last executing test programs: 13m32.939232356s ago: executing program 32 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 13m23.299585399s ago: executing program 33 (id=653): pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='@', 0x1}], 0x1, 0xff, 0x200, 0x6f9640594bd5df02) 13m20.431365047s ago: executing program 34 (id=694): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x6025, 0x4005, 0xb, 0x8, 0x6, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (rerun: 32) 13m20.047430649s ago: executing program 35 (id=707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, 0x0, 0x0) sendmsg$rds(r2, 0x0, 0x24048800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000140007800800114000000000050015000c0db7490500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 13m18.693945629s ago: executing program 36 (id=725): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000060000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13m12.277350344s ago: executing program 37 (id=841): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 13m11.300946551s ago: executing program 38 (id=862): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000002000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500"], 0x1fc}}, 0x0) 13m10.681051827s ago: executing program 39 (id=873): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001003300000002000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440105007f000001000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000e50000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000000004a000000800000007f000001000000000000000000000000000000006c00000000000000e0000001000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000001000000006c"], 0x1fc}}, 0x0) 13m9.214199933s ago: executing program 40 (id=883): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2060, 0x0, {0x3, r3}}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x65, 0x4000, @fd=r0, 0x8f, 0x400, 0x4, 0x10, 0x0, {0x2, r3}}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000180)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2060, 0x0, {0x3, r3}}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x65, 0x4000, @fd=r0, 0x8f, 0x400, 0x4, 0x10, 0x0, {0x2, r3}}) (async) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) (async) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) (async) 13m9.212015893s ago: executing program 41 (id=885): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x20, 0x600}, 0x96) 13m5.312415291s ago: executing program 42 (id=894): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000200000000000000000014f194e20"], 0xfdef) 13m3.355414936s ago: executing program 43 (id=915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf2564010100000000000000000000000020010000000000000000008d41000000000000004e210002020000001d00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000043050000000000000400000000000000ffffffffffffff7ffcffffffffffffffe2eb0000000000000200000000000000000000002cbd7000003500000a00040050000000000000001c00040007004e244e200000fe80000000000000000000000000002d60001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 13m2.781957789s ago: executing program 44 (id=923): r0 = socket(0x1e, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)={0x30000003}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x831, 0x870bd2b, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in=@local, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7f}, {0x0, 0x400800}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0x2, 0x4, 0x3, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b064000002280000140003007665746830000000000000000000000818"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x60000008}) poll(&(0x7f0000000000)=[{r7, 0x831a}], 0x1, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x18, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) socket$nl_route(0x10, 0x3, 0x0) socket(0x18, 0x80005, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) r9 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x381}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r9, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r9, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 13m2.054262212s ago: executing program 45 (id=932): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000040000000000000000671cb44ba058f3cd000000000000000000000003000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 12m56.962086289s ago: executing program 46 (id=970): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000000)=0x30) r1 = socket(0xa, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000000100)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r5 = epoll_create(0x9) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x1fffc, 0x0, 0xfffffffd}}, 0x2e) getsockopt(r8, 0x111, 0x3, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x2000, 0xb531b0000000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018050000000000000c0000005bfffffff721bb2a000000e1a77d9b487d0aeb8bd51dce04d6df4c3667554bec6064b6d8e41feef24f4b6df9291a"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20) 12m54.647677855s ago: executing program 47 (id=1001): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff0000000000003f0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 12m53.101801225s ago: executing program 48 (id=1023): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xf}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_create(0x5, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/238, 0xee}], 0x1, 0xffff0000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x1080b2, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00', 0x0, 0x38b185b, 0x0) 12m52.082618715s ago: executing program 49 (id=1037): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12m50.664258827s ago: executing program 50 (id=1047): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="a7859c01af01", 0x6}], 0x1, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0x8004) 12m48.304279536s ago: executing program 51 (id=1072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xffef, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000aefff040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40) 12m22.128958876s ago: executing program 52 (id=1696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a300000000008000340"], 0xfdef}}, 0x0) 10m50.030306251s ago: executing program 53 (id=4275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000000000000711027000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}}, 0x1, 0x3a34089d, 0x7, 0x2, 0x1b0a}, &(0x7f00000002c0)=0x98) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000000000000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/96, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0x7f, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000200), 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10f2071704000000080080000500000083a24fad", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x800010, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 10m26.163497687s ago: executing program 54 (id=4817): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000850000007d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xfca804a0, 0x90, 0x0, &(0x7f0000000240)="b820080002000000000000d1786da8d6f208d949d18590426a76b128f82794766157992e3ea29175f8ccc5a8e3c72939734d0e362d4fca8a5764a06ba147b3aa3fb551494dfa4fdf1aa56cdd5c0f1bc48d066db12e1183cc63f94f95b85ae3d65ef615186ee2344450f9487eb26a21205ca62a767002442f888ae80edeb804fc43892f8b13e250ff44fabef7ae78dfa8", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000280)={0x0, 0x3b, 0x2, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @remote, 0xfffffffe}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e20, 0xd, @remote, 0x1}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)='?', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file1\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11c1, &(0x7f0000001240)="$eJzs209LdFUcB/CfPtpj86TZP0s3HWpTm0u6aNVGQiEcKNQJNAiuONYw08wwdxYz0kJo16rXES3bBdEb8F20kyBq46qJHNMUIw30Bn0+m/nB95y5v8OFC+dyz8k7X33WPCiyg7wfkxMTMdWdjnSaIsVkPIqxo3jzi/Vfv9za2d1YrVbXNlNaX91efjulNPfq9x99/s1rP/SffPjt3HeP43j+45OfV348XjhePPlt+9NGkRpFanf6KU97nU4/32vV036jaGYpfdCq50U9NdpFvXclP2h1ut1hytv7s5Vur14UKW8PU7M+TP1O6veGKf8kb7RTlmVpthJcNxqNRrcdW/v69Gz0aDQdT53NfDoq8SSeidmYi2djPp6L5+OFeDFeioV4OV6JxTv9PwAAAAAAAAAAAAAAAAAAAHAbzv8DAAAAAAAAAAAAAAAAAABA+Zz/BwAAAAAAAAAAAAAAAAAAgPI5/w8AAAAAAAAAAAAAAAAAAADl29rZ3VitVtc2U5qJ+OloUBvUxr/jfP296tpb6cz85axfBoPao4t8eZynq/njqJznKzfmM/HG6+P8j+zd96vX8qXYv//lAwAAwP9Cli7cuL/Psr/Lx9Vf3g9c279PxdLUTVecua+l8C8Uw8Nm3mrVe8Vw+s/isLRi4ryrkttQKO6rmPxvtPHPRckPJh7E5U0vuxMAAAAAAAAAAADu4iE+Jyx7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOztwLAAAAAAgzN86jY4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCqAAAA//9fwpXh") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xf, 0x3fff8000}, 0x0, 0xd, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x3, &(0x7f0000000300)=[{0xf, 0x6, 0x8, 0x9}, {0x735, 0x6, 0xa7, 0x4}, {0x6, 0x2, 0x7f, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f00000004c0)={r8, 0x0, r2, 0x6, 0x80000}) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 10m12.072612911s ago: executing program 55 (id=4789): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0xffffffff, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0xd}, 0x80, 0x0}, 0x4000080) unshare(0x6c000200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001"], 0x70}}, 0x24044850) close(r4) 10m2.215611447s ago: executing program 56 (id=5295): r0 = socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0xa8a) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd78, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0020001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 9m6.597203789s ago: executing program 57 (id=7035): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = shmget$private(0x0, 0x4000, 0x1a00, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x7000)=nil, 0x2000) r4 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c00)={r4, r1, 0x0, 0x0, 0x0}, 0x30) sched_getparam(r4, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514210626bd7000000000000800010000000000080008"], 0x20}}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) 7m41.324527836s ago: executing program 58 (id=8879): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00c22ffffe8000000000000000000000000000aaff020000006000000000000000000001"], 0xf8) 7m1.712211672s ago: executing program 59 (id=10263): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) (fail_nth: 2) 5m59.363803557s ago: executing program 60 (id=11997): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001c00), 0xffffffffffffffff) (rerun: 64) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x888c}, 0x20000004) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4c000}, 0x14) io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) close(0x3) (async, rerun: 32) personality(0x87bf5ac905ea0f7f) (async, rerun: 32) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3c, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 5m53.544148168s ago: executing program 61 (id=12107): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x80100) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x3, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) gettid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x3000000000000000) 4m59.535406896s ago: executing program 62 (id=13157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) unshare(0x22020400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x15, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0), 0x4) r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x1, 0xf, 0xa1, 0x0, 0xa8a, 0x2240, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x13f9, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x100011, 0x1, 0x4, 0x3, 0xd67, 0x8, 0x6d96, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) 4m20.478305069s ago: executing program 63 (id=14131): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0xde, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x5c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0xde, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x5c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000300)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000ec0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01e52abd7000fbdbdf250500000008000300", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01e52abd7000fbdbdf250500000008000300", @ANYRES32=r7, @ANYBLOB="08000600", @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000092a000/0x4000)=nil, &(0x7f0000cf4000/0x2000)=nil, &(0x7f0000b8e000/0x3000)=nil, &(0x7f0000000280)="5628002f12cd387f25724b8624af48d8f489efb59ac9a09d3d0d0c892f0651", 0x1f, r3}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/247, 0x18, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r9) r10 = socket$nl_route(0x10, 0x3, 0x0) futex(0xfffffffffffffffc, 0x5, 0x10000, 0x0, 0x0, 0xfffffffe) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000d0000002f49000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r14}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r14}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a40)={r14, &(0x7f00000001c0), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a40)={r14, &(0x7f00000001c0), 0x0}, 0x20) getsockname$packet(r12, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r13, @ANYRES64=r3], 0x38}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010031bd7000fedbdf2500000000", @ANYRES32=r15, @ANYBLOB="000000000000000020001280080001007369740014000280080014002f000000080003007f00000104001400"], 0x44}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) 3m49.560793817s ago: executing program 0 (id=15546): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000080)=""/96, 0x60}, {&(0x7f0000000500)=""/180, 0xb4}], 0x5, &(0x7f0000000640)=""/137, 0x89}, 0x100a1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x7}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x40, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x73}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff000000, 0xffffff00, 0xffffff00]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x84}, 0x40) 3m49.386593787s ago: executing program 0 (id=15549): unshare(0x2c020400) r0 = syz_open_dev$MSR(0x0, 0xa, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x0, 0x0, 0xff3, 0x6, 0x4, 0x98e8, 0x17, 0x1]) 3m49.385056837s ago: executing program 0 (id=15552): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8a101) ioctl$SG_IO(r0, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffc, 0x1, 0x50, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="b6", 0x0, 0xfdfbfffe, 0x10033, 0x1, 0x0}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r4, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4113, 0x1011}], 0x1, 0x1ae5, 0xfffff7fa) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setpriority(0x0, 0x0, 0x2) 3m48.517771608s ago: executing program 0 (id=15578): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000880)='./file0\x00', 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 3m48.457757972s ago: executing program 0 (id=15581): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000025000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) 3m48.035762937s ago: executing program 0 (id=15597): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 3m47.97730023s ago: executing program 64 (id=15597): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 3m47.266629551s ago: executing program 5 (id=15616): unshare(0x2c020400) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0xa, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000040)=[0x0, 0x0, 0xff3, 0x6, 0x4, 0x98e8, 0x17, 0x1]) 3m47.266278512s ago: executing program 5 (id=15617): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x7, &(0x7f0000000680)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x20, 0x0, 0x7fff0000}]}) io_submit(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x840) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f00000000c0)=0x7, 0x4) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd25, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x404c884}, 0x4) wait4(r0, 0x0, 0x80000000, 0x0) 3m46.934290211s ago: executing program 5 (id=15624): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 3m46.842556236s ago: executing program 5 (id=15627): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000880)='./file0\x00', 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 3m46.842076697s ago: executing program 5 (id=15629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x1, 0x10, &(0x7f0000002200)=ANY=[@ANYBLOB="180000000900000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000aa000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000020b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m46.655210677s ago: executing program 5 (id=15634): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 3m46.578466392s ago: executing program 65 (id=15634): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 3m45.798569597s ago: executing program 2 (id=15652): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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", @ANYRES8=r1], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 3m45.75277166s ago: executing program 2 (id=15654): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="0a000000010000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000002085000000010000001801000020207025003f0000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m45.690414183s ago: executing program 2 (id=15655): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8, 0x40800) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000040)={0x2, 0x3, 0x4, 0x0, 0x100, 0x7, 0x0, 0x3, 0x0, 0x1, 0xfff, 0x63c7, 0x3, 0x7ff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x20000000}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@loopback, 0x0}, &(0x7f0000000100)=0x14) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, r1, 0x25, 0xa, @val=@netfilter={0x1, 0x1, 0x8}}, 0x20) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r1, 0x25, 0xe, @void}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000800) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xac, 0x14, 0x14, 0x2a}, 0x7, 0x1e}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x9, 0x6, 0x3, 0x8}, {0x2, 0x8}]}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x40) pwritev2(r2, &(0x7f0000000800)=[{&(0x7f0000000540)="afcd0aee51ff5b04c087b72788e72a3b725a82db5ce63977a94173f8aff0624a48ddf9ae5119883b0bd9de91c7c180a0ceae5aad2c01378676fcf2063137d3bd2bfffe28110ac0a186a7fb72fc81364435e0a52cf275d1392ce90de3168d054500280e2cab3bd7ec6b13c7905be3c84e7a82cdaa96dada775e42b9b05107f853bf7a9900804820c5ad15c8241336e8a7af4f7f89ccf5440cd6c223c45fe4bf2205a275e182d6024aeae7da9520becbb86995d56616cbe1845736a8fdd5c7fee898b5fc2a3709cb280e3f", 0xca}, {&(0x7f0000000640)="8c9e011e9413d1779cae25667a909ea20acde9272bb32a38d93b29261bf307a57ac7d2e7c6a9f1742cd9c3a34acc5a4b47060606325a98609c79110ed97090e693b0a836d944fd2a7560c05f3a045fd1d94483f0df0edc3532ed901d9bc88438971acb75b3b256f3918dfa266ba15939edbfa14f9c35762c21683e22bf0df98035aaf7d9bb5aec3b99d8813ed29460914072325b88bf0039c4a815814a38d78c6f133169b74da395bd45a552ba8ae773884f16061580c64394cf5d7e0484e5df9d8b8081751fc50c8b0dced350dbfe342e143cbba85e5067c681c49dd4390c74a0d5ef6e4d21e805520101a253a2e2cc1914dbf502c6718b", 0xf8}, {&(0x7f0000000740)="a29f8df7c36167589b70326da8ba0fe850fb9cdfb0bec25faac8e687d3f480c8d1d8674b9062b15b33af21460c8110ac2e81ceba4173194529a9c59036432a0304776e3644b811f9c8ab9d0a1729176416277b0668a16a8555750259e1edb737df1109023b3ac8192fa8f1252db3672d89fa3cbd87359293fc4510c30f87c52701deb1bfc3b606786350ccb8dbcf4625", 0x90}], 0x3, 0x5, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000840)={{0x3, 0x2}, 0x100, './file0\x00'}) recvmsg$unix(r0, &(0x7f0000002100)={&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/168, 0xa8}, {&(0x7f0000001ac0)=""/29, 0x1d}, {&(0x7f0000001b00)=""/195, 0xc3}, {&(0x7f0000001c00)=""/122, 0x7a}, {&(0x7f0000001c80)=""/90, 0x5a}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)=""/91, 0x5b}, {&(0x7f0000001dc0)=""/127, 0x7f}, {&(0x7f0000001e40)=""/207, 0xcf}], 0xa, &(0x7f0000002000)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x0) io_uring_enter(r11, 0xda1, 0xcc68, 0x18, &(0x7f0000002140)={[0x6]}, 0x8) r12 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r12, 0xca289435, &(0x7f00000021c0)={0x0, 0x8e0, @status={[0x7, 0x36eb0f4c, 0x1, 0x9, 0x6, 0xff]}, [0x1000, 0xc, 0x0, 0x231a, 0xe5de, 0x9, 0x6, 0x4, 0x1, 0xffffffffffffff02, 0x3, 0xf77, 0xd9, 0x71, 0x800, 0x101, 0x9c7, 0xa24, 0x2, 0x3ff, 0xfff, 0x7, 0x5a87, 0x3, 0x1000, 0x1, 0x454, 0x4, 0x2, 0x0, 0x8d1, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x624, 0x2, 0x0, 0x6, 0x401, 0x401, 0xff, 0x9, 0xa5, 0xe9, 0xc9, 0x8, 0x4, 0x8, 0x6, 0x80, 0x1, 0x9, 0x5, 0x14000, 0x0, 0x6, 0x8, 0x5a93, 0x7, 0x5, 0x2, 0x2]}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) r13 = memfd_create(&(0x7f0000002c00)='S^^\x00', 0x7) ioctl$BTRFS_IOC_DEFRAG(r13, 0x50009402, 0x0) sendmmsg$inet6(r0, &(0x7f0000004240)=[{{&(0x7f0000002c40)={0xa, 0x4e21, 0xfffeffff, @local, 0x8}, 0x1c, &(0x7f0000002f80)=[{&(0x7f0000002c80)="f204de2c82bb00c273f1f94bae326fce678a506a0c621d1fd70c5ee2d741bbb53a23ca496b580e22cfb096c05173f282ee5e40f277ae8849e4149a8b4dda58707decb572348a24d93234b177701b46e332ffbc01c38d7ac571a6a2f45a8d6e718b94e8480fdfc9bc41efcb4099c71678a3b26e326fcde4d892dfec9092756200300846ef770aaa142606b15081d36e2f33fb92858e9c25fb552302c055c273498e1ddbe5a9915ecd74ef6ff366a13260f3af58", 0xb3}, {&(0x7f0000002d40)="36a7be891d9b2baeea52e8dfbe4f29434b0b560d1450b88ccf5daba474b22b5fe4e7376ae718f8528cb7b2b30707a16a54f2b36231e027235678fbf2a7a5c6651465b72e1d0550009cc466cd471e86a8aec4f1b84d2eefa7187c6c4b352a44a277214cf93061e127ed69a5575881234869858963f8258c0cb4952213ed7298d7c0195224c7885d1f45cee3fd72ae40f8a76ecc29d447379d67be918c771ff3c5b2c42a8abac622dfbf256c22f0d8c57159d106a1232d308f2a616c08d3ace062eda2d396cdf516bae124f35d2b6d0e0df9a9d9a347f1d0857a8292c7fe6400e658e1ff090e3e39a25810a0cf8f572df8bded9f8ec968", 0xf6}, {&(0x7f0000002e40)="547b0dadfeb14cb39e831c22c55ab4f232500e1dcfaebaeb4f63fe97dcff834d507bc98bcd6534526343996265e4e9b0ee94186c8f9e7a3fc4ecb51e00dd7d0bd580b40972c199e6cece9f2549f91ed08cdbbfb57f2afe73f1754935dcabbf1652834d19fd2114fbd9a1f2695fa5a71c3801362c2c9c5d9fe5019b357541daf0741c58176ed64178aa07d6e8e548fb26d11b7a8356b3f0392241ca345b6086cc7bc72c7fc26fe46fe43c175d4c51f15059c36fb9fadaf48726b524d569f892ad26b0bd8cfc3be39131de6483fa6eeb45648436513f05ef84bd526a571e", 0xdd}, {&(0x7f0000002f40)="cf82334fa31c9757debe742f94cb28f6f76f473932ef25c08b15b1817f597f868b0f5cd152e4a8bd2f94418223f5ca0268e96456bcde7b08f48e4e5d", 0x3c}], 0x4, &(0x7f0000002fc0)=[@tclass={{0x14, 0x29, 0x43, 0x80}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff7}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x88, 0x0, '\x00', [@pad1]}}}], 0x68}}, {{&(0x7f0000003040)={0xa, 0x4e22, 0x56, @empty, 0xfffffffb}, 0x1c, &(0x7f0000004100)=[{&(0x7f0000003080)="675bbe3d928ceb2b7ec43b34148c7560a5327a93e4608b9612ff32429d42416d1f52e6b54322eb7505c7dd76e8588b8145d64fe9b42ec8ce92a327235fb8d82b332b0d39b710099e7321c4c32049bcc855f1505ecf855cfc4a32480e4b056b1da8609d89464df46a6dbda5f999fe9c5115d41fe586b690e6fb537e083eb045a4681a95d68a10072280677872a9ea17c508d7e11af2b43eaed720cdf5e28f9cc305230792bc663233e78784e6672df8a2e9ea16d077a35e19a5f2ad003596c43e79c4d0b76eb2b2202c6e70bd11371ecc1ddc8b5b4373766d9521f3102c4f9a973c6d2176405fafcce517455726b9e930f04882783223869163b9b2797dcbf3e9b11522b157d204a0a542a7a05b4affb8beea77e002ed41dd5dcfd35903c34661af09301270e4e4d9e78dc8be10027793d063eb481a270b9b6499df490587d2ca46318b6eea91abd3a3125731962152bffa01ca3382b12fd92a4fe17a434a4830bacb3b853b7b44734fce80620c6c1967f7495307e8ebf410a26ff3d125365c3b371770545bc891815a18ab957715f2bd4f70f17dbcd20b2df49ce2fbc95dda51e749a11676523b0b2a9e4d4cb751740ba8423b64df0d57838caaf73ee0412180c89e0feb396f350c3f55b03afd7079556f572854b2dd9ef885b0a4c2fc1626a3897046e27aac7cb23d175543b349e6f175fbe1510b0c88a5c4545e7f8a16dfa9bc06f903f78ca30d1d731684cc6274b1194557a5d44d9d06098fa6fe5c39c608ac4c38d59b8f5e6e74428e14e5a156dadfde58c03cc2476857405081c1e711c00d3957d52d537a257f4ebf7e44314b495f2e2002e2aee1726d966ef1e49a41b91ab83e5dbf6edcae9e6583f606b8abed62345e1fe6c612567282111da54dda39b9ddff962ad360fad77fe5dc29b0b8a1128601248223962324813b0b4e4f4025e95da9a98ec5707f4fb860024585252f4237a8719bd34f853d72ad9851226f1d6c46cb81b1d377c54031a3913c7d923655e78495a2c956315fbe5eefea4215e270042eb364b9001e60fd234eac14db2e7a6a8b3897b85b53d30a0c37d2500cec157c8d9eb73d3f702d493ac6ac82b8c994d2d770a756a54800ca734b1a91a0ed75eafdc657876dc975794cb8357b05e3e438a77c4912fdf3906853bb648038934701549920eb8f2c809d97763baa1802088fb18af9b3e5dedf32c73d4a371bfd5e82e077d4e64f86b41537c93be353ffa49298414a014b3a7d72bf87b94c1a5bf69346ce04ca9ff9e43b40211f1ce1aa9ca4261abe366fc493b7c9eb63fc7bfed39ef4ebb52ef739367cb3d12ca00e3a27b3912c5abd9f9bce3032a34d8db5dffa7ebde4ece0469e54bed4b9056a896667c04eb46da6e31a343403c9c898b9c94ec53cdf5d334bb0490b53d504dd0065526182ea8570e7f4bb42f8ecab8665c3781b80018bd2c385f22056c489475cb52e50e16cac0ec0cb1a24871b07cd038067a3bd10e0dd62e59db00470bc94e710459e3eafa3f580f27a193b49ce5b1e8f542a1b2129c5c43a0ae5ab06044a72ae8e29525fa5a9915480df1c228d1b54d4090293a9179cc10351f5b6939fbee93443b527b4c472ed58155b13930302ebff4bdd6734d0a96fc07d0c87a4281026fa3a4f5383914b33f73934bd010831dceee4f47a536e395bee1252350d1caf45db2df3a0d79a96a065d0a56d976c6e5a28f36610509a366b3e015227395cf97b1714599ea3aaff37b82165db7906dfa3424466567888cea0ba9a1a112c7a803acb504fe9bf03f4566f328417a1244502e9c2fb0a11b0f6ef37ad1b453d71d0b6a8fb208d1bd5db5801f89fb8a8e6f964c8fbfad2933f24d401fdbeb5c3989a045868ec3960da370fc2a3fb9fefb3d17757157351a369a414e0ef9d68e75daa8a98f9df63b2da85199845161c7e571137872a1cc70a9de519bf9dbba5c8a545e4e8a6e0733affbce4c1cdc441d12440ab5e1e407c7f3c323b62d16213480e09e5cf38f25ab046cd9cff28d0c7eb2560a36efc8fe8736f2178b395d1abf9ac2133e57d957f730753173a21da8f7f4538aca45d0d6a75bde91d557a086ea97abf6dfebb8ba75b51e571e9b0c0d9e186775571ab5b27a26e4af81cf36186fb96e78a40e76a8015aef792337263057429f57f0d6a453a9feefb2e8dece556444133802a9d532865ce4f92be68e0bf93ca27b0b126b8047afc1b7aacc0cd58be127060cb894aae4039233e093600877d5c5164521ea4cc979325e758cef6d0a4ccb436c9b9985ed7145098d023e78a136ec26d03b479e1ef859e0a0bb89cdba6c5b3c666d80b8974195db133e424d7ac96a8c64c8c64f0541862a18171d235fd660c51f1fc5df02075bc24b57c0dabe2a42d9839fa531483760b08a7e5d3d7cb36970e31974fef8e1c0175f992b1f4391400f53ce8113f9610c8566830d76d2e3d2e6cf05a84c22fe7ab4233b18e9b72ab65bfb8dc22bf7804c1a6eef5376501f1ad718fc1fedeb9eea1423251b1638f2c72d66e3462beee4e09e6a586a87121236ed1ac000b1cd5358e60fe325a7cc2b29c5b7390aea4c29c3a8d93108f191b8c453fc40ac45baf7933d49b129b465f9db6b3a432dfc2370edaded923472d01fe961db4a10764d08bea951adde598f5eacf9df9c5c4a90ece048746ec6825fce4256a68234295b6cadda003aa7144c1a0297cc260ab9ec898ed5faef199e86f469a012e38c6c4cb8b2724457d11c2e9cfdd6366644e0159c4899c1453e4f4088c2fc691195d06ef088fa34ebe02522edd6d1e394e5f598c7335c012b4377a997ef8e99c1c5b4b3e52f489242d71a8926fe98d8a31d603fe61230e1395c5d6aa7b9135f7ab36d30646a1c1cebfbc228a62941b6e1ea9724dda6655d704fcaa0fb05f585304b4d6c5426544077f1627b659d0122eb96b81dabe53e4db07a003f7811f9a17ff3809f6a80d233e53e9709f92e2b7ea203267c9fa724fc8fc9897dd4727f79b0fb2f5702ea10e503c28bb56f77da388fadca652cbb97781ff332ad9286af93b4ced29785e60c2f026abfbf02394d6912128bc92d1448a60d0032f573200f5050c0febd8ecd7f695af781744c1aaec20d3045d58f07380f33c4db58f9d06a71dffc32515aa5d5abffbdef763cafa327b0bfa4c8b8e139a5bea99a817e1a4d4f745d7d372ea2469a4378be41042444575010db064a1f476faf6636f0f9fc0da8ae821f678ba86d98a2040a77bd814cb2f4bc0b94a114e48a6a29688592171c6b3bd0e388e4e4f60e889f835be0fa69c4065434ae68d99ce74dfed4565e5c6c16db27c9b688600869669a313af5d40d8773abeb00eb84efc1875b8eb614c047178e9feeb556b3da5a0795f28c34f1d952cfdcda1437a154795f8ae4adfc5c829a49416b1dce12bb8a9dc7cf6dc7584de8ae9f1afc5b3ebf3d37f3fc688356359e1557cd836c5a5df9cfc1762cc0de6a427e5cf46fab3cab019dcdd7916dadf5f8e2837d4e942868d5dd8d4429f5e3b006ce1a9d1f31932a3462821dadb88356356bda1b017692e1645cc2f5a48415d6635a2e4a06c6049d35a3e1ffb2aaa44737d3cc6d83b8bc539f30cb94c3fec02273fd8e97abb02579a2c6f154934ab9ea6e48d52afc2d9b59d06a8f4c565c740aa1412179aabc40e62141f0392b4b7f842b89cb1829cdb17befbe58780b44f7251f243b67afc8b94141c5b404d8f40923883ad0dc5f7af791cbbd598434df6687290225b4bc6bcc014a99d236ed823a8719ae0d492e4a8be1dc7ab2064a4b0d8f6e31015f17030c607bf4adf7477fc109bddc2f3e758d3d62a47bdefdf596bed4d7914bd46d3a8146ddc3493f4aaf40581b3d9da40759bc21bed42983370937e67596acf8aa0a2b9088d9102ae6b0a58764d5a0b223054dc22c9f22411fe705fc6847f7a33825bf38ee648fc868d48366373458dbc8c4357df83d35663bdd597644682991ec8af0bb87541c148ea4693202702fefe25185d17960a6779132ede19b2dfdade3ed57410879f510ba60a9b38f0ebe68a85d02db399a00413d4f9fc6e43c54c1523915112b45f55971f7429fc39143a2f3583651f355c02bb25a30cc284436658d646f820be525ef165bebd1b309e5aea9a151ca89ea2d3e17e7fbfe8d6dd2aba207d7632fcb4f086496a7145a95fab7d7770b75c70625e8ed1b8d487d59c73019fa6cfef9f00a8512c5ddc6636770013b1104db5e63c5d5744c78a317f807b1dba8be257149b8c77f938bd22fc6f1cab6bcc5b63e40a87df24efe8e3603e0ad1d51c47afa109b9ad4761c9411c0157b0f9273b8f8bfdabc89473ed5d48438c877056f471bb604d6c3d9d34258c7e5783604e3d69914a8461a626460002d0d4f21857bba440b7e54301499234d7548ff1476cebb9ddb6fa9a4c0470d0dad48b53eacfa388f1b99c2ebd186c7aab0a9d88a0e9cb451e6dac9483229c69d5238ff5328d1d918f4ba53767c44af04fd6f328318be3fec9b317c4b9a669d12e473906afa87831c8a134889877c177848760c795383b72188435a4d5bbbb64895fdaa8090b85d3b7b0b0edcf64f05735e3616ab119c38bc53843f54895cf6d8892c3c6cf7125f7530aab367aec38241154135fc679a8a90234003028d12fa13211608cdc32d31baec37effdb348ac6a5532562a4ac468e6d91e9121834af4255d9472a580e9518c41ef155bd99f5a136228301233272e2b35393beffbc058d905b08f7261a57cafb94f8ef6bff9d935a0df30446f479849664c8e3b3610f16b35187114d3bfbd102d93c87e38367e4156891189742ae265c471c5a03557db2fc44286637aca14187dfb597da1742c36bd321b40d8fa5b39cf6c4b96545ddfcd02ab432fea69c6a9d1bbfbece54de59bd15d2bed6dc5c11d2ccb4098195e6053dd19c8358e74af0d16d1b5519feb8f578c38f0f2b6f2bba2fba6cd690db26749b9c3b38b0a93a82de232aa8b405b0000be37c5ddcec1ac39926eb29b539d40e023b0e34dd3caca45ef2bb499b9a17d801de8fd8fd938e437e0c524fb8b0bc60621954c508749ce68e15e3156ff59ae6ba55ecf83aa6c37c542175361d47ca7522b23f3d8c0589867d40cb8df7bdde01fcad0774c3817e3bd583731cdf53e2fdd165dfc9208ea41b8e4f1110457da22c170b01813989cb86ceaea2d0fbd0e0af28a1f0016f8bb36986a9b45af7377b093054c889b57415338b0c415cbd2117449440c53a0bc933e56b8239c602f87ab4505f1cfc9ee95f7a2197b50cc33f25b82d4968bd8d79654dcb6ffb7222ed0f910fdb593d6c232d685e7e029e78b5688d1807b9c19d4900ba05d5f1d39adbcc764b8fc56dc493a70435f6e7e34e1dd7df4845e92b06541ee364ceaf84a176b159966203a46c19afc4289496900557fea038db8699e3826646f42ef922b4a808f243c48406dfcb00611ed20b2baa3f6223787e1cbc6a609d1786ff57f022556bdbc9361205b635af8bbb7e71f35e265e11125d39e3a6979c2cff53824f516a198850f7c78475661d11ad77622a44f4c0f8055e355a8fcfa18fa5c0045f6af17117d2aba31334e16d66bd1a67b416fcc40c65394beea30c3f10c783fbac5c5ab4725287450c2e854dca493465ed27120e2d05d871693899ba62535e1f998f2b243b20bf62ffff3ba0c195e7c9fec79fa00cd6384190e90e64b4481415ddb6ba79d3613abbc65042fc9db0c98f571978d89da100c1c31360fe451ff4b4b5382c7795f51a03bf086266f1b018d7301a877cee2a", 0x1000}, {&(0x7f0000004080)="8cb70a813243e9b08fbd4d7663c7ebb2080f3d960160058afeda1da48e7ffc35af194ede85497bbf315b406e06f5dcf8a98523373e72280c29f7646e17d86af04263d90e7e76c70c8d75ff60efa135367735da1a3951a33aff0eca", 0x5b}], 0x2, &(0x7f0000004140)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x84, 0xa, 0x2, 0x3, 0x0, [@rand_addr=' \x01\x00', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @empty]}}}, @flowinfo={{0x14}}, @rthdr={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x2, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2d}, @rand_addr=' \x01\x00', @local]}}}], 0xc8}}], 0x2, 0x4000010) get_mempolicy(&(0x7f00000042c0), &(0x7f0000004300), 0x7, &(0x7f0000ffd000/0x3000)=nil, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000004600)={0x13, 0x16, &(0x7f0000004340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0xce}, @ldst={0x1, 0x3, 0x1, 0x8, 0x1, 0x10, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000004400)='syzkaller\x00', 0x9, 0xe3, &(0x7f0000004440)=""/227, 0x41000, 0x5, '\x00', r1, @fallback=0x1f, r10, 0x8, &(0x7f0000004540)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000004580)=[r6, r7], &(0x7f00000045c0)=[{0x2, 0x2, 0xc}, {0x2, 0x2, 0x0, 0x3}], 0x10, 0x6}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCAUSEDIAG(r11, 0x89ec, &(0x7f00000046c0)={0x3, 0x7}) r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004700), 0x8240, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r14, 0xf503, 0x0) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000004740)) syz_genetlink_get_family_id$tipc(&(0x7f0000004780), r8) 3m45.674684644s ago: executing program 2 (id=15657): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 3m45.614968438s ago: executing program 2 (id=15659): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000280), &(0x7f0000000340)=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x88a8, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x2000, 0x0, 0x10002}}}}}, 0x0) 3m45.482520606s ago: executing program 8 (id=15660): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 3m45.448697518s ago: executing program 8 (id=15662): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00c22ffffe8000000000000000000000000000aaff0200000000000000000000b0000001042022eb"], 0xf8) 3m45.282572958s ago: executing program 2 (id=15664): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x3000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0x10d}, {&(0x7f0000000400)="145a977ce90bcec36cee68138cdb7c53108f9e6776eb08ce8c386ceb3ef2feba0afdcd6e04c99847b690d5148d8313f48a14b0418173a7b6a901d1903cd5d6eb2636c718aa1204b697a3dc3e564ef86e51483d252558eebe4940511e89cd585dcde0eaef40a867a51728ec", 0x6b}, {&(0x7f0000000e00)="bfaff4f4485bc73c2c14fa76a76697938161b1a54e68d0412f2c369299d3d2a6d338972f6dd839e5c3087c6e61d959386b5a29aa0e181f8da9f47a25d9b5c94f1fd45daba5169918e54c7969700fc8c0d7513b4c9df33d3dbccf8d7077b1524bc28799d782ae94e68a2f2de8097bb55ae5795c6be07af87457d9ce99e5bd440d4f096a0f74da88f2a75895b0c390e38b11b62d3977cd8cd3127721cd0241f4effe4e43f0bf6506fa44aef9de83b58ab6f93883483bb2077979d086e9e2f1802241254c7611ac38ae7ca8c823991f43ef7dd50b51195654dc2f63895c913faf1b905a8d2e5c5442196db570bee035eb4bdd98bf2398f662bd1e2a031f175633b3fc5d1d62c7692b12a0b4516ff123c99a8960151bfcae42a87a9e343a395edfcc0b8086455190bb1b827d35362c40a2a475197a44ff6b0d7aba1d5f5b5f3707c7e340eb07a254dd7a880ce2571e61e32f2be942b06cc666a64d829c7645ae9700"/368, 0x170}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f", 0xbc}], 0x1}}], 0x2, 0x2090) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m45.282425317s ago: executing program 66 (id=15664): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x3000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c64377d503fd9a11c9e5645133ffd67a2512649c040cd61156e462b2816a1566550c7247d1b81dc872bfc085821157c8c6d0a9f213912a85a514a87d4", 0x10d}, {&(0x7f0000000400)="145a977ce90bcec36cee68138cdb7c53108f9e6776eb08ce8c386ceb3ef2feba0afdcd6e04c99847b690d5148d8313f48a14b0418173a7b6a901d1903cd5d6eb2636c718aa1204b697a3dc3e564ef86e51483d252558eebe4940511e89cd585dcde0eaef40a867a51728ec", 0x6b}, {&(0x7f0000000e00)="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"/368, 0x170}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f", 0xbc}], 0x1}}], 0x2, 0x2090) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m45.267124929s ago: executing program 8 (id=15666): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000d3a1000000000000030000000003000000020000000000000000000000000000010500000020000000000000000000000300000c0002000000020000000493000000000053b1c4b03cc84e66ee84f2353274b0044bf137ab466449d52a251ae588f6bee7dbd0dc7abb7215b4fce22b27831ac8b6bd425d744434e3a317644c3eadaa7b23a291a0a7cb8b89a9370a8303714d81a8bf3874ed87abfe4b704288670c8ab18c9d134cb8059db9c4a61e8cf45559e325f610ac675aeadc2650"], 0x0, 0x5a}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 3m45.173136604s ago: executing program 8 (id=15667): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 3m45.140124696s ago: executing program 8 (id=15669): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2000400, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6d73697a653d3078303030303072bdbe4f64f6b2666666662c81"]) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x40814, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="010101007f00000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m44.822676935s ago: executing program 8 (id=15675): memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000280), &(0x7f0000000340)=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2b00, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x2000, 0x0, 0x10002}}}}}, 0x0) 3m44.803127506s ago: executing program 67 (id=15675): memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000280), &(0x7f0000000340)=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2b00, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x2000, 0x0, 0x10002}}}}}, 0x0) 1m3.902710984s ago: executing program 6 (id=19573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000002000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440105007f000001000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000e50000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000000004a000000800000007f000001000000000000000000000000000000006c"], 0x1fc}}, 0x0) 1m3.854384787s ago: executing program 6 (id=19576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x1, 0x10, &(0x7f0000002200)=ANY=[@ANYBLOB="180000000900000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000800400005509010000000000950000000000000085000000a0000000bf91000000000020b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.838003558s ago: executing program 6 (id=19578): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000020000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000040000000000000000000200000000000000000000000000000000000000100000300000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m3.750561893s ago: executing program 6 (id=19580): r0 = socket(0x10, 0x3, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x14167e, 0xdc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x4005, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) fcntl$setsig(r0, 0xa, 0x12) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001600156f00000000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="140001"], 0x2c}}, 0x24080) io_setup(0x7, &(0x7f0000000080)=0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r5, &(0x7f0000000000)="f8ffb20000000000000002bc688c6b13f78ada000000000000000425f3a13207000000000000000e8092927b321b5d36", 0x30) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f00000001c0)='wchan\x00') pread64(r7, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) io_submit(r4, 0x9, &(0x7f0000001c80)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x5, r5, &(0x7f00000000c0)="4c1864167398aaa9f5c4fa54639751d3cb11da5debc6124c48fc42ad466ebef8ff0aa7116583fc7b6784c26ab2ffb6fd4d04e93f3e5d458152acb83b3a637c60e35b287bb28224a8b33d82b4aff47411a50968cb6cb698d9d6251e176c38caa34c9085e3b4f9e66fe35f2bc6063def80e55106c8865909934f76a6c6516b93ca40e67ebf0ba75447b64b4c8cf7dbb50ea883e48162507a8c0b3b20e8369eec0a4d81759fc83b0d3e4f6ae54523ae4e7b013c1455cdd8b932c222d3885be39070", 0xc0, 0x0, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000300)="d0646e547cd1ab376f4fc714d836be8376d2c817c64ae04e4855f90fc52b122ce7e175472fea1d92fb7fc21d6e8283b0227868ce8030ee555b391fc6ae5528c22941859ef9bc1079526bb5e713904f13b1d3f89d71227d0f14e587a1ff14c5bcb99400a45e992dce13103654a8cf6246dc4a5fa7935327", 0x77, 0x1, 0x0, 0x5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x1, r3, &(0x7f00000003c0)="682f303beda3960592f496d718f04b6c396ca2af83b37e24b56a799da19266f5e305b7e59046702de406080ac7c0b3fdd061054f9ea887c68cbae175b0b0d4a61bbda91888f09c4582c9ba2638ad8450bd5c6a59be056a776a", 0x59, 0xe, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x65, r1, &(0x7f0000000580)="ec7f315b31251f5a8536f98969c323c49aae9e17db81f7b6abd36cef5bbdc838ca89b49ee224b015a9bb9e28bd0479a2b2b571f8261d1ef28b7ba6e84b23992521c6f2e5573001767f5f5df9f08e7fee3550e6903d4fd67a5272ab16484b04f17019c814ffa92e8dd913735e57d8d3f83c8d0fb07253b83df39e6d9101aa54b1547b6987df7e043af31af7cc668f8369e39a3d0cde60844bd756b6341a7b2b00dc86e5a14e135354c8cc1dc7cb2a36", 0xaf, 0x1, 0x0, 0x2, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8, r3, &(0x7f0000000ac0)="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", 0x1000, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xffff, r3, &(0x7f0000000640)="0138", 0x2, 0x2, 0x0, 0x2, r2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0xeb3, r2, &(0x7f00000006c0)="7650f78f53ba31acbbf00b2c431dbe6001c47e5d93792ec92cd03ad0daf5917a6618c5c378ee4de7eaedaf958114a8441b58d688ef6c7c75ba08e62701af4d5be60b0e933ddf63d4de8eef264f97cb8cba210597a427bc24b8f079", 0x5b, 0x7229, 0x0, 0x2, r2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x8000, r7, &(0x7f0000001ac0)="a454fd044b62043e08c95512e43b223c910f1919634825ebdce29337480d94fb6c1a9f3f477e8c3bd2aedfceb48c093e8d68405d1b7ed8d8a7190ea9b90581cf67b9cd0b34a5d5ab60d28b48f5d6bef86dfda05018c9f9938c455479538a087bd335555ef422692a2fbffdb6bba4f0c567383d211f11f4636c5018a41d1b90e562a5675c9a585f2fe7c3098af56a1c498a1cf250365b1a894da8599c2823326f41d8e67e6809e8a32958ca259d0af82c87e030e3aa81b9b795eb0aab6d4fc07c0fc97c86bdccd33c20e3", 0xca, 0x9}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000001bc0)="ae0bdf7e37260067baf940d72a13e143a9fbecf73ad9a6e4be6686848da2fe8e1b23e68450561de929a07adeb37e1e2b3e236ba018fcbadfc0f2d0923cab2d532962dbc294b3981caef72bda8e825f879fb1013e412c05e5a8b308391ab9b1054d2e602f9e27e8e965c698b424eaae52f4f88e6539bd24c139aa720b2bd3da95fe", 0x81, 0x8, 0x0, 0x2}]) 1m3.588993772s ago: executing program 6 (id=19584): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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", @ANYRES8=r1], 0x21c}, 0x1, 0x0, 0x2000, 0x20040010}, 0x4008804) 1m3.421946452s ago: executing program 6 (id=19595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x20, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x2a0a1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x3}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@remote, r4}, 0x14) 1m3.372441305s ago: executing program 68 (id=19595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x20, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x2a0a1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x3}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@remote, r4}, 0x14) 3.108395359s ago: executing program 7 (id=21250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040099}, 0x400c091) r2 = accept(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x80) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={r4}) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000002c0)={@rand_addr, 0x0}, &(0x7f0000000300)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000340)={r6, 0x1, 0x6, @link_local}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000380)={'ipvlan1\x00', {0x2, 0x4e21, @broadcast}}) r7 = open(&(0x7f00000003c0)='./file0\x00', 0x10000, 0x100) r8 = io_uring_setup(0x1d72, &(0x7f0000000400)={0x0, 0x493f, 0x4, 0x3, 0x2a3, 0x0, r7}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000480)=0x40) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000540)={0x2, 0x0, &(0x7f0000000500)=[r4, r0, r8, r9, r7, r5, r2, r0]}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_virt_wifi\x00'}) ftruncate(r7, 0x6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f00000005c0)={"3508c003d93319ad8f71d58a828c1625", 0x0, 0x0, {0xfffffffffffffffd, 0x3}, {0x5, 0x1}, 0xe, [0x2d, 0x0, 0x8, 0xc3, 0xa9, 0x400, 0x9, 0x9, 0x1, 0x8001, 0x6, 0x16, 0x6, 0x10000, 0x4, 0x5]}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000006c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000700)={"08a6e0b7520089028c4aba0cefc62469", r10, r11, {0x3ff, 0x2}, {0x7, 0x5}, 0x3, [0x2, 0xaa, 0x1673, 0x9, 0x8, 0x200, 0x1cbebe51, 0x9ecc, 0xfffffffffffffffe, 0x5, 0x3000000, 0x8, 0x7f, 0x7, 0x1ff, 0x8]}) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000800)) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x2000)=nil) ioctl$TIOCMIWAIT(r9, 0x545c, 0x0) socket$unix(0x1, 0x5, 0x0) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000880), r9) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r12, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000}, 0x990) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000980)={0x7, 'bridge_slave_1\x00', {0x200}, 0x7}) r13 = eventfd2(0xd30, 0x800) close_range(r4, r13, 0x0) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r14, 0x8010671f, &(0x7f0000000a00)={&(0x7f00000009c0)=""/63, 0x3f}) 3.030998734s ago: executing program 7 (id=21253): io_uring_setup(0x4a88, &(0x7f0000000300)={0x0, 0xe220, 0x8, 0x8001002, 0x3d7}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) preadv(r0, &(0x7f0000001180), 0x0, 0x163, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa2000000000000"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r5, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) clock_settime(0x5, &(0x7f0000000040)) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) lseek(r1, 0x2, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ptrace(0x10, r8) ptrace$poke(0x4212, r8, &(0x7f0000000140), 0x200000000001) perf_event_open(0x0, r8, 0xe, r0, 0x2) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private=0xa010100, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x194}}, 0x4050) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.205321842s ago: executing program 7 (id=21282): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x4000423) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.204971982s ago: executing program 7 (id=21283): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000480)) (fail_nth: 4) 1.251431688s ago: executing program 9 (id=21306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030b28bd7000ffdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) 1.233465799s ago: executing program 9 (id=21309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0xffffffff, 0x0, &(0x7f0000000080)=0x1, 0x22) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r6 = socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000940)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="410000000000000000000100000008000100110000000400048008000200010000001800088014"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_secret(0x80000) close_range(r3, 0xffffffffffffffff, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r10, 0x400, 0x1) 1.169685012s ago: executing program 1 (id=21315): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000080000000b00000000000000f781943ffce59d28fea18cd251cac038e77e0a14682c5f9e48987466977b9ec4cc71f540ac1c2da20b90582909f3de15f91627b880f5ca6131f661e7768be48eafd7c3d7fe9357d4e14006c0a6f85b81d0ef603734e6c59e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) fsmount(0xffffffffffffffff, 0x0, 0xf4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c4010000100001000000000800000000ac1414aa0000000000000000000000000000000000000000000000000000000000010000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000ffffffffffffffff000000803f00000000000000000000000000000001000000000000004000000010000000090000000400000002000000000000000a000200000000000000000048000100736861323536"], 0x1c4}}, 0x0) 1.063725488s ago: executing program 1 (id=21317): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000030000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.062807088s ago: executing program 1 (id=21320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000ffff08000140000000000900010073797a30000000006c000000060a010400000000000000000100000008000b40000000000900010073797a30000000064400048014000180090001006c61737400000000040002802c0001800e000100696d6d65646961746500000018000280080001"], 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 978.685264ms ago: executing program 3 (id=21322): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130720000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) 978.480593ms ago: executing program 1 (id=21323): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000002000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440105007f000001000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000e50000bb000000003c"], 0x1fc}}, 0x0) 977.751233ms ago: executing program 1 (id=21325): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x6}) fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) listxattr(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'hsr0\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x2c}}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = gettid() r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x9}, 0x0, 0x4005, 0x5, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, r5, 0x3, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0x10, 0x0, &(0x7f0000000300)="a8a7f50d6f76c0b92f23c6f00795da83", 0x0, 0x6d2ae2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f0000000200)='?\bts', 0x4) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) r8 = syz_io_uring_setup(0x3f04, &(0x7f0000000000)={0x0, 0x804521, 0x1000, 0x2, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x9}]}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x22d0, 0x20, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000001040)={{0x0, 0x3, 0x2, 0x326, 0x1, 0x9, 0x7, 0x200, 0x2, 0x400, 0x0, 0x100000000, 0x2, 0x8, 0x8000}}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000002040)={r11, 0x3}) 977.538804ms ago: executing program 3 (id=21326): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@usrjquota}, {@noquota}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5ab, &(0x7f0000000b40)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000980)={'gretap0\x00', r3, 0x10, 0xe, 0x6, 0xe, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x67, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="bc3bbc00", @ANYRES16=r4, @ANYBLOB="00022bbd7000fddbdf250b00000018000180140002006e7230000000000000000000000000002c00018014000200626f6e645f736c6176655f31000000001400020076657468305f766c616e0000000000005800018008000100", @ANYRES32=r3, @ANYBLOB="0800030003000000140002006d6163766c616e3100000000000000001400020000000000000000000000000000000000140002006c6f000000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB], 0xbc}}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="4a000e001c"], 0xa0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 766.943356ms ago: executing program 3 (id=21332): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa290000080003000204000008000500", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 609.124275ms ago: executing program 3 (id=21337): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x208000, &(0x7f0000000980)={[{@resuid}, {}, {@data_err_abort}, {@noacl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x56f, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f00000002c0)='GPL\x00', 0xd, 0xbc, &(0x7f0000000300)=""/188, 0x41000, 0x24, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800001400000000000000000000000061190400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="2190", 0x2}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000000), 0x4) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009180)=@newtaction={0x48, 0x30, 0x519, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000140)=0xb, 0x4) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='X\x00', 0x2}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt(r1, 0x7, 0x0, &(0x7f00000000c0)="b6ecd1866f9fa111066be825a88ac4d7499911322dc8832f434ba77a67f3bb89b59493549a5ab8a65b5983bad6ca4c273a68ef69f025ba0f8add0cf7a659f4ce8d33c7f63345f6e819471a265930c123e78917542f9115", 0x57) unshare(0x6a040000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x7, 0x3, 0x2}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lsm_get_self_attr(0x64, 0x0, 0x0, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f00000003c0)) 518.721491ms ago: executing program 4 (id=21338): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000500000500010004000000050015"], 0x4c}}, 0x0) 438.563235ms ago: executing program 4 (id=21339): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000200100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d633000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000010000000000008001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fdffffffffffffff0000000000000000000000002cbd7000003500000200"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 335.032001ms ago: executing program 4 (id=21340): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 334.745671ms ago: executing program 9 (id=21341): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000003321aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000040000000000000000000200000000000000000000000000000000000000100000300000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 286.537544ms ago: executing program 3 (id=21342): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x4, r4}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r3], 0x78}}, 0x0) 253.777126ms ago: executing program 9 (id=21343): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000001340)=ANY=[@ANYBLOB="18088d4c5b123635aaff43369d0da00000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000007900c00000000000180000000000950000000000000000009500000000000000d50a0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x7, &(0x7f0000000340)=""/238, 0x0, 0x2}, 0x21) 236.466167ms ago: executing program 4 (id=21344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r1, r1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8) setresuid(0x0, r1, r2) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000002140)=@gcm_128={{0x303}, '\x00', "0b3e6200000000000000d362581725c7", '\x00', '\x00@\b\x00'}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000440)="$eJzs3V1PY3kZAPDnlHYGdtGyu16smziL+xLG6BRY9oV4sS6JL1ebGNd7BqEQQqETKLsDmSjzCTRmoibe6JU3Jn4AEzMfwZhMondeeKWZKONceGNqTns6A6XFTqa0M/D7JYfzP/8/Pc/zFFrOGz0BXFiTEfFRRIxExNsRUcz6c9kUB80p/b4Hh7eW0ymJev2TfyaRZH3t63wxe1jqe9+J+EFyMu7O3v7GUqVS3j7evX9tfXNprbxW3pqbm31//oP59+ZneqwkyZ82+lJEfPjNhz/78W++/eEfvvbZ3xb/cfWHaVrXs/FOdfRDs/RCjB5bPj/S35t8o0IAAJ4Hr0TEyxHxRkR8JYoxEqduRgMAAADPofo3xi+3mgAAAMD5lIuI8Uhypex63/HI5Uql5jW8X4gXcpXqTu2rq9XdrZV0LGIiCrnV9Up5JrtWeCIKSbo822g/Xn6nbXkuuwb3TnEsXW6MAQAAAIOx0Lb//7DY3P8HAAAAzpnOJ+NHBp4HAAAAcHZcjA8AAADnn/1/AAAAONe++/HH6VR/cHircR+AlU/3djeqn15bKe9slDZ3l0vL1e0bpbVqda1SLvXwHwGVavXGu7G1e3O6lt+pTe/s7S9uVne3aouN+3ovll8eQE0AAADAcS+9fvcvSUQcfH2sMaUuZWOFoWYGPEOSfFvH9S8PKROgLzoc0h879QGTu2eXDDBQ7X/TgYvDPj6QtHe0bRiMdttU+GN7x5X/G8s2BwAADMfUF53/h4sqN+wEgKH5yYmeS0PJAxi8no/FT55tHsDgFdzmDy68E+f/24x2Gzhx/r+bev2JEgIAAPpuvDk7iOxc4HjkcqXSo9OCyep6pTwTEZ+PiD8XC5fT5dkh5gsAAAAAAAAAAAAAAAAAAAAAAAAAz6N6PYk6AAAAcK5F5P6eZPf/miq+Nd5+fOBS8p9iZHcF/uyXn/z85lKttj2b9v/rUX/tF1n/O8M4ggEAAAAXUeHU0dZ+ems/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66cHhreXWNMi49xdiLCY6xc/HaGM+GoWIeOHfSeSPPC6JiJE+xD+4HRGvdoqfpGnFRJZFe/xcRIwNOf6LfYgPF9ndhYj4qNPrLxeTjXnn118+m57W/YXGi7xj/Nb730iX97/P9RjjtXu/m+4a/3bEa/mT8ccjeRQ/6RL/zR7jX//+/n63sfqvI6Y6/v1JmrNc9o21zRvTO3v719Y3l9bKa+WtubnZ9+c/mH9vfmZ6db1Szr52jPHTL/3+4E7X+psBjsZv1TnRzPBH3ep/q8f6/3vv5uErzWbhZPyIq292/vm/2ph3fv7T34m3s6cnHZ9qtQ+a7aOu/PZPV7rllsZf6fL8N3/+xfrj+Plj9V/trfyjNf+qt4cAAGdpZ29/Y6lSKW8PoPHGu/1bYdJopFtBA0p+2I3WwY5nJZ/R4US/HMOt/VtPvZ7W5vDTrOevfasr3WfoPDTENyUAAOBMPN7oH3YmAAAAAAAAAAAAAAAAAAAAcHE1/v9/5Ak/CPD1J/uksfaYB8MpFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgVP8LAAD//9WHwV0=") 178.64577ms ago: executing program 3 (id=21345): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x420e, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000b40)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) pwritev2(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x1200, 0x41001, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fcffffff00000000000000109500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r3, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 178.523021ms ago: executing program 9 (id=21346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000000000001800000000000000000000000000000095000000000a0000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 178.40577ms ago: executing program 4 (id=21347): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000080)) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 141.432643ms ago: executing program 9 (id=21348): r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e20, @loopback}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x1a, {0x2, 0x4e20, @empty}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20008084) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) fstat(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r8 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r8}}, 0x40) r9 = geteuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000540)=0x0) r12 = socket$kcm(0x2, 0x2, 0x0) r13 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) r14 = fsmount(r13, 0x0, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r14, &(0x7f0000000280)='.\x00', 0x0, r15, 0x1000) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000300)={0xac, 0x3e, 0x20, 0x70bd2a, 0x25dfdbfe, "", [@generic="04c45514c4b088ec7e6e4583ee4884dc9372aeea19ce64fe7848e067dfd8199e1d3418e13730f86afa1e0ec8d4e5fb78", @typed={0x8, 0x140, 0x0, 0x0, @pid=r5}, @generic="cc4bce83c906910c9ae086578245c1d9d4e9247dcfea16417e67b93cd252389f6e342c64a94e665252865a8cc49b574550d319f22039180d05bf25ff66211d92cc575325bc07adb67c2e06c29e6c", @typed={0x14, 0x152, 0x0, 0x0, @ipv6=@empty}]}, 0xac}, {&(0x7f000001a240)={0x150c, 0x26, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x2a4, 0xfa, 0x0, 0x1, [@nested={0x4, 0x31}, @generic="0d594ac4ee57b4299a52c644e38c461a7fab9805c503f8c943feed343a3bc2ab82964a725d13d9dedc1153a8081a976f23bffab52a4c105055e45df8fd6eb077fb6a6c2a4777323e71518e03e0cee63a7071598540ada4cb27c60513bd14611d5c3197efce4903123e33ec08f8ad00500d2937931b585092f947a0bf573f3444b43ecc96adafefc958", @nested={0x4, 0x45}, @nested={0x4, 0x79}, @generic="d37b4ad4fc0d551fbc59174569f7e3e5aa936957d75d1ee6884a15b7939ce1b68b255f385d650d65f75459e39f9fd30446a665f311919be32566fbc472fe7456dfdc70a314132ec7dcf013a7763e9e96953b98f4bab5546f6af5d0bd0c7bafc53b3d6919fba498000296d10c502ddbbf1e41e828e6d20cea4e472168b81b4cd1343efec54411abfb24ab1f630921", @generic="93351790c4122f2f81aa0ec8f31bb7229d7a5989c992603233a63fb2a908666fb42f6fa5e17a774de7b0e363c7ebcefcec8480ea49590ddae208c55bf28d732985cc2a82d4e6d21d0dbc021414beb12411899dd48042cc7c53c9ed1e5d82a3cb0ff59056a930b3fe7ed726291b5b273762e4e77c5e35ccd1d2c2e3dc175ed793a9faae90c77bd2ceb5d27ee82a191c9c18a2566faa097e51279a34055fe7b03a552bf144f74693bc7a991abd7489f88116917c34", @nested={0x4, 0x23}, @generic="2bd7f666998853a18c6aedc612b889b574b101c0757a6fd117ed4fd8d202eaf74517d077d29ec2a002fe320bc3f79560161794716868363f056fe5df0d5b208ceb734f0019ac088982fc4a1b0b7415386b31cb33601d4d68ef442dd5eedb0fca3477b94400a0513d392f4c0bf3cd54c669590af8a8bf5ada2ecb630e5ff09300e44dc4e8368e4716a5", @nested={0x4, 0x146}, @generic="a52c26d30f74dc7022daf3b8de3bc9eb0341e988caadea42413402a8383393cc6512969b74e168e506af0f42634889e534e03f0eaf4da6dc"]}, @generic="ca7bb5228c1162ac37f5683550b74bc9d5905bdfe8442c7e5eea45f549de57a836cac27d45ec41f1bd5bca1bcc05e973ef08ed63ec7b6f061c055d27e44b8656e16be6f561d0acbc4bf20d4b0e20a7fdc48488aa89318f5e274a30a27dddddcaf31c84a29e050f099efb5327a82f558dcf3104776e5a35ec37902fff867ec7f69d1b31f8", @nested={0x29, 0xb, 0x0, 0x1, [@generic="fbc0dd9b291979e3301b51440337234a8a5d28cb120e3cee4f2b16e2f6067c43e6e7afe094"]}, @typed={0x8, 0xa9, 0x0, 0x0, @uid=0xee00}, @nested={0x115b, 0x121, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @uid=r6}, @generic="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", @generic="dbd326bfef44b95b011cbe65ff464dd9dccd813d055181d59a8a6f4c8f494ba6348ec305b4553e057186396201b6945aee69a0a5a725f4fdfa1ecb2ee24cd98c49ab98811ef4ba6a66fdf2a7", @typed={0xc, 0x3c, 0x0, 0x0, @u64=0x8}, @generic="7ff46929ad5a6971df08e92c6e2c8587247fd3e75e0e002336709410d06097ce6c3557db0a56fe184fa0638b20a3b99d6172ad797f6e1b3cfa22108ec432b3e69d7e5f5cb5c8d856addb1335da1afb3e4d61facb735525faf6c259c9ff2f823561fe384854b7957e6a50b8f8df441aae8abfc1c8f40d25cf4df35a3f0487d9fb616d154af950208b24d954964f36961760af5d8f2dc460895d2e69459cccd6cc9ea6174eb6d587777e074435bba52915fa68ca4b917ffce1b19447db450ec9da8c9d0bb896829cafe7b3c408b5c0cacc6198fd88dc30bf4fdff08fd6b5985884bf78006810b769ccdba30b0b262d6a", @typed={0x4, 0x4d}, @nested={0x4, 0x52}]}, @typed={0x4, 0x55}, @nested={0x3e, 0x11f, 0x0, 0x1, [@nested={0x4, 0xf8}, @typed={0x8, 0x14a, 0x0, 0x0, @u32=0x80}, @generic="5bfa9b2480b93ed8416840c8469aed8a2dacf98f154b157bbdfcac750ee85ae86f4d248b22d05707d8301eb9c0e4"]}]}, 0x150c}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=r15, @ANYBLOB="0000000019000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r16, @ANYRES32=r3], 0x118, 0x80}, 0x20004051) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82f, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) r17 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_tables_matches\x00') pread64(r17, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 72.364296ms ago: executing program 7 (id=21349): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130720000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) 730.231µs ago: executing program 4 (id=21350): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="0a000000010000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) 513.101µs ago: executing program 7 (id=21351): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r1}}, './file0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000002000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440105007f000001000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000e50000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000000004a000000800000007f000001000000000000000000000000000000006c00000000000000e0000001000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000001000000006c"], 0x1fc}}, 0x0) 0s ago: executing program 1 (id=21352): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000048000200000000000000000850000000e00000095000000800000000e500d0aa05da7e6e58eec39dfafcfdfcae9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffde61}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x40}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0xf00, 0xfffe, 0x0, 0xfffffff9, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1, 0x4000}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") kernel console output (not intermixed with test programs): 9.20118'. [ 818.190258][T29813] udevd[29813]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 818.202231][T30564] udevd[30564]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 818.202243][T30559] udevd[30559]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 818.214307][T30560] udevd[30560]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 818.263126][T30559] udevd[30559]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 818.263294][T29813] udevd[29813]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 818.291731][T30564] udevd[30564]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 818.304924][T30560] udevd[30560]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 818.322255][T22040] Bluetooth: hci0: Frame reassembly failed (-84) [ 818.327253][ T3248] FAULT_INJECTION: forcing a failure. [ 818.327253][ T3248] name failslab, interval 1, probability 0, space 0, times 0 [ 818.328780][T22031] Bluetooth: hci3: Frame reassembly failed (-84) [ 818.341837][ T3248] CPU: 1 UID: 0 PID: 3248 Comm: syz.4.20119 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 818.341903][ T3248] Tainted: [W]=WARN [ 818.341910][ T3248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 818.341923][ T3248] Call Trace: [ 818.341931][ T3248] [ 818.341969][ T3248] __dump_stack+0x1d/0x30 [ 818.342040][ T3248] dump_stack_lvl+0x95/0xd0 [ 818.342063][ T3248] dump_stack+0x15/0x1b [ 818.342084][ T3248] should_fail_ex+0x263/0x280 [ 818.342127][ T3248] should_failslab+0x8c/0xb0 [ 818.342161][ T3248] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 818.342226][ T3248] ? __alloc_skb+0x2f0/0x4b0 [ 818.342328][ T3248] __alloc_skb+0x2f0/0x4b0 [ 818.342389][ T3248] ? __alloc_skb+0x219/0x4b0 [ 818.342420][ T3248] create_monitor_ctrl_open+0x11b/0x4b0 [ 818.342458][ T3248] hci_sock_ioctl+0x2ae/0x7f0 [ 818.342492][ T3248] sock_do_ioctl+0x73/0x230 [ 818.342597][ T3248] sock_ioctl+0x41b/0x610 [ 818.342619][ T3248] ? mutex_lock+0x57/0x90 [ 818.342644][ T3248] ? __pfx_sock_ioctl+0x10/0x10 [ 818.342736][ T3248] __se_sys_ioctl+0xce/0x140 [ 818.342768][ T3248] __x64_sys_ioctl+0x43/0x50 [ 818.342874][ T3248] x64_sys_call+0x14b0/0x3000 [ 818.342901][ T3248] do_syscall_64+0xc0/0x2a0 [ 818.342939][ T3248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.342969][ T3248] RIP: 0033:0x7fc0fdfaacb9 [ 818.342987][ T3248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.343043][ T3248] RSP: 002b:00007fc0fca07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 818.343131][ T3248] RAX: ffffffffffffffda RBX: 00007fc0fe225fa0 RCX: 00007fc0fdfaacb9 [ 818.343147][ T3248] RDX: 0000200000000480 RSI: 00000000800448d3 RDI: 0000000000000005 [ 818.343209][ T3248] RBP: 00007fc0fca07090 R08: 0000000000000000 R09: 0000000000000000 [ 818.343238][ T3248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.343251][ T3248] R13: 00007fc0fe226038 R14: 00007fc0fe225fa0 R15: 00007ffc4ec89fa8 [ 818.343272][ T3248] [ 818.347736][ T3250] netlink: 140 bytes leftover after parsing attributes in process `syz.1.20122'. [ 818.588734][ T3257] loop9: detected capacity change from 0 to 512 [ 818.612758][ T3261] bond2: option lacp_rate: invalid value (20) [ 818.621150][ T3261] bond2 (unregistering): Released all slaves [ 818.628462][ T3257] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.20124: couldn't read orphan inode 26 (err -116) [ 818.640941][ T3257] EXT4-fs (loop9): Remounting filesystem read-only [ 818.648802][ T3257] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.661478][ T3257] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.682395][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.707344][ T3269] loop9: detected capacity change from 0 to 512 [ 818.715323][ T3269] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 818.729467][ T3269] msdos filesystem being mounted at /121/. supports timestamps until 2107-12-31 (0x10391447e) [ 818.802942][ T3283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20134'. [ 818.851480][ T3287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20136'. [ 818.867821][ T3288] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 818.900887][ T3296] netlink: 'syz.1.20138': attribute type 16 has an invalid length. [ 818.917312][ T3296] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.20138'. [ 818.927539][ T3296] xt_hashlimit: max too large, truncated to 1048576 [ 818.936264][ T9668] IPVS: starting estimator thread 0... [ 818.983662][ T980] Bluetooth: hci1: command 0x1003 tx timeout [ 818.984866][T24410] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 818.989698][ T45] Bluetooth: hci2: command 0x1003 tx timeout [ 819.001747][T19516] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 819.033606][ T3298] IPVS: using max 2544 ests per chain, 127200 per kthread [ 819.041562][T22040] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 819.060497][ T3311] netlink: 140 bytes leftover after parsing attributes in process `syz.9.20142'. [ 819.207522][ T3335] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20153'. [ 819.243901][ T3339] netlink: 'syz.3.20164': attribute type 32 has an invalid length. [ 819.251850][ T3339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20164'. [ 819.267286][ T3339] bond2: option coupled_control: invalid value (32) [ 819.275981][ T3339] bond2 (unregistering): Released all slaves [ 819.365838][ T3352] loop3: detected capacity change from 0 to 1024 [ 819.375923][ T3352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.401045][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.430134][ T3358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 819.448976][ T3360] 9p: Bad value for 'wfdno' [ 819.468843][ T3358] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.481662][ T3358] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 819.500445][ T3358] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.20161: Failed to acquire dquot type 1 [ 819.533827][T22031] Bluetooth: hci1: Frame reassembly failed (-84) [ 819.540206][T22031] Bluetooth: hci2: Frame reassembly failed (-84) [ 819.595781][ T3382] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 819.610225][ T3382] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.20168: bad orphan inode 131083 [ 819.622931][ T3382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.646456][ T3382] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa: Can't lookup blockdev [ 819.657260][ T3382] EXT4-fs error (device loop3): ext4_check_dx_root:2201: inode #2: comm syz.3.20168: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 819.686909][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.748869][ T3414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.761665][ T3414] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.780764][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.962576][ T3436] SELinux: Context system_u:object_r:file_context_t:s0 is not valid (left unmapped). [ 820.242912][ T3468] EXT4-fs (loop3): 1 truncate cleaned up [ 820.250832][ T3468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.272029][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.343647][T31838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 820.343793][ T980] Bluetooth: hci3: command 0x1003 tx timeout [ 820.349795][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 820.362035][T24636] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 820.430147][ T3478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.523099][ T3489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.554067][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.579504][ T3496] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 820.713030][ T3515] vfat filesystem being mounted at /294/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 820.758290][T31502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.782381][T21103] Bluetooth: hci0: Frame reassembly failed (-84) [ 820.847225][ T3530] all: renamed from bridge_slave_0 (while UP) [ 820.997841][ T3536] netlink: 'syz.4.20222': attribute type 32 has an invalid length. [ 821.012335][ T3536] bond1: option coupled_control: invalid value (32) [ 821.020347][ T3536] bond1 (unregistering): Released all slaves [ 821.232577][ T3569] set_capacity_and_notify: 7 callbacks suppressed [ 821.232602][ T3569] loop4: detected capacity change from 0 to 128 [ 821.253600][ T3569] vfat filesystem being mounted at /259/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 821.405408][ T3581] loop4: detected capacity change from 0 to 4096 [ 821.414042][ T3581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.427718][ T3581] bridge: RTM_NEWNEIGH with invalid ether address [ 821.434630][ T3581] bridge: RTM_NEWNEIGH with invalid ether address [ 821.441870][ T3581] bridge: RTM_NEWNEIGH with invalid ether address [ 821.459174][T31502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.502847][ T3591] netlink: 'syz.4.20246': attribute type 32 has an invalid length. [ 821.518908][ T3591] bond1: option coupled_control: invalid value (32) [ 821.527003][ T3591] bond1 (unregistering): Released all slaves [ 821.543655][T31838] Bluetooth: hci1: command 0x1003 tx timeout [ 821.544241][T24410] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 821.549719][T19516] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 821.631215][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.690306][ T3598] xfrm0 speed is unknown, defaulting to 1000 [ 821.698572][ T3600] loop4: detected capacity change from 0 to 128 [ 821.707403][ T3603] loop3: detected capacity change from 0 to 512 [ 821.725882][ T3600] vfat filesystem being mounted at /265/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 821.744662][ T3603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.759284][ T3603] usb usb7: usbfs: interface 0 claimed by hub while 'syz.3.20247' resets device [ 821.790379][ T3598] lo speed is unknown, defaulting to 1000 [ 821.839412][ T3617] loop9: detected capacity change from 0 to 512 [ 821.846287][ T3617] EXT4-fs: dax option not supported [ 821.909373][ T3626] loop4: detected capacity change from 0 to 128 [ 821.994940][ T3641] netlink: 'syz.4.20265': attribute type 1 has an invalid length. [ 822.003264][ T3641] netlink: 'syz.4.20265': attribute type 2 has an invalid length. [ 822.012444][ T3642] netlink: 'syz.4.20265': attribute type 4 has an invalid length. [ 822.020845][ T3639] loop9: detected capacity change from 0 to 128 [ 822.028494][ T3641] netlink: 'syz.4.20265': attribute type 4 has an invalid length. [ 822.033702][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 822.046966][ T3639] vfat filesystem being mounted at /143/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 822.061339][ T29] kauditd_printk_skb: 676 callbacks suppressed [ 822.061356][ T29] audit: type=1326 audit(3538799003.548:19258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.9.20264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b0553b58e code=0x7ffc0000 [ 822.115202][ T29] audit: type=1326 audit(3538799003.548:19259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.9.20264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9b05579167 code=0x7ffc0000 [ 822.138767][ T29] audit: type=1326 audit(3538799003.548:19260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.9.20264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b0553b58e code=0x7ffc0000 [ 822.163827][ T29] audit: type=1326 audit(3538799003.548:19261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.9.20264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 822.188019][ T29] audit: type=1326 audit(3538799003.548:19262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.9.20264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 822.211889][ T29] audit: type=1326 audit(3538799003.548:19263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.9.20264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 822.236521][ T29] audit: type=1326 audit(3538799003.548:19264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.9.20264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 822.260492][ T29] audit: type=1326 audit(3538799003.548:19265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.9.20264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 822.285086][ T29] audit: type=1326 audit(3538799003.548:19266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.9.20264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 822.308616][ T29] audit: type=1326 audit(3538799003.588:19267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.9.20264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 822.369764][ T3650] netlink: 'syz.9.20267': attribute type 32 has an invalid length. [ 822.382564][ T3650] bond3: option coupled_control: invalid value (32) [ 822.389961][ T3650] bond3 (unregistering): Released all slaves [ 822.431385][T22040] Bluetooth: hci1: Frame reassembly failed (-84) [ 822.465630][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.515170][ T3663] loop4: detected capacity change from 0 to 256 [ 822.538232][ T3669] loop9: detected capacity change from 0 to 512 [ 822.549385][ T3669] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 822.572816][ T3663] FAT-fs (loop4): Directory bread(block 64) failed [ 822.586388][ T3663] FAT-fs (loop4): Directory bread(block 65) failed [ 822.586835][ T3669] EXT4-fs (loop9): 1 truncate cleaned up [ 822.593042][ T3663] FAT-fs (loop4): Directory bread(block 66) failed [ 822.608242][ T3663] FAT-fs (loop4): Directory bread(block 67) failed [ 822.615031][ T3663] FAT-fs (loop4): Directory bread(block 68) failed [ 822.621074][ T3669] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.621674][ T3663] FAT-fs (loop4): Directory bread(block 69) failed [ 822.645430][ T3663] FAT-fs (loop4): Directory bread(block 70) failed [ 822.652074][ T3663] FAT-fs (loop4): Directory bread(block 71) failed [ 822.659022][ T3663] FAT-fs (loop4): Directory bread(block 72) failed [ 822.670724][ T3663] FAT-fs (loop4): Directory bread(block 73) failed [ 822.687004][ T3663] vfat filesystem being mounted at /274/bus supports timestamps until 2107-12-31 (0x10391447e) [ 822.742594][ T3684] loop4: detected capacity change from 0 to 2048 [ 822.752697][ T3684] ext4: Unknown parameter 'smackfsdef' [ 822.781086][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.816449][ T3692] __nla_validate_parse: 32 callbacks suppressed [ 822.816466][ T3692] netlink: 140 bytes leftover after parsing attributes in process `syz.9.20285'. [ 822.833798][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 822.838468][ T3696] 9p: Bad value for 'wfdno' [ 822.839819][T24636] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 823.022734][ T3715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20294'. [ 823.056595][ T3721] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20296'. [ 823.065754][ T3721] netlink: 36 bytes leftover after parsing attributes in process `syz.9.20296'. [ 823.113344][ T3723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.136685][ T3728] netlink: 'syz.9.20297': attribute type 2 has an invalid length. [ 823.137311][ T3723] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 823.303872][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 823.326693][ T3745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20304'. [ 823.367317][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20305'. [ 823.736859][ T3753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.764020][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.815400][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.846600][ T3758] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 823.882878][ T3758] EXT4-fs (loop7): orphan cleanup on readonly fs [ 823.898213][ T3761] netlink: 140 bytes leftover after parsing attributes in process `syz.3.20309'. [ 823.918548][ T3758] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.20308: Failed to acquire dquot type 1 [ 823.955498][ T3758] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.20308: bg 0: block 40: padding at end of block bitmap is not set [ 824.023378][ T3758] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 824.065693][ T3758] EXT4-fs (loop7): 1 truncate cleaned up [ 824.084413][ T3758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 824.175968][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.356429][ T3783] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20317'. [ 824.478074][ T3787] netlink: 383 bytes leftover after parsing attributes in process `syz.7.20319'. [ 824.488000][ T3787] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 824.496259][ T3787] openvswitch: netlink: Message has 4 unknown bytes. [ 824.505535][T24636] Bluetooth: hci1: command 0x1003 tx timeout [ 824.511551][T19516] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 824.698399][ T3795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.764103][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.827547][ T3800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20323'. [ 825.138644][T17584] Bluetooth: hci0: Frame reassembly failed (-84) [ 825.178163][ T3836] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.256490][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.344556][ T3852] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 825.371987][ T3852] EXT4-fs (loop9): 1 truncate cleaned up [ 825.401149][ T3852] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.484274][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.552256][ T3861] ISOFS: unable to read i-node block [ 825.573180][ T3861] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 825.637316][ T3861] ISOFS: unable to read i-node block [ 825.798521][ T3873] IPVS: Error connecting to the multicast addr [ 825.964544][ T3877] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.20353: bad orphan inode 134217728 [ 826.018646][ T3877] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.061733][ T3884] ªªªªªª: renamed from hsr0 (while UP) [ 826.125895][ T3887] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.293461][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.533733][ T3904] set_capacity_and_notify: 9 callbacks suppressed [ 826.533751][ T3904] loop4: detected capacity change from 0 to 128 [ 826.554714][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.654841][T22031] Bluetooth: hci1: Frame reassembly failed (-84) [ 826.662906][ T3913] FAULT_INJECTION: forcing a failure. [ 826.662906][ T3913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.677386][ T3913] CPU: 1 UID: 0 PID: 3913 Comm: syz.9.20366 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 826.677444][ T3913] Tainted: [W]=WARN [ 826.677451][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 826.677465][ T3913] Call Trace: [ 826.677473][ T3913] [ 826.677481][ T3913] __dump_stack+0x1d/0x30 [ 826.677562][ T3913] dump_stack_lvl+0x95/0xd0 [ 826.677587][ T3913] dump_stack+0x15/0x1b [ 826.677610][ T3913] should_fail_ex+0x263/0x280 [ 826.677644][ T3913] should_fail+0xb/0x20 [ 826.677720][ T3913] should_fail_usercopy+0x1a/0x20 [ 826.677755][ T3913] _copy_from_user+0x1c/0xb0 [ 826.677797][ T3913] kstrtouint_from_user+0x69/0xf0 [ 826.677863][ T3913] proc_fail_nth_write+0x50/0x160 [ 826.677894][ T3913] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 826.677925][ T3913] vfs_write+0x269/0x9f0 [ 826.678007][ T3913] ? __rcu_read_unlock+0x4e/0x70 [ 826.678040][ T3913] ? __fget_files+0x184/0x1c0 [ 826.678062][ T3913] ? mutex_lock+0x57/0x90 [ 826.678088][ T3913] ksys_write+0xdc/0x1a0 [ 826.678117][ T3913] __x64_sys_write+0x40/0x50 [ 826.678166][ T3913] x64_sys_call+0x2847/0x3000 [ 826.678195][ T3913] do_syscall_64+0xc0/0x2a0 [ 826.678237][ T3913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.678259][ T3913] RIP: 0033:0x7f9b0553b58e [ 826.678277][ T3913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 826.678367][ T3913] RSP: 002b:00007f9b03fd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 826.678389][ T3913] RAX: ffffffffffffffda RBX: 00007f9b03fd76c0 RCX: 00007f9b0553b58e [ 826.678406][ T3913] RDX: 0000000000000001 RSI: 00007f9b03fd70a0 RDI: 0000000000000004 [ 826.678420][ T3913] RBP: 00007f9b03fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 826.678439][ T3913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.678454][ T3913] R13: 00007f9b057f6038 R14: 00007f9b057f5fa0 R15: 00007fff27b219e8 [ 826.678476][ T3913] [ 826.979669][T21104] Bluetooth: hci2: Frame reassembly failed (-84) [ 826.990954][T21104] Bluetooth: hci3: Frame reassembly failed (-84) [ 827.143832][T24410] Bluetooth: hci0: command 0x1003 tx timeout [ 827.149852][T19516] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 827.272957][ T29] kauditd_printk_skb: 31154 callbacks suppressed [ 827.273022][ T29] audit: type=1326 audit(3538799008.758:50420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.20370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 827.334177][ T29] audit: type=1326 audit(3538799008.798:50421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.20370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 827.357799][ T29] audit: type=1326 audit(3538799008.798:50422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.20370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 827.364629][ T3935] loop3: detected capacity change from 0 to 128 [ 827.381399][ T29] audit: type=1326 audit(3538799008.798:50423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.20370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 827.381463][ T29] audit: type=1326 audit(3538799008.798:50424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3921 comm="syz.4.20370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 827.446469][ T3938] 9pnet_fd: Insufficient options for proto=fd [ 827.447588][ T3935] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 827.470463][ T3940] netlink: 'syz.4.20377': attribute type 32 has an invalid length. [ 827.486968][ T3935] ext4 filesystem being mounted at /318/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 827.503963][ T3940] bond1: option coupled_control: invalid value (32) [ 827.511946][ T3940] bond1 (unregistering): Released all slaves [ 827.520787][ T3935] vhci_hcd vhci_hcd.0: invalid port number 33 [ 827.526967][ T3935] vhci_hcd vhci_hcd.0: invalid port number 33 [ 827.607276][ T29] audit: type=1326 audit(3538799009.098:50425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.4.20379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 827.636171][T31236] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 827.640918][ T29] audit: type=1326 audit(3538799009.128:50426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.4.20379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 827.668764][ T29] audit: type=1326 audit(3538799009.128:50427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.4.20379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 827.692417][ T29] audit: type=1326 audit(3538799009.128:50428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.4.20379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 827.716250][ T29] audit: type=1326 audit(3538799009.128:50429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3946 comm="syz.4.20379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 827.731892][ T3956] nfs: Deprecated parameter 'nointr' [ 827.840491][T17584] Bluetooth: hci0: Frame reassembly failed (-84) [ 828.326815][ T4003] __nla_validate_parse: 14 callbacks suppressed [ 828.326833][ T4003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20400'. [ 828.399555][ T4005] loop4: detected capacity change from 0 to 512 [ 828.409189][ T4005] EXT4-fs: Ignoring removed nobh option [ 828.422100][ T4005] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 828.453037][ T4005] EXT4-fs (loop4): 1 truncate cleaned up [ 828.461528][ T4005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.511809][T31502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.544829][ T4011] FAULT_INJECTION: forcing a failure. [ 828.544829][ T4011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.558009][ T4011] CPU: 1 UID: 0 PID: 4011 Comm: syz.4.20403 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 828.558041][ T4011] Tainted: [W]=WARN [ 828.558087][ T4011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 828.558160][ T4011] Call Trace: [ 828.558167][ T4011] [ 828.558175][ T4011] __dump_stack+0x1d/0x30 [ 828.558198][ T4011] dump_stack_lvl+0x95/0xd0 [ 828.558220][ T4011] dump_stack+0x15/0x1b [ 828.558242][ T4011] should_fail_ex+0x263/0x280 [ 828.558314][ T4011] should_fail+0xb/0x20 [ 828.558344][ T4011] should_fail_usercopy+0x1a/0x20 [ 828.558458][ T4011] _copy_to_user+0x20/0xa0 [ 828.558477][ T4011] simple_read_from_buffer+0xb5/0x130 [ 828.558531][ T4011] proc_fail_nth_read+0x10e/0x150 [ 828.558557][ T4011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 828.558588][ T4011] vfs_read+0x1ab/0x7f0 [ 828.558607][ T4011] ? __rcu_read_unlock+0x4e/0x70 [ 828.558715][ T4011] ? __fget_files+0x184/0x1c0 [ 828.558737][ T4011] ? mutex_lock+0x57/0x90 [ 828.558795][ T4011] ksys_read+0xdc/0x1a0 [ 828.558890][ T4011] __x64_sys_read+0x40/0x50 [ 828.558913][ T4011] x64_sys_call+0x2889/0x3000 [ 828.558981][ T4011] do_syscall_64+0xc0/0x2a0 [ 828.559009][ T4011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.559098][ T4011] RIP: 0033:0x7fc0fdf6b58e [ 828.559124][ T4011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 828.559222][ T4011] RSP: 002b:00007fc0fca06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 828.559239][ T4011] RAX: ffffffffffffffda RBX: 00007fc0fca076c0 RCX: 00007fc0fdf6b58e [ 828.559248][ T4011] RDX: 000000000000000f RSI: 00007fc0fca070a0 RDI: 0000000000000005 [ 828.559256][ T4011] RBP: 00007fc0fca07090 R08: 0000000000000000 R09: 0000000000000000 [ 828.559265][ T4011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.559323][ T4011] R13: 00007fc0fe226038 R14: 00007fc0fe225fa0 R15: 00007ffc4ec89fa8 [ 828.559335][ T4011] [ 828.760270][T24410] Bluetooth: hci1: command 0x1003 tx timeout [ 828.762524][T24636] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 828.824871][ T4021] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20408'. [ 828.871236][ T4027] loop9: detected capacity change from 0 to 512 [ 828.880186][ T4027] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 828.892374][ T4027] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.20410: iget: bad i_size value: 12154757448730 [ 828.892660][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20411'. [ 828.914658][ T4027] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.20410: couldn't read orphan inode 13 (err -117) [ 828.942626][ T4027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.987496][ T45] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 828.994384][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.028753][ T4044] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20416'. [ 829.065286][T31838] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 829.071430][ T45] Bluetooth: hci3: command 0x1003 tx timeout [ 829.185074][ T4059] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20423'. [ 829.200159][ T4056] loop7: detected capacity change from 0 to 512 [ 829.220528][ T4064] netlink: 'syz.1.20424': attribute type 32 has an invalid length. [ 829.228506][ T4064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20424'. [ 829.234744][ T4056] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.20422: iget: bad extended attribute block 1 [ 829.252118][ T4056] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.20422: couldn't read orphan inode 15 (err -117) [ 829.260319][ T4065] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20425'. [ 829.271526][ T4056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.281002][ T4064] bond3: option coupled_control: invalid value (32) [ 829.293962][ T4064] bond3 (unregistering): Released all slaves [ 829.368468][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.391672][ T4080] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 829.405928][ T4080] netlink: 28 bytes leftover after parsing attributes in process `syz.7.20431'. [ 829.422064][ T4083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20432'. [ 829.426949][T17584] Bluetooth: hci1: Frame reassembly failed (-84) [ 829.611501][ T4099] bond3: entered promiscuous mode [ 829.630017][ T4099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 829.644468][ T4103] netlink: 140 bytes leftover after parsing attributes in process `syz.1.20440'. [ 829.683352][ T4107] cgroup2: Unknown parameter 'favordynmods¬' [ 829.720370][ T4113] loop4: detected capacity change from 0 to 1024 [ 829.755881][ T4113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.815755][T31502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.863610][T19516] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 829.864241][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 829.914136][ T4129] program syz.7.20449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 830.063121][ T4142] loop4: detected capacity change from 0 to 2048 [ 830.080979][ T4148] siw: device registration error -23 [ 830.105570][ T4142] loop4: p2 < > p3 < p5 > p4 [ 830.110290][ T4142] loop4: partition table partially beyond EOD, truncated [ 830.126449][ T4159] netlink: 'syz.7.20459': attribute type 21 has an invalid length. [ 830.140100][ T4142] loop4: p2 start 4278190080 is beyond EOD, truncated [ 830.171044][ T4142] loop4: p4 size 8192 extends beyond EOD, truncated [ 830.191144][ T4162] xfrm0 speed is unknown, defaulting to 1000 [ 830.203672][ T4142] loop4: p5 size 8192 extends beyond EOD, truncated [ 830.306796][ T4169] netlink: 'syz.4.20464': attribute type 29 has an invalid length. [ 830.330066][ T4171] netlink: 'syz.3.20465': attribute type 32 has an invalid length. [ 830.335389][ T4162] lo speed is unknown, defaulting to 1000 [ 830.343673][ T4169] netlink: 'syz.4.20464': attribute type 29 has an invalid length. [ 830.362970][ T4171] bond3: option coupled_control: invalid value (32) [ 830.382335][ T4171] bond3 (unregistering): Released all slaves [ 830.441670][ T4179] loop7: detected capacity change from 0 to 512 [ 830.450067][ T4179] EXT4-fs: Ignoring removed nobh option [ 830.458125][ T4179] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 830.487731][ T4179] EXT4-fs (loop7): 1 truncate cleaned up [ 830.498899][ T4179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 830.551444][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.580429][ T4187] loop3: detected capacity change from 0 to 128 [ 830.598586][ T4187] vfat filesystem being mounted at /329/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 830.631467][ T4187] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 830.639368][ T4187] FAT-fs (loop3): Filesystem has been set read-only [ 830.771383][ T4206] netlink: 'syz.7.20477': attribute type 5 has an invalid length. [ 830.800109][ T4206] geneve2: entered promiscuous mode [ 830.805453][ T4206] geneve2: entered allmulticast mode [ 830.813492][ T4208] loop3: detected capacity change from 0 to 1024 [ 830.822933][T21104] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 830.841394][T21104] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 830.878421][ T4208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 830.892769][T21104] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 830.910010][T21104] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 830.940822][ T4217] EXT4-fs: Ignoring removed mblk_io_submit option [ 830.978024][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.020812][ T4217] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 831.030203][ T4217] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002] [ 831.093719][ T4217] System zones: 0-1, 15-15, 18-18, 34-34 [ 831.118852][ T4217] EXT4-fs (loop7): orphan cleanup on readonly fs [ 831.156292][ T4217] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.20481: bg 0: block 15: invalid block bitmap [ 831.185167][ T4217] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 831.211799][ T4217] EXT4-fs (loop7): 1 truncate cleaned up [ 831.420879][ T4253] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -13 [ 831.440084][ T4253] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #13: comm syz.7.20494: iget: bad i_size value: 12154757448730 [ 831.454213][ T4253] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.20494: couldn't read orphan inode 13 (err -117) [ 831.466878][T19516] Bluetooth: hci1: command 0x1003 tx timeout [ 831.473012][T31838] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 831.493955][ T4257] EXT4-fs (loop3): orphan cleanup on readonly fs [ 831.530493][ T4257] EXT4-fs error (device loop3): ext4_quota_enable:7177: comm syz.3.20496: inode #218103808: comm syz.3.20496: iget: illegal inode # [ 831.548771][ T4257] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.20496: Bad quota inode: 218103808, type: 2 [ 831.573865][ T4257] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 831.591859][ T4257] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 831.618373][ T4273] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 831.624937][ T4273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 831.634144][ T4273] vhci_hcd vhci_hcd.0: Device attached [ 831.681407][ T4279] vhci_hcd: connection closed [ 831.684693][T21104] vhci_hcd vhci_hcd.1: stop threads [ 831.694702][T21104] vhci_hcd vhci_hcd.1: release socket [ 831.700090][T21104] vhci_hcd vhci_hcd.1: disconnect device [ 831.772796][T17584] Bluetooth: hci0: Frame reassembly failed (-84) [ 831.916449][ T4314] netlink: 'syz.9.20515': attribute type 13 has an invalid length. [ 832.008853][ T4326] set_capacity_and_notify: 3 callbacks suppressed [ 832.008887][ T4326] loop7: detected capacity change from 0 to 128 [ 832.029917][ T4326] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 832.208618][ T4342] loop9: detected capacity change from 0 to 512 [ 832.225605][ T4342] EXT4-fs: Ignoring removed nobh option [ 832.233285][ T4342] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 832.259475][ T4342] EXT4-fs (loop9): 1 truncate cleaned up [ 832.273619][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 832.381966][ T4377] loop9: detected capacity change from 0 to 512 [ 832.406784][ T4377] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 832.411652][ T4381] loop7: detected capacity change from 0 to 1024 [ 832.422253][ T4377] lo: Caught tx_queue_len zero misconfig [ 832.450829][ T4377] netlink: 'syz.9.20538': attribute type 10 has an invalid length. [ 832.483474][ T4377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.493430][ T4377] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 832.586348][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 832.586362][ T29] audit: type=1326 audit(3538799014.078:50600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.20548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2e90acb9 code=0x7ffc0000 [ 832.636530][ T4409] loop7: detected capacity change from 0 to 128 [ 832.659710][ T29] audit: type=1326 audit(3538799014.078:50601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.20548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2e90acb9 code=0x7ffc0000 [ 832.683481][ T29] audit: type=1326 audit(3538799014.078:50602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.20548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2e90acb9 code=0x7ffc0000 [ 832.707216][ T29] audit: type=1326 audit(3538799014.108:50603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.20548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d2e90acb9 code=0x7ffc0000 [ 832.730745][ T29] audit: type=1326 audit(3538799014.108:50604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.20548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2e90acb9 code=0x7ffc0000 [ 832.754342][ T29] audit: type=1326 audit(3538799014.108:50605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.20548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2e90acb9 code=0x7ffc0000 [ 832.778049][ T29] audit: type=1326 audit(3538799014.108:50606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.20548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3d2e90acb9 code=0x7ffc0000 [ 832.801638][ T29] audit: type=1326 audit(3538799014.108:50607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.20548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2e90acb9 code=0x7ffc0000 [ 832.815362][ T4411] loop9: detected capacity change from 0 to 512 [ 832.825371][ T29] audit: type=1326 audit(3538799014.108:50608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.20548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2e90acb9 code=0x7ffc0000 [ 832.825409][ T29] audit: type=1326 audit(3538799014.108:50609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4399 comm="syz.1.20548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3d2e90acb9 code=0x7ffc0000 [ 832.834157][ T4409] vfat filesystem being mounted at /381/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 832.870896][ T4398] loop4: detected capacity change from 0 to 512 [ 832.942623][ T4411] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 832.953912][ T4409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 832.969399][ T9668] lo speed is unknown, defaulting to 1000 [ 832.981040][ T4398] EXT4-fs: Ignoring removed nobh option [ 832.984486][ T4411] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 832.997688][ T4411] EXT4-fs (loop9): group descriptors corrupted! [ 833.020887][ T4398] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 833.047357][ T4411] [syz.9.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 833.065335][ T4398] EXT4-fs (loop4): 1 truncate cleaned up [ 833.174177][ T4425] loop9: detected capacity change from 0 to 512 [ 833.196614][ T4425] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 833.237652][ T4425] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.20556: iget: bad i_size value: 12154757448730 [ 833.254610][ T4425] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.20556: couldn't read orphan inode 13 (err -117) [ 833.422888][ T4462] sctp: [Deprecated]: syz.9.20572 (pid 4462) Use of int in maxseg socket option. [ 833.422888][ T4462] Use struct sctp_assoc_value instead [ 833.440446][ T4462] bridge_slave_1: left allmulticast mode [ 833.446252][ T4462] bridge_slave_1: left promiscuous mode [ 833.451934][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.462971][ T4462] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 833.523806][ T4474] loop9: detected capacity change from 0 to 512 [ 833.530458][ T4474] EXT4-fs: Ignoring removed i_version option [ 833.541665][ T4473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4473 comm=syz.1.20578 [ 833.557311][ T4474] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 833.585134][ T4474] xt_hashlimit: size too large, truncated to 1048576 [ 833.615377][ T4481] loop7: detected capacity change from 0 to 512 [ 833.675007][ T4484] batman_adv: batadv0: Adding interface: ipvlan2 [ 833.681392][ T4484] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.708361][ T4484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.718863][ T4484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.729250][ T4474] EXT4-fs: Ignoring removed nobh option [ 833.730376][ T4484] batman_adv: batadv0: Interface activated: ipvlan2 [ 833.742302][ T4474] EXT4-fs (loop9): orphan cleanup on readonly fs [ 833.758102][ T4474] EXT4-fs warning (device loop9): ext4_xattr_inode_get:546: inode #11: comm syz.9.20577: ea_inode file size=4 entry size=6 [ 833.773111][ T4474] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 833.783710][ T4481] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -13 [ 833.787192][ T4474] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.20577: corrupted inode contents [ 833.800485][T31838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 833.812454][T19516] Bluetooth: hci0: command 0x1003 tx timeout [ 833.812505][ T4474] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.20577: mark_inode_dirty error [ 833.820592][ T4481] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #13: comm syz.7.20581: iget: bad i_size value: 12154757448730 [ 833.850426][ T4481] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.20581: couldn't read orphan inode 13 (err -117) [ 833.875941][ T4474] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.20577: corrupted inode contents [ 833.888360][ T4474] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #15: comm syz.9.20577: mark_inode_dirty error [ 833.907208][ T4474] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3004: inode #15: comm syz.9.20577: mark inode dirty (error -117) [ 833.943732][ T4474] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 833.952868][ T4474] EXT4-fs (loop9): 1 orphan inode deleted [ 833.976554][ T4500] random: crng reseeded on system resumption [ 833.994415][ T4504] netlink: 'syz.7.20588': attribute type 32 has an invalid length. [ 834.002343][ T4504] __nla_validate_parse: 23 callbacks suppressed [ 834.002354][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20588'. [ 834.032039][ T4504] bond4: option coupled_control: invalid value (32) [ 834.040018][ T4504] bond4 (unregistering): Released all slaves [ 834.058123][ T4513] netlink: 'syz.3.20592': attribute type 4 has an invalid length. [ 834.068131][ T4510] siw: device registration error -23 [ 834.093140][ T4507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20590'. [ 834.102362][ T4507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20590'. [ 834.104820][ T4515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20593'. [ 834.120725][ T4513] netlink: 'syz.3.20592': attribute type 4 has an invalid length. [ 834.152096][ T4511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20590'. [ 834.169374][T22053] Bluetooth: hci0: Frame reassembly failed (-84) [ 834.190683][ T4517] xfrm0 speed is unknown, defaulting to 1000 [ 834.225234][ T4517] lo speed is unknown, defaulting to 1000 [ 834.384994][ T4536] xfrm0 speed is unknown, defaulting to 1000 [ 834.424291][ T4536] lo speed is unknown, defaulting to 1000 [ 834.552392][ T4541] EXT4-fs: Ignoring removed nobh option [ 834.610737][ T4541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 834.628423][ T4541] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 834.675094][ T4541] EXT4-fs (loop4): 1 truncate cleaned up [ 834.789570][ T4551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20604'. [ 834.797735][ T4548] bond1: option lacp_rate: invalid value (20) [ 834.812708][ T4548] bond1 (unregistering): Released all slaves [ 834.838641][ T4553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20607'. [ 834.932174][ T4544] bridge0: entered promiscuous mode [ 834.945114][ T4544] bridge0: port 3(macsec1) entered blocking state [ 834.951670][ T4544] bridge0: port 3(macsec1) entered disabled state [ 834.958774][ T4544] macsec1: entered allmulticast mode [ 834.965010][ T4544] macsec1: left allmulticast mode [ 834.970702][ T4544] bridge0: left promiscuous mode [ 835.228743][ T4571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20614'. [ 835.252523][ T4571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20614'. [ 835.280346][ T4574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20615'. [ 835.519613][ T4591] FAULT_INJECTION: forcing a failure. [ 835.519613][ T4591] name failslab, interval 1, probability 0, space 0, times 0 [ 835.521119][ T4589] siw: device registration error -23 [ 835.532395][ T4591] CPU: 0 UID: 0 PID: 4591 Comm: syz.9.20621 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 835.532513][ T4591] Tainted: [W]=WARN [ 835.532520][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 835.532533][ T4591] Call Trace: [ 835.532540][ T4591] [ 835.532549][ T4591] __dump_stack+0x1d/0x30 [ 835.532574][ T4591] dump_stack_lvl+0x95/0xd0 [ 835.532659][ T4591] dump_stack+0x15/0x1b [ 835.532681][ T4591] should_fail_ex+0x263/0x280 [ 835.532713][ T4591] should_failslab+0x8c/0xb0 [ 835.532738][ T4591] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 835.532901][ T4591] ? __alloc_skb+0x2f0/0x4b0 [ 835.532932][ T4591] __alloc_skb+0x2f0/0x4b0 [ 835.532960][ T4591] ? __alloc_skb+0x219/0x4b0 [ 835.533036][ T4591] netlink_alloc_large_skb+0xbf/0xf0 [ 835.533106][ T4591] netlink_sendmsg+0x40c/0x6f0 [ 835.533128][ T4591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.533149][ T4591] ____sys_sendmsg+0x5af/0x600 [ 835.533173][ T4591] ___sys_sendmsg+0x195/0x1e0 [ 835.533240][ T4591] __x64_sys_sendmsg+0xd4/0x160 [ 835.533264][ T4591] x64_sys_call+0x17ba/0x3000 [ 835.533291][ T4591] do_syscall_64+0xc0/0x2a0 [ 835.533373][ T4591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.533396][ T4591] RIP: 0033:0x7f9b0557acb9 [ 835.533478][ T4591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.533498][ T4591] RSP: 002b:00007f9b03fd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.533519][ T4591] RAX: ffffffffffffffda RBX: 00007f9b057f5fa0 RCX: 00007f9b0557acb9 [ 835.533601][ T4591] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 835.533616][ T4591] RBP: 00007f9b03fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 835.533658][ T4591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.533672][ T4591] R13: 00007f9b057f6038 R14: 00007f9b057f5fa0 R15: 00007fff27b219e8 [ 835.533751][ T4591] [ 835.554339][ T4578] 9p: Bad value for 'wfdno' [ 835.659641][ T4596] xfrm0 speed is unknown, defaulting to 1000 [ 835.704091][ T4595] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 835.738679][ T4596] lo speed is unknown, defaulting to 1000 [ 835.759907][ T4595] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.20623: iget: bad i_size value: 12154757448730 [ 835.773100][ T4595] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.20623: couldn't read orphan inode 13 (err -117) [ 835.774538][ T4593] sch_tbf: peakrate 4 is lower than or equals to rate 1024 ! [ 835.856587][ T4605] bond3: option lacp_rate: invalid value (20) [ 835.867702][ T4605] bond3 (unregistering): Released all slaves [ 835.893002][ T4612] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 835.916047][ T4612] EXT4-fs (loop9): orphan cleanup on readonly fs [ 835.922493][ T4612] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.20628: Block bitmap for bg 0 marked uninitialized [ 835.954096][ T4612] EXT4-fs (loop9): Remounting filesystem read-only [ 835.960864][ T4612] EXT4-fs (loop9): 1 orphan inode deleted [ 836.045289][ T4625] EXT4-fs: Ignoring removed oldalloc option [ 836.054872][ T4621] xfrm0 speed is unknown, defaulting to 1000 [ 836.066210][ T4625] EXT4-fs: Mount option(s) incompatible with ext2 [ 836.157589][ T4621] lo speed is unknown, defaulting to 1000 [ 836.183640][T19516] Bluetooth: hci0: command 0x1003 tx timeout [ 836.189738][T31838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 836.284871][ T4643] IPVS: Error connecting to the multicast addr [ 836.372763][ T4645] netlink: 'syz.9.20641': attribute type 4 has an invalid length. [ 836.423176][ T4645] netlink: 'syz.9.20641': attribute type 4 has an invalid length. [ 836.545619][T17584] Bluetooth: hci0: Frame reassembly failed (-84) [ 836.588521][ T4667] EXT4-fs: Ignoring removed nobh option [ 836.599943][ T4667] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 836.641055][ T4677] xfrm0 speed is unknown, defaulting to 1000 [ 836.665080][ T4667] EXT4-fs (loop4): 1 truncate cleaned up [ 836.787579][ T4690] netlink: 'syz.1.20643': attribute type 4 has an invalid length. [ 836.798760][T22053] Bluetooth: hci1: Frame reassembly failed (-84) [ 836.827333][ T4677] lo speed is unknown, defaulting to 1000 [ 836.930492][ T4700] siw: device registration error -23 [ 837.016855][ T4703] xfrm0 speed is unknown, defaulting to 1000 [ 837.096764][ T4703] lo speed is unknown, defaulting to 1000 [ 837.835365][ T4714] set_capacity_and_notify: 8 callbacks suppressed [ 837.835383][ T4714] loop4: detected capacity change from 0 to 512 [ 837.848939][ T4714] EXT4-fs: Ignoring removed i_version option [ 837.855756][ T4714] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 837.881790][ T4714] xt_hashlimit: size too large, truncated to 1048576 [ 837.908666][ T4717] loop9: detected capacity change from 0 to 512 [ 837.937277][ T4719] loop4: detected capacity change from 0 to 512 [ 837.946569][ T4719] EXT4-fs: Ignoring removed nobh option [ 837.954730][ T4717] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 837.964382][ T4717] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.20664: iget: bad i_size value: 12154757448730 [ 837.980780][ T4717] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.20664: couldn't read orphan inode 13 (err -117) [ 837.993655][ T4719] EXT4-fs (loop4): orphan cleanup on readonly fs [ 838.000568][ T4719] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.20662: ea_inode file size=4 entry size=6 [ 838.014040][ T4719] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 838.014206][ T4719] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.20662: corrupted inode contents [ 838.014534][ T4719] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.20662: mark_inode_dirty error [ 838.014793][ T4719] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.20662: corrupted inode contents [ 838.015059][ T4719] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.20662: mark_inode_dirty error [ 838.015276][ T4719] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.20662: mark inode dirty (error -117) [ 838.015444][ T4719] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 838.015481][ T4719] EXT4-fs (loop4): 1 orphan inode deleted [ 838.191661][ T4730] loop4: detected capacity change from 0 to 1024 [ 838.246505][ T4736] loop9: detected capacity change from 0 to 1764 [ 838.326513][ T4746] netlink: 'syz.4.20673': attribute type 32 has an invalid length. [ 838.341063][ T4746] bond1: option coupled_control: invalid value (32) [ 838.350262][ T4746] bond1 (unregistering): Released all slaves [ 838.447639][ T4749] xfrm0 speed is unknown, defaulting to 1000 [ 838.483859][ T4749] lo speed is unknown, defaulting to 1000 [ 838.595964][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 838.602034][T31838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 838.823633][T31838] Bluetooth: hci1: command 0x1003 tx timeout [ 838.829751][T19516] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 838.875596][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 838.875701][ T29] audit: type=1326 audit(3538799020.368:50632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.4.20684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 838.945345][ T4774] tipc: Can't bind to reserved service type 0 [ 838.951794][ T29] audit: type=1326 audit(3538799020.408:50633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.4.20684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 838.976280][ T29] audit: type=1326 audit(3538799020.408:50634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.4.20684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 838.999902][ T29] audit: type=1326 audit(3538799020.408:50635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.4.20684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 839.024596][ T29] audit: type=1326 audit(3538799020.408:50636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.4.20684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 839.048215][ T29] audit: type=1326 audit(3538799020.408:50637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.4.20684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 839.072628][ T29] audit: type=1326 audit(3538799020.408:50638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.4.20684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 839.096575][ T29] audit: type=1326 audit(3538799020.408:50639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.4.20684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 839.120326][ T29] audit: type=1326 audit(3538799020.408:50640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.4.20684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 839.144770][ T29] audit: type=1326 audit(3538799020.418:50641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.4.20684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0fdfaacb9 code=0x7ffc0000 [ 839.192727][ T4781] loop9: detected capacity change from 0 to 256 [ 839.200320][ T4781] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 839.222196][ T4781] vfat filesystem being mounted at /222/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 839.338462][ T4785] xfrm0 speed is unknown, defaulting to 1000 [ 839.388317][ T4793] loop4: detected capacity change from 0 to 128 [ 839.401468][ T4785] lo speed is unknown, defaulting to 1000 [ 839.412266][ T4793] vfat filesystem being mounted at /374/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 839.495048][ T4805] netlink: 'syz.9.20692': attribute type 32 has an invalid length. [ 839.503000][ T4805] __nla_validate_parse: 12 callbacks suppressed [ 839.503016][ T4805] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20692'. [ 839.566617][ T4805] bond3: option coupled_control: invalid value (32) [ 839.573685][ T4814] netlink: 140 bytes leftover after parsing attributes in process `syz.4.20697'. [ 839.584357][ T4805] bond3 (unregistering): Released all slaves [ 839.644965][ T4819] loop4: detected capacity change from 0 to 512 [ 839.682123][ T4819] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 839.714301][ T4819] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.20700: iget: bad i_size value: 12154757448730 [ 839.747965][ T4819] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.20700: couldn't read orphan inode 13 (err -117) [ 839.770632][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20704'. [ 839.855172][ T4840] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 839.904368][ T4847] bond1: option lacp_rate: invalid value (20) [ 839.912016][ T4847] bond1 (unregistering): Released all slaves [ 840.119014][ T4879] loop4: detected capacity change from 0 to 512 [ 840.127487][ T4886] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20727'. [ 840.139128][ T4879] EXT4-fs: Ignoring removed nobh option [ 840.156809][ T4879] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 840.185586][ T4879] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 840.201464][ T4879] EXT4-fs (loop4): 1 truncate cleaned up [ 840.224735][ T4901] vhci_hcd vhci_hcd.4: invalid port number 254 [ 840.261919][ T4903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4903 comm=syz.9.20733 [ 840.268778][ T4901] loop7: detected capacity change from 0 to 512 [ 840.274648][ T4903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=4903 comm=syz.9.20733 [ 840.293853][ T4903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=4903 comm=syz.9.20733 [ 840.325865][ T4901] EXT4-fs (loop7): too many log groups per flexible block group [ 840.334074][ T4901] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 840.340988][ T4901] EXT4-fs (loop7): mount failed [ 840.558797][ T4932] netlink: 108 bytes leftover after parsing attributes in process `syz.1.20746'. [ 840.574736][ T4935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20747'. [ 840.790600][ T4947] infiniband !yz!: set active [ 840.795387][ T4947] infiniband !yz!: added team_slave_0 [ 840.801416][ T4947] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 840.801716][ T4947] infiniband !yz!: Couldn't open port 1 [ 840.827986][ T4947] RDS/IB: !yz!: added [ 840.831993][ T4947] smc: adding ib device !yz! with port count 1 [ 840.841524][ T4947] smc: ib device !yz! port 1 has no pnetid [ 840.888931][ T4966] netlink: 'syz.9.20758': attribute type 32 has an invalid length. [ 840.896968][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20758'. [ 840.917093][ T4966] bond3: option coupled_control: invalid value (32) [ 840.932520][ T4966] bond3 (unregistering): Released all slaves [ 840.983587][T19516] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 840.989725][T31838] Bluetooth: hci0: command 0x1003 tx timeout [ 841.073018][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20766'. [ 841.164875][ T4996] netlink: 108 bytes leftover after parsing attributes in process `syz.4.20770'. [ 841.182884][ T4994] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.202961][ T4994] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.20769: corrupted inode contents [ 841.219287][ T4994] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #2: comm syz.9.20769: mark_inode_dirty error [ 841.233811][ T4994] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.20769: corrupted inode contents [ 841.248664][ T4994] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.20769: mark_inode_dirty error [ 841.372058][ T5021] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 841.381532][ T5021] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.20777: iget: bad i_size value: 12154757448730 [ 841.405732][ T5021] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.20777: couldn't read orphan inode 13 (err -117) [ 841.482087][ T5030] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32 [ 841.632882][ T5034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 841.735991][ T5055] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 841.736402][ T5052] bond3: option lacp_rate: invalid value (20) [ 841.776889][ T5052] bond3 (unregistering): Released all slaves [ 841.787684][ T5055] SELinux: failed to load policy [ 841.886117][ T5065] syzkaller0: entered promiscuous mode [ 841.891626][ T5065] syzkaller0: entered allmulticast mode [ 841.928018][ T5069] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20794'. [ 841.943423][ T5061] EXT4-fs: Ignoring removed nobh option [ 841.966769][ T5061] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 841.990445][ T5061] EXT4-fs (loop3): 1 truncate cleaned up [ 842.128424][ T5083] SELinux: security_context_str_to_sid () failed with errno=-22 [ 842.231354][ T5087] netlink: 'syz.9.20802': attribute type 29 has an invalid length. [ 842.251089][ T5088] netlink: 'syz.9.20802': attribute type 29 has an invalid length. [ 842.264186][ T5087] netlink: 'syz.9.20802': attribute type 29 has an invalid length. [ 842.385969][ T5020] bridge0: entered promiscuous mode [ 842.393048][ T5020] bridge0: port 3(macsec1) entered blocking state [ 842.399527][ T5020] bridge0: port 3(macsec1) entered disabled state [ 842.441935][ T5099] EXT4-fs: Ignoring removed nobh option [ 842.443469][ T5099] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 842.496752][ T5020] macsec1: entered allmulticast mode [ 842.502116][ T5020] bridge0: entered allmulticast mode [ 842.508146][ T5099] EXT4-fs (loop7): 1 truncate cleaned up [ 842.517792][ T5020] macsec1: left allmulticast mode [ 842.522854][ T5020] bridge0: left allmulticast mode [ 842.529361][ T5020] bridge0: left promiscuous mode [ 842.555417][ T5118] bond3: option lacp_rate: invalid value (20) [ 842.562539][ T5118] bond3 (unregistering): Released all slaves [ 842.795947][ T5151] FAULT_INJECTION: forcing a failure. [ 842.795947][ T5151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 842.810012][ T5151] CPU: 1 UID: 0 PID: 5151 Comm: syz.4.20825 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 842.810098][ T5151] Tainted: [W]=WARN [ 842.810106][ T5151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 842.810153][ T5151] Call Trace: [ 842.810160][ T5151] [ 842.810168][ T5151] __dump_stack+0x1d/0x30 [ 842.810226][ T5151] dump_stack_lvl+0x95/0xd0 [ 842.810252][ T5151] dump_stack+0x15/0x1b [ 842.810275][ T5151] should_fail_ex+0x263/0x280 [ 842.810303][ T5151] should_fail_alloc_page+0xf2/0x100 [ 842.810341][ T5151] __alloc_frozen_pages_noprof+0x108/0x350 [ 842.810378][ T5151] alloc_pages_mpol+0xb3/0x260 [ 842.810465][ T5151] ? css_rstat_updated+0xbb/0x280 [ 842.810565][ T5151] vma_alloc_folio_noprof+0x1a9/0x300 [ 842.810637][ T5151] handle_mm_fault+0x111f/0x3030 [ 842.810693][ T5151] ? _raw_spin_lock+0x52/0xa0 [ 842.810724][ T5151] ? __pte_offset_map_lock+0x1d9/0x240 [ 842.810811][ T5151] __get_user_pages+0x1023/0x1ea0 [ 842.810852][ T5151] __mm_populate+0x242/0x390 [ 842.810995][ T5151] do_mlock+0x47c/0x520 [ 842.811023][ T5151] ? mutex_unlock+0x4e/0x90 [ 842.811043][ T5151] ? fput+0x8f/0xc0 [ 842.811067][ T5151] ? ksys_write+0x194/0x1a0 [ 842.811147][ T5151] __x64_sys_mlock+0x36/0x50 [ 842.811244][ T5151] x64_sys_call+0x1794/0x3000 [ 842.811292][ T5151] do_syscall_64+0xc0/0x2a0 [ 842.811319][ T5151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.811346][ T5151] RIP: 0033:0x7fc0fdfaacb9 [ 842.811366][ T5151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.811388][ T5151] RSP: 002b:00007fc0fca07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 842.811410][ T5151] RAX: ffffffffffffffda RBX: 00007fc0fe225fa0 RCX: 00007fc0fdfaacb9 [ 842.811477][ T5151] RDX: 0000000000000000 RSI: 0000000000005000 RDI: 0000200000626000 [ 842.811493][ T5151] RBP: 00007fc0fca07090 R08: 0000000000000000 R09: 0000000000000000 [ 842.811507][ T5151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.811520][ T5151] R13: 00007fc0fe226038 R14: 00007fc0fe225fa0 R15: 00007ffc4ec89fa8 [ 842.811587][ T5151] [ 843.063891][ T5154] set_capacity_and_notify: 7 callbacks suppressed [ 843.063924][ T5154] loop3: detected capacity change from 0 to 512 [ 843.153515][ T5154] EXT4-fs: Ignoring removed nobh option [ 843.172635][ T5154] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 843.212717][ T5166] loop7: detected capacity change from 0 to 1024 [ 843.232724][ T5154] EXT4-fs (loop3): 1 truncate cleaned up [ 843.244456][ T5170] loop4: detected capacity change from 0 to 128 [ 843.269550][ T5170] vfat: Unknown parameter '+ [ 843.269550][ T5170] ' [ 843.328907][ T5178] netlink: 'syz.4.20835': attribute type 32 has an invalid length. [ 843.345323][ T5180] loop9: detected capacity change from 0 to 256 [ 843.371033][ T5180] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 843.381809][ T5180] vfat filesystem being mounted at /260/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 843.399722][ T5178] bond1: option coupled_control: invalid value (32) [ 843.406898][ T5184] netlink: 'syz.1.20834': attribute type 10 has an invalid length. [ 843.426330][ T5178] bond1 (unregistering): Released all slaves [ 843.454900][ T5184] team0: Port device dummy0 added [ 843.469626][ T5184] netlink: 'syz.1.20834': attribute type 10 has an invalid length. [ 843.481227][ T5175] xfrm0 speed is unknown, defaulting to 1000 [ 843.501888][ T5184] team0: Port device dummy0 removed [ 843.523459][ T5184] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 843.541263][ T5190] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 843.551289][ T5190] SELinux: failed to load policy [ 843.563945][ T5175] lo speed is unknown, defaulting to 1000 [ 843.638895][ T5204] loop9: detected capacity change from 0 to 512 [ 843.664219][ T5204] EXT4-fs: quotafile must be on filesystem root [ 843.677565][ T5208] loop4: detected capacity change from 0 to 512 [ 843.718204][ T5208] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 843.740828][ T5208] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.20848: iget: bad i_size value: 12154757448730 [ 843.754484][ T5208] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.20848: couldn't read orphan inode 13 (err -117) [ 843.905026][ T5227] vhci_hcd vhci_hcd.4: invalid port number 254 [ 843.919761][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 843.919778][ T29] audit: type=1326 audit(3538799025.408:50772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.9.20854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 843.981396][ T29] audit: type=1326 audit(3538799025.448:50773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.9.20854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 844.005769][ T29] audit: type=1326 audit(3538799025.448:50774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.9.20854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 844.025553][ T5244] netlink: 'syz.3.20863': attribute type 32 has an invalid length. [ 844.029430][ T29] audit: type=1326 audit(3538799025.448:50775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.9.20854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 844.055904][ T5244] bond3: option coupled_control: invalid value (32) [ 844.073712][ T29] audit: type=1326 audit(3538799025.558:50776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.9.20854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 844.097433][ T29] audit: type=1326 audit(3538799025.558:50777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.9.20854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 844.129059][ T29] audit: type=1326 audit(3538799025.568:50778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.9.20854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 844.152763][ T29] audit: type=1326 audit(3538799025.568:50779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.9.20854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 844.176566][ T29] audit: type=1326 audit(3538799025.568:50780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.9.20854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 844.200293][ T29] audit: type=1326 audit(3538799025.568:50781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5226 comm="syz.9.20854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b0557acb9 code=0x7ffc0000 [ 844.205240][ T5247] loop9: detected capacity change from 0 to 512 [ 844.237530][ T5244] bond3 (unregistering): Released all slaves [ 844.282297][ T5247] EXT4-fs (loop9): too many log groups per flexible block group [ 844.289532][ T5258] loop4: detected capacity change from 0 to 1024 [ 844.303876][ T5247] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 844.317961][ T5258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 844.325356][ T5247] EXT4-fs (loop9): mount failed [ 844.343908][ T5258] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 844.457649][ T5274] loop7: detected capacity change from 0 to 764 [ 844.531225][ T5283] __nla_validate_parse: 23 callbacks suppressed [ 844.531244][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20877'. [ 844.554977][ T5266] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.574945][ T5266] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.649301][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20884'. [ 844.687212][ T5293] bond3: Unable to set up delay as MII monitoring is disabled [ 844.700093][ T5293] bond3 (unregistering): Released all slaves [ 844.700734][ T5305] vhci_hcd vhci_hcd.4: invalid port number 254 [ 844.738476][ T5305] loop7: detected capacity change from 0 to 512 [ 844.797531][ T5314] netlink: 'syz.1.20889': attribute type 32 has an invalid length. [ 844.805577][ T5314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20889'. [ 844.823427][ T5318] netlink: 140 bytes leftover after parsing attributes in process `syz.3.20891'. [ 844.828211][ T5314] bond3: option coupled_control: invalid value (32) [ 844.845395][ T5305] EXT4-fs (loop7): too many log groups per flexible block group [ 844.853124][ T5305] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 844.865130][ T5314] bond3 (unregistering): Released all slaves [ 844.876755][ T5305] EXT4-fs (loop7): mount failed [ 844.966519][ T5340] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 844.977524][ T5340] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.20899: iget: bad i_size value: 12154757448730 [ 844.993807][T22031] Bluetooth: hci0: Frame reassembly failed (-84) [ 845.001652][ T5340] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.20899: couldn't read orphan inode 13 (err -117) [ 845.020513][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20901'. [ 845.038413][ T5345] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 845.049380][ T5345] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 845.062774][ T5345] EXT4-fs (loop3): invalid journal inode [ 845.069932][ T5345] EXT4-fs (loop3): can't get journal size [ 845.079163][ T5345] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 845.095325][ T5352] netlink: 32 bytes leftover after parsing attributes in process `syz.9.20902'. [ 845.100356][ T5345] EXT4-fs (loop3): mount failed [ 845.134101][ T5344] uprobe: syz.3.20900:5344 failed to unregister, leaking uprobe [ 845.167921][ T5359] netlink: 140 bytes leftover after parsing attributes in process `syz.7.20907'. [ 845.210331][ T5365] vfat filesystem being mounted at /273/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 845.272082][ T5373] netlink: 'syz.3.20912': attribute type 32 has an invalid length. [ 845.280130][ T5373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20912'. [ 845.310251][ T5373] bond3: option coupled_control: invalid value (32) [ 845.318758][ T5373] bond3 (unregistering): Released all slaves [ 845.391051][ T5386] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 845.399483][ T5386] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.20916: iget: bad i_size value: 12154757448730 [ 845.414407][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20917'. [ 845.417962][ T5386] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.20916: couldn't read orphan inode 13 (err -117) [ 845.485025][T21103] Bluetooth: hci1: Frame reassembly failed (-84) [ 845.512188][ T5399] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20920'. [ 845.587029][ T5406] xfrm0 speed is unknown, defaulting to 1000 [ 845.656441][ T5403] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 845.686319][ T5403] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 845.699468][ T5403] EXT4-fs (loop3): This should not happen!! Data will be lost [ 845.699468][ T5403] [ 845.709252][ T5403] EXT4-fs (loop3): Total free blocks count 0 [ 845.715280][ T5403] EXT4-fs (loop3): Free/Dirty block details [ 845.721234][ T5403] EXT4-fs (loop3): free_blocks=4096 [ 845.727134][ T5403] EXT4-fs (loop3): dirty_blocks=512 [ 845.732426][ T5403] EXT4-fs (loop3): Block reservation details [ 845.738473][ T5403] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 845.749554][ T5406] lo speed is unknown, defaulting to 1000 [ 845.918976][ T5439] netlink: 'syz.7.20933': attribute type 32 has an invalid length. [ 845.938036][ T5444] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 845.945846][ T5439] bond4: option coupled_control: invalid value (32) [ 845.957692][ T5444] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.20935: iget: bad i_size value: 12154757448730 [ 845.958740][ T5439] bond4 (unregistering): Released all slaves [ 845.985117][ T5444] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.20935: couldn't read orphan inode 13 (err -117) [ 846.012553][ T5444] EXT4-fs mount: 76 callbacks suppressed [ 846.012572][ T5444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.031080][T24636] Bluetooth: hci2: sending frame failed (-49) [ 846.037284][ T45] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 846.065322][T31502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.181524][ T5460] EXT4-fs: Ignoring removed nobh option [ 846.189967][ T5460] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 846.210089][ T5460] EXT4-fs (loop7): 1 truncate cleaned up [ 846.211199][ T5472] EXT4-fs (loop4): too many log groups per flexible block group [ 846.220291][ T5460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.223834][ T5472] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 846.223863][ T5472] EXT4-fs (loop4): mount failed [ 846.294363][T29813] loop3: p2 < > p3 < p5 > p4 [ 846.299076][T29813] loop3: partition table partially beyond EOD, truncated [ 846.307314][T29813] loop3: p2 start 4278190080 is beyond EOD, truncated [ 846.318010][T29813] loop3: p4 size 8192 extends beyond EOD, truncated [ 846.325326][T29813] loop3: p5 size 8192 extends beyond EOD, truncated [ 846.347685][ T5476] loop3: p2 < > p3 < p5 > p4 [ 846.352409][ T5476] loop3: partition table partially beyond EOD, truncated [ 846.355213][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.373155][ T5476] loop3: p2 start 4278190080 is beyond EOD, truncated [ 846.390262][ T5476] loop3: p4 size 8192 extends beyond EOD, truncated [ 846.400493][ T5476] loop3: p5 size 8192 extends beyond EOD, truncated [ 846.450675][ T5493] netlink: 'syz.4.20952': attribute type 32 has an invalid length. [ 846.467888][ T5493] bond1: option coupled_control: invalid value (32) [ 846.475697][ T5493] bond1 (unregistering): Released all slaves [ 846.544363][ T5496] EXT4-fs: inline encryption not supported [ 846.555815][ T5496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.568848][ T5496] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.602853][ T5500] bond1: option lacp_rate: invalid value (20) [ 846.610357][ T5500] bond1 (unregistering): Released all slaves [ 846.857675][ T5512] netlink: 'syz.4.20959': attribute type 4 has an invalid length. [ 846.869308][ T5512] 9p: Bad value for 'rfdno' [ 846.930468][ T5512] 9p: Bad value for 'rfdno' [ 847.051896][ T5524] netlink: 'syz.4.20964': attribute type 32 has an invalid length. [ 847.063632][T19516] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 847.068484][ T5526] bond3: option lacp_rate: invalid value (20) [ 847.079684][ T5526] bond3 (unregistering): Released all slaves [ 847.097750][ T5524] bond1: option coupled_control: invalid value (32) [ 847.105862][ T5524] bond1 (unregistering): Released all slaves [ 847.145113][ T5532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.173030][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.195946][ T5539] vhci_hcd vhci_hcd.4: invalid port number 254 [ 847.205114][ T5542] x_tables: duplicate underflow at hook 1 [ 847.358152][ T5572] xfrm0 speed is unknown, defaulting to 1000 [ 847.395594][ T5581] bond1: option lacp_rate: invalid value (20) [ 847.412750][ T5581] bond1 (unregistering): Released all slaves [ 847.423847][ T5572] lo speed is unknown, defaulting to 1000 [ 847.526019][ T5588] vhci_hcd vhci_hcd.4: invalid port number 254 [ 847.544030][T31838] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 847.581875][ T5594] netlink: 'syz.9.20989': attribute type 32 has an invalid length. [ 847.590561][ T5584] EXT4-fs: Ignoring removed bh option [ 847.605565][ T5594] bond3: option coupled_control: invalid value (32) [ 847.628041][ T5594] bond3 (unregistering): Released all slaves [ 847.646758][ T5584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.728751][ T5614] pimreg: entered allmulticast mode [ 847.735922][ T5614] pimreg: left allmulticast mode [ 847.857249][ T5629] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.887655][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.918053][ T5642] vhci_hcd vhci_hcd.4: invalid port number 254 [ 847.956075][ T5642] EXT4-fs (loop9): too many log groups per flexible block group [ 847.966977][ T5642] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 847.978091][ T5642] EXT4-fs (loop9): mount failed [ 848.039237][ T5660] netlink: 'syz.1.21013': attribute type 32 has an invalid length. [ 848.052084][ T5660] bond3: option coupled_control: invalid value (32) [ 848.060309][ T5660] bond3 (unregistering): Released all slaves [ 848.127818][ T5670] set_capacity_and_notify: 18 callbacks suppressed [ 848.127835][ T5670] loop9: detected capacity change from 0 to 1024 [ 848.154731][ T5670] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.188887][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.254543][ T5698] vhci_hcd vhci_hcd.4: invalid port number 254 [ 848.269122][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.307098][ T5700] loop9: detected capacity change from 0 to 512 [ 848.321855][ T5707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=5707 comm=syz.4.21029 [ 848.345390][ T5700] EXT4-fs: Ignoring removed nobh option [ 848.356876][ T5700] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 848.398804][ T5700] EXT4-fs (loop9): 1 truncate cleaned up [ 848.415708][ T5700] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.434584][T24636] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 848.440720][ T45] Bluetooth: hci2: command 0x1003 tx timeout [ 848.599748][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.706591][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.717032][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.757610][ T5724] veth1_vlan: left allmulticast mode [ 848.782743][ T9650] lo speed is unknown, defaulting to 1000 [ 848.788761][ T9650] syz2: Port: 1 Link DOWN [ 848.812127][T17584] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.820693][T17584] netdevsim netdevsim7 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 848.858765][T17584] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.867205][T17584] netdevsim netdevsim7 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 848.886818][ T5758] loop7: detected capacity change from 0 to 256 [ 848.889731][ T5736] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 848.909544][T17584] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.918635][T17584] netdevsim netdevsim7 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 848.923283][ T5758] FAT-fs (loop7): Directory bread(block 64) failed [ 848.933559][ T5758] FAT-fs (loop7): Directory bread(block 65) failed [ 848.940116][ T5758] FAT-fs (loop7): Directory bread(block 66) failed [ 848.946963][ T5758] FAT-fs (loop7): Directory bread(block 67) failed [ 848.949858][T17584] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.953896][ T5758] FAT-fs (loop7): Directory bread(block 68) failed [ 848.961931][T17584] netdevsim netdevsim7 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 848.971000][ T5758] FAT-fs (loop7): Directory bread(block 69) failed [ 848.986677][ T5758] FAT-fs (loop7): Directory bread(block 70) failed [ 848.993269][ T5758] FAT-fs (loop7): Directory bread(block 71) failed [ 849.000846][ T5758] FAT-fs (loop7): Directory bread(block 72) failed [ 849.024590][ T5758] FAT-fs (loop7): Directory bread(block 73) failed [ 849.053018][ T5768] netlink: 'syz.3.21052': attribute type 32 has an invalid length. [ 849.063957][ T5758] vfat filesystem being mounted at /456/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 849.089445][ T5768] bond3: option coupled_control: invalid value (32) [ 849.113219][ T5768] bond3 (unregistering): Released all slaves [ 849.113893][ T5758] netlink: 'syz.7.21048': attribute type 39 has an invalid length. [ 849.206162][ T5781] program syz.3.21056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 849.229519][ T5781] loop3: detected capacity change from 0 to 1024 [ 849.275452][ T5789] bond3: option lacp_rate: invalid value (20) [ 849.302945][ T5789] bond3 (unregistering): Released all slaves [ 849.312325][ T5792] vhci_hcd vhci_hcd.4: invalid port number 254 [ 849.327216][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 849.327232][ T29] audit: type=1326 audit(3538799030.818:51124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5791 comm="syz.7.21061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a81a9acb9 code=0x7ffc0000 [ 849.408518][ T5792] loop7: detected capacity change from 0 to 512 [ 849.431658][ T5797] loop3: detected capacity change from 0 to 512 [ 849.438296][ T29] audit: type=1326 audit(3538799030.858:51125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5791 comm="syz.7.21061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2a81a9acb9 code=0x7ffc0000 [ 849.462689][ T29] audit: type=1326 audit(3538799030.858:51126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5791 comm="syz.7.21061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a81a9acb9 code=0x7ffc0000 [ 849.487327][ T29] audit: type=1326 audit(3538799030.858:51127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5791 comm="syz.7.21061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a81a9acb9 code=0x7ffc0000 [ 849.510991][ T29] audit: type=1326 audit(3538799030.858:51128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5791 comm="syz.7.21061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2a81a9acb9 code=0x7ffc0000 [ 849.535344][ T29] audit: type=1326 audit(3538799030.858:51129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5791 comm="syz.7.21061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a81a9acb9 code=0x7ffc0000 [ 849.543806][ T5792] EXT4-fs (loop7): too many log groups per flexible block group [ 849.559060][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 849.559330][ T29] audit: type=1326 audit(3538799030.858:51130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5791 comm="syz.7.21061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a81a9acb9 code=0x7ffc0000 [ 849.581485][ T5792] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 849.599408][ T29] audit: type=1326 audit(3538799030.858:51131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5791 comm="syz.7.21061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a81a9acb9 code=0x7ffc0000 [ 849.607958][ T5792] EXT4-fs (loop7): mount failed [ 849.629600][ T29] audit: type=1326 audit(3538799030.858:51132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5791 comm="syz.7.21061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a81a9acb9 code=0x7ffc0000 [ 849.658003][ T29] audit: type=1326 audit(3538799030.858:51133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5791 comm="syz.7.21061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a81a9acb9 code=0x7ffc0000 [ 849.662227][ T5797] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 849.724315][ T5797] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.21062: iget: bad i_size value: 12154757448730 [ 849.737535][ T5797] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.21062: couldn't read orphan inode 13 (err -117) [ 849.750493][ T5797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.779616][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.818555][ T5801] netlink: 'syz.1.21065': attribute type 32 has an invalid length. [ 849.826527][ T5801] __nla_validate_parse: 26 callbacks suppressed [ 849.826580][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21065'. [ 849.847592][ T5802] loop7: detected capacity change from 0 to 1024 [ 849.855193][ T5802] EXT4-fs: Mount option(s) incompatible with ext3 [ 849.869444][ T5801] bond3: option coupled_control: invalid value (32) [ 849.885465][ T5802] loop7: detected capacity change from 0 to 512 [ 849.892144][ T5802] EXT4-fs: Ignoring removed oldalloc option [ 849.899720][ T5801] bond3 (unregistering): Released all slaves [ 849.934959][ T5802] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.21064: corrupted in-inode xattr: e_value size too large [ 849.968781][ T5802] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.21064: couldn't read orphan inode 15 (err -117) [ 849.996733][ T5802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.018866][ T5802] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.21064: deleted inode referenced: 15 [ 850.042660][ T5802] netlink: 'syz.7.21064': attribute type 1 has an invalid length. [ 850.050573][ T5802] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.21064'. [ 850.075414][ T5816] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 850.096717][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.129106][ T5831] netlink: 36 bytes leftover after parsing attributes in process `syz.4.21075'. [ 850.130621][ T5827] netlink: 'syz.3.21073': attribute type 1 has an invalid length. [ 850.147040][ T5831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21075'. [ 850.179284][ T5827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 850.191202][ T5834] loop3: detected capacity change from 0 to 1024 [ 850.195326][ T5828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 850.217117][ T5834] EXT4-fs: Ignoring removed orlov option [ 850.265148][ T5834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 850.509521][ T5866] bond1: option lacp_rate: invalid value (20) [ 850.530811][ T5866] bond1 (unregistering): Released all slaves [ 850.559189][ T5861] xfrm0 speed is unknown, defaulting to 1000 [ 850.597010][ T5861] lo speed is unknown, defaulting to 1000 [ 850.659307][ T5834] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21073'. [ 850.682838][ T5870] tipc: Started in network mode [ 850.687987][ T5870] tipc: Node identity 7f000001, cluster identity 4711 [ 850.709645][ T5870] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 850.716652][ T5870] tipc: Enabled bearer , priority 16 [ 850.724054][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21088'. [ 850.843667][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 850.903627][T24636] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 850.972692][ T5894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21092'. [ 850.983620][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 851.131686][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 851.227243][ T5903] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21099'. [ 851.259146][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21100'. [ 851.263624][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 851.367013][ T5920] netlink: 32 bytes leftover after parsing attributes in process `syz.7.21106'. [ 851.403573][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 851.448457][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.543581][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 851.650380][ T5950] loop7: detected capacity change from 0 to 512 [ 851.683610][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 851.684223][ T5950] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 851.767307][ T5952] sg_write: data in/out 989/14 bytes for SCSI command 0x3-- guessing data in; [ 851.767307][ T5952] program syz.9.21120 not setting count and/or reply_len properly [ 851.823587][ T9650] tipc: Node number set to 2130706433 [ 851.848400][ T5964] siw: device registration error -23 [ 851.927202][ T5955] xfrm0 speed is unknown, defaulting to 1000 [ 851.958231][T21103] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.968040][T21103] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.038929][ T5978] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.074578][ T5974] xfrm0 speed is unknown, defaulting to 1000 [ 852.081975][T21103] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.092501][T21103] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.094019][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.133865][ T5955] lo speed is unknown, defaulting to 1000 [ 852.157251][T21103] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.167203][T21103] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.204611][ T5974] lo speed is unknown, defaulting to 1000 [ 852.237847][T21103] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 852.247746][T21103] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.293997][ T5987] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 852.312567][ T5987] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.21129: iget: bad i_size value: 12154757448730 [ 852.344771][ T5987] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.21129: couldn't read orphan inode 13 (err -117) [ 852.378611][ T5987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.492181][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.549631][T21103] bridge_slave_1: left allmulticast mode [ 852.555373][T21103] bridge_slave_1: left promiscuous mode [ 852.561045][T21103] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.571155][T21103] bridge_slave_0: left allmulticast mode [ 852.576974][T21103] bridge_slave_0: left promiscuous mode [ 852.582705][T21103] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.878653][T21103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.889028][T21103] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 852.900422][T21103] bond0 (unregistering): Released all slaves [ 852.909661][T21103] bond1 (unregistering): Released all slaves [ 852.918978][T21103] bond2 (unregistering): Released all slaves [ 852.939109][ T5998] 8021q: adding VLAN 0 to HW filter on device bond4 [ 853.025574][ T6032] random: crng reseeded on system resumption [ 853.127732][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 853.383812][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 853.414413][T21103] hsr_slave_0: left promiscuous mode [ 853.416836][ T6070] set_capacity_and_notify: 3 callbacks suppressed [ 853.416853][ T6070] loop7: detected capacity change from 0 to 512 [ 853.436357][T21103] hsr_slave_1: left promiscuous mode [ 853.442162][T21103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.450380][T21103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.494080][T21103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.501501][T21103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.508900][ T6070] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 853.532732][T21103] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 853.539675][T21103] batman_adv: batadv0: Removing interface: ipvlan2 [ 853.562277][ T6070] System zones: 1-12 [ 853.610557][T21103] veth1_macvtap: left promiscuous mode [ 853.616623][ T6070] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.21145: corrupted in-inode xattr: e_value size too large [ 853.649306][T21103] veth0_macvtap: left promiscuous mode [ 853.677941][T21103] veth1_vlan: left promiscuous mode [ 853.683228][T21103] veth0_vlan: left promiscuous mode [ 853.707355][ T6070] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.21145: couldn't read orphan inode 15 (err -117) [ 853.720648][ T6070] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 853.797300][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.925881][ T6085] loop9: detected capacity change from 0 to 512 [ 853.948718][ T6085] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 853.962257][ T6085] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.21151: iget: bad i_size value: 12154757448730 [ 854.003185][ T6085] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.21151: couldn't read orphan inode 13 (err -117) [ 854.017492][T21103] team0 (unregistering): Port device team_slave_1 removed [ 854.026353][ T6085] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 854.038995][T21103] team0 (unregistering): Port device team_slave_0 removed [ 854.047672][T22031] smc: removing ib device !yz! [ 854.072970][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.143681][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.150790][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.164561][ T5955] bridge_slave_0: entered allmulticast mode [ 854.175576][ T5955] bridge_slave_0: entered promiscuous mode [ 854.192756][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.199927][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.223793][ T5955] bridge_slave_1: entered allmulticast mode [ 854.234397][ T5955] bridge_slave_1: entered promiscuous mode [ 854.337309][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.409675][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.573880][ T5955] team0: Port device team_slave_0 added [ 854.650087][ T6114] syzkaller1: entered promiscuous mode [ 854.655673][ T6114] syzkaller1: entered allmulticast mode [ 854.680863][ T5955] team0: Port device team_slave_1 added [ 854.711368][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.718383][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.745285][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.761006][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.768069][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.773601][ T6125] loop3: detected capacity change from 0 to 1024 [ 854.794821][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.824352][ T6125] EXT4-fs: Ignoring removed mblk_io_submit option [ 854.830813][ T6125] EXT4-fs: Ignoring removed bh option [ 854.840994][ T6125] EXT4-fs: Ignoring removed nobh option [ 854.865946][ T6125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 854.893989][ T6135] loop7: detected capacity change from 0 to 1024 [ 854.902938][ T6135] EXT4-fs: inline encryption not supported [ 854.905335][ T5955] hsr_slave_0: entered promiscuous mode [ 854.920905][ T5955] hsr_slave_1: entered promiscuous mode [ 854.926878][ T6125] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 854.928146][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 854.939186][ T6125] EXT4-fs (loop3): This should not happen!! Data will be lost [ 854.939186][ T6125] [ 854.944913][ T5955] Cannot create hsr debugfs directory [ 854.960559][ T6125] EXT4-fs (loop3): Total free blocks count 0 [ 854.966583][ T6125] EXT4-fs (loop3): Free/Dirty block details [ 854.972500][ T6125] EXT4-fs (loop3): free_blocks=0 [ 854.978189][ T6125] EXT4-fs (loop3): dirty_blocks=0 [ 854.983411][ T6125] EXT4-fs (loop3): Block reservation details [ 854.989475][ T6125] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 854.998854][ T6135] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.056928][T21103] IPVS: stop unused estimator thread 0... [ 855.057255][ T6135] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 855.113426][ T6154] __nla_validate_parse: 15 callbacks suppressed [ 855.113442][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21166'. [ 855.136537][ T6135] EXT4-fs (loop7): Remounting filesystem read-only [ 855.197107][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.272545][ T6183] loop7: detected capacity change from 0 to 1024 [ 855.297345][ T6183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 855.315617][ T6191] netlink: 108 bytes leftover after parsing attributes in process `syz.9.21174'. [ 855.341482][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.349950][ T5955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 855.360231][ T5955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 855.381369][ T5955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 855.394455][ T5955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 855.420155][ T6202] loop9: detected capacity change from 0 to 512 [ 855.456629][ T6202] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -13 [ 855.483499][ T6202] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.21177: iget: bad i_size value: 12154757448730 [ 855.497178][ T6202] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.21177: couldn't read orphan inode 13 (err -117) [ 855.498017][ T6203] UHID_CREATE from different security context by process 1186 (syz.7.21176), this is not allowed. [ 855.519270][ T6202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.526551][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.554298][ T1667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.559860][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.573098][T21103] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.580290][T21103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.605832][T21103] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.612907][T21103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.626131][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.651175][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 855.651188][ T29] audit: type=1400 audit(3538799037.138:51183): avc: granted { setsecparam } for pid=6225 comm="syz.7.21181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 855.752974][ T29] audit: type=1400 audit(3538799037.238:51184): avc: denied { connect } for pid=6240 comm="syz.9.21185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 855.799849][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.863576][ C1] net_ratelimit: 5 callbacks suppressed [ 855.863595][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 855.912442][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21188'. [ 856.015637][ T9627] lo speed is unknown, defaulting to 1000 [ 856.032467][ T6285] bond4: option lacp_rate: invalid value (20) [ 856.042382][ T6285] bond4 (unregistering): Released all slaves [ 856.052177][ T6267] ip6tnl0: Caught tx_queue_len zero misconfig [ 856.069700][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.7.21193'. [ 856.107722][ T5955] veth0_vlan: entered promiscuous mode [ 856.129482][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.9.21197'. [ 856.151026][ T5955] veth1_vlan: entered promiscuous mode [ 856.171669][ T6308] loop3: detected capacity change from 0 to 512 [ 856.209069][ T6308] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 856.217016][ T6281] xfrm0 speed is unknown, defaulting to 1000 [ 856.231727][ T5955] veth0_macvtap: entered promiscuous mode [ 856.254364][ T5955] veth1_macvtap: entered promiscuous mode [ 856.260897][ T6308] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.21198: iget: bad i_size value: 12154757448730 [ 856.292842][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.310616][ T6281] lo speed is unknown, defaulting to 1000 [ 856.313193][ T6308] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.21198: couldn't read orphan inode 13 (err -117) [ 856.317809][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.338710][T21104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.349955][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21203'. [ 856.376268][T21104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.378465][ T6308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.412709][T21104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.475204][T21104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.490109][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.511969][ T6345] netlink: 'syz.1.21118': attribute type 32 has an invalid length. [ 856.520040][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21118'. [ 856.585388][ T6345] bond1: option coupled_control: invalid value (32) [ 856.598945][ T6345] bond1 (unregistering): Released all slaves [ 856.615421][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21209'. [ 856.739933][ T6374] loop7: detected capacity change from 0 to 512 [ 856.742516][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21215'. [ 856.799583][ T6374] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.862355][ T6381] loop3: detected capacity change from 0 to 512 [ 856.886122][ T6381] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 856.895317][ T6381] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.21216: iget: bad i_size value: 12154757448730 [ 856.903605][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 856.926385][ T6381] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.21216: couldn't read orphan inode 13 (err -117) [ 856.964321][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.964409][ T6381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.047048][ T6401] loop7: detected capacity change from 0 to 512 [ 857.055998][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.076439][ T6401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.089834][ T6401] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.195595][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21224'. [ 857.216698][ T6406] xfrm0 speed is unknown, defaulting to 1000 [ 857.387904][ T6429] vhci_hcd vhci_hcd.4: invalid port number 254 [ 857.396173][ T6406] lo speed is unknown, defaulting to 1000 [ 857.415256][ T29] audit: type=1326 audit(3538799038.908:51185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.21229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa21a8acb9 code=0x7ffc0000 [ 857.438965][ T29] audit: type=1326 audit(3538799038.908:51186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.21229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa21a8acb9 code=0x7ffc0000 [ 857.515848][ T6429] EXT4-fs (loop3): too many log groups per flexible block group [ 857.541234][ T6429] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 857.564076][ T29] audit: type=1326 audit(3538799038.908:51187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.21229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffa21a8acb9 code=0x7ffc0000 [ 857.588510][ T29] audit: type=1326 audit(3538799038.908:51188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.21229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa21a8acb9 code=0x7ffc0000 [ 857.612111][ T29] audit: type=1326 audit(3538799038.908:51189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.21229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa21a8acb9 code=0x7ffc0000 [ 857.614277][ T6429] EXT4-fs (loop3): mount failed [ 857.635717][ T29] audit: type=1326 audit(3538799038.908:51190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.21229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffa21a8acb9 code=0x7ffc0000 [ 857.635760][ T29] audit: type=1326 audit(3538799038.958:51191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.21229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa21a8acb9 code=0x7ffc0000 [ 857.635789][ T29] audit: type=1326 audit(3538799038.958:51192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.3.21229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa21a8acb9 code=0x7ffc0000 [ 857.718173][T31798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.767141][ T6453] netlink: 'syz.9.21236': attribute type 4 has an invalid length. [ 857.779969][T17584] Bluetooth: hci0: Frame reassembly failed (-84) [ 857.864967][T21104] Bluetooth: hci1: Frame reassembly failed (-84) [ 857.943594][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 858.037843][ T6470] netlink: 'syz.7.21241': attribute type 32 has an invalid length. [ 858.053944][ T6470] bond5: option coupled_control: invalid value (32) [ 858.061506][ T6470] bond5 (unregistering): Released all slaves [ 858.228771][ T6490] netlink: 'syz.3.21249': attribute type 4 has an invalid length. [ 858.700060][ T6542] set_capacity_and_notify: 1 callbacks suppressed [ 858.700076][ T6542] loop3: detected capacity change from 0 to 512 [ 858.720277][ T6542] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.21266: inode has both inline data and extents flags [ 858.744387][ T6542] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.21266: couldn't read orphan inode 15 (err -117) [ 858.766161][ T6542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.787921][ T6542] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.835878][ T6552] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 858.862431][ T6555] 9p: Bad value for 'rfdno' [ 858.983630][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 859.080670][ T6574] xt_TCPMSS: Only works on TCP SYN packets [ 859.163196][T19797] Bluetooth: hci2: Frame reassembly failed (-84) [ 859.172789][ T6582] FAULT_INJECTION: forcing a failure. [ 859.172789][ T6582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.185979][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.7.21283 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 859.186016][ T6582] Tainted: [W]=WARN [ 859.186025][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 859.186037][ T6582] Call Trace: [ 859.186045][ T6582] [ 859.186080][ T6582] __dump_stack+0x1d/0x30 [ 859.186104][ T6582] dump_stack_lvl+0x95/0xd0 [ 859.186209][ T6582] dump_stack+0x15/0x1b [ 859.186231][ T6582] should_fail_ex+0x263/0x280 [ 859.186281][ T6582] should_fail+0xb/0x20 [ 859.186306][ T6582] should_fail_usercopy+0x1a/0x20 [ 859.186336][ T6582] _copy_to_user+0x20/0xa0 [ 859.186385][ T6582] simple_read_from_buffer+0xb5/0x130 [ 859.186420][ T6582] proc_fail_nth_read+0x10e/0x150 [ 859.186452][ T6582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 859.186482][ T6582] vfs_read+0x1ab/0x7f0 [ 859.186504][ T6582] ? __rcu_read_unlock+0x4e/0x70 [ 859.186534][ T6582] ? __fget_files+0x184/0x1c0 [ 859.186631][ T6582] ? mutex_lock+0x57/0x90 [ 859.186733][ T6582] ksys_read+0xdc/0x1a0 [ 859.186755][ T6582] __x64_sys_read+0x40/0x50 [ 859.186774][ T6582] x64_sys_call+0x2889/0x3000 [ 859.186798][ T6582] do_syscall_64+0xc0/0x2a0 [ 859.186885][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.186982][ T6582] RIP: 0033:0x7f2a81a5b58e [ 859.186998][ T6582] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 859.187039][ T6582] RSP: 002b:00007f2a804f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 859.187090][ T6582] RAX: ffffffffffffffda RBX: 00007f2a804f76c0 RCX: 00007f2a81a5b58e [ 859.187107][ T6582] RDX: 000000000000000f RSI: 00007f2a804f70a0 RDI: 0000000000000006 [ 859.187122][ T6582] RBP: 00007f2a804f7090 R08: 0000000000000000 R09: 0000000000000000 [ 859.187138][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.187152][ T6582] R13: 00007f2a81d16038 R14: 00007f2a81d15fa0 R15: 00007ffcf10564f8 [ 859.187171][ T6582] [ 859.710428][ T6600] bond4: option lacp_active: invalid value (237) [ 859.718246][ T6600] bond4 (unregistering): Released all slaves [ 859.778338][ T6603] loop3: detected capacity change from 0 to 256 [ 859.784980][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 859.786032][T19516] Bluetooth: hci0: command 0x1003 tx timeout [ 859.841140][ T6610] loop3: detected capacity change from 0 to 1024 [ 859.854708][ T6610] EXT4-fs: dax option not supported [ 859.948521][ T6617] xfrm0 speed is unknown, defaulting to 1000 [ 859.954553][T24636] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 859.954625][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 860.002501][ T6621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38586 sclass=netlink_route_socket pid=6621 comm=syz.1.21299 [ 860.003245][ T6617] lo speed is unknown, defaulting to 1000 [ 860.023576][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 860.199877][ T6657] __nla_validate_parse: 14 callbacks suppressed [ 860.199895][ T6657] netlink: 140 bytes leftover after parsing attributes in process `syz.1.21315'. [ 860.286873][ T6670] netlink: 3 bytes leftover after parsing attributes in process `syz.4.21319'. [ 860.310813][ T6672] netlink: 3 bytes leftover after parsing attributes in process `syz.4.21319'. [ 860.320932][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21320'. [ 860.390149][ T6688] loop3: detected capacity change from 0 to 1024 [ 860.397622][ T6688] EXT4-fs: Ignoring removed oldalloc option [ 860.421503][ T6690] bond1: option lacp_active: invalid value (243) [ 860.431522][ T6688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 860.445769][ T6690] bond1 (unregistering): Released all slaves [ 860.445794][ T6688] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.472134][ T6688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21326'. [ 860.487703][ T6688] syzkaller0: entered promiscuous mode [ 860.493268][ T6688] syzkaller0: entered allmulticast mode [ 860.568854][ T6701] netlink: 140 bytes leftover after parsing attributes in process `syz.4.21330'. [ 860.595767][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 860.635446][ T6705] loop3: detected capacity change from 0 to 512 [ 860.651842][ T6705] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 860.671456][ T6705] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.21332: iget: bad i_size value: 12154757448730 [ 860.685326][ T6705] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.21332: couldn't read orphan inode 13 (err -117) [ 860.700231][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21335'. [ 860.710272][ T6705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.753649][T31236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.794001][ T6716] loop3: detected capacity change from 0 to 1024 [ 860.804044][ T6716] ext4: Unknown parameter 'noacl' [ 860.843038][ T6719] bond1: option lacp_rate: invalid value (20) [ 860.852322][ T6719] bond1 (unregistering): Released all slaves [ 860.886487][ T6721] xfrm0 speed is unknown, defaulting to 1000 [ 860.934720][ T6723] netlink: 108 bytes leftover after parsing attributes in process `syz.4.21339'. [ 860.949458][ T6721] lo speed is unknown, defaulting to 1000 [ 861.048336][ T6731] netlink: 76 bytes leftover after parsing attributes in process `syz.3.21342'. [ 861.063733][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 861.145269][ T6737] loop3: detected capacity change from 0 to 128 [ 861.174323][ T6737] vfat filesystem being mounted at /491/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 861.196441][ T6737] syz.3.21345: attempt to access beyond end of device [ 861.196441][ T6737] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 861.219756][ T6737] syz.3.21345: attempt to access beyond end of device [ 861.219756][ T6737] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 861.225125][T31838] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 861.234898][ T6737] syz.3.21345: attempt to access beyond end of device [ 861.234898][ T6737] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 861.239712][T24636] Bluetooth: hci2: command 0x1003 tx timeout [ 861.264315][ T6737] syz.3.21345: attempt to access beyond end of device [ 861.264315][ T6737] loop3: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 861.278132][ T6737] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 861.333602][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 861.333621][ T29] audit: type=1400 audit(3538799042.808:51247): avc: denied { setattr } for pid=6742 comm="syz.9.21348" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 861.333745][ T6752] ================================================================== [ 861.370183][ T6752] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 861.376789][ T6752] [ 861.379119][ T6752] write to 0xffffffff86a8bb98 of 8 bytes by task 29 on cpu 0: [ 861.386626][ T6752] data_alloc+0x31c/0x390 [ 861.390979][ T6752] prb_reserve+0x8d7/0xae0 [ 861.395415][ T6752] vprintk_store+0x54a/0x910 [ 861.400013][ T6752] vprintk_emit+0x1a4/0x600 [ 861.404513][ T6752] vprintk_default+0x26/0x30 [ 861.409101][ T6752] vprintk+0x1d/0x30 [ 861.412985][ T6752] _printk+0x79/0xa0 [ 861.416868][ T6752] kauditd_hold_skb+0x1b1/0x1c0 [ 861.421894][ T6752] kauditd_send_queue+0x273/0x2c0 [ 861.426933][ T6752] kauditd_thread+0x442/0x680 [ 861.431646][ T6752] kthread+0x488/0x510 [ 861.435711][ T6752] ret_from_fork+0x148/0x280 [ 861.440306][ T6752] ret_from_fork_asm+0x1a/0x30 [ 861.445067][ T6752] [ 861.447377][ T6752] read to 0xffffffff86a8bb98 of 8 bytes by task 6752 on cpu 1: [ 861.455163][ T6752] prb_reserve+0x207/0xae0 [ 861.459580][ T6752] vprintk_store+0x54a/0x910 [ 861.464163][ T6752] vprintk_emit+0x1a4/0x600 [ 861.468669][ T6752] dev_vprintk_emit+0x242/0x2a0 [ 861.473520][ T6752] dev_printk_emit+0x84/0xb0 [ 861.478116][ T6752] __dev_printk+0xf3/0x110 [ 861.482531][ T6752] _dev_err+0xa6/0xd0 [ 861.486504][ T6752] vhci_hub_control+0x656/0xf10 [ 861.491359][ T6752] usb_hcd_submit_urb+0xc0f/0x1200 [ 861.496470][ T6752] usb_submit_urb+0xaaa/0xbb0 [ 861.501149][ T6752] usbfs_start_wait_urb+0x9f/0x1d0 [ 861.506267][ T6752] do_proc_control+0x628/0x8b0 [ 861.511030][ T6752] proc_control+0x71/0xa0 [ 861.515354][ T6752] usbdev_ioctl+0x93a/0x1750 [ 861.519941][ T6752] __se_sys_ioctl+0xce/0x140 [ 861.524539][ T6752] __x64_sys_ioctl+0x43/0x50 [ 861.529128][ T6752] x64_sys_call+0x14b0/0x3000 [ 861.533805][ T6752] do_syscall_64+0xc0/0x2a0 [ 861.538330][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.544228][ T6752] [ 861.546540][ T6752] value changed: 0x0000000000178858 -> 0x000000000020df18 [ 861.553721][ T6752] [ 861.556031][ T6752] Reported by Kernel Concurrency Sanitizer on: [ 861.562167][ T6752] CPU: 1 UID: 0 PID: 6752 Comm: syz.1.21352 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 861.573550][ T6752] Tainted: [W]=WARN [ 861.577344][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 861.587389][ T6752] ================================================================== [ 861.333621][ T6752] vhci_hcd vhci_hcd.4: invalid port number 254 [ 861.616554][ T29] audit: type=1326 audit(3538799043.108:51248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.21352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d2a9acb9 code=0x7ffc0000 [ 861.640391][ T29] audit: type=1326 audit(3538799043.108:51249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.21352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d2a9acb9 code=0x7ffc0000 [ 861.676970][ T29] audit: type=1326 audit(3538799043.158:51250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.21352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd1d2a9acb9 code=0x7ffc0000 [ 861.700730][ T29] audit: type=1326 audit(3538799043.158:51251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.21352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d2a9acb9 code=0x7ffc0000 [ 861.724564][ T29] audit: type=1326 audit(3538799043.158:51252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.1.21352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d2a9acb9 code=0x7ffc0000 [ 862.103617][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 863.143686][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 864.183638][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 865.223641][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 866.263636][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 867.303647][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 868.343625][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 869.383923][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 870.423595][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available