last executing test programs: 3m22.682611104s ago: executing program 32 (id=188): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x807, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000400)={0xfc, 0x0, &(0x7f0000000340)=[r0, r2]}, 0x2) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00010029bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4008000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff00000, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x0, 0x3, 0x4, 0x6, 0x2, 0xfffffffffffffffc, 0x4}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x6d, &(0x7f0000000700)=""/109, 0x41100, 0x49, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0xffffffffffffffff, r5, r5], &(0x7f00000007c0)=[{0x4, 0x5, 0xf, 0x4}, {0x5, 0x1, 0x6, 0x2}, {0x4, 0x4, 0x10, 0x3}], 0x10, 0x6}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000004240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) 2m29.4638641s ago: executing program 33 (id=835): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfa, 0x56c, &(0x7f0000000940)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, 0x0, 0x0) r1 = open$dir(0x0, 0x7e, 0x0) readv(r1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r2, 0x0, 0x46) fchmodat(r2, &(0x7f00000001c0)='./file1\x00', 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x601}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x79}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4040081) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 2m24.250918554s ago: executing program 34 (id=878): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000080)=0x8, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x59, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x4bfa, 0x10000000000004) 1m49.629324757s ago: executing program 35 (id=1385): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)="08001497733f5d", 0x7}], 0x2}}], 0x1, 0x2004000) 1m45.153798547s ago: executing program 2 (id=1452): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 1m44.947416198s ago: executing program 2 (id=1457): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x47a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x130, 0x98, 0x1f0, 0x130, 0x98, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dummy0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x8, 0x6}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) (fail_nth: 5) 1m44.56795986s ago: executing program 2 (id=1463): syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzszyFywlAYBOB9mSaTqNb0DFW1vUl1ZWewXCAGhcBxB7hJToLjCmFIIEcAxPeZ3dk3T/zhqUqT1V/5StIl6Zf5lm9jSarshvzUWf8naaZ5+f9RvZ/qa2m38zAc7k9NN8U5acs49z5tNp8Z0+d7n+T3+JgrAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC1XQIAAP//Wg0Ogw==") syz_emit_ethernet(0x96, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @tipc={{0x1c, 0x4, 0x2, 0x6, 0x88, 0x65, 0x0, 0x1, 0x6, 0x0, @multicast2, @rand_addr=0x64010100, {[@generic={0x44, 0xa, "de0dadcf382a935f"}, @noop, @end, @ra={0x94, 0x4}, @cipso={0x86, 0x35, 0x3, [{0x6, 0x11, "f0904955b81672e944d47da2baec10"}, {0x2, 0x8, "6e3b973eea9d"}, {0x5, 0xd, "07679e0df5cff87b8f450a"}, {0x6, 0x9, "f008798d47aae5"}]}, @timestamp_prespec={0x44, 0x14, 0x90, 0x3, 0x6, [{@loopback, 0x3}, {@multicast2}]}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x2, 0x400, 0x0, 0x2, 0x7, 0x2, 0x0, 0x40, 0x4, 0x0, 0x4e22, 0x4e24}}}}}}}, 0x0) 1m44.397258621s ago: executing program 2 (id=1469): perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6b0bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x65bb1d1b44201a3, @perf_bp={0x0, 0x8}, 0x100d00, 0x32, 0x43a1bd76, 0x7, 0x2000000000006, 0xffffffff, 0x2, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x6, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x3, 'ovf\x00', 0x1, 0x2, 0x6a}, 0x2c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc4, 0x80012d58, 0x12d5c}}, 0x44) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000400)='ns\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") readlinkat(r5, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xc9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8080c65) 1m43.904820609s ago: executing program 2 (id=1477): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x6f2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{}], 0x1, 0x2000, 0x0, 0x3) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x13, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x94, &(0x7f0000000440)=""/148, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x6, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600), &(0x7f0000000640)=[{0x2, 0x5, 0xd, 0x3}], 0x10, 0x7ff}, 0x94) unshare(0xa000400) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x6) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r1, 0x20, &(0x7f0000000600)={&(0x7f0000000740)=""/83, 0x53, 0x0, &(0x7f0000000540)=""/37, 0x25}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000a40)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x87c, 0x0, 0x0, 0x0, 0xaa82}, [@jmp={0x5, 0x0, 0xa, 0x6, 0x3, 0x18, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7c86}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0x47, &(0x7f00000003c0)=""/71, 0x41000, 0x48, '\x00', 0x0, @fallback=0x37, r1, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x2, 0x7, 0x65}, 0x10, r5, r2, 0x0, &(0x7f0000000840)=[r0, r0, r1, r6, r0, r1, r1, r0, r8, r1], 0x0, 0x10, 0x9}, 0x94) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r9}, 0x38) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 1m43.176231342s ago: executing program 2 (id=1487): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) unshare(0x22020600) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x101101) socket(0x2, 0x2, 0x1) pselect6(0x40, &(0x7f0000000100)={0x2, 0x1ea3, 0x3, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff, 0x8000000000000004}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x6b95}, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000050900020073797a3200000000300004802c0001800b0001006e756d67656e00001c000280080001400000001d080002400000000008000340000000030900010073797a3100000000140000001100010000000000000000000500000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_io_uring_setup(0x6e92, &(0x7f0000000140)={0x0, 0xb17, 0x2, 0x3, 0x20f}, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0x1, 0x7, 0x8001, 0x38000}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = creat(0x0, 0x90) write$cgroup_type(r1, &(0x7f0000000000), 0xd4ba103) r2 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x7, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x1, 0x0, 0x6, 0x0, 0x8, 0x53, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x112040, 0xffefffff, 0xfffffffa, 0x6, 0xd9f, 0x2, 0x1, 0x0, 0x402, 0x0, 0x8000000000000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) unshare(0x400) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1m43.171515882s ago: executing program 36 (id=1487): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) unshare(0x22020600) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x101101) socket(0x2, 0x2, 0x1) pselect6(0x40, &(0x7f0000000100)={0x2, 0x1ea3, 0x3, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff, 0x8000000000000004}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x6b95}, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000050900020073797a3200000000300004802c0001800b0001006e756d67656e00001c000280080001400000001d080002400000000008000340000000030900010073797a3100000000140000001100010000000000000000000500000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_io_uring_setup(0x6e92, &(0x7f0000000140)={0x0, 0xb17, 0x2, 0x3, 0x20f}, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0x1, 0x7, 0x8001, 0x38000}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = creat(0x0, 0x90) write$cgroup_type(r1, &(0x7f0000000000), 0xd4ba103) r2 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x7, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x1, 0x0, 0x6, 0x0, 0x8, 0x53, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x112040, 0xffefffff, 0xfffffffa, 0x6, 0xd9f, 0x2, 0x1, 0x0, 0x402, 0x0, 0x8000000000000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) unshare(0x400) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1m38.767867598s ago: executing program 8 (id=1537): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x7c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24041800) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x6, 0xfc, 0x0, 0x2, 0x4c0e, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x16d00, 0x4, 0x8, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000580)={0x0, 0x20, 0x40, 0x20, 0x3}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000002c000000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m38.644208125s ago: executing program 8 (id=1542): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) 1m38.641921015s ago: executing program 8 (id=1544): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x208000, &(0x7f0000000980), 0xfe, 0x573, &(0x7f00000009c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1e00}], 0x2, 0x1200, 0x41001, 0x3) 1m38.515475052s ago: executing program 8 (id=1548): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timer_delete(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000140), 0x1, 0x553, &(0x7f0000000d00)="$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") r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x18}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x10c, &(0x7f0000000240)={0x0, 0xffeffffe, 0x3000, 0x3, 0x108}, &(0x7f00000001c0), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x21, &(0x7f0000000000), 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000c3a2", @ANYRES16=r6, @ANYBLOB="796100000000fedbdf257e0000000c0099000700000065000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="ff7f00000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x1, 0x0, 0x0, {0x0, 0x4b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x800, 0x0, 0x9}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x44) r10 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r10, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffff8, 0x7) r11 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) fgetxattr(r12, &(0x7f0000000140)=@known='trusted.overlay.upper\x00', 0x0, 0xffffffffffffff85) syz_emit_ethernet(0x2a, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c2000000aa9caaaaaaaa88004500001c0067000000019078ac1e0001ffffffff12009078000004002d5e84cea7f7d6b9004599aa2080b77cc3db69c249e59758fee8c3c18bd262676cc4ec4d39b5e31b1d815b35c29b49f760fda13092165551772b9577ccbf455933f96a5b2ba6255651c2ce37fef32911a4f32606d0196061d6a4b49979cb6a74e4418b802fe26af6ead5c2b687dc8a281faf5467c7a5648be5306160a9cb923ed726a265827bf8137d7d31443684c0b01ee7ede246bde18fa7f1b46d0779c9a30876ae5b"], 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000180)={0x2, 0x6, 0x8, 0x0, 0x8c55, 0x8, 0x1, 0x1}, &(0x7f0000000240)=0x20) 1m37.674724482s ago: executing program 8 (id=1559): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x34, r4, 0x1, 0x4, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x80000001}]}, 0x34}}, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000180)=ANY=[], 0xf0}}], 0x1, 0x2400cc41) pselect6(0x40, &(0x7f0000000000)={0xa, 0x2, 0x2, 0x3ff, 0x12, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="18000000690001"], 0x18}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2004c015}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000300003802c0000800800034000000002200007800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1m37.299576783s ago: executing program 8 (id=1566): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) 1m37.266804775s ago: executing program 37 (id=1566): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) 1m35.697801456s ago: executing program 9 (id=1590): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) timer_create(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6}, 0x119310, 0x1, 0x1, 0x4, 0x8, 0xa, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$ptp0(0xffffffffffffff9c, 0x0, 0x400, 0x0) unshare(0x22020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) unshare(0x22020400) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0xfffffe0e, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000228bd7000ffdbdf25180000000e07000000000000007673696d0000000f0800006e657464657673696d300000080003000000000008000b0008bc0b4183001600030000000500120001000000060011000000000008000b0002000000"], 0x64}, 0x1, 0x0, 0x0, 0x54}, 0x44080) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) cachestat(r7, &(0x7f0000000040)={0xffffffffffffffff, 0x1317b899}, &(0x7f00000000c0), 0x0) ioctl$RTC_IRQP_SET(r6, 0x40187013, 0x68a) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000000)={0xfa4c, 0x9, 0x1ff, 0x7, 0x7}) 1m34.790907929s ago: executing program 9 (id=1598): r0 = socket$inet6(0xa, 0x80002, 0x88) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="4a2508aac8a821b115304d91130d53d95fc75bf094ab2055e189e31de07a3797013516585dc1f129c96ea5fc20655a3eb2f6981346c2f42f4cbb70608a0c6a3d605676aa371a2d32caf1e8c968a047e618c73b79995d1e752e94af783448c82989477985cb79ae144d886ed96c178316b25da0edf375cf7e593a616f67deb5ab0a32eae4079ccfa3778ccf", 0x8b}], 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000200)={0x0, 0xfb, 0x39, 0x1, 0xfe, "72b0e6436f438f8b13055ae3b11ffe19", "2cbd3c7b480dbdfa14f9b8d26503dc4fb88e5704b008d601444b5f7e1d7c2cd3ce216f94"}, 0x39, 0x2) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x1) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1m34.502647126s ago: executing program 9 (id=1603): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a1000000004fe00002e000008001e80010000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x7, 0x700, 0x0, 0x0, {{0x3c, 0x4, 0x3, 0x1f, 0xf0, 0x65, 0x0, 0xf, 0x4, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x4c, 0x3, [{0x5, 0x9, "6595875a439c16"}, {0x1, 0x6, "124d9443"}, {0x7, 0x12, "79b4e454cfd2e71fe2b8d7f4c8fa33d3"}, {0x6, 0x9, "e7efe338a7fab9"}, {0x7, 0xf, "90d6c89b1657d2084554081c02"}, {0x0, 0xd, "4498cad42aca7bf5393553"}]}, @end, @rr={0x7, 0xf, 0xc0, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @generic={0x94, 0x11, "58595eb84ba1d7bd9d3e61c0c24c8f"}, @generic={0x82, 0xf, "d7e82f12c4425259ab59da1bf6"}, @generic={0x88, 0x9, "c25752e4ec72cc"}, @cipso={0x86, 0x38, 0x0, [{0x7, 0x3, "d6"}, {0x1, 0x10, "285c6ef1ba4ef917be6c0b819087"}, {0x7, 0xb, "27a92385b65322b588"}, {0x0, 0x4, "1452"}, {0x5, 0x8, "a1120f19fb38"}, {0x7, 0x8, "c0bde8754de1"}]}, @noop, @ssrr={0x89, 0x7, 0xfa, [@multicast2]}, @timestamp_prespec={0x44, 0x14, 0x62, 0x3, 0xb, [{@multicast1, 0x1}, {@empty, 0x800}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2a8, 0x2, [@TCA_FLOWER_ACT={0x2a4, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x110, 0x6, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x5, 0x10000000, 0x2, 0xeb8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe000000, 0x9, 0x8, 0x2, 0x6}}]}, {0xb1, 0x6, "16504e472c8999292c3999d2c8af8315b01194d076d47ef80e504c6025df506ad6177488266726412d902fd9f3f2fe23651650e461c9c7db3e9919c373dd157f5ec03ffd856cb56b0324a187b893aa83da0a9daf2b8360f781b298242546f7526b00a44ffd5facfac69a075897b44d1655e4ab660b0cb1f2883bca2811499a3737feacbdf4e164057c2c307c9847f5800d0690ab906a5a17f32bf929373d7056d68feaf621e674b6aac9014a77"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x140, 0x14, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x89, 0x8, 0x3, 0x5, 0x9}, 0x1, r1}}]}, {0xf2, 0x6, "3c61644028ee31d0ba8efd3fc89a70c2959670e8679c5dd50f3489da14dc3fbeb0572dbd8acd2e9ad1bbf38cf3c34e34214b2e8e5e5a9abda85563bd81b1bbd45b5497af6c03440283906fb230917dbaead6fb69a606a1f496f04a4e95b17fa2663def7d0bbc633e5897ec7f7b67538a2ab86d4c82e3974b72cc41b105809b413df68c599c5c084b04f78a795ec83f795fb09da8eb67bfcb74a0b7402ee54cda81432e3a28f541e2f17c427792be6b7e4716675daad5a622580977d34fc209050cdac6d517210b413f024ae3783c0297fda7e61920cd9e34654f3c29da4f0e094b308f614aca8f0ddfa632164b6e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x13, 0x6}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x8000000000000000, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1m34.347246965s ago: executing program 9 (id=1605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006"], 0xac}, 0x1, 0x0, 0x0, 0x44004}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0000000100000001000040fcffff"], 0x2802) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x2, 0x5}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0x3a, 0x4, 0x310, 0xffffffff, 0x110, 0x1a8, 0x0, 0x110, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x6e}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2}, {0x0, [], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) ptrace(0x10, r5) ptrace$setregs(0x1a, r5, 0xba, &(0x7f0000000040)) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000980)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x30}}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x4000) 1m34.045020782s ago: executing program 9 (id=1608): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000071c05"], 0x30}, 0x40880) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x1a0835c, &(0x7f0000000540)={[{@nojournal_checksum}, {@nolazytime}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@nouid32}, {@delalloc}, {@jqfmt_vfsv1}]}, 0xff, 0x451, &(0x7f0000000600)="$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") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) close(r4) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)=0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r6}}}}]}, 0x38}}, 0x4000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$key(0xf, 0x3, 0x2) syz_clone3(&(0x7f0000000240)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) stat(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000002060102000700000000000007000002050005000200000005008e9150084b3e040000000000050001000700000014000300686173683a69702c706f72742c69700005000100070000000200020073797a3100000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8044) 1m33.431435068s ago: executing program 9 (id=1614): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x8a) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x26d99000) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)) 1m33.389598281s ago: executing program 38 (id=1614): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x8a) fallocate(r3, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x26d99000) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)) 1m15.946901114s ago: executing program 3 (id=1878): r0 = syz_open_dev$sg(0x0, 0x0, 0x202) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000340)={0x88, ""/136}) 1m15.939856955s ago: executing program 3 (id=1880): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m15.474151142s ago: executing program 3 (id=1886): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xa, 0x2, 0x8, 0x2}, 0x50) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0xff9d, &(0x7f0000000300)='trans=rdma,') 1m15.301373302s ago: executing program 3 (id=1896): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x18, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 1m15.266804464s ago: executing program 3 (id=1897): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7fb, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x800, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r3}, &(0x7f0000000180)=0x8) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x4, 0x800000000a, 0x1}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4040080) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000000)=0x14) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) sendfile(r8, r9, 0x0, 0xffff) write$P9_RVERSION(r8, &(0x7f00000006c0)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.L'}, 0x15) r10 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$hidraw(r10, &(0x7f00000000c0)="860ed546", 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 1m15.231802436s ago: executing program 0 (id=1899): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfffffffffffffffa}]}}]}, 0x48}}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x4, 0x958, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x44}, 0x10, 0x700, 0x2, 0x6}}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100050003000000ffdbdf2507000000", @ANYRES32=r9, @ANYBLOB="001200000220010014001a80100004800c000a80"], 0x34}}, 0x880) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0x8, 0x4, {{0x15, 0x4, 0x1, 0x0, 0x54, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @private=0xa010102, {[@noop, @lsrr={0x83, 0x1b, 0xff, [@local, @remote, @private=0xa010102, @empty, @private=0xa010100, @local]}, @noop, @rr={0x7, 0x7, 0x14, [@broadcast]}, @generic={0x86, 0x6, "205dfa3d"}, @timestamp_prespec={0x44, 0x14, 0x6b, 0x3, 0x0, [{@private=0xa010100, 0xc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x4, 0x8b, 0x22, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x80, 0x80, 0x9a, 0x4}}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x44}}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {0x10000, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20080040}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x7, 0x9, 0x0, @remote, @local, 0x7, 0x8000, 0x80, 0xd974}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0x240, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20040840}, 0x4040000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 1m14.320129269s ago: executing program 0 (id=1937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88}, 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8224, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001980)={0x14, 0x15, 0x1, 0x0, 0x25dfdbfc, {0x2}}, 0x14}}, 0x20004810) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="8000000000010104110000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac14141f080002007f0000010c00028005000100000000000800074000000000080003400000100e14000f80080001"], 0x80}}, 0x4000) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r5, 0x0, r5) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m14.273050772s ago: executing program 3 (id=1928): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) listen(r2, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x94, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7814}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x72}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r4 = syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$eJzs3MtvG8UfAPDv2nn28Ut+pTxaWggURMUjadIHPXABceAAAgkORZxCklalaYOaINGqogWkIsQBVeKOOCLxFyAOcEHACYkr3FElhHppgcuitXfTJLVL4qzjgD8fye3Mzq5nvp4dezIjO4CuNZL9k0Rsi4ifI2Konl1+wkj9vxvXLkz9ce3CVBJp+vLvSe2869cuTOVPsXjd1vqBNM3z/Q3qvfxaxOTs7MzZPD+2cPrNsflz5584eXryxMyJmTMTR48eOri378jE4VLizOK6vvuduT27nnv1ygtTx668/v0XWXu35eVFHBHxVSkV1l62kaZlD5dVySaxfUk66elgQ1iTrN+y7uqtjf+hqMbgYtlQ9L/X0cYBbZWmadro8zl3KQX+w5JYTFY72hBggxUf9Nnfv8Vjg6Yem8JvT9f/AMrivpE/6iU9UcnP6Y34a3ub6t8WEccu/flp9ojl6xAAAG3xdTb/ebzR/K8Sdy0573/5HspwRPw/InZExB0RsTMi7oyonXt3RNyzxvpX7pDcOv+pXG0psFXK5n9P5Xtby+d/xewvhqt5bnst/t7k+MnZmQP5a7I/evuz/PiyS5b75tmfPl557KN8mX1kyfwve2T1F3PBvB1Xe1Ys0E1PLkyWEnwW/7sRu3saxZ9EsY2TRMSuiNjdYh0nH/18T7Oyf47/NkrYZ0o/i3ik3v+XYkX8haTp/uT4k0cmDo8NxOzMgbHirrjVDz9efqlZ/euKvwRZ/29peP8nvfkpaTIQMX/u/Knafu382uu4/MsHU0mTsp0t3v99ySu1dF9+7O3JhYWz4xF9yfNZdnDZ8Ymb1xb54vws/v37Go//HREDkff/vRGR3cR7I+K+iLg/77sHIuLBiNh3m/i/e+ahN5qVNe//26zKlyiLf7px/xenDGepm/2/9kT11LdfNqs/XVX/H6ql9udHVvP+t9oGrue1AwAAgH+LSm0POqmMLqYrldHR9/PSLZXZufmFx47PvXVmur5XPRy9lWKla2jJeuh4vjZc5CdW5A/m68afVAdr+dGpudnpDscO3W5rw/FfL/u12unWAW3n+1rQvYx/6F7GP3Qv4x+6l/EPXaqv8eGLG90OoCPW/vk/0JZ2ABvP/B+6l/EP3cv4h67U9LvxlXV95b/kRPFTFG2vq6fUJ7wYEeU94WDZIVcjovXLo9J67cVvW2yCW+tm4sUP643aLO0pEj2r/jGLFhP9DYtueasYG9q4tyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS/B0AAP//KWna6A==") syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x28, 0x0, 0x0) close(r1) r7 = socket$rxrpc(0x21, 0x2, 0xa) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="c8ba36440675715adb6e1b642cd382380ab35258618c919d20cba91b3f11146281ff119d5f06bbc70a8f"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r8, 0x0, 0xee01) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r9, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44014}, 0x4004) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x2000000, {0x0, 0x0, 0x0, r13, 0xb}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 1m14.225845404s ago: executing program 0 (id=1929): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x6, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@empty, @remote, @val={@val={0x88a8, 0x4}, {0x8100, 0x4, 0x1}}, {@generic={0x8906, "d987be33cdb75df2"}}}, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m14.12368173s ago: executing program 0 (id=1930): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0xaf33}}, {@noinit_itable}, {@noquota}, {@noblock_validity}, {}, {@stripe={'stripe', 0x3d, 0x51}}, {@acl}, {@resgid}, {@i_version}], [], 0x3d}, 0x1, 0x521, &(0x7f00000007c0)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000180), 0x4, 0xbd6d0794e1d77a61) read$usbmon(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x82, &(0x7f0000000300)={0x0, 0xb}, 0x8) 1m13.628188059s ago: executing program 0 (id=1933): setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) close(r2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000020000340012800b00010067656e6576650000240002800500090000000000040006"], 0x54}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) 1m13.293674989s ago: executing program 0 (id=1935): r0 = socket(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) timerfd_create(0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) socket$inet(0x2, 0x3, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r1], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x2711, @hyper}, 0x10) 1m13.243997282s ago: executing program 39 (id=1935): r0 = socket(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) timerfd_create(0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) socket$inet(0x2, 0x3, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r1], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x2711, @hyper}, 0x10) 59.219622707s ago: executing program 40 (id=1928): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) listen(r2, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x94, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7814}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x72}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r4 = syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x28, 0x0, 0x0) close(r1) r7 = socket$rxrpc(0x21, 0x2, 0xa) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="c8ba36440675715adb6e1b642cd382380ab35258618c919d20cba91b3f11146281ff119d5f06bbc70a8f"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r8, 0x0, 0xee01) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r9, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44014}, 0x4004) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x2000000, {0x0, 0x0, 0x0, r13, 0xb}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 4.491278619s ago: executing program 1 (id=2615): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x7}) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x100002007, 0x3}) r4 = syz_open_dev$evdev(&(0x7f000000ae00), 0x2, 0x800) read(r4, 0x0, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000280)={0x1, 0x0, 0x10001, 0x2}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) copy_file_range(r6, 0x0, r6, &(0x7f0000000080)=0x87d, 0x401, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2e, 0x3}}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) io_uring_enter(r8, 0x3b14, 0xc89b, 0x14, &(0x7f0000000000)={[0x4]}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r7, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.398339804s ago: executing program 1 (id=2618): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) r6 = inotify_init() r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x161000, 0x2c3) getdents64(r7, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20, 0x4040845}}, {{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000680)="97ce8814c85da0effcac7571745e14b38f53072476f95f6d34966bee5147c2f2582e0cf16208622f327e34805408ccfae16cc73e8e9c4f119c7719fbfde0392c8fc4417fc4ae5b009408a62761d9896f52f94b2bea397e0c34aa64ce90b9783dffb155cfcdbaedfdb51173741059dd6e0ec1f212f5d16193", 0x78}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000000700)="91b7b99c75ac5b7d49cadf9519c8ed018459a3ced92925856bdc0bc450e75a068326bd0b5847d5a1a99fefd9d14b19c239a15c661905e9c6beb3607b654f07be571610ab8c9f5c10367d0cfdb76f6168891ef240acbf17428cc805359ef0372a8c10f027f780b98a57c514aadf0bfc910a005512b8ba587f9c0a7183b480571397b68c62ea9ee52836f56050c496ad75106b3e73db", 0x95}], 0x3, 0x0, 0x0, 0x80}}, {{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000840)="1925bd4654894c7e2c22d708d97f26e4acb783a12aa328d11e3a6d54af5b35906de4e58425f5cbd7a1f0b63747acb4a0848fa851880dcd6f7cbb493ca11e98933c6c293ae1fb2e166b28794fdb6bb1c366cc14c82556dd7d25039e9f8ac2d378506e98dc762145258de494489a878796b3a83a3dc91bfccaf03d5c1ab10212d7047ce284b091f2c2c7bca802d88d3408406b82e7f74bfd14be2671dda0ac1cc5287533ca1cef0acf7a1938ed16de", 0xae}, {&(0x7f0000000900)="6358af4ad6db6f6b4d851b1929148a93abbb4f0a17410339adfd74ef657a24a3c70554d3aad254edf904f929b75f6ef366f4d74c221af29b73df68c85e889828", 0x40}], 0x2, &(0x7f00000005c0)=[@rights={{0x34, 0x1, 0x1, [r6, r0, r7, r1, r1, r1, r0, r1, 0xffffffffffffffff]}}], 0x38, 0x40}}], 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e"], 0x54}}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, r10) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x6, 0x50000000, 0xffffffe5, 0x0, r0, 0x2, '\x00', r11, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x3}, 0x50) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) fchown(r0, r10, r5) r13 = socket(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000980)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r14, 0x200, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_LINK={0x8, 0x1, r15}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x48}}, 0x8884) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x88, 0x1403, 0x800, 0x70bd29, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004010}, 0x10) 4.397812344s ago: executing program 1 (id=2619): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) write(0xffffffffffffffff, &(0x7f0000000000)=';', 0x1) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, r2, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r4], 0x18}, 0x40c0) 3.697249595s ago: executing program 5 (id=2633): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = getegid() chown(&(0x7f0000000040)='./file0\x00', r4, r5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x109}], 0x1, 0x0, 0x0, 0x0) 2.613791408s ago: executing program 5 (id=2641): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) shutdown(r0, 0x1) 2.516188664s ago: executing program 5 (id=2643): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.438395268s ago: executing program 6 (id=2646): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfa, 0x56c, &(0x7f0000000940)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000080)={0x0, 0xea60}, 0x10) read(r2, &(0x7f0000000240)=""/60, 0x3c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter6\x00') splice(r3, 0x0, r4, 0x0, 0xfff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x84000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x9}, 0x0, 0x10000000010000, 0x0, 0x6, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000201010000000700000208000440000000ff"], 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r6, 0xa, 0x2b) ppoll(&(0x7f0000000100)=[{r7}], 0x1, 0x0, 0x0, 0x0) dup2(r6, r7) fcntl$setown(r7, 0x8, 0x0) tkill(0x0, 0x13) ptrace(0x4208, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, 0x0, 0x0) 2.07482124s ago: executing program 5 (id=2652): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x3, {{0x2, 0xfffd, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x1, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast2}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3}, 0x60) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40010020) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r8}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @private0, @local, {[@hopopts={0xff}]}}}}}, 0x0) 1.333478702s ago: executing program 4 (id=2659): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a1000000004fe00002e000008001e80010000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x7, 0x700, 0x0, 0x0, {{0x3a, 0x4, 0x3, 0x1f, 0xe8, 0x65, 0x0, 0xf, 0x4, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x4c, 0x3, [{0x5, 0x9, "6595875a439c16"}, {0x1, 0x6, "124d9443"}, {0x7, 0x12, "79b4e454cfd2e71fe2b8d7f4c8fa33d3"}, {0x6, 0x9, "e7efe338a7fab9"}, {0x7, 0xf, "90d6c89b1657d2084554081c02"}, {0x0, 0xd, "4498cad42aca7bf5393553"}]}, @end, @rr={0x7, 0xf, 0xc0, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @generic={0x94, 0x11, "58595eb84ba1d7bd9d3e61c0c24c8f"}, @generic={0x82, 0xf, "d7e82f12c4425259ab59da1bf6"}, @generic={0x88, 0x9, "c25752e4ec72cc"}, @cipso={0x86, 0x32, 0x0, [{0x7, 0x3, "d6"}, {0x1, 0x10, "285c6ef1ba4ef917be6c0b819087"}, {0x7, 0xb, "27a92385b65322b588"}, {0x0, 0x4, "1452"}, {0x5, 0x8, "a1120f19fb38"}, {0x7, 0x2}]}, @noop, @ssrr={0x89, 0x7, 0xfa, [@multicast2]}, @timestamp_prespec={0x44, 0x14, 0x62, 0x3, 0xb, [{@multicast1, 0x1}, {@empty, 0x800}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2a8, 0x2, [@TCA_FLOWER_ACT={0x2a4, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x110, 0x6, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x5, 0x10000000, 0x2, 0xeb8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe000000, 0x9, 0x8, 0x2, 0x6}}]}, {0xb1, 0x6, "16504e472c8999292c3999d2c8af8315b01194d076d47ef80e504c6025df506ad6177488266726412d902fd9f3f2fe23651650e461c9c7db3e9919c373dd157f5ec03ffd856cb56b0324a187b893aa83da0a9daf2b8360f781b298242546f7526b00a44ffd5facfac69a075897b44d1655e4ab660b0cb1f2883bca2811499a3737feacbdf4e164057c2c307c9847f5800d0690ab906a5a17f32bf929373d7056d68feaf621e674b6aac9014a77"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x140, 0x14, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x89, 0x8, 0x3, 0x5, 0x9}, 0x1, r1}}]}, {0xf2, 0x6, "3c61644028ee31d0ba8efd3fc89a70c2959670e8679c5dd50f3489da14dc3fbeb0572dbd8acd2e9ad1bbf38cf3c34e34214b2e8e5e5a9abda85563bd81b1bbd45b5497af6c03440283906fb230917dbaead6fb69a606a1f496f04a4e95b17fa2663def7d0bbc633e5897ec7f7b67538a2ab86d4c82e3974b72cc41b105809b413df68c599c5c084b04f78a795ec83f795fb09da8eb67bfcb74a0b7402ee54cda81432e3a28f541e2f17c427792be6b7e4716675daad5a622580977d34fc209050cdac6d517210b413f024ae3783c0297fda7e61920cd9e34654f3c29da4f0e094b308f614aca8f0ddfa632164b6e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x13, 0x6}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x8000000000000000, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.331303103s ago: executing program 6 (id=2661): socket(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) vmsplice(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000b80)="ba82e810f7c173192e8b512d40495588aaeef50f71ca4a16a877fc0c2899513cf97e00f8c7ffab0c17588c7b87001c1793d4603663d9339bfd23ca2a88b87e6f22401004189ba981dd197a0d8979ba40e7ffb235df38ee6d8e06880b7ca85ee14e6a2b6baef81702102089198816232795", 0x71}], 0x1, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d80000001b0001"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 1.322498493s ago: executing program 4 (id=2662): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) 1.20100974s ago: executing program 5 (id=2663): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) 1.136142644s ago: executing program 6 (id=2664): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88}, 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8224, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001980)={0x14, 0x15, 0x1, 0x0, 0x25dfdbfc, {0x2}}, 0x14}}, 0x20004810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="8000000000010104110000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac14141f080002007f0000010c00028005000100000000000800074000000000080003400000100e14000f80080001"], 0x80}}, 0x4000) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r4, 0x0, r4) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x8, 0x2}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.021850481s ago: executing program 6 (id=2665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c00028005000100000000000800074000000000100017000000000000000000"], 0x84}}, 0x0) 956.221814ms ago: executing program 6 (id=2666): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0xe, 0x1, 0x0, 0x2}, 0x10}}, 0x84) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800008, &(0x7f0000000540)=ANY=[@ANYBLOB='de=0x00000000800000b1,norock,overriderockperm,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000401,norock,showassoc,hide,hide,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000001000,check=strict,iocharset=cp949,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0xff, 0xa4a, &(0x7f00000007c0)="$eJzs3c1vHOd9B/DvLEmJoV1JcVTXFRxxJVcK47AUSdVSBR9SiVxJTPlSkBRgoYcojahCEFu3cQs4RoEoQNFTjBZo0UN7M3rqyUAuTQ+FL0V7a049FCj8LwQ9qScGM7skl+Qul2IoklY+H2J35+U3z/PMyzMPd3d2nvDFsnZ6y9jaWvXY5/i9fz6EEnOM3Zr+/JNPPy4fP3yaE+nLO8W/JINJ6kl/kjeSganpxYW5Hgk9SR4k+SwpkpxM83VPHqT467y6Of5Zin8s8+3qxF5Tppc1fqkd9fEHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHUTE1PT4+UZzIzPy99+pNSX2HqenFhSJrazvnrC/T9JOq1+/iJz3zTYrykcHB9a6+3zi7Ofv1JPWLebM59mbVIXkG89Err5959yv9tfXlu5XmF3Jy78l+8P2PnnxndXXlex3nFsUBluqYaR4jdxrzM0sLM3M37zTqM0sL9RvXro1fuXt7qX57ZraxdH9puTFXn1ps3FxeWKyPTH29PnHjxtV6Y+z+wr35O9Njs431idd/c3J8/Fr9W2O/17i5uLQwf+VbY0tTd2dmZ2fm71Qx5ewy5np5IP7uzHJ9uXFzrl5/9Hh15eq2kvVl2/FbBk30Wp8yaLJX0OT45OTExOTkxA9bvWdvTLj2zo13ro+P9483vZrWQHZEvKCDluPlS91388GfxGGfas32P5nNTOZzL++l3vFvKtNZzELmusxvWW//L11p7Jpt2tr/Vivf3zb/XPl0Medbo4Nd2v8uZTm8vw/y/XyUJ/lOVrOalXzvyEt0uH930sh8ZrKUhcxkLjerKfXWlHpu5FquZTzfzt0MZyn9uZ2ZzKaRpdzPUpbTqI6oqSymkZtZzkIWU89IpvL11DORG7mRq6mnkbHcz0LuZT53Mp2bVSqP8rja7ld3KeNG0MRegiZ3CdrRmHdr/zdsX6Sx/Z8TXkK1XffyCziLw/6stdr/E71DR6YOo0AAAADAgfv1/8yps6/9x/8mRb5afS9/e2a2MX7UxQIAAAAOUHW53pvly0A59NUU3v8DAADAy6aofmNXJBnKcHNo/ZdQPgQAAACAl0T1/f/5FMObE7z/BwAAgJdM73vs94woRtdv/1t/2Hx92IpojhVDt2dmG2NTC7PvTuRydZeB6pcGO1LrS4qB6ucHb+dCM+rCUPN1aDPFMs/BMmpi7N2JvJ2LrRUZeat8eWukQ+RkM/JrzcivtUf2ZUvk1TISAF52F3dpj/fa/r+d0WbE6Lmqye8/t6UN7qta1nEtKwAcFxt97Px/q0uzDu3/+ea9Ac53a/9/a5f3/2XEa3k03LykYCzfzftZzcOMpnXFwXCnVNd7I2hehjDa49OAodYlCz+9Xsvojs8DBjfWtT12JZMZ7fiJQFu6xXoZrjbj+l7UXgCAw3Vx13Z4vf2vPiTv2v6P7v7+v63NdUkhABwHGz3YP+/A8N6Dj3odAYCttNIAAAAAAAAAAAAAAAAAAAAAAAAAAABw8PZ0A///upysrq4k++0soMPAT//9X3+la8yPXkkGn6eEuw/UcjBlPv4DfUmOKvdv5rmXKvfxcdl0L9NA8bSqsL9QOkd8YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQFElfp+m15GSS8SRXDr9UL87Toy7AQanvb7HiWZ7lw5w66OIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyya93/v5bm6yvNSemvJZeSPEjy+0ddxucx2GP+s0Mqx/HzR9Vz2/3/a8lA1or0Z21tbS0pBqamFxfmykOhOFnO//yTTz8uH12T/MH6wM5eFcoEyhy2dC7RyqFtysDWpb5cLTU0vfLBkz97/0/q07eqA/PW8u3Z6bk7i7+zGfh68eNmFwjt3SCsl/cvLv3b37RNPtHK/Mfp77Yi2/O9XeU7vTPfX+u0dJd89+Dx6spkmdNy473lP//jWvus13IheWskGdma0x+Wjy45Xdi+Pbcqflb8VXEqf58H1f4vt0axVpS76HS1/l969Hh1Zey7768+3CjTDx5/2JbAmQwnebi1lvUo03B1PunolSrXgTLX8SqofDrbI71dtaU4sbldt6zDl6tDZui51qHefR0qPbZ7q0RXt5dorawkf/unX8nlXff0yQ4pXu6RY0fFz4r/Ke7mv/OXbf1/1Mr9fykda2eHJKrItiOlfd6W6lW7tLnmk+0zvr09za61khfgR/mD/PbG/q9V5//2ejPZpd5snI++2TaxS71Zr1pd6sXJrTV1R71o6VUvdtbUfzq9o0XZmmvObmuRWmefbsu0ynm2GdWlnL+abyT9557rjPKNHmeUXsvvt/7/QzGS/8tT/f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHX5H0dZpeSy4lOZPkdDleT9a2xzzdR361oWI/xTww+ynzF0/RdUWLZ3mWD3PqsEsEAAAAAAAAwItxa/rzTz79uHxU38f35TdqrTn1pD/JmeLvBqamFxfmeiQ0kDxY/0p/sHNIl8l5UD69ujn+WTn2Ro/8jvbyAQD4Qvt5AAAA//9B+m/L") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r5, 0x4) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000540)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x5b, 0xf, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) getgroups(0xffffffffffffff3c, 0x0) unshare(0x6c000200) r9 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x2226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) getsockopt$inet_tcp_int(r10, 0x6, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, 0x0) r11 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(0x0, 0x8fff5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) migrate_pages(0x0, 0x800, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000fdff2dbd70f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="0008000023020000280012800b000100627269646765"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) setsockopt$inet6_int(r11, 0x29, 0x5, &(0x7f0000000100)=0x200, 0x4) 823.666542ms ago: executing program 5 (id=2667): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./bus\x00', 0x2210458, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x21c, &(0x7f0000000c40)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x4, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f1", 0x1) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000480)={[{@sysvgroups}, {@journal_dev={'journal_dev', 0x3d, 0xffffffffffffffff}}, {@bsdgroups}, {@data_err_ignore}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000b00000000000000030000008500000036000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/198, 0xc6}], 0x1, 0x7, 0x9) unshare(0x28000600) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004) r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES64=r1, @ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT=r4, @ANYRES16=r0], 0x8, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) msgsnd(r6, &(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYBLOB="6bbf4b2cc4abe56bd2ce5966f23a7a767f663edc00e048f5d1efebc2bab464a2f455f21ebc74dcef03b09e82b82c34683040d77d2dc6f2b1c6e238c04cd32aff3f359363041ff446c1fdcdea87d34106289d18ea2896c043cbddf75615487659048f86ed4db0db931b86afb0ad2e9b8a440e6311014028a1eddbc34f98762f940b0bbe3e3cd31a1d771cc66e213da3ad0c366eecca23be7d935222694c6a53593fa064333148ed693f85592aa811f56595a24eb91b3c576ecacf76d5cc219386b027136b38da94955e8a2ea434d3e6a8610314db21bf566930b76128a0be92caa2"], 0x401, 0x800) msgrcv(r6, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) r7 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000901, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) 680.07628ms ago: executing program 6 (id=2668): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x3, {{0x2, 0xfffd, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x1, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast2}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3}, 0x60) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40010020) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r8}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r11}) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @private0, @local, {[@hopopts={0xff}]}}}}}, 0x0) 522.65562ms ago: executing program 1 (id=2623): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000740), 0x5, 0x800) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r3, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8101) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b00000019000100007f0000000094bc2d"], 0x1c}}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000002900)={0x6, 0x40000002}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5, 0x0, 0x0, 0xde4f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r9, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r12 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4) close(r12) fcntl$setstatus(r12, 0x4, 0x2c00) r13 = gettid() fcntl$setown(r12, 0x8, r13) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44050000120020002abd7000fcdbdf252b010307f7ffdebaffffffff0700000001000000c0ffffff03000000030000000001000003000000", @ANYRES32=r14, @ANYBLOB="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"], 0x544}, 0x1, 0x0, 0x0, 0xf3a6542dca17e6a8}, 0x4000) 454.809544ms ago: executing program 7 (id=2669): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000005140)=[{&(0x7f0000000280)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="14", 0x1}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="20000000000000008400000002000000ff03040001000000e5330000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005000000200000000800000018000000000000008400000007000000ac1e00010000000020000000000000008400000002"], 0x70, 0x24040000}], 0x1, 0x240000c0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001002abd70000002000000000000", @ANYRES32=r1, @ANYBLOB="0801000000000000140003006e657464657673696d3000000000000008001b"], 0x50}}, 0x800) 356.250869ms ago: executing program 7 (id=2670): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0, 0x70}, 0x7, 0x7000000000000000}, 0x40408c0) 355.604019ms ago: executing program 7 (id=2671): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto(0xffffffffffffffff, &(0x7f0000000340)="7586cb8e584e16d5dfc2f4464be783ada24ef7e45014fd91c4588b8d5c085e80622e33d14a5efda6ac6893c77b081a3223b54d9a2230cd44ca799b11d4d6e7345e4050e52238e6a2ab07ea6b1e36e053a0fce5cfef2c8013e68d014be38120250da2e7c59b3b9c61c114e83c18c384ff760c64aab7505d43a58368f28f03705e4dd4482cace44e820d4056b1fb409f6dbddded28e2", 0x95, 0x41, &(0x7f0000000400)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x80) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000000b030000000000000000000265b6509877c5000007"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = gettid() bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000000)=0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4) bind$can_raw(r4, &(0x7f0000000100), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0xa9a2, 0x4) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000500)={0x8, 0x6, 0x4, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = socket$inet(0x2, 0x80000, 0x1d4) fcntl$setlease(r5, 0x400, 0x2) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x340088c0}, 0x4080) r7 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000100)='stack\x00') pread64(r8, &(0x7f0000000140)=""/15, 0xf, 0x4) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x4, 0x4000}, 0xc) socket(0x6, 0x93ab8573e4063c05, 0x5) setsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1000, 0x4) 348.89053ms ago: executing program 1 (id=2672): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='Yockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r0, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, 0x0, 0x0, 0x9) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.0538ms ago: executing program 4 (id=2679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'macvlan1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000280)=0x6, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff2, 0xc}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfe}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r6 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x7, &(0x7f00000002c0)=0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0xd]}, 0x8, 0x80800) io_submit(r7, 0x2, &(0x7f0000000c80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x40, r8, &(0x7f00000007c0)="6b95251ef64f05f4357812e77e334217f1a227a922eb3a3a316a5d1b71af2c941dd6be252bc3b31fa02557889a9358ab4ab0840d6c6065a017914a09bb756d6acf23290d9ec72e35fcc133cd57ee60dd39d18cdf292854df51426ef51fc5b6a3d640c8815b0afa0cde941d3b2dac6fa825abcdd25c12db1e302d91bbf0c20fd8", 0x80, 0x3, 0x0, 0x2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x2, r6, 0x0, 0x0, 0x2, 0x0, 0x2}]) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x4, 0x10, 0x80000000}, @TCA_CT_ACTION={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100040000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd00020073797a3100000000080041007278650014003300666c616e30fbff00"/54], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) 0s ago: executing program 7 (id=2680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000fdff2dbd70f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="0008000023020000280012800b00010062726964676500001800028006000900000000000a0014000180c200"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x60, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x20040400) kernel console output (not intermixed with test programs): T7688] batman_adv: batadv0: Removing interface: ipvlan6 [ 174.743033][ T7688] batman_adv: batadv0: Interface deactivated: ipvlan7 [ 174.749978][ T7688] batman_adv: batadv0: Removing interface: ipvlan7 [ 174.766350][ T7688] batman_adv: batadv0: Interface deactivated: ipvlan8 [ 174.773573][ T7688] batman_adv: batadv0: Removing interface: ipvlan8 [ 174.799434][ T7688] batman_adv: batadv0: Interface deactivated: ipvlan9 [ 174.806259][ T7688] batman_adv: batadv0: Removing interface: ipvlan9 [ 174.834117][ T7688] pim6reg (unregistering): left allmulticast mode [ 174.931539][ T7688] team0 (unregistering): Port device team_slave_1 removed [ 174.959307][ T7688] team0 (unregistering): Port device team_slave_0 removed [ 175.025345][T10684] vlan2: entered allmulticast mode [ 175.030796][T10684] bond0: entered allmulticast mode [ 175.036116][T10684] bond_slave_0: entered allmulticast mode [ 175.042053][T10684] bond_slave_1: entered allmulticast mode [ 175.047958][T10684] bridge_slave_1: entered allmulticast mode [ 175.098293][T10688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.107333][T10688] bond_slave_0: left allmulticast mode [ 175.114326][T10688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.124124][T10688] bond_slave_1: left allmulticast mode [ 175.131679][T10688] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 175.140773][T10688] bridge_slave_1: left allmulticast mode [ 175.147791][T10688] bond0 (unregistering): Released all slaves [ 175.182333][T10652] lo speed is unknown, defaulting to 1000 [ 175.192269][T10617] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.199695][T10617] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.207618][T10617] bridge_slave_0: entered allmulticast mode [ 175.214451][T10617] bridge_slave_0: entered promiscuous mode [ 175.223388][T10617] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.230546][T10617] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.239379][T10617] bridge_slave_1: entered allmulticast mode [ 175.246436][T10617] bridge_slave_1: entered promiscuous mode [ 175.296080][T10617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.313438][T10617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.360762][T10617] team0: Port device team_slave_0 added [ 175.374993][T10617] team0: Port device team_slave_1 added [ 175.414223][T10713] loop4: detected capacity change from 0 to 164 [ 175.422459][T10617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.430300][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.457514][T10617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.478394][T10713] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 175.484642][T10617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.494012][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.520706][T10617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.534879][T10713] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 175.548582][T10713] Symlink component flag not implemented [ 175.554642][T10713] Symlink component flag not implemented [ 175.567501][T10713] Symlink component flag not implemented (7) [ 175.573773][T10713] Symlink component flag not implemented (116) [ 175.588765][ T7688] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.614704][T10652] chnl_net:caif_netlink_parms(): no params data found [ 175.657830][ T7688] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.678816][T10617] hsr_slave_0: entered promiscuous mode [ 175.694369][T10617] hsr_slave_1: entered promiscuous mode [ 175.708621][T10617] debugfs: 'hsr0' already exists in 'hsr' [ 175.714501][T10617] Cannot create hsr debugfs directory [ 175.727197][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 175.727217][ T29] audit: type=1400 audit(2000000072.290:3643): avc: denied { setopt } for pid=10731 comm="syz.4.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.754113][ T7688] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.820244][T10652] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.827726][T10652] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.854536][T10652] bridge_slave_0: entered allmulticast mode [ 175.862516][T10652] bridge_slave_0: entered promiscuous mode [ 175.888663][ T7688] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.904188][T10652] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.911790][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.921287][T10652] bridge_slave_1: entered allmulticast mode [ 175.928639][T10652] bridge_slave_1: entered promiscuous mode [ 175.996565][T10652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.055799][T10652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.404865][T10776] loop4: detected capacity change from 0 to 512 [ 176.413645][T10776] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.426751][ T7688] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 176.435640][ T7688] wireguard0: left promiscuous mode [ 176.437051][T10776] EXT4-fs (loop4): 1 truncate cleaned up [ 176.448599][ T7688] bond1 (unregistering): Released all slaves [ 176.450069][T10776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.482027][ T7688] tipc: Left network mode [ 176.499365][ T7688] hsr_slave_0: left promiscuous mode [ 176.512906][ T7688] hsr_slave_1: left promiscuous mode [ 176.528522][ T7688] batman_adv: batadv0: Removing interface: ipvlan2 [ 176.550656][ T7688] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 176.557555][ T7688] batman_adv: batadv0: Removing interface: ipvlan3 [ 176.588773][ T7688] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 176.595785][ T7688] batman_adv: batadv0: Removing interface: ipvlan4 [ 176.606554][ T7688] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 176.613706][ T7688] batman_adv: batadv0: Removing interface: ipvlan5 [ 176.635788][ T7688] pim6reg (unregistering): left allmulticast mode [ 176.732530][T10652] team0: Port device team_slave_0 added [ 176.742314][T10652] team0: Port device team_slave_1 added [ 176.761593][T10652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.768762][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.795498][T10652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.824153][T10652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.831417][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.848412][T10788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10788 comm=syz.4.1962 [ 176.857992][T10652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.003296][T10652] hsr_slave_0: entered promiscuous mode [ 177.022094][T10652] hsr_slave_1: entered promiscuous mode [ 177.034995][T10652] debugfs: 'hsr0' already exists in 'hsr' [ 177.040991][T10652] Cannot create hsr debugfs directory [ 177.075983][T10617] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.106337][T10617] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.116292][T10617] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.148725][T10617] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.215513][ T9619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.242121][ T7688] IPVS: stop unused estimator thread 0... [ 177.301675][T10617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.312974][T10617] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.324435][ T6851] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.331742][ T6851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.357121][T10617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.367668][T10617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.519665][ T6851] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.519725][ T6851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.671187][T10617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.696130][T10652] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 177.742394][T10652] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 177.753416][T10652] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 177.755817][T10652] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 177.856244][T10652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.864256][T10652] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.899695][ T7688] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.907584][ T7688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.938419][ T7688] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.945796][ T7688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.022792][T10652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.089472][T10867] __nla_validate_parse: 6 callbacks suppressed [ 178.089490][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1971'. [ 178.143249][T10617] veth0_vlan: entered promiscuous mode [ 178.171105][T10617] veth1_vlan: entered promiscuous mode [ 178.225980][T10652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.240418][T10617] veth0_macvtap: entered promiscuous mode [ 178.286733][ T29] audit: type=1326 audit(2000000074.850:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f141caeb9 code=0x7ffc0000 [ 178.310533][ T29] audit: type=1326 audit(2000000074.850:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f141caeb9 code=0x7ffc0000 [ 178.334853][ T29] audit: type=1326 audit(2000000074.850:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4f141caeb9 code=0x7ffc0000 [ 178.359117][ T29] audit: type=1326 audit(2000000074.850:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f141caeb9 code=0x7ffc0000 [ 178.383648][ T29] audit: type=1326 audit(2000000074.850:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f141caeb9 code=0x7ffc0000 [ 178.388955][T10617] veth1_macvtap: entered promiscuous mode [ 178.407592][ T29] audit: type=1326 audit(2000000074.850:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f141caeb9 code=0x7ffc0000 [ 178.437272][ T29] audit: type=1326 audit(2000000074.850:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f141caeb9 code=0x7ffc0000 [ 178.452410][T10617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.461699][ T29] audit: type=1326 audit(2000000074.850:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f141caeb9 code=0x7ffc0000 [ 178.461779][ T29] audit: type=1326 audit(2000000074.850:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10893 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f141caeb9 code=0x7ffc0000 [ 178.506439][T10617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.564564][ T69] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.582256][ T69] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.596575][T10912] pim6reg: entered allmulticast mode [ 178.611808][T10912] loop4: detected capacity change from 0 to 512 [ 178.627311][ T69] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.657273][ T7688] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.720147][T10912] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.749904][T10912] EXT4-fs (loop4): 1 orphan inode deleted [ 178.755794][T10912] EXT4-fs (loop4): 1 truncate cleaned up [ 178.765745][T10912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.791043][T10912] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.1975: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 178.801755][T10932] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1927'. [ 178.811567][T10912] EXT4-fs (loop4): Remounting filesystem read-only [ 178.835218][T10652] veth0_vlan: entered promiscuous mode [ 178.858617][T10652] veth1_vlan: entered promiscuous mode [ 178.889034][ T9619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.939239][T10652] veth0_macvtap: entered promiscuous mode [ 178.949980][T10652] veth1_macvtap: entered promiscuous mode [ 178.992674][T10652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.008824][T10652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.030114][ T7688] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.078039][ T7688] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.078084][ T7688] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.083825][ T7688] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.562563][T10984] vlan2: entered allmulticast mode [ 179.567873][T10984] bond0: entered allmulticast mode [ 179.573118][T10984] bond_slave_0: entered allmulticast mode [ 179.578977][T10984] bond_slave_1: entered allmulticast mode [ 179.642612][T10984] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1983'. [ 179.702512][T10984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.759523][T10984] bond_slave_0: left allmulticast mode [ 179.770710][T10984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.801594][T10984] bond_slave_1: left allmulticast mode [ 179.819443][T10984] bond0 (unregistering): Released all slaves [ 179.851139][T10992] tipc: Enabling of bearer rejected, media not registered [ 179.974330][T11006] loop4: detected capacity change from 0 to 1024 [ 179.990343][T11009] tipc: Enabling of bearer rejected, media not registered [ 180.030665][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1987'. [ 180.066601][T11006] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 180.135729][T11020] loop5: detected capacity change from 0 to 164 [ 180.156710][T11020] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 180.166656][T11023] 9pnet_fd: Insufficient options for proto=fd [ 180.184389][T11020] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 180.214795][T11020] Symlink component flag not implemented [ 180.221117][T11020] Symlink component flag not implemented [ 180.227327][T11020] Symlink component flag not implemented (7) [ 180.233610][T11020] Symlink component flag not implemented (116) [ 180.797442][T11075] tipc: Enabling of bearer rejected, media not registered [ 180.929351][T11087] loop4: detected capacity change from 0 to 512 [ 180.946910][T11087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.984750][T11087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0002] [ 181.034486][T11087] System zones: 1-2, 4-12, 8-8 [ 181.068456][T11087] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1999: iget: bad i_size value: 38620345925642 [ 181.089746][T11087] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1999: couldn't read orphan inode 15 (err -117) [ 181.144846][T11087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.263612][T11113] netlink: 'syz.6.2002': attribute type 10 has an invalid length. [ 181.275359][T11113] veth0_vlan: entered allmulticast mode [ 181.324179][T11113] veth0_vlan: left promiscuous mode [ 181.341682][T11120] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1999: bg 0: block 5: invalid block bitmap [ 181.349369][T11113] veth0_vlan: entered promiscuous mode [ 181.392461][T11113] team0: Device veth0_vlan failed to register rx_handler [ 181.410819][T11120] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 496 with error 28 [ 181.423449][T11120] EXT4-fs (loop4): This should not happen!! Data will be lost [ 181.423449][T11120] [ 181.433261][T11120] EXT4-fs (loop4): Total free blocks count 0 [ 181.439374][T11120] EXT4-fs (loop4): Free/Dirty block details [ 181.445588][T11120] EXT4-fs (loop4): free_blocks=0 [ 181.450573][T11120] EXT4-fs (loop4): dirty_blocks=2820 [ 181.455902][T11120] EXT4-fs (loop4): Block reservation details [ 181.462103][T11120] EXT4-fs (loop4): i_reserved_data_blocks=552 [ 181.520717][ T6851] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 181.566741][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 181.566759][ T29] audit: type=1326 audit(2000000078.130:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 181.651602][T11137] tipc: Enabling of bearer rejected, media not registered [ 181.658230][ T29] audit: type=1326 audit(2000000078.160:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 181.683805][ T29] audit: type=1326 audit(2000000078.170:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 181.707944][ T29] audit: type=1326 audit(2000000078.170:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 181.731857][ T29] audit: type=1326 audit(2000000078.170:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 181.755793][ T29] audit: type=1326 audit(2000000078.190:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 181.780095][ T29] audit: type=1326 audit(2000000078.190:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 181.804108][ T29] audit: type=1326 audit(2000000078.190:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 181.827946][ T29] audit: type=1326 audit(2000000078.190:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 181.852885][ T29] audit: type=1326 audit(2000000078.190:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 181.905770][T11158] netlink: 'syz.1.2009': attribute type 9 has an invalid length. [ 181.941600][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2010'. [ 181.994654][T11087] EXT4-fs error (device loop4): __ext4_iget:5426: inode #16: block 50331678: comm syz.4.1999: invalid block [ 182.157355][T11180] lo speed is unknown, defaulting to 1000 [ 182.262882][T11199] vlan2: entered allmulticast mode [ 182.268229][T11199] bond0: entered allmulticast mode [ 182.273501][T11199] bond_slave_0: entered allmulticast mode [ 182.279253][T11201] FAULT_INJECTION: forcing a failure. [ 182.279253][T11201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.279459][T11199] bond_slave_1: entered allmulticast mode [ 182.293107][T11201] CPU: 0 UID: 0 PID: 11201 Comm: syz.4.2018 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.293143][T11201] Tainted: [W]=WARN [ 182.293151][T11201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.293190][T11201] Call Trace: [ 182.293253][T11201] [ 182.293262][T11201] __dump_stack+0x1d/0x30 [ 182.293290][T11201] dump_stack_lvl+0x95/0xd0 [ 182.293313][T11201] dump_stack+0x15/0x1b [ 182.293334][T11201] should_fail_ex+0x263/0x280 [ 182.293393][T11201] should_fail+0xb/0x20 [ 182.293440][T11201] should_fail_usercopy+0x1a/0x20 [ 182.293473][T11201] _copy_from_user+0x1c/0xb0 [ 182.293545][T11201] get_user_ifreq+0x52/0x110 [ 182.293569][T11201] sock_ioctl+0x54e/0x610 [ 182.293594][T11201] ? __pfx_sock_ioctl+0x10/0x10 [ 182.293648][T11201] __se_sys_ioctl+0xce/0x140 [ 182.293681][T11201] __x64_sys_ioctl+0x43/0x50 [ 182.293741][T11201] x64_sys_call+0x14b0/0x3000 [ 182.293767][T11201] do_syscall_64+0xc0/0x2a0 [ 182.293800][T11201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.293889][T11201] RIP: 0033:0x7f4f141caeb9 [ 182.293908][T11201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.293928][T11201] RSP: 002b:00007f4f12c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.293952][T11201] RAX: ffffffffffffffda RBX: 00007f4f14445fa0 RCX: 00007f4f141caeb9 [ 182.293967][T11201] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 182.294023][T11201] RBP: 00007f4f12c27090 R08: 0000000000000000 R09: 0000000000000000 [ 182.294037][T11201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.294050][T11201] R13: 00007f4f14446038 R14: 00007f4f14445fa0 R15: 00007ffc391769d8 [ 182.294070][T11201] [ 182.329231][T11202] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2019'. [ 182.536720][T11202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.581760][T11202] bond_slave_0: left allmulticast mode [ 182.632854][T11202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.674142][T11202] bond_slave_1: left allmulticast mode [ 182.693639][T11202] bond0 (unregistering): Released all slaves [ 182.960829][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2026'. [ 183.017577][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2030'. [ 183.047762][T11253] cgroup: name respecified [ 183.068971][T11256] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 183.107209][T11256] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 183.133635][T11256] batman_adv: batadv0: Interface deactivated: ipvlan6 [ 183.164264][T11256] batman_adv: batadv0: Interface deactivated: ipvlan7 [ 183.174566][T11256] batman_adv: batadv0: Interface deactivated: ipvlan8 [ 183.181871][T11256] batman_adv: batadv0: Interface deactivated: ipvlan9 [ 183.189112][T11256] batman_adv: batadv0: Interface deactivated: ipvlan10 [ 183.200975][T11256] batman_adv: batadv0: Removing interface: ipvlan2 [ 183.228511][T11256] batman_adv: batadv0: Removing interface: ipvlan3 [ 183.249363][T11256] batman_adv: batadv0: Removing interface: ipvlan4 [ 183.261194][T11256] batman_adv: batadv0: Removing interface: ipvlan5 [ 183.273217][T11256] batman_adv: batadv0: Removing interface: ipvlan6 [ 183.280381][T11285] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2035'. [ 183.295411][T11256] batman_adv: batadv0: Removing interface: ipvlan7 [ 183.303890][T11256] batman_adv: batadv0: Removing interface: ipvlan8 [ 183.312647][T11256] batman_adv: batadv0: Removing interface: ipvlan9 [ 183.328682][T11256] batman_adv: batadv0: Removing interface: ipvlan10 [ 183.423443][T11294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2038'. [ 183.474945][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2038'. [ 183.550046][T11311] loop4: detected capacity change from 0 to 512 [ 183.562950][T11311] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 183.605622][T11311] EXT4-fs (loop4): 1 orphan inode deleted [ 183.611560][T11311] EXT4-fs (loop4): 1 truncate cleaned up [ 183.630724][T11311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.657973][T11311] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.2041: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 183.685667][T11311] EXT4-fs (loop4): Remounting filesystem read-only [ 183.706902][ T9619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.730251][T11326] bond0: option lacp_rate: invalid value (100) [ 183.743488][T11326] bond0 (unregistering): Released all slaves [ 184.113386][T11367] loop6: detected capacity change from 0 to 512 [ 184.144692][T11367] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 184.204133][T11367] EXT4-fs (loop6): orphan cleanup on readonly fs [ 184.250627][T11367] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2050: Failed to acquire dquot type 1 [ 184.324612][T11367] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2050: bg 0: block 40: padding at end of block bitmap is not set [ 184.369467][T11367] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 184.420630][T11367] EXT4-fs (loop6): 1 truncate cleaned up [ 184.426942][T11367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.478840][T11367] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.2050: corrupted xattr block 31: invalid header [ 184.517443][T11367] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 184.540326][T11367] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #16: comm syz.6.2050: corrupted xattr block 31: invalid header [ 184.589630][T11367] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 184.638393][T11367] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.2050: bad symlink. [ 184.660067][T11398] random: crng reseeded on system resumption [ 184.681218][T11398] Restarting kernel threads ... [ 184.695071][T11398] Done restarting kernel threads. [ 184.949093][T10652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.156375][T11410] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2056'. [ 185.181024][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2056'. [ 185.600456][T11439] FAULT_INJECTION: forcing a failure. [ 185.600456][T11439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.613934][T11439] CPU: 1 UID: 0 PID: 11439 Comm: syz.5.2061 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.613970][T11439] Tainted: [W]=WARN [ 185.613977][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.614038][T11439] Call Trace: [ 185.614046][T11439] [ 185.614056][T11439] __dump_stack+0x1d/0x30 [ 185.614084][T11439] dump_stack_lvl+0x95/0xd0 [ 185.614110][T11439] dump_stack+0x15/0x1b [ 185.614134][T11439] should_fail_ex+0x263/0x280 [ 185.614207][T11439] should_fail+0xb/0x20 [ 185.614239][T11439] should_fail_usercopy+0x1a/0x20 [ 185.614277][T11439] _copy_from_user+0x1c/0xb0 [ 185.614298][T11439] ___sys_recvmsg+0xaa/0x3b0 [ 185.614392][T11439] do_recvmmsg+0x1ef/0x560 [ 185.614422][T11439] ? fput+0x8f/0xc0 [ 185.614448][T11439] __x64_sys_recvmmsg+0xe5/0x170 [ 185.614470][T11439] x64_sys_call+0x2b75/0x3000 [ 185.614553][T11439] do_syscall_64+0xc0/0x2a0 [ 185.614596][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.614701][T11439] RIP: 0033:0x7f79e940aeb9 [ 185.614721][T11439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.614760][T11439] RSP: 002b:00007f79e7e46028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 185.614784][T11439] RAX: ffffffffffffffda RBX: 00007f79e9686090 RCX: 00007f79e940aeb9 [ 185.614874][T11439] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 185.614890][T11439] RBP: 00007f79e7e46090 R08: 0000000000000000 R09: 0000000000000000 [ 185.614905][T11439] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 185.614919][T11439] R13: 00007f79e9686128 R14: 00007f79e9686090 R15: 00007ffc29ba5ff8 [ 185.614939][T11439] [ 186.478094][T11450] FAULT_INJECTION: forcing a failure. [ 186.478094][T11450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.491235][T11450] CPU: 0 UID: 0 PID: 11450 Comm: syz.4.2062 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 186.491274][T11450] Tainted: [W]=WARN [ 186.491283][T11450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.491298][T11450] Call Trace: [ 186.491306][T11450] [ 186.491389][T11450] __dump_stack+0x1d/0x30 [ 186.491417][T11450] dump_stack_lvl+0x95/0xd0 [ 186.491468][T11450] dump_stack+0x15/0x1b [ 186.491490][T11450] should_fail_ex+0x263/0x280 [ 186.491587][T11450] should_fail+0xb/0x20 [ 186.491614][T11450] should_fail_usercopy+0x1a/0x20 [ 186.491652][T11450] _copy_to_user+0x20/0xa0 [ 186.491715][T11450] simple_read_from_buffer+0xb5/0x130 [ 186.491750][T11450] proc_fail_nth_read+0x10e/0x150 [ 186.491822][T11450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.491954][T11450] vfs_read+0x1ab/0x7f0 [ 186.491977][T11450] ? __rcu_read_unlock+0x4e/0x70 [ 186.492008][T11450] ? __fget_files+0x184/0x1c0 [ 186.492030][T11450] ? mutex_lock+0x57/0x90 [ 186.492057][T11450] ksys_read+0xdc/0x1a0 [ 186.492147][T11450] __x64_sys_read+0x40/0x50 [ 186.492170][T11450] x64_sys_call+0x2889/0x3000 [ 186.492198][T11450] do_syscall_64+0xc0/0x2a0 [ 186.492230][T11450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.492258][T11450] RIP: 0033:0x7f4f1418b78e [ 186.492275][T11450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.492296][T11450] RSP: 002b:00007f4f12c05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.492318][T11450] RAX: ffffffffffffffda RBX: 00007f4f12c066c0 RCX: 00007f4f1418b78e [ 186.492333][T11450] RDX: 000000000000000f RSI: 00007f4f12c060a0 RDI: 0000000000000005 [ 186.492346][T11450] RBP: 00007f4f12c06090 R08: 0000000000000000 R09: 0000000000000000 [ 186.492439][T11450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.492455][T11450] R13: 00007f4f14446128 R14: 00007f4f14446090 R15: 00007ffc391769d8 [ 186.492477][T11450] [ 186.760406][T11485] loop5: detected capacity change from 0 to 512 [ 186.864272][T11485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.013290][T11495] loop4: detected capacity change from 0 to 1024 [ 187.018946][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 187.018964][ T29] audit: type=1400 audit(2000000083.580:3683): avc: denied { write } for pid=11496 comm="syz.6.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.060785][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.071897][T11495] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2066: bad orphan inode 134217728 [ 187.146588][T11495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.258413][ T9619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.288478][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2074'. [ 187.315240][T11512] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2072'. [ 187.401691][ T29] audit: type=1400 audit(2000000083.970:3684): avc: denied { write } for pid=11516 comm="syz.6.2076" path="socket:[34766]" dev="sockfs" ino=34766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 187.429013][T11517] delete_channel: no stack [ 187.478470][ T29] audit: type=1326 audit(2000000084.030:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.6.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 187.502760][ T29] audit: type=1326 audit(2000000084.030:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.6.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 187.527060][ T29] audit: type=1326 audit(2000000084.030:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.6.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 187.551308][ T29] audit: type=1326 audit(2000000084.030:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.6.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 187.575771][ T29] audit: type=1326 audit(2000000084.030:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.6.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 187.599750][ T29] audit: type=1326 audit(2000000084.030:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.6.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 187.623444][ T29] audit: type=1326 audit(2000000084.030:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.6.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 187.647328][ T29] audit: type=1326 audit(2000000084.030:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.6.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 187.722985][T11533] FAULT_INJECTION: forcing a failure. [ 187.722985][T11533] name failslab, interval 1, probability 0, space 0, times 0 [ 187.736096][T11533] CPU: 1 UID: 0 PID: 11533 Comm: syz.6.2081 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 187.736130][T11533] Tainted: [W]=WARN [ 187.736137][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.736197][T11533] Call Trace: [ 187.736205][T11533] [ 187.736216][T11533] __dump_stack+0x1d/0x30 [ 187.736243][T11533] dump_stack_lvl+0x95/0xd0 [ 187.736358][T11533] dump_stack+0x15/0x1b [ 187.736456][T11533] should_fail_ex+0x263/0x280 [ 187.736485][T11533] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 187.736566][T11533] should_failslab+0x8c/0xb0 [ 187.736648][T11533] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 187.736691][T11533] ? shmem_alloc_inode+0x34/0x50 [ 187.736726][T11533] ? kstrtouint+0x76/0xc0 [ 187.736752][T11533] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 187.736861][T11533] shmem_alloc_inode+0x34/0x50 [ 187.736892][T11533] alloc_inode+0x40/0x170 [ 187.736918][T11533] new_inode+0x1d/0xe0 [ 187.736982][T11533] shmem_get_inode+0x246/0x750 [ 187.737016][T11533] __shmem_file_setup+0x112/0x210 [ 187.737092][T11533] shmem_file_setup+0x3b/0x50 [ 187.737123][T11533] memfd_alloc_file+0x4e/0x300 [ 187.737155][T11533] __se_sys_memfd_create+0x2e1/0x3b0 [ 187.737326][T11533] __x64_sys_memfd_create+0x31/0x40 [ 187.737410][T11533] x64_sys_call+0x28cb/0x3000 [ 187.737441][T11533] do_syscall_64+0xc0/0x2a0 [ 187.737473][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.737515][T11533] RIP: 0033:0x7fb6b806aeb9 [ 187.737532][T11533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.737552][T11533] RSP: 002b:00007fb6b6ac6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 187.737577][T11533] RAX: ffffffffffffffda RBX: 0000000000000bc5 RCX: 00007fb6b806aeb9 [ 187.737636][T11533] RDX: 00007fb6b6ac6ee0 RSI: 0000000000000000 RDI: 00007fb6b80d7333 [ 187.737654][T11533] RBP: 0000200000002380 R08: 00000000ffffffff R09: 0000000000000000 [ 187.737699][T11533] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000240 [ 187.737716][T11533] R13: 00007fb6b6ac6ee0 R14: 00007fb6b6ac6ea0 R15: 00002000000000c0 [ 187.737739][T11533] [ 188.163697][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 188.324190][T11561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2089'. [ 188.405472][T11543] lo speed is unknown, defaulting to 1000 [ 188.448431][T11567] loop5: detected capacity change from 0 to 512 [ 188.487899][T11567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.525674][T11567] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.2093: ea_inode with extended attributes [ 188.581037][T11543] chnl_net:caif_netlink_parms(): no params data found [ 188.581907][T11567] EXT4-fs (loop5): Remounting filesystem read-only [ 188.605991][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2096'. [ 188.608278][T11567] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 188.647042][T11339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2047'. [ 188.668443][T11567] EXT4-fs (loop5): 1 orphan inode deleted [ 188.715057][T11567] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.728933][T11543] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.736020][T11543] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.743988][T11543] bridge_slave_0: entered allmulticast mode [ 188.750609][T11543] bridge_slave_0: entered promiscuous mode [ 188.757701][T11543] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.765032][T11543] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.779881][T11543] bridge_slave_1: entered allmulticast mode [ 188.787045][T11543] bridge_slave_1: entered promiscuous mode [ 188.809215][T10617] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 188.822975][T11590] loop4: detected capacity change from 0 to 512 [ 188.830500][T11590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.861948][T11543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.881034][T11590] EXT4-fs (loop4): 1 orphan inode deleted [ 188.886879][T11590] EXT4-fs (loop4): 1 truncate cleaned up [ 188.893802][T11543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.913481][T11590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.967872][T11543] team0: Port device team_slave_0 added [ 188.974793][T11543] team0: Port device team_slave_1 added [ 188.987539][ T9619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.001352][T11543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.008530][T11543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.034567][T11543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.046014][T11543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.053302][T11543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.080270][T11543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.138095][T11621] loop5: detected capacity change from 0 to 1024 [ 189.164576][ T7687] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.169373][T11621] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2106: bad orphan inode 134217728 [ 189.190100][T11621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.204657][T11543] hsr_slave_0: entered promiscuous mode [ 189.221567][T11543] hsr_slave_1: entered promiscuous mode [ 189.240660][T11543] debugfs: 'hsr0' already exists in 'hsr' [ 189.246458][T11543] Cannot create hsr debugfs directory [ 189.264727][T11630] 9p: Bad value for 'rfdno' [ 189.272426][ T7687] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.284557][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.368653][ T7687] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.435088][ T7687] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.676424][T11663] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2115'. [ 189.730032][ T7687] bridge_slave_1: left allmulticast mode [ 189.735861][ T7687] bridge_slave_1: left promiscuous mode [ 189.741977][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.842949][T11668] loop5: detected capacity change from 0 to 512 [ 189.928773][T11672] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 189.936034][T11672] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 189.943834][T11672] vhci_hcd vhci_hcd.0: Device attached [ 189.954225][T11668] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 189.990827][ T7687] bridge_slave_0: left allmulticast mode [ 189.996722][ T7687] bridge_slave_0: left promiscuous mode [ 190.002516][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.034463][T11672] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 190.041084][T11672] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.048190][T11668] EXT4-fs (loop5): 1 orphan inode deleted [ 190.048873][T11672] vhci_hcd vhci_hcd.0: Device attached [ 190.054505][T11668] EXT4-fs (loop5): 1 truncate cleaned up [ 190.066745][T11668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.070266][T11672] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(7) [ 190.086049][T11672] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.094072][T11672] vhci_hcd vhci_hcd.0: Device attached [ 190.124270][T11685] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(10) [ 190.131101][T11685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.138829][T11685] vhci_hcd vhci_hcd.0: Device attached [ 190.139047][T11684] loop4: detected capacity change from 0 to 1024 [ 190.152717][T11686] vhci_hcd: connection closed [ 190.153052][ T6505] vhci_hcd vhci_hcd.6: stop threads [ 190.163152][ T6505] vhci_hcd vhci_hcd.6: release socket [ 190.168580][ T6505] vhci_hcd vhci_hcd.6: disconnect device [ 190.187506][T11673] vhci_hcd: connection closed [ 190.200944][ T69] vhci_hcd vhci_hcd.6: stop threads [ 190.206629][T11676] vhci_hcd: connection closed [ 190.210980][ T69] vhci_hcd vhci_hcd.6: release socket [ 190.211099][T11680] vhci_hcd: connection closed [ 190.215789][ T69] vhci_hcd vhci_hcd.6: disconnect device [ 190.238410][ T69] vhci_hcd vhci_hcd.6: stop threads [ 190.243692][ T69] vhci_hcd vhci_hcd.6: release socket [ 190.249129][ T69] vhci_hcd vhci_hcd.6: disconnect device [ 190.258674][ T69] vhci_hcd vhci_hcd.6: stop threads [ 190.263939][ T69] vhci_hcd vhci_hcd.6: release socket [ 190.269727][ T69] vhci_hcd vhci_hcd.6: disconnect device [ 190.277453][T11684] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2120: bad orphan inode 134217728 [ 190.283973][ T23] usb 14-1: enqueue for inactive port 0 [ 190.289601][T11684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.320253][ T9619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.334456][T11667] pim6reg: entered allmulticast mode [ 190.393117][ T7687] hsr_slave_0: left promiscuous mode [ 190.394423][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.406333][ T7687] hsr_slave_1: left promiscuous mode [ 190.406794][ T7687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.406812][ T7687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.410848][ T7687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.447068][ T7687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.459136][T11705] FAULT_INJECTION: forcing a failure. [ 190.459136][T11705] name failslab, interval 1, probability 0, space 0, times 0 [ 190.459174][T11705] CPU: 1 UID: 0 PID: 11705 Comm: syz.5.2124 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 190.459225][T11705] Tainted: [W]=WARN [ 190.459233][T11705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.459248][T11705] Call Trace: [ 190.459256][T11705] [ 190.459265][T11705] __dump_stack+0x1d/0x30 [ 190.459353][T11705] dump_stack_lvl+0x95/0xd0 [ 190.459382][T11705] dump_stack+0x15/0x1b [ 190.459477][T11705] should_fail_ex+0x263/0x280 [ 190.459507][T11705] should_failslab+0x8c/0xb0 [ 190.459532][T11705] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 190.459653][T11705] ? alloc_unbound_pwq+0x641/0x7e0 [ 190.459683][T11705] alloc_unbound_pwq+0x641/0x7e0 [ 190.459711][T11705] apply_wqattrs_prepare+0x1df/0x840 [ 190.459741][T11705] alloc_workqueue_noprof+0xd3a/0x1710 [ 190.459818][T11705] ? kfree_const+0x3e/0x50 [ 190.459843][T11705] ? dev_set_name+0x83/0xb0 [ 190.459938][T11705] hci_register_dev+0x167/0x570 [ 190.459974][T11705] hci_uart_tty_ioctl+0x520/0x5c0 [ 190.460000][T11705] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 190.460170][T11705] tty_ioctl+0x83e/0xb80 [ 190.460201][T11705] ? __pfx_tty_ioctl+0x10/0x10 [ 190.460294][T11705] __se_sys_ioctl+0xce/0x140 [ 190.460400][T11705] __x64_sys_ioctl+0x43/0x50 [ 190.460434][T11705] x64_sys_call+0x14b0/0x3000 [ 190.460464][T11705] do_syscall_64+0xc0/0x2a0 [ 190.460506][T11705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.460531][T11705] RIP: 0033:0x7f79e940aeb9 [ 190.460549][T11705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.460570][T11705] RSP: 002b:00007f79e7e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.460633][T11705] RAX: ffffffffffffffda RBX: 00007f79e9685fa0 RCX: 00007f79e940aeb9 [ 190.460650][T11705] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000005 [ 190.460666][T11705] RBP: 00007f79e7e67090 R08: 0000000000000000 R09: 0000000000000000 [ 190.460682][T11705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.460696][T11705] R13: 00007f79e9686038 R14: 00007f79e9685fa0 R15: 00007ffc29ba5ff8 [ 190.460736][T11705] [ 190.460837][T11705] Bluetooth: Can't register HCI device [ 190.484032][ T7687] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 190.484054][ T7687] batman_adv: batadv0: Removing interface: ipvlan2 [ 190.497231][ T7687] veth1_macvtap: left promiscuous mode [ 190.497327][ T7687] veth0_macvtap: left promiscuous mode [ 190.497430][ T7687] veth1_vlan: left promiscuous mode [ 190.497469][ T7687] veth0_vlan: left promiscuous mode [ 190.515303][ T23] usb 14-1: enqueue for inactive port 0 [ 190.572684][T11716] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2127'. [ 190.783826][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2129'. [ 190.826563][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2129'. [ 190.847110][ T7687] pim6reg (unregistering): left allmulticast mode [ 190.918601][ T7687] team0 (unregistering): Port device team_slave_1 removed [ 190.928007][T11751] loop5: detected capacity change from 0 to 1024 [ 190.934702][ T7687] team0 (unregistering): Port device C removed [ 190.977068][T11751] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2131: bad orphan inode 134217728 [ 190.977710][T11751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.986865][T11752] loop6: detected capacity change from 0 to 8192 [ 191.139512][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.170256][T11543] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 191.207525][T11543] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 191.209947][T11543] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 191.230911][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 191.244336][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2135'. [ 191.244588][T11543] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 191.352745][T11801] netlink: 'syz.4.2140': attribute type 46 has an invalid length. [ 191.360853][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 191.375485][T11543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.386804][T11796] xt_TPROXY: Can be used only with -p tcp or -p udp [ 191.410770][T11543] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.422661][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.429890][ T6505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.593079][T11828] netlink: 'syz.6.2145': attribute type 8 has an invalid length. [ 191.630757][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.637967][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.673167][ T23] usb usb14-port1: attempt power cycle [ 191.748324][ T3371] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 192.257015][T11543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.341558][T11867] netlink: 'syz.5.2151': attribute type 16 has an invalid length. [ 192.478732][T11543] veth0_vlan: entered promiscuous mode [ 192.486981][T11543] veth1_vlan: entered promiscuous mode [ 192.505474][T11543] veth0_macvtap: entered promiscuous mode [ 192.517029][T11543] veth1_macvtap: entered promiscuous mode [ 192.530030][T11543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.545702][T11543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.557808][ T69] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.567429][ T69] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.576835][ T69] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.587210][ T69] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.637547][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 192.637574][ T29] audit: type=1400 audit(2000000089.200:3777): avc: denied { getopt } for pid=11898 comm="syz.4.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.644431][T11899] netlink: 'syz.4.2160': attribute type 3 has an invalid length. [ 193.553312][T11936] loop5: detected capacity change from 0 to 512 [ 193.570410][T11936] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 193.577259][T11936] EXT4-fs (loop5): mount failed [ 193.629571][T11945] __nla_validate_parse: 12 callbacks suppressed [ 193.629591][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2174'. [ 193.651355][T11945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2174'. [ 193.722681][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2179'. [ 193.825985][T11962] loop5: detected capacity change from 0 to 512 [ 193.889874][T11964] lo speed is unknown, defaulting to 1000 [ 193.954712][T11958] tipc: Failed to remove unknown binding: 66,0,0/0:1495949842/1495949843 [ 193.954940][T11958] tipc: Failed to remove unknown binding: 66,0,0/0:1495949842/1495949843 [ 194.120212][T11977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.129339][T11977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.205894][T11981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2188'. [ 194.216063][T11981] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2188'. [ 194.268442][ T23] usb usb14-port1: unable to enumerate USB device [ 194.386296][T11990] random: crng reseeded on system resumption [ 194.399325][T11990] Restarting kernel threads ... [ 194.404747][T11990] Done restarting kernel threads. [ 194.757163][T11995] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2193'. [ 195.165465][T11855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.259600][T12014] loop4: detected capacity change from 0 to 512 [ 195.272080][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2200'. [ 195.284919][T12014] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 195.296673][T12014] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.311859][T12013] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2200'. [ 195.318473][T12014] block device autoloading is deprecated and will be removed. [ 195.338489][T12014] EXT4-fs (loop4): couldn't read superblock of external journal [ 195.469840][T12032] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2204'. [ 195.472503][T12039] loop4: detected capacity change from 0 to 4096 [ 195.507191][T12039] EXT4-fs: Ignoring removed bh option [ 195.535566][T12047] loop6: detected capacity change from 0 to 164 [ 195.538203][ T29] audit: type=1326 audit(2000000092.100:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12046 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 195.566444][ T29] audit: type=1326 audit(2000000092.100:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12046 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 195.590885][ T29] audit: type=1326 audit(2000000092.100:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12046 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 195.640120][T12047] isofs_fill_super: root inode is not a directory. Corrupted media? [ 195.645557][ T29] audit: type=1326 audit(2000000092.110:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12046 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 195.649757][T12039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.791866][ T29] audit: type=1400 audit(2000000092.360:3782): avc: denied { add_name } for pid=12038 comm="syz.4.2206" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 195.813961][T12039] EXT4-fs error (device loop4): ext4_get_first_dir_block:3547: inode #12: block 80: comm syz.4.2206: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 195.827999][T12064] loop6: detected capacity change from 0 to 512 [ 195.858199][ T29] audit: type=1326 audit(2000000092.380:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 195.881729][T12064] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.884393][ T29] audit: type=1326 audit(2000000092.380:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 195.920377][ T29] audit: type=1326 audit(2000000092.380:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb6b806aeb9 code=0x7ffc0000 [ 195.926950][T12072] FAULT_INJECTION: forcing a failure. [ 195.926950][T12072] name failslab, interval 1, probability 0, space 0, times 0 [ 195.945029][ T29] audit: type=1326 audit(2000000092.380:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.6.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb6b806ac22 code=0x7ffc0000 [ 195.981957][T12072] CPU: 1 UID: 0 PID: 12072 Comm: syz.7.2212 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.981997][T12072] Tainted: [W]=WARN [ 195.982069][T12072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.982083][T12072] Call Trace: [ 195.982091][T12072] [ 195.982099][T12072] __dump_stack+0x1d/0x30 [ 195.982148][T12072] dump_stack_lvl+0x95/0xd0 [ 195.982173][T12072] dump_stack+0x15/0x1b [ 195.982196][T12072] should_fail_ex+0x263/0x280 [ 195.982259][T12072] should_failslab+0x8c/0xb0 [ 195.982287][T12072] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 195.982320][T12072] ? __d_alloc+0x37/0x340 [ 195.982351][T12072] __d_alloc+0x37/0x340 [ 195.982445][T12072] ? default_pointer+0xf2/0x5e0 [ 195.982501][T12072] d_alloc+0x2e/0x100 [ 195.982531][T12072] lookup_one_qstr_excl+0x99/0x250 [ 195.982626][T12072] start_dirop+0x3e/0x70 [ 195.982656][T12072] simple_start_creating+0xa2/0xd0 [ 195.982737][T12072] debugfs_start_creating+0xda/0x150 [ 195.982848][T12072] __debugfs_create_file+0x70/0x2b0 [ 195.982880][T12072] debugfs_create_file_full+0x3f/0x60 [ 195.982912][T12072] ? __pfx_br_dev_setup+0x10/0x10 [ 195.983013][T12072] ref_tracker_dir_debugfs+0x10e/0x220 [ 195.983136][T12072] alloc_netdev_mqs+0x1a7/0xa40 [ 195.983161][T12072] rtnl_create_link+0x239/0x720 [ 195.983203][T12072] rtnl_newlink_create+0x174/0x650 [ 195.983236][T12072] ? security_capable+0x7b/0x90 [ 195.983268][T12072] ? netlink_ns_capable+0x86/0xa0 [ 195.983320][T12072] rtnl_newlink+0xf5b/0x1370 [ 195.983356][T12072] ? __rcu_read_unlock+0x4e/0x70 [ 195.983392][T12072] ? __memcg_slab_free_hook+0x135/0x230 [ 195.983426][T12072] ? __rcu_read_unlock+0x4e/0x70 [ 195.983484][T12072] ? avc_has_perm_noaudit+0xab/0x130 [ 195.983562][T12072] ? cred_has_capability+0x224/0x290 [ 195.983592][T12072] ? selinux_capable+0x31/0x40 [ 195.983612][T12072] ? security_capable+0x7b/0x90 [ 195.983724][T12072] ? ns_capable+0x7c/0xb0 [ 195.983770][T12072] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.983795][T12072] rtnetlink_rcv_msg+0x64b/0x720 [ 195.983834][T12072] netlink_rcv_skb+0x123/0x220 [ 195.983926][T12072] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.983957][T12072] rtnetlink_rcv+0x1c/0x30 [ 195.984031][T12072] netlink_unicast+0x5c0/0x690 [ 195.984068][T12072] netlink_sendmsg+0x5c8/0x6f0 [ 195.984094][T12072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.984141][T12072] ____sys_sendmsg+0x5af/0x600 [ 195.984181][T12072] ___sys_sendmsg+0x195/0x1e0 [ 195.984215][T12072] __x64_sys_sendmsg+0xd4/0x160 [ 195.984244][T12072] x64_sys_call+0x17ba/0x3000 [ 195.984293][T12072] do_syscall_64+0xc0/0x2a0 [ 195.984329][T12072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.984355][T12072] RIP: 0033:0x7fd1a570aeb9 [ 195.984448][T12072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.984471][T12072] RSP: 002b:00007fd1a4167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.984496][T12072] RAX: ffffffffffffffda RBX: 00007fd1a5985fa0 RCX: 00007fd1a570aeb9 [ 195.984561][T12072] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 195.984582][T12072] RBP: 00007fd1a4167090 R08: 0000000000000000 R09: 0000000000000000 [ 195.984597][T12072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.984611][T12072] R13: 00007fd1a5986038 R14: 00007fd1a5985fa0 R15: 00007ffe3e9efc38 [ 195.984630][T12072] [ 196.340831][T12039] EXT4-fs (loop4): Remounting filesystem read-only [ 196.358044][ T9619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.408767][T12079] loop7: detected capacity change from 0 to 512 [ 196.419686][T12083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2213'. [ 196.461703][T12079] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 196.537147][T12079] EXT4-fs (loop7): 1 orphan inode deleted [ 196.543302][T12079] EXT4-fs (loop7): 1 truncate cleaned up [ 196.552939][T12079] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.570866][T12079] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #12: block 7: comm syz.7.2214: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 196.617786][T12079] EXT4-fs (loop7): Remounting filesystem read-only [ 196.758876][T11543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.194861][T12132] serio: Serial port ttyS3 [ 197.254001][T12166] loop4: detected capacity change from 0 to 512 [ 197.292512][T12166] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.325926][T12166] EXT4-fs (loop4): 1 orphan inode deleted [ 197.331918][T12166] EXT4-fs (loop4): 1 truncate cleaned up [ 197.338620][T12166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.363154][T12166] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.2237: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 197.401547][T12166] EXT4-fs (loop4): Remounting filesystem read-only [ 197.439457][ T9619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.490262][T12194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.552156][T12203] random: crng reseeded on system resumption [ 197.578501][T12194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.624445][T12206] netlink: 'syz.5.2242': attribute type 21 has an invalid length. [ 197.782659][T12214] loop5: detected capacity change from 0 to 512 [ 197.799986][T12214] EXT4-fs: Ignoring removed bh option [ 197.821923][T12214] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 197.858358][T12214] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2245: Invalid block bitmap block 0 in block_group 0 [ 197.866720][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.883811][T12214] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 197.904021][T12214] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.2245: attempt to clear invalid blocks 983261 len 1 [ 197.919667][T12214] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.2245: Invalid inode table block 0 in block_group 0 [ 197.951471][T12214] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 198.048420][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.058020][T12214] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 198.114166][T12214] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.2245: Invalid inode table block 0 in block_group 0 [ 198.136253][T12214] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 198.149315][T12214] EXT4-fs error (device loop5): ext4_truncate:4635: inode #11: comm syz.5.2245: mark_inode_dirty error [ 198.161877][T12214] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 198.171298][T12214] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.2245: Invalid inode table block 0 in block_group 0 [ 198.184517][T12214] EXT4-fs (loop5): 1 truncate cleaned up [ 198.191068][T12214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.264421][T12214] netlink: 'syz.5.2245': attribute type 66 has an invalid length. [ 198.308392][T12214] x_tables: duplicate entry at hook 1 [ 198.313649][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 198.313666][ T29] audit: type=1400 audit(2000000094.880:3879): avc: denied { nlmsg_read } for pid=12235 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 198.371384][T12246] loop7: detected capacity change from 0 to 512 [ 198.383675][T12249] lo speed is unknown, defaulting to 1000 [ 198.391361][T12246] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 198.414717][ T29] audit: type=1326 audit(2000000094.980:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 198.438632][ T29] audit: type=1326 audit(2000000094.980:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 198.462616][ T29] audit: type=1326 audit(2000000094.980:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 198.470957][T12246] EXT4-fs (loop7): 1 orphan inode deleted [ 198.486843][ T29] audit: type=1326 audit(2000000094.980:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 198.492499][T12246] EXT4-fs (loop7): 1 truncate cleaned up [ 198.516669][ T29] audit: type=1326 audit(2000000094.980:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 198.522651][T12246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.546532][ T29] audit: type=1326 audit(2000000094.980:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 198.583036][ T29] audit: type=1326 audit(2000000094.980:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 198.606821][ T29] audit: type=1326 audit(2000000094.980:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 198.607013][T12246] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #12: block 7: comm syz.7.2251: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 198.631242][ T29] audit: type=1326 audit(2000000094.980:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f014004aeb9 code=0x7ffc0000 [ 198.686135][T12246] EXT4-fs (loop7): Remounting filesystem read-only [ 198.686931][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.767490][T11543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.803305][T12280] __nla_validate_parse: 5 callbacks suppressed [ 198.803363][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2259'. [ 198.819135][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2259'. [ 198.889760][T12288] loop7: detected capacity change from 0 to 512 [ 198.901701][T12288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.950435][T12288] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.2258: ea_inode with extended attributes [ 198.993496][T12288] EXT4-fs (loop7): Remounting filesystem read-only [ 199.044522][T12288] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 199.058334][T12303] random: crng reseeded on system resumption [ 199.094354][T12288] EXT4-fs (loop7): 1 orphan inode deleted [ 199.129228][T12303] Restarting kernel threads ... [ 199.136444][T12288] EXT4-fs (loop7): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.191611][T12303] Done restarting kernel threads. [ 199.230452][T12288] EXT4-fs (loop7): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 199.446265][T12328] FAULT_INJECTION: forcing a failure. [ 199.446265][T12328] name failslab, interval 1, probability 0, space 0, times 0 [ 199.459373][T12328] CPU: 0 UID: 0 PID: 12328 Comm: syz.7.2265 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 199.459412][T12328] Tainted: [W]=WARN [ 199.459420][T12328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.459434][T12328] Call Trace: [ 199.459442][T12328] [ 199.459450][T12328] __dump_stack+0x1d/0x30 [ 199.459476][T12328] dump_stack_lvl+0x95/0xd0 [ 199.459577][T12328] dump_stack+0x15/0x1b [ 199.459616][T12328] should_fail_ex+0x263/0x280 [ 199.459648][T12328] should_failslab+0x8c/0xb0 [ 199.459674][T12328] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 199.459706][T12328] ? __alloc_skb+0x2f0/0x4b0 [ 199.459746][T12328] __alloc_skb+0x2f0/0x4b0 [ 199.459773][T12328] ? __alloc_skb+0x219/0x4b0 [ 199.459836][T12328] netlink_alloc_large_skb+0xbf/0xf0 [ 199.459866][T12328] netlink_sendmsg+0x40c/0x6f0 [ 199.459892][T12328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.459916][T12328] ____sys_sendmsg+0x5af/0x600 [ 199.460044][T12328] ___sys_sendmsg+0x195/0x1e0 [ 199.460079][T12328] __x64_sys_sendmsg+0xd4/0x160 [ 199.460137][T12328] x64_sys_call+0x17ba/0x3000 [ 199.460168][T12328] do_syscall_64+0xc0/0x2a0 [ 199.460237][T12328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.460264][T12328] RIP: 0033:0x7fd1a570aeb9 [ 199.460284][T12328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.460306][T12328] RSP: 002b:00007fd1a4167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.460405][T12328] RAX: ffffffffffffffda RBX: 00007fd1a5985fa0 RCX: 00007fd1a570aeb9 [ 199.460420][T12328] RDX: 0000000024000840 RSI: 0000200000000080 RDI: 0000000000000003 [ 199.460437][T12328] RBP: 00007fd1a4167090 R08: 0000000000000000 R09: 0000000000000000 [ 199.460453][T12328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.460469][T12328] R13: 00007fd1a5986038 R14: 00007fd1a5985fa0 R15: 00007ffe3e9efc38 [ 199.460493][T12328] [ 227.443772][T12462] loop5: detected capacity change from 0 to 512 [ 227.466972][T12466] loop4: detected capacity change from 0 to 512 [ 227.476094][T12462] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 227.501751][T12470] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2268'. [ 227.513382][T12470] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 227.526125][T12466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.539869][T12470] batman_adv: batadv0: Adding interface: ip6gretap1 [ 227.546849][T12470] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.572911][T12470] batman_adv: batadv0: Interface activated: ip6gretap1 [ 227.584375][T12462] EXT4-fs (loop5): 1 orphan inode deleted [ 227.590233][T12462] EXT4-fs (loop5): 1 truncate cleaned up [ 227.593866][T12466] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.612296][T12478] erspan0: entered promiscuous mode [ 227.614709][T12462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.617570][T12478] erspan0: entered allmulticast mode [ 227.677456][T12462] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #12: block 7: comm syz.5.2272: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 227.704589][T12483] loop6: detected capacity change from 0 to 512 [ 227.719898][T12462] EXT4-fs (loop5): Remounting filesystem read-only [ 227.758826][T12483] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 227.769430][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.815769][ T9619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.826986][T12483] EXT4-fs (loop6): orphan file too big: 8388608 [ 227.836232][T12483] EXT4-fs (loop6): mount failed [ 227.956058][T12493] loop5: detected capacity change from 0 to 512 [ 227.973615][T12493] EXT4-fs: Ignoring removed oldalloc option [ 227.998558][T12493] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.2276: corrupted in-inode xattr: invalid ea_ino [ 228.019838][T12499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12499 comm=syz.6.2273 [ 228.033204][T12468] loop7: detected capacity change from 0 to 512 [ 228.065177][T12501] vlan2: entered allmulticast mode [ 228.070384][T12501] bond0: entered allmulticast mode [ 228.079641][T12501] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2277'. [ 228.106897][T12493] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2276: couldn't read orphan inode 15 (err -117) [ 228.124475][T12483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=12483 comm=syz.6.2273 [ 228.145052][T12468] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 228.154213][T12468] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 228.158351][T12493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.200416][T12468] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 228.211454][T12468] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 228.219580][T12468] System zones: 0-2, 18-18, 34-35 [ 228.225408][T12468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.239260][T12468] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.247598][T12508] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2279'. [ 228.248855][T12493] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.298780][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 228.298796][ T29] audit: type=1326 audit(2000000124.870:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12464 comm="syz.7.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 228.344891][T12510] loop4: detected capacity change from 0 to 512 [ 228.363807][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2282'. [ 228.368179][ T29] audit: type=1326 audit(2000000124.900:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12464 comm="syz.7.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 228.379112][T12512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.397326][ T29] audit: type=1326 audit(2000000124.900:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12464 comm="syz.7.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 228.397362][ T29] audit: type=1326 audit(2000000124.900:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12464 comm="syz.7.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 228.397403][ T29] audit: type=1326 audit(2000000124.900:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12464 comm="syz.7.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 228.397491][ T29] audit: type=1326 audit(2000000124.900:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12464 comm="syz.7.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 228.500246][ T29] audit: type=1326 audit(2000000124.900:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12464 comm="syz.7.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 228.509050][T12493] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2276'. [ 228.524221][ T29] audit: type=1326 audit(2000000124.910:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12464 comm="syz.7.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 228.544124][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2276'. [ 228.566811][T12512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.643262][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2283'. [ 228.658252][T12515] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2283'. [ 228.718514][T12519] loop4: detected capacity change from 0 to 512 [ 228.738844][T12518] loop5: detected capacity change from 0 to 512 [ 228.749377][T12519] EXT4-fs (loop4): orphan cleanup on readonly fs [ 228.758442][ T29] audit: type=1326 audit(2000000125.300:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12464 comm="syz.7.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 228.764411][T12519] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 228.794754][T12519] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.2284: invalid block [ 228.808579][T12519] EXT4-fs (loop4): Remounting filesystem read-only [ 228.815639][T12519] EXT4-fs (loop4): 1 truncate cleaned up [ 228.828730][T12519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.852253][T12518] EXT4-fs (loop5): too many log groups per flexible block group [ 228.891319][T12518] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 228.898427][T12518] EXT4-fs (loop5): mount failed [ 228.941543][ T29] audit: type=1400 audit(2000000125.510:3917): avc: denied { setattr } for pid=12517 comm="syz.4.2284" name="" dev="pipefs" ino=30150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 228.970636][T12535] loop7: detected capacity change from 0 to 512 [ 228.983211][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2289'. [ 228.992586][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2289'. [ 229.001656][T12534] netlink: 'syz.6.2289': attribute type 12 has an invalid length. [ 229.012874][T12518] loop5: detected capacity change from 0 to 4096 [ 229.027960][T12535] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 229.028029][T12535] EXT4-fs (loop7): Invalid default hash set in the superblock [ 229.034961][T12518] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz.5.2285: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 229.062490][T12518] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.2285: Bad quota inode: 4, type: 1 [ 229.076996][T12518] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 229.095868][T12518] EXT4-fs (loop5): mount failed [ 229.134735][T12534] tipc: Started in network mode [ 229.139711][T12534] tipc: Node identity 4, cluster identity 4711 [ 229.145989][T12534] tipc: Node number set to 4 [ 229.187041][T12545] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 229.203385][T12545] EXT4-fs (loop7): 1 orphan inode deleted [ 229.209499][T12545] EXT4-fs (loop7): 1 truncate cleaned up [ 229.216096][T12545] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.232052][T12545] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #12: block 7: comm syz.7.2291: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 229.251606][T12545] EXT4-fs (loop7): Remounting filesystem read-only [ 229.269680][T11543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.336627][T12554] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 229.640922][ T9619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.690624][T12562] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 229.694647][T12557] tipc: Failed to remove unknown binding: 66,0,0/0:233398869/233398870 [ 229.718437][T12557] tipc: Failed to remove unknown binding: 66,0,0/0:233398869/233398870 [ 229.747036][T12564] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 229.759371][T12564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.819345][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.929826][T12575] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 229.945193][T12575] EXT4-fs (loop6): mount failed [ 229.955605][T12575] 9p: Bad value for 'rfdno' [ 230.600494][T12596] batman_adv: batadv0: Adding interface: ipvlan2 [ 230.607261][T12596] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.634066][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.644804][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.655652][T12596] batman_adv: batadv0: Interface activated: ipvlan2 [ 230.744112][T12605] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.775267][T12605] EXT4-fs (loop7): orphan cleanup on readonly fs [ 230.793308][T12605] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.2312: Allocating blocks 41-42 which overlap fs metadata [ 230.809885][T12605] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.2312: Allocating blocks 41-42 which overlap fs metadata [ 230.824924][T12605] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.2312: Failed to acquire dquot type 1 [ 230.839990][T12605] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 230.855310][T12605] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2312: corrupted inode contents [ 230.869250][T12605] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.2312: mark_inode_dirty error [ 230.891302][T12605] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2312: corrupted inode contents [ 230.926465][T12605] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.2312: mark_inode_dirty error [ 230.942063][T12605] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2312: corrupted inode contents [ 230.965576][T12620] ip6erspan0: entered allmulticast mode [ 230.976268][T12605] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 230.995638][T12605] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2312: corrupted inode contents [ 231.009003][T12605] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.2312: mark_inode_dirty error [ 231.021233][T12605] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 231.028988][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.031030][T12605] EXT4-fs (loop7): 1 truncate cleaned up [ 231.043843][T12605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.057512][T12605] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.857350][T12688] EXT4-fs (loop6): 1 orphan inode deleted [ 231.864763][T12688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.952584][T10652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.265701][T12732] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 232.268967][T12731] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 232.304108][T12731] EXT4-fs (loop5): 1 orphan inode deleted [ 232.310005][T12731] EXT4-fs (loop5): 1 truncate cleaned up [ 232.325204][T12731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.389700][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.437060][T12745] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 232.447937][T12745] EXT4-fs (loop5): orphan cleanup on readonly fs [ 232.494788][T12745] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2368: Allocating blocks 41-42 which overlap fs metadata [ 232.518963][T12745] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2368: Allocating blocks 41-42 which overlap fs metadata [ 232.534071][T12745] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2368: Failed to acquire dquot type 1 [ 232.559699][T12745] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 232.598031][T12745] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2368: corrupted inode contents [ 232.626183][T12745] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.2368: mark_inode_dirty error [ 232.655110][T12745] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2368: corrupted inode contents [ 232.689666][T12745] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.2368: mark_inode_dirty error [ 232.711683][T12745] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2368: corrupted inode contents [ 232.724377][T12745] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 232.733815][T12745] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2368: corrupted inode contents [ 232.735886][T12753] __nla_validate_parse: 11 callbacks suppressed [ 232.735904][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2372'. [ 232.746812][T12745] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.2368: mark_inode_dirty error [ 232.787977][T12745] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 232.799451][T12745] EXT4-fs (loop5): 1 truncate cleaned up [ 232.805862][T12745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.828380][T12745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.223917][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2384'. [ 233.373875][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 233.373895][ T29] audit: type=1400 audit(2000000129.940:4030): avc: denied { read } for pid=12804 comm="syz.5.2393" path="socket:[40060]" dev="sockfs" ino=40060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 233.709026][T12823] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2400'. [ 233.718279][T12823] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 233.746474][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2401'. [ 233.843053][T12829] set_capacity_and_notify: 9 callbacks suppressed [ 233.843075][T12829] loop6: detected capacity change from 0 to 512 [ 233.898522][T12819] tipc: Failed to remove unknown binding: 66,0,0/0:4092570030/4092570031 [ 233.907553][T12819] tipc: Failed to remove unknown binding: 66,0,0/0:4092570030/4092570031 [ 233.932827][ T29] audit: type=1400 audit(2000000130.500:4031): avc: denied { setopt } for pid=12833 comm="syz.1.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 233.996296][T12840] loop6: detected capacity change from 0 to 512 [ 234.013060][T12840] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 234.029547][T12840] EXT4-fs (loop6): 1 orphan inode deleted [ 234.035692][T12840] EXT4-fs (loop6): 1 truncate cleaned up [ 234.043032][T12840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.094133][T10652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.201176][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2413'. [ 234.564227][T12876] tipc: Failed to remove unknown binding: 66,0,0/0:375313100/375313101 [ 234.573862][T12876] tipc: Failed to remove unknown binding: 66,0,0/0:375313100/375313101 [ 234.598781][T12890] random: crng reseeded on system resumption [ 234.621815][T12890] Restarting kernel threads ... [ 234.629723][T12890] Done restarting kernel threads. [ 234.991849][T12894] tipc: Failed to remove unknown binding: 66,0,0/0:3227755740/3227755741 [ 235.000620][T12894] tipc: Failed to remove unknown binding: 66,0,0/0:3227755740/3227755741 [ 235.315052][T12925] C: renamed from team_slave_0 [ 235.353351][T12925] netlink: 'syz.1.2447': attribute type 4 has an invalid length. [ 235.361440][T12925] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2447'. [ 235.370689][T12925] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 235.523618][T12933] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2445'. [ 235.563748][T12938] xt_addrtype: ipv6 does not support BROADCAST matching [ 235.640980][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2445'. [ 235.700225][T12935] tipc: Failed to remove unknown binding: 66,0,0/0:1224535035/1224535036 [ 235.712788][T12933] veth1_macvtap: left promiscuous mode [ 235.720804][T12935] tipc: Failed to remove unknown binding: 66,0,0/0:1224535035/1224535036 [ 235.914765][T12944] loop6: detected capacity change from 0 to 512 [ 235.933372][T12946] lo: entered promiscuous mode [ 235.953173][T12946] tunl0: entered promiscuous mode [ 235.960345][T12946] gre0: entered promiscuous mode [ 235.967251][T12944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.983722][T12944] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.994392][T12946] gretap0: entered promiscuous mode [ 236.027536][T12955] loop7: detected capacity change from 0 to 512 [ 236.040433][T12946] erspan0: entered promiscuous mode [ 236.049139][T12946] ip_vti0: entered promiscuous mode [ 236.056019][T12946] ip6_vti0: entered promiscuous mode [ 236.059924][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2450'. [ 236.063820][T12946] sit0: entered promiscuous mode [ 236.078284][T12944] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz.6.2450: Directory hole found for htree leaf block 0 [ 236.079177][T12946] ip6tnl0: entered promiscuous mode [ 236.097643][T12955] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.104795][T12946] ip6gre0: entered promiscuous mode [ 236.115899][T12955] EXT4-fs (loop7): orphan cleanup on readonly fs [ 236.122604][T12946] syz_tun: entered promiscuous mode [ 236.130816][T12955] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.2453: Allocating blocks 41-42 which overlap fs metadata [ 236.145083][T12946] ip6gretap0: entered promiscuous mode [ 236.146243][T10652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.152593][T12946] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.169405][T12946] bridge0: entered promiscuous mode [ 236.175056][T12955] Quota error (device loop7): write_blk: dquota write failed [ 236.179600][T12946] vcan0: entered promiscuous mode [ 236.182511][T12955] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 236.189326][T12946] team0: entered promiscuous mode [ 236.199083][T12955] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.2453: Allocating blocks 41-42 which overlap fs metadata [ 236.202007][T12946] team_slave_0: entered promiscuous mode [ 236.221535][T12946] team_slave_1: entered promiscuous mode [ 236.228600][T12955] Quota error (device loop7): write_blk: dquota write failed [ 236.236480][T12955] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 236.274136][T12955] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.2453: Failed to acquire dquot type 1 [ 236.287128][T12946] dummy0: entered promiscuous mode [ 236.303151][T12946] nlmon0: entered promiscuous mode [ 236.312876][T12946] caif0: entered promiscuous mode [ 236.318098][T12946] batadv0: entered promiscuous mode [ 236.332692][T12955] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 236.355580][T12946] vxcan0: entered promiscuous mode [ 236.362067][T12946] vxcan1: entered promiscuous mode [ 236.368312][T12946] veth0: entered promiscuous mode [ 236.371730][T12972] loop5: detected capacity change from 0 to 512 [ 236.373849][T12955] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2453: corrupted inode contents [ 236.393641][T12946] veth1: entered promiscuous mode [ 236.398810][T12955] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.2453: mark_inode_dirty error [ 236.411489][T12946] wg0: entered promiscuous mode [ 236.424630][T12972] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 236.438588][T12955] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2453: corrupted inode contents [ 236.453531][T12972] EXT4-fs (loop5): orphan cleanup on readonly fs [ 236.460674][T12955] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.2453: mark_inode_dirty error [ 236.472161][T12972] EXT4-fs (loop5): 1 truncate cleaned up [ 236.472424][T12955] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2453: corrupted inode contents [ 236.478603][T12972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 236.493383][T12955] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 236.511060][T12946] wg1: entered promiscuous mode [ 236.516714][T12955] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.2453: corrupted inode contents [ 236.529163][T12946] wg2: entered promiscuous mode [ 236.529548][T12955] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.2453: mark_inode_dirty error [ 236.535248][T12946] veth0_to_bridge: entered promiscuous mode [ 236.545279][T12955] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 236.554621][T12946] bridge_slave_0: left allmulticast mode [ 236.566150][T12946] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.571934][T12955] EXT4-fs (loop7): 1 truncate cleaned up [ 236.580258][T12946] veth1_to_bridge: entered promiscuous mode [ 236.586274][T12946] bridge_slave_1: entered promiscuous mode [ 236.593633][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.593820][T12955] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.615336][T12946] veth0_to_bond: entered promiscuous mode [ 236.623129][T12946] bond_slave_0: entered promiscuous mode [ 236.629269][T12946] veth1_to_bond: entered promiscuous mode [ 236.639759][T12946] bond_slave_1: entered promiscuous mode [ 236.643434][T12955] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.646073][T12946] veth0_to_team: entered promiscuous mode [ 236.660483][T12975] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 236.660538][T12975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.660575][T12975] vhci_hcd vhci_hcd.0: Device attached [ 236.661231][T12975] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 236.687178][T12975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.695182][T12975] vhci_hcd vhci_hcd.0: Device attached [ 236.701577][T12946] team0: Port device team_slave_0 removed [ 236.704424][T12975] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 236.707880][T12946] veth1_to_team: entered promiscuous mode [ 236.713923][T12975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.714013][T12975] vhci_hcd vhci_hcd.0: Device attached [ 236.721500][T12975] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 236.740161][T12975] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 236.748506][T12975] vhci_hcd vhci_hcd.0: Device attached [ 236.758640][T12946] team0: Port device team_slave_1 removed [ 236.769073][T12982] vhci_hcd: connection closed [ 236.769199][ T7687] vhci_hcd vhci_hcd.5: stop threads [ 236.769435][T12980] vhci_hcd: connection closed [ 236.773953][ T7687] vhci_hcd vhci_hcd.5: release socket [ 236.779485][T12976] vhci_hcd: connection closed [ 236.784176][ T7687] vhci_hcd vhci_hcd.5: disconnect device [ 236.784490][T12978] vhci_hcd: connection closed [ 236.798540][T12946] veth0_to_batadv: entered promiscuous mode [ 236.811403][ T7687] vhci_hcd vhci_hcd.5: stop threads [ 236.813069][T12946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.816744][ T7687] vhci_hcd vhci_hcd.5: release socket [ 236.825449][T12946] batadv_slave_0: entered promiscuous mode [ 236.829814][ T7687] vhci_hcd vhci_hcd.5: disconnect device [ 236.838613][T12946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.852546][T12946] veth1_to_batadv: entered promiscuous mode [ 236.859154][ T7687] vhci_hcd vhci_hcd.5: stop threads [ 236.864531][ T7687] vhci_hcd vhci_hcd.5: release socket [ 236.870030][ T7687] vhci_hcd vhci_hcd.5: disconnect device [ 236.883464][T12946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.891817][T12946] batadv_slave_1: entered promiscuous mode [ 236.898056][ T7687] vhci_hcd vhci_hcd.5: stop threads [ 236.903534][ T7687] vhci_hcd vhci_hcd.5: release socket [ 236.909194][ T7687] vhci_hcd vhci_hcd.5: disconnect device [ 236.916392][T12946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.924479][T12946] xfrm0: entered promiscuous mode [ 236.928270][ T9119] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 236.930859][T12946] veth0_to_hsr: entered promiscuous mode [ 236.937094][ T9119] usb 11-1: enqueue for inactive port 0 [ 236.944762][T12946] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 236.958270][ T9119] usb 11-1: enqueue for inactive port 0 [ 236.980743][ T9119] usb 11-1: enqueue for inactive port 0 [ 237.021276][T12985] tipc: Failed to remove unknown binding: 66,0,0/0:2960645058/2960645059 [ 237.033952][T12985] tipc: Failed to remove unknown binding: 66,0,0/0:2960645058/2960645059 [ 237.058278][ T9119] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 237.153643][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2467'. [ 237.230242][ T29] audit: type=1326 audit(2000000133.790:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.7.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 237.254220][ T29] audit: type=1326 audit(2000000133.790:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.7.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 237.278037][ T29] audit: type=1326 audit(2000000133.790:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.7.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 237.301728][ T29] audit: type=1326 audit(2000000133.790:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.7.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1a570aeb9 code=0x7ffc0000 [ 237.350753][T13009] loop5: detected capacity change from 0 to 1024 [ 237.357768][T13009] EXT4-fs: Ignoring removed oldalloc option [ 237.363819][T13009] EXT4-fs: Ignoring removed bh option [ 237.369607][T13010] netlink: 'syz.4.2473': attribute type 2 has an invalid length. [ 237.413851][T13009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.426728][T13016] loop7: detected capacity change from 0 to 512 [ 237.466774][T13016] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 237.486854][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.511744][T13016] EXT4-fs (loop7): 1 orphan inode deleted [ 237.517551][T13016] EXT4-fs (loop7): 1 truncate cleaned up [ 237.543916][T13016] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.559823][T13015] tipc: Failed to remove unknown binding: 66,0,0/0:3126165996/3126165997 [ 237.599909][T13015] tipc: Failed to remove unknown binding: 66,0,0/0:3126165996/3126165997 [ 237.600056][T11543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.733091][T13040] loop5: detected capacity change from 0 to 1024 [ 237.749824][T13040] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.780509][T13040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 237.794364][T13040] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.812550][T13040] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.2484: lblock 3 mapped to illegal pblock 3 (length 3) [ 237.846833][T13040] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 237.859287][T13040] EXT4-fs (loop5): This should not happen!! Data will be lost [ 237.859287][T13040] [ 237.869234][T13048] __nla_validate_parse: 2 callbacks suppressed [ 237.869252][T13048] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2487'. [ 237.915988][T13051] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2484: bg 0: block 112: padding at end of block bitmap is not set [ 237.952948][T13040] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.2484: lblock 0 mapped to illegal pblock 0 (length 1) [ 238.306920][T13072] loop7: detected capacity change from 0 to 1024 [ 238.321990][T13072] EXT4-fs: Ignoring removed oldalloc option [ 238.328000][T13072] EXT4-fs: Ignoring removed bh option [ 238.365448][T13072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.590141][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2498'. [ 238.636216][T11543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.783164][ T7687] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 238.877776][ T7687] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 238.890318][ T7687] EXT4-fs (loop5): This should not happen!! Data will be lost [ 238.890318][ T7687] [ 238.890809][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 238.890824][ T29] audit: type=1400 audit(2000000135.440:4058): avc: denied { ioctl } for pid=13106 comm="syz.4.2509" path="socket:[40582]" dev="sockfs" ino=40582 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.965413][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 238.984282][T13116] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 239.102768][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2517'. [ 239.589543][T13157] xt_hashlimit: size too large, truncated to 1048576 [ 239.596541][T13157] xt_hashlimit: max too large, truncated to 1048576 [ 239.608283][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 239.702325][T13170] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2534'. [ 239.994255][T13164] No such timeout policy "syz1" [ 240.106252][ T29] audit: type=1400 audit(2000000136.670:4059): avc: denied { prog_load } for pid=13176 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 240.110891][T13188] geneve2: entered promiscuous mode [ 240.125914][ T29] audit: type=1400 audit(2000000136.670:4060): avc: denied { bpf } for pid=13176 comm="syz.4.2536" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.131178][T13188] geneve2: entered allmulticast mode [ 240.152347][ T29] audit: type=1400 audit(2000000136.670:4061): avc: denied { perfmon } for pid=13176 comm="syz.4.2536" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.152383][ T29] audit: type=1400 audit(2000000136.670:4062): avc: denied { prog_run } for pid=13176 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 240.203345][ T29] audit: type=1400 audit(2000000136.770:4063): avc: denied { create } for pid=13176 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.223249][ T29] audit: type=1400 audit(2000000136.770:4064): avc: denied { tracepoint } for pid=13185 comm="syz.7.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 240.243196][ T29] audit: type=1400 audit(2000000136.770:4065): avc: denied { read write } for pid=10617 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.267937][ T29] audit: type=1400 audit(2000000136.770:4066): avc: denied { open } for pid=10617 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.292521][ T29] audit: type=1400 audit(2000000136.770:4067): avc: denied { ioctl } for pid=10617 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.322544][ T6505] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 240.336014][ T7687] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 240.345935][ T7687] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 240.355361][ T7687] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 240.407729][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2544'. [ 240.467470][T13202] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2545'. [ 240.820732][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2562'. [ 240.856278][T13235] tipc: Failed to remove unknown binding: 66,0,0/0:1089191805/1089191806 [ 240.865539][T13235] tipc: Failed to remove unknown binding: 66,0,0/0:1089191805/1089191806 [ 241.105671][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2576'. [ 241.120620][T13272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2574'. [ 241.287023][T13290] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 241.287023][T13290] program syz.6.2581 not setting count and/or reply_len properly [ 241.340359][T13284] tipc: Failed to remove unknown binding: 66,0,0/0:1689261257/1689261258 [ 241.351041][T13284] tipc: Failed to remove unknown binding: 66,0,0/0:1689261257/1689261258 [ 241.455872][T13306] lo speed is unknown, defaulting to 1000 [ 241.529047][T13315] cgroup: Unknown subsys name 'audit' [ 241.762284][T13327] vlan2: entered allmulticast mode [ 241.767490][T13327] bond0: entered allmulticast mode [ 241.807739][T13330] 9p: Bad value for 'wfdno' [ 241.834450][T13332] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 241.843889][T13332] macvtap1: entered promiscuous mode [ 241.851713][T13332] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 241.902755][T13336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=13336 comm=syz.1.2596 [ 242.016102][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.384087][T13361] 9p: Bad value for 'wfdno' [ 242.386892][T13363] netlink: 'syz.1.2604': attribute type 10 has an invalid length. [ 242.401528][ T8476] Process accounting resumed [ 242.411791][T13357] loop7: detected capacity change from 0 to 1024 [ 242.417922][T13363] team0: Device dummy0 is of different type [ 242.419190][T13357] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 242.435220][T13357] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 242.451126][T13357] JBD2: no valid journal superblock found [ 242.456973][T13357] EXT4-fs (loop7): Could not load journal inode [ 242.475846][T13363] netlink: 'syz.1.2604': attribute type 10 has an invalid length. [ 242.502522][T13357] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 242.515324][T13357] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=23 sclass=netlink_audit_socket pid=13357 comm=syz.7.2603 [ 242.517958][T13367] netlink: 'syz.1.2607': attribute type 1 has an invalid length. [ 242.524928][T13367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.570547][T13367] macvlan2: entered promiscuous mode [ 242.575965][T13367] macvlan2: entered allmulticast mode [ 242.576360][T13367] bond0: entered allmulticast mode [ 242.586676][T13367] bond0: entered promiscuous mode [ 242.592187][T13367] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.592945][T13367] team0: Device macvlan2 is of different type [ 242.617119][T13367] bond0: left allmulticast mode [ 242.622054][T13367] bond0: left promiscuous mode [ 242.766780][T13381] loop7: detected capacity change from 0 to 8192 [ 242.849237][T13395] 9p: Bad value for 'wfdno' [ 243.080310][ T7687] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 243.126831][T13409] lo speed is unknown, defaulting to 1000 [ 243.150047][T13426] __nla_validate_parse: 5 callbacks suppressed [ 243.150116][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2628'. [ 243.197157][ T7687] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 243.221390][T13409] chnl_net:caif_netlink_parms(): no params data found [ 243.239117][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2629'. [ 243.339850][ T7687] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 243.364751][T13435] 9p: Bad value for 'wfdno' [ 243.380357][T13432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.458980][ T7687] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 243.510191][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2629'. [ 243.895300][T13458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2636'. [ 243.910373][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 243.910393][ T29] audit: type=1400 audit(2000000140.440:4160): avc: denied { unlink } for pid=9619 comm="syz-executor" name="file0" dev="tmpfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 243.984329][ T29] audit: type=1400 audit(2000000140.500:4161): avc: denied { search } for pid=3041 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.006021][ T29] audit: type=1400 audit(2000000140.500:4162): avc: denied { search } for pid=3041 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.028257][ T29] audit: type=1400 audit(2000000140.500:4163): avc: denied { search } for pid=3041 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.050218][ T29] audit: type=1400 audit(2000000140.500:4164): avc: denied { read } for pid=3041 comm="dhcpcd" name="n69" dev="tmpfs" ino=15647 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.072302][ T29] audit: type=1400 audit(2000000140.500:4165): avc: denied { open } for pid=3041 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=15647 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.095699][ T29] audit: type=1400 audit(2000000140.500:4166): avc: denied { getattr } for pid=3041 comm="dhcpcd" path="/run/udev/data/n69" dev="tmpfs" ino=15647 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 244.315558][ T7687] team0: Port device gtp0 removed [ 244.328786][ T29] audit: type=1400 audit(2000000140.890:4167): avc: denied { create } for pid=13460 comm="syz.6.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 244.350243][ T29] audit: type=1400 audit(2000000140.890:4168): avc: denied { write } for pid=13460 comm="syz.6.2637" path="socket:[43203]" dev="sockfs" ino=43203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 244.383079][ T29] audit: type=1400 audit(2000000140.910:4169): avc: denied { read open } for pid=13465 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.441470][ T7687] bond1 (unregistering): Released all slaves [ 244.466148][ T7687] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 244.478781][ T7687] bond2 (unregistering): Released all slaves [ 244.490199][ T7687] bond3 (unregistering): Released all slaves [ 244.514991][ T7687] bond0 (unregistering): Released all slaves [ 244.549511][T13409] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.557031][T13409] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.574659][T13409] bridge_slave_0: entered allmulticast mode [ 244.585488][T13409] bridge_slave_0: entered promiscuous mode [ 244.600141][T13409] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.607652][T13409] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.618766][T13409] bridge_slave_1: entered allmulticast mode [ 244.625759][T13409] bridge_slave_1: entered promiscuous mode [ 244.635100][ T7687] hsr_slave_0: left promiscuous mode [ 244.644094][ T7687] hsr_slave_1: left promiscuous mode [ 244.658108][ T7687] pim6reg (unregistering): left allmulticast mode [ 244.851235][ T3371] lo speed is unknown, defaulting to 1000 [ 244.857212][ T3371] infiniband syz2: ib_query_port failed (-19) [ 244.879027][T13494] loop6: detected capacity change from 0 to 1024 [ 244.894192][T13409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.929256][T13409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.963498][T13494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.987138][T13409] team0: Port device team_slave_0 added [ 245.003899][T13409] team0: Port device team_slave_1 added [ 245.020819][T13409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.027909][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.054649][T13409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.067138][T13409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.074170][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.100804][T13409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.308971][T13409] hsr_slave_0: entered promiscuous mode [ 245.315606][T13409] hsr_slave_1: entered promiscuous mode [ 245.360737][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2646'. [ 245.373168][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2654'. [ 245.465302][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2656'. [ 245.474386][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2656'. [ 245.533503][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2656'. [ 245.542579][T13541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2656'. [ 245.778076][T13409] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.813725][T13409] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.847880][T13409] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.873858][T13409] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.934236][T10652] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.979916][T13409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.010907][T13409] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.035426][ T7687] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.042733][ T7687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.089998][ T7687] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.097194][ T7687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.144253][T13409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.289011][T13409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.334957][T13620] loop6: detected capacity change from 0 to 1764 [ 246.353834][T13620] iso9660: Unknown parameter 'de' [ 246.447271][T13409] veth0_vlan: entered promiscuous mode [ 246.462719][T13632] loop5: detected capacity change from 0 to 128 [ 246.464013][T13409] veth1_vlan: entered promiscuous mode [ 246.480662][T13632] msdos: Unknown parameter 'ÿÿÿÿ0x0000000000000000' [ 246.500911][T13632] loop5: detected capacity change from 0 to 1024 [ 246.507778][T13632] EXT4-fs: Ignoring removed oldalloc option [ 246.513773][T13632] EXT4-fs: Ignoring removed bh option [ 246.519903][T13409] veth0_macvtap: entered promiscuous mode [ 246.533879][T13409] veth1_macvtap: entered promiscuous mode [ 246.569129][T13632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.596071][T13409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.618004][T13409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.649827][ T7688] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.681048][ T7688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.704202][ T7688] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.716196][ T6851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.755967][T13657] netlink: 'syz.1.2623': attribute type 11 has an invalid length. [ 246.822287][T13660] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 247.014354][T13671] loop1: detected capacity change from 0 to 512 [ 247.042737][T13671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.062108][T13671] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.116212][T13679] netlink: 'syz.7.2676': attribute type 39 has an invalid length. [ 247.175996][T13681] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 247.191458][T13409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.280138][T13632] ================================================================== [ 247.288287][T13632] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 247.295542][T13632] [ 247.297903][T13632] write to 0xffff88811b477bd4 of 4 bytes by task 13651 on cpu 1: [ 247.305858][T13632] xas_set_mark+0x12b/0x140 [ 247.310409][T13632] __folio_start_writeback+0x17b/0x370 [ 247.315897][T13632] ext4_bio_write_folio+0x5ad/0x9f0 [ 247.321338][T13632] mpage_process_page_bufs+0x4a1/0x620 [ 247.326846][T13632] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 247.332694][T13632] ext4_do_writepages+0x9f6/0x2800 [ 247.337943][T13632] ext4_writepages+0x18f/0x320 [ 247.342916][T13632] do_writepages+0x1c6/0x310 [ 247.347624][T13632] file_write_and_wait_range+0x178/0x2f0 [ 247.353360][T13632] generic_buffers_fsync_noflush+0x45/0x130 [ 247.359359][T13632] ext4_sync_file+0x1aa/0x680 [ 247.364141][T13632] vfs_fsync_range+0x10d/0x130 [ 247.368918][T13632] ext4_buffered_write_iter+0x34f/0x3c0 [ 247.374482][T13632] ext4_file_write_iter+0x380/0xf70 [ 247.379892][T13632] iter_file_splice_write+0x6bc/0xa80 [ 247.385273][T13632] direct_splice_actor+0x156/0x2a0 [ 247.390401][T13632] splice_direct_to_actor+0x311/0x670 [ 247.395914][T13632] do_splice_direct+0x119/0x1a0 [ 247.400776][T13632] do_sendfile+0x382/0x650 [ 247.405297][T13632] __x64_sys_sendfile64+0x105/0x150 [ 247.410591][T13632] x64_sys_call+0x2db1/0x3000 [ 247.415280][T13632] do_syscall_64+0xc0/0x2a0 [ 247.420066][T13632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.426248][T13632] [ 247.428584][T13632] read to 0xffff88811b477bd4 of 4 bytes by task 13632 on cpu 0: [ 247.436426][T13632] xas_find_marked+0x5d7/0x620 [ 247.441297][T13632] filemap_get_folios_tag+0xfa/0x510 [ 247.446598][T13632] mpage_prepare_extent_to_map+0x328/0xc50 [ 247.452589][T13632] ext4_do_writepages+0x9f6/0x2800 [ 247.457726][T13632] ext4_writepages+0x18f/0x320 [ 247.462494][T13632] do_writepages+0x1c6/0x310 [ 247.467101][T13632] file_write_and_wait_range+0x178/0x2f0 [ 247.472828][T13632] generic_buffers_fsync_noflush+0x45/0x130 [ 247.478903][T13632] ext4_sync_file+0x1aa/0x680 [ 247.483764][T13632] vfs_fsync_range+0x10d/0x130 [ 247.488626][T13632] ext4_buffered_write_iter+0x34f/0x3c0 [ 247.494213][T13632] ext4_file_write_iter+0x380/0xf70 [ 247.499597][T13632] iter_file_splice_write+0x6bc/0xa80 [ 247.505063][T13632] direct_splice_actor+0x156/0x2a0 [ 247.510181][T13632] splice_direct_to_actor+0x311/0x670 [ 247.515657][T13632] do_splice_direct+0x119/0x1a0 [ 247.520657][T13632] do_sendfile+0x382/0x650 [ 247.525086][T13632] __x64_sys_sendfile64+0x105/0x150 [ 247.530475][T13632] x64_sys_call+0x2db1/0x3000 [ 247.535178][T13632] do_syscall_64+0xc0/0x2a0 [ 247.539703][T13632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.546042][T13632] [ 247.548381][T13632] value changed: 0x0a000021 -> 0x04000021 [ 247.554286][T13632] [ 247.556625][T13632] Reported by Kernel Concurrency Sanitizer on: [ 247.562781][T13632] CPU: 0 UID: 0 PID: 13632 Comm: syz.5.2667 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 247.574189][T13632] Tainted: [W]=WARN [ 247.578090][T13632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.588155][T13632] ================================================================== [ 247.643451][T10617] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.