffc0000 [ 355.097840][ T28] audit: type=1326 audit(2000002242.316:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f972115c502 code=0x7ffc0000 [ 355.124295][T14380] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 355.137242][T14380] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 355.145712][T14380] System zones: 0-1, 15-15, 18-18, 34-34 [ 355.151519][ T28] audit: type=1326 audit(2000002242.316:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f972111cfce code=0x7ffc0000 [ 355.177876][T14380] EXT4-fs (loop0): orphan cleanup on readonly fs [ 355.184706][T14380] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 355.194242][T14380] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 355.209318][ T28] audit: type=1326 audit(2000002242.316:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f972115c5c7 code=0x7ffc0000 [ 355.236749][T14380] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 355.243695][T14380] EXT4-fs (loop0): 1 truncate cleaned up [ 355.249908][T14380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 355.262883][ T28] audit: type=1326 audit(2000002242.316:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f972111cfce code=0x7ffc0000 [ 355.289423][ T28] audit: type=1326 audit(2000002242.316:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f972115c42b code=0x7ffc0000 [ 355.330521][ T28] audit: type=1326 audit(2000002242.316:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14379 comm="syz.0.2924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f972111cfce code=0x7ffc0000 [ 355.374934][T14395] netlink: 'syz.5.2930': attribute type 10 has an invalid length. [ 355.403197][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2931'. [ 355.412532][T12441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.421715][T14397] tc_dump_action: action bad kind [ 355.454705][T14397] netlink: 'syz.3.2931': attribute type 13 has an invalid length. [ 355.484803][T14403] EXT4-fs: inline encryption not supported [ 355.496513][T14397] gretap0: refused to change device tx_queue_len [ 355.514951][T14403] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0003] [ 355.523070][T14403] System zones: 0-5 [ 355.530245][T14397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 355.584947][T14403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.613915][T14415] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.2937: corrupted inode contents [ 355.614864][T14408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=14408 comm=syz.3.2931 [ 355.628777][T14415] fserror_report: 10 callbacks suppressed [ 355.628791][T14415] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 355.660482][T14415] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #3: comm syz.2.2937: mark_inode_dirty error [ 355.664126][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 355.685205][T14415] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 355.687655][ C1] EXT4-fs (loop2): initial error at time 2000002242: ext4_do_update_inode:5569: inode 3 [ 355.706589][ C1] EXT4-fs (loop2): last error at time 2000002242: ext4_dirty_inode:6450: inode 3 [ 355.707572][T14415] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.2937: corrupted inode contents [ 355.743747][T14415] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 355.750551][T14415] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.2937: mark_inode_dirty error [ 355.779061][T14397] lo speed is unknown, defaulting to 1000 [ 355.791246][T14415] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 355.791611][T14415] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.2937: Failed to acquire dquot type 0 [ 355.835387][T14419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.844193][T14415] loop2: lost filesystem error report for type 5 error -117 [ 355.867256][T14415] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.2937: corrupted inode contents [ 356.041491][T14415] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.043204][T14415] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.2937: mark_inode_dirty error [ 356.066630][T14415] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.066795][T14415] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.2937: corrupted inode contents [ 356.098126][T14415] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.098366][T14415] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.2937: mark_inode_dirty error [ 356.134238][T14415] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.134421][T14415] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.2937: corrupted inode contents [ 356.171015][T12441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.180427][T14415] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.190973][T14419] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.214154][T14415] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 356.217383][T14433] FAULT_INJECTION: forcing a failure. [ 356.217383][T14433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.223239][T14415] loop2: lost filesystem error report for type 5 error -117 [ 356.237020][T14415] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.2937: corrupted inode contents [ 356.263578][T14415] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.263743][T14415] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.2937: mark_inode_dirty error [ 356.303321][T14433] CPU: 0 UID: 0 PID: 14433 Comm: syz.5.2941 Tainted: G W syzkaller #0 PREEMPT(full) [ 356.303348][T14433] Tainted: [W]=WARN [ 356.303355][T14433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.303367][T14433] Call Trace: [ 356.303374][T14433] [ 356.303382][T14433] __dump_stack+0x1d/0x30 [ 356.303480][T14433] dump_stack_lvl+0x95/0xd0 [ 356.303500][T14433] dump_stack+0x15/0x1b [ 356.303593][T14433] should_fail_ex+0x263/0x280 [ 356.303622][T14433] should_fail+0xb/0x20 [ 356.303638][T14433] should_fail_usercopy+0x1a/0x20 [ 356.303660][T14433] _copy_from_user+0x1c/0xb0 [ 356.303699][T14433] __copy_msghdr+0x244/0x300 [ 356.303726][T14433] ___sys_sendmsg+0x10c/0x1e0 [ 356.303782][T14433] ? path_openat+0x1b01/0x2050 [ 356.303816][T14433] __sys_sendmmsg+0x185/0x320 [ 356.303943][T14433] __x64_sys_sendmmsg+0x57/0x70 [ 356.304023][T14433] x64_sys_call+0x27aa/0x3020 [ 356.304048][T14433] do_syscall_64+0x12c/0x370 [ 356.304077][T14433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.304097][T14433] RIP: 0033:0x7f02d8f9c799 [ 356.304116][T14433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.304132][T14433] RSP: 002b:00007f02d79f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 356.304170][T14433] RAX: ffffffffffffffda RBX: 00007f02d9215fa0 RCX: 00007f02d8f9c799 [ 356.304255][T14433] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 356.304269][T14433] RBP: 00007f02d79f7090 R08: 0000000000000000 R09: 0000000000000000 [ 356.304283][T14433] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000001 [ 356.304299][T14433] R13: 00007f02d9216038 R14: 00007f02d9215fa0 R15: 00007ffe40a2ee08 [ 356.304316][T14433] [ 356.312087][T14415] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 356.492860][T14415] loop2: lost filesystem error report for type 5 error -117 [ 356.497915][T14415] EXT4-fs (loop2): 1 truncate cleaned up [ 356.521538][T14415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.536210][T14415] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.673590][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.678740][T14458] netlink: 'syz.0.2950': attribute type 46 has an invalid length. [ 356.684826][ T8939] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.761407][T14468] ip6gre1: entered promiscuous mode [ 356.773005][T14468] ip6gre1: entered allmulticast mode [ 356.783390][T14468] netlink: 'syz.6.2947': attribute type 6 has an invalid length. [ 356.910757][T14491] FAULT_INJECTION: forcing a failure. [ 356.910757][T14491] name failslab, interval 1, probability 0, space 0, times 0 [ 356.940922][T14491] CPU: 1 UID: 0 PID: 14491 Comm: syz.0.2958 Tainted: G W syzkaller #0 PREEMPT(full) [ 356.941105][T14491] Tainted: [W]=WARN [ 356.941111][T14491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.941121][T14491] Call Trace: [ 356.941128][T14491] [ 356.941136][T14491] __dump_stack+0x1d/0x30 [ 356.941219][T14491] dump_stack_lvl+0x95/0xd0 [ 356.941311][T14491] dump_stack+0x15/0x1b [ 356.941402][T14491] should_fail_ex+0x263/0x280 [ 356.941421][T14491] should_failslab+0x8c/0xb0 [ 356.941441][T14491] kmem_cache_alloc_noprof+0x66/0x400 [ 356.941588][T14491] ? audit_log_start+0x34c/0x730 [ 356.941616][T14491] audit_log_start+0x34c/0x730 [ 356.941633][T14491] ? kstrtouint_from_user+0xa8/0xf0 [ 356.941653][T14491] audit_seccomp+0x47/0x100 [ 356.941743][T14491] ? __seccomp_filter+0x8db/0x1350 [ 356.941766][T14491] __seccomp_filter+0x8ec/0x1350 [ 356.941790][T14491] ? __rcu_read_unlock+0x4e/0x70 [ 356.941809][T14491] ? __fget_files+0x184/0x1c0 [ 356.941845][T14491] ? mutex_lock+0x57/0x90 [ 356.941868][T14491] ? mutex_unlock+0x4e/0x90 [ 356.941892][T14491] __secure_computing+0x81/0x150 [ 356.941960][T14491] do_syscall_64+0xd3/0x370 [ 356.941978][T14491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.941997][T14491] RIP: 0033:0x7f972115c799 [ 356.942012][T14491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.942052][T14491] RSP: 002b:00007f971fbaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 356.942069][T14491] RAX: ffffffffffffffda RBX: 00007f97213d5fa0 RCX: 00007f972115c799 [ 356.942080][T14491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.942090][T14491] RBP: 00007f971fbaf090 R08: 0000000000000000 R09: 0000000000000000 [ 356.942157][T14491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.942167][T14491] R13: 00007f97213d6038 R14: 00007f97213d5fa0 R15: 00007ffcf0790e68 [ 356.942182][T14491] [ 356.985211][T14478] syz.5.2955 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 357.126058][T14495] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.2959: corrupted inode contents [ 357.168569][T14478] CPU: 0 UID: 0 PID: 14478 Comm: syz.5.2955 Tainted: G W syzkaller #0 PREEMPT(full) [ 357.168615][T14478] Tainted: [W]=WARN [ 357.168623][T14478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.168635][T14478] Call Trace: [ 357.168642][T14478] [ 357.168716][T14478] __dump_stack+0x1d/0x30 [ 357.168742][T14478] dump_stack_lvl+0x95/0xd0 [ 357.168764][T14478] dump_stack+0x15/0x1b [ 357.168782][T14478] dump_header+0x80/0x240 [ 357.168828][T14478] oom_kill_process+0x295/0x350 [ 357.168850][T14478] out_of_memory+0x97d/0xb80 [ 357.168872][T14478] try_charge_memcg+0x62e/0xa10 [ 357.168970][T14478] obj_cgroup_charge_pages+0x23/0xc0 [ 357.169014][T14478] __memcg_kmem_charge_page+0x9e/0x170 [ 357.169040][T14478] __alloc_frozen_pages_noprof+0x18a/0x360 [ 357.169069][T14478] alloc_pages_mpol+0xb3/0x260 [ 357.169122][T14478] alloc_pages_noprof+0x8f/0x130 [ 357.169147][T14478] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 357.169197][T14478] __kvmalloc_node_noprof+0x3d4/0x650 [ 357.169221][T14478] ? futex_hash_allocate+0x190/0x9d0 [ 357.169246][T14478] ? futex_hash_allocate+0x190/0x9d0 [ 357.169354][T14478] futex_hash_allocate+0x190/0x9d0 [ 357.169414][T14478] ? cap_task_prctl+0x13f/0x6e0 [ 357.169435][T14478] futex_hash_prctl+0xd8/0xf0 [ 357.169467][T14478] __se_sys_prctl+0xa3d/0x13f0 [ 357.169493][T14478] __x64_sys_prctl+0x67/0x80 [ 357.169517][T14478] x64_sys_call+0x2533/0x3020 [ 357.169553][T14478] do_syscall_64+0x12c/0x370 [ 357.169575][T14478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.169605][T14478] RIP: 0033:0x7f02d8f9c799 [ 357.169621][T14478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.169638][T14478] RSP: 002b:00007f02d79f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 357.169709][T14478] RAX: ffffffffffffffda RBX: 00007f02d9215fa0 RCX: 00007f02d8f9c799 [ 357.169724][T14478] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 357.169737][T14478] RBP: 00007f02d9032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 357.169751][T14478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.169772][T14478] R13: 00007f02d9216038 R14: 00007f02d9215fa0 R15: 00007ffe40a2ee08 [ 357.169791][T14478] [ 357.176400][T14478] memory: usage 260080kB, limit 307200kB, failcnt 121 [ 357.184484][T14495] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #3: comm syz.0.2959: mark_inode_dirty error [ 357.196867][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 357.196883][ C1] EXT4-fs (loop0): initial error at time 2000002244: ext4_do_update_inode:5569: inode 3 [ 357.196927][ C1] EXT4-fs (loop0): last error at time 2000002244: ext4_do_update_inode:5569: inode 3 [ 357.207296][T14478] memory+swap: usage 237460kB, limit 9007199254740988kB, failcnt 0 [ 357.236298][T14495] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.2959: corrupted inode contents [ 357.254311][T14478] kmem: usage 191828kB, limit 9007199254740988kB, failcnt 0 [ 357.258919][T14495] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.2959: mark_inode_dirty error [ 357.278526][T14478] Memory cgroup stats for [ 357.281451][T14495] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.2959: Failed to acquire dquot type 0 [ 357.293392][T14478] /syz5 [ 357.295467][T14495] loop0: lost filesystem error report for type 5 error -117 [ 357.311152][T14478] : [ 357.327076][T14495] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.2959: corrupted inode contents [ 357.361246][T14478] cache 31997952 [ 357.375382][T14495] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #16: comm syz.0.2959: mark_inode_dirty error [ 357.395263][T14478] rss 135168 [ 357.396243][T14495] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.2959: corrupted inode contents [ 357.411537][T14478] shmem 16384 [ 357.414607][T14495] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.2959: mark_inode_dirty error [ 357.434156][T14478] mapped_file 0 [ 357.442765][T14495] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.2959: corrupted inode contents [ 357.468422][T14478] dirty 0 [ 357.581845][T14495] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 357.590147][T14478] writeback 0 [ 357.590572][T14495] loop0: lost filesystem error report for type 5 error -117 [ 357.593825][T14495] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.2959: corrupted inode contents [ 357.613318][T14478] workingset_refault_anon 0 [ 357.618460][T14495] EXT4-fs error (device loop0): ext4_truncate:4587: inode #16: comm syz.0.2959: mark_inode_dirty error [ 357.634635][T14495] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 357.644936][T14478] workingset_refault_file 7808 [ 357.658408][T14478] swap 0 [ 357.661379][T14478] swapcached 0 [ 357.665142][T14478] pgpgin 170720 [ 357.668589][T14478] pgpgout 162871 [ 357.672167][T14478] pgfault 138202 [ 357.685437][T14495] loop0: lost filesystem error report for type 5 error -117 [ 357.685845][T14495] EXT4-fs (loop0): 1 truncate cleaned up [ 357.692220][T14478] pgmajfault 1 [ 357.693673][T14495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.715201][T14478] inactive_anon 40960 [ 357.722634][T14478] active_anon 110592 [ 357.756245][T14478] inactive_file 0 [ 357.764236][T14495] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.765297][T14512] FAULT_INJECTION: forcing a failure. [ 357.765297][T14512] name failslab, interval 1, probability 0, space 0, times 0 [ 357.787916][T14478] active_file 31997952 [ 357.792022][T14478] unevictable 0 [ 357.795780][T14478] hierarchical_memory_limit 314572800 [ 357.801406][T14478] hierarchical_memsw_limit 9223372036854771712 [ 357.807805][T14478] total_cache 31997952 [ 357.812015][T14478] total_rss 135168 [ 357.816230][T14512] CPU: 0 UID: 0 PID: 14512 Comm: syz.6.2966 Tainted: G W syzkaller #0 PREEMPT(full) [ 357.816263][T14512] Tainted: [W]=WARN [ 357.816269][T14512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.816367][T14512] Call Trace: [ 357.816375][T14512] [ 357.816384][T14512] __dump_stack+0x1d/0x30 [ 357.816426][T14512] dump_stack_lvl+0x95/0xd0 [ 357.816448][T14512] dump_stack+0x15/0x1b [ 357.816532][T14512] should_fail_ex+0x263/0x280 [ 357.816570][T14512] should_failslab+0x8c/0xb0 [ 357.816592][T14512] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 357.816616][T14512] ? __alloc_skb+0x2d6/0x690 [ 357.816669][T14512] __alloc_skb+0x2d6/0x690 [ 357.816717][T14512] ? __alloc_skb+0x200/0x690 [ 357.816739][T14512] __ip6_append_data+0x1935/0x2410 [ 357.816768][T14512] ? __pfx_raw6_getfrag+0x10/0x10 [ 357.816835][T14512] ? __rcu_read_unlock+0x4e/0x70 [ 357.816856][T14512] ? ip6_mtu+0xf5/0x120 [ 357.816876][T14512] ip6_append_data+0xd3/0x1d0 [ 357.816899][T14512] ? __pfx_raw6_getfrag+0x10/0x10 [ 357.816928][T14512] rawv6_sendmsg+0x108b/0x1230 [ 357.816972][T14512] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 357.817058][T14512] inet_sendmsg+0xc5/0xd0 [ 357.817087][T14512] ____sys_sendmsg+0x53a/0x600 [ 357.817116][T14512] ___sys_sendmsg+0x195/0x1e0 [ 357.817188][T14512] __x64_sys_sendmsg+0xd4/0x160 [ 357.817219][T14512] x64_sys_call+0x194c/0x3020 [ 357.817244][T14512] do_syscall_64+0x12c/0x370 [ 357.817267][T14512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.817326][T14512] RIP: 0033:0x7f8b63dec799 [ 357.817345][T14512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.817363][T14512] RSP: 002b:00007f8b6283f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.817385][T14512] RAX: ffffffffffffffda RBX: 00007f8b64065fa0 RCX: 00007f8b63dec799 [ 357.817401][T14512] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 357.817460][T14512] RBP: 00007f8b6283f090 R08: 0000000000000000 R09: 0000000000000000 [ 357.817475][T14512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.817497][T14512] R13: 00007f8b64066038 R14: 00007f8b64065fa0 R15: 00007ffc8d6fbb18 [ 357.817518][T14512] [ 357.819780][T14478] total_shmem 16384 [ 358.046346][T14478] total_mapped_file 0 [ 358.050479][T14478] total_dirty 0 [ 358.054173][T14478] total_writeback 0 [ 358.058027][T14478] total_workingset_refault_anon 0 [ 358.063103][T14478] total_workingset_refault_file 7808 [ 358.068475][T14478] total_swap 0 [ 358.071910][T14478] total_swapcached 0 [ 358.077229][T14478] total_pgpgin 170720 [ 358.081305][T14478] total_pgpgout 162871 [ 358.086869][T14478] total_pgfault 138202 [ 358.090950][T14478] total_pgmajfault 1 [ 358.094902][T14478] total_inactive_anon 40960 [ 358.099399][T14478] total_active_anon 110592 [ 358.103803][T14478] total_inactive_file 0 [ 358.108151][T14478] total_active_file 31997952 [ 358.112804][T14478] total_unevictable 0 [ 358.116862][T14478] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2955,pid=14475,uid=0 [ 358.131767][T14478] Memory cgroup out of memory: Killed process 14478 (syz.5.2955) total-vm:90452kB, anon-rss:1344kB, file-rss:21728kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 358.193315][T12441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.208416][T14525] netlink: 'syz.5.2971': attribute type 10 has an invalid length. [ 358.220030][T14525] __nla_validate_parse: 4 callbacks suppressed [ 358.220044][T14525] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2971'. [ 358.271270][T14533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2972'. [ 358.291392][T14533] ip6gre1: entered promiscuous mode [ 358.297843][T14533] ip6gre1: entered allmulticast mode [ 358.309225][T14533] netlink: 'syz.0.2972': attribute type 6 has an invalid length. [ 358.324220][T14533] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2972'. [ 358.711813][T14544] set_capacity_and_notify: 7 callbacks suppressed [ 358.711886][T14544] loop3: detected capacity change from 0 to 128 [ 358.858257][T14554] cgroup2: Unknown parameter 'memory_hugetlb_acc í† ÇŽ>ó' [ 358.866784][T14555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35856 sclass=netlink_route_socket pid=14555 comm=syz.3.2976 [ 358.886438][T14555] loop3: detected capacity change from 0 to 736 [ 358.901374][T14555] iso9660: Unknown parameter 'transBñãçBç' [ 359.084652][T14561] loop5: detected capacity change from 0 to 8192 [ 359.137141][T14570] loop0: detected capacity change from 0 to 1024 [ 359.148379][T14570] EXT4-fs: Ignoring removed orlov option [ 359.156584][T14570] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 359.178275][T14570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.916323][T12441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.938241][T13466] loop5: p1 p2 p4 [ 359.943091][T13466] loop5: p4 size 262912 extends beyond EOD, truncated [ 359.983440][T14561] loop5: p1 p2 p4 [ 360.003075][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 360.003090][ T28] audit: type=1400 audit(2000002247.226:2978): avc: denied { append } for pid=14579 comm="syz.6.2989" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 360.036288][T14561] loop5: p4 size 262912 extends beyond EOD, truncated [ 360.051456][T14583] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 360.066379][T14583] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 360.106946][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2992'. [ 360.256170][T13459] udevd[13459]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 360.267818][T13466] udevd[13466]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 360.272231][T13460] udevd[13460]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 360.290371][T14613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2995'. [ 360.297893][T14607] lo speed is unknown, defaulting to 1000 [ 360.310955][T14608] loop2: detected capacity change from 0 to 512 [ 360.356895][T14613] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2995'. [ 360.372009][T14617] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 360.474979][T14608] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 360.475316][T14608] EXT4-fs: failed to create workqueue [ 360.512320][T14622] FAULT_INJECTION: forcing a failure. [ 360.512320][T14622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.538064][T14608] EXT4-fs (loop2): mount failed [ 360.565356][T14622] CPU: 1 UID: 0 PID: 14622 Comm: syz.5.3002 Tainted: G W syzkaller #0 PREEMPT(full) [ 360.565385][T14622] Tainted: [W]=WARN [ 360.565396][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.565455][T14622] Call Trace: [ 360.565460][T14622] [ 360.565466][T14622] __dump_stack+0x1d/0x30 [ 360.565489][T14622] dump_stack_lvl+0x95/0xd0 [ 360.565507][T14622] dump_stack+0x15/0x1b [ 360.565524][T14622] should_fail_ex+0x263/0x280 [ 360.565606][T14622] should_fail+0xb/0x20 [ 360.565621][T14622] should_fail_usercopy+0x1a/0x20 [ 360.565651][T14622] _copy_from_user+0x1c/0xb0 [ 360.565677][T14622] __copy_msghdr+0x244/0x300 [ 360.565702][T14622] ___sys_sendmsg+0x10c/0x1e0 [ 360.565735][T14622] __sys_sendmmsg+0x185/0x320 [ 360.565811][T14622] __x64_sys_sendmmsg+0x57/0x70 [ 360.565835][T14622] x64_sys_call+0x27aa/0x3020 [ 360.565863][T14622] do_syscall_64+0x12c/0x370 [ 360.565882][T14622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.565900][T14622] RIP: 0033:0x7f02d8f9c799 [ 360.565990][T14622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.566007][T14622] RSP: 002b:00007f02d79f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.566092][T14622] RAX: ffffffffffffffda RBX: 00007f02d9215fa0 RCX: 00007f02d8f9c799 [ 360.566138][T14622] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 360.566152][T14622] RBP: 00007f02d79f7090 R08: 0000000000000000 R09: 0000000000000000 [ 360.566210][T14622] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000001 [ 360.566268][T14622] R13: 00007f02d9216038 R14: 00007f02d9215fa0 R15: 00007ffe40a2ee08 [ 360.566363][T14622] [ 360.765520][T13466] udevd[13466]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 360.776520][T13460] udevd[13460]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 360.777090][T13459] udevd[13459]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 361.174191][T14637] macvlan0: entered allmulticast mode [ 361.186265][T14637] veth1_vlan: entered allmulticast mode [ 361.208708][T14637] veth1_vlan: left allmulticast mode [ 361.224087][T14637] macvlan0 (unregistering): left allmulticast mode [ 361.758508][T14644] team0: Port device gtp0 added [ 361.794285][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 361.947964][T14653] loop2: detected capacity change from 0 to 512 [ 361.990388][T14653] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.3015: corrupted inode contents [ 362.007227][T14653] fserror_report: 12 callbacks suppressed [ 362.007243][T14653] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 362.016084][T14658] loop5: detected capacity change from 0 to 512 [ 362.031941][T14653] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #3: comm syz.2.3015: mark_inode_dirty error [ 362.043337][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 362.043356][ C1] EXT4-fs (loop2): initial error at time 2000002249: ext4_do_update_inode:5569: inode 3 [ 362.043381][ C1] EXT4-fs (loop2): last error at time 2000002249: ext4_do_update_inode:5569: inode 3 [ 362.072259][T14653] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 362.072651][T14653] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #3: comm syz.2.3015: corrupted inode contents [ 362.093700][T14653] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 362.093886][T14653] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.3015: mark_inode_dirty error [ 362.114374][T14653] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 362.114716][T14653] Quota error (device loop2): write_blk: dquota write failed [ 362.131900][T14653] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 362.132787][T14658] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.3016: corrupted inode contents [ 362.153876][T14653] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.3015: Failed to acquire dquot type 0 [ 362.174203][T14658] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 362.175659][T14658] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.3016: mark_inode_dirty error [ 362.184783][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 362.184805][ C1] EXT4-fs (loop5): initial error at time 2000002249: ext4_do_update_inode:5569: inode 3 [ 362.184846][ C1] EXT4-fs (loop5): last error at time 2000002249: ext4_do_update_inode:5569: inode 3 [ 362.222070][T14653] loop2: lost filesystem error report for type 5 error -117 [ 362.241687][T14658] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 362.249228][T14653] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.3015: corrupted inode contents [ 362.271142][T14653] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 362.280930][T14658] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.3016: corrupted inode contents [ 362.306139][T14653] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.3015: mark_inode_dirty error [ 362.317830][T14653] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 362.318233][T14653] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.3015: corrupted inode contents [ 362.327692][T14658] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 362.339811][T14653] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 362.351068][T14653] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.3015: mark_inode_dirty error [ 362.373024][T14653] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.3015: corrupted inode contents [ 362.379858][T14658] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.3016: mark_inode_dirty error [ 362.385252][T14653] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 362.407240][T14653] loop2: lost filesystem error report for type 5 error -117 [ 362.407424][T14653] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.3015: corrupted inode contents [ 362.432970][T14653] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.3015: mark_inode_dirty error [ 362.434046][T14658] Quota error (device loop5): write_blk: dquota write failed [ 362.444618][T14653] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 362.460720][T14653] loop2: lost filesystem error report for type 5 error -117 [ 362.461078][T14653] EXT4-fs (loop2): 1 truncate cleaned up [ 362.475124][T14653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.487958][T14653] ext4 filesystem being mounted at /558/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.494247][T14658] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 362.513964][T14672] loop0: detected capacity change from 0 to 512 [ 362.518640][T14658] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.3016: Failed to acquire dquot type 0 [ 362.551766][T14658] loop5: lost filesystem error report for type 5 error -117 [ 362.634433][T14658] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.3016: corrupted inode contents [ 362.665022][T14672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.689212][T14658] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.3016: mark_inode_dirty error [ 362.704575][T14672] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.726519][T14658] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.3016: corrupted inode contents [ 362.749617][T14672] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.3019: corrupted inode contents [ 362.774179][T14658] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.3016: mark_inode_dirty error [ 362.784256][T14672] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.3019: mark_inode_dirty error [ 362.796787][T14658] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.3016: corrupted inode contents [ 362.797056][T14672] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.3019: corrupted inode contents [ 362.820652][T14658] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 362.820956][T14672] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.3019: mark_inode_dirty error [ 362.864152][T14658] loop5: lost filesystem error report for type 5 error -117 [ 362.864538][T14658] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.3016: corrupted inode contents [ 362.890405][T14672] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.3019: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 362.890405][T14672] [ 362.921197][T14672] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #18: comm syz.0.3019: directory missing '.' [ 362.924591][T14658] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.3016: mark_inode_dirty error [ 362.944465][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.955933][T12441] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.975518][T14658] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 362.989642][T14658] loop5: lost filesystem error report for type 5 error -117 [ 362.992475][T14658] EXT4-fs (loop5): 1 truncate cleaned up [ 363.018074][T14658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.037367][T14678] tipc: Enabled bearer , priority 0 [ 363.047631][T14658] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.104394][T14681] syzkaller0: entered promiscuous mode [ 363.109859][T14681] syzkaller0: entered allmulticast mode [ 363.129813][ T28] audit: type=1326 audit(2000002250.356:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.0.3021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f972115c799 code=0x7efc0000 [ 363.168957][T14678] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 363.173813][ T28] audit: type=1326 audit(2000002250.386:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.6.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b63dec799 code=0x7ffc0000 [ 363.177046][T14685] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3023'. [ 363.200257][ T28] audit: type=1326 audit(2000002250.386:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.6.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b63dec799 code=0x7ffc0000 [ 363.232983][ T28] audit: type=1326 audit(2000002250.386:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.6.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8b63dec799 code=0x7ffc0000 [ 363.274202][ T28] audit: type=1326 audit(2000002250.386:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.6.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b63dec799 code=0x7ffc0000 [ 363.521933][T10896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.531641][T10896] ================================================================== [ 363.540164][T10896] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 363.547718][T10896] [ 363.550037][T10896] read-write to 0xffff888237d26668 of 1 bytes by task 14680 on cpu 1: [ 363.558273][T10896] folio_add_lru+0xa4/0x1e0 [ 363.562785][T10896] shmem_get_folio_gfp+0x7b0/0xd60 [ 363.567986][T10896] shmem_write_begin+0xfc/0x1f0 [ 363.572858][T10896] generic_perform_write+0x183/0x490 [ 363.578155][T10896] shmem_file_write_iter+0xc5/0xf0 [ 363.583271][T10896] __kernel_write_iter+0x319/0x590 [ 363.588396][T10896] dump_user_range+0xa7d/0xdb0 [ 363.593178][T10896] elf_core_dump+0x21a2/0x2330 [ 363.597954][T10896] coredump_write+0xacc/0xdd0 [ 363.602652][T10896] vfs_coredump+0x26c7/0x3130 [ 363.607335][T10896] get_signal+0xd80/0xf60 [ 363.611688][T10896] arch_do_signal_or_restart+0x96/0x450 [ 363.617341][T10896] exit_to_user_mode_loop+0x6a/0x6f0 [ 363.624059][T10896] do_syscall_64+0x249/0x370 [ 363.628802][T10896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.634833][T10896] [ 363.637192][T10896] read to 0xffff888237d26668 of 1 bytes by task 10896 on cpu 0: [ 363.644972][T10896] __lru_add_drain_all+0x17e/0x450 [ 363.650267][T10896] lru_add_drain_all+0x10/0x20 [ 363.655219][T10896] invalidate_bdev+0x47/0x70 [ 363.660162][T10896] ext4_put_super+0x624/0x7d0 [ 363.664889][T10896] generic_shutdown_super+0xee/0x220 [ 363.670321][T10896] kill_block_super+0x2a/0x70 [ 363.675143][T10896] ext4_kill_sb+0x42/0x80 [ 363.679680][T10896] deactivate_locked_super+0x75/0x1c0 [ 363.685082][T10896] deactivate_super+0x97/0xa0 [ 363.689855][T10896] cleanup_mnt+0x2bb/0x330 [ 363.694284][T10896] __cleanup_mnt+0x19/0x20 [ 363.698710][T10896] task_work_run+0x130/0x1a0 [ 363.703306][T10896] exit_to_user_mode_loop+0x1f4/0x6f0 [ 363.708682][T10896] do_syscall_64+0x249/0x370 [ 363.713437][T10896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.719329][T10896] [ 363.721654][T10896] value changed: 0x19 -> 0x1a [ 363.726318][T10896] [ 363.728639][T10896] Reported by Kernel Concurrency Sanitizer on: [ 363.734791][T10896] CPU: 0 UID: 0 PID: 10896 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 363.745904][T10896] Tainted: [W]=WARN [ 363.749716][T10896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.759777][T10896] ================================================================== [ 363.897944][T14677] tipc: Resetting bearer [ 363.909442][T14677] tipc: Disabling bearer