last executing test programs: 3m55.612461871s ago: executing program 3 (id=1069): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff, 0x800ff, 0xfffffffb}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x4, 0xffffff00, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = getpid() r9 = syz_open_dev$loop(&(0x7f0000000140), 0x4, 0x8500) ioctl$BLKPBSZGET(r9, 0x127b, &(0x7f0000000180)) r10 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x432e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x6, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, r10, 0x0, 0x3, &(0x7f0000000200)='\\{\x00\xafO\xfcg2\xa1\xd8\x13\x8d\xc9\x16\xb5\x7f*2L\xdf\"\xd2\x91@\xb16'}, 0x12) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xffffff90) 3m54.652145673s ago: executing program 3 (id=1084): socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x22342, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x8080) write$binfmt_elf64(r1, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x9, 0xf, 0x1f, 0x0, 0x3, 0x3, 0x9, 0x344, 0x40, 0x145, 0x4, 0x3, 0x38, 0x1, 0x7, 0x7fff}, [{0x60000000, 0xf, 0x9b, 0x9, 0x4c, 0x3, 0x7, 0x7}], "", ['\x00']}, 0x178) 3m54.625031924s ago: executing program 3 (id=1085): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a40", @ANYRES32, @ANYBLOB="140002"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="14"], 0x20) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) 3m54.549394115s ago: executing program 3 (id=1087): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x18d883, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r0 = syz_clone(0x40900, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x5ca643778cc2783c, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4c044) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x10448) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002d0001002dbd7000ffdba64c08000d00", @ANYRES32], 0x2c}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ptrace$getregset(0x4204, r0, 0x202, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x4, 0x50, 0x0, 0x200, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x108044, 0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x4, 0x46f, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFt+IyviDxC1isbGH1sooBy8aDTxoImJFzzWthBkoYbWRAgRNAaPhsTEo/Fo4l/gSS9GPZl41bshIYaL6GnM7M6022W73ZYtK93PJ9nueztv+t533rzdN/N2AxhYo/mfJGJHRPweEbsa2aUFRhtPN29cnPrnxsWpJLLs7b+Serm/b1ycKouW+20vMmNpRPppEg+3qXfu/IXTk7XazLkiPz5/5v3xufMXnj91ZvLkzMmZsxPHjh05fOjFFyaO9iTOe/O27vtodv/e19+5+ubU8avv/vxtUsbfEkePjHba+FSW9bi6/trZlE6Gu9hhaB0bQ9fybsi7a6Q+/nfFUCx23q547ZO+Ng5YV1lhmc2XM2ADS6LfLQD6o/ygz69/y8edm3303/WXGxdAedw3i0djy3CkRZmRluvbXhqNiOOX//0qf8Tq70O4igYAVu37fP7z3C3zv62t5e6JzfW1oUqxlrI7Iu6LiD0RcX9EPBARD0bEQ+0q6bAg0LpIcuv8J7221ti6kc//XirWtpbO/8rZX1SGitzOevxH04jazMH6MYkYi5HNJ07VZg51qOOHV3/7fLltzfO//JHXX84Fi3ZcG968dJ/pyfnJ24m52fWPI/YNt4s/WVgJSCJib0TsW2Mdp575Zv9y21aOv4Nu1plWkH0d8XSj/y9HS/ylpPP65PiW/HwYz8+Cg23r+OXXK28tV/9txd8Def9va3v+L8RfSZrXa+dW898bo/vKH58te01TXdP5v/jCpuL5w8n5+XOHIjYlbzQa3fz6xOK+Zb4sn8c/dqD9+N9df84WDkR+Ej8SEY9GxGNFdI9HxBMRcaDDUfjplSff63SE2se/pcN/7J08/umW/q8sLdLS/4uJTdH6SvvE0Okfv1v6H7uJv5T3/5F6aqx4pf7+92XnuLpp12rPZgAAALhbpRGxI5K0upBO02q18R3+PbEtrc3OzT97YvaDs9ON3whUYiQt73Q17gePJOX9z0pTfqIlf7i4b/zF0NZ6vjo1W5vud/Aw4LY3j//yTme18fSnb5fAxteDdTTgLmX8w+Ay/mFwGf8wuNqM/1u+AA5sTO0+/y/1oR3Andcy/i37wQBx/Q+Da7jpR47AYGn+/PdGAANjbmus/CP5jZDIsiz7HzRj4yQi7bbwpX43deVEss6jYEe/A1x9ot/vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xXwAAAP//BL/saw==") (async) chdir(&(0x7f0000000140)='./file0\x00') 3m54.549230175s ago: executing program 3 (id=1088): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x3d) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x44, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x4, 0x700000000000000}, 0x0) 3m54.478942727s ago: executing program 3 (id=1089): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x4}, 0x10ffc8, 0x1224, 0x2, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001340)="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", 0x220}, {&(0x7f0000000180)="6242870f0e6b4396205a2c501f10b0601e64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489a8ddc2b21909092ab24a155c0285968950c5d57e08533c7216e8dd6ccabae10c2", 0xb3}, {&(0x7f0000000580)="7d1455a2eefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330bba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772ad57e70daa13148536e5cfe1eec171afbbf0a99ab5e3b0658fe289beff381c455f37c2b1c71e0e98f34a344141f9996f71a6c32cd9e930f86b9aa8d31e566b300"/146, 0x92}, {&(0x7f0000000e00)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc570d15691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0801af924a0df53cd52aaf4eca9516d8c5cccf8a4b62b04a539314e33cc2b14107eaaa7460a6c35395f2a6253b517b685f448709ea52c3fe7c64200417272b56fe5307c4b1f0fedde01c106750b5c9c3b917ffa26b537bc6c42c9512e50ff7437643d08d62bf21e8473b8dbd812b8bacdaa11a11f62bc43b1bee91e35ca0278699d919bf538a575fb2ee011a1a5b8f0b180df3152b26f8f82d13689f0b203ced9ef4216b647c86e0e9f22994aaee828202747578c9c26291ea298c8506e39320443182d0b8ba7e237766bba240246bbf4d3c8fad7c22b17a01b91f44e23292181488868d94bf559563b286d", 0x154}, {&(0x7f0000000a80)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f8cb80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec40b4f", 0xd5}], 0x5}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000c40)="b420", 0x2}], 0x1) 3m54.447994477s ago: executing program 32 (id=1089): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x4}, 0x10ffc8, 0x1224, 0x2, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001340)="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", 0x220}, {&(0x7f0000000180)="6242870f0e6b4396205a2c501f10b0601e64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489a8ddc2b21909092ab24a155c0285968950c5d57e08533c7216e8dd6ccabae10c2", 0xb3}, {&(0x7f0000000580)="7d1455a2eefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330bba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772ad57e70daa13148536e5cfe1eec171afbbf0a99ab5e3b0658fe289beff381c455f37c2b1c71e0e98f34a344141f9996f71a6c32cd9e930f86b9aa8d31e566b300"/146, 0x92}, {&(0x7f0000000e00)="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", 0x154}, {&(0x7f0000000a80)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f8cb80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec40b4f", 0xd5}], 0x5}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000c40)="b420", 0x2}], 0x1) 1m14.330013259s ago: executing program 4 (id=2832): syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) 1m14.311668589s ago: executing program 4 (id=2833): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x406fb}], 0x1, 0x40000041, 0x0) 1m14.257539691s ago: executing program 4 (id=2834): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd", @ANYRES16=r0], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, 0x0}, 0xfffffffb}], 0x2, 0x12102, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r2 = socket(0x2a, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) sendmmsg(r2, 0x0, 0x0, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f0000000280)='\'(\x00', 0x131000, &(0x7f0000000080)={@align=0x32f, {0x4, 0x7, 0x3, 0x8f2}}, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x39}, 0x1, &(0x7f0000000480)=[{0x3, 0x8, &(0x7f0000000180)='{\\^\x00', &(0x7f0000000380)="12645dcd343b788bf572adfe4ec4a51fe26db003b22fafb1457c4d86968e177f5cc2a97abbe46962894bd8bdbd7f7cf4fe05da7e3f78a3fafacd3b7e05ded81df42798683f2f905ec818e33bb0540862e4db8d2ea539973e3b983463bf514c00b6d2ea5c5df2d19773acce2a90035091afe62c34965aba99dca2947bfc1c7b7cee2d02b99e49195342e62b041535ce0bada9633998460198cd69ea9b62d945e56d373edd43bd05b9f01c01fa86c2f19063729d9847206d152993e1fe6e89f9da11ec7bec47d787818014df5c20ff1df2", 0xd0}]}) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="2c0207000000f8ffa3e61fc383ee2421ff00000000000000"], 0x18) getsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 1m14.249947111s ago: executing program 4 (id=2836): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c04, &(0x7f0000000040), 0xff, 0x26e, &(0x7f00000004c0)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@hopopts={0x6c, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x401}, @jumbo={0xc2, 0x4, 0x800}]}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x12800, 0xe2) getdents(r1, &(0x7f0000000440)=""/4090, 0xffa) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updsa={0x104, 0x1a, 0x1, 0x70bd25, 0x0, {{@in6=@private1={0xfc, 0x2}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {@in=@empty, 0x0, 0x3c}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x200400c5) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000801, 0x0, &(0x7f0000000140)={0x0, 0x8000, 0x8000000000003, 0x3, 0x9, 0x401, 0x2, 0x0, 0x4}) socket$inet(0x2, 0x1, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) listen(0xffffffffffffffff, 0x0) 1m13.509503397s ago: executing program 4 (id=2843): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000ffff26bd7000eedbdf2500000003", @ANYRES32=0x0, @ANYBLOB="350c0400000000001c0012800b0001006d616373656300000c000280060002404e24000008000500"], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) 1m12.413385092s ago: executing program 4 (id=2858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x90, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2cf}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x881}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) writev(r2, &(0x7f0000000040), 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2804}, 0x44045) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x10}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f00000001c0)=0x7fffffff, 0x4) 1m12.412997492s ago: executing program 33 (id=2858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x90, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2cf}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x881}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) writev(r2, &(0x7f0000000040), 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2804}, 0x44045) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x10}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f00000001c0)=0x7fffffff, 0x4) 50.387821511s ago: executing program 6 (id=3133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x300}, 0x84000) 50.333134632s ago: executing program 6 (id=3135): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20040}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 49.291042245s ago: executing program 6 (id=3139): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000040)={[{@errors_continue}, {@norecovery}]}, 0x2, 0x53d, &(0x7f0000000c80)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) times(&(0x7f0000000000)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f00000001c0)="9dc4574efeeff0d649cd3ea1944fba20e35b43b1291bc7029b353b0745a31eb7939fc3f19399aad5a2a035c6001bdbfd11d1608f01e04d235934d2a3e40b8d9cf4a66f4b6f9497674ab8a221a9199d845ea58225a8eea2930080000058de4151c4989aafa41ff150f281d1c00f8cfbc379a6a9077daa1751b990bda688ddb650281efe6573cc9f7c5832", 0x8a, 0x20008008, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x1, 0x5004) 48.417104795s ago: executing program 6 (id=3148): syz_clone3(&(0x7f0000000200)={0x110008200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x38}, &(0x7f00000000c0)=""/9, 0x9, &(0x7f0000000100)=""/154, &(0x7f00000001c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) socket(0x10, 0x80002, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4103, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000012c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3c4, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) r6 = open(&(0x7f0000000000)='.\x00', 0xa0000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) socket$unix(0x1, 0x5, 0x0) 48.273830728s ago: executing program 6 (id=3150): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket(0xa, 0x5, 0x0) pipe2(&(0x7f0000000580), 0x0) pipe2(&(0x7f0000000200), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x10) 48.145455241s ago: executing program 6 (id=3151): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000080), 0xa}, 0x305, 0xe7e, 0x4, 0x9, 0x800000, 0x43, 0x0, 0x0, 0x401, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 48.132142632s ago: executing program 34 (id=3151): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000080), 0xa}, 0x305, 0xe7e, 0x4, 0x9, 0x800000, 0x43, 0x0, 0x0, 0x401, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.673462342s ago: executing program 7 (id=3657): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xffffffffffff0000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}}, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x0, 0x100010, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x571c0f1b}], 0x1, 0x0, 0x0) 5.210178322s ago: executing program 7 (id=3658): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x20) 5.016502926s ago: executing program 7 (id=3661): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x26, 0x8}, 0x100d9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) 4.816569091s ago: executing program 7 (id=3662): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4.562470857s ago: executing program 7 (id=3664): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x80000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0xe4ffffff}, {}]}, [{}, {}, {}, {}, {0x0, 0x40}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {0x70b5}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x9}, {}, {}, {0x7}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x10000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0xf188}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8004}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x7d, &(0x7f0000000300)={r6, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) 4.43139289s ago: executing program 7 (id=3666): socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x114, 0x14, 0xea0c223154e6c56, 0x70bd2b, 0x25dfdbff, {0x2b, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "bae1e88283b11da178574990b5a4f1f6de11e3c7dbd73a09e8926b8aea7945fb9cdd7444fd4456067381bd1e9160b28944ab1bd1e4299bb43539ed5cca284df3f8c3409f8fb499dca6db8b9448cc4b5b197c52ff52fcf3ce744e42d7f681b43679101ba7a37c7e40b3e2dadeb743bda1223b1eb0de8615ef60bc4d2ce66d0da4ae0b07b99a0db690bf6300414b89f3ec25a0e10b4cf4"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "912df4e3"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "88e97c3385d3ffb8814060aafca6e06315538fd50a2f4fa327b0b42f1d194598a9318ca24a90ffe864ebcdcd275187ca140c56f9ec7246f7f975e57f7df3bbfc9a7a9572eff713a9d4818a737449ddb3f91eed37dd737c"}]}, 0x114}, 0x1, 0x0, 0x0, 0x20044084}, 0x40884) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x38, r3, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x55}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}]}]}, 0x38}}, 0x4c044) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0xc0085504, &(0x7f00000010c0)=0x40000010) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000100)={0x80, r3, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x38, 0x73}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0xc}, {0xc, 0x1}, {0x3c}, {0x3}, {0x16, 0x1}, {0x3}, {0xc, 0x1}, {0xc}, {0x24}, {0x1}, {0x6, 0x1}, {0x60}, {0x3}, {0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0xf000, 0x8001]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x141}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000003f440000000000007a0a00fe00ffffffd703000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x45, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x2f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4091}, 0x800) 4.43066551s ago: executing program 35 (id=3666): socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x114, 0x14, 0xea0c223154e6c56, 0x70bd2b, 0x25dfdbff, {0x2b, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "bae1e88283b11da178574990b5a4f1f6de11e3c7dbd73a09e8926b8aea7945fb9cdd7444fd4456067381bd1e9160b28944ab1bd1e4299bb43539ed5cca284df3f8c3409f8fb499dca6db8b9448cc4b5b197c52ff52fcf3ce744e42d7f681b43679101ba7a37c7e40b3e2dadeb743bda1223b1eb0de8615ef60bc4d2ce66d0da4ae0b07b99a0db690bf6300414b89f3ec25a0e10b4cf4"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "912df4e3"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "88e97c3385d3ffb8814060aafca6e06315538fd50a2f4fa327b0b42f1d194598a9318ca24a90ffe864ebcdcd275187ca140c56f9ec7246f7f975e57f7df3bbfc9a7a9572eff713a9d4818a737449ddb3f91eed37dd737c"}]}, 0x114}, 0x1, 0x0, 0x0, 0x20044084}, 0x40884) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x38, r3, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x55}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}]}]}, 0x38}}, 0x4c044) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0xc0085504, &(0x7f00000010c0)=0x40000010) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000100)={0x80, r3, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x38, 0x73}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0xc}, {0xc, 0x1}, {0x3c}, {0x3}, {0x16, 0x1}, {0x3}, {0xc, 0x1}, {0xc}, {0x24}, {0x1}, {0x6, 0x1}, {0x60}, {0x3}, {0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0xf000, 0x8001]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x141}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x45, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x2f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4091}, 0x800) 3.297325676s ago: executing program 0 (id=3674): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b16"], 0xa8}, 0x1, 0x0, 0x0, 0x50}, 0x4040080) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 3.076308841s ago: executing program 0 (id=3677): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_eee={0x45, 0x7, 0x800081, 0x1, 0xfffffffe, 0x8, 0x8, 0x0, [0x3, 0x9]}}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x7, 0x3}, 0x8000, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setresuid(0x0, 0x0, 0x0) 2.887804375s ago: executing program 0 (id=3678): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file1\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000300)={[{@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@data_err_ignore}, {@inlinecrypt}, {@mb_optimize_scan}, {@journal_ioprio}]}, 0x3e, 0x51a, &(0x7f0000001200)="$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") perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x9) socket$kcm(0x29, 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00') 2.375104786s ago: executing program 1 (id=3682): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r2, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb75}, 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffe8d) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r4, 0x40085500, 0x100000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7979, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x0, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x1f17ee81fe9ab15a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000ba4000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) 1.32042405s ago: executing program 1 (id=3684): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) socket(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r1, 0xf, 0x0) memfd_create(0x0, 0x1c) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) ioctl$sock_ifreq(0xffffffffffffffff, 0x8930, &(0x7f0000000080)={'tunl0\x00', @ifru_map={0x10001, 0x1ff, 0x6, 0x80, 0x0, 0x40}}) fcntl$notify(r1, 0x402, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f00000001c0)}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00\x00\x00\"\n\x00\x00\x00'], 0x20) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, 0x0) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r4) 1.199526343s ago: executing program 1 (id=3685): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20040}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.137626214s ago: executing program 2 (id=3686): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5d31, 0x810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x7, 0x1000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x189800, 0x207) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000100)) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 923.276809ms ago: executing program 2 (id=3687): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 830.811052ms ago: executing program 0 (id=3688): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4010) msgrcv(0x0, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) syz_io_uring_setup(0x6820, &(0x7f0000000100)={0x0, 0x2523, 0x4000, 0x2, 0x37f}, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@user_xattr}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x90001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unshare(0x6020400) fadvise64(r2, 0x807f, 0x1000000, 0x4) 765.411233ms ago: executing program 2 (id=3689): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0x60408e1) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000004a00030000000000000000000a00", @ANYRES32=0x0, @ANYBLOB="17eb96a4097cb9b7e565de9d"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x142c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x22, 0x0, 0x9, 0xc, 0x0, 0x9, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0x9e, 0x1, 0x5, 0x477f, 0x9b9b, 0x8, 0x0, 0x7fff, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12041, 0x0, 0x0) personality(0x87bf5ac905ea0f7f) r2 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x1, 0x12, r2, 0x8000000) socket$inet6(0xa, 0x3, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) 686.186915ms ago: executing program 2 (id=3690): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000004c0)=0x9, 0x4) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="74726189733d74630000000000000007783030303030303030fbb69a5abf57ca26dc3b30303030346532322c00a217c3292cfd1b14e7e1a92ca5bf5161e3e081ef74c5c36554a5d87eec35f5068cc10865d4adb9f485a0db8bce24a72bae2239eb3f6df2b0da0b80f1123540abfdaca669573469d2b4f2d989806dfa45f93416699096d86909a50a01fa23df15653986d2bf94a0648d01f7b10b7dd8976d7969a8ec4b45167e2f5f043327cab2bedaf48db4294107e78b2f197b9877eeb71a7f80a3d2adbc1c08fe75504b4089f403f3"]) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="140000000000000000000000020000000100000000000000280000000000000000000000070000004414c47300000000000000007f000001fffffff994040000110000000000000001000000010000000b0000000000000074000000000000000000000007000000940244243a437f00000100000004ac1414aa000045a5ac14142500000af1e00000020000093c44349fd1ac141442000000040a01010000000081ac14142200000004ac14142e00000008ffffffff000000060a0101010000000d070a1181265fedc15cf7000000001c"], 0xf0}}], 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x7, 0x80000000}, {0x6, 0x0, 0x4}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f00000037c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x1, 0x20a, 0x1, 0xa48, 0x3, 0x6, 0x10}}], 0x48, 0x4000}], 0x1, 0x40004850) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x16e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1, 0xb0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) epoll_create(0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") socket(0x2, 0x80805, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="800034ca269b", 0x6, 0x200440c0, &(0x7f0000000040)={0xa, 0xfffd, 0xff, @private2}, 0x1c) 682.309045ms ago: executing program 0 (id=3691): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = timerfd_create(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000001c0), 0x0) clock_adjtime(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x3c8, 0xd0, 0xd0, 0x2d8, 0xd0, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0xd, 0x2], 0x80000000, 0x20, 0x3}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x335}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000940)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000000)=0xe8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) accept(0xffffffffffffffff, &(0x7f00000001c0)=@nfc, &(0x7f0000000240)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newtaction={0xabc, 0x30, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{0x12c, 0x1, [@m_mirred={0x128, 0x13, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x8, 0x7, 0x2, 0x5}, 0x0, r5}}]}, {0xda, 0x6, "2d9a2dd86520895d602214107a3b30991ceb1c30e556e1d0a8b431eef75b1e366a7ab1a2bbd2e653401ac8141b13c4baa0d8a7aff666bf1499b66f25a388b938fd3d6209f297d6e555e4508a480267fd79346ce4df833bdd7abafd8b19a28e79213ba50a0e25bbd50e233ecee9a596deb7ec2da1b46434d90b6d3bfb7aef94ecb2571ed11c10feb8963ea93c7d80d88e224b03d803040bd67b4a9c7c5f184725b55a863a2c4b870a3a4fd233c0a821be36dda6b877f36895f66f8dfb40d1b17b5c8a9ab04ad9941166fccf11a54bcd8d2c5c1c3c721a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x36c, 0x1, [@m_csum={0x138, 0x15, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x2, 0x20000000, 0x1, 0x3}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7c, 0x0, 0x4, 0xd9, 0x2f}, 0x36}}]}, {0xd2, 0x6, "073f422329b2f78b36075ded0451135af74f6481182731d66b15d63252d701c0161d1e853c9ca4796b8cfd3349a86fc0d347836715327fe2b752a346dfce8f42f8ea9ad42e9f4d944966457338593ee6bc1295b6a003558ebbf80695c2f433ac4ee9a0592f3428c80d640cde3490aa6f23789f5ebaef1db194e1a6ff5a87b18c861997664cf40e4a0654e7f3915f88b5c0953142a643d09a6d6e60c10de1f94d8406155264c91900b36e544d924ccba65a253ff0211653c88b39467c1d4db1d94d35fbb52787a4f62ebefe52aa19"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x114, 0x1a, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0xdb8, 0x0, 0x5, 0x80000000}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffd, 0xf6a, 0x1, 0x8000, 0x839c}, 0x3}}]}, {0xaf, 0x6, "a78169f82226abccf6bf2c009d6f2acec22e7b7a3800cb1170e35a7e2d26ce3bc0c514157558dee068b039aa59e44c2f3b559c2a9ac6c2fabc7ce900ec84f59146ac9e30de80e44703712709b10af2cfd4a37ec1e65672ce7239879c841f5cc53c7737dec43cbe6e479dfc87cf1d972bf325625491e0bdad28ed06511a71b6a3df989a0c9a25e556dc49447f8ae29ca3f4bb0083ed02a413ea531efefb74d102ac78856085c28381b38c55"}, {0xc}, {0xc, 0x8, {0x3, 0xc581b2505f7958ae}}}}, @m_skbedit={0x11c, 0xf, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe343}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x200}]}, {0xd5, 0x6, "159e6ec1aa2b82a702f6a69b9f7093008d88c52cc0a99acf8e3c81fe48962dc0b38c4854fecb1ff4a38cc945b98bc93f006e51a3d6f793f72daa8126477fc9ed51cfe7036af5e9bee42c076df5d627e7a8978b48e7b0f3be9978eaddc6665ab6fff4922804d8a789f3bb7faca7c9320ba798fb24f7675590591e646ea224ad1356372e923f1a709e9735a4a0b94d8f06db07e8e585dc6aa607944517e92b3dcc0ee9b2f559851a83a071f9607d9feaa5569a10f3cd8ed82810fcc9fdd0d9072ba7a9ccb90eede28b848f490accad28ef7f"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x60c, 0x1, [@m_tunnel_key={0x130, 0x1, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0xe6, 0x6, "29b02646d7e2c8d38899a36f9178dff2cf02994535a175138d32b4dc484467cdca1cf382a5765abe87caa2837f245e12166a3d88dbc459e8df58d9b95602c19c786d43dff2009d55a1cac0003591e3f60e3f522925e1834bbe3aa6c9265919108f06b34d902c920fb1e440b174ed1fcfea35106d2ea57033d9612fbfeeaab37fc2fd174e804d3781ea5d6158bd0343aab54a20d91611b4f8ee4613f61592dd742058e9bd9d2ad09984d831aea28874eb45e2a7b970741c523b421991a23ab287c329a1d5209221d77258a580574636615df32739705ed1455ca52d85eaba7b91e586"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x18c, 0x15, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xd79, 0x3, 0x30000002, 0x9, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2456, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8001, 0x39, 0x5, 0x10, 0xc180}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x7, 0x20000000, 0xb, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1c14, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x241d, 0x2}}]}, {0xf2, 0x6, "4bb5df2789d97fdefa3bc48b0d2a63377f812402255d58d4ef525e152df52c86f19f5a952f81c6e57111637b96befaefb57f4f65167659f31c25908539d105be62b960963a22171ee64335d50efcf69e8d1d7350d2d51e802ec935ac178be9937417a7b4b79a095d57c00b81ce51f2a762d78dd165e767077174b25d5569fb3ddfa3d6074cb643218f6ab3f3f7ef9a0c0b2eaf34c5f68ae004013786d4998ca79ddd10cf26968b4724aa1b55e5b168335ccbb87a8473b39f94f3b7a78cdcf5a731dcb1ac32cb3bdde769e4aa6c1aa37af0c4aa146d422012df1e1b9a3f0c9f8c7a7c05baaec08e245fe838190e8f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x160, 0x1a, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7a6b}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x6f, 0x4, 0x4, 0x5}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xca22}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xcb9b}]}, {0xe4, 0x6, "0a88db2c10ca24a8ced891165fbff643369d72e8af2848f4f7f44f3b36dd94fd68cbfc7fdddb89d19ec290f436c3d4527d85a30c809269aca58c93af1cf995b6db85b7c72a84922fc8d0fb4b4b9de694a8c0c872df8f38799b9c2544bd2297bfb44cf578d0c5a2e8406f6a75f139c77081a7ffdc1a50e903590682216777a560c402c254c5c8e16d95a19f9f7b3e7f78b17adc68111d7e1438a1562a049b76c82c385587d291b07381322cbbe9385e6b48cb12fc79b39b63a25faeeffeda22aafea9aecf754b110a0b27ba977e530871a22b085ea61d5267514fee276b5340bd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x1ec, 0x1a, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0x6, 0x7, 0x9, 0xff}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x5, 0x6, 0x2}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x600000, 0xe4c, 0x0, 0x9, 0x8}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7, 0x4, 0x3, 0x81}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x7, 0x1, 0x5}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x80000001, 0xffffffffffffffff, 0x9, 0x6}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1, 0xffffffffffffffff, 0x6, 0xd9e2}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0x7ff, 0xffffffffffffffff, 0x7, 0x98}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfffffff9, 0x7, 0x6, 0x4}, 0x5c}}]}, {0xc2, 0x6, "876bb17206a515ba0b28b00afc122636539c49aee46c25037c48df423b4ea8a08206c28d4517a596fa23e4b1c32039d40582369fb11643bf356157d63bef0c1612b6fd70d94194393843e62c795ea9f3d3dbf73c9107caac7fe4ee73d0865a9bbd9fe9b8dc221d278d3f160da45c952a41098d2f0570d59dc324b469c771ac58732920311b482aca0c1e7cf40d0ae6738cfe36eaca36ef4a9e20408dae0ef9ebaea2e304f8a2a3bcd5898927d419c44960a88a8a4eca3dedad4127accf9f"}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}]}, {0x4}]}, 0xabc}, 0x1, 0x0, 0x0, 0x240400d9}, 0x0) 521.544828ms ago: executing program 2 (id=3692): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001d40)=@raw={'raw\x00', 0x64, 0x3, 0x310, 0x0, 0xffffffad, 0x190, 0x0, 0x190, 0x278, 0x268, 0x268, 0x278, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x178, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x7fffffff, 0x400, 'syz0\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x5a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004c000020000006907805000000ac1414aa00014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec540000907800001d12d285b6853bc4dc54c6910c1d66f8841a1d12adf059fd789278e2fb03dc15d356998a"], 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000bc0)="35efe0064959b81c75433d1d0e9f0ac54c04ceb7676e3e8c6f42228f2ff5473637c82ddf1b7fba78321b2253238b99f26e81d8a8650f1fbe27e0bcc8bb5f0ccf32c5cb87285a2a9ba79b37bb76fe6e89331368a16954b48cfb09e8cfe310e949ce9cfe7f0b7be83554af724db1b407bc890c5db9ec2433a0eb97ed76a772e45820242d212e027b353669d2a4f41247f3cefe5ad309bd5bcc61f61ee992819c466b491e0d1a5e84a2d01c29eebe956955b361564167e7c00b1683268642604e7fa1eeb305121ff6648a1fbf5bf1957ccc7e75cfc34d266daf2565447370cc38178ca8f9493ee389a441102608a4160759e1dce130e4229f37263cd3368dd0cfd5e78f8ef5ab0ae35d20423f21897f748bdeef6e27df59e58b4331eca9fdb7a7ef86d31ee01070c43d00e50e4685a013bb4bff44bd19224d069c46f358a73bc146d4b2e0c2ee4b228c280ec8de3fa52acf5165b9f598e02b93c42044f946ee5c855bd24ce00ff0e13e2fd4f531161ad966707a78eaaeb27c60334c82ac478c4bf67e3bf65e1137cdab8756b085735eb3f1ec392c66750afacb46766724c5f2cecfa6e92d70000946bacd7a1a55c16c464ff59fddba04029a429d1be4eac9096b984999e5bdb6cc4613197cb12788b57a2a47a3380f48c2dae0059e3d63cf57a2c2140dc8aa5f3108c5ff91f3943e68ac316e616388ce950b5af21529fdbd3e154e329e68ede5bd7ccdae7ad7f8a07a231e00b17a967b4ef3052a894a2ea7db2a1b960f69955ee4e65e6329c5c49b5df55eac452f1f1e69b62b9239142b69983b25c910d070323965e13dd1e438e55be947398b6aedf8d72b90e834e93c5242fb60be326c034e51fca1d7023e529951b4a98a298ab44f4d7d5180516425265d50112e9d59946a682baf7b55a0a537e17fb97856e45b6d30f6f48c441e6ce4802de6b7b7c154c19fa5a1667d31de23337c01e30e8b96c5b49541c3b649fe66abb514ebf31fe836ec38eef10f68969fd0c5f5a4a752d2e1e96c31ab07f359996d0e9b4f75c46711c4f71049d8433276164a70c06ee1d167bbfe6abb1e7a8615daaf187b8d6e7de65237db771b03e8922694c8af88e0d0d5a6c99251d4001959effac40cb4b68db571b27e25e9e43bc324a8a89165d2b7bccc940cc4a79d3690d3748106a68e6d03a70df73cb842b94171f21d02aa41b492d1718b1e10077108b531d0d6c78015f8db344cd3285672bcc7cdd9502d594b5c33dc40d2c4ac3c0a40403b7ca90a9b25138b7d378f97eac53a199c10735a73b7b76fc7f56eae48e0f827536c5818d2a68fbc1e0354225e120f507f4b71ac5a35ec336ac1ab7678cc7fb9d7d42fef9a87a7f3c516b9e85f184011268f64decd9bb24c6c3b74bbaf23eac744309b056309ae94f4875b8c66b74c5ffad57cdb39710b903d87b0fc092444e6f15aeedee1dbae75cbe4d6743cf25c2aa4b8594773808095d4f65b06ccf1febfdd629545969c1bb9e20e03fc89cfd41a426744c3ff4f9051b81d624db49366e6bcb6590f32e8c591939db83cdb9e3d05e2e3692e5d020f02000d65b600f757bf24bc6a9827720f9f1f05f509a8ec2bd33181515efb64ebe15fd51d56fe4de6e363e8b9c3b72f4392406998884799ff9fed80abc92904db3f1db74bba01820160e2ade0e38dad1c99ac99d9a693a4ca4060dfd64511a9d220a553ec9175a00d6f0eb1b874fbab328d0a6c00fe10c9802943015ee43ee804f873167ade0ebd695140c3e8f84835c761c8c1dc19f290a2a43f9a15f67394ffa32039a6c771e7e43316b297d09cd916acf7bbb98f1f3da046c900e584a49670f039822ed4dae8a8711598d8427d5fb96f86e35ff2a59db7f46385b5672680084c64ea015c95f7dd6f69b72babd4c447a19b906194c4caded7a72a972b77eee6304cb1183e52b64e55816f51e714b03aea791b104e48268c1f6ead9c3b6dcd3ba2f0f4060f6297e7efdfe538de146c16690749b9581a22f68f75c9bb707f84c35057e807ce181b0d81a5930e19ccd111d37bd6f905fc72751e628def95765e1ea8b7bda04aaf48d59a16285fec3dedde1ef3cdaa5f4d3d6ee7bf3b0a03d02f887260ce183c085109bba6ec0cf9095273813003ae64a449d60562b31e5caf00a58e57366f24faebb8f61097b3e89d03511ea7755b05d98037637e875ff105890c816ea232315b9ff6781af8f0800b4b893606f36a8dec1bface007976a5de30ac25abfb9f0f159065fb24ff8b1870d515fdd4c0766813e256d845e592651cdf5485284c8c6ab909b1cf31950979062564b21522255531aee0f20edab7c46895450fe1d522dd4047e56a8203f232d789861eb0f3f090df36b2295724a9382da4bece866a966deb8109b245ced8ed59451557ee0f24e36d5621f0640fc16c1cdcd312e0e18cf9fc543199dacd25160785fe3eaeadc64837db1c071c68865a5029cf3df31024a8ac3421d2cf79fec23314c2c8dcf85760d508f0f73c52b535fde49191387bbeb0e7a6a9b9b34397ab09cc9a512730dd03c9c42b18d5e6ddc5916f24f6729306d1a6e7ef461537fb5b9c381617ed6ea042fadcc8397979dd2f691044fd4d81d1794b556d3a92e872bfdba59274e6871492a0b834a4963af6fead707935367b87e850f8156c8bdcb62e3f338b4b40e2dbaca75a4f7ad0171aad0f77169d3543f6003dd91ff68be61c35242105ccf341c7c87bf83b49ef376b19b2e0d5eb08b24f8688bca61be083d07dfc75455a5fe7ff5a38c958b0dcddfa50dc40766209064e769abbaca260b6f7d61c57c64d2ef130d5208974a046770893e34327ee33b5bd29e01ecbfced54469ac76793d686ac693fcba2c3969b", 0x7f0, 0x81, 0x0, 0x0) writev(r0, &(0x7f0000000ac0)=[{&(0x7f00000013c0)="390000001300034700bb65e1c3e4ffff72f2d791ea3d576c5a4e01000019116d57fc9e98e030aeb387b28f2da34002df8a7f68134f73528ee398ce1764351cf8e91ad23382873e13214df5c5f1c2a277282a2dbb70a8ee69877e65cb1694e66635c7f913626d6ddc652c00ab00365c8cac630197e588a05cf23f5b64d8d508ec3871db1c1a9af81607b19b61dc690f650b4053c4d4315be8e3f0b6139eb86f531c7b5253e0106474f73ef384a3fa12cf06b323aa6911f67175e33cf1ef8e1dc123ea2f0edfe877d9892f61716b871c85085c1ba1a739d6c28c872f2c4e49e387b4f6c3a1f5044730f41006d73743b1eae304a3b22974048e", 0xf8}, {&(0x7f0000000b00)="c49f7cbd621c7fc1b60141cccee7f9f4affe2bd2b789e4fc8e24f090bcba5a0aff84f05f1f7dd9c95b70f90a467473272e7f2006f91b1491adfee115a9d147dbae38089fb37ab609bf8a2f3c6d48d531e14c9f9f676038cff967db4774193a30aff53b5deb2e0e1c562482a31b53eec62b1f00fde6dbd4be2b6f6156ba53227dc80a1af10c03afc83e0149b68bbf993b8ee8572903e3f0dcefde51bc8f3784a7e4dd508d6ad98e4e3e7f81ec", 0xac}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e4f4f145", @ANYRES16=r3, @ANYBLOB="0d03ffffffffffdbdf2513000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 480.024829ms ago: executing program 2 (id=3693): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x20044084}, 0x40884) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x38, r6, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x55}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}]}]}, 0x38}}, 0x4c044) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect(0x4, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(r7, 0xc0085504, &(0x7f00000010c0)=0x40000010) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000100)={0x6c, r6, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x38, 0x73}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0xc}, {0xc, 0x1}, {0x3c}, {0x3}, {0x16, 0x1}, {0x3}, {0xc, 0x1}, {0xc}, {0x60}, {0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1600}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x141}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x45, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x2f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4091}, 0x800) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 446.69768ms ago: executing program 0 (id=3694): openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_setup(0x8, &(0x7f0000000680)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x10) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000340), &(0x7f0000000440)=r2}, 0x20) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001100000000000000000000000000100000208000a400000000008000640ffffff000900010073797a3000000000080005400000001c0900020073797a3200000000080003400000008c38000980340002800c00018008000140000000000c0001800800014000000002140000001000010000000000000000000784000a00000000"], 0xac}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) r5 = socket$inet(0xa, 0x1, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0xfffffffffffffd31) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x16) 431.437721ms ago: executing program 5 (id=3695): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xffffffffffff0000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xd}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}}, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x0, 0x100010, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x571c0f1b}], 0x1, 0x0, 0x0) 312.510463ms ago: executing program 1 (id=3696): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x80, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f00000000c0)={@empty, @broadcast, @rand_addr=0x64010100}, 0xc) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) unshare(0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r4, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000280), r4, r0}}, 0x18) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3}, 0x20) r7 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e24, 0x0, @loopback, 0x6}, {0xa, 0x4e22, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0xffffffffffffffff, {[0x8, 0x40, 0x4, 0x7, 0x91ae, 0x4, 0x7, 0x8fb3]}}, 0x5c) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r8 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aef", 0x10}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0xa, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x80000}, @struct={0x2, 0x6, 0x0, 0x4, 0x1, 0x5, [{0x9, 0x0, 0x200}, {0x5, 0x4, 0x100}, {0xd, 0x2, 0x1}, {0xffffffff, 0x2, 0x7}, {0xf, 0x0, 0x4}, {0x9, 0x0, 0xff}]}]}, {0x0, [0x61, 0x51, 0x5f, 0x2e, 0x0, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x82, 0x0, 0x1, 0x5}, 0x28) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00007510d91d00170a01080000000000000000020000080900020073797a3200000000090001007379"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 257.455344ms ago: executing program 5 (id=3697): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000980)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0xc8141, 0x8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$nvram(0xffffffffffffff9c, 0x0, 0xa200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001a14010023bd7000fbdbdf250800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettfilter={0x2c, 0x2e, 0x100, 0x1070bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3, 0xc}, {0xffff, 0x7}, {0xf, 0xe}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x304, 0x38}, '\x00', "0000000000e3c100", '\x00', "00000000000000fd"}, 0x28) 247.354995ms ago: executing program 1 (id=3698): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8814) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) socket(0x10, 0x803, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1202, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee01) capset(&(0x7f0000000000)={0x19980330}, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty, 0x100}, 0x1, {[0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3]}}, 0x5c) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000900}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0), 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) socket$unix(0x1, 0x1, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000140), 0x304c000, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x11c, 0x0, &(0x7f0000000180)="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", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 173.726996ms ago: executing program 1 (id=3699): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@empty, @multicast2}, &(0x7f0000000080)=0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x200008c0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5b, 0x0, 0x0}, &(0x7f00000000c0)=0x40) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000035c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8884d3, 0x0, 0xf2, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) kexec_load(0xfffbfffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xffff7ffc, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 137.265567ms ago: executing program 5 (id=3700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f67003000028006000c400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x3, 0xda, &(0x7f00000004c0)=""/218}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x10}, {0xd}, {0x2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040005}, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x1c001, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000980), 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34a, 0xe633}, 0x0, 0x40080000001, 0x5, 0x7, 0x1ff, 0x0, 0x0, 0x0, 0x7ffffdfe}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000180)={0x0, 0x4, 'E]$', 0x7f, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 66.553729ms ago: executing program 5 (id=3701): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b16"], 0xa8}, 0x1, 0x0, 0x0, 0x50}, 0x4040080) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 31.699779ms ago: executing program 5 (id=3702): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002061f00000000000000000007000000140007800800114000000000080012400000f7ff0500010006000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x20004000) 3.03783ms ago: executing program 5 (id=3703): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001d40)=@raw={'raw\x00', 0x64, 0x3, 0x310, 0x0, 0xffffffad, 0x190, 0x0, 0x190, 0x278, 0x268, 0x268, 0x278, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x178, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x7fffffff, 0x400, 'syz0\x00', {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x5a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004c000020000006907805000000ac1414aa00014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec540000907800001d12d285b6853bc4dc54c6910c1d66f8841a1d12adf059fd789278e2fb03dc15d356998a"], 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000bc0)="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", 0x7f0, 0x81, 0x0, 0x0) writev(r0, &(0x7f0000000ac0)=[{&(0x7f00000013c0)="390000001300034700bb65e1c3e4ffff72f2d791ea3d576c5a4e01000019116d57fc9e98e030aeb387b28f2da34002df8a7f68134f73528ee398ce1764351cf8e91ad23382873e13214df5c5f1c2a277282a2dbb70a8ee69877e65cb1694e66635c7f913626d6ddc652c00ab00365c8cac630197e588a05cf23f5b64d8d508ec3871db1c1a9af81607b19b61dc690f650b4053c4d4315be8e3f0b6139eb86f531c7b5253e0106474f73ef384a3fa12cf06b323aa6911f67175e33cf1ef8e1dc123ea2f0edfe877d9892f61716b871c85085c1ba1a739d6c28c872f2c4e49e387b4f6c3a1f5044730f41006d73743b1eae304a3b22974048e", 0xf8}, {&(0x7f0000000b00)="c49f7cbd621c7fc1b60141cccee7f9f4affe2bd2b789e4fc8e24f090bcba5a0aff84f05f1f7dd9c95b70f90a467473272e7f2006f91b1491adfee115a9d147dbae38089fb37ab609bf8a2f3c6d48d531e14c9f9f676038cff967db4774193a30aff53b5deb2e0e1c562482a31b53eec62b1f00fde6dbd4be2b6f6156ba53227dc80a1af10c03afc83e0149b68bbf993b8ee8572903e3f0dcefde51bc8f3784a7e4dd508d6ad98e4e3e7f81ec", 0xac}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e4f4f145", @ANYRES16=r3, @ANYBLOB="0d03ffffffffffdbdf2513000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 0s ago: executing program 8 (id=3667): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x5, 0x1, 0x8, 0x0, 0x9, 0x7f, 0x39fb, 0xfffffffa}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) kernel console output (not intermixed with test programs): 6514] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.529713][T13464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.621002][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 318.762914][T13464] veth0_vlan: entered promiscuous mode [ 318.782281][T13464] veth1_vlan: entered promiscuous mode [ 318.831466][T13464] veth0_macvtap: entered promiscuous mode [ 318.852268][T13464] veth1_macvtap: entered promiscuous mode [ 318.883035][T13464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.906988][T13464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.922380][ T6506] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.931606][ T6506] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.962123][ T6506] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.986998][ T6506] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.041783][T13650] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 319.113888][T13671] SET target dimension over the limit! [ 319.209222][T13577] tipc: Enabling of bearer rejected, failed to enable media [ 319.275474][T13692] loop6: detected capacity change from 0 to 1024 [ 319.311451][T13692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.341878][T13693] loop2: detected capacity change from 0 to 1024 [ 319.378370][T13692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.386859][T13692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.396394][T13693] EXT4-fs: Ignoring removed bh option [ 319.406454][T13680] FAULT_INJECTION: forcing a failure. [ 319.406454][T13680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.410899][T13693] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 319.419647][T13680] CPU: 0 UID: 0 PID: 13680 Comm: syz.1.2889 Not tainted syzkaller #0 PREEMPT(lazy) [ 319.419679][T13680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 319.419692][T13680] Call Trace: [ 319.419700][T13680] [ 319.419710][T13680] __dump_stack+0x1d/0x30 [ 319.419738][T13680] dump_stack_lvl+0x95/0xd0 [ 319.419761][T13680] dump_stack+0x15/0x1b [ 319.419782][T13680] should_fail_ex+0x25e/0x270 [ 319.419893][T13680] should_fail+0xb/0x20 [ 319.419921][T13680] should_fail_usercopy+0x1a/0x20 [ 319.420031][T13680] _copy_from_user+0x1c/0xb0 [ 319.420049][T13680] ___sys_sendmsg+0xc1/0x1e0 [ 319.420094][T13680] __x64_sys_sendmsg+0xd4/0x160 [ 319.420175][T13680] x64_sys_call+0x194c/0x3020 [ 319.420260][T13680] do_syscall_64+0x136/0x3c0 [ 319.420283][T13680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.420380][T13680] RIP: 0033:0x7f1b9884de99 [ 319.420397][T13680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.420418][T13680] RSP: 002b:00007f1b972a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.420440][T13680] RAX: ffffffffffffffda RBX: 00007f1b98ad5fa0 RCX: 00007f1b9884de99 [ 319.420456][T13680] RDX: 0000000000004800 RSI: 0000200000000480 RDI: 0000000000000006 [ 319.420472][T13680] RBP: 00007f1b972a7090 R08: 0000000000000000 R09: 0000000000000000 [ 319.420498][T13680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.420511][T13680] R13: 00007f1b98ad6038 R14: 00007f1b98ad5fa0 R15: 00007ffcd2e41bc8 [ 319.420553][T13680] [ 319.426412][T13706] loop5: detected capacity change from 0 to 128 [ 319.501769][T13692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.537725][T13706] FAT-fs (loop5): bogus number of reserved sectors [ 319.555212][T13692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.562887][T13706] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 319.579198][T13692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.590118][T13706] FAT-fs (loop5): Can't find a valid FAT filesystem [ 319.606214][T13693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.630668][T13692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.382034][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.404959][T13721] loop2: detected capacity change from 0 to 1024 [ 320.415413][T13721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.428096][T13721] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.441263][ T28] kauditd_printk_skb: 160 callbacks suppressed [ 320.441277][ T28] audit: type=1400 audit(3931758297.835:2779): avc: denied { write } for pid=13720 comm="syz.2.2896" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.441621][T13721] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2896: bg 0: block 112: padding at end of block bitmap is not set [ 320.496114][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 320.514509][T13725] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2897'. [ 320.547342][T13727] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2898'. [ 320.692717][T13464] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.920060][T13744] loop5: detected capacity change from 0 to 1764 [ 320.926791][T13744] iso9660: Bad value for 'uid' [ 320.931548][T13744] iso9660: Bad value for 'uid' [ 321.459185][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2905'. [ 321.469608][ T28] audit: type=1400 audit(3931758298.865:2780): avc: denied { map } for pid=13748 comm="syz.2.2906" path="socket:[40456]" dev="sockfs" ino=40456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 321.567776][T13756] tipc: Started in network mode [ 321.579654][T13756] tipc: Node identity , cluster identity 4711 [ 321.593341][T13756] tipc: Failed to obtain node identity [ 321.608132][T13756] tipc: Enabling of bearer rejected, failed to enable media [ 321.858034][T13764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.889978][T13764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.917845][T13764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.945754][T13764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.971612][T13764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.007578][T13764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.049317][T13771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2914'. [ 322.402525][T13789] SET target dimension over the limit! [ 322.505926][T13783] lo speed is unknown, defaulting to 1000 [ 322.713090][T13808] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2925'. [ 324.106970][T13783] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.114157][T13783] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.121303][T13783] bridge_slave_0: entered allmulticast mode [ 324.131501][T13783] bridge_slave_0: entered promiscuous mode [ 324.139034][T13783] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.180034][T13783] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.187207][T13783] bridge_slave_1: entered allmulticast mode [ 324.193704][T13783] bridge_slave_1: entered promiscuous mode [ 324.262868][T13826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2929'. [ 324.282674][T13783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.306312][T13826] netlink: 'syz.5.2929': attribute type 21 has an invalid length. [ 324.316228][T13783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.371678][T13783] team0: Port device team_slave_0 added [ 324.398314][T13783] team0: Port device team_slave_1 added [ 324.458672][T13783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.489728][T13783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.583612][T13783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.608395][T13830] loop6: detected capacity change from 0 to 256 [ 324.648003][T13830] msdos filesystem being mounted at /8/file0 supports timestamps until 2107-12-31 (0x1039099de) [ 324.662296][T13783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.679526][T13783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.720243][T13783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.741033][T13830] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2931'. [ 324.751569][T13830] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.2931'. [ 324.766024][T13783] hsr_slave_0: entered promiscuous mode [ 324.772093][T13783] hsr_slave_1: entered promiscuous mode [ 324.778428][T13783] debugfs: 'hsr0' already exists in 'hsr' [ 324.784311][T13783] Cannot create hsr debugfs directory [ 325.046772][T13842] netlink: 'syz.1.2933': attribute type 30 has an invalid length. [ 325.062320][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2936'. [ 325.072414][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2936'. [ 325.250883][T13856] loop5: detected capacity change from 0 to 512 [ 325.257938][T13856] EXT4-fs: Ignoring removed oldalloc option [ 325.366811][T13856] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 325.388015][T13856] EXT4-fs (loop5): orphan cleanup on readonly fs [ 325.399728][T13783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.412467][T13856] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 325.414030][T13783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.435650][T13856] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 325.443529][T13783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 325.448471][ T28] audit: type=1400 audit(3931758302.842:2781): avc: denied { write } for pid=13859 comm="syz.6.2939" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 325.473979][T13856] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.2938: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 325.493634][T13783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.501244][T13783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 325.503853][T13856] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 325.508446][T13856] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2938: couldn't read orphan inode 13 (err -117) [ 325.511064][T13783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.517604][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 325.536255][T13783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 325.536419][ C1] EXT4-fs (loop5): last error at time 3931758302: ext4_ext_check_inode:521: inode 13 [ 325.561034][T13856] loop5: lost filesystem error report for type 5 error -117 [ 325.561580][T13856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.562564][T13783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.622421][T13856] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2938: deleted inode referenced: 12 [ 325.689687][T13869] loop6: detected capacity change from 0 to 164 [ 325.718378][T13783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.731201][T13869] rock: directory entry would overflow storage [ 325.741287][T13783] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.749526][T13869] rock: sig=0x5252, size=5, remaining=3 [ 325.758831][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2938'. [ 325.759646][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.774949][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.792553][T13869] netlink: 'syz.6.2941': attribute type 30 has an invalid length. [ 325.798543][T13783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.811048][T13783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.831035][T13856] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 325.844860][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.851933][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.870239][T13856] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 325.879700][T13856] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c09c, mo2=0002] [ 325.999057][T13856] System zones: 0-2, 18-18, 34-34 [ 326.004420][T13856] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 326.018049][ T28] audit: type=1400 audit(3931758303.402:2782): avc: denied { append } for pid=13891 comm="syz.6.2944" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 326.043734][T13783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.152825][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.196029][T13783] veth0_vlan: entered promiscuous mode [ 326.220888][T13783] veth1_vlan: entered promiscuous mode [ 326.253877][T13911] SET target dimension over the limit! [ 326.268215][T13783] veth0_macvtap: entered promiscuous mode [ 326.309114][T13783] veth1_macvtap: entered promiscuous mode [ 326.333831][T13783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.368178][T13783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.465964][ T360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.495099][ T360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.512141][ T360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.538739][ T360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.588777][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'. [ 326.646469][T13928] FAULT_INJECTION: forcing a failure. [ 326.646469][T13928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.683277][T13928] CPU: 0 UID: 0 PID: 13928 Comm: syz.1.2954 Not tainted syzkaller #0 PREEMPT(lazy) [ 326.683306][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 326.683319][T13928] Call Trace: [ 326.683324][T13928] [ 326.683395][T13928] __dump_stack+0x1d/0x30 [ 326.683421][T13928] dump_stack_lvl+0x95/0xd0 [ 326.683516][T13928] dump_stack+0x15/0x1b [ 326.683537][T13928] should_fail_ex+0x25e/0x270 [ 326.683568][T13928] should_fail+0xb/0x20 [ 326.683639][T13928] should_fail_usercopy+0x1a/0x20 [ 326.683672][T13928] strncpy_from_user+0x27/0x250 [ 326.683699][T13928] do_getname+0x59/0x1c0 [ 326.683726][T13928] getname_flags+0x1d/0x30 [ 326.683828][T13928] __x64_sys_execve+0x42/0x80 [ 326.683860][T13928] x64_sys_call+0x2752/0x3020 [ 326.683914][T13928] do_syscall_64+0x136/0x3c0 [ 326.683937][T13928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.683959][T13928] RIP: 0033:0x7f1b9884de99 [ 326.683975][T13928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.684046][T13928] RSP: 002b:00007f1b972a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 326.684066][T13928] RAX: ffffffffffffffda RBX: 00007f1b98ad5fa0 RCX: 00007f1b9884de99 [ 326.684082][T13928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 326.684138][T13928] RBP: 00007f1b972a7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.684218][T13928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.684230][T13928] R13: 00007f1b98ad6038 R14: 00007f1b98ad5fa0 R15: 00007ffcd2e41bc8 [ 326.684250][T13928] [ 326.989595][T13942] loop2: detected capacity change from 0 to 128 [ 326.996673][T13942] FAT-fs (loop2): bogus number of reserved sectors [ 327.003198][T13942] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 327.012486][T13942] FAT-fs (loop2): Can't find a valid FAT filesystem [ 327.039184][T13944] loop2: detected capacity change from 0 to 256 [ 327.048845][T13944] msdos filesystem being mounted at /4/file0 supports timestamps until 2107-12-31 (0x1039099de) [ 327.580907][T13959] SET target dimension over the limit! [ 327.611319][T13960] loop2: detected capacity change from 0 to 512 [ 327.619480][T13960] EXT4-fs: Ignoring removed oldalloc option [ 327.641180][T13960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 327.653892][T13960] EXT4-fs (loop2): orphan cleanup on readonly fs [ 327.676835][T13960] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 327.679834][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2970'. [ 327.705881][ T28] audit: type=1400 audit(3931758305.092:2783): avc: denied { setopt } for pid=13971 comm="syz.0.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 327.706932][T13960] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 327.734836][T13960] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.2964: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 327.753100][T13960] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 327.753260][T13960] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2964: couldn't read orphan inode 13 (err -117) [ 327.753496][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 327.762869][T13960] loop2: lost filesystem error report for type 5 error -117 [ 327.774303][ C1] EXT4-fs (loop2): last error at time 3931758305: ext4_ext_check_inode:521: inode 13 [ 327.781729][T13960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.788101][ C1] [ 327.828395][T13960] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.2964: deleted inode referenced: 12 [ 327.858259][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2964'. [ 327.876997][T13960] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 327.888010][T13960] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 327.897559][T13960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c09c, mo2=0002] [ 327.926262][T13960] System zones: 0-2, 18-18, 34-34 [ 327.931544][T13960] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 327.959630][T13783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.033123][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2974'. [ 328.042559][T13988] netlink: 'syz.2.2974': attribute type 13 has an invalid length. [ 328.180716][T14012] loop2: detected capacity change from 0 to 256 [ 328.293926][T14019] loop6: detected capacity change from 0 to 164 [ 328.308381][T14019] rock: directory entry would overflow storage [ 328.316965][T14019] rock: sig=0x5252, size=5, remaining=3 [ 328.325428][T14019] netlink: 'syz.6.2983': attribute type 30 has an invalid length. [ 328.466820][T13964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.516111][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2987'. [ 328.525662][T14029] netlink: 'syz.5.2987': attribute type 13 has an invalid length. [ 328.698122][T14033] loop6: detected capacity change from 0 to 512 [ 328.710888][T14033] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.718453][T14033] EXT4-fs: inline encryption not supported [ 328.737135][T14033] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 328.979663][T14041] FAULT_INJECTION: forcing a failure. [ 328.979663][T14041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.067074][T14041] CPU: 1 UID: 0 PID: 14041 Comm: syz.1.2991 Not tainted syzkaller #0 PREEMPT(lazy) [ 329.067105][T14041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 329.067119][T14041] Call Trace: [ 329.067126][T14041] [ 329.067198][T14041] __dump_stack+0x1d/0x30 [ 329.067221][T14041] dump_stack_lvl+0x95/0xd0 [ 329.067239][T14041] dump_stack+0x15/0x1b [ 329.067258][T14041] should_fail_ex+0x25e/0x270 [ 329.067291][T14041] should_fail+0xb/0x20 [ 329.067324][T14041] should_fail_usercopy+0x1a/0x20 [ 329.067366][T14041] _copy_from_user+0x1c/0xb0 [ 329.067388][T14041] ___sys_sendmsg+0xc1/0x1e0 [ 329.067436][T14041] __x64_sys_sendmsg+0xd4/0x160 [ 329.067508][T14041] x64_sys_call+0x194c/0x3020 [ 329.067535][T14041] do_syscall_64+0x136/0x3c0 [ 329.067559][T14041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.067582][T14041] RIP: 0033:0x7f1b9884de99 [ 329.067670][T14041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.067692][T14041] RSP: 002b:00007f1b972a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.067713][T14041] RAX: ffffffffffffffda RBX: 00007f1b98ad5fa0 RCX: 00007f1b9884de99 [ 329.067789][T14041] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003 [ 329.067801][T14041] RBP: 00007f1b972a7090 R08: 0000000000000000 R09: 0000000000000000 [ 329.067813][T14041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.067826][T14041] R13: 00007f1b98ad6038 R14: 00007f1b98ad5fa0 R15: 00007ffcd2e41bc8 [ 329.067847][T14041] [ 329.258113][T14047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2994'. [ 329.376795][T14051] loop5: detected capacity change from 0 to 128 [ 329.410889][T14051] FAT-fs (loop5): bogus number of reserved sectors [ 329.444119][T14051] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 329.478189][T14053] SET target dimension over the limit! [ 329.484060][T14051] FAT-fs (loop5): Can't find a valid FAT filesystem [ 329.753971][ T28] audit: type=1400 audit(3931758306.899:2784): avc: denied { ioctl } for pid=14021 comm="syz.6.2984" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 329.899397][ T28] audit: type=1400 audit(3931758306.899:2785): avc: denied { lock } for pid=14021 comm="syz.6.2984" path="socket:[42141]" dev="sockfs" ino=42141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 330.388722][T14033] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.396013][T14033] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.444980][T14033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.455094][T14033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.554495][ T6514] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.582146][ T6514] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.706849][T14078] geneve2: entered allmulticast mode [ 330.723590][ T6514] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.736664][ T6514] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.885199][T14084] geneve2: entered allmulticast mode [ 330.944834][ T28] audit: type=1400 audit(3931758308.329:2786): avc: denied { write } for pid=14067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.990629][ T28] audit: type=1400 audit(3931758308.379:2787): avc: denied { write } for pid=14094 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.082014][ T28] audit: type=1400 audit(3931758308.469:2788): avc: denied { write } for pid=14097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.118732][ T28] audit: type=1400 audit(3931758308.489:2789): avc: denied { write } for pid=14112 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.221848][ T28] audit: type=1400 audit(3931758308.609:2790): avc: denied { write } for pid=14116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.277964][ T28] audit: type=1400 audit(3931758308.669:2791): avc: denied { write } for pid=14127 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.398156][ T28] audit: type=1400 audit(3931758308.789:2792): avc: denied { setopt } for pid=14139 comm="syz.1.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 331.466580][ T28] audit: type=1400 audit(3931758308.809:2793): avc: denied { create } for pid=14139 comm="syz.1.3014" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 331.506545][T14145] FAULT_INJECTION: forcing a failure. [ 331.506545][T14145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.529296][T14148] loop5: detected capacity change from 0 to 256 [ 331.530214][T14150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3018'. [ 331.555309][T14145] CPU: 1 UID: 0 PID: 14145 Comm: syz.6.3015 Not tainted syzkaller #0 PREEMPT(lazy) [ 331.555335][T14145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 331.555410][T14145] Call Trace: [ 331.555490][T14145] [ 331.555499][T14145] __dump_stack+0x1d/0x30 [ 331.555524][T14145] dump_stack_lvl+0x95/0xd0 [ 331.555545][T14145] dump_stack+0x15/0x1b [ 331.555567][T14145] should_fail_ex+0x25e/0x270 [ 331.555634][T14145] should_fail+0xb/0x20 [ 331.555657][T14145] should_fail_usercopy+0x1a/0x20 [ 331.555727][T14145] _copy_to_user+0x20/0xa0 [ 331.555746][T14145] simple_read_from_buffer+0xb5/0x130 [ 331.555769][T14145] proc_fail_nth_read+0x10e/0x150 [ 331.555791][T14145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.555811][T14145] vfs_read+0x18e/0x7c0 [ 331.555827][T14145] ? __rcu_read_unlock+0x4e/0x70 [ 331.555852][T14145] ? __fget_files+0x184/0x1c0 [ 331.555938][T14145] ? mutex_lock+0x57/0x90 [ 331.555968][T14145] ksys_read+0xdc/0x1a0 [ 331.555991][T14145] __x64_sys_read+0x40/0x50 [ 331.556089][T14145] x64_sys_call+0x2886/0x3020 [ 331.556194][T14145] do_syscall_64+0x136/0x3c0 [ 331.556261][T14145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.556286][T14145] RIP: 0033:0x7f73dee4e6ce [ 331.556304][T14145] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.556326][T14145] RSP: 002b:00007f73dd8e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.556349][T14145] RAX: ffffffffffffffda RBX: 00007f73dd8e76c0 RCX: 00007f73dee4e6ce [ 331.556374][T14145] RDX: 000000000000000f RSI: 00007f73dd8e70a0 RDI: 0000000000000004 [ 331.556388][T14145] RBP: 00007f73dd8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 331.556441][T14145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.556454][T14145] R13: 00007f73df116038 R14: 00007f73df115fa0 R15: 00007ffd6f8d18f8 [ 331.556524][T14145] [ 331.562918][ T28] audit: type=1400 audit(3931758308.949:2794): avc: denied { write } for pid=14134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.642242][T14154] netlink: 'syz.1.3017': attribute type 30 has an invalid length. [ 331.689580][ T28] audit: type=1400 audit(3931758309.059:2795): avc: denied { write } for pid=14159 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.732765][T14148] msdos filesystem being mounted at /366/file0 supports timestamps until 2107-12-31 (0x1039099de) [ 331.742553][T14163] Cannot find map_set index 0 as target [ 331.923247][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3022'. [ 331.991908][T14171] loop5: detected capacity change from 0 to 1024 [ 332.003710][T14174] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3025'. [ 332.172062][T14171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.254150][T14171] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.266692][T14171] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3024: bg 0: block 112: padding at end of block bitmap is not set [ 332.337141][T14189] loop2: detected capacity change from 0 to 1024 [ 332.361418][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 332.416638][T14189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.437567][T14189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.452083][T14189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.468479][T14189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.488786][T14189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.520228][T14189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.528705][T14189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.646835][T14202] SET target dimension over the limit! [ 332.924625][T14219] loop6: detected capacity change from 0 to 1024 [ 332.946565][T14219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.960530][T14219] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.976196][T14219] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3042: bg 0: block 112: padding at end of block bitmap is not set [ 333.039343][T14226] loop5: detected capacity change from 0 to 164 [ 333.042425][T13464] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 333.094079][T14226] rock: directory entry would overflow storage [ 333.122542][T14226] rock: sig=0x5252, size=5, remaining=3 [ 333.132470][T13783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.146151][T14235] loop6: detected capacity change from 0 to 256 [ 333.183027][T14241] loop2: detected capacity change from 0 to 128 [ 333.184432][T14229] netlink: 'syz.0.3045': attribute type 30 has an invalid length. [ 333.198511][T14235] msdos filesystem being mounted at /34/file0 supports timestamps until 2107-12-31 (0x1039099de) [ 333.198801][T14241] FAT-fs (loop2): bogus number of reserved sectors [ 333.229909][T14226] netlink: 'syz.5.3044': attribute type 30 has an invalid length. [ 333.250691][T14241] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 333.273108][T14241] FAT-fs (loop2): Can't find a valid FAT filesystem [ 333.531779][T14267] loop6: detected capacity change from 0 to 1024 [ 333.532243][T14269] loop2: detected capacity change from 0 to 256 [ 333.546693][T14269] vfat filesystem being mounted at /22/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 333.565112][T14267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.578815][T14269] FAULT_INJECTION: forcing a failure. [ 333.578815][T14269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.587645][T14275] SET target dimension over the limit! [ 333.593552][T14267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.602731][T14269] CPU: 0 UID: 0 PID: 14269 Comm: syz.2.3060 Not tainted syzkaller #0 PREEMPT(lazy) [ 333.602761][T14269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 333.602840][T14269] Call Trace: [ 333.602847][T14269] [ 333.602855][T14269] __dump_stack+0x1d/0x30 [ 333.602880][T14269] dump_stack_lvl+0x95/0xd0 [ 333.602902][T14269] dump_stack+0x15/0x1b [ 333.602922][T14269] should_fail_ex+0x25e/0x270 [ 333.603007][T14269] should_fail+0xb/0x20 [ 333.603078][T14269] should_fail_usercopy+0x1a/0x20 [ 333.603160][T14269] _copy_from_user+0x1c/0xb0 [ 333.603180][T14269] ___sys_sendmsg+0xc1/0x1e0 [ 333.603222][T14269] __x64_sys_sendmsg+0xd4/0x160 [ 333.603331][T14269] x64_sys_call+0x194c/0x3020 [ 333.603356][T14269] do_syscall_64+0x136/0x3c0 [ 333.603377][T14269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.603416][T14269] RIP: 0033:0x7f09c1b1de99 [ 333.603434][T14269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.603507][T14269] RSP: 002b:00007f09c0577028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.603529][T14269] RAX: ffffffffffffffda RBX: 00007f09c1da5fa0 RCX: 00007f09c1b1de99 [ 333.603588][T14269] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 333.603620][T14269] RBP: 00007f09c0577090 R08: 0000000000000000 R09: 0000000000000000 [ 333.603634][T14269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.603648][T14269] R13: 00007f09c1da6038 R14: 00007f09c1da5fa0 R15: 00007ffe4787e288 [ 333.603668][T14269] [ 333.744366][T14276] loop5: detected capacity change from 0 to 256 [ 333.754308][T14267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.760889][T14276] vfat: Unknown parameter '00000000000000000000003' [ 333.795746][T14267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.805190][T14267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.828582][T14267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.845641][T14267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.895363][T14282] msdos filesystem being mounted at /24/file0 supports timestamps until 2107-12-31 (0x1039099de) [ 334.267067][T14315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.276884][T14315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.379795][T13464] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.431758][T14335] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3088'. [ 335.030050][T14362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.050912][T14362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.064033][T14362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.094852][T14362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.120178][T14362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.146179][T14362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.878749][T14386] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 335.890892][T14386] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 336.886887][T14415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.890272][T14417] set_capacity_and_notify: 1 callbacks suppressed [ 336.890290][T14417] loop6: detected capacity change from 0 to 512 [ 336.904576][T14415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.928962][T14417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 336.943117][T14417] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.949580][T14415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.963148][T14415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.975154][T14415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.984678][T14415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.997208][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 336.997229][ T28] audit: type=1400 audit(3931758314.389:2802): avc: denied { write } for pid=14416 comm="syz.6.3118" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.160829][ T28] audit: type=1400 audit(3931758314.439:2803): avc: denied { write } for pid=14416 comm="syz.6.3118" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.183980][ T28] audit: type=1400 audit(3931758314.439:2804): avc: denied { write } for pid=14416 comm="syz.6.3118" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.233557][ T28] audit: type=1400 audit(3931758314.519:2805): avc: denied { create } for pid=14416 comm="syz.6.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 337.260565][T14426] loop5: detected capacity change from 0 to 512 [ 337.288212][T13464] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 337.326397][T14428] FAULT_INJECTION: forcing a failure. [ 337.326397][T14428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.340148][T14426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.369004][T14428] CPU: 0 UID: 0 PID: 14428 Comm: syz.2.3120 Not tainted syzkaller #0 PREEMPT(lazy) [ 337.369102][T14428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 337.369117][T14428] Call Trace: [ 337.369157][T14428] [ 337.369165][T14428] __dump_stack+0x1d/0x30 [ 337.369193][T14428] dump_stack_lvl+0x95/0xd0 [ 337.369246][T14428] dump_stack+0x15/0x1b [ 337.369266][T14428] should_fail_ex+0x25e/0x270 [ 337.369295][T14428] should_fail+0xb/0x20 [ 337.369320][T14428] should_fail_usercopy+0x1a/0x20 [ 337.369485][T14428] _copy_from_user+0x1c/0xb0 [ 337.369511][T14428] __sys_bpf+0x1e2/0xc30 [ 337.369581][T14428] ? blkcg_maybe_throttle_current+0x30/0x810 [ 337.369625][T14428] __x64_sys_bpf+0x69/0x80 [ 337.369656][T14428] x64_sys_call+0x10cb/0x3020 [ 337.369751][T14428] do_syscall_64+0x136/0x3c0 [ 337.369779][T14428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.369871][T14428] RIP: 0033:0x7f09c1b1de99 [ 337.369970][T14428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.369990][T14428] RSP: 002b:00007f09c0577028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 337.370010][T14428] RAX: ffffffffffffffda RBX: 00007f09c1da5fa0 RCX: 00007f09c1b1de99 [ 337.370025][T14428] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 337.370038][T14428] RBP: 00007f09c0577090 R08: 0000000000000000 R09: 0000000000000000 [ 337.370053][T14428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.370081][T14428] R13: 00007f09c1da6038 R14: 00007f09c1da5fa0 R15: 00007ffe4787e288 [ 337.370115][T14428] [ 337.373282][T14426] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.551863][T14438] loop6: detected capacity change from 0 to 164 [ 337.612738][T14426] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.3121'. [ 337.636423][T14438] rock: directory entry would overflow storage [ 337.649401][T14438] rock: sig=0x5252, size=5, remaining=3 [ 337.669195][ T28] audit: type=1400 audit(3931758315.059:2806): avc: denied { write } for pid=14425 comm="syz.5.3121" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.771549][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.823177][T14453] loop5: detected capacity change from 0 to 512 [ 337.882442][T14453] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 337.998039][T14468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22032 sclass=netlink_route_socket pid=14468 comm=syz.0.3136 [ 338.057552][ T28] audit: type=1400 audit(3931758315.449:2807): avc: denied { write } for pid=14467 comm="syz.0.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 338.111716][T14453] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 338.154710][T14453] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3131: bg 0: block 248: padding at end of block bitmap is not set [ 338.183002][T14453] loop5: lost filesystem error report for type 5 error -117 [ 338.260064][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 338.273831][ C0] EXT4-fs (loop5): last error at time 3931758315: ext4_validate_block_bitmap:441 [ 338.306794][T14453] Quota error (device loop5): write_blk: dquota write failed [ 338.314496][T14453] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 338.329893][T14453] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3131: Failed to acquire dquot type 1 [ 338.336206][ T28] audit: type=1400 audit(3931758315.729:2808): avc: denied { create } for pid=14439 comm="syz.2.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 338.348959][T14453] loop5: lost filesystem error report for type 5 error -28 [ 338.364631][T14453] EXT4-fs (loop5): 1 truncate cleaned up [ 338.387376][T14453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 338.913677][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3138'. [ 338.944181][T14481] loop6: detected capacity change from 0 to 512 [ 339.139272][T14453] EXT4-fs (loop5): shut down requested (1) [ 339.151863][T14481] EXT4-fs (loop6): unsupported inode size: 143 [ 339.158350][T14481] EXT4-fs (loop6): blocksize: 2048 [ 339.166197][ T28] audit: type=1400 audit(3931758316.559:2809): avc: denied { write } for pid=14451 comm="syz.5.3131" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.325561][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 339.373755][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3141'. [ 339.636276][T14495] loop5: detected capacity change from 0 to 1024 [ 339.650263][T14495] EXT4-fs: Ignoring removed oldalloc option [ 339.675507][T14495] EXT4-fs: Ignoring removed bh option [ 339.706206][T14495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 339.734006][T14495] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.760718][T14495] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.3145: lblock 3 mapped to illegal pblock 3 (length 3) [ 339.788075][T14501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.797010][T14501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.809956][T14495] EXT4-fs (loop5): Remounting filesystem read-only [ 339.811864][T14501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.836552][T14503] loop6: detected capacity change from 0 to 512 [ 339.841421][T14501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.844642][T14503] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 339.854440][T14501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.868292][T14503] vfat filesystem being mounted at /50/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 339.871063][T14501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.897781][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 339.947981][T13464] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 339.958268][T13464] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 340.196622][T14508] lo speed is unknown, defaulting to 1000 [ 340.331227][T14508] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.338498][T14508] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.346085][T14508] bridge_slave_0: entered allmulticast mode [ 340.352880][T14508] bridge_slave_0: entered promiscuous mode [ 340.360069][T14508] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.367350][T14508] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.374817][T14508] bridge_slave_1: entered allmulticast mode [ 340.381507][T14508] bridge_slave_1: entered promiscuous mode [ 340.400800][T14508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.411444][T14508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.436427][T14508] team0: Port device team_slave_0 added [ 340.442867][T14508] team0: Port device team_slave_1 added [ 340.458466][T14508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.465539][T14508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.491625][T14508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.503305][T14508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.510372][T14508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.536691][T14508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.567352][T14508] hsr_slave_0: entered promiscuous mode [ 340.573748][T14508] hsr_slave_1: entered promiscuous mode [ 340.579792][T14508] debugfs: 'hsr0' already exists in 'hsr' [ 340.585660][T14508] Cannot create hsr debugfs directory [ 340.673493][T14508] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 340.682712][T14508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.698262][T14508] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 340.707500][T14508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.715745][T14508] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 340.725205][T14508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.733160][T14508] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 340.743228][T14508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.796421][T14508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.826938][T14551] SET target dimension over the limit! [ 340.836546][T14508] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.851033][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.858151][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.874153][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.881242][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.928190][T14508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.063429][T14508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.084275][T14570] FAULT_INJECTION: forcing a failure. [ 341.084275][T14570] name failslab, interval 1, probability 0, space 0, times 0 [ 341.099682][T14570] CPU: 1 UID: 0 PID: 14570 Comm: syz.5.3164 Not tainted syzkaller #0 PREEMPT(lazy) [ 341.099713][T14570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 341.099740][T14570] Call Trace: [ 341.099747][T14570] [ 341.099757][T14570] __dump_stack+0x1d/0x30 [ 341.099778][T14570] dump_stack_lvl+0x95/0xd0 [ 341.099843][T14570] dump_stack+0x15/0x1b [ 341.099911][T14570] should_fail_ex+0x25e/0x270 [ 341.099974][T14570] ? fl_init+0x33/0x130 [ 341.100001][T14570] should_failslab+0x8c/0xb0 [ 341.100026][T14570] __kmalloc_cache_noprof+0x7b/0x3d0 [ 341.100048][T14570] ? fl_init+0x33/0x130 [ 341.100108][T14570] ? __pfx_fl_reoffload+0x10/0x10 [ 341.100133][T14570] fl_init+0x33/0x130 [ 341.100160][T14570] tcf_proto_create+0x130/0x1a0 [ 341.100187][T14570] tc_new_tfilter+0xa77/0x1170 [ 341.100275][T14570] ? _raw_spin_unlock+0x9/0x30 [ 341.100311][T14570] ? __pfx_tc_new_tfilter+0x10/0x10 [ 341.100336][T14570] rtnetlink_rcv_msg+0x64b/0x720 [ 341.100379][T14570] netlink_rcv_skb+0x11e/0x220 [ 341.100398][T14570] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.100421][T14570] rtnetlink_rcv+0x1c/0x30 [ 341.100439][T14570] netlink_unicast+0x5a7/0x680 [ 341.100459][T14570] netlink_sendmsg+0x5be/0x6f0 [ 341.100563][T14570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.100644][T14570] ____sys_sendmsg+0x532/0x580 [ 341.100756][T14570] ___sys_sendmsg+0x195/0x1e0 [ 341.100800][T14570] __x64_sys_sendmsg+0xd4/0x160 [ 341.100955][T14570] x64_sys_call+0x194c/0x3020 [ 341.101038][T14570] do_syscall_64+0x136/0x3c0 [ 341.101062][T14570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.101087][T14570] RIP: 0033:0x7f41e63fde99 [ 341.101105][T14570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.101127][T14570] RSP: 002b:00007f41e4e57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.101218][T14570] RAX: ffffffffffffffda RBX: 00007f41e6685fa0 RCX: 00007f41e63fde99 [ 341.101241][T14570] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 341.101253][T14570] RBP: 00007f41e4e57090 R08: 0000000000000000 R09: 0000000000000000 [ 341.101266][T14570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.101277][T14570] R13: 00007f41e6686038 R14: 00007f41e6685fa0 R15: 00007ffd4d07d248 [ 341.101324][T14570] [ 341.363824][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3166'. [ 341.383839][T14581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.392301][T14581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.401655][T14581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.410702][T14581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.426782][T14581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.437667][T14581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.479297][T14508] veth0_vlan: entered promiscuous mode [ 341.487669][T14508] veth1_vlan: entered promiscuous mode [ 341.508203][T14508] veth0_macvtap: entered promiscuous mode [ 341.516119][T14508] veth1_macvtap: entered promiscuous mode [ 341.557004][T14508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.568628][T14508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.579580][ T6510] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.588328][ T6510] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.597260][ T6510] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.608857][ T6522] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.662299][T14603] loop7: detected capacity change from 0 to 512 [ 341.682039][T14603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.695326][T14603] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.742217][T14601] syzkaller1: entered promiscuous mode [ 341.747915][T14601] syzkaller1: entered allmulticast mode [ 341.829911][T14508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.950089][T14617] loop7: detected capacity change from 0 to 256 [ 342.010380][T14617] msdos filesystem being mounted at /3/file0 supports timestamps until 2107-12-31 (0x1039099de) [ 342.279150][ T28] kauditd_printk_skb: 409 callbacks suppressed [ 342.279164][ T28] audit: type=1400 audit(3931758319.648:3219): avc: denied { read } for pid=14629 comm="syz.0.3182" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 342.308214][ T28] audit: type=1400 audit(3931758319.648:3220): avc: denied { open } for pid=14629 comm="syz.0.3182" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 342.331897][ T28] audit: type=1400 audit(3931758319.698:3221): avc: denied { write } for pid=14629 comm="syz.0.3182" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 342.333214][T14633] netlink: 'syz.0.3182': attribute type 5 has an invalid length. [ 342.380975][T14633] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3182'. [ 342.623187][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3186'. [ 342.640146][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3186'. [ 342.657956][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3186'. [ 342.669986][T14648] FAULT_INJECTION: forcing a failure. [ 342.669986][T14648] name failslab, interval 1, probability 0, space 0, times 0 [ 342.703420][T14648] CPU: 0 UID: 0 PID: 14648 Comm: syz.7.3189 Not tainted syzkaller #0 PREEMPT(lazy) [ 342.703453][T14648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 342.703466][T14648] Call Trace: [ 342.703473][T14648] [ 342.703527][T14648] __dump_stack+0x1d/0x30 [ 342.703553][T14648] dump_stack_lvl+0x95/0xd0 [ 342.703577][T14648] dump_stack+0x15/0x1b [ 342.703599][T14648] should_fail_ex+0x25e/0x270 [ 342.703666][T14648] should_failslab+0x8c/0xb0 [ 342.703690][T14648] __kmalloc_noprof+0xd4/0x4a0 [ 342.703754][T14648] ? udp_init_sock+0xfa/0x1f0 [ 342.703773][T14648] ? udp_init_sock+0xfa/0x1f0 [ 342.703863][T14648] udp_init_sock+0xfa/0x1f0 [ 342.703918][T14648] inet_create+0x720/0x790 [ 342.703945][T14648] __sock_create+0x2e5/0x580 [ 342.703986][T14648] __sys_socket+0xaf/0x180 [ 342.704007][T14648] __x64_sys_socket+0x3f/0x50 [ 342.704029][T14648] x64_sys_call+0x11fc/0x3020 [ 342.704050][T14648] do_syscall_64+0x136/0x3c0 [ 342.704085][T14648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.704111][T14648] RIP: 0033:0x7fcc5b36de99 [ 342.704126][T14648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.704143][T14648] RSP: 002b:00007fcc59dc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 342.704162][T14648] RAX: ffffffffffffffda RBX: 00007fcc5b5f5fa0 RCX: 00007fcc5b36de99 [ 342.704175][T14648] RDX: 0000000000000011 RSI: 0000000000000002 RDI: 0000000000000002 [ 342.704201][T14648] RBP: 00007fcc59dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 342.704213][T14648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.704225][T14648] R13: 00007fcc5b5f6038 R14: 00007fcc5b5f5fa0 R15: 00007fffd5b26f18 [ 342.704243][T14648] [ 342.921642][T14655] SET target dimension over the limit! [ 342.959627][T14662] loop7: detected capacity change from 0 to 256 [ 342.959798][ T28] audit: type=1326 audit(3931758320.353:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.2.3194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 342.998396][T14662] msdos filesystem being mounted at /9/file0 supports timestamps until 2107-12-31 (0x1039099de) [ 343.009219][ T28] audit: type=1326 audit(3931758320.353:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.2.3194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 343.037179][ T28] audit: type=1326 audit(3931758320.353:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.2.3194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 343.041770][T14664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14664 comm=syz.0.3195 [ 343.073754][ T28] audit: type=1326 audit(3931758320.353:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.2.3194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 343.105638][ T28] audit: type=1326 audit(3931758320.353:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.2.3194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 343.156635][ T28] audit: type=1326 audit(3931758320.353:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.2.3194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 343.187869][ T28] audit: type=1326 audit(3931758320.353:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.2.3194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 343.414403][ T3391] Process accounting resumed [ 343.419363][T14669] loop7: detected capacity change from 0 to 128 [ 343.481374][T14669] vfat filesystem being mounted at /10/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 344.198813][T14704] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3209'. [ 344.588970][T14713] loop5: detected capacity change from 0 to 1024 [ 344.628377][T14713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.654140][T14713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.742043][T14713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.765627][T14713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.790095][T14713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.965073][T14726] tmpfs: Bad value for 'mpol' [ 344.975064][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.990574][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.108692][T14742] loop7: detected capacity change from 0 to 512 [ 345.129341][T14742] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 345.137637][T14742] EXT4-fs (loop7): orphan cleanup on readonly fs [ 345.145981][T14742] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.3220: corrupted inode contents [ 345.161351][T14742] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 345.161539][T14742] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #16: comm syz.7.3220: mark_inode_dirty error [ 345.170730][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 345.170749][ C1] EXT4-fs (loop7): initial error at time 3931758322: ext4_do_update_inode:5742: inode 16 [ 345.170794][ C1] EXT4-fs (loop7): last error at time 3931758322: ext4_do_update_inode:5742: inode 16 [ 345.214430][T14742] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 345.214661][T14742] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.3220: corrupted inode contents [ 345.235709][T14742] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 345.235999][T14742] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.3220: mark_inode_dirty error [ 345.256463][T14742] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 345.256707][T14742] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.3220: corrupted inode contents [ 345.277826][T14742] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 345.278070][T14742] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 345.280993][T14749] Cannot find map_set index 0 as target [ 345.287332][T14742] loop7: lost filesystem error report for type 5 error -117 [ 345.301520][T14742] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.3220: corrupted inode contents [ 345.320784][T14742] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 345.321024][T14742] EXT4-fs error (device loop7): ext4_truncate:4691: inode #16: comm syz.7.3220: mark_inode_dirty error [ 345.341351][T14742] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 345.341614][T14742] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 345.359900][T14742] loop7: lost filesystem error report for type 5 error -117 [ 345.360450][T14742] EXT4-fs (loop7): 1 truncate cleaned up [ 345.373823][ T6522] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:16: Failed to release dquot type 1 [ 345.385682][ T6522] loop7: lost filesystem error report for type 5 error -117 [ 345.386561][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.393126][T14742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.470424][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3224'. [ 345.537955][T14508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.549004][T14753] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3224'. [ 345.574139][T14757] xt_hashlimit: size too large, truncated to 1048576 [ 345.614560][T14759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.653167][T14759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.737420][T14766] erspan0: entered promiscuous mode [ 345.755014][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3225'. [ 345.794959][T14770] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3230'. [ 346.144422][T14779] netlink: 'syz.0.3232': attribute type 21 has an invalid length. [ 346.184561][T14781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.194420][T14781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.216743][T14781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.225426][T14781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.440039][T14794] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3237'. [ 346.471244][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3237'. [ 346.562109][T14798] loop5: detected capacity change from 0 to 128 [ 346.618651][T14798] vfat filesystem being mounted at /406/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 348.427053][T14842] loop7: detected capacity change from 0 to 128 [ 348.440757][T14844] bridge_slave_0: left allmulticast mode [ 348.453863][T14844] bridge_slave_0: left promiscuous mode [ 348.461066][T14844] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.478106][T14844] bridge_slave_1: left allmulticast mode [ 348.485234][T14844] bridge_slave_1: left promiscuous mode [ 348.492556][T14844] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.502712][T14844] bond0: (slave bond_slave_0): Releasing backup interface [ 348.513029][T14844] bond0: (slave bond_slave_1): Releasing backup interface [ 348.526865][T14844] team0: Port device team_slave_0 removed [ 348.543333][T14842] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.544044][T14844] team0: Port device team_slave_1 removed [ 348.557416][T14842] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.573277][T14844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.581168][T14844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.596077][T14844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.607013][ T28] kauditd_printk_skb: 125 callbacks suppressed [ 348.607027][ T28] audit: type=1400 audit(3931758326.002:3353): avc: denied { write } for pid=14840 comm="syz.7.3255" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 348.640862][T14844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.655940][T14855] netlink: 'syz.1.3256': attribute type 16 has an invalid length. [ 348.663767][T14855] __nla_validate_parse: 1 callbacks suppressed [ 348.663784][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3256'. [ 348.681407][T14844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.716445][T14854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.739817][T14844] tipc: Enabling of bearer rejected, failed to enable media [ 348.791104][T14854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.946782][T14508] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.959566][T14854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.982527][T14863] loop7: detected capacity change from 0 to 1024 [ 349.381201][T14863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.399668][T14854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.440259][T14863] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.478820][ T28] audit: type=1400 audit(3931758326.872:3354): avc: denied { write } for pid=14862 comm="syz.7.3260" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.516772][T14863] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3260: bg 0: block 112: padding at end of block bitmap is not set [ 349.591886][T14508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 349.619911][ T6514] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.721213][ T6514] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.751623][ T6522] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.759894][ T6522] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.818386][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'. [ 349.867326][T14880] No such timeout policy "syz1" [ 350.496364][T14904] 9pnet_fd: Insufficient options for proto=fd [ 350.648325][T14905] lo speed is unknown, defaulting to 1000 [ 350.738345][T14911] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 350.744982][T14911] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 350.782658][T14911] vhci_hcd vhci_hcd.0: Device attached [ 350.933364][T14912] usbip_core: unknown command [ 350.946100][T14912] vhci_hcd: unknown pdu 813183024 [ 350.955822][T14920] SET target dimension over the limit! [ 350.968447][T14912] usbip_core: unknown command [ 350.988905][ T6514] vhci_hcd vhci_hcd.1: stop threads [ 350.994421][ T6514] vhci_hcd vhci_hcd.1: release socket [ 351.002498][ T6514] vhci_hcd vhci_hcd.1: disconnect device [ 351.033516][ T3391] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 351.132841][T14922] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.140064][T14922] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.201895][T14922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.287350][ T360] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.300165][T14926] hub 8-0:1.0: USB hub found [ 351.305375][T14926] hub 8-0:1.0: 8 ports detected [ 351.337794][ T360] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.347304][ T360] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.356434][ T360] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.468919][ T28] audit: type=1400 audit(3931758328.857:3355): avc: denied { create } for pid=14931 comm="syz.7.3284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 351.509346][T14934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3285'. [ 351.549024][ T28] audit: type=1400 audit(3931758328.937:3356): avc: denied { read } for pid=14936 comm="syz.0.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 352.137109][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3290'. [ 352.193299][T14910] syz.1.3277 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 352.204268][T14910] CPU: 1 UID: 0 PID: 14910 Comm: syz.1.3277 Not tainted syzkaller #0 PREEMPT(lazy) [ 352.204298][T14910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 352.204313][T14910] Call Trace: [ 352.204321][T14910] [ 352.204329][T14910] __dump_stack+0x1d/0x30 [ 352.204353][T14910] dump_stack_lvl+0x95/0xd0 [ 352.204439][T14910] dump_stack+0x15/0x1b [ 352.204460][T14910] dump_header+0x80/0x240 [ 352.204497][T14910] oom_kill_process+0x295/0x350 [ 352.204527][T14910] out_of_memory+0x981/0xbc0 [ 352.204615][T14910] try_charge_memcg+0x621/0xa00 [ 352.204695][T14910] charge_memcg+0x6d/0x120 [ 352.204722][T14910] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 352.204806][T14910] swap_cache_alloc_folio+0x47b/0x5e0 [ 352.204839][T14910] swap_cluster_readahead+0x2b1/0x460 [ 352.204928][T14910] swapin_readahead+0xd8/0x8a0 [ 352.204954][T14910] ? _raw_spin_unlock+0x9/0x30 [ 352.204973][T14910] ? swap_put_entries_cluster+0x49c/0x4c0 [ 352.205080][T14910] ? __entry_text_end+0xf208/0x102179 [ 352.205102][T14910] ? __rcu_read_unlock+0x4e/0x70 [ 352.205195][T14910] ? swap_cache_get_folio+0x1f7/0x200 [ 352.205248][T14910] do_swap_page+0x2a2/0x1ec0 [ 352.205274][T14910] ? __css_rstat_updated+0xbb/0x280 [ 352.205298][T14910] ? __rcu_read_lock+0x36/0x50 [ 352.205424][T14910] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 352.205462][T14910] handle_mm_fault+0xb3c/0x2da0 [ 352.205494][T14910] do_user_addr_fault+0x634/0x1060 [ 352.205525][T14910] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 352.205550][T14910] ? trace_page_fault_user+0x1f/0xa0 [ 352.205576][T14910] exc_page_fault+0x62/0xa0 [ 352.205610][T14910] asm_exc_page_fault+0x26/0x30 [ 352.205628][T14910] RIP: 0033:0x7f1b9884e9b6 [ 352.205643][T14910] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 352.205660][T14910] RSP: 002b:00007ffcd2e41d00 EFLAGS: 00010246 [ 352.205676][T14910] RAX: 0000000000055fde RBX: 00007f1b98ad5fa0 RCX: 0000000000055f00 [ 352.205689][T14910] RDX: 00000000000000de RSI: 0000000000000000 RDI: 00000000000003e8 [ 352.205764][T14910] RBP: 00007f1b98ad7da0 R08: 000000000d452e56 R09: 3fffffffffffffff [ 352.205777][T14910] R10: 4000000000000000 R11: 0000000000000246 R12: 00000000000567ba [ 352.205790][T14910] R13: 00007f1b98ad5fac R14: 0000000000055c34 R15: 00007f1b98ad5fa0 [ 352.205806][T14910] [ 352.205817][T14910] memory: usage 307200kB, limit 307200kB, failcnt 761 [ 352.446666][T14910] memory+swap: usage 71592kB, limit 9007199254740988kB, failcnt 0 [ 352.454997][T14910] kmem: usage 59436kB, limit 9007199254740988kB, failcnt 0 [ 352.462351][T14910] Memory cgroup stats for /syz1: [ 352.462573][T14910] cache 4096 [ 352.473471][T14955] loop7: detected capacity change from 0 to 128 [ 352.480608][T14910] rss 4096 [ 352.483761][T14955] FAT-fs (loop7): bogus number of reserved sectors [ 352.490387][T14955] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 352.499968][T14955] FAT-fs (loop7): Can't find a valid FAT filesystem [ 352.512869][T14910] shmem 0 [ 352.519076][T14910] mapped_file 4096 [ 352.535381][T14910] dirty 0 [ 352.545645][T14910] writeback 0 [ 352.603763][T14910] workingset_refault_anon 126 [ 352.608506][T14910] workingset_refault_file 865 [ 352.618108][T14910] swap 12197888 [ 352.626425][T14910] swapcached 12730368 [ 352.639987][T14910] pgpgin 365321 [ 352.653060][T14910] pgpgout 365318 [ 352.671957][T14910] pgfault 407226 [ 352.687101][T14910] pgmajfault 84 [ 352.701090][T14910] inactive_anon 0 [ 352.713614][T14910] active_anon 4096 [ 352.727716][T14910] inactive_file 0 [ 352.762125][T14910] active_file 0 [ 352.765606][T14910] unevictable 0 [ 352.769057][T14910] hierarchical_memory_limit 314572800 [ 352.774423][T14910] hierarchical_memsw_limit 9223372036854771712 [ 352.780564][T14910] total_cache 4096 [ 352.784272][T14910] total_rss 4096 [ 352.787871][T14910] total_shmem 0 [ 352.791349][T14910] total_mapped_file 4096 [ 352.795575][T14910] total_dirty 0 [ 352.799020][T14910] total_writeback 0 [ 352.802833][T14910] total_workingset_refault_anon 126 [ 352.808068][T14910] total_workingset_refault_file 865 [ 352.813316][T14910] total_swap 12197888 [ 352.817299][T14910] total_swapcached 12730368 [ 352.821869][T14910] total_pgpgin 365321 [ 352.825837][T14910] total_pgpgout 365318 [ 352.829935][T14910] total_pgfault 407226 [ 352.834023][T14910] total_pgmajfault 84 [ 352.838025][T14910] total_inactive_anon 0 [ 352.842177][T14910] total_active_anon 4096 [ 352.846406][T14910] total_inactive_file 0 [ 352.850593][T14910] total_active_file 0 [ 352.914960][T14910] total_unevictable 0 [ 352.924009][T14910] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3277,pid=14910,uid=0 [ 352.957741][T14910] Memory cgroup out of memory: Killed process 14910 (syz.1.3277) total-vm:98484kB, anon-rss:1236kB, file-rss:26504kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 353.022659][ T3079] dummy0: entered promiscuous mode [ 353.046492][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3299'. [ 353.170075][T14981] bridge_slave_0: left allmulticast mode [ 353.171341][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3301'. [ 353.214617][T14981] bridge_slave_0: left promiscuous mode [ 353.235046][T14981] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.271416][T14981] bridge_slave_1: left allmulticast mode [ 353.288684][T14981] bridge_slave_1: left promiscuous mode [ 353.308113][T14981] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.359101][T14981] team0: Port device team_slave_0 removed [ 353.400565][T14981] team0: Port device team_slave_1 removed [ 353.425953][T14981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.444947][T14981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.472285][T14981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.485311][T14981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.513176][T14981] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 353.548358][T14994] loop7: detected capacity change from 0 to 128 [ 353.568342][T14994] FAT-fs (loop7): bogus number of reserved sectors [ 353.575770][T14994] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 353.593584][T14994] FAT-fs (loop7): Can't find a valid FAT filesystem [ 353.727859][T15005] loop5: detected capacity change from 0 to 1024 [ 353.759283][T15009] loop7: detected capacity change from 0 to 128 [ 353.771671][T15009] vfat filesystem being mounted at /39/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 353.775105][T15005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.795133][T15005] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.814988][ T28] audit: type=1400 audit(3931758331.207:3357): avc: denied { write } for pid=15004 comm="syz.5.3308" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 353.837196][T15005] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3308: bg 0: block 112: padding at end of block bitmap is not set [ 353.915462][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 353.988626][T15018] loop5: detected capacity change from 0 to 512 [ 354.011207][T15018] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 354.019438][T15018] System zones: 0-2, 18-18, 34-34 [ 354.035272][T15018] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3313: bg 0: block 248: padding at end of block bitmap is not set [ 354.049678][T15018] loop5: lost filesystem error report for type 5 error -117 [ 354.050313][T15018] Quota error (device loop5): write_blk: dquota write failed [ 354.057649][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 354.057673][ C1] EXT4-fs (loop5): last error at time 3931758331: ext4_validate_block_bitmap:441 [ 354.081023][T15018] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 354.091388][T15018] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3313: Failed to acquire dquot type 1 [ 354.102970][T15018] loop5: lost filesystem error report for type 5 error -117 [ 354.111150][T15018] EXT4-fs (loop5): 1 truncate cleaned up [ 354.117421][T15018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.130361][T15018] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.234011][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.558215][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3317'. [ 354.576721][ T28] audit: type=1400 audit(3931758331.957:3358): avc: denied { setopt } for pid=15030 comm="syz.0.3317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 354.599300][T15044] FAULT_INJECTION: forcing a failure. [ 354.599300][T15044] name failslab, interval 1, probability 0, space 0, times 0 [ 354.611933][T15044] CPU: 0 UID: 0 PID: 15044 Comm: syz.0.3321 Not tainted syzkaller #0 PREEMPT(lazy) [ 354.611964][T15044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 354.611977][T15044] Call Trace: [ 354.611984][T15044] [ 354.611992][T15044] __dump_stack+0x1d/0x30 [ 354.612079][T15044] dump_stack_lvl+0x95/0xd0 [ 354.612098][T15044] dump_stack+0x15/0x1b [ 354.612118][T15044] should_fail_ex+0x25e/0x270 [ 354.612145][T15044] ? rtnl_newlink+0x5c/0x1400 [ 354.612185][T15044] should_failslab+0x8c/0xb0 [ 354.612283][T15044] __kmalloc_cache_noprof+0x7b/0x3d0 [ 354.612328][T15044] ? rtnl_newlink+0x5c/0x1400 [ 354.612351][T15044] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.612373][T15044] rtnl_newlink+0x5c/0x1400 [ 354.612399][T15044] ? __siphash_unaligned+0x185/0x2d0 [ 354.612473][T15044] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 354.612500][T15044] ? __rcu_read_unlock+0x4e/0x70 [ 354.612606][T15044] ? avc_has_perm_noaudit+0xa3/0x120 [ 354.612633][T15044] ? cred_has_capability+0x224/0x2a0 [ 354.612737][T15044] ? selinux_capable+0x31/0x40 [ 354.612764][T15044] ? security_capable+0x7b/0x90 [ 354.612792][T15044] ? ns_capable+0x80/0xb0 [ 354.612887][T15044] ? __pfx_rtnl_newlink+0x10/0x10 [ 354.612907][T15044] rtnetlink_rcv_msg+0x64b/0x720 [ 354.612929][T15044] netlink_rcv_skb+0x11e/0x220 [ 354.612952][T15044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 354.613019][T15044] rtnetlink_rcv+0x1c/0x30 [ 354.613041][T15044] netlink_unicast+0x5a7/0x680 [ 354.613154][T15044] netlink_sendmsg+0x5be/0x6f0 [ 354.613183][T15044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.613232][T15044] ____sys_sendmsg+0x532/0x580 [ 354.613326][T15044] ___sys_sendmsg+0x195/0x1e0 [ 354.613368][T15044] __x64_sys_sendmsg+0xd4/0x160 [ 354.613411][T15044] x64_sys_call+0x194c/0x3020 [ 354.613436][T15044] do_syscall_64+0x136/0x3c0 [ 354.613455][T15044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.613475][T15044] RIP: 0033:0x7f7cde07de99 [ 354.613491][T15044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.613539][T15044] RSP: 002b:00007f7cdcad7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.613559][T15044] RAX: ffffffffffffffda RBX: 00007f7cde305fa0 RCX: 00007f7cde07de99 [ 354.613573][T15044] RDX: 0000000000040084 RSI: 0000200000000200 RDI: 0000000000000003 [ 354.613585][T15044] RBP: 00007f7cdcad7090 R08: 0000000000000000 R09: 0000000000000000 [ 354.613599][T15044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.613628][T15044] R13: 00007f7cde306038 R14: 00007f7cde305fa0 R15: 00007ffe7f897c48 [ 354.613648][T15044] [ 355.166552][T15055] FAULT_INJECTION: forcing a failure. [ 355.166552][T15055] name failslab, interval 1, probability 0, space 0, times 0 [ 355.179516][T15055] CPU: 1 UID: 0 PID: 15055 Comm: syz.0.3327 Not tainted syzkaller #0 PREEMPT(lazy) [ 355.179546][T15055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 355.179560][T15055] Call Trace: [ 355.179568][T15055] [ 355.179577][T15055] __dump_stack+0x1d/0x30 [ 355.179640][T15055] dump_stack_lvl+0x95/0xd0 [ 355.179664][T15055] dump_stack+0x15/0x1b [ 355.179685][T15055] should_fail_ex+0x25e/0x270 [ 355.179711][T15055] ? __scm_send+0x3e2/0xb40 [ 355.179749][T15055] should_failslab+0x8c/0xb0 [ 355.179774][T15055] __kmalloc_cache_noprof+0x7b/0x3d0 [ 355.179801][T15055] ? __scm_send+0x3e2/0xb40 [ 355.179882][T15055] __scm_send+0x3e2/0xb40 [ 355.179913][T15055] unix_dgram_sendmsg+0xdd/0x1030 [ 355.179983][T15055] ? selinux_socket_sendmsg+0x2e2/0x410 [ 355.180016][T15055] unix_seqpacket_sendmsg+0xd1/0x110 [ 355.180118][T15055] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 355.180139][T15055] ____sys_sendmsg+0x532/0x580 [ 355.180171][T15055] ___sys_sendmsg+0x195/0x1e0 [ 355.180246][T15055] ? terminate_walk+0x1d5/0x200 [ 355.180289][T15055] __sys_sendmmsg+0x185/0x320 [ 355.180334][T15055] __x64_sys_sendmmsg+0x57/0x70 [ 355.180408][T15055] x64_sys_call+0x27aa/0x3020 [ 355.180429][T15055] do_syscall_64+0x136/0x3c0 [ 355.180453][T15055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.180479][T15055] RIP: 0033:0x7f7cde07de99 [ 355.180495][T15055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.180553][T15055] RSP: 002b:00007f7cdcad7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 355.180578][T15055] RAX: ffffffffffffffda RBX: 00007f7cde305fa0 RCX: 00007f7cde07de99 [ 355.180595][T15055] RDX: 0000000000000001 RSI: 0000200000002400 RDI: 0000000000000004 [ 355.180632][T15055] RBP: 00007f7cdcad7090 R08: 0000000000000000 R09: 0000000000000000 [ 355.180648][T15055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.180661][T15055] R13: 00007f7cde306038 R14: 00007f7cde305fa0 R15: 00007ffe7f897c48 [ 355.180679][T15055] [ 355.480890][T15072] loop7: detected capacity change from 0 to 1024 [ 355.508991][T15072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.555558][T15072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.601052][ T28] audit: type=1400 audit(3931758332.994:3359): avc: denied { write } for pid=15069 comm="syz.7.3330" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.645671][ T28] audit: type=1400 audit(3931758333.034:3360): avc: denied { execute } for pid=15069 comm="syz.7.3330" path="/40/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 355.709062][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'. [ 355.742030][T14508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.746664][T15084] bridge_slave_0: left allmulticast mode [ 355.756755][T15084] bridge_slave_0: left promiscuous mode [ 355.762384][T15084] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.790905][T15084] bridge_slave_1: left allmulticast mode [ 355.796644][T15084] bridge_slave_1: left promiscuous mode [ 355.802366][T15084] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.829337][T15100] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3344'. [ 355.840925][T15084] bond0: (slave bond_slave_0): Releasing backup interface [ 355.884649][T15096] serio: Serial port ptm0 [ 355.897219][T15084] bond0: (slave bond_slave_1): Releasing backup interface [ 355.908674][T15084] team0: Port device team_slave_0 removed [ 355.917327][T15084] team0: Port device team_slave_1 removed [ 355.924219][T15084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.931694][T15084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.940216][T15084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.947836][T15084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.957598][T15084] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.025945][T15096] serio: Serial port ptm0 [ 356.194265][T15123] netlink: 'syz.5.3351': attribute type 46 has an invalid length. [ 356.272318][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3355'. [ 356.373359][T15131] SET target dimension over the limit! [ 356.622624][T15141] bridge_slave_0: left allmulticast mode [ 356.628519][T15141] bridge_slave_0: left promiscuous mode [ 356.635115][T15141] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.645758][T15141] bridge_slave_1: left allmulticast mode [ 356.651474][T15141] bridge_slave_1: left promiscuous mode [ 356.651591][T15141] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.669427][T15141] bond0: (slave bond_slave_0): Releasing backup interface [ 356.681479][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3358'. [ 356.684706][T15146] SET target dimension over the limit! [ 356.697546][T15141] bond0: (slave bond_slave_1): Releasing backup interface [ 356.710897][T15141] team0: Port device team_slave_0 removed [ 356.719595][T15141] team0: Port device team_slave_1 removed [ 356.725851][T15141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.733790][T15141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.788238][T15148] loop7: detected capacity change from 0 to 256 [ 356.809903][T15148] msdos filesystem being mounted at /49/file0 supports timestamps until 2107-12-31 (0x1039099de) [ 357.149793][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3371'. [ 357.250313][T15175] loop5: detected capacity change from 0 to 512 [ 357.263393][T15175] EXT4-fs: Ignoring removed mblk_io_submit option [ 357.270822][T15175] EXT4-fs: inline encryption not supported [ 357.283946][T15175] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 357.896566][ T6522] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.913565][ T6522] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.060189][ T3531] IPVS: starting estimator thread 0... [ 358.163683][T15193] IPVS: using max 2400 ests per chain, 120000 per kthread [ 358.689641][T15197] SET target dimension over the limit! [ 358.697051][ T6522] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.706322][ T6522] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.722048][ T6522] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.822110][ T6522] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.831917][ T6522] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.841398][ T6522] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.879597][T15201] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3378'. [ 359.102215][T15219] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3385'. [ 359.135174][T15218] program syz.2.3386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.145626][T15218] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 359.197334][T15222] bridge_slave_0: left allmulticast mode [ 359.212514][T15222] bridge_slave_0: left promiscuous mode [ 359.237987][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3387'. [ 359.268191][T15222] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.282437][T15222] bridge_slave_1: left allmulticast mode [ 359.282458][T15222] bridge_slave_1: left promiscuous mode [ 359.282701][T15222] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.287282][T15222] bond0: (slave bond_slave_0): Releasing backup interface [ 359.306878][T15222] bond0: (slave bond_slave_1): Releasing backup interface [ 359.324031][T15222] team0: Port device team_slave_0 removed [ 359.340593][T15222] team0: Port device team_slave_1 removed [ 359.341760][T15222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.341775][T15222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.345189][T15222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.345203][T15222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.348171][T15222] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 360.371498][T15246] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3394'. [ 361.647641][T15263] loop5: detected capacity change from 0 to 1024 [ 361.743397][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3399'. [ 361.778797][T15265] program syz.2.3401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.808214][T15263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.849817][T15258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 361.924912][T15263] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.008636][T15263] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3400: bg 0: block 112: padding at end of block bitmap is not set [ 362.026029][ T28] audit: type=1400 audit(3931758339.391:3361): avc: denied { write } for pid=15259 comm="syz.5.3400" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.213579][T15270] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 362.448350][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 362.621426][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3407'. [ 362.904563][T15292] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3406'. [ 363.035223][T15182] bridge0: entered promiscuous mode [ 363.092091][ T28] audit: type=1400 audit(3931758340.481:3362): avc: denied { setattr } for pid=15300 comm="syz.7.3414" path="socket:[46924]" dev="sockfs" ino=46924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 363.318114][T15310] Cannot find map_set index 0 as target [ 363.968829][T15337] loop5: detected capacity change from 0 to 1024 [ 364.060207][T15337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.074835][T15341] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3432'. [ 364.084877][T15337] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.098834][ T28] audit: type=1400 audit(3931758341.489:3363): avc: denied { write } for pid=15336 comm="syz.5.3430" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 364.123950][T15337] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3430: bg 0: block 112: padding at end of block bitmap is not set [ 364.129578][T15351] SET target dimension over the limit! [ 364.174343][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 364.257761][T15363] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3440'. [ 364.410765][T15373] loop7: detected capacity change from 0 to 512 [ 364.424475][T15373] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 364.432545][T15373] System zones: 0-2, 18-18, 34-34 [ 364.438342][T15373] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3444: bg 0: block 248: padding at end of block bitmap is not set [ 364.452616][T15373] loop7: lost filesystem error report for type 5 error -117 [ 364.452801][T15373] Quota error (device loop7): write_blk: dquota write failed [ 364.467611][T15373] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 364.477516][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 364.477539][ C1] EXT4-fs (loop7): last error at time 3931758341: ext4_validate_block_bitmap:441 [ 364.528496][T15381] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3446'. [ 364.537481][T15373] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.3444: Failed to acquire dquot type 1 [ 364.548680][T15373] loop7: lost filesystem error report for type 5 error -117 [ 364.565933][T15373] EXT4-fs (loop7): 1 truncate cleaned up [ 364.571990][T15373] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.584439][T15373] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.629508][T15384] ucma_write: process 1162 (syz.5.3447) changed security contexts after opening file descriptor, this is not allowed. [ 364.649771][T14508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.799336][T15392] loop7: detected capacity change from 0 to 1024 [ 364.820535][T15392] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.833250][T15392] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.847748][ T28] audit: type=1400 audit(3931758342.241:3364): avc: denied { write } for pid=15391 comm="syz.7.3448" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 364.870698][T15392] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3448: bg 0: block 112: padding at end of block bitmap is not set [ 365.087866][T14508] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 365.938380][T15407] SET target dimension over the limit! [ 366.403242][T15410] loop7: detected capacity change from 0 to 512 [ 366.415488][T15410] EXT4-fs: Ignoring removed mblk_io_submit option [ 366.422835][T15410] EXT4-fs: inline encryption not supported [ 366.484298][T15412] program syz.0.3454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.593986][T15410] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 368.775281][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3456'. [ 368.871909][ T28] audit: type=1326 audit(3931758346.260:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.7.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5b36de99 code=0x7ffc0000 [ 368.912058][ T28] audit: type=1326 audit(3931758346.260:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.7.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5b36de99 code=0x7ffc0000 [ 369.089018][ T28] audit: type=1326 audit(3931758346.300:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.7.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5b36de99 code=0x7ffc0000 [ 369.284378][T15438] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3460'. [ 369.393603][T15443] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3463'. [ 370.064985][ T28] audit: type=1326 audit(3931758346.300:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.7.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5b36de99 code=0x7ffc0000 [ 370.090786][ T28] audit: type=1326 audit(3931758346.300:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.7.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fcc5b36de99 code=0x7ffc0000 [ 370.138833][T15441] lo speed is unknown, defaulting to 1000 [ 370.428416][ T28] audit: type=1326 audit(3931758346.300:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.7.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5b36de99 code=0x7ffc0000 [ 370.454177][ T28] audit: type=1326 audit(3931758346.300:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.7.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5b36de99 code=0x7ffc0000 [ 370.479797][ T28] audit: type=1326 audit(3931758346.300:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.7.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5b36de99 code=0x7ffc0000 [ 370.519488][ T28] audit: type=1326 audit(3931758346.470:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.7.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc5b36de99 code=0x7ffc0000 [ 370.549902][ T28] audit: type=1326 audit(3931758346.300:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.7.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc5b36de99 code=0x7ffc0000 [ 370.595778][T15460] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3467'. [ 370.803869][T15471] program syz.5.3472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.836574][T15473] loop5: detected capacity change from 0 to 512 [ 370.852174][T15473] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 370.862271][T15473] EXT4-fs (loop5): group descriptors corrupted! [ 370.922176][T15479] loop5: detected capacity change from 0 to 512 [ 370.975976][T15479] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 370.993409][T15479] System zones: 0-2, 18-18, 34-34 [ 371.004885][T15479] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3476: bg 0: block 248: padding at end of block bitmap is not set [ 371.006678][T15487] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3478'. [ 371.029101][T15479] loop5: lost filesystem error report for type 5 error -117 [ 371.030215][T15479] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3476: Failed to acquire dquot type 1 [ 371.037626][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 371.037644][ C1] EXT4-fs (loop5): last error at time 3931758348: ext4_validate_block_bitmap:441 [ 371.064668][T15479] loop5: lost filesystem error report for type 5 error -117 [ 371.081517][T15479] EXT4-fs (loop5): 1 truncate cleaned up [ 371.095397][T15479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.108611][T15479] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.138958][T15489] Cannot find map_set index 0 as target [ 371.163293][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.184616][T15492] loop5: detected capacity change from 0 to 512 [ 371.192119][T15492] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 371.207473][T15492] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 371.220811][T15492] EXT4-fs (loop5): 1 truncate cleaned up [ 371.234885][T15492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.257916][T15495] program syz.2.3481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.281076][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.293946][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3482'. [ 371.549292][T15529] program syz.1.3494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.576992][T15527] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3493'. [ 371.607059][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3497'. [ 371.629781][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3499'. [ 371.788424][T15568] program syz.5.3507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.836541][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'. [ 371.954001][T15584] loop7: detected capacity change from 0 to 512 [ 371.960775][T15584] EXT4-fs: inline encryption not supported [ 371.969022][T15584] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 372.113478][T15605] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 372.163858][T15612] program syz.2.3524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.634895][T15643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 372.768343][T15653] loop5: detected capacity change from 0 to 1024 [ 372.791340][T15653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.821147][T15653] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.855164][T15653] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3539: bg 0: block 112: padding at end of block bitmap is not set [ 372.923149][ T7540] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 373.124017][T15677] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.160277][T15681] program syz.2.3550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.182593][T15683] netlink: 'syz.0.3551': attribute type 1 has an invalid length. [ 373.378442][T15702] FAULT_INJECTION: forcing a failure. [ 373.378442][T15702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.391499][T15702] CPU: 0 UID: 0 PID: 15702 Comm: syz.0.3560 Not tainted syzkaller #0 PREEMPT(lazy) [ 373.391528][T15702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 373.391540][T15702] Call Trace: [ 373.391548][T15702] [ 373.391555][T15702] __dump_stack+0x1d/0x30 [ 373.391623][T15702] dump_stack_lvl+0x95/0xd0 [ 373.391645][T15702] dump_stack+0x15/0x1b [ 373.391667][T15702] should_fail_ex+0x25e/0x270 [ 373.391739][T15702] should_fail+0xb/0x20 [ 373.391761][T15702] should_fail_usercopy+0x1a/0x20 [ 373.391787][T15702] _copy_from_user+0x1c/0xb0 [ 373.391806][T15702] ___sys_sendmsg+0xc1/0x1e0 [ 373.391887][T15702] __x64_sys_sendmsg+0xd4/0x160 [ 373.391918][T15702] x64_sys_call+0x194c/0x3020 [ 373.392014][T15702] do_syscall_64+0x136/0x3c0 [ 373.392033][T15702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.392053][T15702] RIP: 0033:0x7f7cde07de99 [ 373.392068][T15702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.392086][T15702] RSP: 002b:00007f7cdcad7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.392175][T15702] RAX: ffffffffffffffda RBX: 00007f7cde305fa0 RCX: 00007f7cde07de99 [ 373.392192][T15702] RDX: 0000000004008800 RSI: 0000200000000080 RDI: 0000000000000003 [ 373.392204][T15702] RBP: 00007f7cdcad7090 R08: 0000000000000000 R09: 0000000000000000 [ 373.392216][T15702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.392228][T15702] R13: 00007f7cde306038 R14: 00007f7cde305fa0 R15: 00007ffe7f897c48 [ 373.392245][T15702] [ 374.028193][T15714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.257191][T15724] loop5: detected capacity change from 0 to 512 [ 374.283641][T15724] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 374.294169][T15724] EXT4-fs (loop5): group descriptors corrupted! [ 374.458896][T15740] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.527815][T15746] __nla_validate_parse: 5 callbacks suppressed [ 374.527832][T15746] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3580'. [ 375.732654][T15774] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.168767][T15793] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3597'. [ 376.451126][T15801] loop5: detected capacity change from 0 to 512 [ 376.463943][T15801] EXT4-fs: Ignoring removed mblk_io_submit option [ 376.471223][T15801] EXT4-fs: inline encryption not supported [ 376.488746][T15801] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 378.310755][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 378.310771][ T28] audit: type=1326 audit(3931758355.700:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.2.3610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 378.344116][ T28] audit: type=1326 audit(3931758355.710:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.2.3610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 378.370675][ T28] audit: type=1326 audit(3931758355.740:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.2.3610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 378.397106][ T28] audit: type=1326 audit(3931758355.740:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.2.3610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 378.397427][T15830] SET target dimension over the limit! [ 378.460300][ T28] audit: type=1326 audit(3931758355.740:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.2.3610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 378.486913][ T28] audit: type=1326 audit(3931758355.740:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.2.3610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 378.515096][ T28] audit: type=1326 audit(3931758355.740:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.2.3610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 378.542553][ T28] audit: type=1326 audit(3931758355.740:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.2.3610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 378.562896][T15834] program syz.0.3612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.572123][ T28] audit: type=1326 audit(3931758355.740:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.2.3610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 378.605160][ T28] audit: type=1326 audit(3931758355.740:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.2.3610" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 378.750680][T15846] program syz.0.3617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.952769][T15859] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3623'. [ 379.025688][T15862] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3624'. [ 379.036970][T15862] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3624'. [ 379.160526][T15867] loop7: detected capacity change from 0 to 128 [ 379.221647][T15870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3626'. [ 379.392817][T15867] vfat filesystem being mounted at /96/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 379.656339][T15867] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3616'. [ 380.242541][T15906] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3639'. [ 381.132085][T15920] bond2: peer notification delay (8) is not a multiple of miimon (16), value rounded to 0 ms [ 381.145116][T15920] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 381.175125][T15920] bond2 (unregistering): Released all slaves [ 381.647655][T15937] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3648'. [ 381.723134][T15941] program syz.0.3651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.015219][T15946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3652'. [ 382.679951][T15945] FAULT_INJECTION: forcing a failure. [ 382.679951][T15945] name failslab, interval 1, probability 0, space 0, times 0 [ 382.751129][T15945] CPU: 1 UID: 0 PID: 15945 Comm: syz.0.3653 Not tainted syzkaller #0 PREEMPT(lazy) [ 382.751159][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 382.751202][T15945] Call Trace: [ 382.751209][T15945] [ 382.751217][T15945] __dump_stack+0x1d/0x30 [ 382.751281][T15945] dump_stack_lvl+0x95/0xd0 [ 382.751327][T15945] dump_stack+0x15/0x1b [ 382.751349][T15945] should_fail_ex+0x25e/0x270 [ 382.751445][T15945] should_failslab+0x8c/0xb0 [ 382.751476][T15945] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 382.751502][T15945] ? taskstats_exit+0xf9/0x810 [ 382.751562][T15945] ? taskstats_exit+0xf9/0x810 [ 382.751664][T15945] taskstats_exit+0xf9/0x810 [ 382.751737][T15945] ? acct_update_integrals+0x1b0/0x1e0 [ 382.751764][T15945] do_exit+0x415/0x1500 [ 382.751830][T15945] do_group_exit+0xfe/0x140 [ 382.751854][T15945] ? get_signal+0xe00/0xf10 [ 382.751884][T15945] get_signal+0xe07/0xf10 [ 382.751947][T15945] arch_do_signal_or_restart+0x96/0x480 [ 382.751976][T15945] exit_to_user_mode_loop+0x15d/0x8c0 [ 382.752044][T15945] ? __x64_sys_recvmmsg+0xe5/0x170 [ 382.752081][T15945] do_syscall_64+0x23c/0x3c0 [ 382.752100][T15945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.752120][T15945] RIP: 0033:0x7f7cde07de99 [ 382.752143][T15945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.752163][T15945] RSP: 002b:00007f7cdcab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 382.752263][T15945] RAX: fffffffffffffe00 RBX: 00007f7cde306090 RCX: 00007f7cde07de99 [ 382.752277][T15945] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000003 [ 382.752308][T15945] RBP: 00007f7cdcab6090 R08: 0000000000000000 R09: 0000000000000000 [ 382.752322][T15945] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 382.752335][T15945] R13: 00007f7cde306128 R14: 00007f7cde306090 R15: 00007ffe7f897c48 [ 382.752353][T15945] [ 383.542647][T15977] loop5: detected capacity change from 0 to 512 [ 383.662780][T15968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3660'. [ 383.675721][T15977] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 383.685458][T15977] EXT4-fs (loop5): group descriptors corrupted! [ 383.742935][T15981] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 384.350654][T15985] lo speed is unknown, defaulting to 1000 [ 384.580925][ T28] kauditd_printk_skb: 557 callbacks suppressed [ 384.580944][ T28] audit: type=1400 audit(3931758361.970:4068): avc: denied { write } for pid=16002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.610125][ T28] audit: type=1400 audit(3931758361.990:4069): avc: denied { write } for pid=16019 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.632083][ T28] audit: type=1326 audit(3931758362.010:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.2.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 384.661802][ T28] audit: type=1326 audit(3931758362.010:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.2.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 384.687449][ T28] audit: type=1326 audit(3931758362.010:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.2.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 384.712957][ T28] audit: type=1326 audit(3931758362.010:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.2.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 384.739181][ T28] audit: type=1326 audit(3931758362.010:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.2.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 384.767576][ T4318] bond0 (unregistering): Released all slaves [ 384.769693][ T28] audit: type=1326 audit(3931758362.010:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.2.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 384.799243][ T28] audit: type=1326 audit(3931758362.020:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.2.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 384.824840][ T28] audit: type=1326 audit(3931758362.020:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16012 comm="syz.2.3670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c1b1de99 code=0x7ffc0000 [ 384.825335][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 384.864038][T15985] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.871117][T15985] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.878370][T15985] bridge_slave_0: entered allmulticast mode [ 384.884976][T15985] bridge_slave_0: entered promiscuous mode [ 384.892359][T15985] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.901038][T15985] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.908747][T15985] bridge_slave_1: entered allmulticast mode [ 384.915603][T15985] bridge_slave_1: entered promiscuous mode [ 384.959386][T15985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.972586][ T4318] hsr_slave_0: left promiscuous mode [ 384.979217][ T4318] hsr_slave_1: left promiscuous mode [ 385.027551][T16041] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3675'. [ 385.041212][T16041] IPv6: NLM_F_CREATE should be specified when creating new route [ 385.052677][T16032] bridge0: port 1(syz_tun) entered blocking state [ 385.059625][T16032] bridge0: port 1(syz_tun) entered disabled state [ 385.076772][T16032] syz_tun: entered allmulticast mode [ 385.082944][T16032] syz_tun: entered promiscuous mode [ 385.102657][T16033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3674'. [ 385.115463][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 385.129178][T15985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.151867][T16047] SET target dimension over the limit! [ 385.178050][T15985] team0: Port device team_slave_0 added [ 385.186935][T16041] lo speed is unknown, defaulting to 1000 [ 385.228910][T16032] loop5: detected capacity change from 0 to 512 [ 385.240225][T16032] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 385.249762][T16032] EXT4-fs error (device loop5): __ext4_fill_super:5600: inode #2: comm syz.5.3675: iget: special inode unallocated [ 385.250643][T15985] team0: Port device team_slave_1 added [ 385.262128][T16032] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 385.267952][T16032] EXT4-fs (loop5): get root inode failed [ 385.277042][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 385.277063][ C1] EXT4-fs (loop5): initial error at time 3931758362: __ext4_fill_super:5600: inode 2 [ 385.277108][ C1] EXT4-fs (loop5): last error at time 3931758362: __ext4_fill_super:5600: inode 2 [ 385.308115][T16032] EXT4-fs (loop5): mount failed [ 385.337749][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 385.391862][T15985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.399003][T15985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.443681][T15985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.455073][T15985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.462105][T15985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.508038][T15985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.509255][T15985] hsr_slave_0: entered promiscuous mode [ 386.515750][T15985] hsr_slave_1: entered promiscuous mode [ 386.521841][T15985] debugfs: 'hsr0' already exists in 'hsr' [ 386.528074][T15985] Cannot create hsr debugfs directory [ 386.798625][T16078] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3683'. [ 387.281921][T15985] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 387.298910][T15985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.310969][T15985] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 387.320631][T15985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.340839][T15985] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 387.349867][T15985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.359915][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 387.377038][T15985] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 387.394897][T15985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.440336][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3689'. [ 387.458996][T15985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.491043][T15985] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.537215][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.544335][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.562378][T16128] 9pnet_virtio: no channels available for device 127.0.0.1 [ 387.577137][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.584254][ T6514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.592307][T16130] SET target dimension over the limit! [ 387.687667][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 387.756008][T15985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.948525][T16169] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3696'. [ 387.970473][T15985] veth0_vlan: entered promiscuous mode [ 387.983287][T15985] veth1_vlan: entered promiscuous mode [ 387.991591][T16180] program syz.1.3698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.004070][T15985] veth0_macvtap: entered promiscuous mode [ 388.014643][T15985] veth1_macvtap: entered promiscuous mode [ 388.033561][T15985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.044998][T15985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.061256][ T6514] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.070347][ T6514] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.083963][ T6514] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.094042][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3700'. [ 388.099017][ T6514] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.165669][T16194] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3701'. [ 388.235001][ T4318] ================================================================== [ 388.243198][ T4318] BUG: KCSAN: data-race in ipvlan_open / is_upper_ndev_bond_master_filter [ 388.251710][ T4318] [ 388.254022][ T4318] read-write to 0xffff88812d8aa0b0 of 4 bytes by task 16201 on cpu 1: [ 388.262163][ T4318] ipvlan_open+0x74/0x100 [ 388.266488][ T4318] __dev_open+0x305/0x550 [ 388.270812][ T4318] __dev_change_flags+0x1c8/0x490 [ 388.275829][ T4318] rtnl_newlink_create+0x38a/0x650 [ 388.280948][ T4318] rtnl_newlink+0x1181/0x1400 [ 388.285630][ T4318] rtnetlink_rcv_msg+0x64b/0x720 [ 388.290558][ T4318] netlink_rcv_skb+0x11e/0x220 [ 388.295312][ T4318] rtnetlink_rcv+0x1c/0x30 [ 388.299714][ T4318] netlink_unicast+0x5a7/0x680 [ 388.304463][ T4318] netlink_sendmsg+0x5be/0x6f0 [ 388.309218][ T4318] ____sys_sendmsg+0x532/0x580 [ 388.313976][ T4318] ___sys_sendmsg+0x195/0x1e0 [ 388.318646][ T4318] __x64_sys_sendmsg+0xd4/0x160 [ 388.323490][ T4318] x64_sys_call+0x194c/0x3020 [ 388.328157][ T4318] do_syscall_64+0x136/0x3c0 [ 388.332731][ T4318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.338616][ T4318] [ 388.340924][ T4318] read to 0xffff88812d8aa0b0 of 4 bytes by task 4318 on cpu 0: [ 388.348453][ T4318] is_upper_ndev_bond_master_filter+0x2b/0xb0 [ 388.354510][ T4318] ib_enum_roce_netdev+0x117/0x1d0 [ 388.359610][ T4318] ib_enum_all_roce_netdevs+0x89/0x100 [ 388.365057][ T4318] netdevice_event_work_handler+0x15d/0x3d0 [ 388.370936][ T4318] process_scheduled_works+0x4d4/0x9a0 [ 388.376487][ T4318] worker_thread+0x569/0x750 [ 388.381081][ T4318] kthread+0x221/0x270 [ 388.385155][ T4318] ret_from_fork+0x146/0x330 [ 388.389744][ T4318] ret_from_fork_asm+0x1a/0x30 [ 388.394498][ T4318] [ 388.396805][ T4318] value changed: 0x00008002 -> 0x00008083 [ 388.402509][ T4318] [ 388.404815][ T4318] Reported by Kernel Concurrency Sanitizer on: [ 388.410946][ T4318] CPU: 0 UID: 0 PID: 4318 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(lazy) [ 388.420390][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 388.430436][ T4318] Workqueue: gid-cache-wq netdevice_event_work_handler [ 388.437287][ T4318] ================================================================== [ 388.477191][T16203] loop8: detected capacity change from 0 to 512 [ 388.493670][T16203] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 388.504186][T16203] EXT4-fs (loop8): group descriptors corrupted!