last executing test programs: 4.918499941s ago: executing program 2 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) pidfd_send_signal(0xffffffffffffffff, 0xc, 0x0, 0x8000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1200, 0x0) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRESDEC=r1], 0x48) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0x0, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110400", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000200)={@local, @dev, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000640)={'gretap0\x00', r7, 0x8, 0x0, 0xddea, 0x2, {{0x49, 0x4, 0x3, 0x7, 0x124, 0x65, 0x0, 0x3, 0x4, 0x0, @loopback, @empty, {[@rr={0x7, 0x1f, 0x55, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x26}, @loopback, @multicast2, @local, @rand_addr=0x64010102]}, @lsrr={0x83, 0xb, 0x93, [@multicast2, @local]}, @cipso={0x86, 0x44, 0x1, [{0x7, 0x5, "19a213"}, {0x7, 0x2}, {0x5, 0x10, "6e9ab1137a965507c82922b90895"}, {0x1, 0x11, "60fc7f10906736222a4ff521af6e5f"}, {0x1, 0x7, "6c7fad7ad8"}, {0x2, 0x7, "126512c6b7"}, {0x1, 0x8, "717ee9e42331"}]}, @cipso={0x86, 0xb, 0x0, [{0x2, 0x5, "e1b009"}]}, @generic={0x82, 0x6, "ce69b357"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x90, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote, @private=0xa010100, @multicast2, @broadcast]}, @generic={0x94, 0x9, "42a37fedc39917"}, @cipso={0x86, 0x3b, 0x3, [{0x5, 0xb, "f9d0fd6e13695949ec"}, {0x5, 0x12, "7b440ff3b251519079622279d06d1a3d"}, {0x7, 0xf, "e7d25863de406d75ab111ef315"}, {0x2, 0x9, "58f172e52abd86"}]}, @timestamp_addr={0x44, 0x2c, 0x55, 0x1, 0x2, [{@broadcast, 0x8e}, {@multicast2, 0x5}, {@local, 0x7}, {@remote, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}]}}}}}) (async) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x137) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000001c0)) (async) getsockopt$sock_int(r2, 0x1, 0xfb8dc888430a16a0, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 4.622499099s ago: executing program 2 (id=48): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}}, 0x0) (fail_nth: 1) 4.42313475s ago: executing program 2 (id=50): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000180)='.dead\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'bond_slave_1\x00', {}, 0x6}) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000480)='GPL\x00'}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x483) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000006c0)="d8e069a917e5be02f0f25caa41ed83766439ae765352cdf91bdf972a18aa032d16575bf072bc61ba635bbedb7c2e3c4e153df4929895c32e88b9e787e701ad23b1f4b6643787d4f6b8b839624a181699cf1589b6f4e0deb5027cc118a9470ce006eae869a3a5821e4cf919a803347b67a70eb73bea1ba8df8ae8e6a007e7529a13dcdce7bff99e04e28282c675741ad6ca5b6945cf45118de4bea957c83f45bebee70d42e114c44892681d0aa2449c7ee52594482ce690a2504fcc3a0ec34d8c7218774e0670c21f5e76d03118e9e7284ad006dfcbee4190d9c860fc612751a09ddda250e9f2991e0ea2edda0895f91402b5db99aee01ed0edf84beede8aca42331c83eeb6d0801ed19f42e42daf8e3c54240827e110d339c37bb3c3f9ab7e819ad1b4b24c88191a1192bb90ba681f0c70461967cfac6732efec9a49ec9c49be3301b9194cd3838400c0a74a844d2043e73986c26bbf47e554df160e37b6f9efe2408347d04e067b9d660d0a45934d93c651fdaa638d96940e1a239686526ab5fd0cfc304f42bc5405f3750eecb041d31ec1581a4ca7e3fe6d66e9e4d4fefb6ff0928f9de7186cbff90f263dc7eab33e07ec7f05a4f4e6b7148f4c7aab9885cfd0c67d765756ae844576f129630a2b3e53ac31bf11173631cd1b89b11a6e47e18e7934da2dae061036e3685482f0fb75913cd97ffbd203f3b1a0987a63acb723d40710f7a6cb52fe9750633b870624f8e8c8356b2f8c73051743b4d7304af5689dfdc03b91701d600154897d69c2f017c4ddfaddcc1fcbbf7f18df6e7e34fafaef5850cfbc1f7bb34dc828675df04a7ed2f0f36e5fef113559e60723a58438f82350e29ea729c238d8b18a58fbbb2d5e2991b7d7999e48225b359026b448c164ea21426f67c448f9efccf69fc5c3a17ff3f29e94c61370440eec7b5c0f9ad3f2c7d4258fa2209e9bb7a6c833fceb98cb847a48847ec6cd6e3bbb28d085d4cab929f05622ab261333b12e384faf27ff2ddd870268910035386c2c16f910b5a53e1b3094f0b9af1b19b34fe1ff253445113cf8bf031f3f3cebcfdf3b3193c8afb95c9f7eba94c01b965bcfaa3abe002a9c4869503dde376da34d638a71fed49397115f163cdcf2acd27ce774ccc118724038a4dc8c2ad200f6286250eaa4ba638df4672ee4cf653ed9626cf2e8047749fdb0caf1ffafdbf068ac98b707f127337e9b55dfaa3edf0ee2d49bcb34d333c08c1c2c78c4af7b6385b38b7583047a3cc730dd430360b3b95ab416c54b8ed45531ab0489111bcef637e58a15e23c0e82d481ac0beb6849977005b53600a92fdebb2b4e97904fe906f37bceb400eaf6db7b0c08c119d384416bd549c56d63d367900a269ab9b042ba214dd4c5bea21addfc39dab851aa4d543a2ce13a03a95188c400734be0989cae887f9c33b6fe21a436a4cc96a71b8cfe35faf61d021b4607b7a6dba522af7b783025a74a56d344d0fa63c5dfa7938dbbb3193f8ded7c2a12e743421f285413237aed06998f3b08f900ba6c7f0a3b30e336d991b6d3dba02ff5cacee72ab7d359f07afae65694bb9b1d04c1c298ca02d987b80fd33e0e16201b47d0c10e37b2e425268973fc7fc89b5e8add680a34ccdb64d93c08de46f49101a52bbb10232b7238729485437f88ce448afbd34530968243ff0ef173d2878c54c4751a6ada797ef0570cd9db84e228020c0ded3fba1121dea40626afbc1754040cc3e05bb81ca69ca0656f7ab5243752b24d96017df93baaed43748a824399d1eed86f7e651a926326a73e499e7d4350992503ed013638652f48d030a297ec28b0ed50146de9fa3af022c6a3d7e6ff30a7fcfe5049c2af295e5df7f97ed271ad82652d71a8c8c627df30389da322692e17d732d8d86f2cd7c9cf05bec4811a36f9796f9e49771bb31614c34a9b8b598c9448897cead269b4bf2435a556bf58e48655fea0cf38a527eb4380d212a1ad317a5e0d9e00e384610d9b563414f109d403666992dd35c204c72a26ad99aa818669d30f8b766105d4a5657c89bbc8857f0e7bfa832120ff2edcb616e39b050627aaa31f5949e95c538c2241ac0f456f452e84d29cbb1e97d46a198a2a29f8df85e250c6400e71765bb365b0fd4e0a55e2573b5eb1cf743021350325b09804181b7dfac3d7c8fc8a97195ca8e8787c396f9e31b652d70729b433e349ba267d12f83171062499ae54cf83b69029763e760a5641b5af9204e3fcfe231c99145bcfaa883ab7d8bffd03f2091933e2ef2be669a163b7ca7587f8ac74fd8603e068b7be038f208b2b48ad16a93417de90a242ff68396b38f763038e5c097b08e926babcaa66fc922e8aebbf667831fdfd2588f1739a8661b1245e7267a62a913c0ef2c3408270a4c3c16c9c967efd024dc99f4c5450fdc65ecf517fce8bbb114556e68a40d114c585fba8b83db0f524f9bb214df86cb2570b2e0e83dd001fc075aba3f922978f07689683711173f8d01fbafa84b09d60e96b80a9e9ef39a82f861d4fdfde2a818f4852b7302f2777f8372559dd9098649d5147ede1a4f3382ccaa17e457d8c707164f8e6cdba5a9205d17b821fbb11ccbe40404bf435f230454dae912957ed4333a8ceafd14073ad9eddad2cbe83f7b91cf251602a9a4863d160337b808fa550b801aeed27f5442e289acc9167ab54a38e7426829e396fd7eec490d2e9fc678ab4fba68d61ec5303f9da5ad43c22d8d8a55bf4b2cbef9f16d41f66549fc8a6735fd1defc27416c65ef125745eb3db021ba1cdf7482b159c8988da7563495decce899c78311a4043011d09e3b6ddf3f72e3fd2b2294fcbe8308c5a7ed9cab060ab33b8f901b1e333533b27f7fa6608c2a6c3c2b9b4a9b3820917aa1406358bf28d64b71554e4e6cc364f80c9c5e5bd9aea3af488093e7450a12fe3d4d0381b0f1ae87ae9a7a04e6a047713ae6adc94f282b8ffbcd50e74485bcfeb000646f8251da30b79bff59e6f07f50a390e865b69e13a7d9efe4d4662346a3f5c9aab846cf81197de979864230dc4e99a21ab146f728c02a63200a3ffe54a6adc5c2d9b2783d3dc8f50654c9984d2d3b9b292bb1161cb9dea38b8509ed1755aa055c77d9b097a25ee6bce52382060006cff6038071e8e6ca8b7025c7704558c915487b5e3b4c02caf51eb6c838593bcfa6be6e0016c44b9c56e01b1f0c1a388a5ae5d3dcd1a06ee9ea880d2dbc802e4d9861363267bcd79902f7c249c47242a443c029d131ed2da8c832c8993a6d5a1aed95b4568686a59df023da097d09bbde97dd2f709e349e5801bd44dc6a04ce1f8b456f3308fddd9531787b23a616f315340944595691c2126cdfc4df15a476f835b001cf6cbd5bdaa18b390216769c9f836f13e745e7655e091e0b4c5f5b6cfcd35a421de421c8075f8d6cbf6ffb7dccde1fa621b75b21a6f81d7b9d45d0cf28cc81d4a671b97d88bc2bf9850fe6fcbf65f2166fe5bfea68b0e3ff33a7cbc58168885430f6a2e90288810448f5e23a7c865f9b54397297d3f180b453f00b12e931c09c1eecb07285682f8d8eb7fdea0db9a325f8b5126bd8fe42341e19e7740cc77cbdac812c9421b5da282402dbe782ed6107a991399bd3c143632738d7c9879080704a8b4dcda22a798c9131c714b04f8273813e1f4e29ae95270b1b4ea7f64b771ca1539c5fc0edfd7cc7e42fabbcbb364c7ae6438c6db150abb057599572bc94956fc592bd5e5d0817e4719045b75b8d7029a6b82fb028eff8fc660e8339fddf48c18af52fe5f2f164165e5d98b900540b34cb6bd0638263730c07e136637aa86fcf4d4757eef7e06201594381d08c3b032681a17019881611ea05608a8ca8cba9b5828c98da4c854a22794bc18f2c21ce23b11020d27c0fc33524437cdc9738a5927cf99dfaf4fcc0b3a796b8d7ac0a73155b2978688cbdf826dce5388537e5543c156ef00e64844b22366e917a693e566d44238b7bde9afdaa2a02e2b778f0e1799278032644e60bd46d90a1ded00bdeac968e17c3c0e142c4eb6c97bb6fbd838a458abca409c9b4342553d802db1f53ed41c2864a49fa2a3847137c441df269b436bedc8f64749970229afdd833e565c65cf33b859026a15252ccaa334c10e3f6b04b5520d403f9760522ed1a162d4fe7f5284d30a336cdce1a2d7d24ff6f871331a90101dbfd871a22faf66a6cbf01c561105ac3cdbbc077a5d03cb6818e0b70e4dc7b11a5c1192760a1000efcbbb2ee9ce8eba2f958d1a97de64794e96f3eb34579177f60e8cf3330a2105bfc3e595dee9da09618709a058377bf855980b1e4ced9b235948543070dd8a49e784d543afb00d6a1f263b7f3edfceffa02bd6f4d102d2613fce3e3f28d647f691613441aec294cf5a7f839fbdf7f79d29f6c2acb5c091380f24e6ff9c2d57a515e95b5389cb063bbe73ee8cd1b9a609f7e99cbd51ad5e43b24711f2d142e956aa5259cfbedd1929ed2c89bd147ec218d59a42ff1142a9666fe1db8d31a677dfab5bf912216fe7503b5fc0f15c4ad18389133cea38355e93a2e20feb2fec6e9395b4bea6e56be17b35186addf73b86db3fe022ec7581e6eb7cce5a03108eb879843f1b8b128138da4019dbe7f36e4dbfdee447d3de3cccede935e6e3007169f47e8f4a30a1e15dd9ae3d4f5d61466058a046b0da7a4458c98767a71f44905484bc15ca732853ff23a4ca570486798644c692102d7c694da23263c86313eae8b1c1bd1e1205d3100a223c0180835094116a1bba6c1148a2441f167ace191985726dd138285f4d572a03dea754bdefa5bb136b3d1caa78dbfc83f32601e3bac14caded5070ff9a550c2d6221b4930f6e50d5a869e2e74f1f8d684dd9c0861e8caf1993750c67f2bed574740e1a33fb123ecb73849d6acd2a37fcd6a3035689daff458e5201066099f3235595945c57b0a062cc4ff212d334d7b27ebf6d0797190a09864c88bba93a3ffdd6e37f2fdb31ed3a826e868fd7d3362a7fb14c4a123fef22b3d2c736530fd7114612c895d843a9eb77008d5b42017b8976bee18d00bd1724a05316eb7ff095a5337f217c485bbc9d9cccd8b0f005097fc65cdd1ea67a761081b0f9fbfb236d37bf8e503178642758b5a84269a75b0608bf2f349aa45643e54fb19955eb4203cb18c6d3059501db0a78ef7505ea60b062680f283238399d3fe8aeecdca7e2eb12cf6264d1b2ba617884d22183d20b84da6ba14a9aeaf5ffc219fa18a58c0e6a0cfbed87c88dbbb6a5ec303add093abdfa5b73aa379ba0282816c71e587108d8abdb5374bcfc93d2e8d24ba3be54a45c4a354866d745be5af2bc8c0edf3c0d12044c2bc3ebc9bffe944c856dcb550faa21c954151597aadd4933948fe677281e85eb710d872ba5c8f25f9e1afc84e6b2b9212132b4f47be95e9a2df5f94cbd3693f454a62d03dbed07478cd8a8d25b6d63ff468fa024c1dfebb917ef59e9da55234bbe503b5c56595a58658f26b8d90ca31ea28ec1ab6ce2a692f65a33c770f943481c807b0b0d068aa62a2bedbea4d97b62380b635a29cde0d4ec17c8f51e157ab96c85a1b88d002f40162b462a4a155edb22865fca648c2e8696e80493dc2dc0dbec24ab2f0c501b8c860b6147c01d8077ca06a14df01997de149f7834233e9ca1b03199ed46b38355336187346d8cdbd1ed473f8e4941b049534b4e0360d1be6bf9eb6645a694036caf634deeb9756fde1cb1e27878d9821958fd608a2a841e3fd3981037c67640cdd0ff5d00af14e528fec797621afb47446", 0x1000, 0xfffffffffffffffb) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x5d) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 4.161320965s ago: executing program 2 (id=55): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000001340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x68, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) stat(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) r9 = getuid() setreuid(0xffffffffffffffff, r9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)) newfstatat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r14 = getgid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r14}, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000001180)=0x0) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000b40)="b09bebdd4358cbd681a7e5760a0a82d5a94e15b1b1afd1edb837cfc0a679320b8d0472905b815993fd1bc47f414b0a227751e4dba13eac7a81d097a900a1dd23e581f4a0fe68d64380075ec406c70ccd9c1f9e2c4000861841f5d51bbb0764621b0b31e4d4ed55e47fd9ebf6e16f086fd25e25d6df20187592f47d222b16d7682fe0363346de7cedd2b139d9511e8a160fe712d0cbf4270977aaf7682343eba99523902c7e147fe690864006b5e5d1cc5174f186a6bd12b752fe944f985a94e9b8553c76a64f28e5843e6869b6e0944c0b2fb0d1824ffe50947e9cb0d59d15f684721fab5631037c996d2e0dbf8fb83dce79a56a", 0xf4}, {&(0x7f0000000c40)="34372b118a5acc841ced8447ee17b08f562f12e5fc313fda3f15179684a32c0b388a03ee221f4723523ac9ae6590a7c17e10052f4ece7575754d88652c7fe5ff26841117e5baea99e767b229db781e268766a8aa56fe9142d94825264f6bed3056b2318e2808d5b2612a240ae22a7201f39f8ffeb4683afc0dfd3dfaf58111", 0x7f}, {&(0x7f0000000d00)="628cd0ebc906694668c495c0ab25453e6e0266df7506cdecb3412a8a581015a3474ff5572b585a52514b4b42e1ce97685d35b28fac3e0abae8a73af34b0ef2da49a44bc855936ccbaa5a22ea07a159faa406c94f6f04a5", 0x57}, {&(0x7f0000000180)="987c16ba42c775cc07abeb04a2dad1ef945a6497d9", 0x15}, {&(0x7f0000000d80)="042935a1791ae7c52bc911a744b13b5d1734c7aae48620e81fe7293619706fb1e9fbe8d84e34b86e124be8f6c99b7f27f16b613d55322b358cda1a873a7088a7f6804198b5cdd6e4f3fefdc90b5986022411dc7aa9d991fa6c75caeee8be80bc724bf6ff410ab8c8ff25c33859a063e8fbc36a86f274330269a737c4b2fe98a899338aab5caf40d6bc91fc60ba2b6e4fa52e9b46", 0x94}, {&(0x7f0000000e40)="cd5676daa5ef3e1ce1cd1bf6eb7dbb2b4465d36d26a716d5170307bd99ec4fe1543f93619c911d020c55bd63f8f579f17e8b4bc8fa108d3e79f1baf40f5a15eccc7c2748308dccc63f85bbd1c565cbf1813a43037c344d78c632df26d8348639285c77f9048cf4014e1d253601148a", 0x6f}, {&(0x7f0000000ec0)="88826e0f8487cab84714df369daa13444048f837caf14112fd0593fb5878a78fdcfae1881805bf4a448fd290a3702e156174cd7a0703e9ded100ad4884e2fcb8dbd86b1bb80c387c9496371d27ec813b25017a63798793c2b3ca1a49227ffb6307f4ff2613d00b173ecf13edc652a7e0afb519686c8560193a9da99c090bb8a695b26f4fb5edbac7e156dde6255da56764537a70bf5bbd1d1aa4109311769c4d3b7601290056019cb8b4dd5230e506bd84faf48c4fc02c15954a", 0xba}, {&(0x7f0000000f80)="7530bf2dc3b84fc3ab2a142b6fc4221984", 0x11}, {&(0x7f0000000fc0)="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", 0xfe}], 0x9, &(0x7f00000011c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000010ffffffffffffff0100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="000000001c000000001c00000100000002000000", @ANYRES16=r4, @ANYRES32=r12, @ANYRES32=r14, @ANYBLOB="0000000000410000000000000100000002000000", @ANYRESHEX=r15, @ANYRES32=r6, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x8000}}], 0x1, 0x0) timer_settime(r2, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0xe4c}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYRES32=r11], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x1a, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75}, 0x94) 2.845915263s ago: executing program 1 (id=66): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40903, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) ppoll(&(0x7f0000000040)=[{r0, 0x31a1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 2.466035915s ago: executing program 0 (id=73): socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000001dc0)) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000000200)="000bda", 0x3) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) 2.460060875s ago: executing program 2 (id=74): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000001dc0)) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000000200)="000bda", 0x3) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) 2.262801927s ago: executing program 4 (id=75): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf250000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 2.084950438s ago: executing program 4 (id=77): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x40, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0xffff0000, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 1.981660874s ago: executing program 1 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x0, 0x0, 0x4, 0x3}}]}}}]}, 0x78}}, 0x0) (async, rerun: 64) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000380)=""/248, &(0x7f0000000240)=0xf8) (async, rerun: 64) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x10001, 0x4) 1.948608596s ago: executing program 1 (id=79): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='cpu=~\xa9\x94fw1C\f\xb5\x9f\x8fx\x91-!|!') perf_event_open(&(0x7f0000000500)={0x2, 0x11, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b40)={0x104, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x5400}, @CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x804}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x84}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x880}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x301}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pwrite64(r4, &(0x7f0000002d40)="61dc", 0x80002, 0x1ffffffff000) 1.920009637s ago: executing program 4 (id=80): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='cpu=~\xa9\x94fw1C\f\xb5\x9f\x8fx\x91-!|!') perf_event_open(&(0x7f0000000500)={0x2, 0x11, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b40)={0x104, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x5400}, @CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x804}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x84}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x880}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x301}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pwrite64(r6, &(0x7f0000002d40)="61dc", 0x80002, 0x1ffffffff000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000100000000000000086aa5b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x0, 0xe, 0x0, &(0x7f0000000680)="e02742e8680d85ff9782762f0800", 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xa, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000001000000000000007f00000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018410000fbffffff00000000000000009500000000000000c54ed9a7a23842b0b1b72c1297165285b4f052ea1b983acc3266cc1bc710e87185dfc6bb5896cbe7ebf6730afc08861c038b8c0c59f66e19dbfa26319f8cd0cb607246b1de0d23a604622c869dd51f1d7265a80a6528905b500b5bb1d0aca48a267460764de1943a0c10ab96b4d37ef956c434145c91f9962938fdd83e1cfb59e84ab8915f6266f8ff"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x13, &(0x7f0000000240)=""/19, 0x41100, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x9, 0x3, 0xf}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4f}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x80, 0x7, 0x1, 0xfffffffd, {{0x17, 0x4, 0x2, 0x20, 0x5c, 0x65, 0x0, 0x7, 0x29, 0x0, @broadcast, @empty, {[@rr={0x7, 0xb, 0xac, [@multicast2, @empty]}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x2e, 0x2, [{0x2, 0xf, "cf23c73be203e843f371d9cfdb"}, {0x6, 0xa, "b7fed6846bd54d81"}, {0x1, 0x4, "f11b"}, {0x1, 0xb, "f98670f5de17a4a87e"}]}, @lsrr={0x83, 0x7, 0x75, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r9, r10, 0x25, 0x1, @void}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008082}, 0x40) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r11, &(0x7f0000000100)='syz0\x00', 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x8001}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xb}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x6c}, 0x28) openat$cgroup(r11, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) 1.568089578s ago: executing program 1 (id=81): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c881}, 0x4000010) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000880)='./file0\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r6 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) unlink(&(0x7f0000000040)='./file0\x00') 1.335515941s ago: executing program 4 (id=83): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000400)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@lazytime}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r2, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)='D', 0xffef}], 0x1, 0x0, 0x0, 0x11000000}}], 0x1, 0x4044044) 1.20345147s ago: executing program 0 (id=85): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x1000000, {0x0, 0x0, 0x0, r2, {0x5, 0x3}, {0xffe0}, {0x8}}}, 0x24}}, 0x40004) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) fsmount(0xffffffffffffffff, 0x0, 0x80) 1.037317679s ago: executing program 2 (id=86): socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000001dc0)) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000000200)="000bda", 0x3) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) 1.03196293s ago: executing program 4 (id=87): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002b00), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01008f71c5eeb95f8e980000000000000000060000002000070073797374656d5f753a6f626a6563745f723a77746d705f743a73300014000300fc0200000000000000000000000000011400020000000000000000000000ffff7f000001"], 0x5c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf25170001000c000600000000000000000003000000", @ANYRES32=r5, @ANYBLOB="0c00060001000000010000000c000600030000000300000008000300", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x80) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r8, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14004045}, 0x11) (async, rerun: 32) close(r7) (rerun: 32) 1.03147756s ago: executing program 3 (id=88): perf_event_open(0x0, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0xa}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x2, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0xee, 0x1, 0x3d3f, 0x0, 0xfff, 0x4003, 0x58f, [{0x200, 0x800053b0, 0xb04, 0x800}]}}, @TCA_U32_INDEV={0x14, 0x8, 'wlan0\x00'}]}}]}, 0x70}}, 0x24040084) 991.612772ms ago: executing program 3 (id=89): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000030000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 901.891947ms ago: executing program 0 (id=90): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 879.016158ms ago: executing program 3 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 872.014889ms ago: executing program 4 (id=92): socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000001dc0)) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000000200)="000bda", 0x3) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) 759.009666ms ago: executing program 0 (id=93): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='cpu=~\xa9\x94fw1C\f\xb5\x9f\x8fx\x91-!|!') perf_event_open(&(0x7f0000000500)={0x2, 0x11, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b40)={0x104, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x5400}, @CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x804}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x84}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x880}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x301}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pwrite64(r6, &(0x7f0000002d40)="61dc", 0x80002, 0x1ffffffff000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000100000000000000086aa5b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x0, 0xe, 0x0, &(0x7f0000000680)="e02742e8680d85ff9782762f0800", 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xa, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000001000000000000007f00000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018410000fbffffff00000000000000009500000000000000c54ed9a7a23842b0b1b72c1297165285b4f052ea1b983acc3266cc1bc710e87185dfc6bb5896cbe7ebf6730afc08861c038b8c0c59f66e19dbfa26319f8cd0cb607246b1de0d23a604622c869dd51f1d7265a80a6528905b500b5bb1d0aca48a267460764de1943a0c10ab96b4d37ef956c434145c91f9962938fdd83e1cfb59e84ab8915f6266f8ff"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x13, &(0x7f0000000240)=""/19, 0x41100, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x9, 0x3, 0xf}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4f}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x80, 0x7, 0x1, 0xfffffffd, {{0x17, 0x4, 0x2, 0x20, 0x5c, 0x65, 0x0, 0x7, 0x29, 0x0, @broadcast, @empty, {[@rr={0x7, 0xb, 0xac, [@multicast2, @empty]}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x2e, 0x2, [{0x2, 0xf, "cf23c73be203e843f371d9cfdb"}, {0x6, 0xa, "b7fed6846bd54d81"}, {0x1, 0x4, "f11b"}, {0x1, 0xb, "f98670f5de17a4a87e"}]}, @lsrr={0x83, 0x7, 0x75, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r9, r10, 0x25, 0x1, @void}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008082}, 0x40) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r11, &(0x7f0000000100)='syz0\x00', 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x8001}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xb}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x6c}, 0x28) 586.818146ms ago: executing program 3 (id=94): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x82\xf0f\xb4\xa8D\x9b\xdd\r(\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) close_range(r2, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lseek(r1, 0x100, 0x1) getdents64(r1, &(0x7f0000000040)=""/48, 0x30) 585.586336ms ago: executing program 1 (id=95): gettid() (async) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff070008"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000200)=""/76}, 0x20) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x149}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000c80)={0x0, 0x5, 0x0, [0x9, 0xd775, 0xfffffffffffffff7, 0x9, 0xffffffffffffffff], [0x6, 0x7, 0xb, 0xae98, 0x7fffffffffffffff, 0x3, 0xffff, 0x7ea, 0xdb1a, 0xff9f, 0x5, 0x9, 0x0, 0x7, 0xfffffffffffffcfd, 0x8, 0x6, 0xa, 0x200, 0xff, 0x1, 0x6, 0x4, 0xb, 0x7, 0x1, 0x100000000, 0x7fffffffffffffff, 0x3727, 0x6, 0x7, 0x3c7c, 0x9, 0x1, 0x9, 0x6, 0x0, 0x3, 0x7, 0x8000000000000000, 0xc, 0x4, 0x0, 0xa17, 0x8, 0xa4d, 0x32, 0x5, 0x3, 0x1, 0x100000000, 0x0, 0x4, 0x8, 0xfffffffffffffff8, 0x140000, 0x0, 0xcbf, 0x7, 0x7fff, 0x7f, 0xffffffffffff81a8, 0x200000000000000a, 0x7, 0x1, 0x480000000000000, 0xf3, 0x2, 0x1, 0x9, 0x0, 0x10001, 0x200, 0x9, 0x8000000000000000, 0x8, 0xf, 0x401, 0x1, 0xffffffffffff0001, 0x70c4, 0x6, 0xfffffffffffffff9, 0xffffffffc5aadfe9, 0x5, 0xb75, 0x1, 0x10, 0x289, 0x6, 0x8, 0xf89, 0xe88b, 0x8000000000003, 0x6, 0x7b8, 0x5, 0x7f, 0x48c, 0x0, 0x0, 0xfffffffffffffff7, 0x9, 0x100000001, 0x7, 0x0, 0x2, 0x3, 0xf7d7, 0x10005, 0x6, 0x6, 0x1, 0xfffffffffffffffb, 0x200, 0x3, 0xffffffffffffffc0, 0x6, 0x0, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000010c0)={r3, "abab12928aa3a4481d4c9adbb9389b7f"}) (async) socket$nl_generic(0x10, 0x3, 0x10) 474.301052ms ago: executing program 3 (id=96): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x400, 0x8, 0xa0d6, 0x8}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1018658, &(0x7f0000000640)={[{@nodioread_nolock}, {@noblock_validity}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x8cb}}, {@nodiscard}, {@debug}, {@noauto_da_alloc}]}, 0x6, 0x633, &(0x7f0000001140)="$eJzs3c9rG9kdAPDvjCzHTtw6KaU0oaWGHhIocaw0NG0vTdJDcwg00BxK6SEmtlMT5QexA7UbiAM9tNBCKb2Wkkv/gfa85L63ZWF3b3teyC5Llt1ld4mWGY1sRZZsx7as2PP5gKx574303lejp3kz4ycFUFoT2Z804njEi+tJxHhb2Vg0CyeK9Z5//PBGdkui0fjNR0kkRV5r/bS4P5L9SSJGIuKtSxHfqqyvd2Fp+dZ0vdH0KOLM4u17ZxaWlk/P356+OXtz9k7t7E/PnZ/6We1cbVfiPFLcX77y6+/9/c9/+Mnc2/XTSVyIa9U/zURHHLtlIibiRRFie/5QRJzPFrq8LvvNAQih1CrF+7EaEd+J8ajkqabxmP/bQBsH9FWjEtEASirR/6GkWuOA1rH91o6Dr/V5VLJ3nl1sHgCtj3+oeW4kRvJjo8PPk7Yjo6H83MbRXag/q+Orhyf+nd3ipfMQn61unaFdqKeXlccR8d1u8Sd5247mkWbxpy+1I4mIqYgYLtr3yx20IWlb7sd5mI1sN/40Ii4U91n+pW3WP9GR3uv4ASinpxeLHflKllrb/2Vjj9b4J9aNf5rXhjr3Xdsx6P1f7/Ffa38/kp8jTzvGYdmY5Wr3p6x2Zrz/18v/7FV/+/gvu2X1t8aCe+HZ44gTHfH/Jb+Ql6xu/6TL9s9WuX5ha3X86p0PL/cqG3T8jScRJ7se/6yNSrOlzuuTo0VZ7VztzNx8fXaq+bdrHW+8+fv/9qp/0PFn2/9wj/jbtn/z0u7/1x6XvSb3tljH/64+ud2rbGzT+NMPhpPm8eZwkfPH6cXF+7WI4eRKsUrzQlaef3bjtrTWaT1HFv+pH3bv/1n8h1rv/8cvP89o6yNzC+799tbzXmXb2f5tF5NfNLbYhl6y+Gc23/7r+n+W94/V1KMN6/j0dw++36tso/hHdxgbAAAAAAAAlE2aX4NN0snV5TSdnGzOl/12HE7rdxcWfzR398GdmYhT+f9DVtPWle7xZjrJ0rXi/2Fb6bMd6R9HxLGI+FdlNE9P3rhbnxl08AAAAAAAAAAAAAAAAAAAAPCaOFLM/2/9TvUnleb8f6Ak+vkDc8DrTf+H8sr7fzroVgCDYP8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAHEjHfvD0vSQiVn4+mt8yw0WZGUFwsFX1cyityqAbAAzM6qV/gwAonepWVvqi+HLA/jcHGICkW2Y+OGhs3Pmfdn1k9oQ9CgAAAAAAAAAAAACA7Tp5vPv8/2SrcwOAfcu0PyivHcz/99UBsM/56n8oL8f4wGaT9Ud6FfSa/w8AAAAAAAAAAAAA7Lqx/Jakk8Vc4LFI08nJiG9ExNGoJnPz9dmpiPhmRLxbqR7K0rVBNxoAAAAAAAAAAAAAAAAAAAAOmIWl5VvT9frs/faFL9flHOyF1q+gdhRV+1DXL+IVHxXJ3r8soxGxmlONeNU292/hUPG23cnzDC0sLSefN3JJxEq8PgHuKK5dXtj0o2O4rx9MAAAAAAAAAAAAAAAAAABQQm1zj7s78Z89bhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7L213//v38KgYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qevAwAA//8LFD25") fcntl$setstatus(r1, 0x4, 0x800) 421.017455ms ago: executing program 1 (id=97): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000001dc0)) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000000200)="000bda", 0x3) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) 172.4939ms ago: executing program 0 (id=98): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e12080006007c000401a8001600090001c57bec6460456720fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb591643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e0036e19228aadc0db70100c1deec1f42447a5ae735938634a43a000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xd8}], 0x1}, 0xc0) 6.26107ms ago: executing program 0 (id=99): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="7b1034000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xffffffaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 0s ago: executing program 3 (id=100): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x2000000000007002, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 35.094515][ T29] audit: type=1400 audit(1769314251.847:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.117576][ T29] audit: type=1400 audit(1769314251.867:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.119886][ T3301] cgroup: Unknown subsys name 'net' [ 35.145475][ T29] audit: type=1400 audit(1769314251.897:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.264577][ T3301] cgroup: Unknown subsys name 'cpuset' [ 35.270861][ T3301] cgroup: Unknown subsys name 'rlimit' [ 35.422761][ T29] audit: type=1400 audit(1769314252.167:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.460837][ T29] audit: type=1400 audit(1769314252.177:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.481535][ T29] audit: type=1400 audit(1769314252.177:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.501986][ T29] audit: type=1400 audit(1769314252.177:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.522307][ T29] audit: type=1400 audit(1769314252.197:69): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 35.543392][ T29] audit: type=1400 audit(1769314252.197:70): avc: denied { search } for pid=3040 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.564837][ T29] audit: type=1400 audit(1769314252.197:71): avc: denied { search } for pid=3040 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.585076][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.639356][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.829827][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.881093][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 36.914239][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 36.942000][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.972096][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.990988][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.998441][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.006204][ T3316] bridge_slave_0: entered allmulticast mode [ 37.012811][ T3316] bridge_slave_0: entered promiscuous mode [ 37.034963][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.043232][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.050589][ T3316] bridge_slave_1: entered allmulticast mode [ 37.057271][ T3316] bridge_slave_1: entered promiscuous mode [ 37.074863][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.081957][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.089300][ T3315] bridge_slave_0: entered allmulticast mode [ 37.095916][ T3315] bridge_slave_0: entered promiscuous mode [ 37.119129][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.126239][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.133477][ T3315] bridge_slave_1: entered allmulticast mode [ 37.140061][ T3315] bridge_slave_1: entered promiscuous mode [ 37.174868][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.184054][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.191259][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.199307][ T3313] bridge_slave_0: entered allmulticast mode [ 37.205949][ T3313] bridge_slave_0: entered promiscuous mode [ 37.220861][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.231372][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.241571][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.255834][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.262920][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.270335][ T3313] bridge_slave_1: entered allmulticast mode [ 37.276790][ T3313] bridge_slave_1: entered promiscuous mode [ 37.305793][ T3316] team0: Port device team_slave_0 added [ 37.316137][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.323308][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.330616][ T3321] bridge_slave_0: entered allmulticast mode [ 37.337300][ T3321] bridge_slave_0: entered promiscuous mode [ 37.349924][ T3316] team0: Port device team_slave_1 added [ 37.361144][ T3315] team0: Port device team_slave_0 added [ 37.366908][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.374060][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.381244][ T3314] bridge_slave_0: entered allmulticast mode [ 37.387737][ T3314] bridge_slave_0: entered promiscuous mode [ 37.398994][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.406189][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.413478][ T3314] bridge_slave_1: entered allmulticast mode [ 37.420110][ T3314] bridge_slave_1: entered promiscuous mode [ 37.431381][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.438638][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.446185][ T3321] bridge_slave_1: entered allmulticast mode [ 37.452814][ T3321] bridge_slave_1: entered promiscuous mode [ 37.464659][ T3315] team0: Port device team_slave_1 added [ 37.476036][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.486434][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.513969][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.520949][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.546948][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.559142][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.583334][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.590322][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.616354][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.628233][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.642343][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.652970][ T3313] team0: Port device team_slave_0 added [ 37.659579][ T3313] team0: Port device team_slave_1 added [ 37.665637][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.672619][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.699090][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.715862][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.734696][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.741664][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.767768][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.802366][ T3316] hsr_slave_0: entered promiscuous mode [ 37.808474][ T3316] hsr_slave_1: entered promiscuous mode [ 37.816906][ T3314] team0: Port device team_slave_0 added [ 37.845783][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.852764][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.878921][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.890947][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.897975][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.923948][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.935818][ T3314] team0: Port device team_slave_1 added [ 37.942203][ T3321] team0: Port device team_slave_0 added [ 37.967676][ T3321] team0: Port device team_slave_1 added [ 37.980391][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.987429][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.013387][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.026480][ T3315] hsr_slave_0: entered promiscuous mode [ 38.032486][ T3315] hsr_slave_1: entered promiscuous mode [ 38.038475][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 38.044234][ T3315] Cannot create hsr debugfs directory [ 38.064437][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.071425][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.097576][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.121221][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.128305][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.154279][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.178001][ T3313] hsr_slave_0: entered promiscuous mode [ 38.184418][ T3313] hsr_slave_1: entered promiscuous mode [ 38.190514][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 38.196324][ T3313] Cannot create hsr debugfs directory [ 38.202139][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.209170][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.235278][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.325532][ T3321] hsr_slave_0: entered promiscuous mode [ 38.331642][ T3321] hsr_slave_1: entered promiscuous mode [ 38.337629][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 38.343386][ T3321] Cannot create hsr debugfs directory [ 38.351490][ T3314] hsr_slave_0: entered promiscuous mode [ 38.357756][ T3314] hsr_slave_1: entered promiscuous mode [ 38.363698][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 38.369483][ T3314] Cannot create hsr debugfs directory [ 38.501334][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.510502][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.535900][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.549462][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.574133][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.583170][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.594823][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.606111][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.628741][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.650365][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.663136][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.672469][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.725171][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.735381][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.747401][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.762466][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.774479][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.787625][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.810553][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.832630][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.839795][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.859546][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.871189][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.880130][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.889457][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.900704][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.908339][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.920021][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.936529][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.947829][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.954925][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.971335][ T1698] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.978505][ T1698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.029939][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.042626][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.063540][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.074022][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.089968][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.097106][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.115301][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.122488][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.136097][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.154655][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.162859][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.172130][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.179860][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.218610][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.261432][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.305455][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.318952][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.346201][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.353425][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.394863][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.401977][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.431023][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.443486][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.453962][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.481807][ T3316] veth0_vlan: entered promiscuous mode [ 39.493742][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.508656][ T3316] veth1_vlan: entered promiscuous mode [ 39.575901][ T3316] veth0_macvtap: entered promiscuous mode [ 39.605052][ T3316] veth1_macvtap: entered promiscuous mode [ 39.644965][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.669217][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.686734][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.698787][ T3313] veth0_vlan: entered promiscuous mode [ 39.719193][ T3313] veth1_vlan: entered promiscuous mode [ 39.727670][ T3315] veth0_vlan: entered promiscuous mode [ 39.734938][ T1650] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.757965][ T3321] veth0_vlan: entered promiscuous mode [ 39.764323][ T1650] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.784443][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.798286][ T3315] veth1_vlan: entered promiscuous mode [ 39.806271][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.823347][ T3321] veth1_vlan: entered promiscuous mode [ 39.837007][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.862125][ T3313] veth0_macvtap: entered promiscuous mode [ 39.887165][ T3313] veth1_macvtap: entered promiscuous mode [ 39.917642][ T3314] veth0_vlan: entered promiscuous mode [ 39.927858][ T3483] bond_slave_0: entered promiscuous mode [ 39.933544][ T3483] bond_slave_1: entered promiscuous mode [ 39.940274][ T3321] veth0_macvtap: entered promiscuous mode [ 39.949104][ T3482] bond_slave_0: left promiscuous mode [ 39.954552][ T3482] bond_slave_1: left promiscuous mode [ 39.961166][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.969805][ T3321] veth1_macvtap: entered promiscuous mode [ 39.987029][ T3314] veth1_vlan: entered promiscuous mode [ 39.998944][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.009855][ T3315] veth0_macvtap: entered promiscuous mode [ 40.020601][ T3315] veth1_macvtap: entered promiscuous mode [ 40.040101][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.049633][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.063070][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.076392][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.083672][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.112169][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 40.112188][ T29] audit: type=1400 audit(1769314256.857:104): avc: denied { bind } for pid=3486 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.118142][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.137075][ T29] audit: type=1400 audit(1769314256.867:105): avc: denied { setopt } for pid=3486 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.167004][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.191179][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 40.200726][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 40.209643][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.223257][ T3314] veth0_macvtap: entered promiscuous mode [ 40.238383][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.247980][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.262757][ T3314] veth1_macvtap: entered promiscuous mode [ 40.278983][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.294343][ T29] audit: type=1400 audit(1769314257.037:106): avc: denied { allowed } for pid=3489 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 40.313376][ T29] audit: type=1400 audit(1769314257.037:107): avc: denied { create } for pid=3489 comm="syz.1.2" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.334464][ T29] audit: type=1400 audit(1769314257.037:108): avc: denied { open } for pid=3489 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.353529][ T29] audit: type=1400 audit(1769314257.037:109): avc: denied { kernel } for pid=3489 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.384093][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.400977][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.412389][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.434382][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.445608][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.465578][ T3445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.478261][ T3445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.496659][ T3445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.508069][ T3445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.555216][ T29] audit: type=1400 audit(1769314257.297:110): avc: denied { create } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.588201][ T3501] loop1: detected capacity change from 0 to 512 [ 40.611225][ T29] audit: type=1400 audit(1769314257.327:111): avc: denied { create } for pid=3494 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.620131][ T3445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.631699][ T29] audit: type=1400 audit(1769314257.327:112): avc: denied { write } for pid=3494 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.660791][ T29] audit: type=1400 audit(1769314257.337:113): avc: denied { ioctl } for pid=3498 comm="syz.4.5" path="socket:[4882]" dev="sockfs" ino=4882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.686649][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 40.704838][ T3505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9'. [ 40.711514][ T3445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.727186][ T3501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.759667][ T3501] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.773342][ T3505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9'. [ 40.831693][ T3513] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4'. [ 40.854496][ T3513] loop3: detected capacity change from 0 to 128 [ 40.958264][ T3516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 40.968370][ T3516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 40.998262][ T3516] macvlan0: entered allmulticast mode [ 41.003736][ T3516] veth1_vlan: entered allmulticast mode [ 41.048403][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.101165][ T3519] loop1: detected capacity change from 0 to 2048 [ 41.128093][ T3521] ======================================================= [ 41.128093][ T3521] WARNING: The mand mount option has been deprecated and [ 41.128093][ T3521] and is ignored by this kernel. Remove the mand [ 41.128093][ T3521] option from the mount to silence this warning. [ 41.128093][ T3521] ======================================================= [ 41.240116][ T3524] netlink: 'syz.2.13': attribute type 29 has an invalid length. [ 41.283241][ T3530] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.324412][ T3524] netlink: 'syz.2.13': attribute type 29 has an invalid length. [ 41.341065][ T3524] netlink: 596 bytes leftover after parsing attributes in process `syz.2.13'. [ 41.397951][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 41.406849][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 41.416738][ T3517] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 41.437929][ T3540] netlink: 14 bytes leftover after parsing attributes in process `syz.1.20'. [ 41.459376][ T3540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.471042][ T3540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.488554][ T3540] bond0 (unregistering): Released all slaves [ 41.655212][ T3549] loop2: detected capacity change from 0 to 1024 [ 41.665324][ T3549] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 41.704803][ T3549] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.23: lblock 2 mapped to illegal pblock 2 (length 1) [ 41.724395][ T3549] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.23: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.746901][ T3549] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.23: Failed to acquire dquot type 0 [ 41.804355][ T3549] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 41.833887][ T3549] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.23: mark_inode_dirty error [ 41.876558][ T3549] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 41.911763][ T3549] EXT4-fs (loop2): 1 orphan inode deleted [ 41.926555][ T3445] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.959077][ T3549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.966348][ T3445] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 42.011906][ T3549] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.23: Invalid inode table block 1 in block_group 0 [ 42.026629][ T3549] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 42.050736][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.060930][ T3316] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 42.075501][ T3316] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 42.085558][ T3316] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 42.137883][ T3573] netlink: 'syz.3.32': attribute type 29 has an invalid length. [ 42.166026][ T3573] netlink: 'syz.3.32': attribute type 29 has an invalid length. [ 42.214468][ C0] hrtimer: interrupt took 30874 ns [ 42.349758][ T3588] loop0: detected capacity change from 0 to 512 [ 42.415966][ T3588] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.627611][ T3588] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.31: Allocating blocks 41-42 which overlap fs metadata [ 42.655460][ T3599] loop4: detected capacity change from 0 to 128 [ 42.708221][ T3599] team0: Device gtp0 is of different type [ 42.725102][ T3588] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.31: Failed to acquire dquot type 1 [ 42.754008][ T3588] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 42.803932][ T3588] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.31: corrupted inode contents [ 42.870248][ T3605] loop2: detected capacity change from 0 to 1024 [ 42.876966][ T3588] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.31: mark_inode_dirty error [ 42.908243][ T3605] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 42.915592][ T3588] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.31: corrupted inode contents [ 42.945866][ T3605] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.40: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.994976][ T3605] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.40: lblock 0 mapped to illegal pblock 48 (length 1) [ 43.010872][ T3588] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.31: mark_inode_dirty error [ 43.059158][ T3605] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.40: Failed to acquire dquot type 0 [ 43.100914][ T3605] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 43.114661][ T3605] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.40: mark_inode_dirty error [ 43.126040][ T3588] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.31: corrupted inode contents [ 43.151284][ T3605] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 43.174972][ T3588] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 43.184114][ T3605] EXT4-fs (loop2): 1 orphan inode deleted [ 43.190552][ T3605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.215550][ T1650] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.234744][ T3616] loop4: detected capacity change from 0 to 512 [ 43.237674][ T3605] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.40: Invalid inode table block 1 in block_group 0 [ 43.255328][ T3588] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.31: corrupted inode contents [ 43.265337][ T1650] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 43.285259][ T3616] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.43: invalid indirect mapped block 4294967295 (level 1) [ 43.319092][ T3616] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.43: invalid indirect mapped block 4294967295 (level 1) [ 43.345275][ T3588] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.31: mark_inode_dirty error [ 43.356733][ T3605] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 43.375874][ T3616] EXT4-fs (loop4): 2 truncates cleaned up [ 43.382529][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.456610][ T3588] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 43.468605][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.504860][ T3316] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 43.533810][ T3316] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 43.537257][ T3588] EXT4-fs (loop0): 1 truncate cleaned up [ 43.564692][ T3316] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 43.589511][ T3588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.698363][ T3588] syz.0.31 (3588) used greatest stack depth: 9968 bytes left [ 43.724269][ T3633] FAULT_INJECTION: forcing a failure. [ 43.724269][ T3633] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.737777][ T3633] CPU: 1 UID: 0 PID: 3633 Comm: syz.2.48 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.737813][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.737849][ T3633] Call Trace: [ 43.737866][ T3633] [ 43.737877][ T3633] __dump_stack+0x1d/0x30 [ 43.737916][ T3633] dump_stack_lvl+0x95/0xd0 [ 43.737943][ T3633] dump_stack+0x15/0x1b [ 43.738001][ T3633] should_fail_ex+0x263/0x280 [ 43.738023][ T3633] should_fail+0xb/0x20 [ 43.738044][ T3633] should_fail_usercopy+0x1a/0x20 [ 43.738120][ T3633] _copy_from_user+0x1c/0xb0 [ 43.738201][ T3633] ___sys_sendmsg+0xc1/0x1e0 [ 43.738305][ T3633] __x64_sys_sendmsg+0xd4/0x160 [ 43.738334][ T3633] x64_sys_call+0x17ba/0x3000 [ 43.738361][ T3633] do_syscall_64+0xc0/0x2a0 [ 43.738422][ T3633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.738453][ T3633] RIP: 0033:0x7fc80287acb9 [ 43.738477][ T3633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.738501][ T3633] RSP: 002b:00007fc8012d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.738587][ T3633] RAX: ffffffffffffffda RBX: 00007fc802af5fa0 RCX: 00007fc80287acb9 [ 43.738602][ T3633] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.738618][ T3633] RBP: 00007fc8012d7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.738706][ T3633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.738729][ T3633] R13: 00007fc802af6038 R14: 00007fc802af5fa0 R15: 00007fff481b9838 [ 43.738750][ T3633] [ 43.742443][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.793240][ T3631] syzkaller0: entered promiscuous mode [ 43.805654][ T1650] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 43.807626][ T3631] syzkaller0: entered allmulticast mode [ 44.060868][ T3639] Zero length message leads to an empty skb [ 44.086519][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.100022][ T3642] loop3: detected capacity change from 0 to 512 [ 44.107717][ T3642] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.123738][ T3642] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.135034][ T3642] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 44.146164][ T3642] EXT4-fs (loop3): group descriptors corrupted! [ 44.175997][ T3644] loop0: detected capacity change from 0 to 128 [ 44.234481][ T3647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.324889][ T3644] bond_slave_0: entered promiscuous mode [ 44.330748][ T3644] bond_slave_1: entered promiscuous mode [ 44.407286][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.565354][ T3643] bond_slave_0: left promiscuous mode [ 44.571369][ T3643] bond_slave_1: left promiscuous mode [ 44.623592][ T3660] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.735764][ T3660] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.55: Allocating blocks 41-42 which overlap fs metadata [ 44.836273][ T3660] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.55: Failed to acquire dquot type 1 [ 44.886905][ T3672] netlink: 'syz.0.60': attribute type 5 has an invalid length. [ 44.919226][ T3660] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 45.054412][ T3660] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.55: corrupted inode contents [ 45.165077][ T3660] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.55: mark_inode_dirty error [ 45.234328][ T3660] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.55: corrupted inode contents [ 45.304624][ T3660] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.55: mark_inode_dirty error [ 45.372801][ T3660] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.55: corrupted inode contents [ 45.424228][ T3660] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 45.436957][ T3674] syzkaller0: entered promiscuous mode [ 45.442949][ T3674] syzkaller0: entered allmulticast mode [ 45.483157][ T3660] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.55: corrupted inode contents [ 45.509770][ T3660] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.55: mark_inode_dirty error [ 45.534127][ T3660] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 45.589889][ T3660] EXT4-fs (loop2): 1 truncate cleaned up [ 45.623110][ T3660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.627209][ T3691] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 45.655755][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 45.655840][ T29] audit: type=1400 audit(1769314262.407:179): avc: denied { accept } for pid=3693 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.742794][ T29] audit: type=1400 audit(1769314262.427:180): avc: denied { getopt } for pid=3693 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.769398][ T3698] set_capacity_and_notify: 3 callbacks suppressed [ 45.769421][ T3698] loop3: detected capacity change from 0 to 512 [ 45.779517][ T3654] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.55: iget: bad i_size value: 360287970189639690 [ 45.813802][ T29] audit: type=1400 audit(1769314262.527:181): avc: denied { add_name } for pid=3652 comm="syz.2.55" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.835716][ T29] audit: type=1400 audit(1769314262.527:182): avc: denied { create } for pid=3652 comm="syz.2.55" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.856523][ T3698] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 45.904742][ T3698] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.71: bg 0: block 255: padding at end of block bitmap is not set [ 45.928416][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.941269][ T3703] loop0: detected capacity change from 0 to 128 [ 46.038952][ T3698] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 46.083587][ T3698] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.71: invalid indirect mapped block 1 (level 1) [ 46.101509][ T3698] EXT4-fs (loop3): 1 truncate cleaned up [ 46.146785][ T3698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.170153][ T3708] __nla_validate_parse: 8 callbacks suppressed [ 46.170175][ T3708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.75'. [ 46.193528][ T3709] loop2: detected capacity change from 0 to 128 [ 46.204663][ T3698] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 46.222579][ T3708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.75'. [ 46.273509][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.373361][ T3715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.403309][ T3717] xt_connbytes: Forcing CT accounting to be enabled [ 46.413987][ T3717] Cannot find set identified by id 0 to match [ 46.609909][ T3725] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.626060][ T3725] vhci_hcd vhci_hcd.0: default hub control req: 2314 v0008 i0002 l0 [ 46.647184][ T3725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 46.662471][ T3725] team1: entered promiscuous mode [ 46.667749][ T3725] team1: entered allmulticast mode [ 46.703295][ T3725] 8021q: adding VLAN 0 to HW filter on device team1 [ 46.876946][ T3730] loop1: detected capacity change from 0 to 128 [ 47.002361][ T3713] Process accounting resumed [ 47.058889][ T3736] loop4: detected capacity change from 0 to 512 [ 47.061843][ T3732] syz.1.81: attempt to access beyond end of device [ 47.061843][ T3732] loop1: rw=2049, sector=505, nr_sectors = 1 limit=128 [ 47.080541][ T3736] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 47.096630][ T3736] EXT4-fs (loop4): 1 truncate cleaned up [ 47.102732][ T3736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.116197][ T29] audit: type=1400 audit(1769314263.867:183): avc: denied { read append open } for pid=3735 comm="syz.4.83" path="/18/file0/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.155354][ T29] audit: type=1400 audit(1769314263.907:184): avc: denied { create } for pid=3739 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.193851][ T29] audit: type=1400 audit(1769314263.937:185): avc: denied { create } for pid=3739 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.213638][ T29] audit: type=1400 audit(1769314263.937:186): avc: denied { bind } for pid=3739 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.233629][ T29] audit: type=1400 audit(1769314263.937:187): avc: denied { write } for pid=3739 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.253909][ T29] audit: type=1400 audit(1769314263.937:188): avc: denied { write } for pid=3739 comm="syz.3.84" path="socket:[5364]" dev="sockfs" ino=5364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.334870][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.373120][ T3744] loop2: detected capacity change from 0 to 128 [ 47.408032][ T3738] syz.1.81: attempt to access beyond end of device [ 47.408032][ T3738] loop1: rw=2049, sector=545, nr_sectors = 8 limit=128 [ 47.451795][ T3759] netlink: 'syz.0.90': attribute type 29 has an invalid length. [ 47.461610][ T3759] netlink: 'syz.0.90': attribute type 29 has an invalid length. [ 47.470546][ T3730] syz.1.81: attempt to access beyond end of device [ 47.470546][ T3730] loop1: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 47.491074][ T3730] syz.1.81: attempt to access beyond end of device [ 47.491074][ T3730] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 47.501896][ T3759] netlink: 500 bytes leftover after parsing attributes in process `syz.0.90'. [ 47.526404][ T3761] loop4: detected capacity change from 0 to 128 [ 47.534343][ T3738] syz.1.81: attempt to access beyond end of device [ 47.534343][ T3738] loop1: rw=2049, sector=561, nr_sectors = 8 limit=128 [ 47.548036][ T3730] syz.1.81: attempt to access beyond end of device [ 47.548036][ T3730] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 47.554176][ T3738] syz.1.81: attempt to access beyond end of device [ 47.554176][ T3738] loop1: rw=2049, sector=577, nr_sectors = 16 limit=128 [ 47.562575][ T3730] syz.1.81: attempt to access beyond end of device [ 47.562575][ T3730] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 47.589513][ T3730] syz.1.81: attempt to access beyond end of device [ 47.589513][ T3730] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 47.604636][ T3730] syz.1.81: attempt to access beyond end of device [ 47.604636][ T3730] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 47.977461][ T3781] loop3: detected capacity change from 0 to 1024 [ 47.982478][ T3781] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.041654][ T3784] loop1: detected capacity change from 0 to 128 [ 48.042511][ T3781] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 48.056067][ T3781] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 48.084054][ T3781] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.094797][ T3781] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.96: lblock 2 mapped to illegal pblock 2 (length 1) [ 48.139174][ T3781] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.96: lblock 0 mapped to illegal pblock 48 (length 1) [ 48.164472][ T3781] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.96: Failed to acquire dquot type 0 [ 48.176908][ T3781] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 48.189245][ T3781] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.96: mark_inode_dirty error [ 48.202197][ T3781] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 48.213598][ T3781] EXT4-fs (loop3): 1 orphan inode deleted [ 48.219840][ T3445] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.243695][ T3445] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 48.282102][ T3788] netlink: 'syz.0.98': attribute type 21 has an invalid length. [ 48.303877][ T3788] netlink: 152 bytes leftover after parsing attributes in process `syz.0.98'. [ 48.314206][ T3781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.386844][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.570992][ T52] ================================================================== [ 48.579137][ T52] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 48.588793][ T52] [ 48.591167][ T52] write to 0xffff88812a6d6ab0 of 6 bytes by task 3785 on cpu 1: [ 48.598860][ T52] copy_folio_from_iter_atomic+0x75f/0x1170 [ 48.604772][ T52] generic_perform_write+0x2c1/0x490 [ 48.610074][ T52] __generic_file_write_iter+0x9e/0x120 [ 48.615632][ T52] generic_file_write_iter+0x8d/0x310 [ 48.621050][ T52] iter_file_splice_write+0x6bc/0xa80 [ 48.626448][ T52] direct_splice_actor+0x156/0x2a0 [ 48.631569][ T52] splice_direct_to_actor+0x311/0x670 [ 48.636960][ T52] do_splice_direct+0x119/0x1a0 [ 48.641857][ T52] do_sendfile+0x380/0x650 [ 48.646286][ T52] __x64_sys_sendfile64+0x105/0x150 [ 48.651492][ T52] x64_sys_call+0x2db1/0x3000 [ 48.656212][ T52] do_syscall_64+0xc0/0x2a0 [ 48.660722][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.666619][ T52] [ 48.668969][ T52] read to 0xffff88812a6d6800 of 2048 bytes by task 52 on cpu 0: [ 48.676685][ T52] copy_folio_from_iter_atomic+0x75f/0x1170 [ 48.682775][ T52] generic_perform_write+0x2c1/0x490 [ 48.688095][ T52] shmem_file_write_iter+0xc5/0xf0 [ 48.693237][ T52] lo_rw_aio+0x67d/0x730 [ 48.697514][ T52] loop_process_work+0x56c/0xac0 [ 48.702562][ T52] loop_workfn+0x31/0x40 [ 48.706830][ T52] process_scheduled_works+0x4cd/0x9d0 [ 48.712298][ T52] worker_thread+0x581/0x770 [ 48.716903][ T52] kthread+0x488/0x510 [ 48.720988][ T52] ret_from_fork+0x148/0x280 [ 48.725604][ T52] ret_from_fork_asm+0x1a/0x30 [ 48.730815][ T52] [ 48.733163][ T52] Reported by Kernel Concurrency Sanitizer on: [ 48.739506][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.749420][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.759499][ T52] Workqueue: loop1 loop_workfn [ 48.764322][ T52] ==================================================================