last executing test programs: 15m34.629173367s ago: executing program 4 (id=215): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$kcm(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x86dd, 0xb, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m34.500044591s ago: executing program 4 (id=216): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) getpgid(r0) getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x200000, 0x0) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40433, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x100003}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141c00000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x4, 0xfffffffe}, 0x10}, 0x94) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'lblcr\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r3, r5, 0x0, 0x7ffff004) 15m33.504171743s ago: executing program 4 (id=222): socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000400)=ANY=[], 0x0) 15m33.144152024s ago: executing program 4 (id=223): r0 = socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x81, 0xcf57, 0xff42, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x300}, 0x8000, 0x8000, 0x8, 0x1}}) 15m32.736259007s ago: executing program 4 (id=225): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006b", 0x7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x4000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 15m32.696219019s ago: executing program 4 (id=227): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x7df0f4c9be7ba10e, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_vlan\x00', 0x1}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0xb, 0x1}, 0x28) 15m32.631818451s ago: executing program 32 (id=227): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x7df0f4c9be7ba10e, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_vlan\x00', 0x1}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0xb, 0x1}, 0x28) 7m9.202613626s ago: executing program 1 (id=3902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r1, @ANYBLOB], 0x1bc}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 7m9.161374288s ago: executing program 1 (id=3904): io_uring_setup(0x24e7, &(0x7f00000001c0)={0x0, 0xa980, 0x40, 0x2, 0x17e}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f73"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 7m9.118085449s ago: executing program 1 (id=3905): socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r3, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x6e) 7m8.80391981s ago: executing program 1 (id=3910): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) socket$kcm(0x2, 0x200000000000001, 0x106) socket$tipc(0x1e, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0xf) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0xff, 0x246, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) unshare(0x22020600) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r5, 0x0, 0x0, 0x4}, 0x20) r6 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0xa8, 0x8005, 0x0, 0x1, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9, 0x8]}) 7m7.907227019s ago: executing program 1 (id=3920): socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r3, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x6e) 7m6.820467223s ago: executing program 1 (id=3927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r1, @ANYBLOB], 0x1bc}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 7m6.624187309s ago: executing program 33 (id=3927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r1, @ANYBLOB], 0x1bc}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 1m2.783209387s ago: executing program 5 (id=6931): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x112, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x14, 0x39, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x15f1, 0x27e9, 0x4b, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0x5, 0x1}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x4010744d, &(0x7f0000000180)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7f, 0x1, 0x5, 0x0, 0x8, 0xffffffffffffffff}) ptrace$PTRACE_SETSIGMASK(0x420b, r11, 0x8, &(0x7f00000002c0)={[0x1]}) 1m2.339576621s ago: executing program 5 (id=6933): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0xc8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1m2.270672513s ago: executing program 5 (id=6934): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x9c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 1m2.201077875s ago: executing program 5 (id=6936): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0xa}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0000ffff"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0xfffffffffffffeba, 0x2, 0x6, 0x201}, 0x14}}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = dup(0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000000140)={{0x0, 0x1, 0xe412, 0x2, 0x7c0}, 0x0, 0x4, 0x2}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) write$P9_RWSTAT(r5, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) recvfrom$unix(r0, &(0x7f00000001c0)=""/17, 0x11, 0x10000, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r8}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r8, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 1m1.209376717s ago: executing program 5 (id=6944): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf251000000008000100", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x112, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x14, 0x39, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x15f1, 0x27e9, 0x4b, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0x5, 0x1}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x4010744d, &(0x7f0000000180)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7f, 0x1, 0x5, 0x0, 0x8, 0xffffffffffffffff}) ptrace$PTRACE_SETSIGMASK(0x420b, r11, 0x8, &(0x7f00000002c0)={[0x1]}) 1m0.910658577s ago: executing program 5 (id=6950): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000100000f030000000200b600010000000100000144942d000000000000000f010000008400002e"], 0x0, 0x44, 0x0, 0x1}, 0x28) unshare(0x600) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001400), 0x200000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, 0x0, 0x0}, 0x1c) unshare(0x400) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) r6 = socket(0x15, 0x80005, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x9, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r8) socket(0x2, 0x80805, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2c776664026f3d", @ANYRESHEX=r9, @ANYBLOB=',\x00']) getsockopt(r6, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) 45.651560309s ago: executing program 34 (id=6950): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000100000f030000000200b600010000000100000144942d000000000000000f010000008400002e"], 0x0, 0x44, 0x0, 0x1}, 0x28) unshare(0x600) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001400), 0x200000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, 0x0, 0x0}, 0x1c) unshare(0x400) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) r6 = socket(0x15, 0x80005, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x9, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r8) socket(0x2, 0x80805, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2c776664026f3d", @ANYRESHEX=r9, @ANYBLOB=',\x00']) getsockopt(r6, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) 31.847354204s ago: executing program 7 (id=7242): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000009c0)=@ethtool_rxfh_indir={0x38}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000}, 0x100}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(0xffffffffffffffff) file_setattr(r4, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x80000103, 0x400, 0x72, 0x3, 0x8}, 0x18, 0x100) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x15}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xc000) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newtaction={0x68, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x5, 0x0, 0x2}, 0x3}}, @TCA_IFE_METALST={0xffffff9d, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xd94ac76b42879f9f}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988ca", 0xe}, {&(0x7f00000007c0)="e582df448b7c0732b70a98f1c6961451e15f88cb952140", 0x17}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 31.290313361s ago: executing program 7 (id=7251): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8080) 31.237916033s ago: executing program 7 (id=7252): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x88, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 31.166513675s ago: executing program 7 (id=7254): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x86, &(0x7f0000002600)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "5f468b975dbb0f60"}}, 0x48}, 0x1, 0x0, 0x0, 0x44084}, 0x20004050) (async) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "5f468b975dbb0f60"}}, 0x48}, 0x1, 0x0, 0x0, 0x44084}, 0x20004050) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x18, 0x20, r4}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x18, 0x20, r4}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10092, &(0x7f0000000080)={[{@nodioread_nolock}]}, 0xff, 0x249, &(0x7f0000000880)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r9, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r9, 0x0) add_key$keyring(&(0x7f00000101c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key$keyring(&(0x7f00000101c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r8) sendmsg$TIPC_CMD_SET_NETID(r10, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r11, 0x800, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008810}, 0x20004044) 30.759878129s ago: executing program 7 (id=7260): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$cgroup(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000540), 0x2000000, &(0x7f0000000640)={[{@nofavordynmods}, {@favordynmods}, {@none}, {@nofavordynmods}, {@cpuset_v2_mode}, {}, {}, {@cpuset_v2_mode}, {@none}, {@name={'name', 0x3d, '-[\\#,$&!\x9b*'}}], [{@subj_role={'subj_role', 0x3d, 'GPL\x00'}}, {@dont_appraise}, {@dont_measure}, {@dont_measure}, {@audit}, {@euid_eq}]}) 30.017844782s ago: executing program 7 (id=7267): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x2402, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x600}) 27.565601881s ago: executing program 35 (id=7267): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x2402, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x600}) 20.320257085s ago: executing program 0 (id=7336): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)="d08949", 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000480), 0x4) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) set_mempolicy(0x0, &(0x7f0000000000)=0x9, 0x91) 20.256176457s ago: executing program 0 (id=7337): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r0 = open(&(0x7f0000000340)='./file1\x00', 0x41, 0x28) fallocate(r0, 0x28, 0x6, 0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB="00000039915a4000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 18.954457409s ago: executing program 0 (id=7350): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e4ffffffffffffff000000060000000000000000000000648405574ba6d08abab82785099ef699ead67863af1790306f9c4bb3bfba89f5688486df045d8927fda3d50a635d5800e0febc0a89e03dc4f12cb59456c0fe8a43ed7b9313ffb1fdf1d833206830f36e6e6b8efac0534e0f099683462e77fe142eb0903fd82f49bdc05a4e63dfdfe0c6e3247188ea1acb591e49ff03be2ddcaf0fb59e1f86d59aa1b72b4aa76b1d137c51a0b8e9db7dc34515bc9df000675c9b64efb7310b318c3c457f7bb1"], 0x50) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r0}, 0x20) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) (async, rerun: 64) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) (async) clock_nanosleep(0x9, 0x0, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64) geteuid() sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) socket$key(0xf, 0x3, 0x2) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 18.899279901s ago: executing program 0 (id=7352): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0x2, 0x23f, &(0x7f0000000540)="$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") open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fcdbdf250100000014000200776730000000000000000000000000004c00088048000080200004000a004e2300000002fe880000000000000000000000000001d70d000023e20100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922"], 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4000000000009, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000ebffffff17000000000000000000000000000000958170faa45f62ec20389d52b5a951fa3857158830746e703ddfcd1fe402efbd822b242d0f9de23199011be4c014b9c15a345f6449040857d18cdf577d8cae8d4749dbcf3e70aae3c2386661c0769cc053f771c0712df84384bf2cba1ee6"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r3 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x80, 0x30, 0x0) mq_getsetattr(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x16000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc09b, 0x2, @perf_config_ext={0x100000000, 0x101}, 0x0, 0x0, 0x10000, 0x5, 0x6, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x7, 0x0, 0x0, 0x10, 0x0, 0x200, 0x4020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x92}, 0x0, 0xe, r4, 0x3) unshare(0x22020600) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x922, 0x12) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2000c1c0) syz_clone(0x0, &(0x7f0000001340)="ea9f9fef7008be9caa4230658e0f0cccad32ec921e770d152cc2110df2169e3f25afb722e56fc5ec6da59d8a746aab9d94111fc0922b33d6e4618df4ad9f45e1e4c5a419429893f709f3bc337b874c1bcc63053bc96584e0f5d7ced9c410a50fa8648b5f96a943684c3ef11f33f0006b9cb80473a9e006c174b8963c5ba53d748df42a95a704fe", 0x87, 0x0, 0x0, 0x0) r6 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r6, 0x4008240b, &(0x7f00000013c0)) r7 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 18.763405415s ago: executing program 0 (id=7353): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000e40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xdc, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0xedb8c5efdab7af2d) epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$kcm(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0x1, 0x548, &(0x7f0000000480)="$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") (fail_nth: 2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x110, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)) socket$inet6(0xa, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x28, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) 16.948146474s ago: executing program 0 (id=7367): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x0, 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16.911555465s ago: executing program 36 (id=7367): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x0, 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 3.352627002s ago: executing program 8 (id=7510): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xffffffffffdffffd}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3.281562984s ago: executing program 8 (id=7512): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.629724255s ago: executing program 2 (id=7517): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0xa}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0000ffff"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0xfffffffffffffeba, 0x2, 0x6, 0x201}, 0x14}}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x80000001, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = dup(0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) write$P9_RWSTAT(r5, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) recvfrom$unix(r0, &(0x7f00000001c0)=""/17, 0x11, 0x10000, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r8}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r8, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 2.402085042s ago: executing program 8 (id=7521): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000004c0)='freezer.self_freezing\x00', 0x275a, 0x0) close(0xffffffffffffffff) write$binfmt_script(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200, 0x10000, 0xfffffffe, 0x0, 0x0, 0xaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000780005062cbd9600fcdbdf25"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000840) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c55a1c5667e0060000725c8bbb58", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x1, 0x3, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000880)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x18, 0x64001}}], 0x2, 0x0) r8 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x80, 0x25, 0x3}, 0x18) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c77a0a39", @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf25080000000800020004000000080003000100000008000400090000000500050000000000080002000500000008000400001000001c000180060005004e2200000800030000000000080003007f000001"], 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xb, 0x0, &(0x7f0000000080)="05804ab38284d758e60000", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfffffffffffffec6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfc6]}, &(0x7f0000001300), 0x8) 2.344828014s ago: executing program 8 (id=7523): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x101, 0x4002) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_pwait2(r6, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x6}, 0x2732, 0x0, 0x8000, 0x3, 0xfff, 0x7fff, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mlockall(0x2) r7 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r7, 0xb) shmat(r7, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffffffffffff, @perf_config_ext={0xfd9, 0x922}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r2, r4, 0x0) 2.338385164s ago: executing program 3 (id=7524): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0xfd, 0x8, 0xfffff03c}, {0x6, 0xd, 0x40}]}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x10100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xdc1, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c0100000000000000000000000000000000ff020000000000000000000000000001ff000000000000000600000000000000a4d3191881157e441aa6bf9d637036b771d92fdbdde7e6a4f297034f58e220a311e3d1745d"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x37c6}, {{&(0x7f0000000580)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000680)=""/112, 0x70}, {&(0x7f0000000700)=""/182, 0xb6}, {&(0x7f0000000880)=""/197, 0xc5}], 0x3, &(0x7f00000009c0)=""/40, 0x28}, 0x6}], 0x3, 0x10102, 0x0) 2.301595236s ago: executing program 3 (id=7525): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, 0x0, 0x0) ioperm(0x7, 0x81, 0x2) mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[0x0]) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) arch_prctl$ARCH_SET_GS(0x1001, 0x0) 2.021662134s ago: executing program 3 (id=7527): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0400000000b401001c0012800b00010067726574617000000c00028008000100e7d8c038f04ad65a73f901fbe27f4aa9164bc6ea147e28850535ca4816f87850fdae6fae054d4725885111dd88aa09f6d7d1219481efa6f8ba627ca6bba873efe573f76a453d8b5650bcc196f6", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x7800, 0x8000, 0x6, 0x4, {{0x9, 0x4, 0x1, 0x9, 0x24, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x86, 0xa, "b1ad97d717f91725"}, @end, @ssrr={0x89, 0x3, 0xb0}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000001200000425bd7000fedbdf2507000000", @ANYRES32, @ANYBLOB="450000000080000018002200d05eec379d2bfc1078b447c85e000000000000000000350076657468305f746f5f687372000000000a000200270e113cd9a0000008000a00", @ANYRES32=r3, @ANYBLOB="08001d0002000000"], 0x68}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000980)=ANY=[], 0x4, 0x28a, &(0x7f00000012c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000100)={'bond_slave_0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r6, &(0x7f0000000300)=ANY=[], 0x10) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000000eaff00000000180000000c000000000000000000000008001c00c9000000d457961cb2f7eae98e6bd6abe2d27f28add3093668ac6aa1201e113e039a3399bb9420606af4f44e3c41ed42d20f21af441baba69121790e3b8182ed764a629768d1bf20270ad2a812ef26b235742a9833a1a87f040698"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000001200000000d6ecc3ca009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0x9}, 0x9}, 0x1c) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) readlink(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)=""/179, 0xb3) 1.736195614s ago: executing program 2 (id=7528): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0400000000b401001c0012800b00010067726574617000000c00028008000100e7d8c038f04ad65a73f901fbe27f4aa9164bc6ea147e28850535ca4816f87850fdae6fae054d4725885111dd88aa09f6d7d1219481efa6f8ba627ca6bba873efe573f76a453d8b5650bcc196f6", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x7800, 0x8000, 0x6, 0x4, {{0x9, 0x4, 0x1, 0x9, 0x24, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x86, 0xa, "b1ad97d717f91725"}, @end, @ssrr={0x89, 0x3, 0xb0}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000001200000425bd7000fedbdf2507000000", @ANYRES32, @ANYBLOB="450000000080000018002200d05eec379d2bfc1078b447c85e000000000000000000350076657468305f746f5f687372000000000a000200270e113cd9a0000008000a00", @ANYRES32=r3, @ANYBLOB="08001d0002000000"], 0x68}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000980)=ANY=[], 0x4, 0x28a, &(0x7f00000012c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000100)={'bond_slave_0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r6, &(0x7f0000000300)=ANY=[], 0x10) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000000eaff00000000180000000c000000000000000000000008001c00c9000000d457961cb2f7eae98e6bd6abe2d27f28add3093668ac6aa1201e113e039a3399bb9420606af4f44e3c41ed42d20f21af441baba69121790e3b8182ed764a629768d1bf20270ad2a812ef26b235742a9833a1a87f040698"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000001200000000d6ecc3ca009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0x9}, 0x9}, 0x1c) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) readlink(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)=""/179, 0xb3) 1.55203775s ago: executing program 3 (id=7531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 1.519427121s ago: executing program 3 (id=7532): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.445853283s ago: executing program 9 (id=7533): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x112, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x14, 0x39, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x15f1, 0x27e9, 0x4b, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0x5, 0x1}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x4010744d, &(0x7f0000000180)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7f, 0x1, 0x5, 0x0, 0x8, 0xffffffffffffffff}) ptrace$PTRACE_SETSIGMASK(0x420b, r11, 0x8, &(0x7f00000002c0)={[0x1]}) 1.422306484s ago: executing program 8 (id=7534): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/108, 0x6c}, {0x0}], 0x2, &(0x7f0000000580)=""/30, 0x1e}, 0x10}], 0x1, 0x10000, 0x0) munlockall() getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 1.22774962s ago: executing program 9 (id=7536): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x88, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1.22136421s ago: executing program 2 (id=7537): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xffffffffffdffffd}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 1.163877422s ago: executing program 9 (id=7538): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0xfd, 0x8, 0xfffff03c}, {0x6, 0xd, 0x40}]}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x10100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xdc1, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x37c6}, {{&(0x7f0000000580)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000680)=""/112, 0x70}, {&(0x7f0000000700)=""/182, 0xb6}, {&(0x7f0000000880)=""/197, 0xc5}], 0x3, &(0x7f00000009c0)=""/40, 0x28}, 0x6}], 0x3, 0x10102, 0x0) 1.076709575s ago: executing program 2 (id=7539): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0xa}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0000ffff"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0xfffffffffffffeba, 0x2, 0x6, 0x201}, 0x14}}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x80000001, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = dup(0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) write$P9_RWSTAT(r5, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) recvfrom$unix(r0, &(0x7f00000001c0)=""/17, 0x11, 0x10000, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r8}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r8, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 831.332083ms ago: executing program 6 (id=7542): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0400000000b401001c0012800b00010067726574617000000c00028008000100e7d8c038f04ad65a73f901fbe27f4aa9164bc6ea147e28850535ca4816f87850fdae6fae054d4725885111dd88aa09f6d7d1219481efa6f8ba627ca6bba873efe573f76a453d8b5650bcc196f6", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x7800, 0x8000, 0x6, 0x4, {{0xd, 0x4, 0x1, 0x9, 0x34, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x86, 0xa, "b1ad97d717f91725"}, @end, @ssrr={0x89, 0x13, 0xb0, [@rand_addr=0x64010100, @rand_addr=0x64010102, @loopback, @broadcast]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000001200000425bd7000fedbdf2507000000", @ANYRES32, @ANYBLOB="450000000080000018002200d05eec379d2bfc1078b447c85e000000000000000000350076657468305f746f5f687372000000000a000200270e113cd9a0000008000a00", @ANYRES32=r3, @ANYBLOB="08001d0002000000"], 0x68}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000980)=ANY=[], 0x4, 0x28a, &(0x7f00000012c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000100)={'bond_slave_0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r6, &(0x7f0000000300)=ANY=[], 0x10) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000000eaff00000000180000000c000000000000000000000008001c00c9000000d457961cb2f7eae98e6bd6abe2d27f28add3093668ac6aa1201e113e039a3399bb9420606af4f44e3c41ed42d20f21af441baba69121790e3b8182ed764a629768d1bf20270ad2a812ef26b235742a9833a1a87f040698"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000001200000000d6ecc3ca009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0x9}, 0x9}, 0x1c) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) readlink(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)=""/179, 0xb3) 657.862538ms ago: executing program 3 (id=7543): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) getpgid(r0) getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x200000, 0x4) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40433, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x100003}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x4, 0xfffffffe}, 0x10}, 0x94) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001001400128009000100766c616e00"], 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'lblcr\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 523.701053ms ago: executing program 8 (id=7544): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x101, 0x4002) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) epoll_pwait2(r6, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x6}, 0x2732, 0x0, 0x8000, 0x3, 0xfff, 0x7fff, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mlockall(0x2) r7 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r7, 0xb) shmat(r7, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r8 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmdt(r8) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r2, r4, 0x0) 395.971627ms ago: executing program 6 (id=7545): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730137000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0xf}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) pwrite64(r0, &(0x7f0000000340)="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", 0xff, 0x8) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000080)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) 346.023508ms ago: executing program 6 (id=7546): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000004c0)='freezer.self_freezing\x00', 0x275a, 0x0) close(0xffffffffffffffff) write$binfmt_script(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200, 0x10000, 0xfffffffe, 0x0, 0x0, 0xaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000780005062cbd9600fcdbdf25"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000840) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c55a1c5667e0060000725c8bbb58", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x1, 0x3, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000880)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x18, 0x64001}}], 0x2, 0x0) r8 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x80, 0x25, 0x3}, 0x18) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c77a0a39", @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf25080000000800020004000000080003000100000008000400090000000500050000000000080002000500000008000400001000001c000180060005004e2200000800030000000000080003007f000001"], 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xb, 0x0, &(0x7f0000000080)="05804ab38284d758e60000", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfffffffffffffec6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfc6]}, &(0x7f0000001300), 0x8) 291.97321ms ago: executing program 6 (id=7547): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x112, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x14, 0x39, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x15f1, 0x27e9, 0x4b, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0x5, 0x1}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x4010744d, &(0x7f0000000180)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7f, 0x1, 0x5, 0x0, 0x8, 0xffffffffffffffff}) ptrace$PTRACE_SETSIGMASK(0x420b, r11, 0x8, &(0x7f00000002c0)={[0x1]}) 245.554502ms ago: executing program 9 (id=7548): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x88, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 225.887992ms ago: executing program 9 (id=7550): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xffffffffffdffffd}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 212.910283ms ago: executing program 2 (id=7551): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b7, &(0x7f0000000a40)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x500, 0x0, 0xf, 0x0, 0x1017}]}, {0x0, [0x0, 0x30, 0x61, 0x61, 0x2e]}}, &(0x7f0000005bc0)=""/239, 0x2b, 0xef, 0x9, 0xfff}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 176.643514ms ago: executing program 6 (id=7552): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0xfe, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 142.542815ms ago: executing program 9 (id=7553): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)="4a627a94697cb76a4bf3fc5eadc584b8af617a22d1faa50ab6eac90b3de0412311aac2846e80574b70f2953352a69187d4f7244458cd", 0x0, 0x3, 0xffffffffffffffff, 0x4}, 0x38) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0500000008"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYRES8=r1, @ANYRES32=r1, @ANYRESHEX=r1, @ANYBLOB="d13a837739e4275b87201da48f32a99bf3dc8865801612d8c70d3afa265138e069863183491fda5f4370d3c120c31ecca7794c8d55fb3797a87ac164bc21f014bcd5f4e8661c73f50cf2bc597f4adaf5835c423b26fbdcf44429567fa8abd7a85b46094e28b7d7f5389cb4bda9dedc9500ef57c9c767db5d605628708e2f2c7d3d0e52fcbdfce6531c8925622fdb11ff50ab802664809c56ca5e48f655e317f086540da022e7ffbc43bf6aa5586df0aeeb3e13e2a8ead90493ef65102a798ceb8cf1b681e08192dbf3908c13c62fc6413cfbf35503cad1ae37ac7fa465dbdcaafac31df26fa81807bfcd46a425383511cb072d8d6145", @ANYRES64=r0, @ANYRES8=r1, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4044820}, 0x80) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r2 = socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) write$P9_RUNLINKAT(r5, &(0x7f00000002c0)={0x7, 0x4d, 0x2}, 0x7) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240820002000010000000000fddbdf250a2cc0d6d1000000000000010600000008000a0010000000"], 0x24}}, 0x4000040) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) getpeername$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) io_setup(0x202, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3401}}}, &(0x7f00000005c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000600)={0x7, 0x2, 0x2, 0x3ff, r6}, &(0x7f0000000640)=0x10) writev(0xffffffffffffffff, &(0x7f0000000680), 0x0) socket$netlink(0x10, 0x3, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000380)={0x1, {{0xa, 0x4e22, 0x4, @private1, 0x1}}}, 0x88) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 50.583348ms ago: executing program 6 (id=7554): r0 = creat(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES64=r1, @ANYRES8=r0, @ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRES64=r1], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fe880000000000000000000000000001ac1414aa000000000000000000000000000107944e23", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001c0001"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000280)={0x4, 0xb, 0x0, 0x8b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x4, 0x7c, 0x4}, 0xe) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000940)={r9, 0x1}, &(0x7f0000000dc0)=0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xe4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0xae36, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0xffffffff, 0x0, 0x10001}, 0x0, 0x7, 0xffffffffffffffff, 0xb) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYRES64=r10], &(0x7f0000000280)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd(0xffffffffffffffff, &(0x7f0000000340)={[0xbab]}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x702}, 0x10}, 0x1, 0x7}, 0x0) socket(0x200000000000011, 0x2, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 0s ago: executing program 2 (id=7555): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/108, 0x6c}, {0x0}], 0x2, &(0x7f0000000580)=""/30, 0x1e}, 0x10}], 0x1, 0x10000, 0x0) munlockall() getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) kernel console output (not intermixed with test programs): tx timeout [ 960.646069][T27695] loop2: p51 size 393216 extends beyond EOD, truncated [ 960.668551][T27695] loop2: p53 size 393216 extends beyond EOD, truncated [ 960.678464][T27695] loop2: p55 size 393216 extends beyond EOD, truncated [ 960.696207][T27695] loop2: p57 size 393216 extends beyond EOD, truncated [ 960.705561][T27695] loop2: p59 size 393216 extends beyond EOD, truncated [ 960.710038][T27705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.715980][T27695] loop2: p61 size 393216 extends beyond EOD, truncated [ 960.729065][T27695] loop2: p63 size 393216 extends beyond EOD, truncated [ 960.736989][T27695] loop2: p65 size 393216 extends beyond EOD, truncated [ 960.745043][T27695] loop2: p67 size 393216 extends beyond EOD, truncated [ 960.753271][T27695] loop2: p69 size 393216 extends beyond EOD, truncated [ 960.760531][T27705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.765367][T27695] loop2: p71 size 393216 extends beyond EOD, truncated [ 960.776325][T27695] loop2: p73 size 393216 extends beyond EOD, truncated [ 960.789215][T27703] bio_check_eod: 8 callbacks suppressed [ 960.789234][T27703] syz.3.7068: attempt to access beyond end of device [ 960.789234][T27703] loop3: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 960.808336][T27703] syz.3.7068: attempt to access beyond end of device [ 960.808336][T27703] loop3: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 960.825980][T27695] loop2: p75 size 393216 extends beyond EOD, truncated [ 960.833996][T27695] loop2: p77 size 393216 extends beyond EOD, truncated [ 960.840640][T27703] buffer_io_error: 6 callbacks suppressed [ 960.841314][T27703] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 960.849433][T27706] xt_hashlimit: size too large, truncated to 1048576 [ 960.863147][T27703] syz.3.7068: attempt to access beyond end of device [ 960.863147][T27703] loop3: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 960.863697][T27695] loop2: p79 size 393216 extends beyond EOD, [ 960.876652][T27703] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 960.891452][T27703] syz.3.7068: attempt to access beyond end of device [ 960.891452][T27703] loop3: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 960.896768][T27695] truncated [ 960.904906][T27703] Buffer I/O error on dev loop3, logical block 158, lost async page write [ 960.904940][T27703] syz.3.7068: attempt to access beyond end of device [ 960.904940][T27703] loop3: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 960.930294][T27695] loop2: p81 size 393216 extends beyond EOD, truncated [ 960.931528][T27703] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 960.950005][T27703] syz.3.7068: attempt to access beyond end of device [ 960.950005][T27703] loop3: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 960.960104][T27695] loop2: p83 size 393216 extends beyond EOD, truncated [ 960.974347][T27703] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 960.986151][T27703] syz.3.7068: attempt to access beyond end of device [ 960.986151][T27703] loop3: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 960.998731][T27695] loop2: p85 size 393216 extends beyond EOD, [ 961.000102][T27703] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 961.000814][T27695] truncated [ 961.006219][T27703] syz.3.7068: attempt to access beyond end of device [ 961.006219][T27703] loop3: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 961.035224][T27703] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 961.043806][T27703] syz.3.7068: attempt to access beyond end of device [ 961.043806][T27703] loop3: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 961.048992][T27695] loop2: p87 size 393216 extends beyond EOD, [ 961.057787][T27703] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 961.072047][T27695] truncated [ 961.087144][T27695] loop2: p89 size 393216 extends beyond EOD, truncated [ 961.101631][T27695] loop2: p91 size 393216 extends beyond EOD, truncated [ 961.120747][T27695] loop2: p93 size 393216 extends beyond EOD, truncated [ 961.133064][T27695] loop2: p95 size 393216 extends beyond EOD, truncated [ 961.141581][T27695] loop2: p97 size 393216 extends beyond EOD, truncated [ 961.149937][T27695] loop2: p99 size 393216 extends beyond EOD, truncated [ 961.158472][T27695] loop2: p101 size 393216 extends beyond EOD, truncated [ 961.166714][T27695] loop2: p103 size 393216 extends beyond EOD, truncated [ 961.174912][T27695] loop2: p105 size 393216 extends beyond EOD, truncated [ 961.183271][T27695] loop2: p107 size 393216 extends beyond EOD, truncated [ 961.191464][T27695] loop2: p109 size 393216 extends beyond EOD, truncated [ 961.199941][T27695] loop2: p111 size 393216 extends beyond EOD, truncated [ 961.209201][T27695] loop2: p113 size 393216 extends beyond EOD, truncated [ 961.218199][T27695] loop2: p115 size 393216 extends beyond EOD, truncated [ 961.226768][T27695] loop2: p117 size 393216 extends beyond EOD, truncated [ 961.235401][T27695] loop2: p119 size 393216 extends beyond EOD, truncated [ 961.244170][T27695] loop2: p121 size 393216 extends beyond EOD, truncated [ 961.252549][T27695] loop2: p123 size 393216 extends beyond EOD, truncated [ 961.261244][T27695] loop2: p125 size 393216 extends beyond EOD, truncated [ 961.272559][T27695] loop2: p127 size 393216 extends beyond EOD, truncated [ 961.281028][T27695] loop2: p129 size 393216 extends beyond EOD, truncated [ 961.289509][T27695] loop2: p131 size 393216 extends beyond EOD, truncated [ 961.298231][T27695] loop2: p133 size 393216 extends beyond EOD, truncated [ 961.307047][T27695] loop2: p135 size 393216 extends beyond EOD, truncated [ 961.315499][T27695] loop2: p137 size 393216 extends beyond EOD, truncated [ 961.324573][T27695] loop2: p139 size 393216 extends beyond EOD, truncated [ 961.333215][T27695] loop2: p141 size 393216 extends beyond EOD, truncated [ 961.341610][T27695] loop2: p143 size 393216 extends beyond EOD, truncated [ 961.350012][T27695] loop2: p145 size 393216 extends beyond EOD, truncated [ 961.358182][T27695] loop2: p147 size 393216 extends beyond EOD, truncated [ 961.366597][T27695] loop2: p149 size 393216 extends beyond EOD, truncated [ 961.374899][T27695] loop2: p151 size 393216 extends beyond EOD, truncated [ 961.388110][T27695] loop2: p153 size 393216 extends beyond EOD, truncated [ 961.397772][T27695] loop2: p155 size 393216 extends beyond EOD, truncated [ 961.407417][T27695] loop2: p157 size 393216 extends beyond EOD, truncated [ 961.416096][T27695] loop2: p159 size 393216 extends beyond EOD, truncated [ 961.424228][T27695] loop2: p161 size 393216 extends beyond EOD, truncated [ 961.432438][T27695] loop2: p163 size 393216 extends beyond EOD, truncated [ 961.440669][T27695] loop2: p165 size 393216 extends beyond EOD, truncated [ 961.448995][T27695] loop2: p167 size 393216 extends beyond EOD, truncated [ 961.457463][T27695] loop2: p169 size 393216 extends beyond EOD, truncated [ 961.465768][T27695] loop2: p171 size 393216 extends beyond EOD, truncated [ 961.474086][T27695] loop2: p173 size 393216 extends beyond EOD, truncated [ 961.482410][T27695] loop2: p175 size 393216 extends beyond EOD, truncated [ 961.490545][T27695] loop2: p177 size 393216 extends beyond EOD, truncated [ 961.500561][T27695] loop2: p179 size 393216 extends beyond EOD, truncated [ 961.509105][T27695] loop2: p181 size 393216 extends beyond EOD, truncated [ 961.517805][T27695] loop2: p183 size 393216 extends beyond EOD, truncated [ 961.526584][T27695] loop2: p185 size 393216 extends beyond EOD, truncated [ 961.534934][T27695] loop2: p187 size 393216 extends beyond EOD, truncated [ 961.543382][T27695] loop2: p189 size 393216 extends beyond EOD, truncated [ 961.551763][T27695] loop2: p191 size 393216 extends beyond EOD, truncated [ 961.560111][T27695] loop2: p193 size 393216 extends beyond EOD, truncated [ 961.568467][T27695] loop2: p195 size 393216 extends beyond EOD, truncated [ 961.576816][T27695] loop2: p197 size 393216 extends beyond EOD, truncated [ 961.585194][T27695] loop2: p199 size 393216 extends beyond EOD, truncated [ 961.593460][T27695] loop2: p201 size 393216 extends beyond EOD, truncated [ 961.601851][T27695] loop2: p203 size 393216 extends beyond EOD, truncated [ 961.610416][T27695] loop2: p205 size 393216 extends beyond EOD, truncated [ 961.619435][T27695] loop2: p207 size 393216 extends beyond EOD, truncated [ 961.627813][T27695] loop2: p209 size 393216 extends beyond EOD, truncated [ 961.636087][T27695] loop2: p211 size 393216 extends beyond EOD, truncated [ 961.644329][T27695] loop2: p213 size 393216 extends beyond EOD, truncated [ 961.652753][T27695] loop2: p215 size 393216 extends beyond EOD, truncated [ 961.660980][T27695] loop2: p217 size 393216 extends beyond EOD, truncated [ 961.671026][T27695] loop2: p219 size 393216 extends beyond EOD, truncated [ 961.679242][T27695] loop2: p221 size 393216 extends beyond EOD, truncated [ 961.687644][T27695] loop2: p223 size 393216 extends beyond EOD, truncated [ 961.695957][T27695] loop2: p225 size 393216 extends beyond EOD, truncated [ 961.704286][T27695] loop2: p227 size 393216 extends beyond EOD, truncated [ 961.712877][T27695] loop2: p229 size 393216 extends beyond EOD, truncated [ 961.721591][T27695] loop2: p231 size 393216 extends beyond EOD, truncated [ 961.730615][T27695] loop2: p233 size 393216 extends beyond EOD, truncated [ 961.738951][T27695] loop2: p235 size 393216 extends beyond EOD, truncated [ 961.747383][T27695] loop2: p237 size 393216 extends beyond EOD, truncated [ 961.755728][T27695] loop2: p239 size 393216 extends beyond EOD, truncated [ 961.764053][T27695] loop2: p241 size 393216 extends beyond EOD, truncated [ 961.772408][T27695] loop2: p243 size 393216 extends beyond EOD, truncated [ 961.780806][T27695] loop2: p245 size 393216 extends beyond EOD, truncated [ 961.789118][T27695] loop2: p247 size 393216 extends beyond EOD, truncated [ 961.797442][T27695] loop2: p249 size 393216 extends beyond EOD, truncated [ 961.805765][T27695] loop2: p251 size 393216 extends beyond EOD, truncated [ 961.814072][T27695] loop2: p253 size 393216 extends beyond EOD, truncated [ 961.822436][T27695] loop2: p255 size 393216 extends beyond EOD, truncated [ 961.882244][T27713] tipc: Enabling of bearer rejected, already enabled [ 961.963386][T27715] loop6: detected capacity change from 0 to 512 [ 962.006761][T16480] udevd[16480]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 962.009331][T16814] udevd[16814]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 962.027786][T16815] udevd[16815]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 962.036987][T27301] udevd[27301]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 962.042673][T27304] udevd[27304]: inotify_add_watch(7, /dev/loop2p10, 10) failed: No such file or directory [ 962.043306][T27302] udevd[27302]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 962.058366][T16474] udevd[16474]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 962.068934][T27306] udevd[27306]: inotify_add_watch(7, /dev/loop2p12, 10) failed: No such file or directory [ 962.078454][T27305] udevd[27305]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 962.087879][T16816] udevd[16816]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 962.132944][T27720] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7075'. [ 962.144458][T27722] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7071'. [ 962.262751][T27724] tipc: Enabling of bearer rejected, already enabled [ 962.458778][T27733] loop2: detected capacity change from 0 to 512 [ 962.545084][T27733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.566220][T27733] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.711264][T27741] loop0: detected capacity change from 0 to 512 [ 962.762134][T27741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.796756][T27741] ext4 filesystem being mounted at /229/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.820271][T27745] syz2: rxe_newlink: already configured on ip6_vti0 [ 962.963598][T27746] ip6_vti0 speed is unknown, defaulting to 1000 [ 963.214642][T27746] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.229839][T27746] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.254668][T27746] bridge_slave_0: entered allmulticast mode [ 963.272964][T27746] bridge_slave_0: entered promiscuous mode [ 963.291764][T25178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.306821][T27746] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.330068][T27746] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.353479][T27746] bridge_slave_1: entered allmulticast mode [ 963.373603][T27746] bridge_slave_1: entered promiscuous mode [ 963.381760][T27767] loop6: detected capacity change from 0 to 512 [ 963.439744][T27746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.478371][T27746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.517952][T27772] tipc: Enabling of bearer rejected, already enabled [ 963.553096][T27746] team0: Port device team_slave_0 added [ 963.569783][T27769] loop2: detected capacity change from 0 to 512 [ 963.578829][T27746] team0: Port device team_slave_1 added [ 963.654524][T27746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.671739][T27746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.700576][T23678] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.717658][T27746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.730852][T27746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.746594][T27746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.777429][T27746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.806856][T27746] hsr_slave_0: entered promiscuous mode [ 963.813085][T27746] hsr_slave_1: entered promiscuous mode [ 963.820198][T27746] debugfs: 'hsr0' already exists in 'hsr' [ 963.826233][T27746] Cannot create hsr debugfs directory [ 963.837783][T27778] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7088'. [ 963.856652][T27780] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7090'. [ 964.029238][T27746] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 964.041268][T27746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 964.049539][T27746] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 964.061195][T27746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 964.069987][T27746] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 964.082082][T27746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 964.090250][T27746] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 964.108778][T27746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 964.137319][T27790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7103'. [ 964.162222][T27790] tipc: Enabling of bearer rejected, already enabled [ 964.234910][T27746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.261502][T27746] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.381885][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.389052][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.423985][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.431209][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.449607][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 964.449628][ T28] audit: type=1400 audit(1779515921.054:5195): avc: denied { getopt } for pid=27792 comm="syz.6.7095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 964.476659][T27793] can0: slcan on ttyS3. [ 964.483586][T27806] loop0: detected capacity change from 0 to 512 [ 964.545670][ T28] audit: type=1400 audit(1779515921.144:5196): avc: denied { write } for pid=27808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 964.597254][T27823] loop2: detected capacity change from 0 to 512 [ 964.619221][T27823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.631861][T27791] can0 (unregistered): slcan off ttyS3. [ 964.645225][T27826] loop6: detected capacity change from 0 to 1024 [ 964.659185][T27823] ext4 filesystem being mounted at /173/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 964.670007][ T28] audit: type=1400 audit(1779515921.264:5197): avc: denied { write } for pid=27831 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 964.713239][T27828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7098'. [ 964.728362][T27826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 964.755620][T27826] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 964.837832][T27826] FAULT_INJECTION: forcing a failure. [ 964.837832][T27826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.902389][T27826] CPU: 0 UID: 0 PID: 27826 Comm: syz.6.7097 Tainted: G W syzkaller #0 PREEMPT(full) [ 964.902429][T27826] Tainted: [W]=WARN [ 964.902439][T27826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 964.902461][T27826] Call Trace: [ 964.902469][T27826] [ 964.902477][T27826] __dump_stack+0x1d/0x30 [ 964.902558][T27826] dump_stack_lvl+0x95/0xd0 [ 964.902588][T27826] dump_stack+0x15/0x1b [ 964.902616][T27826] should_fail_ex+0x263/0x280 [ 964.902659][T27826] should_fail+0xb/0x20 [ 964.902691][T27826] should_fail_usercopy+0x1a/0x20 [ 964.902813][T27826] _copy_from_user+0x1c/0xb0 [ 964.902848][T27826] ipv6_flowlabel_opt+0xa3/0x1a00 [ 964.902894][T27826] ? lockref_put_return+0xf7/0x130 [ 964.903018][T27826] ? __rcu_read_unlock+0x4e/0x70 [ 964.903090][T27826] ? terminate_walk+0x1e6/0x210 [ 964.903116][T27826] ? path_openat+0x1ab2/0x2050 [ 964.903167][T27826] ? lock_sock_nested+0x84/0x110 [ 964.903261][T27826] do_ipv6_setsockopt+0xb4e/0x2130 [ 964.903372][T27826] ? kstrtoull+0x111/0x140 [ 964.903407][T27826] ? avc_has_perm_noaudit+0xab/0x130 [ 964.903452][T27826] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 964.903491][T27826] ipv6_setsockopt+0x59/0x130 [ 964.903601][T27826] udpv6_setsockopt+0x89/0xa0 [ 964.903649][T27826] sock_common_setsockopt+0x69/0x80 [ 964.903696][T27826] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 964.903808][T27826] __sys_setsockopt+0x184/0x200 [ 964.903840][T27826] __x64_sys_setsockopt+0x64/0x80 [ 964.903938][T27826] x64_sys_call+0x2327/0x3020 [ 964.904067][T27826] do_syscall_64+0x12c/0x3b0 [ 964.904110][T27826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.904134][T27826] RIP: 0033:0x7fdcdab2ce59 [ 964.904190][T27826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.904261][T27826] RSP: 002b:00007fdcd957f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 964.904304][T27826] RAX: ffffffffffffffda RBX: 00007fdcdada5fa0 RCX: 00007fdcdab2ce59 [ 964.904320][T27826] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 964.904334][T27826] RBP: 00007fdcd957f090 R08: 0000000000000020 R09: 0000000000000000 [ 964.904348][T27826] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 964.904407][T27826] R13: 00007fdcdada6038 R14: 00007fdcdada5fa0 R15: 00007ffe89761a38 [ 964.904437][T27826] [ 965.187428][T27746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.204108][T26821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 965.252465][T27866] FAULT_INJECTION: forcing a failure. [ 965.252465][T27866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.272871][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7105'. [ 965.310668][ T28] audit: type=1400 audit(1779515921.914:5198): avc: denied { write } for pid=27840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.314718][T27866] CPU: 1 UID: 0 PID: 27866 Comm: syz.6.7104 Tainted: G W syzkaller #0 PREEMPT(full) [ 965.314829][T27866] Tainted: [W]=WARN [ 965.314850][T27866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 965.314952][T27866] Call Trace: [ 965.314981][T27866] [ 965.315018][T27866] __dump_stack+0x1d/0x30 [ 965.315129][T27866] dump_stack_lvl+0x95/0xd0 [ 965.315192][T27866] dump_stack+0x15/0x1b [ 965.315306][T27866] should_fail_ex+0x263/0x280 [ 965.315455][T27866] should_fail+0xb/0x20 [ 965.315536][T27866] should_fail_usercopy+0x1a/0x20 [ 965.315635][T27866] _copy_from_user+0x1c/0xb0 [ 965.315745][T27866] get_user_ifreq+0x52/0x110 [ 965.315897][T27866] sock_ioctl+0x54e/0x610 [ 965.315998][T27866] ? __pfx_sock_ioctl+0x10/0x10 [ 965.316113][T27866] __se_sys_ioctl+0xce/0x140 [ 965.316214][T27866] __x64_sys_ioctl+0x43/0x50 [ 965.316353][T27866] x64_sys_call+0x1563/0x3020 [ 965.316448][T27866] do_syscall_64+0x12c/0x3b0 [ 965.316613][T27866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.316685][T27866] RIP: 0033:0x7fdcdab2ce59 [ 965.316807][T27866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.316879][T27866] RSP: 002b:00007fdcd957f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.316949][T27866] RAX: ffffffffffffffda RBX: 00007fdcdada5fa0 RCX: 00007fdcdab2ce59 [ 965.316991][T27866] RDX: 0000200000000380 RSI: 00000000000089f0 RDI: 0000000000000003 [ 965.317033][T27866] RBP: 00007fdcd957f090 R08: 0000000000000000 R09: 0000000000000000 [ 965.317082][T27866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.317172][T27866] R13: 00007fdcdada6038 R14: 00007fdcdada5fa0 R15: 00007ffe89761a38 [ 965.317234][T27866] [ 965.549552][ T28] audit: type=1400 audit(1779515922.144:5199): avc: denied { write } for pid=27873 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 965.591661][T27876] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7106'. [ 965.686784][T27746] veth0_vlan: entered promiscuous mode [ 965.700593][T27746] veth1_vlan: entered promiscuous mode [ 965.717157][T27746] veth0_macvtap: entered promiscuous mode [ 965.723430][T25178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.729297][T27746] veth1_macvtap: entered promiscuous mode [ 965.791741][T27746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.816359][T27746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.830885][T27888] syz2: rxe_newlink: already configured on ip6_vti0 [ 965.839544][T27885] loop2: detected capacity change from 0 to 512 [ 965.848941][ T2044] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.857843][ T2044] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.891486][ T2044] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.917800][T27887] loop6: detected capacity change from 0 to 512 [ 965.935121][ T2044] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.950933][T27885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.980398][T27885] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 966.035208][ T28] audit: type=1400 audit(1779515922.634:5200): avc: denied { write } for pid=27884 comm="syz.2.7107" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 966.095771][T21674] IPVS: starting estimator thread 0... [ 966.189131][T27898] IPVS: using max 2304 ests per chain, 115200 per kthread [ 966.289814][T27902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.303407][T27902] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 966.430178][T27897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.442704][T27897] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 966.560985][T27746] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.654570][T27919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.665175][T27919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.680358][T25178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.750693][T27925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7115'. [ 966.776089][T27923] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7117'. [ 966.787114][T27925] tipc: Enabling of bearer rejected, already enabled [ 967.065228][T26821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.195204][T27940] set_capacity_and_notify: 3 callbacks suppressed [ 967.195227][T27940] loop7: detected capacity change from 0 to 512 [ 967.209145][T27937] ip6gre1: left promiscuous mode [ 967.258501][ T28] audit: type=1326 audit(1779515923.864:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27944 comm="syz.0.7134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfd9fce59 code=0x7ffc0000 [ 967.291879][ T28] audit: type=1326 audit(1779515923.864:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27944 comm="syz.0.7134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfd9fce59 code=0x7ffc0000 [ 967.324878][ T28] audit: type=1326 audit(1779515923.874:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27944 comm="syz.0.7134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfd9fce59 code=0x7ffc0000 [ 967.350919][ T28] audit: type=1326 audit(1779515923.874:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27944 comm="syz.0.7134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfd9fce59 code=0x7ffc0000 [ 967.398692][T27950] __nla_validate_parse: 1 callbacks suppressed [ 967.398712][T27950] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7126'. [ 967.420482][T27948] loop7: detected capacity change from 0 to 512 [ 967.474442][T27955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7128'. [ 967.491466][T27955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7128'. [ 967.508947][T27943] loop2: detected capacity change from 0 to 512 [ 967.529893][T27950] loop6: detected capacity change from 0 to 8192 [ 967.553221][T27955] xt_CT: No such helper "snmp_trap" [ 967.592087][T27943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.604707][T27943] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.620332][T27963] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 967.879689][T25178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.881578][T27965] loop3: detected capacity change from 0 to 512 [ 967.912935][T27965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.938590][T27965] ext4 filesystem being mounted at /207/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.953454][T27971] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7132'. [ 968.003642][T27973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7133'. [ 968.014647][T27973] tipc: Started in network mode [ 968.019564][T27973] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 968.026781][T27973] tipc: Enabled bearer , priority 10 [ 968.139022][T27978] loop7: detected capacity change from 0 to 764 [ 968.154020][T27977] Symlink component flag not implemented [ 968.160627][T27977] Symlink component flag not implemented (15) [ 968.244797][T27982] loop7: detected capacity change from 0 to 512 [ 968.440624][T27987] loop0: detected capacity change from 0 to 512 [ 968.450102][T27990] ip6_vti0 speed is unknown, defaulting to 1000 [ 968.473316][T27994] loop6: detected capacity change from 0 to 512 [ 968.566827][T27997] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7141'. [ 968.580977][T27998] cgroup: Invalid name [ 968.646927][T27997] loop6: detected capacity change from 0 to 8192 [ 968.673891][T28002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7143'. [ 968.876765][T23936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.936567][T28013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7145'. [ 968.947740][T28011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7146'. [ 968.960165][T28011] tipc: Enabling of bearer rejected, already enabled [ 968.972667][T28009] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7144'. [ 968.991392][T21666] tipc: Node number set to 8432298 [ 969.079757][T28021] tipc: Enabling of bearer rejected, already enabled [ 969.122785][T28023] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 969.157427][T28023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.168062][T28023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.178259][T28023] bond0 (unregistering): Released all slaves [ 969.285427][T27107] kernel read not supported for file bpf-prog (pid: 27107 comm: kworker/0:20) [ 969.426426][T28039] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 969.433899][T28039] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 969.633332][T28047] loop3: p1 [ 969.639008][T28047] loop3: p1 size 5119 extends beyond EOD, truncated [ 969.688765][T28047] ip6_vti0 speed is unknown, defaulting to 1000 [ 969.788436][T28055] tipc: Enabling of bearer rejected, already enabled [ 969.908399][T28059] tipc: Enabling of bearer rejected, already enabled [ 970.138165][T28071] syz2: rxe_newlink: already configured on ip6_vti0 [ 970.512288][T28087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.552677][T28087] ext4 filesystem being mounted at /191/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 970.732755][T28093] xt_socket: unknown flags 0x48 [ 970.918859][T28101] tipc: Enabling of bearer rejected, already enabled [ 970.939193][T28103] FAULT_INJECTION: forcing a failure. [ 970.939193][T28103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.953425][T28103] CPU: 1 UID: 0 PID: 28103 Comm: syz.3.7179 Tainted: G W syzkaller #0 PREEMPT(full) [ 970.953468][T28103] Tainted: [W]=WARN [ 970.953520][T28103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 970.953534][T28103] Call Trace: [ 970.953539][T28103] [ 970.953547][T28103] __dump_stack+0x1d/0x30 [ 970.953637][T28103] dump_stack_lvl+0x95/0xd0 [ 970.953659][T28103] dump_stack+0x15/0x1b [ 970.953678][T28103] should_fail_ex+0x263/0x280 [ 970.953718][T28103] should_fail+0xb/0x20 [ 970.953748][T28103] should_fail_usercopy+0x1a/0x20 [ 970.953805][T28103] _copy_to_user+0x20/0xa0 [ 970.953846][T28103] simple_read_from_buffer+0xb5/0x130 [ 970.953900][T28103] proc_fail_nth_read+0x10e/0x150 [ 970.953936][T28103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.954000][T28103] vfs_read+0x1ab/0x7f0 [ 970.954035][T28103] ? __rcu_read_unlock+0x4e/0x70 [ 970.954058][T28103] ? __fget_files+0x184/0x1c0 [ 970.954078][T28103] ? mutex_lock+0x57/0x90 [ 970.954102][T28103] ksys_read+0xdc/0x1a0 [ 970.954176][T28103] __x64_sys_read+0x40/0x50 [ 970.954208][T28103] x64_sys_call+0x2886/0x3020 [ 970.954318][T28103] do_syscall_64+0x12c/0x3b0 [ 970.954360][T28103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.954389][T28103] RIP: 0033:0x7fd3a8d1d68e [ 970.954460][T28103] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 970.954479][T28103] RSP: 002b:00007fd3a77aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 970.954524][T28103] RAX: ffffffffffffffda RBX: 00007fd3a77af6c0 RCX: 00007fd3a8d1d68e [ 970.954540][T28103] RDX: 000000000000000f RSI: 00007fd3a77af0a0 RDI: 0000000000000004 [ 970.954557][T28103] RBP: 00007fd3a77af090 R08: 0000000000000000 R09: 0000000000000000 [ 970.954573][T28103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.954589][T28103] R13: 00007fd3a8fd6038 R14: 00007fd3a8fd5fa0 R15: 00007ffe6984a2a8 [ 970.954614][T28103] [ 971.316148][T28107] gretap1: entered allmulticast mode [ 971.391460][T28109] tipc: Enabling of bearer rejected, already enabled [ 971.445906][T25178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.630935][T28124] syz.0.7189: attempt to access beyond end of device [ 971.630935][T28124] loop0: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 971.644556][T28124] syz.0.7189: attempt to access beyond end of device [ 971.644556][T28124] loop0: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 971.681073][T28124] Buffer I/O error on dev loop0, logical block 156, lost async page write [ 971.689645][T28124] syz.0.7189: attempt to access beyond end of device [ 971.689645][T28124] loop0: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 971.717703][T28124] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 971.728288][T28124] syz.0.7189: attempt to access beyond end of device [ 971.728288][T28124] loop0: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 971.746435][T28129] xt_hashlimit: size too large, truncated to 1048576 [ 971.752692][T28124] Buffer I/O error on dev loop0, logical block 158, lost async page write [ 971.761763][T28124] syz.0.7189: attempt to access beyond end of device [ 971.761763][T28124] loop0: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 971.775238][T28124] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 971.783773][T28124] syz.0.7189: attempt to access beyond end of device [ 971.783773][T28124] loop0: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 971.798786][T28124] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 971.838754][T28132] syz.7.7190: attempt to access beyond end of device [ 971.838754][T28132] loop7: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 971.857089][T28124] syz.0.7189: attempt to access beyond end of device [ 971.857089][T28124] loop0: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 971.866576][T28132] syz.7.7190: attempt to access beyond end of device [ 971.866576][T28132] loop7: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 971.906604][T28132] Buffer I/O error on dev loop7, logical block 156, lost async page write [ 971.921293][T28132] syz.7.7190: attempt to access beyond end of device [ 971.921293][T28132] loop7: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 971.936537][T28124] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 971.967114][T28132] Buffer I/O error on dev loop7, logical block 157, lost async page write [ 972.006345][T28124] Buffer I/O error on dev loop0, logical block 150, lost async page write [ 972.015884][T28132] Buffer I/O error on dev loop7, logical block 158, lost async page write [ 972.081616][T28133] xt_hashlimit: size too large, truncated to 1048576 [ 972.157173][T28141] ip6_vti0 speed is unknown, defaulting to 1000 [ 972.220757][T28143] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 972.329640][T28145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28145 comm=syz.2.7193 [ 972.356294][T28145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=28145 comm=syz.2.7193 [ 972.788700][T28153] __nla_validate_parse: 16 callbacks suppressed [ 972.788716][T28153] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7195'. [ 972.804979][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7196'. [ 972.838007][T28158] tipc: Enabling of bearer rejected, already enabled [ 972.877979][T28153] set_capacity_and_notify: 9 callbacks suppressed [ 972.878002][T28153] loop0: detected capacity change from 0 to 8192 [ 972.976789][T28156] loop7: detected capacity change from 0 to 2048 [ 973.057996][T28156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.071052][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 973.071098][ T28] audit: type=1400 audit(1779515929.654:5256): avc: denied { write } for pid=28155 comm="syz.7.7197" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 973.103572][T28156] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 973.123430][T28156] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 973.135739][T28156] EXT4-fs (loop7): This should not happen!! Data will be lost [ 973.135739][T28156] [ 973.155257][T28156] EXT4-fs (loop7): Total free blocks count 0 [ 973.161412][T28156] EXT4-fs (loop7): Free/Dirty block details [ 973.161796][ T28] audit: type=1400 audit(1779515929.694:5257): avc: denied { remount } for pid=28155 comm="syz.7.7197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 973.167459][T28156] EXT4-fs (loop7): free_blocks=2415919504 [ 973.195684][T28156] EXT4-fs (loop7): dirty_blocks=48 [ 973.200950][T28156] EXT4-fs (loop7): Block reservation details [ 973.207050][T28156] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 973.213874][T28160] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 973.249102][ T28] audit: type=1400 audit(1779515929.854:5258): avc: denied { write } for pid=28155 comm="syz.7.7197" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 973.281792][ T28] audit: type=1400 audit(1779515929.854:5259): avc: denied { write } for pid=28155 comm="syz.7.7197" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 973.358777][T28168] loop2: detected capacity change from 0 to 512 [ 973.392878][T28168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.411806][T27746] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 973.445662][T28168] ext4 filesystem being mounted at /195/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 973.589241][T28176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7202'. [ 973.600803][T28181] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7204'. [ 973.617147][T28176] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 973.655916][T28187] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7206'. [ 973.684616][T28187] loop6: detected capacity change from 0 to 128 [ 973.724223][T28194] loop0: detected capacity change from 0 to 512 [ 973.747310][T28187] xt_hashlimit: size too large, truncated to 1048576 [ 973.762499][T28195] SELinux: security_context_str_to_sid () failed with errno=-22 [ 973.797636][T28191] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7208'. [ 973.815231][T28191] gretap0: entered promiscuous mode [ 973.823891][T28194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.844997][T28194] ext4 filesystem being mounted at /254/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 973.888499][T28191] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7208'. [ 973.919017][T28191] 0ªî{X¹¦: renamed from gretap0 [ 973.931847][T28191] 0ªî{X¹¦: left promiscuous mode [ 973.936970][T28191] 0ªî{X¹¦: entered allmulticast mode [ 973.949446][T28191] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 974.228121][ T35] IPVS: starting estimator thread 0... [ 974.242274][T28207] IPVS: nq: FWM 3 0x00000003 - no destination available [ 974.271659][T25178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.405900][T28208] IPVS: using max 2304 ests per chain, 115200 per kthread [ 974.513684][T28219] loop7: detected capacity change from 0 to 512 [ 974.615745][T28229] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 974.649159][T28228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7217'. [ 974.675582][T28235] FAULT_INJECTION: forcing a failure. [ 974.675582][T28235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.702325][T28235] CPU: 0 UID: 0 PID: 28235 Comm: syz.6.7219 Tainted: G W syzkaller #0 PREEMPT(full) [ 974.702358][T28235] Tainted: [W]=WARN [ 974.702365][T28235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 974.702380][T28235] Call Trace: [ 974.702388][T28235] [ 974.702445][T28235] __dump_stack+0x1d/0x30 [ 974.702471][T28235] dump_stack_lvl+0x95/0xd0 [ 974.702491][T28235] dump_stack+0x15/0x1b [ 974.702509][T28235] should_fail_ex+0x263/0x280 [ 974.702600][T28235] should_fail+0xb/0x20 [ 974.702624][T28235] should_fail_usercopy+0x1a/0x20 [ 974.702699][T28235] _copy_from_user+0x1c/0xb0 [ 974.702731][T28235] __copy_msghdr+0x244/0x300 [ 974.702765][T28235] ___sys_sendmsg+0x10c/0x1e0 [ 974.702949][T28235] __x64_sys_sendmsg+0xd4/0x160 [ 974.702988][T28235] x64_sys_call+0x194c/0x3020 [ 974.703019][T28235] do_syscall_64+0x12c/0x3b0 [ 974.703052][T28235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.703108][T28235] RIP: 0033:0x7fdcdab2ce59 [ 974.703128][T28235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.703151][T28235] RSP: 002b:00007fdcd957f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.703192][T28235] RAX: ffffffffffffffda RBX: 00007fdcdada5fa0 RCX: 00007fdcdab2ce59 [ 974.703210][T28235] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 974.703226][T28235] RBP: 00007fdcd957f090 R08: 0000000000000000 R09: 0000000000000000 [ 974.703242][T28235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.703255][T28235] R13: 00007fdcdada6038 R14: 00007fdcdada5fa0 R15: 00007ffe89761a38 [ 974.703343][T28235] [ 974.747781][T28228] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 974.884527][T23678] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.906178][T28237] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 974.938440][T28237] loop6: detected capacity change from 0 to 128 [ 974.982149][T28241] loop7: detected capacity change from 0 to 512 [ 975.129320][T28239] loop0: detected capacity change from 0 to 512 [ 975.206992][T28237] xt_hashlimit: size too large, truncated to 1048576 [ 975.234072][T28249] FAULT_INJECTION: forcing a failure. [ 975.234072][T28249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.247181][T28249] CPU: 1 UID: 0 PID: 28249 Comm: syz.3.7224 Tainted: G W syzkaller #0 PREEMPT(full) [ 975.247223][T28249] Tainted: [W]=WARN [ 975.247277][T28249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 975.247294][T28249] Call Trace: [ 975.247304][T28249] [ 975.247316][T28249] __dump_stack+0x1d/0x30 [ 975.247347][T28249] dump_stack_lvl+0x95/0xd0 [ 975.247424][T28249] dump_stack+0x15/0x1b [ 975.247451][T28249] should_fail_ex+0x263/0x280 [ 975.247489][T28249] should_fail+0xb/0x20 [ 975.247578][T28249] should_fail_usercopy+0x1a/0x20 [ 975.247631][T28249] _copy_to_user+0x20/0xa0 [ 975.247734][T28249] simple_read_from_buffer+0xb5/0x130 [ 975.247779][T28249] proc_fail_nth_read+0x10e/0x150 [ 975.247814][T28249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 975.247887][T28249] vfs_read+0x1ab/0x7f0 [ 975.247924][T28249] ? __rcu_read_unlock+0x4e/0x70 [ 975.247945][T28249] ? __fget_files+0x184/0x1c0 [ 975.248031][T28249] ? mutex_lock+0x57/0x90 [ 975.248094][T28249] ksys_read+0xdc/0x1a0 [ 975.248130][T28249] __x64_sys_read+0x40/0x50 [ 975.248193][T28249] x64_sys_call+0x2886/0x3020 [ 975.248226][T28249] do_syscall_64+0x12c/0x3b0 [ 975.248310][T28249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.248394][T28249] RIP: 0033:0x7fd3a8d1d68e [ 975.248416][T28249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 975.248441][T28249] RSP: 002b:00007fd3a778dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 975.248464][T28249] RAX: ffffffffffffffda RBX: 00007fd3a778e6c0 RCX: 00007fd3a8d1d68e [ 975.248477][T28249] RDX: 000000000000000f RSI: 00007fd3a778e0a0 RDI: 0000000000000005 [ 975.248490][T28249] RBP: 00007fd3a778e090 R08: 0000000000000000 R09: 0000000000000000 [ 975.248558][T28249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.248574][T28249] R13: 00007fd3a8fd6128 R14: 00007fd3a8fd6090 R15: 00007ffe6984a2a8 [ 975.248600][T28249] [ 975.576005][T28248] loop0: detected capacity change from 512 to 8 [ 975.634480][T28253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7225'. [ 975.883140][T28270] program syz.0.7234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 975.898953][T28263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.937290][T28263] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 976.054367][ T28] audit: type=1400 audit(1779515932.654:5260): avc: denied { read } for pid=28260 comm="syz.6.7231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 976.088326][ T28] audit: type=1400 audit(1779515932.664:5261): avc: denied { execute } for pid=28260 comm="syz.6.7231" name="file0" dev="ramfs" ino=104826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 976.160566][T28280] netlink: 'syz.7.7238': attribute type 3 has an invalid length. [ 976.171576][T28280] netlink: 'syz.7.7238': attribute type 3 has an invalid length. [ 976.179474][T28280] netlink: 'syz.7.7238': attribute type 3 has an invalid length. [ 976.187401][T28280] netlink: 'syz.7.7238': attribute type 3 has an invalid length. [ 976.195417][T28280] netlink: 'syz.7.7238': attribute type 3 has an invalid length. [ 976.204102][T28282] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7237'. [ 976.218140][T28280] netlink: 'syz.7.7238': attribute type 3 has an invalid length. [ 976.231663][T28280] netlink: 'syz.7.7238': attribute type 3 has an invalid length. [ 976.244696][T28280] netlink: 'syz.7.7238': attribute type 3 has an invalid length. [ 976.265982][T28280] netlink: 'syz.7.7238': attribute type 3 has an invalid length. [ 976.273796][T28280] netlink: 'syz.7.7238': attribute type 3 has an invalid length. [ 976.624753][T28291] ALSA: seq fatal error: cannot create timer (-19) [ 976.668573][T28291] tipc: Enabled bearer , priority 0 [ 976.693515][T26821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.795630][T28291] syzkaller0: entered promiscuous mode [ 976.801601][T28291] syzkaller0: entered allmulticast mode [ 976.809993][T28291] tipc: Resetting bearer [ 976.909472][T28306] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 976.918196][T28290] tipc: Resetting bearer [ 976.949414][T28290] tipc: Disabling bearer [ 977.055125][T28313] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 977.086317][T28315] 9p: Bad value for 'rfdno' [ 977.151362][T28315] sctp: [Deprecated]: syz.6.7250 (pid 28315) Use of int in max_burst socket option. [ 977.151362][T28315] Use struct sctp_assoc_value instead [ 977.175716][T28322] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 977.273937][T28324] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 977.295356][T28324] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.328857][T28331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.357534][ T28] audit: type=1400 audit(1779515933.954:5262): avc: denied { write } for pid=28330 comm="syz.3.7257" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 977.389778][T28329] ip6_vti0 speed is unknown, defaulting to 1000 [ 977.435282][ T28] audit: type=1400 audit(1779515934.034:5263): avc: denied { map } for pid=28330 comm="syz.3.7257" path="/231/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 977.459714][ T28] audit: type=1400 audit(1779515934.034:5264): avc: denied { write } for pid=28330 comm="syz.3.7257" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 977.558351][T23936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.611459][T27746] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 977.639132][T27746] EXT4-fs error (device loop7): htree_dirblock_to_tree:1051: inode #2: comm syz-executor: Directory block failed checksum [ 977.734758][T27983] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 977.801152][T28350] __nla_validate_parse: 5 callbacks suppressed [ 977.801196][T28350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7263'. [ 977.877756][T28351] FAULT_INJECTION: forcing a failure. [ 977.877756][T28351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.892451][T28351] CPU: 0 UID: 0 PID: 28351 Comm: syz.6.7261 Tainted: G W syzkaller #0 PREEMPT(full) [ 977.892489][T28351] Tainted: [W]=WARN [ 977.892498][T28351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 977.892515][T28351] Call Trace: [ 977.892522][T28351] [ 977.892532][T28351] __dump_stack+0x1d/0x30 [ 977.892601][T28351] dump_stack_lvl+0x95/0xd0 [ 977.892621][T28351] dump_stack+0x15/0x1b [ 977.892658][T28351] should_fail_ex+0x263/0x280 [ 977.892748][T28351] should_fail+0xb/0x20 [ 977.892800][T28351] should_fail_usercopy+0x1a/0x20 [ 977.892838][T28351] _copy_from_user+0x1c/0xb0 [ 977.892878][T28351] __sys_bpf+0x183/0x7e0 [ 977.892944][T28351] __x64_sys_bpf+0x41/0x50 [ 977.892973][T28351] x64_sys_call+0x10cb/0x3020 [ 977.893009][T28351] do_syscall_64+0x12c/0x3b0 [ 977.893042][T28351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.893141][T28351] RIP: 0033:0x7fdcdab2ce59 [ 977.893156][T28351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.893174][T28351] RSP: 002b:00007fdcd953d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 977.893246][T28351] RAX: ffffffffffffffda RBX: 00007fdcdada6180 RCX: 00007fdcdab2ce59 [ 977.893265][T28351] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 977.893282][T28351] RBP: 00007fdcd953d090 R08: 0000000000000000 R09: 0000000000000000 [ 977.893299][T28351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.893315][T28351] R13: 00007fdcdada6218 R14: 00007fdcdada6180 R15: 00007ffe89761a38 [ 977.893398][T28351] [ 978.833886][T28355] 9p: Bad value for 'rfdno' [ 979.339850][T28360] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.7266'. [ 979.900554][T28364] FAULT_INJECTION: forcing a failure. [ 979.900554][T28364] name failslab, interval 1, probability 0, space 0, times 0 [ 980.375249][T28364] CPU: 0 UID: 0 PID: 28364 Comm: syz.3.7269 Tainted: G W syzkaller #0 PREEMPT(full) [ 980.375360][T28364] Tainted: [W]=WARN [ 980.375367][T28364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 980.375384][T28364] Call Trace: [ 980.375392][T28364] [ 980.375401][T28364] __dump_stack+0x1d/0x30 [ 980.375500][T28364] dump_stack_lvl+0x95/0xd0 [ 980.375577][T28364] dump_stack+0x15/0x1b [ 980.375602][T28364] should_fail_ex+0x263/0x280 [ 980.375635][T28364] ? kzalloc_noprof+0x52/0xa0 [ 980.375693][T28364] should_failslab+0x8c/0xb0 [ 980.375734][T28364] __kmalloc_cache_noprof+0x5f/0x400 [ 980.375776][T28364] kzalloc_noprof+0x52/0xa0 [ 980.375815][T28364] ip6_setup_cork+0x35e/0x680 [ 980.375922][T28364] ip6_append_data+0x11f/0x1d0 [ 980.375945][T28364] ? __pfx_raw6_getfrag+0x10/0x10 [ 980.375975][T28364] rawv6_sendmsg+0x108b/0x1230 [ 980.376018][T28364] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 980.376126][T28364] inet_sendmsg+0xc5/0xd0 [ 980.376163][T28364] ? __pfx_inet_sendmsg+0x10/0x10 [ 980.376196][T28364] ____sys_sendmsg+0x519/0x5b0 [ 980.376306][T28364] ___sys_sendmsg+0x195/0x1e0 [ 980.376332][T28364] ? path_openat+0x1b01/0x2050 [ 980.376422][T28364] __sys_sendmmsg+0x185/0x320 [ 980.376468][T28364] __x64_sys_sendmmsg+0x57/0x70 [ 980.376503][T28364] x64_sys_call+0x27aa/0x3020 [ 980.376550][T28364] do_syscall_64+0x12c/0x3b0 [ 980.376592][T28364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.376619][T28364] RIP: 0033:0x7fd3a8d5ce59 [ 980.376638][T28364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.376677][T28364] RSP: 002b:00007fd3a77af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 980.376696][T28364] RAX: ffffffffffffffda RBX: 00007fd3a8fd5fa0 RCX: 00007fd3a8d5ce59 [ 980.376714][T28364] RDX: 0000000000000001 RSI: 0000200000002240 RDI: 0000000000000004 [ 980.376731][T28364] RBP: 00007fd3a77af090 R08: 0000000000000000 R09: 0000000000000000 [ 980.376765][T28364] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000001 [ 980.376777][T28364] R13: 00007fd3a8fd6038 R14: 00007fd3a8fd5fa0 R15: 00007ffe6984a2a8 [ 980.376834][T28364] [ 980.892947][T28369] bond0: option lacp_rate: invalid value (43) [ 980.907287][T28369] bond0 (unregistering): Released all slaves [ 980.938063][T28363] set_capacity_and_notify: 5 callbacks suppressed [ 980.938082][T28363] loop0: detected capacity change from 0 to 512 [ 981.117693][T28374] ip6_vti0 speed is unknown, defaulting to 1000 [ 981.156863][T15397] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.192898][T28389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7275'. [ 981.215992][T15397] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.266799][ T28] audit: type=1400 audit(1779515937.874:5265): avc: denied { setattr } for pid=28390 comm="syz.6.7276" name="RDS" dev="sockfs" ino=105054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 981.311776][T15397] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.418643][T15397] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.436253][T28380] loop0: detected capacity change from 0 to 65536 [ 981.461583][T28403] loop6: detected capacity change from 0 to 512 [ 981.515120][T28403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.532316][T28409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7273'. [ 981.546830][T28403] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 981.607286][T15397] bridge_slave_1: left allmulticast mode [ 981.616604][T15397] bridge_slave_1: left promiscuous mode [ 981.622450][T15397] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.632153][ T28] audit: type=1400 audit(1779515938.234:5266): avc: denied { write } for pid=28402 comm="syz.6.7280" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 981.654577][T15397] bridge_slave_0: left allmulticast mode [ 981.660725][T15397] bridge_slave_0: left promiscuous mode [ 981.666746][T15397] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.708392][ T28] audit: type=1400 audit(1779515938.314:5267): avc: denied { write } for pid=28402 comm="syz.6.7280" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 981.779557][T26821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.840814][T28416] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7284'. [ 981.880937][T28416] loop6: detected capacity change from 0 to 128 [ 981.911143][T28421] loop3: detected capacity change from 0 to 512 [ 981.921238][T15397] tipc: Disabling bearer [ 981.938856][T15397] tipc: Left network mode [ 981.944850][T28421] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 981.981576][T28374] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.982738][T28421] EXT4-fs (loop3): 1 truncate cleaned up [ 981.990181][T28374] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.001916][T28374] bridge_slave_0: entered allmulticast mode [ 982.013386][T28374] bridge_slave_0: entered promiscuous mode [ 982.037701][T28416] bio_check_eod: 26 callbacks suppressed [ 982.037726][T28416] syz.6.7284: attempt to access beyond end of device [ 982.037726][T28416] loop6: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 982.041774][T28421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 982.043560][T28416] syz.6.7284: attempt to access beyond end of device [ 982.043560][T28416] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 982.082307][T28416] buffer_io_error: 22 callbacks suppressed [ 982.082332][T28416] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 982.105655][T28416] syz.6.7284: attempt to access beyond end of device [ 982.105655][T28416] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 982.121916][T28416] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 982.133065][T28416] syz.6.7284: attempt to access beyond end of device [ 982.133065][T28416] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 982.153753][ T28] audit: type=1400 audit(1779515938.754:5268): avc: denied { write } for pid=28420 comm="syz.3.7285" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 982.177816][T28416] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 982.190534][T15397] hsr_slave_0: left promiscuous mode [ 982.191606][T28433] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7286'. [ 982.205969][T28416] syz.6.7284: attempt to access beyond end of device [ 982.205969][T28416] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 982.217972][T15397] hsr_slave_1: left promiscuous mode [ 982.224835][T28416] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 982.233403][ T28] audit: type=1400 audit(1779515938.814:5269): avc: denied { write } for pid=28420 comm="syz.3.7285" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 982.244733][T15397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.256285][ T28] audit: type=1400 audit(1779515938.814:5270): avc: denied { lock } for pid=28420 comm="syz.3.7285" path="/242/file1/cpuset.effective_mems" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 982.273634][T28430] xt_hashlimit: size too large, truncated to 1048576 [ 982.288854][T28416] syz.6.7284: attempt to access beyond end of device [ 982.288854][T28416] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 982.326504][T28416] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 982.330082][T15397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.350790][T28416] syz.6.7284: attempt to access beyond end of device [ 982.350790][T28416] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 982.383333][T15397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.392730][T28438] loop2: detected capacity change from 0 to 8192 [ 982.401117][T15397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.409416][T28416] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 982.422624][T28416] syz.6.7284: attempt to access beyond end of device [ 982.422624][T28416] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 982.443547][T15397] veth1_macvtap: left promiscuous mode [ 982.444748][ T28] audit: type=1400 audit(1779515939.044:5271): avc: denied { write } for pid=28423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.459990][T15397] veth0_macvtap: left promiscuous mode [ 982.491981][T23936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.506513][T28416] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 982.535324][ T28] audit: type=1400 audit(1779515939.124:5272): avc: denied { write } for pid=28444 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.541221][T15397] veth1_vlan: left promiscuous mode [ 982.604989][T28416] syz.6.7284: attempt to access beyond end of device [ 982.604989][T28416] loop6: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 982.624663][T28416] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 982.632988][T15397] veth0_vlan: left promiscuous mode [ 982.652113][T28449] loop3: detected capacity change from 0 to 512 [ 982.879020][T28455] loop3: detected capacity change from 0 to 256 [ 982.910667][T15397] team0 (unregistering): Port device team_slave_1 removed [ 982.930210][T28455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7289'. [ 982.940816][T15397] team0 (unregistering): Port device team_slave_0 removed [ 983.007547][T28458] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 983.045834][T28458] FAT-fs (loop3): Filesystem has been set read-only [ 983.068236][ T28] audit: type=1400 audit(1779515939.674:5273): avc: denied { append } for pid=28459 comm="syz.6.7291" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 983.121216][T28374] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.128402][T28374] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.135706][T28374] bridge_slave_1: entered allmulticast mode [ 983.143940][T28374] bridge_slave_1: entered promiscuous mode [ 983.161547][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 983.168416][T28463] loop0: detected capacity change from 0 to 512 [ 983.235720][T28374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.263383][T28374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.286404][T28374] team0: Port device team_slave_0 added [ 983.293989][T28374] team0: Port device team_slave_1 added [ 983.301388][T28468] loop0: detected capacity change from 0 to 512 [ 983.352959][T28374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.373692][T28374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.403601][T28374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.416728][T28468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.427423][T28374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.444863][T28374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.470566][T28468] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 983.495208][T28374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.535474][ T28] audit: type=1400 audit(1779515940.134:5274): avc: denied { write } for pid=28467 comm="syz.0.7293" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 983.560812][T28374] hsr_slave_0: entered promiscuous mode [ 983.576616][T28374] hsr_slave_1: entered promiscuous mode [ 983.586991][T28374] debugfs: 'hsr0' already exists in 'hsr' [ 983.593003][T28374] Cannot create hsr debugfs directory [ 983.747187][T15397] IPVS: stop unused estimator thread 0... [ 983.773228][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 983.841922][T28502] EXT4-fs: Ignoring removed orlov option [ 983.877939][T28502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.914718][T28374] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 983.927944][T28374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 983.939303][T28374] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 983.948398][T28374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 983.956354][T28374] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 983.979462][T28374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 983.989540][T28374] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 984.003370][T28374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 984.030551][T23678] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.115519][T28517] syz2: rxe_newlink: already configured on ip6_vti0 [ 984.138354][T28374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.167245][T28374] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.747140][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.754274][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.765827][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.772954][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.850159][T26821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.869461][T28374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 984.939669][T28528] validate_nla: 42 callbacks suppressed [ 984.939704][T28528] netlink: 'syz.0.7302': attribute type 17 has an invalid length. [ 984.955013][T21666] hid (null): report_id 3511357295 is invalid [ 984.973413][T21666] hid-generic 0000:0012:0009.0002: report_id 3511357295 is invalid [ 984.989786][T21666] hid-generic 0000:0012:0009.0002: item 0 4 1 8 parsing failed [ 985.001151][T21666] hid-generic 0000:0012:0009.0002: probe with driver hid-generic failed with error -22 [ 985.254366][T28546] program syz.6.7305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 985.501855][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 985.529057][ T49] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 985.692390][T28374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.738411][T28573] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7309'. [ 985.845598][T28576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.872082][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 985.879115][T28576] ext4 filesystem being mounted at /207/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.095579][T28374] veth0_vlan: entered promiscuous mode [ 986.133733][T28374] veth1_vlan: entered promiscuous mode [ 986.178846][T28374] veth0_macvtap: entered promiscuous mode [ 986.284728][T28374] veth1_macvtap: entered promiscuous mode [ 986.307713][T28609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=28609 comm=syz.6.7312 [ 986.325867][T28374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.338409][T28374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.366706][T21297] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.375708][T21297] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.385437][T21297] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.405287][T21297] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.423998][T28612] set_capacity_and_notify: 4 callbacks suppressed [ 986.424097][T28612] loop6: detected capacity change from 0 to 128 [ 986.606468][T25178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.659928][T28612] syz.6.7313: attempt to access beyond end of device [ 986.659928][T28612] loop6: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 986.682263][T28612] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 986.692374][T28612] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 986.774004][T28628] loop3: detected capacity change from 0 to 512 [ 986.805105][T28628] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 986.816947][T28612] xt_hashlimit: size too large, truncated to 1048576 [ 986.833196][T28628] EXT4-fs (loop3): 1 truncate cleaned up [ 986.840162][T28632] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7321'. [ 986.851365][T28628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.887980][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 986.887997][ T28] audit: type=1400 audit(1779515943.494:5283): avc: denied { write } for pid=28626 comm="syz.3.7319" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 986.927154][T28635] loop2: detected capacity change from 0 to 128 [ 987.087857][ T28] audit: type=1400 audit(1779515943.694:5284): avc: denied { write } for pid=28626 comm="syz.3.7319" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 987.140916][T28635] bio_check_eod: 8 callbacks suppressed [ 987.140933][T28635] syz.2.7322: attempt to access beyond end of device [ 987.140933][T28635] loop2: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 987.158106][ T28] audit: type=1400 audit(1779515943.724:5285): avc: denied { write } for pid=28626 comm="syz.3.7319" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 987.160624][T28635] syz.2.7322: attempt to access beyond end of device [ 987.160624][T28635] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 987.188547][ T28] audit: type=1400 audit(1779515943.724:5286): avc: denied { write } for pid=28626 comm="syz.3.7319" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 987.195878][T28635] buffer_io_error: 6 callbacks suppressed [ 987.195920][T28635] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 987.239348][T28635] syz.2.7322: attempt to access beyond end of device [ 987.239348][T28635] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 987.252941][T28635] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 987.255486][T23936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.261516][T28635] syz.2.7322: attempt to access beyond end of device [ 987.261516][T28635] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 987.273593][T28652] xt_hashlimit: size too large, truncated to 1048576 [ 987.300268][T28635] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 987.309019][T28635] syz.2.7322: attempt to access beyond end of device [ 987.309019][T28635] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 987.323165][T28635] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 987.331944][T28635] syz.2.7322: attempt to access beyond end of device [ 987.331944][T28635] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 987.345463][T28635] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 987.354768][T28635] syz.2.7322: attempt to access beyond end of device [ 987.354768][T28635] loop2: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 987.368635][T28635] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 987.377197][T28635] syz.2.7322: attempt to access beyond end of device [ 987.377197][T28635] loop2: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 987.391919][T28635] Buffer I/O error on dev loop2, logical block 150, lost async page write [ 987.422815][T28635] syz.2.7322: attempt to access beyond end of device [ 987.422815][T28635] loop2: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 987.454777][T28635] Buffer I/O error on dev loop2, logical block 151, lost async page write [ 987.523553][T28662] loop3: detected capacity change from 0 to 512 [ 987.678124][T28671] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7334'. [ 987.711461][T28671] loop2: detected capacity change from 0 to 8192 [ 988.480983][T28690] loop6: detected capacity change from 0 to 512 [ 988.619313][T28698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.629603][T28698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.242618][T28719] syzkaller1: entered promiscuous mode [ 989.260930][T28719] syzkaller1: entered allmulticast mode [ 989.464737][T28732] loop0: detected capacity change from 0 to 128 [ 989.481515][T28732] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 989.499985][T28732] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 989.511203][ T28] audit: type=1400 audit(1779515946.084:5287): avc: denied { write } for pid=28731 comm="syz.0.7352" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 989.543840][T28732] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 989.553500][T28732] block device autoloading is deprecated and will be removed. [ 989.582264][ T28] audit: type=1400 audit(1779515946.084:5288): avc: denied { write } for pid=23678 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 989.583341][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 989.619460][ T28] audit: type=1400 audit(1779515946.084:5289): avc: denied { unlink } for pid=23678 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 989.624374][T23678] EXT4-fs error (device loop0): ext4_readdir:225: inode #11: comm syz-executor: path /277/mnt/lost+found: directory fails checksum at offset 1024 [ 989.669890][T23678] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 989.669901][ T28] audit: type=1400 audit(1779515946.254:5290): avc: denied { write } for pid=23678 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 989.709797][T28738] loop3: detected capacity change from 0 to 512 [ 989.723717][T28738] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.7354: corrupted in-inode xattr: invalid ea_ino [ 989.750258][T28738] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 989.750561][T28738] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.7354: couldn't read orphan inode 15 (err -117) [ 989.774363][T28738] loop3: lost filesystem error report for type 5 error -117 [ 989.774964][T28738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.797284][T23678] EXT4-fs error (device loop0): ext4_readdir:225: inode #11: comm syz-executor: path /277/mnt/lost+found: directory fails checksum at offset 1024 [ 989.812590][ T28] audit: type=1400 audit(1779515946.404:5291): avc: denied { write } for pid=23678 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 989.820720][T28738] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.7354: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 989.834727][ T28] audit: type=1400 audit(1779515946.404:5292): avc: denied { write } for pid=28737 comm="syz.3.7354" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 989.834880][T23678] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 989.890150][T23678] EXT4-fs error (device loop0): ext4_readdir:225: inode #11: comm syz-executor: path /277/mnt/lost+found: directory fails checksum at offset 1024 [ 989.907099][T23678] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 989.920654][T23678] EXT4-fs error (device loop0): ext4_readdir:225: inode #11: comm syz-executor: path /277/mnt/lost+found: directory fails checksum at offset 1024 [ 989.936391][T23678] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 989.949960][T23678] EXT4-fs error (device loop0): ext4_readdir:225: inode #11: comm syz-executor: path /277/mnt/lost+found: directory fails checksum at offset 1024 [ 989.967353][T23678] EXT4-fs error (device loop0): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 989.982311][T23936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.025144][T28741] loop3: detected capacity change from 0 to 128 [ 990.042304][T28741] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 990.055396][T28720] FAULT_INJECTION: forcing a failure. [ 990.055396][T28720] name fail_futex, interval 1, probability 0, space 0, times 1 [ 990.069560][T28720] CPU: 1 UID: 0 PID: 28720 Comm: syz.6.7348 Tainted: G W syzkaller #0 PREEMPT(full) [ 990.069599][T28720] Tainted: [W]=WARN [ 990.069608][T28720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 990.069624][T28720] Call Trace: [ 990.069633][T28720] [ 990.069677][T28720] __dump_stack+0x1d/0x30 [ 990.069702][T28720] dump_stack_lvl+0x95/0xd0 [ 990.069806][T28720] dump_stack+0x15/0x1b [ 990.069891][T28720] should_fail_ex+0x263/0x280 [ 990.069926][T28720] should_fail+0xb/0x20 [ 990.069957][T28720] get_futex_key+0x12f/0xb50 [ 990.070025][T28720] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 990.070061][T28720] ? __pfx_woken_wake_function+0x10/0x10 [ 990.070086][T28720] futex_wake+0x84/0x380 [ 990.070106][T28720] ? perf_lock_task_context+0x25a/0x2d0 [ 990.070210][T28720] do_futex+0x323/0x380 [ 990.070333][T28720] mm_release+0x9f/0x180 [ 990.070357][T28720] exit_mm_release+0x25/0x30 [ 990.070382][T28720] exit_mm+0x38/0x1f0 [ 990.070416][T28720] do_exit+0x442/0x1530 [ 990.070449][T28720] do_group_exit+0xfe/0x140 [ 990.070474][T28720] ? get_signal+0xe28/0xf20 [ 990.070508][T28720] get_signal+0xe30/0xf20 [ 990.070559][T28720] arch_do_signal_or_restart+0x96/0x480 [ 990.070592][T28720] exit_to_user_mode_loop+0x6f/0x820 [ 990.070612][T28720] ? ksys_write+0x194/0x1a0 [ 990.070653][T28720] do_syscall_64+0x232/0x3b0 [ 990.070686][T28720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.070707][T28720] RIP: 0033:0x7fdcdab2ce59 [ 990.070732][T28720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.070754][T28720] RSP: 002b:00007fdcd955e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 990.070773][T28720] RAX: fffffffffffffe00 RBX: 00007fdcdada6090 RCX: 00007fdcdab2ce59 [ 990.070820][T28720] RDX: 00000000fffffd9d RSI: 0000200000000200 RDI: 0000000000000007 [ 990.070837][T28720] RBP: 00007fdcd955e090 R08: 0000000000000000 R09: 0000000000000000 [ 990.070854][T28720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.070870][T28720] R13: 00007fdcdada6128 R14: 00007fdcdada6090 R15: 00007ffe89761a38 [ 990.070896][T28720] [ 990.072565][T28741] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 990.377905][T28741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7355'. [ 990.564046][T23936] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 990.634160][T26563] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 991.011475][T28754] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7361'. [ 991.094662][T28758] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7362'. [ 991.103739][T28758] netlink: 43 bytes leftover after parsing attributes in process `syz.6.7362'. [ 991.121298][T28758] netlink: 'syz.6.7362': attribute type 5 has an invalid length. [ 991.131136][T28758] netlink: 43 bytes leftover after parsing attributes in process `syz.6.7362'. [ 991.191005][T28761] netlink: 'syz.6.7363': attribute type 10 has an invalid length. [ 991.257362][T28764] netlink: 10 bytes leftover after parsing attributes in process `syz.8.7364'. [ 991.334563][T28768] macsec1: entered promiscuous mode [ 991.356897][T28768] dummy0: entered promiscuous mode [ 991.378474][T28768] macsec1: entered allmulticast mode [ 991.395574][T28768] dummy0: entered allmulticast mode [ 991.408933][T28768] dummy0: left allmulticast mode [ 991.432569][ T35] dummy0: left promiscuous mode [ 991.439829][T28771] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7366'. [ 991.449380][T28771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.492196][T28771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.591000][ T2044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.693021][ T2044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.769070][ T2044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.819346][T28778] ip6_vti0 speed is unknown, defaulting to 1000 [ 991.922756][ T2044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.989485][T28778] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.997208][T28778] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.004768][T28778] bridge_slave_0: entered allmulticast mode [ 992.011689][T28778] bridge_slave_0: entered promiscuous mode [ 992.020626][T28778] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.028015][T28778] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.035373][T28778] bridge_slave_1: entered allmulticast mode [ 992.042103][T28778] bridge_slave_1: entered promiscuous mode [ 992.079430][T28778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.090491][T28778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.122086][T28800] tmpfs: Bad value for 'mpol' [ 992.148140][T28778] team0: Port device team_slave_0 added [ 992.174700][T28778] team0: Port device team_slave_1 added [ 992.230291][T28778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.246464][T28778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.282795][T28778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.294888][T28778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.303035][T28778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.330418][T28778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.349390][ T2044] bridge_slave_1: left allmulticast mode [ 992.355395][ T2044] bridge_slave_1: left promiscuous mode [ 992.372514][ T2044] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.380918][ T2044] bridge_slave_0: left allmulticast mode [ 992.387762][ T2044] bridge_slave_0: left promiscuous mode [ 992.393543][ T2044] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.481266][T28803] syzkaller1: entered allmulticast mode [ 992.538619][T28778] hsr_slave_0: entered promiscuous mode [ 992.551140][T28778] hsr_slave_1: entered promiscuous mode [ 992.563778][T28778] debugfs: 'hsr0' already exists in 'hsr' [ 992.576885][T28778] Cannot create hsr debugfs directory [ 992.766944][T28778] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 992.783234][T28778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 992.799771][T28778] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 992.818387][T28778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 992.829961][T28836] tipc: Started in network mode [ 992.835073][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 992.835088][ T28] audit: type=1400 audit(1779515949.424:5393): avc: denied { write } for pid=28822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 992.865179][T28836] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 992.873390][T28836] tipc: Enabled bearer , priority 10 [ 992.880448][T28778] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 992.891463][ T28] audit: type=1400 audit(1779515949.494:5394): avc: denied { write } for pid=28841 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 992.929134][T28778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 992.952443][T28778] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 992.959942][ T28] audit: type=1326 audit(1779515949.554:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28845 comm="syz.2.7380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539251ce59 code=0x7ffc0000 [ 992.989838][T28846] FAULT_INJECTION: forcing a failure. [ 992.989838][T28846] name failslab, interval 1, probability 0, space 0, times 0 [ 993.008250][T28778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 993.015418][T28848] loop6: detected capacity change from 0 to 512 [ 993.023715][T28846] CPU: 1 UID: 0 PID: 28846 Comm: syz.2.7380 Tainted: G W syzkaller #0 PREEMPT(full) [ 993.023808][T28846] Tainted: [W]=WARN [ 993.023817][T28846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 993.023830][T28846] Call Trace: [ 993.023838][T28846] [ 993.023846][T28846] __dump_stack+0x1d/0x30 [ 993.023879][T28846] dump_stack_lvl+0x95/0xd0 [ 993.023905][T28846] dump_stack+0x15/0x1b [ 993.023987][T28846] should_fail_ex+0x263/0x280 [ 993.024023][T28846] should_failslab+0x8c/0xb0 [ 993.024054][T28846] kmem_cache_alloc_noprof+0x66/0x3f0 [ 993.024099][T28846] ? audit_log_start+0x34c/0x730 [ 993.024148][T28846] audit_log_start+0x34c/0x730 [ 993.024182][T28846] audit_seccomp+0x47/0x100 [ 993.024207][T28846] ? __seccomp_filter+0x8db/0x1350 [ 993.024324][T28846] __seccomp_filter+0x8ec/0x1350 [ 993.024364][T28846] ? __rcu_read_unlock+0x4e/0x70 [ 993.024393][T28846] ? __se_sys_setitimer+0x107/0x360 [ 993.024440][T28846] __secure_computing+0x81/0x150 [ 993.024477][T28846] do_syscall_64+0xce/0x3b0 [ 993.024568][T28846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.024598][T28846] RIP: 0033:0x7f53924dd68e [ 993.024614][T28846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 993.024632][T28846] RSP: 002b:00007f5390f76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 993.024651][T28846] RAX: ffffffffffffffda RBX: 00007f5390f776c0 RCX: 00007f53924dd68e [ 993.024689][T28846] RDX: 000000000000000f RSI: 00007f5390f770a0 RDI: 0000000000000004 [ 993.024705][T28846] RBP: 00007f5390f77090 R08: 0000000000000000 R09: 0000000000000000 [ 993.024720][T28846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.024736][T28846] R13: 00007f5392796038 R14: 00007f5392795fa0 R15: 00007fff9a61a408 [ 993.024761][T28846] [ 993.027621][T28846] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 993.043665][ T28] audit: type=1326 audit(1779515949.554:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28845 comm="syz.2.7380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539251ce59 code=0x7ffc0000 [ 993.054648][T28846] audit: out of memory in audit_log_start [ 993.060152][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 993.070377][ T28] audit: type=1326 audit(1779515949.554:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28845 comm="syz.2.7380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539251ce59 code=0x7ffc0000 [ 993.202200][T28848] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 993.203909][ T28] audit: type=1326 audit(1779515949.564:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28845 comm="syz.2.7380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f539251ce59 code=0x7ffc0000 [ 993.213218][T28848] EXT4-fs (loop6): orphan cleanup on readonly fs [ 993.214262][ T28] audit: type=1326 audit(1779515949.594:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28845 comm="syz.2.7380" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539251ce59 code=0x7ffc0000 [ 993.238346][T28848] Quota error (device loop6): dq_insert_tree: Quota tree root isn't allocated! [ 993.360683][T28848] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.7381: Failed to acquire dquot type 1 [ 993.372681][T28848] loop6: lost filesystem error report for type 5 error -5 [ 993.373167][T28848] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7381: bg 0: block 40: padding at end of block bitmap is not set [ 993.380371][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 993.380413][ C1] EXT4-fs (loop6): initial error at time 1779515949: ext4_acquire_dquot:7034 [ 993.380432][ C1] EXT4-fs (loop6): last error at time 1779515949: ext4_acquire_dquot:7034 [ 993.419041][T28848] loop6: lost filesystem error report for type 5 error -117 [ 993.419901][T28848] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 993.437326][T28848] loop6: lost filesystem error report for type 5 error -117 [ 993.450412][ T2044] tipc: Disabling bearer [ 993.456127][T28848] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #16: comm syz.6.7381: data will be lost [ 993.461109][T28868] No such timeout policy "syz1" [ 993.472258][T28848] EXT4-fs (loop6): 1 truncate cleaned up [ 993.486580][ T2044] tipc: Left network mode [ 993.508615][T28848] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 993.543293][T28778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.575187][T26821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.591708][T28778] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.611445][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.618586][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.627221][T28874] loop3: detected capacity change from 0 to 512 [ 993.633830][T28874] EXT4-fs: Ignoring removed bh option [ 993.639432][T28874] EXT4-fs: inline encryption not supported [ 993.645297][ T2044] hsr_slave_0: left promiscuous mode [ 993.650857][T28874] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 993.674263][ T2044] hsr_slave_1: left promiscuous mode [ 993.684541][ T2044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.691964][ T2044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.706885][ T2044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.720527][ T2044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.748162][ T2044] veth1_macvtap: left promiscuous mode [ 993.754296][T28874] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 993.764007][ T2044] veth0_macvtap: left promiscuous mode [ 993.769390][T28874] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7386: bg 0: block 248: padding at end of block bitmap is not set [ 993.784740][ T2044] veth1_vlan: left promiscuous mode [ 993.794134][T28874] loop3: lost filesystem error report for type 5 error -117 [ 993.794463][T28874] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.7386: Failed to acquire dquot type 1 [ 993.799654][ T2044] veth0_vlan: left promiscuous mode [ 993.802200][T28874] loop3: lost filesystem error report for type 5 error -28 [ 993.827599][T28874] EXT4-fs (loop3): 1 truncate cleaned up [ 993.848826][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 993.855322][ C0] EXT4-fs (loop3): last error at time 1779515950: ext4_acquire_dquot:7034 [ 993.880065][T28874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 993.953603][ T2044] team0 (unregistering): Port device team_slave_1 removed [ 993.963710][ T2044] team0 (unregistering): Port device team_slave_0 removed [ 994.013415][T23936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 994.070256][T21667] tipc: Node number set to 8432298 [ 994.076481][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 994.088628][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.095797][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.117511][T28904] tmpfs: Bad value for 'mpol' [ 994.263411][T28923] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 994.284708][ T2044] IPVS: stop unused estimator thread 0... [ 994.429488][T28928] bridge0: port 3(gretap0) entered blocking state [ 994.438477][T28928] bridge0: port 3(gretap0) entered disabled state [ 994.447504][T28923] xt_hashlimit: size too large, truncated to 1048576 [ 994.455195][T28928] gretap0: entered allmulticast mode [ 994.467267][T28928] gretap0: entered promiscuous mode [ 994.479800][T28928] bridge0: port 3(gretap0) entered blocking state [ 994.486401][T28928] bridge0: port 3(gretap0) entered forwarding state [ 994.515003][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 994.529304][T28778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.805160][T28966] loop2: detected capacity change from 0 to 1024 [ 994.807392][T28959] loop6: detected capacity change from 0 to 512 [ 994.849340][T28959] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7398: corrupted in-inode xattr: invalid ea_ino [ 994.867530][T28959] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 994.868035][T28966] EXT4-fs: Ignoring removed bh option [ 994.868035][T28959] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7398: couldn't read orphan inode 15 (err -117) [ 994.877282][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 994.877319][ C1] EXT4-fs (loop6): initial error at time 1779515951: ext4_iget_extra_inode:5128: inode 15 [ 994.877398][ C1] EXT4-fs (loop6): last error at time 1779515951: ext4_iget_extra_inode:5128: inode 15 [ 994.885622][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 994.896844][T28959] loop6: lost filesystem error report for type 5 error -117 [ 994.939862][T28959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.973297][T28966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.054123][T28778] veth0_vlan: entered promiscuous mode [ 995.068185][T28980] loop3: detected capacity change from 0 to 1024 [ 995.091853][T28980] EXT4-fs: Ignoring removed i_version option [ 995.091895][T28980] EXT4-fs: inline encryption not supported [ 995.091915][T28980] EXT4-fs: dax option not supported [ 995.114096][T28778] veth1_vlan: entered promiscuous mode [ 995.162297][T28778] veth0_macvtap: entered promiscuous mode [ 995.211451][T28778] veth1_macvtap: entered promiscuous mode [ 995.215433][T25178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.346955][T28778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.358962][T28778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.394403][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.422823][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.483033][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.521126][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.601570][T26821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.684111][T29009] bridge0: port 3(gretap0) entered blocking state [ 995.703966][T29009] bridge0: port 3(gretap0) entered disabled state [ 995.710665][T29009] gretap0: entered allmulticast mode [ 995.716661][T29009] gretap0: entered promiscuous mode [ 995.722189][T29009] bridge0: port 3(gretap0) entered blocking state [ 995.728713][T29009] bridge0: port 3(gretap0) entered forwarding state [ 995.736439][T28989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7400'. [ 995.759270][T28989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7400'. [ 996.036873][T29036] tmpfs: Bad value for 'mpol' [ 996.298612][T29040] loop3: detected capacity change from 0 to 128 [ 996.648977][T29042] netlink: 'syz.9.7409': attribute type 32 has an invalid length. [ 996.661640][T29051] loop6: detected capacity change from 0 to 128 [ 996.686999][T29042] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7409'. [ 996.747457][T29042] bond1: option coupled_control: invalid value (46) [ 996.758725][T29056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7412'. [ 996.784875][T29042] bond1 (unregistering): Released all slaves [ 996.942610][T29064] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45591 sclass=netlink_xfrm_socket pid=29064 comm=syz.3.7414 [ 997.023835][T29057] xt_hashlimit: size too large, truncated to 1048576 [ 997.048395][T29070] tipc: Enabling of bearer rejected, already enabled [ 997.093168][T29076] loop3: detected capacity change from 0 to 128 [ 997.128668][T29076] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 997.174361][T29076] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 997.241523][T23936] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 997.420350][T29051] syz.6.7411: attempt to access beyond end of device [ 997.420350][T29051] loop6: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 997.461328][T29051] syz.6.7411: attempt to access beyond end of device [ 997.461328][T29051] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 997.477517][T29051] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 997.497904][T29051] syz.6.7411: attempt to access beyond end of device [ 997.497904][T29051] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 997.517720][T29051] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 997.526280][T29051] syz.6.7411: attempt to access beyond end of device [ 997.526280][T29051] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 997.539900][T29051] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 997.548483][T29051] syz.6.7411: attempt to access beyond end of device [ 997.548483][T29051] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 997.562044][T29051] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 997.570582][T29051] syz.6.7411: attempt to access beyond end of device [ 997.570582][T29051] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 997.583974][T29051] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 997.592656][T29051] syz.6.7411: attempt to access beyond end of device [ 997.592656][T29051] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 997.606067][T29051] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 997.614683][T29051] syz.6.7411: attempt to access beyond end of device [ 997.614683][T29051] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 997.640824][T29051] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 997.664972][T29051] syz.6.7411: attempt to access beyond end of device [ 997.664972][T29051] loop6: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 997.701282][T29051] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 997.770275][T29085] xt_TPROXY: Can be used only with -p tcp or -p udp [ 997.838263][T29087] ALSA: seq fatal error: cannot create timer (-19) [ 997.886159][T29087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7419'. [ 997.921109][T29087] tipc: Enabled bearer , priority 0 [ 997.943614][T29115] loop6: detected capacity change from 0 to 512 [ 997.974874][T29086] tipc: Disabling bearer [ 998.027704][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 998.027718][ T28] audit: type=1400 audit(1779515954.634:5434): avc: denied { write } for pid=29103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.075892][T29127] ALSA: seq fatal error: cannot create timer (-19) [ 998.087905][T29127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7430'. [ 998.110159][ T28] audit: type=1400 audit(1779515954.714:5435): avc: denied { write } for pid=29135 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.194588][T29127] syzkaller0: entered promiscuous mode [ 998.200112][T29127] syzkaller0: entered allmulticast mode [ 998.206755][T29141] tipc: Enabling of bearer rejected, already enabled [ 998.216599][T29142] loop3: detected capacity change from 0 to 128 [ 998.249402][T29142] syz.3.7433: attempt to access beyond end of device [ 998.249402][T29142] loop3: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 998.262994][T29142] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 998.271566][T29142] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 998.294633][T29142] xt_hashlimit: size too large, truncated to 1048576 [ 998.366485][ T28] audit: type=1400 audit(1779515954.964:5436): avc: denied { write } for pid=29145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.411130][ T28] audit: type=1400 audit(1779515955.014:5437): avc: denied { write } for pid=29159 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.611143][T29180] loop2: detected capacity change from 0 to 256 [ 998.638483][T29180] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 998.655002][T29177] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7440'. [ 998.708255][ T28] audit: type=1400 audit(1779515955.314:5438): avc: denied { connect } for pid=29176 comm="syz.8.7440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 998.742845][ T28] audit: type=1400 audit(1779515955.334:5439): avc: denied { write } for pid=29163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.800232][ T28] audit: type=1400 audit(1779515955.394:5440): avc: denied { write } for pid=29199 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.824913][T29177] syzkaller0: entered promiscuous mode [ 998.831102][T29177] syzkaller0: entered allmulticast mode [ 998.943104][T29213] ALSA: seq fatal error: cannot create timer (-19) [ 998.951880][T29213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7444'. [ 998.963703][ T28] audit: type=1400 audit(1779515955.564:5441): avc: denied { write } for pid=29203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 998.973615][T29213] tipc: Enabled bearer , priority 0 [ 998.998559][T29212] tipc: Disabling bearer [ 999.021354][ T28] audit: type=1400 audit(1779515955.624:5442): avc: denied { write } for pid=29222 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 999.073550][T29228] loop3: detected capacity change from 0 to 512 [ 999.083164][T29228] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 999.100130][T29228] EXT4-fs (loop3): 1 truncate cleaned up [ 999.107332][T29228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.142960][ T28] audit: type=1400 audit(1779515955.744:5443): avc: denied { write } for pid=29226 comm="syz.3.7446" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 999.189546][T29228] ip6_vti0 speed is unknown, defaulting to 1000 [ 999.280912][T29248] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7447'. [ 999.336557][T29256] loop2: detected capacity change from 0 to 512 [ 999.343385][T23936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.381092][T29256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 999.428434][T29256] ext4 filesystem being mounted at /238/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 999.516812][T29272] loop3: detected capacity change from 0 to 512 [ 999.554970][T29275] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 999.612281][T29280] netlink: 14 bytes leftover after parsing attributes in process `syz.9.7454'. [ 999.691623][T29288] xt_TPROXY: Can be used only with -p tcp or -p udp [ 999.766992][T29280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.789480][T29294] tmpfs: Bad value for 'mpol' [ 999.799090][T29295] loop3: detected capacity change from 0 to 1024 [ 999.845230][T29295] EXT4-fs: Ignoring removed orlov option [ 999.852960][T29280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.867597][T29280] bond0 (unregistering): Released all slaves [ 999.883238][T29295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.940048][T12960] syz1: Port: 1 Link DOWN [ 999.965408][T23936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.975741][T29300] loop6: detected capacity change from 0 to 8192 [ 1000.073809][T29313] ALSA: seq fatal error: cannot create timer (-19) [ 1000.117059][T29313] syzkaller0: entered promiscuous mode [ 1000.122584][T29313] syzkaller0: entered allmulticast mode [ 1000.326722][T25178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.740142][T29347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=29347 comm=syz.2.7467 [ 1000.847950][T29347] loop2: detected capacity change from 0 to 8192 [ 1001.054447][T29366] loop6: detected capacity change from 0 to 512 [ 1001.099232][T29366] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.164021][T29366] ext4 filesystem being mounted at /142/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.225305][T29364] ALSA: seq fatal error: cannot create timer (-19) [ 1001.275694][T29364] __nla_validate_parse: 2 callbacks suppressed [ 1001.275735][T29364] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7472'. [ 1001.438994][T29386] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7479'. [ 1001.485511][T29386] loop3: detected capacity change from 0 to 8192 [ 1002.120574][T26821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.375430][T29406] xt_hashlimit: size too large, truncated to 1048576 [ 1003.065072][T29392] Set syz1 is full, maxelem 65536 reached [ 1003.218468][T29439] netlink: 14 bytes leftover after parsing attributes in process `syz.9.7495'. [ 1003.234330][T29437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.273495][T29437] ext4 filesystem being mounted at /246/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.593309][T29446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.607033][T29446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.833063][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1003.833078][ T28] audit: type=1400 audit(1779515960.434:5458): avc: denied { read } for pid=29452 comm="syz.6.7499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1003.947392][T29461] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1004.108021][T29463] xt_hashlimit: size too large, truncated to 1048576 [ 1004.192518][T29465] ip6_vti0 speed is unknown, defaulting to 1000 [ 1004.208114][T25178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.299625][T29471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7503'. [ 1004.350364][T29471] tipc: Enabling of bearer rejected, already enabled [ 1004.584220][T29478] netlink: 92 bytes leftover after parsing attributes in process `syz.8.7506'. [ 1004.593335][T29478] netlink: 92 bytes leftover after parsing attributes in process `syz.8.7506'. [ 1004.610820][ T28] audit: type=1400 audit(1779515961.174:5459): avc: denied { create } for pid=29479 comm="syz.9.7505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 1004.634010][ T28] audit: type=1400 audit(1779515961.174:5460): avc: denied { create } for pid=29479 comm="syz.9.7505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 1004.656813][ T28] audit: type=1400 audit(1779515961.174:5461): avc: denied { create } for pid=29479 comm="syz.9.7505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 1004.678532][ T28] audit: type=1400 audit(1779515961.174:5462): avc: denied { write } for pid=29479 comm="syz.9.7505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 1004.686581][T29483] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7505'. [ 1004.712566][T29482] FAULT_INJECTION: forcing a failure. [ 1004.712566][T29482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.726985][T29482] CPU: 0 UID: 0 PID: 29482 Comm: syz.8.7507 Tainted: G W syzkaller #0 PREEMPT(full) [ 1004.727019][T29482] Tainted: [W]=WARN [ 1004.727038][T29482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1004.727135][T29482] Call Trace: [ 1004.727146][T29482] [ 1004.727157][T29482] __dump_stack+0x1d/0x30 [ 1004.727189][T29482] dump_stack_lvl+0x95/0xd0 [ 1004.727218][T29482] dump_stack+0x15/0x1b [ 1004.727299][T29482] should_fail_ex+0x263/0x280 [ 1004.727350][T29482] should_fail+0xb/0x20 [ 1004.727384][T29482] should_fail_usercopy+0x1a/0x20 [ 1004.727417][T29482] _copy_from_user+0x1c/0xb0 [ 1004.727467][T29482] ____sys_sendmsg+0x1e2/0x5b0 [ 1004.727500][T29482] ___sys_sendmsg+0x195/0x1e0 [ 1004.727533][T29482] ? path_openat+0x1b01/0x2050 [ 1004.727643][T29482] __sys_sendmmsg+0x185/0x320 [ 1004.727693][T29482] __x64_sys_sendmmsg+0x57/0x70 [ 1004.727757][T29482] x64_sys_call+0x27aa/0x3020 [ 1004.727790][T29482] do_syscall_64+0x12c/0x3b0 [ 1004.727829][T29482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.727910][T29482] RIP: 0033:0x7f8973b8ce59 [ 1004.727932][T29482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.728030][T29482] RSP: 002b:00007f89725df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1004.728054][T29482] RAX: ffffffffffffffda RBX: 00007f8973e05fa0 RCX: 00007f8973b8ce59 [ 1004.728070][T29482] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1004.728085][T29482] RBP: 00007f89725df090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.728101][T29482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.728165][T29482] R13: 00007f8973e06038 R14: 00007f8973e05fa0 R15: 00007ffef048ff08 [ 1004.728256][T29482] [ 1004.941671][T27107] hid_parser_main: 14 callbacks suppressed [ 1004.941698][T27107] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1004.974197][T27107] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1005.033289][T29494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7510'. [ 1005.115041][T29487] netlink: 'syz.2.7508': attribute type 1 has an invalid length. [ 1005.123785][T29487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7508'. [ 1005.154856][T29501] set_capacity_and_notify: 2 callbacks suppressed [ 1005.154923][T29501] loop3: detected capacity change from 0 to 512 [ 1005.179148][T29501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.197926][T29501] ext4 filesystem being mounted at /295/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.214703][T29496] loop6: detected capacity change from 0 to 512 [ 1005.250888][T29496] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1005.276686][T29496] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1005.296694][T29496] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #11: comm syz.6.7511: corrupted inode contents [ 1005.310847][T29496] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1005.314604][T29496] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #11: comm syz.6.7511: mark_inode_dirty error [ 1005.339714][T29496] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1005.341235][T29496] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7511: invalid indirect mapped block 1 (level 1) [ 1005.364946][T29496] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1005.366174][T29496] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #11: comm syz.6.7511: corrupted inode contents [ 1005.388473][T29496] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1005.389655][T29496] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1005.392191][ C1] EXT4-fs (loop6): error count since last fsck: 5 [ 1005.403470][T29496] loop6: lost filesystem error report for type 5 error -117 [ 1005.407726][ C1] EXT4-fs (loop6): initial error at time 1779515961: mb_free_blocks:2049 [ 1005.414601][T29496] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #11: comm syz.6.7511: corrupted inode contents [ 1005.421437][ C1] : inode 11 [ 1005.430255][T29496] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1005.441986][ C1] : block 64 [ 1005.446474][T29496] EXT4-fs error (device loop6): ext4_truncate:4690: inode #11: comm syz.6.7511: mark_inode_dirty error [ 1005.454292][ C1] [ 1005.457440][T29496] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1005.468532][ C1] EXT4-fs (loop6): last error at time 1779515962: ext4_do_update_inode:5690 [ 1005.471341][T29496] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1005.480003][ C1] : inode 11 [ 1005.489124][T29496] loop6: lost filesystem error report for type 5 error -117 [ 1005.497506][ C1] [ 1005.508939][T29496] EXT4-fs (loop6): 1 truncate cleaned up [ 1005.517714][T29496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1005.541545][T29509] ip6_vti0 speed is unknown, defaulting to 1000 [ 1005.633851][ T28] audit: type=1400 audit(1779515962.234:5463): avc: denied { write } for pid=29495 comm="syz.6.7511" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1005.694742][ T28] audit: type=1400 audit(1779515962.234:5464): avc: denied { write } for pid=29495 comm="syz.6.7511" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1005.739516][T26821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.786020][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7519'. [ 1005.802482][T29522] tipc: Enabling of bearer rejected, already enabled [ 1006.029895][T23936] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.354398][T29555] loop3: detected capacity change from 0 to 128 [ 1006.401410][T29555] bio_check_eod: 17 callbacks suppressed [ 1006.401425][T29555] syz.3.7527: attempt to access beyond end of device [ 1006.401425][T29555] loop3: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 1006.420662][T29555] syz.3.7527: attempt to access beyond end of device [ 1006.420662][T29555] loop3: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 1006.434072][T29555] buffer_io_error: 14 callbacks suppressed [ 1006.434085][T29555] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 1006.448574][T29555] syz.3.7527: attempt to access beyond end of device [ 1006.448574][T29555] loop3: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 1006.461968][T29555] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 1006.470481][T29555] syz.3.7527: attempt to access beyond end of device [ 1006.470481][T29555] loop3: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 1006.483873][T29555] Buffer I/O error on dev loop3, logical block 158, lost async page write [ 1006.492489][T29555] syz.3.7527: attempt to access beyond end of device [ 1006.492489][T29555] loop3: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 1006.510034][T29555] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 1006.518842][T29555] syz.3.7527: attempt to access beyond end of device [ 1006.518842][T29555] loop3: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 1006.532317][T29555] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 1006.540858][T29555] syz.3.7527: attempt to access beyond end of device [ 1006.540858][T29555] loop3: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 1006.542517][T29557] xt_hashlimit: size too large, truncated to 1048576 [ 1006.554395][T29555] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 1006.554430][T29555] syz.3.7527: attempt to access beyond end of device [ 1006.554430][T29555] loop3: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 1006.554458][T29555] Buffer I/O error on dev loop3, logical block 150, lost async page write [ 1006.554480][T29555] syz.3.7527: attempt to access beyond end of device [ 1006.554480][T29555] loop3: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 1006.610714][T29555] Buffer I/O error on dev loop3, logical block 151, lost async page write [ 1006.647676][T29560] loop2: detected capacity change from 0 to 128 [ 1006.767513][T29560] syz.2.7528: attempt to access beyond end of device [ 1006.767513][T29560] loop2: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 1006.781086][T29560] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 1006.789866][T29560] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 1006.811313][T29560] xt_hashlimit: size too large, truncated to 1048576 [ 1006.886630][T29573] __nla_validate_parse: 1 callbacks suppressed [ 1006.886659][T29573] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7533'. [ 1006.908893][T29573] tipc: Started in network mode [ 1006.914145][T29573] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 1006.922329][T29573] tipc: Enabled bearer , priority 10 [ 1007.157577][T29580] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7535'. [ 1007.180053][T29584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65309 sclass=netlink_route_socket pid=29584 comm=syz.2.7537 [ 1007.469026][T29600] loop6: detected capacity change from 0 to 2048 [ 1007.553602][T29604] loop6: detected capacity change from 0 to 128 [ 1007.604896][T29604] xt_hashlimit: size too large, truncated to 1048576 [ 1007.788450][T29610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7543'. [ 1007.797545][T29610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7543'. [ 1007.953998][T12960] tipc: Node number set to 8432298 [ 1008.012540][T29618] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7546'. [ 1008.043720][T29621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7547'. [ 1008.056673][T29621] tipc: Enabling of bearer rejected, already enabled [ 1008.161991][T29625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65309 sclass=netlink_route_socket pid=29625 comm=syz.9.7550 [ 1008.168613][T29627] loop2: detected capacity change from 0 to 256 [ 1008.284682][T29633] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7554'. [ 1008.296678][T29633] netlink: 232 bytes leftover after parsing attributes in process `syz.6.7554'. [ 1008.309022][T29633] netlink: 'syz.6.7554': attribute type 39 has an invalid length. [ 1008.378141][T29636] loop2: detected capacity change from 0 to 512 [ 1008.387579][T16474] ================================================================== [ 1008.395728][T16474] BUG: KCSAN: data-race in __dentry_kill / __dentry_kill [ 1008.402783][T16474] [ 1008.405124][T16474] write to 0xffff88811a7acc00 of 4 bytes by task 2983 on cpu 1: [ 1008.412765][T16474] __dentry_kill+0xab/0x4d0 [ 1008.417288][T16474] finish_dput+0x2b/0x200 [ 1008.421637][T16474] dput+0x52/0x60 [ 1008.425283][T16474] lookup_fast+0x29e/0x320 [ 1008.429707][T16474] path_lookupat+0x15c/0x500 [ 1008.434312][T16474] filename_lookup+0x190/0x390 [ 1008.439081][T16474] do_readlinkat+0x74/0x2f0 [ 1008.443602][T16474] __x64_sys_readlink+0x47/0x60 [ 1008.448458][T16474] x64_sys_call+0x2b51/0x3020 [ 1008.453174][T16474] do_syscall_64+0x12c/0x3b0 [ 1008.457789][T16474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.463716][T16474] [ 1008.466050][T16474] read to 0xffff88811a7acc00 of 4 bytes by task 16474 on cpu 0: [ 1008.473707][T16474] __dentry_kill+0x28d/0x4d0 [ 1008.478312][T16474] finish_dput+0x2b/0x200 [ 1008.482658][T16474] dput+0x52/0x60 [ 1008.486299][T16474] lookup_fast+0x29e/0x320 [ 1008.490739][T16474] path_lookupat+0x15c/0x500 [ 1008.495342][T16474] filename_lookup+0x190/0x390 [ 1008.500114][T16474] vfs_statx+0x96/0x170 [ 1008.504284][T16474] vfs_fstatat+0x118/0x170 [ 1008.508709][T16474] __se_sys_newfstatat+0x55/0x3e0 [ 1008.513750][T16474] __x64_sys_newfstatat+0x55/0x70 [ 1008.518783][T16474] x64_sys_call+0x2c64/0x3020 [ 1008.523481][T16474] do_syscall_64+0x12c/0x3b0 [ 1008.528085][T16474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.533994][T16474] [ 1008.536326][T16474] value changed: 0x00140004 -> 0x00000004 [ 1008.542053][T16474] [ 1008.544402][T16474] Reported by Kernel Concurrency Sanitizer on: [ 1008.550559][T16474] CPU: 0 UID: 0 PID: 16474 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 1008.561084][T16474] Tainted: [W]=WARN [ 1008.564901][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1008.575130][T16474] ================================================================== [ 1008.591790][T29636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.604451][T29636] ext4 filesystem being mounted at /255/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.693745][T25178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.643716][ T28] audit: type=1400 audit(1779515967.244:5465): avc: denied { write } for pid=29640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1010.676787][ T28] audit: type=1400 audit(1779515967.284:5466): avc: denied { write } for pid=29651 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.011775][ T28] audit: type=1400 audit(1779515967.614:5467): avc: denied { write } for pid=29654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.045427][ T28] audit: type=1400 audit(1779515967.644:5468): avc: denied { write } for pid=29665 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.238088][ T28] audit: type=1400 audit(1779515967.844:5469): avc: denied { write } for pid=29668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.271608][ T28] audit: type=1400 audit(1779515967.874:5470): avc: denied { write } for pid=29679 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.359636][ T28] audit: type=1400 audit(1779515967.964:5471): avc: denied { write } for pid=29682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.393320][ T28] audit: type=1400 audit(1779515967.994:5472): avc: denied { write } for pid=29693 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.487526][ T28] audit: type=1400 audit(1779515968.094:5473): avc: denied { write } for pid=29696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.528485][ T28] audit: type=1400 audit(1779515968.134:5474): avc: denied { write } for pid=29707 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1