last executing test programs: 10m43.924442109s ago: executing program 32 (id=48): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2114, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0xffff}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0x449, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x4, &(0x7f00000001c0)="7b88da1d"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x38}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x1c, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x6, "8e7458e2"}, @generic={0x3, 0x2}]}}}}}}}}, 0x0) 10m9.880777404s ago: executing program 33 (id=431): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3, 0x200}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r4 = open(0x0, 0x8000, 0x112) getdents(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbecbeba5e41010800450000784400000000119078ac1414bbe000000100004e220064907802000000020000000300000087404a1521cd01f9df5ed1edadd5f225602902d238b3605ef3d3776442bc6a4af34f90b9c395844234c7cdd78918f38e876f904f4b9b8b0be78ecf3ecf498db86fce414cc0adba1f2cb65d"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000020) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa0881, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000058c0)) ustat(0x11, &(0x7f00000000c0)) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'hsr0\x00', {0xe56}, 0x6}) 9m33.868809424s ago: executing program 34 (id=874): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x9, 0x80, 0x30000000}}, [@tmpl={0x144, 0x5, [{{@in6=@private0, 0x0, 0x6c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x4, 0x3, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x0, 0x8}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x3504, 0x0, 0x0, 0x4, 0x0, 0xabb}, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x3c}, 0xa, @in6=@mcast1, 0x0, 0x1, 0x2, 0x0, 0x10000}]}]}, 0x1fc}}, 0x0) 9m26.162669134s ago: executing program 35 (id=781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r2, 0x0) shutdown(r2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf250f0000001c0007800c0004002e000000000000000c000300400000000040"], 0x30}, 0x1, 0x0, 0x0, 0x20008014}, 0x44000) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000200)=""/78, 0x4e}], 0x2, &(0x7f00000002c0)=""/71, 0x47}, 0x0) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f0000000100)) splice(r0, &(0x7f0000000000)=0x1, r2, &(0x7f0000000040)=0xfffffffffffefffd, 0x7, 0x6) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008064) 6m54.844607993s ago: executing program 36 (id=4546): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x42a5, &(0x7f0000000040)={0x0, 0x369, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x20, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 3m40.992128319s ago: executing program 37 (id=9137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 3m37.822578478s ago: executing program 9 (id=9159): r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x22020400) fcntl$lock(r0, 0x5, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, 0x0, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x8, 0xfff0}, {0xc, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair(0x26, 0x6, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000180)={0xffffffff, 0x2, 0x4, 0x9, 0x80000001}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m37.667539143s ago: executing program 9 (id=9162): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500"/66, 0x42}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d5", 0xb0}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca612", 0x40}], 0x3}}, {{0x0, 0x0, &(0x7f00000000c0)}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m36.531762653s ago: executing program 9 (id=9174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x28, 0x10, 0x200, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45902, 0x44}, [@IFLA_EVENT={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x404c004) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 3m36.062831164s ago: executing program 9 (id=9175): write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000900)=""/255, 0xff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum64={0x2, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000001f40)=""/4089, 0x28, 0xff9, 0x9, 0x614fc9df}, 0x28) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x2) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000001180)=ANY=[], 0x1, 0x242, &(0x7f0000001900)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) lseek(r4, 0x0, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x5, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x7dc9, &(0x7f0000000340)={0x0, 0x849b, 0x10100, 0xfffffff8, 0x234}, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44", 0xe}], 0x1}, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80b04) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r6, r7, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m35.551217889s ago: executing program 9 (id=9184): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x1}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x10000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3501, 0x5fec12f597defa26, 0x0, 0x0, 0x0, 0x9}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m35.272129304s ago: executing program 9 (id=9187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dbdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40448c5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000002980)={0x4002000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000002940)=[r2], 0x1}, 0x58) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) fcntl$setown(r1, 0x8, r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_get$uid(0x3, 0xffffffffffffffff) close_range(r5, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="20000280", @ANYRES32, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r4], 0x58}}, 0x4000801) 3m35.254948945s ago: executing program 38 (id=9187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dbdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40448c5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000002980)={0x4002000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000002940)=[r2], 0x1}, 0x58) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) fcntl$setown(r1, 0x8, r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_get$uid(0x3, 0xffffffffffffffff) close_range(r5, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="20000280", @ANYRES32, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r4], 0x58}}, 0x4000801) 3m19.068101254s ago: executing program 5 (id=9352): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x800d, @remote, 0x6459}}, 0x0, 0x0, 0x45, 0x0, "bb02a3c364ca41d6357e544508474004000b42a1ffe9000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0x5a) r0 = socket$kcm(0x23, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x80000) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 3m18.2060324s ago: executing program 5 (id=9365): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)={0x6c, r4, 0x1, 0x21, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x11a, 0x20016}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x4c, 0xe, [@preq={0x82, 0x46, {{0x0, 0x1}, 0x38, 0x8, 0x6, @device_b, 0xffffffff, @void, 0x2b2f, 0x100, 0x4, [{{0x1}, @device_b, 0x4}, {{0x1}, @device_a, 0xff}, {{0x0, 0x0, 0x1}, @device_a, 0xea}, {{0x1, 0x0, 0x1}, @device_a, 0xfffffff6}]}}]}]}, 0x6c}}, 0x4014080) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x70, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f81ff2639227"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="af8feba79a3c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="61cab9660d03"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ba09b37d0f41"}]}, 0x70}}, 0x4000000) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000009c0)="5c00000012006bab9e3fe3d86e17aa310f6b876c1d0000007ea6086416", 0x1d}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xf}, 0x6303, 0xe8, 0x0, 0x4, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, r0, 0x0) (async) socketpair(0x26, 0x5, 0x400, 0x0) (async) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x3, 0x0, 0x0, 0xc, 0x1}]}}, 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) (async) recvmsg(r6, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) 3m18.165184924s ago: executing program 5 (id=9367): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x1, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x1}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3501, 0x5fec12f597defa26, 0x0, 0x0, 0x0, 0x9}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 3) 3m17.913557187s ago: executing program 5 (id=9369): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x8}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=r3, @ANYBLOB="31100400bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="3c001280110001006272696467655f736c617665000000002400058008002200", @ANYRES32=0x0, @ANYBLOB="080003004000"], 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) socketpair(0x1f, 0x2, 0x8, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000180)=r7) write$cgroup_devices(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x3, 0x1, 0x10000, 0x400e09, 0x7b, "203c002007000000000780ff0900fff200", 0x8, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 2m53.304547929s ago: executing program 2 (id=9607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0xe41621e, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m53.115268326s ago: executing program 2 (id=9610): r0 = shmget$private(0x0, 0xb000, 0x100, &(0x7f0000001000/0xb000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x6000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}, {@resuid}]}, 0x2, 0x461, &(0x7f0000000300)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xfffeffff}}, './file0\x00'}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=@ipv6_getaddrlabel={0x30, 0x4a, 0xb, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0xf0c4, 0x700, 0x8, 0xf0000000, {{0x14, 0x4, 0x2, 0x3, 0x50, 0x3, 0x0, 0x3, 0x29, 0x0, @local, @private=0xa010101, {[@noop, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "ff5b"}]}, @noop, @ssrr={0x89, 0xb, 0xff, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x4b, 0x3, 0x3, [{@multicast2, 0x5}, {@remote, 0xcb9c}]}, @end, @rr={0x7, 0xf, 0x60, [@private=0xa010100, @multicast1, @multicast2]}, @noop]}}}}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001280)={r10, 0x200, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xe187, '\x00', r9, r10, 0x2, 0x2}, 0x50) setresuid(0xee00, 0xee00, 0x0) r12 = getpid() r13 = syz_pidfd_open(r12, 0x0) setns(r13, 0x20000000) setns(r8, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m52.993743656s ago: executing program 2 (id=9611): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x100514, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x5, 0xfffffffc, 0x5, 0x2000008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0xfffffffffffffffd, 0x0, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r6, 0x107, 0x2, 0x0, 0x0) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async, rerun: 64) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000550069ed02005c01021d61d8a85b30ddcc83b69ce60000fdffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00010ffe0000000000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000840) (async) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0xd4, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0xd, 0x6, 0x9, 0x1, 0x800, 0x7, 0x6, 0x50, [{0x80000000, 0x4, 0x4000, 0x5f1}, {0x7, 0x9, 0xf169, 0x8}, {0x10, 0x2, 0x3, 0x8001}, {0x7, 0x80, 0xb2a00000, 0x200}, {0x3f68, 0x80, 0x10000, 0x5}, {0x0, 0x8, 0x1d24, 0x683cfda8}, {0x48dd, 0x9, 0x1, 0x27}, {0x6, 0x81, 0x2, 0x1}, {0x800, 0x0, 0x7f, 0xd1a6}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20051090}, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt(r1, 0x84, 0x81, &(0x7f00000009c0)="01000000100000008cf0c051754167f36f80f5bfc61e13b7e8435b2849b3e9fd5299e1b0b9097cfa2769033748e503812e1b217acc2fc76d371b593e78c76a1a908e12b457d427246f55a98676241733401f3e4121a4e45518747c8d2c43fc27e9ac3eb1c2e73698e48d01f9dcaec7e4857e0031e8be1da2f3a4a490cf49cfe28201c0267999cbca1780fdce104597620ce20f23b93b990e6e14b2bc661c9b94", 0xa0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r9 = fsmount(r3, 0x0, 0x0) (rerun: 32) fchdir(r9) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e21, @loopback}, {0x306, @random="7d92f2f0d4b1"}, 0xa, {0x2, 0x4e20, @loopback}, 'veth0_to_hsr\x00'}) (async) ioperm(0x4, 0x200000d1, 0x1f94) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000023c0)=@newtfilter={0x1d94, 0x2c, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0x5, 0x7}, {0xe, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1d50, 0x2, [@TCA_BPF_ACT={0x1d4c, 0x1, [@m_pedit={0x1d48, 0x2, 0x0, 0x0, {{0xa}, {0x1cbc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x3, 0x0, 0xffffffffffffffff, 0x1, 0x7}, 0x0, 0x7f, [{0x1000, 0x8, 0x278, 0xfffffff7, 0x40f2, 0x40}]}, [{0x2, 0x0, 0x2, 0x9, 0x800, 0x1}, {0x3, 0x81, 0x3505, 0x5, 0x6, 0x6}, {0x80, 0xfffffff9, 0x1, 0xa7c, 0x8, 0x5}, {0x48f6, 0x5, 0x4, 0xfff, 0x8, 0x458}, {0x2, 0x9, 0x4, 0x3, 0x9, 0x8000}, {0x8, 0x0, 0x7, 0x6, 0x6, 0x8}, {0x1, 0x5, 0x8, 0x122, 0xb, 0x6}, {0x80000000, 0x5, 0x10, 0x80, 0x0, 0x5f}, {0xef, 0xffffffff, 0x400, 0x2, 0xe, 0x5}, {0x7, 0x4d39, 0x800, 0xfffffff5, 0x9, 0x81}, {0x10001, 0x17, 0xa6, 0x9, 0xffff, 0x4}, {0x1ff, 0x47, 0x1, 0x6, 0x5, 0x7632}, {0x4, 0x80000001, 0x200, 0x9, 0x0, 0x3}, {0x7, 0x6c, 0x4, 0x4, 0xd, 0xb77}, {0x2, 0x7, 0x5, 0x4, 0x8, 0x4}, {0x2, 0x2, 0x8c, 0x6e9, 0x1, 0x6}, {0x7, 0x80000001, 0x4, 0x1fe, 0x8001, 0x5}, {0xe, 0x4, 0x10001, 0x7c, 0xc00000, 0x3d}, {0x9, 0x1, 0xa6eb, 0x3ff, 0x8000, 0x3}, {0x4, 0xffff0001, 0x9, 0x4, 0x2, 0x4}, {0x3, 0x80000001, 0x399, 0xa15, 0x8, 0x3}, {0x4, 0x400, 0x7, 0xef9e, 0x3, 0x2}, {0x3, 0x6, 0x10, 0x0, 0x6, 0x400}, {0x9339, 0x26, 0x5, 0x7fffffff, 0xe, 0x3ff}, {0xae4, 0xe0, 0x8, 0x3, 0x7, 0xd9a0}, {0x91, 0xc90, 0x80000001, 0x863, 0x5, 0x1}, {0x3, 0x24, 0x5, 0x10001, 0x3, 0x84ab}, {0x5, 0x699, 0x3ff, 0x8, 0xfffff37e}, {0x8718, 0x800, 0x9, 0x1ff, 0x5, 0x8c}, {0x6, 0x2, 0x4, 0x3db5, 0x6, 0x6097}, {0x400, 0x9, 0x7fff, 0x5d, 0x6, 0x3}, {0x0, 0x8, 0x1, 0x80000000, 0x6, 0x1ff}, {0x5, 0x8, 0x7, 0x0, 0xf, 0x6}, {0x4, 0x3773b895, 0x1, 0x1, 0x5, 0x5}, {0x7, 0xfffffffd, 0x61, 0x7, 0xfffffff1, 0x4}, {0xf0, 0x0, 0x7, 0x9, 0x9, 0x8dd5}, {0x8, 0x40, 0x401, 0x2, 0x782, 0x2}, {0x69, 0xe, 0x0, 0x3, 0x4, 0x8}, {0xc2b, 0x7, 0x1, 0x7, 0xfc, 0x9}, {0xa870, 0xfffffff9, 0x3bd3, 0x8, 0x3, 0x7}, {0x5, 0x8ba, 0x1, 0x1e6, 0x80000000, 0xfffffff7}, {0x2, 0xe, 0x0, 0x6}, {0x5, 0x0, 0x4, 0x4, 0xfffffff9, 0xd34}, {0x6, 0x80, 0x4, 0x1, 0x7, 0x1}, {0x4, 0x19f, 0x7, 0x6, 0x8, 0x80}, {0x9, 0x6, 0x100, 0x2400000, 0x1, 0x7c}, {0x10e, 0xb59, 0x8, 0x7, 0x0, 0xfffffff7}, {0x6, 0xa, 0x4, 0x9, 0x4, 0x8001}, {0x1, 0x3, 0x0, 0x3, 0x7fff, 0x9}, {0xbb, 0x80000001, 0x3800, 0x3, 0x0, 0x1}, {0x2, 0x7fff, 0x2cd, 0xf, 0x4, 0x8}, {0x2, 0x9f, 0x8001, 0x4, 0x9, 0x10000}, {0xc6f1, 0x8, 0x3, 0x8, 0x7, 0x5}, {0x70e3, 0x88e, 0x3, 0x4, 0x1ff, 0x9}, {0xd, 0xf, 0x8, 0x400, 0x10001, 0x4}, {0x8, 0x8, 0x8f, 0x1, 0x5, 0x8553}, {0x5, 0x5, 0x9, 0x0, 0x100, 0xd92f}, {0x8, 0x7, 0x2, 0x9, 0x7, 0x8}, {0x2, 0x8, 0x10000, 0x2, 0x7, 0x96}, {0xffffffff, 0x6, 0x9, 0x7, 0xfffffff9, 0xc8}, {0xfffffff7, 0x4, 0x0, 0x4, 0x0, 0x6cdb3ef6}, {0x7, 0x914d, 0x13dd0, 0xb, 0x6, 0x1000}, {0x7, 0x4, 0x80000000, 0x9, 0xabc73f8, 0x4}, {0xfe, 0x4, 0x401, 0x8, 0x951a3f7, 0x5}, {0x9, 0x101, 0x4, 0x1, 0x8000, 0x1}, {0x1, 0x2, 0xfffffff9, 0x8, 0x9d, 0x7}, {0x7, 0x7, 0x8, 0xfff, 0x9, 0x800}, {0x0, 0x200, 0x1, 0xffffffff, 0x1, 0x2}, {0xc, 0x6, 0x2d55, 0x3, 0xffffff81, 0x1}, {0x577, 0x2, 0xb, 0x4, 0x8}, {0x200, 0x5, 0x800, 0x3, 0x8, 0xa4}, {0x0, 0x3000000, 0x7, 0x7fff, 0x6, 0x8}, {0x88, 0x100, 0x25f, 0xeb3b, 0x3, 0x3}, {0x2, 0xf801, 0x2, 0x8, 0x0, 0x4}, {0x280, 0x9, 0x8, 0x9e, 0x0, 0x1360}, {0xe, 0x0, 0x800, 0x1c, 0x1, 0x2}, {0x2, 0xffff8c22, 0xfffffffd, 0x6, 0x7, 0x400000}, {0x2, 0xacd2, 0x5, 0x9, 0x5ca80, 0x3}, {0x9, 0xfffffffc, 0x10000, 0x10000, 0x80000001, 0x3}, {0x2, 0x3, 0x400, 0x4, 0x3, 0x5}, {0x401, 0x2, 0x3, 0x4, 0x3e05, 0xfffffffd}, {0x4, 0xffffffff, 0x61e, 0x973a, 0x4, 0xe}, {0x7fffffff, 0x7, 0x1, 0x3, 0x7, 0x4}, {0xc0000000, 0x0, 0xffff, 0x567, 0x2c9}, {0x5a, 0x1, 0xa621, 0x4a, 0x2, 0x1}, {0x7, 0x9, 0x60000, 0x400, 0x3, 0x6}, {0xaf4a, 0x7f2, 0x3ff, 0xa, 0x8, 0xffff8000}, {0x7, 0x800, 0xf, 0x1, 0x1, 0x4006}, {0x10001, 0x80, 0x4, 0x8, 0x7, 0x3}, {0x5, 0x7fffffff, 0x10, 0x8fc4, 0x7ff, 0x7}, {0x5, 0xfffffff7, 0x5, 0x2, 0x2, 0x5}, {0xf1c5, 0x9, 0x4, 0x1, 0x8d, 0x10001}, {0x7, 0x5, 0x6, 0x8, 0xa84, 0xb}, {0x3ff, 0x1000, 0x6, 0x2, 0xfffffffd, 0x5}, {0xfffffffa, 0xfffffff9, 0x1, 0x5, 0x4, 0xb58}, {0x2e354236, 0x8, 0x3, 0x10001, 0x9, 0x9}, {0xffffdc65, 0x4, 0x0, 0x0, 0x100, 0x8}, {0xff, 0x7, 0x81, 0x9bb, 0x6, 0x3}, {0x1, 0x6, 0x91, 0x4, 0x427c, 0x6}, {0xe, 0x6, 0x0, 0x602182f7, 0x6, 0x101}, {0x40, 0x5, 0x0, 0x3bc, 0x8, 0x9}, {0x4, 0x3, 0xe, 0x5, 0x4, 0x101}, {0x6, 0x6, 0x9, 0x8, 0x4a22, 0x7f}, {0xfffffff7, 0x3, 0x46, 0x96, 0xb, 0x5}, {0x4, 0x4, 0x7fff, 0xd, 0x9, 0x7}, {0x3e, 0x100, 0xffffffff, 0x36, 0x4, 0x6}, {0x884, 0x200, 0x1, 0x8, 0x800, 0x7}, {0x5, 0x3ff, 0x8, 0x9, 0xf4, 0xb}, {0x280, 0xffffffff, 0xe1, 0x2, 0x4, 0x1}, {0x80000001, 0x8bd8, 0x2c7af13c, 0xfffffff7, 0x91, 0x6}, {0x10, 0x7fb00000, 0x8, 0x7, 0x9, 0x4d19}, {0x4, 0x7dd, 0x6, 0x5df5, 0x6, 0x7}, {0x7, 0x938, 0x4, 0x100, 0xa, 0x401}, {0x7800000, 0x3, 0x1000, 0x2, 0xd7e1, 0x1e}, {0x7, 0x0, 0x1, 0x9, 0x5, 0x8}, {0x80, 0x3, 0x1, 0x7fff, 0x5, 0x6b1}, {0x4, 0x800, 0xfffffff9, 0x4, 0x4, 0x3c53}, {0xffff, 0x7, 0x3, 0x6, 0x100, 0x3}, {0x8, 0xfffffffa, 0x2, 0xfffffff8, 0x100, 0xfff}, {0xfffffffe, 0xf48, 0x8, 0x7c, 0x5}, {0xda, 0xffff, 0x7, 0x7, 0x81, 0x1000}, {0x6, 0x7, 0x8, 0x45, 0x2, 0x2723}, {0x80, 0xffffff81, 0x6, 0x7, 0xfff}, {0x1, 0x7052, 0x7467, 0x7fff, 0x7, 0x6}, {0x5, 0x3, 0x400, 0x9, 0xe, 0x2}, {0x6, 0x5fa03cfe, 0x4, 0x7, 0x8, 0x9bf}, {0x3, 0x1, 0xb656, 0x9, 0x1, 0x6}, {0x714, 0x1, 0x9, 0x0, 0x8}], [{0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x3d3a3200e7804275}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x5}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {}, {0x3}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x2, 0x1}, {0x2}, {}, {}, {0x4}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x5, 0xc0679642bb1e7e32}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {}, {0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0xc, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x4}, {0x2}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0xd48413ae4b558dbe}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x2, 0x40, 0x0, 0x1, 0xff}, 0x3, 0x10, [{0x0, 0x9, 0x1ff, 0x4, 0x0, 0x3}, {0x1, 0x1, 0x1, 0x8000, 0x6, 0x37b}, {0x0, 0x81, 0x800, 0x9, 0x3, 0x5}, {0x8, 0x7fffffff, 0x1, 0x401, 0x2, 0x8}]}, [{0x1000, 0x401, 0xcfd5, 0x100, 0x0, 0x1000}, {0x1, 0x0, 0x3, 0x6, 0x4, 0x800}, {0x5, 0x9, 0x10000, 0x10001, 0x6}, {0x2, 0xfffffff7, 0x8, 0x0, 0x10001, 0x2}, {0x9, 0x9, 0x5d3, 0xb9, 0x7fffffff, 0x1000}, {0x3, 0xb, 0x3, 0xd8, 0x9, 0x2}, {0x5, 0x9, 0x6, 0x97, 0x7fff, 0x9}, {0x9, 0xffffdfd6, 0x1, 0x9, 0x6, 0x2}, {0x0, 0x73e, 0x0, 0x7f, 0x1ff}, {0x5, 0x4b4, 0x1, 0x8b5, 0x8, 0x9}, {0x7, 0x5, 0x3, 0x4, 0x5e78970b, 0x7f}, {0x8001, 0x0, 0x1000, 0x6, 0x7fffffff, 0x80}, {0x6, 0x40, 0x4, 0x8d, 0x8, 0x96}, {0x4, 0x3, 0x1, 0x7, 0x9}, {0x7, 0x754a8e33, 0xc98d, 0x1, 0x1, 0xa}, {0xa8a, 0x3, 0x3, 0xb, 0xe}, {0x8001, 0x5, 0x0, 0x9, 0x1, 0x8001}, {0xf, 0x6cd1, 0x4, 0x5, 0x7fffffff, 0x3}, {0x1000, 0x7, 0xffffffff, 0xedb, 0x8000}, {0xffffffff, 0x4, 0x80, 0x5, 0x90000000, 0x6}, {0x80000000, 0x0, 0x0, 0xd, 0xfc5, 0x7}, {0x1, 0x1, 0x1, 0xd, 0xc1, 0x6}, {0x51b, 0x9, 0x3, 0x3, 0x0, 0x6c0f}, {0x4, 0x7e, 0xfff, 0x8a5f, 0x4, 0x8001}, {0x8, 0x284, 0xfffffffe, 0x401, 0x3, 0x5}, {0x6, 0xe, 0x7, 0x2, 0x200}, {0x3b, 0xe4c, 0x4dc4, 0x9, 0x9, 0x9}, {0x4, 0x3, 0x5, 0x0, 0x80000001, 0x9}, {0x1000, 0x8, 0x10000, 0xe00000, 0x8, 0xd67}, {0x9, 0x2, 0x100, 0x0, 0x1, 0x8d43}, {0x1, 0x97, 0x5, 0x0, 0x2, 0x7}, {0x4, 0x7, 0x40, 0x3, 0x2, 0x5}, {0x5, 0xfffffffb, 0x9, 0xd4c, 0x3, 0xf18}, {0x8, 0x7, 0xd, 0xcf01, 0x400}, {0x4, 0x4, 0x8, 0x1, 0x8, 0xca7}, {0x81, 0x8000, 0x7f, 0x5, 0x9, 0xd3d}, {0x5, 0x80, 0x9, 0x1ff, 0x812, 0x4}, {0x9ba4, 0x1b4, 0x8000, 0x1, 0x3, 0x6}, {0x5, 0x47, 0x7df, 0xfffffffa, 0x2, 0x621a}, {0x0, 0x3ff, 0x5d4a, 0x9, 0x200, 0x8}, {0x101, 0x100, 0x6, 0x8, 0x401, 0x5}, {0x2d92, 0x0, 0xec, 0x1000, 0x1f3, 0x7}, {0x5, 0xd586, 0x3, 0xa57, 0xf3, 0x1}, {0x13f7, 0x8, 0x7, 0x2, 0xd57f, 0xfffffff7}, {0x1, 0x1, 0x0, 0x8, 0x401, 0x6}, {0x5, 0x4, 0x2, 0x6, 0x6a, 0x10}, {0x5, 0x7f, 0x9, 0x3506, 0x2, 0x3ff}, {0xf, 0x2, 0x9, 0xda, 0xa, 0x1}, {0x9, 0xfffffffe, 0x3, 0x1, 0x5, 0xfffffffe}, {0x5, 0x5, 0x10001, 0x2, 0x3ff, 0x7fffffff}, {0x9, 0x2, 0x7f, 0x0, 0x6, 0x3}, {0x2, 0x3, 0xfffffffe, 0x4, 0x49, 0x80000001}, {0x0, 0x0, 0x100, 0x3, 0x8, 0xffff}, {0xfffff000, 0xffffff35, 0x9, 0x6, 0xfff}, {0x4, 0x2, 0x1788ee9e, 0x9, 0x400, 0xc21}, {0x0, 0x5, 0x7, 0x1, 0x0, 0x65}, {0x3, 0x9, 0x8, 0xff6, 0xd, 0x6}, {0x4, 0x178, 0x5, 0x0, 0x0, 0xde}, {0x3, 0x6d46, 0x5, 0x3ff, 0xc, 0x1000}, {0x7fffffff, 0x7ff, 0x8, 0xfffffff8, 0x8, 0x8}, {0x0, 0xf, 0x2, 0x4, 0x1, 0x8}, {0x3, 0xfffff000, 0x400, 0x7, 0x200, 0x7f}, {0xfffffffd, 0x7, 0x3, 0xfff, 0x1, 0x8}, {0xeae9, 0x9, 0x0, 0x5, 0x10, 0x8}, {0xffff7462, 0x6b, 0x31c, 0x9, 0x3, 0x3}, {0x1000, 0x3ff, 0xfffffffe, 0x4, 0x2eb1}, {0x79, 0x7, 0x6, 0xffffffff, 0x80000001, 0x9}, {0x4, 0x3, 0x7, 0x5, 0x9, 0x81}, {0x8d97, 0x0, 0x0, 0x400, 0x5, 0x83}, {0x331, 0x1, 0x3ff, 0x1, 0x4, 0x6}, {0x5, 0x80, 0x4, 0x17e, 0x7fff, 0x8}, {0xea, 0x10000, 0x200, 0x7, 0xffff, 0x3ff}, {0x9, 0x47dd, 0x1, 0x7ac, 0x0, 0x800}, {0x3, 0xb7, 0xfffffffb, 0xdad, 0x7, 0xf}, {0x0, 0xd, 0x7fffffff, 0x8, 0xe15, 0x7167}, {0x3, 0x768, 0x5, 0xa18, 0x0, 0x200}, {0x2, 0xffffffff, 0x2, 0x0, 0x0, 0x7}, {0x2, 0x3ff, 0xd742, 0x2c41bcd3, 0xf, 0x2}, {0x3, 0x5, 0xac00, 0x2, 0x0, 0x6d9}, {0xfffffffe, 0x8, 0x6, 0x200, 0x3, 0x6}, {0x1, 0xff, 0x48, 0x5, 0x9e, 0x5}, {0x3, 0x3, 0x7ff, 0x6, 0xffffff81, 0x77f13827}, {0x10000, 0x6, 0x2, 0x40, 0x3, 0x8}, {0x2, 0x5, 0x0, 0x7f, 0x2, 0x9}, {0x3, 0x4, 0x1, 0x2, 0x5, 0x3}, {0x4, 0x6, 0x9, 0xa, 0x3}, {0x91, 0x6, 0x10000, 0x4, 0x97a9}, {0x3, 0x6, 0x5, 0x10001, 0xd, 0x80}, {0x9, 0xe, 0x9, 0xa0, 0x8, 0x7f}, {0x8, 0x6, 0x8, 0x1ff, 0x80000001, 0xffffffff}, {0xb491, 0x7, 0x1, 0x1, 0x5, 0x4}, {0x2, 0x0, 0x6, 0x100, 0x7, 0xb}, {0x45, 0x90e, 0x80, 0xfffffc00, 0x51c, 0x7}, {0x7, 0x200, 0xff, 0x0, 0x1, 0x100}, {0x1, 0x4, 0x0, 0x5, 0x1, 0x1}, {0xc, 0x8, 0x2, 0xd, 0x80000001, 0x2}, {0x2, 0x81, 0x7, 0x9, 0x3, 0x4}, {0x9, 0xfffffff8, 0x3ff, 0x100, 0x3, 0x6}, {0xe4af, 0xb5, 0x40, 0x2, 0x7, 0xad7}, {0x100, 0x3b16, 0xbf9e, 0x3, 0x2}, {0x7ff, 0x5, 0x1000, 0xffff08b7, 0x6, 0x81}, {0x8000, 0x3, 0x7fffffff, 0x1ff, 0x7, 0x5}, {0x9, 0x800, 0x1, 0x0, 0x81, 0x7ae8}, {0x80, 0x81, 0x8001, 0x7, 0x4, 0x4}, {0x0, 0xffff, 0x0, 0x3ff, 0x6, 0x7fff}, {0x7, 0x3, 0x6, 0xf5a4999, 0x5, 0x7fff}, {0x10, 0x5, 0xfffffff2, 0x81, 0x100000, 0x1}, {0xfffffff2, 0x5, 0x6, 0x7fffffff, 0x6, 0x3}, {0x0, 0x3ba, 0x6, 0x7, 0x0, 0x1}, {0xfff, 0x401, 0x3, 0xf04, 0x5, 0x9}, {0xc13b, 0x32dd, 0x6, 0x7, 0x9, 0x1}, {0x4, 0x2, 0x0, 0x4, 0x3, 0x31ec3fcb}, {0x5, 0x4, 0x1, 0x7, 0x1, 0x8001}, {0xfffffffa, 0x1, 0x3ff, 0x6, 0x2, 0x6a}, {0x8346, 0xf, 0x7, 0x2, 0xd20, 0x54b9}, {0x100, 0xd3, 0x401, 0x7, 0xff, 0x9d7}, {0x100, 0x1, 0x4, 0xfffffff7, 0x5, 0x3}, {0x1, 0x6, 0x3ff, 0x3, 0x4, 0xe}, {0x1, 0xf, 0x7fffffff, 0xf, 0x0, 0x10}, {0x6, 0x7, 0x300000, 0xfffffff5, 0x9, 0x3}, {0x1000, 0x8, 0xf1, 0x1, 0x7, 0x7}, {0x7f, 0x3, 0x2, 0x2, 0x8, 0x9}, {0x4646, 0xf, 0x80000000, 0x4, 0xe1c4, 0x8}, {0x4, 0x5, 0x5, 0x81, 0xfffff4a8, 0xffff}, {0x4, 0x7, 0x8, 0x800, 0x80000001, 0xfff}, {0x4, 0xe11d, 0x1be, 0x0, 0xe3a2, 0x80}, {0x0, 0x8, 0x80000001, 0x79b50a96, 0x7fff, 0x3563}, {0x8fa, 0x2, 0xffff, 0x353f, 0x5, 0xe}], [{0x5}, {0x2, 0xf562168b4e8b4225}, {0x3, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x4}, {0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x5}, {0x3}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0xcad777bf3ef1a8df, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3}, {0x5}, {0x2}, {0x4}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1}, {0x5}, {0x3}, {0x4}, {0x2ecd84cfa20946fe, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x2}, {0x5}, {0x5, 0x1}, {0x2}, {0x5}, {}, {0x3}, {0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0xfa42e8a01c43cef}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0xbdd928c277ae6f0}, {0x1, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x7}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}], 0x1}}]}, {0x63, 0x6, "9462e23d82fa288e2ece42c759bdf5da12d04bed5a240ceffe42dda63afeb19d20bfb41fbf824d9cf6903f6191bf86abf4b4bcd8d5d09517680cda0272bc871809afa17cdd9c779ecce9d555ca76dc7bfce3dbe98ceacf2e2f5f4458dc542d"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x1d94}, 0x1, 0x0, 0x0, 0x24044014}, 0x44004090) (async) socket(0x2a, 0x2, 0x0) 2m52.418182137s ago: executing program 2 (id=9616): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000720000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m52.38854747s ago: executing program 40 (id=9616): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000720000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.415504368s ago: executing program 6 (id=11282): r0 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) flock(r2, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 25.487617799s ago: executing program 6 (id=11289): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@empty, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x30000000}, {0x0, 0x8}}}, 0xb8}}, 0x0) 25.456884362s ago: executing program 6 (id=11290): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x25, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7fc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x3, 0x0, 0x905, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ipvlan0\x00', 0x1}) 25.294790427s ago: executing program 6 (id=11293): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x88, 0x68, 0x1, 0x72bd25, 0x25dfdbfd, {}, [@NHA_ENCAP={0x70, 0x8, 0x0, 0x1, @SEG6_LOCAL_SRH={0x6c, 0x2, {0x2b, 0xc, 0x4, 0x6, 0x9, 0x28, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @remote]}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000}, 0x40040d0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf25010000000000000007410000004c001800"], 0x68}, 0x1, 0x0, 0x0, 0x40008}, 0x20004040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00028006"], 0x24}}, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x184905c, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000001200)={0x15, 0x0, 0x0}) 25.217127294s ago: executing program 6 (id=11294): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 24.767458793s ago: executing program 6 (id=11299): r0 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) flock(r2, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 24.717923087s ago: executing program 41 (id=11299): r0 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) flock(r2, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 14.319799005s ago: executing program 8 (id=11412): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000000000000000000002000000018110000bb5a64353c839a485951c8e0f8eaf8ca7a1df3a45d42f9a008bd47e46de873e5b037dc690e5ca29966476155ee00000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a00850000008d000000bc0900000000000045090100002000009500000000000000bf9800000000000056090000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) r3 = socket(0x1d, 0x2, 0x6) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xb9fc, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x20000000, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}], 0x1c) sendmmsg$inet6(r7, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x1ff, 0x2, [0x3, 0x5]}, 0xc) 14.229017434s ago: executing program 8 (id=11417): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a8551000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c0002801800028008000180fffffffd0900020073797a320000000008000140000020000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000180)=0xf9, 0x4) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c00c, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$eJzs281OE18Yx/EfL/8/CMJUURSM8YludDOBegUNgcTYRIPU+JKYDDLVpkNLOg2mxgg7t14HcenOxHgDbLwCF+7YuGRhHMNMLS2UqAuZaL+fzXnI4deck+dMcxadnXuvV8vF0C16dfX3mQalTe1KGfVrQIm+5tgf1/+r3aauTeQ/Xbxz/8HNXD4/v2i2kFu6njWz8Uvvn714c/lDffTu2/F3Q9rOPNr5kv28Pbk9tfNt6WkptFJolWrdPFuuVuvecuDbSiksu2a3A98LfStVQr/WMV8MqmtrDfMqK2MjazU/DM2rNKzsN6xetXqtYd4Tr1Qx13VtbET4mcLW4qKXS3sV+LNqtZw3J2n60ExhK5UFAQCAVHH/72Xc/3vB3v3/YfP57cT9HwAAAAAAAAAAAAAAAAAAAACAv8FuFDlRFDk/xv+k+A2fqPn3CUkjkkYlnZQ0JmlckiMpI+mUpNOSJiSdkXRW0qSkc5LOS5pq+6y094rDjur/AP3vCTz/vY3+97a2F3eHpdVX64X1QjIm87miSgrka0aOvsa9bErqhRv5+RmLZXRhdaOZ31gvDHTmZ+XsHZhu+dkkb535ofjctfJZOXsHrFs+2zU/rKtX2vKuHH18rKoCrcRncj//ctZs7lb+QH46/r9/nWstXfvnukfNJ/lfOB/RTNf+DGp6MN29Qwobz8teEPg1CgoKilaR9jcTjsN+09NeCQAAAAAAAAAAAAAAAADgdxzHzwnT3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9DwAA//+TC2AL") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x2) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000001180)=ANY=[], 0x1, 0x242, &(0x7f0000001900)="$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") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="040025bd7000fddbdf2544793a000000080003006861b2247807d99c7f32d96f1d7eace479b9aed0d2ea317d42c3f5e78bbdaf573f8a12e6c734f6d00e5ffbd5cf929e073616fcc62d260f0a41052e61211967bb5acd7ccd", @ANYRES32=r4, @ANYBLOB="4f005b00be07086c7c1445512b9bddf87bdd7582ca4293bcc3d54e0a30f27001ddec863300586653d88e26fa2d617e4cc815561692abae6a41e3ad78438957b0f8899423c0a8aa8d82f54aa3520c660021005b002e51982af999838c19fed22981a69be79bd2dd6aca32eab002f60919f8000000"], 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = socket(0x40000000015, 0x5, 0x0) r11 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x1e5}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="f000000000"], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r11, 0x3516, 0xa000fe, 0x20, 0x0, 0x5a) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x3, 0x1, 0xffff, 0x400e0a, 0x7b, "203c002007000000000780fffffffff200", 0x8, 0x5}) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000000380)={0x7, 0x5}) 13.417834535s ago: executing program 8 (id=11434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 13.340369742s ago: executing program 8 (id=11435): openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file1\x00', 0x8000, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00', @ANYRES64, @ANYRESOCT], 0x1, 0x277, &(0x7f0000000000)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000080), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x3, &(0x7f0000000300)={0x0, 0x3e, 0x4, @thr={&(0x7f00000003c0)="0ed5adfaa9b495f8f781176af3a567362c3e8eaec5bd60acd430029cce05cf3c09dfc04c453d3329dc6020f6c1afebb8b8ebb65346dd37c9e8f54611657f113057b0f7655211a4294eb96ed9a391273c006025ba29766c681b87af6fe94cddc4227a12bf0bedf5eb1460e0d4a90941a61439cf4fc35126e8df06fbccd5ea0c0fe899427082d6f0d6d52ef7a3b2170004b9e99a671ec236645fc94e", &(0x7f00000000c0)="180b0e6c1633e586efdf02cdd5e8"}}, &(0x7f0000000500)) syz_read_part_table(0x1047, &(0x7f0000001080)="$eJzsz80JAjEUBODZdX/0ZGte7MQGLGYvVmE3lrGiJhELEBG+7xBeBpLhhZ/q2rRNzsnmOSSHTCVsZ7Kuu2Qul3HINcm03IZH1NWfTvuPgn6pr8d3OL+K++PlW3sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD+5BwAA//9VhAey") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$eJzs3T+IHNUfAPDv3uz9+5H87gpBFITRTtCQREG08Y5wgeA2UZaohbiYRMPtKeRwMSmyORuxFFJqZWehhUU6G1GRdBa2RpCoWGi6gCEjszO7O3N7Z4JhE4OfT7F8773v982b3bnbd3Psu1dXYv34bJy8evVKLCw0orlyaCWuNWI5khg6H5PmdmgDAO4N17Is/sgKEV/cSklj+rMCAKZp8P7/+t5Ky7tfj+OvJvKz4t1/9k7MDQCYjvL3/8VqW7ItZ2GianHa0wIApqh+/z8iHplIqfypvzmxNgAA7j0vvPTyc6utiOfTdCFi471eu9eOZ8b9qyfjVHTjROyPpbgeUSwU8ofG4PHwkdba/jRN+/HzcrTzil47YqPfaxcrhdVkUD8fB2Iplsv6crWRZVly+PPW2oF0ICLO93uz+SgbjV57dnCXYXUxTv3wvzgRByON+ybqI4601kZrknZ+3MHxZyO2xvct8vnvi6Xku9firejG8chrh8ua1tq5A2l6KGvtaYzr+732/CCvMHkHBAAAAAAAAAAAAAAAAAAAAAAAbse+Yu+dvWmaLo/2z8nG+/fsKxNq/c2IYq+f0f5AW8X+QNl8Fln2+zuPt99PorY/0GCDn9r+Os2YubunDgAAAAAAAAAAAAAAAAAAAP8am2fmotPtnji9eebsejXon948MxMRecub33765WLUcxbLAepVtaBZplS60nFVlgyTs6SWUwZJfvBGs2j55OJoxpWcylmMy2fGOfPbumrB3od/+vDs+nCEh5Jh1Y1xThI7ntfZpD6NWrDx/2LAYcuF3Z+fyeDgTXIuZ1m2W/m5VyarohHR3HWq/zDI8uCbK2888MTm8CLICo8+tnTs8oWPf13vdPMj57rdudOb17P1Tvn1zhfbRDA/vGySyvXTKC+2RvVKaHaevHF0zy4jb9VbOsn3v7344AeXypaZysu0wzSyY5fGLW/vkJMUB/1se9dcEeTTHHU9mwf5czQxzvC75KZPy1NxWy/c/R+tdC6e+/GXW62q/JCwUQcAAAAAAAAAAAAAAAAAANwRlc+Kl8oP+87+XdXTR6c/MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4c8b//38UxMzWtpZbC/7sx7DlWAy75vMBY65yxOW7eLYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxX/RUAAP//wAtXdw==") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002e7824962e2d8c5e20c4b83d80b19cbba4cd5ed8ae60b7394a3fda62ffc77d63e1283f6a70dc2e3def96efed09fc078efdc9eb758f36a0e73f03eda095372b09a4d5be7c266a70b067a9510ffd43b9a5db7e1a0a9ab3c1bed8cbf52b787"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r4, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(0x3) 12.559776261s ago: executing program 8 (id=11452): r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000280)="14", 0x1}], 0x1, 0x9, 0xfffffffc, 0xa0) r1 = io_uring_setup(0x34b9, &(0x7f00000005c0)={0x0, 0x10006fa5, 0x400, 0x3, 0x8a, 0x0, r0}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) splice(r4, &(0x7f0000000040)=0x80, r3, 0x0, 0x5, 0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)) poll(&(0x7f0000000080)=[{r2, 0x343}], 0x1, 0x35aa) close_range(r1, 0xffffffffffffffff, 0x0) clock_getres(0xfffffffffffffff1, 0x0) 11.992813301s ago: executing program 8 (id=11462): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="846bb66f", 0x18, 0x846b0000, 0x0, 0x0) 11.89208426s ago: executing program 42 (id=11462): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="846bb66f", 0x18, 0x846b0000, 0x0, 0x0) 3.432473097s ago: executing program 1 (id=11574): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a8551000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c0002801800028008000180fffffffd0900020073797a320000000008000140000020000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000180)=0xf9, 0x4) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c00c, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x2) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000001180)=ANY=[], 0x1, 0x242, &(0x7f0000001900)="$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") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="040025bd7000fddbdf2544793a000000080003006861b2247807d99c7f32d96f1d7eace479b9aed0d2ea317d42c3f5e78bbdaf573f8a12e6c734f6d00e5ffbd5cf929e073616fcc62d260f0a41052e61211967bb5acd7ccd", @ANYRES32=r4, @ANYBLOB="4f005b00be07086c7c1445512b9bddf87bdd7582ca4293bcc3d54e0a30f27001ddec863300586653d88e26fa2d617e4cc815561692abae6a41e3ad78438957b0f8899423c0a8aa8d82f54aa3520c660021005b002e51982af999838c19fed22981a69be79bd2dd6aca32eab002f60919f8000000"], 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) socket(0x40000000015, 0x5, 0x0) r10 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x1e5}, &(0x7f0000000140)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r10, 0x3516, 0xa000fe, 0x20, 0x0, 0x5a) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x3, 0x1, 0xffff, 0x400e0a, 0x7b, "203c002007000000000780fffffffff200", 0x8, 0x5}) r12 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x7, 0x40102) ioctl$BLKCLOSEZONE(r12, 0x40101287, &(0x7f0000000380)={0x7, 0x5}) 2.864532527s ago: executing program 7 (id=11580): syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x28, 0x0, &(0x7f00000000c0)="e300806700080000008717bd88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 2.721829089s ago: executing program 7 (id=11582): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a8551000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c0002801800028008000180fffffffd0900020073797a320000000008000140000020000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000180)=0xf9, 0x4) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c00c, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x2) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000001180)=ANY=[], 0x1, 0x242, &(0x7f0000001900)="$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") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="040025bd7000fddbdf2544793a000000080003006861b2247807d99c7f32d96f1d7eace479b9aed0d2ea317d42c3f5e78bbdaf573f8a12e6c734f6d00e5ffbd5cf929e073616fcc62d260f0a41052e61211967bb5acd7ccd", @ANYRES32=r4, @ANYBLOB="4f005b00be07086c7c1445512b9bddf87bdd7582ca4293bcc3d54e0a30f27001ddec863300586653d88e26fa2d617e4cc815561692abae6a41e3ad78438957b0f8899423c0a8aa8d82f54aa3520c660021005b002e51982af999838c19fed22981a69be79bd2dd6aca32eab002f60919f8000000"], 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) socket(0x40000000015, 0x5, 0x0) r10 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x1e5}, &(0x7f0000000140)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r10, 0x3516, 0xa000fe, 0x20, 0x0, 0x5a) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x3, 0x1, 0xffff, 0x400e0a, 0x7b, "203c002007000000000780fffffffff200", 0x8, 0x5}) r12 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x7, 0x40102) ioctl$BLKCLOSEZONE(r12, 0x40101287, &(0x7f0000000380)={0x7, 0x5}) 2.680708693s ago: executing program 1 (id=11583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xfffe, 0x0}, 0x0) 2.355189352s ago: executing program 1 (id=11585): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000200)={&(0x7f0000000280)=@ax25={{0x3, @rose}, [@rose, @default, @netrom, @null, @null, @rose, @netrom, @bcast]}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000400)=""/198, 0xc6}, {&(0x7f0000000500)=""/177, 0xb1}], 0x4}, 0x40) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x802, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5786dd6c370c8900082b0000000000000000000023000000000000fe8000000000000000000000000000aaff"], 0x0) 1.933277789s ago: executing program 1 (id=11594): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x2d0, 0x12, 0x100, 0x70bd29, 0x25dfdbfe, {0x3, 0x1, 0x2, 0x5, {0x4e20, 0x4e23, [0xfffff001, 0x7fffffff, 0x5, 0x5], [0x8, 0x7, 0x80, 0x2], r1, [0xffffffff, 0x3]}, 0x9, 0x100}, [@INET_DIAG_REQ_BYTECODE={0x68, 0x1, "b3bff8abfb391a5d56f545ee04e5537f39b83c61cff34ed45a39199c5207f15753f59f591b06f707c9f67aae11bcf89af3de0d4471966b1789b3b5e74b2a85be320adacac856d5108384a3c5ad1792b01b3c455c02a7dc0a98ba75577be400f95c430a5d"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "b021594a95aef5608928348a63950bdf9a773bacc1e782281a033c431ae3708611ea9e2fe160c0d519a7fde1c3b538939f2c3002ada14c5044612d2528897cdab417262dc150df201d617c0abd4f48141dbb1b6dd437992abae441960fe6207e39951244131941bb4024f55b046ed265cd6409e60d4bd922924e657e28c806f066b7dfb534d75fe1690437b8b6b9419df3e9cf2fbf3aa3e01211ee7fba23ca0ded365dc22c1a80de5d372a94ca8582f8a4613120c2adf2b1a3ef5ac615affaaa1b3d99d7119c2150514989dba88793e24ca1062060be068fe66d0fcaa8bd23892c87"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "8dae30708a63a29f63b4c2bf44c4caf55b389a0f997884d3cb140694871b75ce11584f74ae1b150fca1448c1a2c7cf77fc2ff7e90278efc618b29184e4c941e127c58eefca359ba8ec127c1e24749ba9c0a3c6d3faebf6861da032e07e8c844e80bd"}, @INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "d4bbd559a3e69e2ad7e55a9940e3dfeab5d6997c4628f479b08709b8b5cc7ef6d7df2d58dabef32ddae7edf93603c04b625eef7686758055c2eeb3b296222b110e2eab60613906582275aa724b90f11d4d57cb04e311173ce57d08733d575316dd91fb787ca127cf038e83c1459ad7cad398bcc8d49caa0c536aa448eab0256c91c67d0f7c9cec5bef937e64a4eccf62e1e205f91033ec53b63475ecd5a3011cc1847f93f3eae9590e89e74bcee059e88e6799153e7e7d06572b2be8e4f4b29d701e1bf7ec"}]}, 0x2d0}}, 0x4044890) 1.867401325s ago: executing program 1 (id=11596): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x29, 0x1, 0x0, 0xffff, 0x9, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x9}}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8901, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x1ba8, &(0x7f0000000380)={0x0, 0x92fc, 0x1000, 0x2}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) 1.707190489s ago: executing program 7 (id=11597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b40)={0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') write$binfmt_aout(r2, &(0x7f0000000500)=ANY=[@ANYRESOCT], 0xff2e) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r2, @ANYRESDEC=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf252800000008000200", @ANYRES32=r6, @ANYBLOB="05002b0009000000"], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000840) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) close(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r8) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r9 = syz_open_pts(r8, 0x8880) r10 = socket$kcm(0xa, 0x2, 0x0) r11 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x32, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e22, 0x3, 'nq\x00', 0x15, 0x80005, 0x49}, 0x2c) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) dup3(r9, r8, 0x80000) read(r8, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.677650881s ago: executing program 3 (id=11598): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000700851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000060000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.530426134s ago: executing program 3 (id=11599): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x20, 0x1, 0x7, 0x6, {{0x8, 0x4, 0x3, 0x2, 0x20, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0xb, 0x16, [@private=0xa010100, @empty]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_deladdr={0x48, 0x15, 0x100, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x1, 0xc8, r1}, [@IFA_LABEL={0x14, 0x3, 'hsr0\x00'}, @IFA_FLAGS={0x8, 0x8, 0x68b}, @IFA_CACHEINFO={0x14, 0x6, {0xba29, 0xff, 0x4, 0x1}}]}, 0x48}, 0x1, 0x20000, 0x0, 0x240440d5}, 0xc001) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x1008008, &(0x7f0000000040)=ANY=[], 0x1, 0x2ee, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x56) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) 1.383645708s ago: executing program 0 (id=11600): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d520987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b68090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520119ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=r2, @ANYRES8=r2, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x8, 0x8, 0x0, 0xa, 0xffffffffffffffff, 0x9292, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0xf}, 0x50) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) 1.260161148s ago: executing program 3 (id=11601): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x10000a, 0x0, 0x80000, {r2}}, 0x20) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.004769101s ago: executing program 0 (id=11602): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x10a) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0xae, 0x4, 0x8, "c42fda22b386313dc08c542d12d365510d20e37206fb970589874e26f8024acffdd59e1cca4d47be76a67b265a64b7879fc703332daea3b7bf6e7d5e5270ead4d91e21958950d88db2f55860f04310d89ff9da95507493117cda8827a5c9648186c1357732bafe999ee7ca754f2a5780085aa0437cb7b0087af00a07ba71dfab7529973942e19724406f4713ece6a5bb4fb34f7acd7852a8c78f91551ef168f54901b49d2053919f7a77d7dfbd21"}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0xfe8e, 0x12) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x1000000) 1.004589981s ago: executing program 3 (id=11603): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xff80, 0xc}, {0x0, 0x1}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x10000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3501, 0x5fec12f597defa26, 0x0, 0x0, 0x0, 0x9}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 981.069063ms ago: executing program 7 (id=11604): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8, 0x0, 0x3000}}}, 0xb8}}, 0x0) 968.894644ms ago: executing program 0 (id=11605): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 899.66714ms ago: executing program 3 (id=11606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x700}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25", 0x8}], 0x1}, 0x0) 899.0692ms ago: executing program 7 (id=11607): syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x28, 0x0, &(0x7f00000000c0)="e300806700080000008717bd88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 898.47586ms ago: executing program 4 (id=11608): r0 = open(&(0x7f0000000780)='./bus\x00', 0x1c5dfd, 0x11e) fcntl$setflags(r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b702000000000080bfa300000000000007030000fffeffff7a0af0fff8ffff1971a4f0ff00000000b7050000080000001e2400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) 675.93637ms ago: executing program 4 (id=11609): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback={0xf5ffffffffffffff}}}}], 0x28}}], 0x1, 0x0) 660.607951ms ago: executing program 3 (id=11610): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x29, 0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340), 0x1, 0x525, &(0x7f0000000980)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0xfffffd18, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xe}, 0x106200, 0x10004, 0x4, 0x5, 0x9b41, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x2) setuid(0xee00) r1 = getpid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio}, {@stripe={'stripe', 0x3d, 0xf9}}, {@nodiscard}, {@sb={'sb', 0x3d, 0xd98}}, {@nodelalloc}]}, 0x1, 0x47d, &(0x7f0000000440)="$eJzs3MtvG8UfAPCv14mbvn7Jr5RHSwuBgqh4JE36oAcuRSBxAAkJDkWcQpJWpWmDmiDRqoLCoRxRJc4gjkj8A3ChXBBwQuIKd4RUoV4ocFm09m6etuO4bt3Un4/kZGZnkpnvzo49u2s7gJ41nP0oRWyLiF8jYrCWXV5huPbrxvWLk39fvzhZijR97c9Std5f1y9OFlWLv9tay6Rpk3YvvxkxMTMzfS7Pj86feWd07vyFZwYiYvrk9Nnxo3OHDu6tHBk/3JE4t2d93f3+7J5dL71x5ZXJ41fe+vGrrL/b8vKlcay2ua02h2t7t67H2/qPd67tS9Klvi52hHUpR0Q2XP3V+T8Y5SXH+mC8+FFXOwfcUmmapJsaF19KgbtYtlBvW7n6FAJsSMULfXb+Wzxu09LjjnDtWCxcx7iRP2olfZHkdfrzc6RbYTgi9n22mO+1/Q8A3H5Xj0XE0/XWf0nct6Te//J7Q0MR8f+I2BER90TEzoi4N6Ja9/6IeGCd7a+8Q7J6/ZMOthVYi7L133P5va3l679i9RdD5Ty3vRp/f+nEqZnpA/k+2R/9m7L8WJM2vnvhl08alWXxH7/0z+fFI2s/+71YI/mjb8UFuqmJ+YlYeZ+uTdc+jNjdtxj/wEL8pYU1b9bOrojY3WYbp578ck+jsrXjb6IDi/L0i4gnauN/KZaN/+LezVL/pmlavT956szEydr9yaOHDo49e2T88OhAzEwfGC2OitV++vnyq43av6n4O+Da1TS21D3+F+IfKg1EzJ2/cLp6v3Zu/W1c/u3jhuc0y+KvRMvHf6X0ejVdybe9NzE/f24solJ6efX28cW/LfJF/ez437+v/vzfEYt74sGIyA7ivRHxUEQ8nPf9kYh4NDuHaxL/D88/9nZL8S8b/yZX5Tsoi39qrfGPpeO/ZuJCRCzbUj79/Tfrj7+Qjf+hamp/vqV4/mumpZ62dTQDAADAxpNU3wNfSkYW0kkyMlJ7D//O2JLMzM7NP3Vi9t2zU7X3yg9Ff7L0SldxPXQsvzZc5MdX5A/m140/LW+u5kcmZ2emuhw79LqtDeZ/5vdyt3sH3HI+rwW9y/wHgN7j9R96l/kPvave/P+gC/0Abr81Xv/b+/Y7YEOw/ofeZf5D7zL/oSc1/Gx8khVlNVr8IL3ETSQqHfuH31YajunXne1zJHfErruLEv1Rt6iv5S+zaDOxqW5Rt5+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuO/AAAA//+sRdao") r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaabaaaaaaaaaaaa08063a02eabcbed90fcd1d8aa3000108f71e00060400020180c2140c00000000000000c20000020a01"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8) sendto$inet6(r8, &(0x7f0000000140)="9f", 0xfef4, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) r9 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r9, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000140)="4b111ee6d16dfc3c7b47365047ee1091dc3890665f7026a21fb0c59400deb442819e60a03fec011d1af911bdd32aadd3106c", 0x16}, {&(0x7f0000000240)="d15c2620a7da3eb470bf1f9044335bada27d66e342a44963797d0460cdf8b9f4fcffeff9de1204f714edfd58d9e0f766e292fc8680b29c0b69cc0b0a2d7409145fbbb202e99a635f2973482c428bc725f8e6c796766b94fadaf09ea122c5f3a4ccd13243a3c72bf7b00c1c7b040fef7b77651fa32296dae13347dd13bef54db7004c8314ab902bd12ed3805da318e720627a3af9d13b07c3ec", 0x99}, {&(0x7f0000000ec0)="17b515115e3e5486b1691b24ce6aff14ee286e308f6f42e52518339195d31dc1afccf9624fbe7b839a1d12c829b5ded68a0c825c990209f21385301057c4874610eeccc0de9c51752b92645704d5834ed3c6ab7ce8506d144b7ce392a7c564d163b71f6b80e96c47763e073870eac5e0b9a719535923f6397ceff59048e9f4ac4971f8e23006a46b7e720f1fb92202e992b961dc115711dcda6b603df218dc725ae7cc90c08ef878149bb2745c9f043e5b4fee81b22526d94ca4322ed66b31b11ed8af1eba94d548f510bcd8e045ed05475d3a000793a66efabfa57bd5bca240", 0xe0}, {&(0x7f00000008c0)="389c0795c2ff0be42b146ce983964006a25b40d42615cf5411f0ef99643bf86ce9f6b6b0836fd144bbae8d8677e97c8cd18040f5f8841d9851645a6f9a9aa36f085522dfa1359353066cf17f2fb8ef2fa4e0d4e9bc76d1d0fa1c23855afdae676a61db827c0555d373fed92614924d3b927bdf960f66", 0x76}, {&(0x7f0000001240)="3619e5f0981ca3c2273ad12383b804083d4a4ab3a1ae3c8d7fbc4ec3427550d9805fc20267a9a1e280d58cb4e56bb85dc47b3506ca2f4265df6d4afe3b79f819d203b477c1a16e6c3ff135997bd3fa27b991dda9f28ad26fdd222fb0708535e9bfddd945f6fc75e47a86529b207717ec3f733555e4a5bbfe015237fff78d8480ffb7b968d2157b20cdb258cb988d15749b174df81f7616f7a054665d0d43bec0792e7d84381cdbf0031d64cfbd4c26ef03cc1eab4d2fa93ddd2058a2b38499c0b015485e80d673aa891ee76e74c60237100000000000000049217e5920c2bbee0337c60e1c3b8af337cd9b7e2ca90170c58afd64a0b392ee6701bc22dfcec67f951f4325fcc7c74c1a87a3ba5679dfdac6c9ea6510d340a6b7d0c876880eae3ff15f00000000000000000000000000000000000000000000ccf50d897ae949605492302a6b0098404957fbe55cd7b8a431eea5e79c3cf3934c7b428d3e5f4f09a8ab6f80e564f1c26896816b8c3f8ae97812b98109186f88f82c7607e01dc1e86d7428423c24bf2b2ec343fa8f77569348308e31e11806d274d65c202de06bc0186a8aa6ef5090b69b74200433a39d6ce3074fa5ffe0d0529a1bbb9594fbe42bceb53bf2bcf870bcf381a9e131910a5450785aafdc1f79cea17d101f94bc1a7ce17971798e547c18ab62256933aa694ec53bd392070fb3844a76931e38cb0a43f2bf40449e84cbbc0e47f1", 0x20b}, {&(0x7f00000010c0)="4a043e2506a62ff163e8944ca2a2ffce9c802973e5cfc9e59bd453b80c19bf930fba3ecaa85e9ad0d065477882dc4c48352dd318064c3232691ff73bb7499adc5a0cf97f9b118b4cfa40e9e1553d", 0x4e}, {&(0x7f0000001140)="354c0eea063ae589c79f39157c0f224cc245f497ef210231e29f7d0725bed3b399d2022575012270c8c23e840114055607fd33f266a7a2fe252030910be0c7e71069189e8843e3d313c1bda91ba18ce1a245e6dd5c3a92fbabf589fc5f2c57", 0x5f}], 0x7, &(0x7f0000000fc0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r4, @remote, @rand_addr=0x64010102}}}], 0x30}, 0x800) 648.302913ms ago: executing program 1 (id=11611): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) readv(r1, &(0x7f0000001300)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 564.81876ms ago: executing program 7 (id=11612): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000100)=""/100, 0x64) getdents(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000180)=0x400000001, 0x4) ftruncate(r1, 0x0) semget$private(0x0, 0x2, 0x294) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x9000) fallocate(r2, 0x0, 0x0, 0x8800000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x24000040) r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 564.57322ms ago: executing program 4 (id=11613): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d0900000000000ffe0007000000", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r1], 0x58}}, 0x0) 564.40496ms ago: executing program 0 (id=11614): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000004000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x54d, &(0x7f0000000540)={0x0, 0x735d, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) close(0xffffffffffffffff) r4 = dup(0xffffffffffffffff) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) pipe2$9p(0x0, 0x80000) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd_index=0x6, 0xffffffffffffff7f, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r5, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) sendmmsg$sock(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, 0x0, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x74}, {0x6c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) syz_read_part_table(0x1060, &(0x7f0000001080)="$eJzsz7FtwkAYBeBn+6w4UZSNogwRMQkFJTQwAGPQ0jEEGzAG9aGzdwCK7yvu3kn//6QLr9Xn8zeXTYsf7ZjSJ7m3WJJc63aZq7XWwzq3cX79JOmmeX78btdu2W0tba1L8pfkvwxTvjJ3Nucc92WJQ0lWp2d/FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADe0SMAAP//aJ0O7A==") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) 343.978059ms ago: executing program 4 (id=11615): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x10a) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0xae, 0x4, 0x8, "c42fda22b386313dc08c542d12d365510d20e37206fb970589874e26f8024acffdd59e1cca4d47be76a67b265a64b7879fc703332daea3b7bf6e7d5e5270ead4d91e21958950d88db2f55860f04310d89ff9da95507493117cda8827a5c9648186c1357732bafe999ee7ca754f2a5780085aa0437cb7b0087af00a07ba71dfab7529973942e19724406f4713ece6a5bb4fb34f7acd7852a8c78f91551ef168f54901b49d2053919f7a77d7dfbd21"}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0xfe8e, 0x12) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x1000000) 159.260216ms ago: executing program 4 (id=11616): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x191d01, 0x1f4) fcntl$notify(r0, 0x402, 0x29) (async, rerun: 64) getdents(r0, 0x0, 0x58) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x102042, 0x32, 0x43a1bd56, 0x2, 0x9, 0x6, 0x202, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x82200) ioctl$EVIOCGBITSND(r1, 0x80404532, 0x0) (async) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x11815, 0x10000, 0xb, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') (rerun: 32) open_by_handle_at(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r2], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r6, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40088c5) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x40) (async) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) (rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) 878.88µs ago: executing program 0 (id=11617): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x18, 0xfffffffffffffff5, 0x0, 0x0) 511.999µs ago: executing program 0 (id=11618): r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x6fa5, 0xa, 0x3, 0x283}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xd, 0x7, 0x44, @empty, @dev={0xfe, 0x80, '\x00', 0x43}, 0x10, 0x20, 0x9, 0x4}}) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d998a4772508e3afa7f8236e358fa9f3794a74cb261fe642988ccce629a40142726b12f635c8630fbf56e649b21eb963056e4b46944f7a14c764a9f118f9b993d34c8db46bf04317cfcf2e408b4ee1ab04648f22d5ea014e83c98607e477f740301b0bfd1097129e94ddc3f9387c2d5ec49a3b0b4112f019db5a4fd1cb3095a075247b52a10be0e90056d6e0c4", 0x8d}, {&(0x7f0000000200)="570ec664f70c747658e7c33e6e15c59c7939bac1a84d93e52de5a6993f3dc5ba7c1bbddc4dd6cdc3cd04d83b616e3d66ab5b41bafef3c76705ae495396eff7f12282cf8f04eb65fc8470bce92bd3b378be43eb6ff89f6133e964e7ddafc6a79f70686e6270bdfc3224f5ea8d04bf", 0x6e}, {&(0x7f0000000280)="292be5463a1630cd65c812721898603800dc23cb57d03fdfbdf36a5daedda7271652f387ab9769f057358f830044821e9fd66672a236742c7197c1f84d3058d4d5f10c9ed77351f38c2805a7b77a42df4e158fb295b9908bae7978111cb81b6da4e4a29799bb8581fe8d882a37ba758fbf851ffad95c3d3ff24ebf8ef05c9f9326e4f06f22684382017ed5d27de5a33a020cbad20cd2a722f783e0f4f6a058b2f64e22368fdc74a6eae9b293c2d03d6be74b27d6064cedceae5e73ddd0c151e9666b08edc823728fafd55ff215aaf83473e9d036f7d070c4a1db55a1f71207e7", 0xe0}], 0x3, &(0x7f0000001240)=[@ip_retopts={{0x50, 0x0, 0x7, {[@noop, @end, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xbc, 0x0, 0x7, [0xe24, 0x9aed, 0x7]}, @end, @timestamp={0x44, 0x1c, 0xb2, 0x0, 0x0, [0x6, 0xfffffffb, 0x7, 0x5, 0x40, 0xfff]}, @generic={0x44, 0xc, "91d9371dec64f7bca239"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}], 0x88}, 0x4004000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x7ff}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@user_xattr}, {@nolazytime}, {@quota}]}, 0x3, 0x43d, &(0x7f0000002200)="$eJzs28tvG0UYAPBv7aRt+iChKo+mBQIFEfFImrSUHriAQOIAEhIcyjHkUYW6DWqCRKsIAkLliCpxRxyR+As4wQUBJySucEeVKpRLCyejtXcT27HzqlOH+veTtp3ZHWvm8+5nz+7EAXStofSfJOJgRPwREf3Van2Doep/t5cXJ/9ZXpxMolx++++k0u7W8uJk3jR/3YG80hNR+DyJY036nb9y9cJEqTR9OauPLlz8YHT+ytXnZy9OnJ8+P31p/OzZ06fGXjwz/sKm4ujZ4Hga163Bj+eOH3393etvTp67/t4v3yV5/A1xtMnQegefKpcrb1LS5k475VBNOdnoZLBrFLPc6a3kf38UazKpP177rKODA3ZUuVwuP9j68FIZuIcl0ekRAJ2Rf9Gn97/51nI2sK/t04+Ou/ly9QYojft2tlWP9EQha9PbcH/bTkMRcW7p36/TLXbmOQQAQJ0f0vnPc83mf4WofS50X7aGMhAR90fE4Yg4ExFHIuKBiErbhyLi4S3237hIsnb+U7ixrcA2KZ3/vZStbdXP//LZXwwUs9qhSvy9ycxsafpk9p4MR+/etD62Th8/vvr7l62O1c7/0i3tP58LZuO40bO3/jVTEwsTdxJzrZufRgz2NIs/WVkJSCLiaEQMbrOP2We+Pd7q2Mbxr6MN60zlbyKerp7/pWiIP5esvz45ui9K0ydH86tirV9/u/ZWq/7vKP42SM///qbX/0r8A0nteu381vu49ucXLe9ptnv970neqdv30cTCwuWxiD3JG9VB1+4fb2g3vto+jX/4RPP8Pxyr78SxiEgv4kci4tGIeCwb++MR8UREnFgn/p9fefL97ce/s9L4p7Z0/lcLe6JxT/NC8cJP39d1OrCV+NPzf7pSGs72bObzbzPj2t7VDAAAAP8/hYg4GElhZKVcKIyMVP+G/0jsL5Tm5heenZn78NJU9TcCA9FbyJ909dc8Dx3Lbuvz+nhD/VT23PirYl+lPjI5V5rqdPDQ5Q60yP/UX8VOjw7YcX6vBd1L/kP3kv/QveQ/dK8m+d/XiXEAd1+z7/9POjAO4O5ryH/LftBF3P9D95L/0L3kP3Sl+b7Y+EfyCgprClHYFcPICzO7Yxj3TqHTn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5dn5s8=") perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xc27, @empty, 0x6}, 0x1c) close_range(r4, r4, 0x40000000000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) poll(&(0x7f0000000080)=[{r5, 0x343}], 0x1, 0x35aa) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000004c0)={r3, 0xdf3c, 0x7, 0x6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f00000010c0)=ANY=[@ANYBLOB="00000000e082040f90825bcf661abae8480edb52200a00d42e7b65cd0ef6a2e6f52c30fda8b04f7da80b3219e258eab2006645396208c054140d262c8bfabdf5a51ce0eaf1ddea3bb4709c44c010967c", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf255e000000080027000200000008009f0001000000050019010c000000050018013a0000000500180107000000050018012f0000000800220136020000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000040) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000070021"], 0x24}}, 0x40004) clock_getres(0xfffffffffffffff1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000640)={@mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x15, 0x4, 0x5, 0x0, 0x1, 0x4, r2}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 0s ago: executing program 4 (id=11619): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25000000000000000000000000000000017f0000010000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000feffffffffffffff0200000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000330000000000000000000000000000000000000000000004010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000040003c00"], 0x1bc}}, 0x0) kernel console output (not intermixed with test programs): tered allmulticast mode [ 642.154838][ T2063] tipc: Resetting bearer [ 642.549824][ T2069] wg1 speed is unknown, defaulting to 1000 [ 642.583131][ T2069] ip6_vti0 speed is unknown, defaulting to 1000 [ 642.642581][ T2078] syzkaller0: entered promiscuous mode [ 642.648154][ T2078] syzkaller0: entered allmulticast mode [ 642.863875][ T2062] tipc: Resetting bearer [ 642.872497][ T2062] tipc: Disabling bearer [ 643.137858][ T2090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.182550][ T2090] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.238246][ T2106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11104'. [ 643.258110][ T2104] set_capacity_and_notify: 2 callbacks suppressed [ 643.258127][ T2104] loop1: detected capacity change from 0 to 4096 [ 643.274101][ T2104] EXT4-fs: Ignoring removed bh option [ 643.279620][ T2104] EXT4-fs: Ignoring removed mblk_io_submit option [ 643.280255][T29271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.297089][ T2106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.315343][ T2104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.339999][ T2106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.369574][ T2109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11105'. [ 643.395724][ T2106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.479719][ T2106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.548335][ T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.572355][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.580754][ T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.604553][T19188] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.728150][ T2121] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11110'. [ 643.740919][ T2121] ip6gre1: entered promiscuous mode [ 643.747413][ T2121] ip6gre1: entered allmulticast mode [ 643.875520][ T2133] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=36377 sclass=netlink_xfrm_socket pid=2133 comm=syz.6.11114 [ 643.926450][ T2136] FAULT_INJECTION: forcing a failure. [ 643.926450][ T2136] name failslab, interval 1, probability 0, space 0, times 0 [ 643.939108][ T2136] CPU: 1 UID: 0 PID: 2136 Comm: syz.6.11115 Tainted: G W syzkaller #0 PREEMPT(full) [ 643.939136][ T2136] Tainted: [W]=WARN [ 643.939142][ T2136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.939164][ T2136] Call Trace: [ 643.939217][ T2136] [ 643.939228][ T2136] __dump_stack+0x1d/0x30 [ 643.939264][ T2136] dump_stack_lvl+0x95/0xd0 [ 643.939305][ T2136] dump_stack+0x15/0x1b [ 643.939414][ T2136] should_fail_ex+0x263/0x280 [ 643.939443][ T2136] should_failslab+0x8c/0xb0 [ 643.939469][ T2136] kmem_cache_alloc_bulk_noprof+0x62/0x4c0 [ 643.939504][ T2136] ? bpf_test_run_xdp_live+0x74f/0x1360 [ 643.939582][ T2136] bpf_test_run_xdp_live+0xf16/0x1360 [ 643.939616][ T2136] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 643.939655][ T2136] ? 0xffffffffa0205240 [ 643.939674][ T2136] ? bpf_test_run_xdp_live+0x434/0x1360 [ 643.939777][ T2136] bpf_prog_test_run_xdp+0x57b/0xa10 [ 643.939814][ T2136] ? __rcu_read_unlock+0x4e/0x70 [ 643.939843][ T2136] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 643.939915][ T2136] bpf_prog_test_run+0x204/0x340 [ 643.939943][ T2136] __sys_bpf+0x52e/0x7e0 [ 643.940053][ T2136] __x64_sys_bpf+0x41/0x50 [ 643.940095][ T2136] x64_sys_call+0x10cb/0x3020 [ 643.940182][ T2136] do_syscall_64+0x12c/0x370 [ 643.940227][ T2136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.940255][ T2136] RIP: 0033:0x7fbb76afc629 [ 643.940274][ T2136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.940303][ T2136] RSP: 002b:00007fbb75557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 643.940357][ T2136] RAX: ffffffffffffffda RBX: 00007fbb76d75fa0 RCX: 00007fbb76afc629 [ 643.940443][ T2136] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 643.940472][ T2136] RBP: 00007fbb75557090 R08: 0000000000000000 R09: 0000000000000000 [ 643.940484][ T2136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 643.940496][ T2136] R13: 00007fbb76d76038 R14: 00007fbb76d75fa0 R15: 00007ffef9820418 [ 643.940519][ T2136] [ 644.149858][ T2138] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 644.161053][ T2138] SELinux: failed to load policy [ 644.181643][T22570] udevd[22570]: symlink '../../loop6' '/dev/disk/by-diskseq/1610.tmp-b7:6' failed: Read-only file system [ 644.198057][T20180] udevd[20180]: symlink '../../loop4' '/dev/disk/by-diskseq/1604.tmp-b7:4' failed: Read-only file system [ 644.240916][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-diskseq/1604.tmp-b7:4' failed: Read-only file system [ 644.261834][ T2149] loop6: detected capacity change from 0 to 512 [ 644.275757][T22570] udevd[22570]: symlink '../../loop6' '/dev/disk/by-diskseq/1619.tmp-b7:6' failed: Read-only file system [ 644.291515][T22570] udevd[22570]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 644.308459][ T2152] loop4: detected capacity change from 0 to 128 [ 644.317654][T22570] udevd[22570]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 644.317664][T20180] udevd[20180]: symlink '../../loop3' '/dev/disk/by-diskseq/1618.tmp-b7:3' failed: Read-only file system [ 644.344164][T22570] udevd[22570]: symlink '../../loop6' '/dev/disk/by-diskseq/1619.tmp-b7:6' failed: Read-only file system [ 644.361500][T22570] udevd[22570]: symlink '../../loop6' '/dev/disk/by-diskseq/1619.tmp-b7:6' failed: Read-only file system [ 644.362894][ T2152] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 644.392762][ T2157] tipc: Invalid UDP bearer configuration [ 644.392780][ T2157] tipc: Enabling of bearer rejected, failed to enable media [ 644.398138][T20180] udevd[20180]: symlink '../../loop4' '/dev/disk/by-diskseq/1621.tmp-b7:4' failed: Read-only file system [ 644.399080][ T2157] netlink: 'syz.6.11121': attribute type 1 has an invalid length. [ 644.422789][ T2152] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.443700][ T2152] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 644.835121][ T2174] loop0: detected capacity change from 0 to 128 [ 644.854800][ T2174] FAULT_INJECTION: forcing a failure. [ 644.854800][ T2174] name failslab, interval 1, probability 0, space 0, times 0 [ 644.868615][ T2174] CPU: 1 UID: 0 PID: 2174 Comm: syz.0.11128 Tainted: G W syzkaller #0 PREEMPT(full) [ 644.868647][ T2174] Tainted: [W]=WARN [ 644.868654][ T2174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 644.868670][ T2174] Call Trace: [ 644.868738][ T2174] [ 644.868788][ T2174] __dump_stack+0x1d/0x30 [ 644.868822][ T2174] dump_stack_lvl+0x95/0xd0 [ 644.868852][ T2174] dump_stack+0x15/0x1b [ 644.868877][ T2174] should_fail_ex+0x263/0x280 [ 644.868926][ T2174] ? __pfx_fat_alloc_inode+0x10/0x10 [ 644.868961][ T2174] should_failslab+0x8c/0xb0 [ 644.868988][ T2174] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 644.869014][ T2174] ? fat_alloc_inode+0x38/0xc0 [ 644.869116][ T2174] ? __pfx_fat_alloc_inode+0x10/0x10 [ 644.869151][ T2174] fat_alloc_inode+0x38/0xc0 [ 644.869184][ T2174] ? __pfx_fat_alloc_inode+0x10/0x10 [ 644.869217][ T2174] alloc_inode+0x40/0x170 [ 644.869243][ T2174] new_inode+0x1d/0xe0 [ 644.869332][ T2174] fat_build_inode+0x169/0x290 [ 644.869395][ T2174] vfat_lookup+0x166/0x2e0 [ 644.869478][ T2174] lookup_one_qstr_excl+0xcb/0x250 [ 644.869514][ T2174] __start_renaming+0xff/0x2a0 [ 644.869555][ T2174] filename_renameat2+0x2d0/0x6e0 [ 644.869597][ T2174] __se_sys_renameat2+0x4f/0x1c0 [ 644.869701][ T2174] __x64_sys_renameat2+0x67/0x80 [ 644.869725][ T2174] x64_sys_call+0x2a12/0x3020 [ 644.869786][ T2174] do_syscall_64+0x12c/0x370 [ 644.869825][ T2174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.869863][ T2174] RIP: 0033:0x7ff47c9ac629 [ 644.869883][ T2174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.869908][ T2174] RSP: 002b:00007ff47b3ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 644.869932][ T2174] RAX: ffffffffffffffda RBX: 00007ff47cc25fa0 RCX: 00007ff47c9ac629 [ 644.869985][ T2174] RDX: ffffffffffffff9c RSI: 0000200000000280 RDI: ffffffffffffff9c [ 644.870002][ T2174] RBP: 00007ff47b3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 644.870025][ T2174] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 644.870112][ T2174] R13: 00007ff47cc26038 R14: 00007ff47cc25fa0 R15: 00007ffc6c824bb8 [ 644.870137][ T2174] [ 645.109774][T27020] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 645.212103][ T2184] loop4: detected capacity change from 0 to 512 [ 645.321311][ T2184] loop4: detected capacity change from 0 to 8192 [ 645.403150][ T2192] loop6: detected capacity change from 0 to 256 [ 645.410933][ T2192] vfat: Unknown parameter '@' [ 645.421914][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 645.421933][ T28] audit: type=1400 audit(2000000544.300:10847): avc: denied { override_creds } for pid=2190 comm="syz.6.11135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 645.532828][T20180] loop4: p1 p3 p4 [ 645.536804][T20180] loop4: p1 start 16777216 is beyond EOD, truncated [ 645.545299][T20180] loop4: p4 start 16777223 is beyond EOD, truncated [ 645.571556][ T2184] loop4: p1 p3 p4 [ 645.576574][ T2184] loop4: p1 start 16777216 is beyond EOD, truncated [ 645.584892][ T2184] loop4: p4 start 16777223 is beyond EOD, truncated [ 645.659442][ T2201] sctp: [Deprecated]: syz.6.11136 (pid 2201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.659442][ T2201] Use struct sctp_sack_info instead [ 645.698845][ T28] audit: type=1400 audit(2000000544.600:10848): avc: denied { setcurrent } for pid=2200 comm="syz.6.11136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 645.758129][ T28] audit: type=1401 audit(2000000544.600:10849): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 645.795636][ T28] audit: type=1400 audit(2000000544.700:10850): avc: denied { create } for pid=2206 comm="syz.3.11139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 646.026997][ T28] audit: type=1400 audit(2000000544.930:10851): avc: denied { unmount } for pid=27261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 646.131300][ T2214] loop6: detected capacity change from 0 to 128 [ 646.138756][ T2214] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615' [ 646.206069][ T2215] netlink: 'syz.6.11140': attribute type 3 has an invalid length. [ 646.213993][ T2215] __nla_validate_parse: 4 callbacks suppressed [ 646.214006][ T2215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11140'. [ 646.236226][ T28] audit: type=1400 audit(2000000545.130:10852): avc: denied { write } for pid=2208 comm="syz.6.11140" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 646.607849][ T2221] FAULT_INJECTION: forcing a failure. [ 646.607849][ T2221] name failslab, interval 1, probability 0, space 0, times 0 [ 646.650608][ T2221] CPU: 1 UID: 0 PID: 2221 Comm: syz.4.11143 Tainted: G W syzkaller #0 PREEMPT(full) [ 646.650641][ T2221] Tainted: [W]=WARN [ 646.650681][ T2221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.650697][ T2221] Call Trace: [ 646.650704][ T2221] [ 646.650711][ T2221] __dump_stack+0x1d/0x30 [ 646.650740][ T2221] dump_stack_lvl+0x95/0xd0 [ 646.650776][ T2221] dump_stack+0x15/0x1b [ 646.650803][ T2221] should_fail_ex+0x263/0x280 [ 646.650874][ T2221] ? proc_self_get_link+0x96/0x110 [ 646.650910][ T2221] should_failslab+0x8c/0xb0 [ 646.650965][ T2221] __kmalloc_cache_noprof+0x5f/0x410 [ 646.650991][ T2221] ? __pfx_proc_self_get_link+0x10/0x10 [ 646.651017][ T2221] proc_self_get_link+0x96/0x110 [ 646.651083][ T2221] pick_link+0x514/0x8e0 [ 646.651116][ T2221] step_into_slowpath+0x36a/0x4c0 [ 646.651220][ T2221] link_path_walk+0x974/0xe30 [ 646.651290][ T2221] path_openat+0x1c6/0x2050 [ 646.651328][ T2221] ? _parse_integer_limit+0x170/0x190 [ 646.651377][ T2221] do_file_open+0x16c/0x290 [ 646.651476][ T2221] do_sys_openat2+0x94/0x130 [ 646.651509][ T2221] __x64_sys_openat+0xf2/0x120 [ 646.651536][ T2221] x64_sys_call+0x1e39/0x3020 [ 646.651562][ T2221] do_syscall_64+0x12c/0x370 [ 646.651617][ T2221] ? arch_exit_work+0x49/0x70 [ 646.651648][ T2221] ? arch_exit_to_user_mode_prepare+0xab/0xc0 [ 646.651761][ T2221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.651788][ T2221] RIP: 0033:0x7f04d78acece [ 646.651808][ T2221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 646.651858][ T2221] RSP: 002b:00007f04d6346ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 646.651880][ T2221] RAX: ffffffffffffffda RBX: 00007f04d63476c0 RCX: 00007f04d78acece [ 646.651906][ T2221] RDX: 0000000000000002 RSI: 00007f04d6346f90 RDI: ffffffffffffff9c [ 646.651924][ T2221] RBP: 00007f04d6347090 R08: 0000000000000000 R09: 0000000000000000 [ 646.651941][ T2221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.651956][ T2221] R13: 00007f04d7b66038 R14: 00007f04d7b65fa0 R15: 00007fff5a437d98 [ 646.652003][ T2221] [ 646.939371][ T2225] FAULT_INJECTION: forcing a failure. [ 646.939371][ T2225] name failslab, interval 1, probability 0, space 0, times 0 [ 646.952062][ T2225] CPU: 1 UID: 0 PID: 2225 Comm: syz.4.11145 Tainted: G W syzkaller #0 PREEMPT(full) [ 646.952099][ T2225] Tainted: [W]=WARN [ 646.952108][ T2225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.952122][ T2225] Call Trace: [ 646.952129][ T2225] [ 646.952137][ T2225] __dump_stack+0x1d/0x30 [ 646.952175][ T2225] dump_stack_lvl+0x95/0xd0 [ 646.952204][ T2225] dump_stack+0x15/0x1b [ 646.952234][ T2225] should_fail_ex+0x263/0x280 [ 646.952321][ T2225] should_failslab+0x8c/0xb0 [ 646.952343][ T2225] kmem_cache_alloc_bulk_noprof+0x62/0x4c0 [ 646.952374][ T2225] bpf_test_run_xdp_live+0xf16/0x1360 [ 646.952460][ T2225] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 646.952495][ T2225] ? 0xffffffffa0205240 [ 646.952513][ T2225] ? bpf_test_run_xdp_live+0x434/0x1360 [ 646.952559][ T2225] bpf_prog_test_run_xdp+0x57b/0xa10 [ 646.952666][ T2225] ? __rcu_read_unlock+0x4e/0x70 [ 646.952695][ T2225] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 646.952723][ T2225] bpf_prog_test_run+0x204/0x340 [ 646.952784][ T2225] __sys_bpf+0x52e/0x7e0 [ 646.952842][ T2225] __x64_sys_bpf+0x41/0x50 [ 646.952881][ T2225] x64_sys_call+0x10cb/0x3020 [ 646.952966][ T2225] do_syscall_64+0x12c/0x370 [ 646.953010][ T2225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.953038][ T2225] RIP: 0033:0x7f04d78ec629 [ 646.953065][ T2225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.953087][ T2225] RSP: 002b:00007f04d6347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.953109][ T2225] RAX: ffffffffffffffda RBX: 00007f04d7b65fa0 RCX: 00007f04d78ec629 [ 646.953188][ T2225] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 646.953204][ T2225] RBP: 00007f04d6347090 R08: 0000000000000000 R09: 0000000000000000 [ 646.953216][ T2225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 646.953236][ T2225] R13: 00007f04d7b66038 R14: 00007f04d7b65fa0 R15: 00007fff5a437d98 [ 646.953261][ T2225] [ 647.168512][T27514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.213461][ T2231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11148'. [ 647.219648][ T2232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11147'. [ 647.240852][ T2232] loop3: detected capacity change from 0 to 1764 [ 647.244315][ T28] audit: type=1400 audit(2000000546.120:10853): avc: denied { create } for pid=2230 comm="syz.3.11147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 647.262084][ T2232] ISOFS: Unable to identify CD-ROM format. [ 647.273073][ T2231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11148'. [ 647.333462][ T2237] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 647.340121][ T2237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 647.370724][ T28] audit: type=1400 audit(2000000546.120:10854): avc: denied { read } for pid=2230 comm="syz.3.11147" path="socket:[118689]" dev="sockfs" ino=118689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 647.372198][ T2237] vhci_hcd vhci_hcd.0: Device attached [ 647.403265][ T2242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11151'. [ 647.415829][ T2241] sctp: [Deprecated]: syz.0.11152 (pid 2241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 647.415829][ T2241] Use struct sctp_sack_info instead [ 647.487641][ T2248] loop6: detected capacity change from 0 to 128 [ 647.501317][ T2248] FAULT_INJECTION: forcing a failure. [ 647.501317][ T2248] name failslab, interval 1, probability 0, space 0, times 0 [ 647.514731][ T2248] CPU: 1 UID: 0 PID: 2248 Comm: syz.6.11154 Tainted: G W syzkaller #0 PREEMPT(full) [ 647.514781][ T2248] Tainted: [W]=WARN [ 647.514791][ T2248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.514807][ T2248] Call Trace: [ 647.514816][ T2248] [ 647.514825][ T2248] __dump_stack+0x1d/0x30 [ 647.514856][ T2248] dump_stack_lvl+0x95/0xd0 [ 647.514887][ T2248] dump_stack+0x15/0x1b [ 647.514930][ T2248] should_fail_ex+0x263/0x280 [ 647.514959][ T2248] should_failslab+0x8c/0xb0 [ 647.514986][ T2248] kmem_cache_alloc_noprof+0x66/0x400 [ 647.515015][ T2248] ? security_inode_alloc+0x37/0x100 [ 647.515102][ T2248] security_inode_alloc+0x37/0x100 [ 647.515127][ T2248] inode_init_always_gfp+0x4b7/0x500 [ 647.515151][ T2248] ? __pfx_fat_alloc_inode+0x10/0x10 [ 647.515184][ T2248] alloc_inode+0x58/0x170 [ 647.515212][ T2248] new_inode+0x1d/0xe0 [ 647.515270][ T2248] fat_build_inode+0x169/0x290 [ 647.515303][ T2248] vfat_lookup+0x166/0x2e0 [ 647.515410][ T2248] lookup_one_qstr_excl+0xcb/0x250 [ 647.515446][ T2248] __start_renaming+0xff/0x2a0 [ 647.515483][ T2248] filename_renameat2+0x2d0/0x6e0 [ 647.515596][ T2248] __se_sys_renameat2+0x4f/0x1c0 [ 647.515629][ T2248] __x64_sys_renameat2+0x67/0x80 [ 647.515712][ T2248] x64_sys_call+0x2a12/0x3020 [ 647.515748][ T2248] do_syscall_64+0x12c/0x370 [ 647.515801][ T2248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.515830][ T2248] RIP: 0033:0x7fbb76afc629 [ 647.515850][ T2248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.515874][ T2248] RSP: 002b:00007fbb75557028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 647.515899][ T2248] RAX: ffffffffffffffda RBX: 00007fbb76d75fa0 RCX: 00007fbb76afc629 [ 647.515957][ T2248] RDX: ffffffffffffff9c RSI: 0000200000000280 RDI: ffffffffffffff9c [ 647.515976][ T2248] RBP: 00007fbb75557090 R08: 0000000000000000 R09: 0000000000000000 [ 647.515993][ T2248] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 647.516009][ T2248] R13: 00007fbb76d76038 R14: 00007fbb76d75fa0 R15: 00007ffef9820418 [ 647.516033][ T2248] [ 647.850450][T21923] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 648.005621][T27261] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 648.043103][T27261] CPU: 1 UID: 0 PID: 27261 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 648.043221][T27261] Tainted: [W]=WARN [ 648.043231][T27261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.043248][T27261] Call Trace: [ 648.043256][T27261] [ 648.043266][T27261] __dump_stack+0x1d/0x30 [ 648.043301][T27261] dump_stack_lvl+0x95/0xd0 [ 648.043366][T27261] dump_stack+0x15/0x1b [ 648.043396][T27261] dump_header+0x80/0x240 [ 648.043482][T27261] oom_kill_process+0x295/0x350 [ 648.043647][T27261] out_of_memory+0x97d/0xb80 [ 648.043677][T27261] try_charge_memcg+0x62e/0xa10 [ 648.043751][T27261] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 648.043794][T27261] __swap_cache_prepare_and_add+0x386/0x530 [ 648.043851][T27261] swap_cache_alloc_folio+0xa2/0x120 [ 648.043890][T27261] swap_cluster_readahead+0x26e/0x3d0 [ 648.044016][T27261] swapin_readahead+0xde/0x840 [ 648.044050][T27261] ? __rcu_read_unlock+0x4e/0x70 [ 648.044078][T27261] ? __perf_event_task_sched_in+0xa65/0xad0 [ 648.044108][T27261] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 648.044160][T27261] ? __rcu_read_unlock+0x4e/0x70 [ 648.044184][T27261] ? swap_cache_get_folio+0x26f/0x280 [ 648.044217][T27261] do_swap_page+0x309/0x2210 [ 648.044255][T27261] ? __schedule+0x85a/0xd40 [ 648.044300][T27261] ? __rcu_read_lock+0x36/0x50 [ 648.044394][T27261] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 648.044430][T27261] handle_mm_fault+0xb40/0x3020 [ 648.044470][T27261] ? vma_start_read+0x1c7/0x2c0 [ 648.044507][T27261] do_user_addr_fault+0x62f/0x1050 [ 648.044613][T27261] ? trace_page_fault_user+0x1f/0xe0 [ 648.044654][T27261] exc_page_fault+0x62/0xa0 [ 648.044685][T27261] asm_exc_page_fault+0x26/0x30 [ 648.044715][T27261] RIP: 0033:0x7ff47c967817 [ 648.044739][T27261] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 648.044763][T27261] RSP: 002b:00007ffc6c824eb0 EFLAGS: 00010202 [ 648.044783][T27261] RAX: 0000000000000000 RBX: 000055555aabc500 RCX: 00007ff47c967817 [ 648.044801][T27261] RDX: 00007ffc6c824ef0 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.044816][T27261] RBP: 00007ffc6c824f5c R08: 0000000000000000 R09: 0000000000000000 [ 648.044829][T27261] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 648.044841][T27261] R13: 00000000000927c0 R14: 000000000009e300 R15: 00007ffc6c824fb0 [ 648.044869][T27261] [ 648.047924][T27261] memory: usage 307200kB, limit 307200kB, failcnt 752 [ 648.305798][T27261] memory+swap: usage 278192kB, limit 9007199254740988kB, failcnt 0 [ 648.332470][ T28] audit: type=1400 audit(2000000547.230:10855): avc: denied { getopt } for pid=2253 comm="syz.6.11155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 648.369501][ T2238] vhci_hcd: connection reset by peer [ 648.373507][T27261] kmem: usage 262152kB, limit 9007199254740988kB, failcnt 0 [ 648.383606][T19188] vhci_hcd vhci_hcd.1: stop threads [ 648.391932][T19188] vhci_hcd vhci_hcd.1: release socket [ 648.397925][T19188] vhci_hcd vhci_hcd.1: disconnect device [ 648.409105][ T28] audit: type=1400 audit(2000000547.240:10856): avc: denied { ioctl } for pid=2253 comm="syz.6.11155" path="socket:[118922]" dev="sockfs" ino=118922 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 648.452404][T27261] Memory cgroup stats for /syz0: [ 648.452628][T27261] cache 0 [ 648.460647][T27261] rss 24576 [ 648.504690][ T2268] netlink: 'syz.4.11158': attribute type 10 has an invalid length. [ 648.512794][ T2268] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11158'. [ 648.523119][T27261] shmem 0 [ 648.526595][T27261] mapped_file 1642496 [ 648.530709][T27261] dirty 0 [ 648.534188][ T2268] bond0: entered promiscuous mode [ 648.539284][ T2268] bond_slave_0: entered promiscuous mode [ 648.545836][T27261] writeback 0 [ 648.549231][T27261] workingset_refault_anon 248 [ 648.560613][ T2268] bond_slave_1: entered promiscuous mode [ 648.569095][ T2268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.575904][T27261] workingset_refault_file 1152 [ 648.601799][ T2268] bridge0: port 3(bond0) entered blocking state [ 648.609740][ T2268] bridge0: port 3(bond0) entered disabled state [ 648.617120][ T2268] bond0: entered allmulticast mode [ 648.622401][T27261] swap 380928 [ 648.625738][T27261] swapcached 1626112 [ 648.678467][ T2268] bond_slave_0: entered allmulticast mode [ 648.686401][ T2268] bond_slave_1: entered allmulticast mode [ 648.693033][ T2268] bond0: left allmulticast mode [ 648.698120][T27261] pgpgin 194854 [ 648.701716][ T2268] bond_slave_0: left allmulticast mode [ 648.702825][T27261] pgpgout 194846 [ 648.709844][ T2268] bond_slave_1: left allmulticast mode [ 648.716438][T27261] pgfault 195455 [ 648.728791][T27261] pgmajfault 172 [ 648.741916][T27261] inactive_anon 4096 [ 648.745980][T27261] active_anon 20480 [ 648.749848][T27261] inactive_file 8192 [ 648.784024][T27261] active_file 0 [ 648.792134][T27261] unevictable 0 [ 648.807890][T27261] hierarchical_memory_limit 314572800 [ 648.821876][T27261] hierarchical_memsw_limit 9223372036854771712 [ 648.840690][T27261] total_cache 0 [ 648.844350][T27261] total_rss 24576 [ 648.848040][T27261] total_shmem 0 [ 648.851634][T27261] total_mapped_file 1642496 [ 648.857066][T27261] total_dirty 0 [ 648.860608][T27261] total_writeback 0 [ 648.864627][T27261] total_workingset_refault_anon 248 [ 648.869920][T27261] total_workingset_refault_file 1152 [ 648.875546][T27261] total_swap 380928 [ 648.879432][T27261] total_swapcached 1626112 [ 648.888243][T27261] total_pgpgin 194854 [ 648.893901][T27261] total_pgpgout 194846 [ 648.898209][T27261] total_pgfault 195455 [ 648.902617][T27261] total_pgmajfault 172 [ 648.907036][T27261] total_inactive_anon 4096 [ 648.911609][T27261] total_active_anon 20480 [ 648.916407][T27261] total_inactive_file 8192 [ 648.921258][T27261] total_active_file 0 [ 648.926291][T27261] total_unevictable 0 [ 648.931456][T27261] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11153,pid=2245,uid=0 [ 648.948326][T27261] Memory cgroup out of memory: Killed process 2245 (syz.0.11153) total-vm:159828kB, anon-rss:1252kB, file-rss:22360kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 649.040550][ T2286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11163'. [ 649.068897][ T2290] loop0: detected capacity change from 0 to 128 [ 649.356475][T22570] udevd[22570]: symlink '../../loop1' '/dev/disk/by-diskseq/1633.tmp-b7:1' failed: Read-only file system [ 649.379240][T20180] udevd[20180]: symlink '../../loop6' '/dev/disk/by-diskseq/1637.tmp-b7:6' failed: Read-only file system [ 649.677653][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-diskseq/1630.tmp-b7:4' failed: Read-only file system [ 649.749529][ T2302] loop4: detected capacity change from 0 to 128 [ 649.776089][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-diskseq/1640.tmp-b7:4' failed: Read-only file system [ 649.793684][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 649.810153][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-uuid/1DE0-4C13.tmp-b7:4' failed: Read-only file system [ 649.826979][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-diskseq/1640.tmp-b7:4' failed: Read-only file system [ 649.841880][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 649.862288][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-uuid/1DE0-4C13.tmp-b7:4' failed: Read-only file system [ 650.011678][ T1752] udevd[1752]: symlink '../../loop6' '/dev/disk/by-diskseq/1637.tmp-b7:6' failed: Read-only file system [ 650.083107][ T2315] loop3: detected capacity change from 0 to 512 [ 650.122096][ T2315] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.11176: iget: bad i_size value: 38620345925642 [ 650.179329][ T2315] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 650.179583][ T2315] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.11176: couldn't read orphan inode 15 (err -117) [ 650.188900][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 650.188927][ C0] EXT4-fs (loop3): initial error at time 2000000549: ext4_orphan_get:1391: inode 15 [ 650.188964][ C0] EXT4-fs (loop3): last error at time 2000000549: ext4_orphan_get:1391: inode 15 [ 650.269019][ T2315] loop3: lost filesystem error report for type 5 error -117 [ 650.294092][ T2315] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.474978][ T2315] EXT4-fs (loop3): shut down requested (0) [ 650.561532][ T28] audit: type=1400 audit(2000000549.461:10857): avc: denied { connect } for pid=2314 comm="syz.3.11176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 650.587907][ T2330] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.11176: bg 0: block 5: invalid block bitmap [ 650.721020][ T28] audit: type=1400 audit(2000000549.621:10858): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 650.902228][ T28] audit: type=1400 audit(2000000549.621:10859): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.933406][ T28] audit: type=1400 audit(2000000549.621:10860): avc: denied { append } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 651.010879][ T28] audit: type=1400 audit(2000000549.621:10861): avc: denied { open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 651.043193][ T28] audit: type=1400 audit(2000000549.621:10862): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 651.070727][T29271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 651.698066][ T2366] loop0: detected capacity change from 0 to 1024 [ 651.707268][ T2366] EXT4-fs: inline encryption not supported [ 651.715839][ T2366] EXT4-fs: Ignoring removed nobh option [ 651.722092][ T2366] EXT4-fs: Ignoring removed bh option [ 651.723971][ T2367] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 651.772612][ T2366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.788716][ T3412] kernel read not supported for file /1128/net/ptype (pid: 3412 comm: kworker/1:6) [ 651.789161][ T28] audit: type=1400 audit(2000000550.691:10863): avc: denied { mounton } for pid=2362 comm="syz.0.11192" path="/419/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 651.828607][ T2366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11192'. [ 651.840547][ T2366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11192'. [ 651.881474][ T2366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11192'. [ 651.890791][T19188] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.963799][ T2366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11192'. [ 652.109111][ T2380] FAULT_INJECTION: forcing a failure. [ 652.109111][ T2380] name failslab, interval 1, probability 0, space 0, times 0 [ 652.138710][ T2380] CPU: 1 UID: 0 PID: 2380 Comm: syz.6.11198 Tainted: G W syzkaller #0 PREEMPT(full) [ 652.138807][ T2380] Tainted: [W]=WARN [ 652.138815][ T2380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 652.138831][ T2380] Call Trace: [ 652.138848][ T2380] [ 652.138858][ T2380] __dump_stack+0x1d/0x30 [ 652.138962][ T2380] dump_stack_lvl+0x95/0xd0 [ 652.139071][ T2380] dump_stack+0x15/0x1b [ 652.139168][ T2380] should_fail_ex+0x263/0x280 [ 652.139208][ T2380] ? __pfx_proc_alloc_inode+0x10/0x10 [ 652.139327][ T2380] should_failslab+0x8c/0xb0 [ 652.139351][ T2380] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 652.139379][ T2380] ? proc_alloc_inode+0x34/0x90 [ 652.139424][ T2380] ? __pfx_proc_alloc_inode+0x10/0x10 [ 652.139539][ T2380] proc_alloc_inode+0x34/0x90 [ 652.139577][ T2380] alloc_inode+0x40/0x170 [ 652.139679][ T2380] new_inode+0x1d/0xe0 [ 652.139735][ T2380] proc_pid_make_inode+0x1f/0xd0 [ 652.139833][ T2380] proc_pident_instantiate+0x44/0x180 [ 652.139885][ T2380] proc_pident_lookup+0x115/0x1a0 [ 652.139917][ T2380] proc_tgid_base_lookup+0x2b/0x40 [ 652.139946][ T2380] __lookup_slow+0x19d/0x260 [ 652.139978][ T2380] lookup_slow+0x3c/0x60 [ 652.140071][ T2380] link_path_walk+0x946/0xe30 [ 652.140114][ T2380] path_openat+0x1c6/0x2050 [ 652.140200][ T2380] ? _parse_integer_limit+0x170/0x190 [ 652.140256][ T2380] do_file_open+0x16c/0x290 [ 652.140302][ T2380] ? __pfx_kfree_link+0x10/0x10 [ 652.140335][ T2380] do_sys_openat2+0x94/0x130 [ 652.140453][ T2380] __x64_sys_openat+0xf2/0x120 [ 652.140489][ T2380] x64_sys_call+0x1e39/0x3020 [ 652.140580][ T2380] do_syscall_64+0x12c/0x370 [ 652.140620][ T2380] ? arch_exit_work+0x49/0x70 [ 652.140658][ T2380] ? arch_exit_to_user_mode_prepare+0xab/0xc0 [ 652.140732][ T2380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.140757][ T2380] RIP: 0033:0x7fbb76abcece [ 652.140819][ T2380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 652.140842][ T2380] RSP: 002b:00007fbb75556ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 652.140881][ T2380] RAX: ffffffffffffffda RBX: 00007fbb755576c0 RCX: 00007fbb76abcece [ 652.140899][ T2380] RDX: 0000000000000002 RSI: 00007fbb75556f90 RDI: ffffffffffffff9c [ 652.140916][ T2380] RBP: 00007fbb75557090 R08: 0000000000000000 R09: 0000000000000000 [ 652.141003][ T2380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.141024][ T2380] R13: 00007fbb76d76038 R14: 00007fbb76d75fa0 R15: 00007ffef9820418 [ 652.141051][ T2380] [ 652.421885][T19188] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.430265][T19188] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.443246][ T30] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.765192][T27261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.799670][ T2394] loop3: detected capacity change from 0 to 1024 [ 652.844773][ T2394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 652.869724][ T2394] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.917928][ T28] audit: type=1400 audit(2000000551.821:10864): avc: denied { setattr } for pid=2393 comm="syz.3.11204" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 652.943405][ T2394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11204'. [ 653.001854][T21923] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 653.024138][T29271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 653.066317][ T2420] loop1: detected capacity change from 0 to 128 [ 653.121325][ T2422] FAULT_INJECTION: forcing a failure. [ 653.121325][ T2422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.145214][ T2422] CPU: 1 UID: 0 PID: 2422 Comm: syz.3.11212 Tainted: G W syzkaller #0 PREEMPT(full) [ 653.145332][ T2422] Tainted: [W]=WARN [ 653.145339][ T2422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.145356][ T2422] Call Trace: [ 653.145364][ T2422] [ 653.145373][ T2422] __dump_stack+0x1d/0x30 [ 653.145411][ T2422] dump_stack_lvl+0x95/0xd0 [ 653.145437][ T2422] dump_stack+0x15/0x1b [ 653.145464][ T2422] should_fail_ex+0x263/0x280 [ 653.145503][ T2422] should_fail+0xb/0x20 [ 653.145527][ T2422] should_fail_usercopy+0x1a/0x20 [ 653.145555][ T2422] _copy_from_user+0x1c/0xb0 [ 653.145601][ T2422] kstrtouint_from_user+0x69/0xf0 [ 653.145632][ T2422] proc_fail_nth_write+0x50/0x160 [ 653.145723][ T2422] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 653.145763][ T2422] vfs_write+0x269/0x9f0 [ 653.145868][ T2422] ? __rcu_read_unlock+0x4e/0x70 [ 653.145896][ T2422] ? __fget_files+0x184/0x1c0 [ 653.145966][ T2422] ? mutex_lock+0x57/0x90 [ 653.146003][ T2422] ksys_write+0xdc/0x1a0 [ 653.146123][ T2422] __x64_sys_write+0x40/0x50 [ 653.146232][ T2422] x64_sys_call+0x27e1/0x3020 [ 653.146338][ T2422] do_syscall_64+0x12c/0x370 [ 653.146373][ T2422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.146397][ T2422] RIP: 0033:0x7f37fe9ecece [ 653.146432][ T2422] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 653.146456][ T2422] RSP: 002b:00007f37fd47efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 653.146482][ T2422] RAX: ffffffffffffffda RBX: 00007f37fd47f6c0 RCX: 00007f37fe9ecece [ 653.146509][ T2422] RDX: 0000000000000001 RSI: 00007f37fd47f0a0 RDI: 0000000000000004 [ 653.146525][ T2422] RBP: 00007f37fd47f090 R08: 0000000000000000 R09: 0000000000000000 [ 653.146539][ T2422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.146598][ T2422] R13: 00007f37feca6038 R14: 00007f37feca5fa0 R15: 00007ffeb28504a8 [ 653.146625][ T2422] [ 653.442372][ T2424] loop1: detected capacity change from 0 to 128 [ 653.450661][ T2429] wg1 speed is unknown, defaulting to 1000 [ 653.465532][ T2429] ip6_vti0 speed is unknown, defaulting to 1000 [ 654.369485][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-diskseq/1642.tmp-b7:4' failed: Read-only file system [ 654.387375][T20180] udevd[20180]: symlink '../../loop6' '/dev/disk/by-diskseq/1637.tmp-b7:6' failed: Read-only file system [ 654.401105][ T1752] udevd[1752]: symlink '../../loop3' '/dev/disk/by-diskseq/1647.tmp-b7:3' failed: Read-only file system [ 654.411696][ T28] audit: type=1400 audit(2000000553.271:10865): avc: denied { read } for pid=2449 comm="syz.6.11221" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 654.472952][T22570] udevd[22570]: symlink '../../loop1' '/dev/disk/by-diskseq/1651.tmp-b7:1' failed: Read-only file system [ 654.517997][ T28] audit: type=1400 audit(2000000553.271:10866): avc: denied { open } for pid=2449 comm="syz.6.11221" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 654.524788][T20180] udevd[20180]: symlink '../../loop6' '/dev/disk/by-diskseq/1637.tmp-b7:6' failed: Read-only file system [ 654.565760][ T2461] loop6: detected capacity change from 0 to 1024 [ 654.581786][ T2461] EXT4-fs: Ignoring removed nobh option [ 654.588650][ T2461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 654.594724][T22570] udevd[22570]: symlink '../../loop3' '/dev/disk/by-diskseq/1647.tmp-b7:3' failed: Read-only file system [ 654.601068][ T1752] udevd[1752]: symlink '../../loop4' '/dev/disk/by-diskseq/1642.tmp-b7:4' failed: Read-only file system [ 654.638281][ T2465] loop4: detected capacity change from 0 to 512 [ 654.651777][ T2461] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 654.664440][T20180] udevd[20180]: symlink '../../loop6' '/dev/disk/by-diskseq/1652.tmp-b7:6' failed: Read-only file system [ 654.683388][T20180] udevd[20180]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 654.701782][ T2461] EXT4-fs error (device loop6): __ext4_fill_super:5565: inode #2: comm syz.6.11224: iget: special inode unallocated [ 654.732629][ T2461] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 654.733044][ T2461] EXT4-fs (loop6): get root inode failed [ 654.740332][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-diskseq/1653.tmp-b7:4' failed: Read-only file system [ 654.742226][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 654.742242][ C0] EXT4-fs (loop6): initial error at time 2000000553: __ext4_fill_super:5565: inode 2 [ 654.742273][ C0] EXT4-fs (loop6): last error at time 2000000553: __ext4_fill_super:5565: inode 2 [ 654.761635][ T2461] EXT4-fs (loop6): mount failed [ 654.812954][ T2469] netlink: 'syz.1.11223': attribute type 3 has an invalid length. [ 654.821154][ T2465] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 654.861132][ T2456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2456 comm=syz.1.11223 [ 654.874543][ T2465] EXT4-fs (loop4): mount failed [ 654.882763][ T2475] loop6: detected capacity change from 0 to 128 [ 655.148308][ T2464] wg1: entered promiscuous mode [ 655.153588][ T2464] wg1: entered allmulticast mode [ 655.332609][ T2487] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11232'. [ 655.405002][ T2494] loop6: detected capacity change from 0 to 512 [ 655.525403][ T2494] loop6: detected capacity change from 0 to 8192 [ 655.582914][ T2494] loop6: p1 p3 p4 [ 655.589941][ T2494] loop6: p1 start 16777216 is beyond EOD, truncated [ 655.597693][ T2494] loop6: p4 start 16777223 is beyond EOD, truncated [ 655.612716][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 655.612731][ T28] audit: type=1400 audit(2000000554.521:10872): avc: denied { mount } for pid=2507 comm="syz.0.11241" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 655.667680][ T2508] wg1 speed is unknown, defaulting to 1000 [ 655.675281][ T2508] ip6_vti0 speed is unknown, defaulting to 1000 [ 655.703232][ T28] audit: type=1400 audit(2000000554.611:10873): avc: denied { ioctl } for pid=2507 comm="syz.0.11241" path="socket:[119270]" dev="sockfs" ino=119270 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 656.015489][ T2526] loop4: detected capacity change from 0 to 4096 [ 656.022364][ T2526] EXT4-fs: Ignoring removed bh option [ 656.027787][ T2526] EXT4-fs: Ignoring removed mblk_io_submit option [ 656.052321][ T2526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.425763][ T2532] loop1: detected capacity change from 0 to 128 [ 656.759651][ T2536] netlink: 'syz.0.11247': attribute type 16 has an invalid length. [ 656.775067][ T2538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=2538 comm=syz.0.11247 [ 656.789127][ T2538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=2538 comm=syz.0.11247 [ 656.805594][ T2538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=2538 comm=syz.0.11247 [ 656.819088][ T2538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=2538 comm=syz.0.11247 [ 656.833979][ T2538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=2538 comm=syz.0.11247 [ 656.848465][ T2538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=2538 comm=syz.0.11247 [ 656.861979][ T2538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=2538 comm=syz.0.11247 [ 656.875657][ T2538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=2538 comm=syz.0.11247 [ 656.889378][ T2538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=2538 comm=syz.0.11247 [ 656.934853][ T2536] netlink: 'syz.0.11247': attribute type 16 has an invalid length. [ 656.984064][ T2536] netlink: 'syz.0.11247': attribute type 16 has an invalid length. [ 657.074203][ T2536] netlink: 'syz.0.11247': attribute type 16 has an invalid length. [ 657.148911][ T2536] netlink: 'syz.0.11247': attribute type 16 has an invalid length. [ 657.203655][ T2536] netlink: 'syz.0.11247': attribute type 16 has an invalid length. [ 657.212649][ T2543] FAULT_INJECTION: forcing a failure. [ 657.212649][ T2543] name failslab, interval 1, probability 0, space 0, times 0 [ 657.225884][ T2543] CPU: 0 UID: 0 PID: 2543 Comm: syz.6.11249 Tainted: G W syzkaller #0 PREEMPT(full) [ 657.226003][ T2543] Tainted: [W]=WARN [ 657.226011][ T2543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 657.226026][ T2543] Call Trace: [ 657.226034][ T2543] [ 657.226044][ T2543] __dump_stack+0x1d/0x30 [ 657.226148][ T2543] dump_stack_lvl+0x95/0xd0 [ 657.226185][ T2543] dump_stack+0x15/0x1b [ 657.226209][ T2543] should_fail_ex+0x263/0x280 [ 657.226233][ T2543] should_failslab+0x8c/0xb0 [ 657.226279][ T2543] kmem_cache_alloc_bulk_noprof+0x62/0x4c0 [ 657.226311][ T2543] bpf_test_run_xdp_live+0xf16/0x1360 [ 657.226364][ T2543] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 657.226397][ T2543] ? 0xffffffffa0205240 [ 657.226413][ T2543] ? bpf_test_run_xdp_live+0x434/0x1360 [ 657.226529][ T2543] bpf_prog_test_run_xdp+0x57b/0xa10 [ 657.226559][ T2543] ? __rcu_read_unlock+0x4e/0x70 [ 657.226589][ T2543] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 657.226616][ T2543] bpf_prog_test_run+0x204/0x340 [ 657.226709][ T2543] __sys_bpf+0x52e/0x7e0 [ 657.226767][ T2543] __x64_sys_bpf+0x41/0x50 [ 657.226877][ T2543] x64_sys_call+0x10cb/0x3020 [ 657.226906][ T2543] do_syscall_64+0x12c/0x370 [ 657.226951][ T2543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.227042][ T2543] RIP: 0033:0x7fbb76afc629 [ 657.227060][ T2543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.227081][ T2543] RSP: 002b:00007fbb75557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 657.227104][ T2543] RAX: ffffffffffffffda RBX: 00007fbb76d75fa0 RCX: 00007fbb76afc629 [ 657.227126][ T2543] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 657.227141][ T2543] RBP: 00007fbb75557090 R08: 0000000000000000 R09: 0000000000000000 [ 657.227224][ T2543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 657.227238][ T2543] R13: 00007fbb76d76038 R14: 00007fbb76d75fa0 R15: 00007ffef9820418 [ 657.227260][ T2543] [ 657.349298][ T2536] netlink: 'syz.0.11247': attribute type 16 has an invalid length. [ 657.451542][ T2536] netlink: 'syz.0.11247': attribute type 16 has an invalid length. [ 657.459848][ T2536] netlink: 'syz.0.11247': attribute type 16 has an invalid length. [ 657.527186][ T2551] loop1: detected capacity change from 0 to 512 [ 657.548319][ T2554] loop6: detected capacity change from 0 to 512 [ 657.580612][ T2554] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.11254: iget: bad i_size value: 38620345925642 [ 657.608610][ T2554] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 657.609656][ T2554] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.11254: couldn't read orphan inode 15 (err -117) [ 657.618900][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 657.618916][ C1] EXT4-fs (loop6): initial error at time 2000000556: ext4_orphan_get:1391: inode 15 [ 657.618944][ C1] EXT4-fs (loop6): last error at time 2000000556: ext4_orphan_get:1391: inode 15 [ 657.671598][ T2554] loop6: lost filesystem error report for type 5 error -117 [ 657.678651][ T2554] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.701013][ T2554] EXT4-fs (loop6): shut down requested (0) [ 657.719661][ T2551] loop1: detected capacity change from 0 to 8192 [ 657.766564][T28315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 657.786329][T22570] loop1: p1 p3 p4 [ 657.790484][T22570] loop1: p1 start 16777216 is beyond EOD, truncated [ 657.819447][T22570] loop1: p4 start 16777223 is beyond EOD, truncated [ 657.839727][ T2551] loop1: p1 p3 p4 [ 657.844415][ T2551] loop1: p1 start 16777216 is beyond EOD, truncated [ 657.868131][ T2551] loop1: p4 start 16777223 is beyond EOD, truncated [ 657.939388][ T2571] EXT4-fs: Ignoring removed nobh option [ 658.017394][ T2571] EXT4-fs (loop0): 1 orphan inode deleted [ 658.046001][ T2571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.356066][ T2586] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11263'. [ 658.375013][ T2586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11263'. [ 658.394157][ T2586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11263'. [ 658.453138][ T2590] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.11266: iget: bad i_size value: 38620345925642 [ 658.469041][ T2590] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 658.469280][ T2590] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.11266: couldn't read orphan inode 15 (err -117) [ 658.478502][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 658.478525][ C1] EXT4-fs (loop6): initial error at time 2000000557: ext4_orphan_get:1391: inode 15 [ 658.478568][ C1] EXT4-fs (loop6): last error at time 2000000557: ext4_orphan_get:1391: inode 15 [ 658.485130][T27261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.491385][ T2590] loop6: lost filesystem error report for type 5 error -117 [ 658.492770][ T2590] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.549464][ T2590] EXT4-fs (loop6): shut down requested (0) [ 658.601976][ T2596] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.11266: bg 0: block 5: invalid block bitmap [ 658.845193][T28315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 658.981773][T27020] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.382868][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-diskseq/1675.tmp-b7:4' failed: Read-only file system [ 659.440380][T22570] udevd[22570]: symlink '../../loop6' '/dev/disk/by-diskseq/1674.tmp-b7:6' failed: Read-only file system [ 659.455935][T20180] udevd[20180]: symlink '../../loop1' '/dev/disk/by-diskseq/1670.tmp-b7:1' failed: Read-only file system [ 659.496471][T22570] udevd[22570]: symlink '../../loop6' '/dev/disk/by-diskseq/1674.tmp-b7:6' failed: Read-only file system [ 659.544154][T22570] udevd[22570]: symlink '../../loop3' '/dev/disk/by-diskseq/1647.tmp-b7:3' failed: Read-only file system [ 659.555975][ T2627] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 659.605337][ T2629] set_capacity_and_notify: 2 callbacks suppressed [ 659.605358][ T2629] loop3: detected capacity change from 0 to 2048 [ 659.711926][T22570] loop3: p1 p2 p3 [ 659.718282][T22570] loop3: p2 size 16842752 extends beyond EOD, truncated [ 659.753373][T22570] loop3: p3 start 8388352 is beyond EOD, truncated [ 659.772329][T20180] udevd[20180]: symlink '../../loop6' '/dev/disk/by-diskseq/1674.tmp-b7:6' failed: Read-only file system [ 659.787265][T22570] udevd[22570]: symlink '../../loop3' '/dev/disk/by-diskseq/1676.tmp-b7:3' failed: Read-only file system [ 659.812233][ T2629] loop3: p1 p2 p3 [ 659.817004][ T2629] loop3: p2 size 16842752 extends beyond EOD, truncated [ 659.825092][ T2629] loop3: p3 start 8388352 is beyond EOD, truncated [ 659.834115][ T3001] loop3: p1 p2 p3 [ 659.838543][ T3001] loop3: p2 size 16842752 extends beyond EOD, truncated [ 659.850984][ T3001] loop3: p3 start 8388352 is beyond EOD, truncated [ 659.885297][T22570] udevd[22570]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 659.902778][T20180] udevd[20180]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 659.919424][T22570] udevd[22570]: symlink '../../loop3' '/dev/disk/by-diskseq/1676.tmp-b7:3' failed: Read-only file system [ 660.282442][ T2644] FAULT_INJECTION: forcing a failure. [ 660.282442][ T2644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.295771][ T2644] CPU: 1 UID: 0 PID: 2644 Comm: syz.1.11285 Tainted: G W syzkaller #0 PREEMPT(full) [ 660.295813][ T2644] Tainted: [W]=WARN [ 660.295822][ T2644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.295863][ T2644] Call Trace: [ 660.295872][ T2644] [ 660.295882][ T2644] __dump_stack+0x1d/0x30 [ 660.295918][ T2644] dump_stack_lvl+0x95/0xd0 [ 660.295951][ T2644] dump_stack+0x15/0x1b [ 660.296096][ T2644] should_fail_ex+0x263/0x280 [ 660.296197][ T2644] should_fail+0xb/0x20 [ 660.296215][ T2644] should_fail_usercopy+0x1a/0x20 [ 660.296238][ T2644] _copy_from_iter+0xcf/0xea0 [ 660.296264][ T2644] ? percpu_counter_add_batch+0xb6/0x130 [ 660.296372][ T2644] ? mm_trace_rss_stat+0x1d/0xf0 [ 660.296403][ T2644] ? __rcu_read_unlock+0x33/0x70 [ 660.296431][ T2644] ? filemap_map_pages+0xc98/0xf10 [ 660.296485][ T2644] ? __rcu_read_unlock+0x4e/0x70 [ 660.296573][ T2644] copy_page_from_iter+0x178/0x2a0 [ 660.296605][ T2644] ? anon_pipe_write+0x11/0xb30 [ 660.296633][ T2644] anon_pipe_write+0x53f/0xb30 [ 660.296666][ T2644] ? anon_pipe_write+0x11/0xb30 [ 660.296709][ T2644] ? __pfx_anon_pipe_write+0x10/0x10 [ 660.296736][ T2644] vfs_write+0x5a6/0x9f0 [ 660.296862][ T2644] ksys_write+0xdc/0x1a0 [ 660.296896][ T2644] __x64_sys_write+0x40/0x50 [ 660.296938][ T2644] x64_sys_call+0x27e1/0x3020 [ 660.297006][ T2644] do_syscall_64+0x12c/0x370 [ 660.297040][ T2644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.297071][ T2644] RIP: 0033:0x7fa0089fcece [ 660.297091][ T2644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 660.297117][ T2644] RSP: 002b:00007fa007496ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 660.297143][ T2644] RAX: ffffffffffffffda RBX: 00007fa0074976c0 RCX: 00007fa0089fcece [ 660.297242][ T2644] RDX: 0000000000000029 RSI: 00007fa007496e90 RDI: 0000000000000002 [ 660.297261][ T2644] RBP: 00007fa007496e90 R08: 0000000000000000 R09: 0000000000000000 [ 660.297281][ T2644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 660.297334][ T2644] R13: 00007fa008c8b7a0 R14: 00007fa008c824a0 R15: 0000000000000001 [ 660.297398][ T2644] [ 660.616287][ T2655] loop4: detected capacity change from 0 to 128 [ 660.883033][ T28] audit: type=1400 audit(2000000559.703:10874): avc: denied { create } for pid=2663 comm="syz.1.11292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 660.966530][ T28] audit: type=1400 audit(2000000559.703:10875): avc: denied { bind } for pid=2663 comm="syz.1.11292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 661.029002][ T28] audit: type=1400 audit(2000000559.703:10876): avc: denied { listen } for pid=2663 comm="syz.1.11292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 661.071295][ T2674] loop3: detected capacity change from 0 to 512 [ 661.115431][ T28] audit: type=1400 audit(2000000559.703:10877): avc: denied { connect } for pid=2663 comm="syz.1.11292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 661.161155][ T28] audit: type=1400 audit(2000000559.750:10878): avc: denied { unmount } for pid=28315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 661.185162][ T2674] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 661.195070][ T2674] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 661.226773][ T2675] loop1: detected capacity change from 0 to 1024 [ 661.251058][ T2675] EXT4-fs: Ignoring removed orlov option [ 661.326521][ T2675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.400719][ T2674] FAT-fs (loop3): FAT read failed (blocknr 128) [ 661.497746][ T28] audit: type=1400 audit(2000000560.283:10879): avc: denied { append } for pid=2671 comm="syz.1.11298" path="/427/file1/memory.events.local" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 661.604996][ T28] audit: type=1400 audit(2000000560.283:10880): avc: denied { map } for pid=2671 comm="syz.1.11298" path="/427/file1/memory.events.local" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 661.631148][ T28] audit: type=1400 audit(2000000560.386:10881): avc: denied { mounton } for pid=2688 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 661.688834][ T2693] loop3: detected capacity change from 0 to 512 [ 661.750199][ T2693] loop3: detected capacity change from 0 to 8192 [ 661.900294][ T2688] wg1 speed is unknown, defaulting to 1000 [ 661.909645][ T2688] ip6_vti0 speed is unknown, defaulting to 1000 [ 662.051758][ T2688] chnl_net:caif_netlink_parms(): no params data found [ 662.101798][ T2688] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.109142][ T2688] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.116738][ T2688] bridge_slave_0: entered allmulticast mode [ 662.123758][ T2688] bridge_slave_0: entered promiscuous mode [ 662.132650][ T2688] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.139918][ T2688] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.147580][ T2688] bridge_slave_1: entered allmulticast mode [ 662.154650][ T2688] bridge_slave_1: entered promiscuous mode [ 662.179103][ T2688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.190620][ T2688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.214162][ T2688] team0: Port device team_slave_0 added [ 662.221596][ T2688] team0: Port device team_slave_1 added [ 662.240511][ T2688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.247683][ T2688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.274253][ T2688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.288019][ T2688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.295282][ T2688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.321567][ T2688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.568861][T27514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.595432][T22570] loop3: p1 p3 p4 [ 662.599326][T22570] loop3: p1 start 16777216 is beyond EOD, truncated [ 662.622803][T22570] loop3: p4 start 16777223 is beyond EOD, truncated [ 662.632736][ T2693] loop3: p1 p3 p4 [ 662.639891][ T2693] loop3: p1 start 16777216 is beyond EOD, truncated [ 662.656283][ T2693] loop3: p4 start 16777223 is beyond EOD, truncated [ 662.663914][ T2688] hsr_slave_0: entered promiscuous mode [ 662.677062][ T2688] hsr_slave_1: entered promiscuous mode [ 662.693130][ T2688] debugfs: 'hsr0' already exists in 'hsr' [ 662.710383][ T2688] Cannot create hsr debugfs directory [ 662.722046][ T2709] ipip3: entered promiscuous mode [ 662.835131][ T28] audit: type=1400 audit(2000000561.537:10882): avc: denied { bind } for pid=2727 comm="syz.4.11313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 662.895102][ T28] audit: type=1326 audit(2000000561.556:10883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2727 comm="syz.4.11313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d78ec629 code=0x50000 [ 662.925631][ T2688] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.138313][ T2688] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.217164][ T2688] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.268988][ T2688] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.350592][ T2688] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 663.371278][ T2688] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 663.385934][ T2688] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 663.406210][ T2688] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 663.484303][ T2688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.508323][ T2688] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.543880][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.551300][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.569929][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.577066][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.832492][ T2688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.965587][ T2775] loop1: detected capacity change from 0 to 512 [ 664.081478][ T2775] loop1: detected capacity change from 0 to 8192 [ 664.086506][ T2688] veth0_vlan: entered promiscuous mode [ 664.108313][ T2688] veth1_vlan: entered promiscuous mode [ 664.119594][ T2775] loop1: p1 p3 p4 [ 664.126024][ T2775] loop1: p1 start 16777216 is beyond EOD, truncated [ 664.146116][ T2775] loop1: p4 start 16777223 is beyond EOD, truncated [ 664.161084][ T2688] veth0_macvtap: entered promiscuous mode [ 664.195075][ T2688] veth1_macvtap: entered promiscuous mode [ 664.225152][ T2688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.257238][ T2688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.278127][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.287771][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.301331][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.310188][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.483902][ T2794] netlink: 14 bytes leftover after parsing attributes in process `syz.8.11326'. [ 665.340043][ T2794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.365083][T22570] udevd[22570]: symlink '../../loop1' '/dev/disk/by-diskseq/1691.tmp-b7:1' failed: Read-only file system [ 665.392754][T20180] udevd[20180]: symlink '../../loop0' '/dev/disk/by-diskseq/1673.tmp-b7:0' failed: Read-only file system [ 665.420192][ T2794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.452497][ T2794] bond0 (unregistering): Released all slaves [ 665.455291][T22570] udevd[22570]: symlink '../../loop1' '/dev/disk/by-diskseq/1691.tmp-b7:1' failed: Read-only file system [ 665.478694][ T2801] loop1: detected capacity change from 0 to 128 [ 665.485941][ T2801] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 665.506632][T20180] udevd[20180]: symlink '../../loop0' '/dev/disk/by-diskseq/1673.tmp-b7:0' failed: Read-only file system [ 665.529414][ T2801] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 665.574168][T22570] udevd[22570]: symlink '../../loop1' '/dev/disk/by-diskseq/1692.tmp-b7:1' failed: Read-only file system [ 665.650481][T22570] udevd[22570]: symlink '../../loop1' '/dev/disk/by-diskseq/1692.tmp-b7:1' failed: Read-only file system [ 665.683816][T22570] udevd[22570]: symlink '../../loop1' '/dev/disk/by-diskseq/1692.tmp-b7:1' failed: Read-only file system [ 665.717009][T22570] udevd[22570]: symlink '../../loop1' '/dev/disk/by-diskseq/1693.tmp-b7:1' failed: Read-only file system [ 665.832469][T22570] udevd[22570]: symlink '../../loop0' '/dev/disk/by-diskseq/1673.tmp-b7:0' failed: Read-only file system [ 665.868736][T22570] udevd[22570]: symlink '../../loop0' '/dev/disk/by-diskseq/1673.tmp-b7:0' failed: Read-only file system [ 666.056287][ T2818] loop0: detected capacity change from 0 to 512 [ 666.119078][ T2824] loop1: detected capacity change from 0 to 512 [ 666.126418][ T2818] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.11334: iget: bad i_size value: 38620345925642 [ 666.146924][ T2818] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 666.147140][ T2818] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.11334: couldn't read orphan inode 15 (err -117) [ 666.156457][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 666.156478][ C1] EXT4-fs (loop0): initial error at time 2000000564: ext4_orphan_get:1391: inode 15 [ 666.156514][ C1] EXT4-fs (loop0): last error at time 2000000564: ext4_orphan_get:1391: inode 15 [ 666.205872][ T2818] loop0: lost filesystem error report for type 5 error -117 [ 666.207716][ T2824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.228850][ T2824] ext4 filesystem being mounted at /441/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.240795][ T2818] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.256209][ T2818] EXT4-fs (loop0): shut down requested (0) [ 666.262618][ T2824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11337'. [ 666.276425][ T2824] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 666.349481][T27261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 666.416934][T27514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.453788][ T28] kauditd_printk_skb: 10772 callbacks suppressed [ 666.453805][ T28] audit: type=1326 audit(2000000564.923:21656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.0.11339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c9ac629 code=0x7ffc0000 [ 666.487267][ T28] audit: type=1326 audit(2000000564.923:21657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.0.11339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c9ac629 code=0x7ffc0000 [ 666.519920][ T28] audit: type=1326 audit(2000000564.970:21658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.0.11339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff47c9ac629 code=0x7ffc0000 [ 666.555778][ T28] audit: type=1326 audit(2000000564.970:21659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.0.11339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff47c9ac392 code=0x7ffc0000 [ 666.589362][ T28] audit: type=1326 audit(2000000564.970:21660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.0.11339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff47c9ac392 code=0x7ffc0000 [ 666.618111][ T28] audit: type=1326 audit(2000000564.970:21661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.0.11339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c9ac629 code=0x7ffc0000 [ 666.649833][ T2839] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11341'. [ 666.666657][ T28] audit: type=1326 audit(2000000564.970:21662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.0.11339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c9ac629 code=0x7ffc0000 [ 666.727810][ T28] audit: type=1326 audit(2000000564.979:21663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.0.11339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff47c9ac629 code=0x7ffc0000 [ 666.766298][ T2841] loop0: detected capacity change from 0 to 1024 [ 666.775156][ T28] audit: type=1326 audit(2000000564.979:21664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.0.11339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c9ac629 code=0x7ffc0000 [ 666.817163][ T2841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.832464][ T28] audit: type=1326 audit(2000000564.979:21665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.0.11339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff47c9ac629 code=0x7ffc0000 [ 666.864088][ T2841] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11342'. [ 666.918854][ T2841] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 666.935907][ T2845] loop1: detected capacity change from 0 to 2048 [ 666.965941][ T2845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.037334][ T2850] loop4: detected capacity change from 0 to 128 [ 667.110152][T19188] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 667.143917][T19188] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 667.143971][T19188] EXT4-fs (loop1): This should not happen!! Data will be lost [ 667.143971][T19188] [ 667.143988][T19188] EXT4-fs (loop1): Total free blocks count 0 [ 667.144053][T19188] EXT4-fs (loop1): Free/Dirty block details [ 667.144064][T19188] EXT4-fs (loop1): free_blocks=2415919504 [ 667.144091][T19188] EXT4-fs (loop1): dirty_blocks=16 [ 667.144106][T19188] EXT4-fs (loop1): Block reservation details [ 667.144121][T19188] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 667.205400][ T2851] wg1 speed is unknown, defaulting to 1000 [ 667.205768][ T2851] ip6_vti0 speed is unknown, defaulting to 1000 [ 667.303506][T27261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.444702][ T2859] x_tables: duplicate underflow at hook 3 [ 667.450041][ T2859] loop3: detected capacity change from 0 to 128 [ 668.213968][ T2868] netlink: 228 bytes leftover after parsing attributes in process `syz.3.11350'. [ 668.358014][ T2878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.369757][ T2878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.620276][T27514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.711684][ T2890] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 668.798787][ T2893] usb usb8: usbfs: process 2893 (syz.4.11360) did not claim interface 0 before use [ 668.864076][ T2899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11363'. [ 668.952620][ T2899] loop1: detected capacity change from 0 to 1024 [ 669.020130][ T2899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.035437][ T2914] loop8: detected capacity change from 0 to 128 [ 669.042937][ T2914] vfat: Unknown parameter '' [ 669.462496][ T2933] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11377'. [ 669.570951][ T2933] loop8: detected capacity change from 0 to 512 [ 669.589876][ T2933] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.11377: inode has both inline data and extents flags [ 669.651321][ T2938] 9p: Bad value for 'rfdno' [ 669.655948][ T2933] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 669.656164][ T2933] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.11377: couldn't read orphan inode 15 (err -117) [ 669.665384][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 669.665411][ C1] EXT4-fs (loop8): initial error at time 2000000567: ext4_orphan_get:1391: inode 15 [ 669.665448][ C1] EXT4-fs (loop8): last error at time 2000000567: ext4_orphan_get:1391: inode 15 [ 669.796441][ T2933] loop8: lost filesystem error report for type 5 error -117 [ 669.797318][ T2933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.848547][ T2942] syzkaller0: entered promiscuous mode [ 669.857024][ T2942] syzkaller0: entered allmulticast mode [ 670.590757][ T2688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.604472][T27514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.639470][ T2965] FAULT_INJECTION: forcing a failure. [ 670.639470][ T2965] name failslab, interval 1, probability 0, space 0, times 0 [ 670.667104][ T2965] CPU: 1 UID: 0 PID: 2965 Comm: syz.4.11389 Tainted: G W syzkaller #0 PREEMPT(full) [ 670.667141][ T2965] Tainted: [W]=WARN [ 670.667150][ T2965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 670.667226][ T2965] Call Trace: [ 670.667232][ T2965] [ 670.667239][ T2965] __dump_stack+0x1d/0x30 [ 670.667341][ T2965] dump_stack_lvl+0x95/0xd0 [ 670.667409][ T2965] dump_stack+0x15/0x1b [ 670.667517][ T2965] should_fail_ex+0x263/0x280 [ 670.667546][ T2965] should_failslab+0x8c/0xb0 [ 670.667571][ T2965] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 670.667603][ T2965] ? alloc_inode+0x9a/0x170 [ 670.667631][ T2965] alloc_inode+0x9a/0x170 [ 670.667657][ T2965] path_from_stashed+0xec/0x330 [ 670.667710][ T2965] ? __pfx_proc_ns_get_link+0x10/0x10 [ 670.667741][ T2965] ns_get_path+0x62/0x80 [ 670.667782][ T2965] proc_ns_get_link+0x80/0x160 [ 670.667832][ T2965] pick_link+0x4b1/0x8e0 [ 670.667892][ T2965] step_into_slowpath+0x36a/0x4c0 [ 670.667931][ T2965] path_openat+0x15d0/0x2050 [ 670.668010][ T2965] do_file_open+0x16c/0x290 [ 670.668091][ T2965] do_sys_openat2+0x94/0x130 [ 670.668193][ T2965] __x64_sys_openat+0xf2/0x120 [ 670.668221][ T2965] x64_sys_call+0x1e39/0x3020 [ 670.668253][ T2965] do_syscall_64+0x12c/0x370 [ 670.668295][ T2965] ? arch_exit_work+0x49/0x70 [ 670.668388][ T2965] ? arch_exit_to_user_mode_prepare+0xab/0xc0 [ 670.668495][ T2965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.668596][ T2965] RIP: 0033:0x7f04d78acece [ 670.668629][ T2965] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 670.668652][ T2965] RSP: 002b:00007f04d6346ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 670.668678][ T2965] RAX: ffffffffffffffda RBX: 00007f04d63476c0 RCX: 00007f04d78acece [ 670.668696][ T2965] RDX: 0000000000000002 RSI: 00007f04d6346f90 RDI: ffffffffffffff9c [ 670.668715][ T2965] RBP: 00007f04d6347090 R08: 0000000000000000 R09: 0000000000000000 [ 670.668731][ T2965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 670.668780][ T2965] R13: 00007f04d7b66038 R14: 00007f04d7b65fa0 R15: 00007fff5a437d98 [ 670.668804][ T2965] [ 670.925653][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-diskseq/1704.tmp-b7:4' failed: Read-only file system [ 670.952496][T20180] udevd[20180]: symlink '../../loop0' '/dev/disk/by-diskseq/1703.tmp-b7:0' failed: Read-only file system [ 670.991447][ T2981] validate_nla: 24 callbacks suppressed [ 670.991477][ T2981] netlink: 'syz.8.11396': attribute type 12 has an invalid length. [ 671.008024][ T2981] netlink: 'syz.8.11396': attribute type 29 has an invalid length. [ 671.012378][ T1752] udevd[1752]: symlink '../../loop8' '/dev/disk/by-diskseq/1710.tmp-b7:8' failed: Read-only file system [ 671.018217][ T2981] netlink: 148 bytes leftover after parsing attributes in process `syz.8.11396'. [ 671.037244][ T2985] x_tables: duplicate underflow at hook 1 [ 671.046586][T22570] udevd[22570]: symlink '../../loop1' '/dev/disk/by-diskseq/1711.tmp-b7:1' failed: Read-only file system [ 671.062309][ T2985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.071603][ T2985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.104537][T22570] udevd[22570]: symlink '../../loop8' '/dev/disk/by-diskseq/1710.tmp-b7:8' failed: Read-only file system [ 671.144902][T22570] udevd[22570]: symlink '../../loop8' '/dev/disk/by-diskseq/1710.tmp-b7:8' failed: Read-only file system [ 671.160809][ T2994] loop8: detected capacity change from 0 to 512 [ 671.171259][ T2994] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 671.184906][T22570] udevd[22570]: symlink '../../loop8' '/dev/disk/by-diskseq/1712.tmp-b7:8' failed: Read-only file system [ 671.199622][ T2994] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.11398: invalid indirect mapped block 256 (level 2) [ 671.214558][T22570] udevd[22570]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 671.227837][ T2994] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 671.228071][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 671.243890][ C1] EXT4-fs (loop8): initial error at time 2000000569: ext4_free_branches:1023: inode 11 [ 671.253598][ C1] EXT4-fs (loop8): last error at time 2000000569: ext4_free_branches:1023: inode 11 [ 671.264240][ T2994] EXT4-fs (loop8): 2 truncates cleaned up [ 671.270604][ T2994] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.400856][ T2688] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.427985][T22570] udevd[22570]: symlink '../../loop8' '/dev/disk/by-diskseq/1712.tmp-b7:8' failed: Read-only file system [ 671.445456][T22570] udevd[22570]: symlink '../../loop8' '/dev/disk/by-diskseq/1712.tmp-b7:8' failed: Read-only file system [ 671.505983][ T3000] loop3: detected capacity change from 0 to 512 [ 671.546604][ T3000] EXT4-fs: Ignoring removed bh option [ 671.557113][ T3009] loop8: detected capacity change from 0 to 128 [ 671.580372][ T3000] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 671.604819][ T3000] EXT4-fs (loop3): 1 truncate cleaned up [ 671.617813][ T3013] loop4: detected capacity change from 0 to 256 [ 671.635550][ T3000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.727645][T29271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.790163][ T3031] loop4: detected capacity change from 0 to 512 [ 671.911035][ T3031] loop4: detected capacity change from 0 to 8192 [ 671.956969][ T3055] loop8: detected capacity change from 0 to 128 [ 671.984006][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 671.984026][ T28] audit: type=1400 audit(2000000570.096:21719): avc: denied { setopt } for pid=3058 comm="syz.0.11419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 672.012406][T22570] loop4: p1 p3 p4 [ 672.016224][T22570] loop4: p1 start 16777216 is beyond EOD, truncated [ 672.034517][T22570] loop4: p4 start 16777223 is beyond EOD, truncated [ 672.085963][ T28] audit: type=1400 audit(2000000570.180:21720): avc: denied { ioctl } for pid=3052 comm="syz.3.11416" path="socket:[121532]" dev="sockfs" ino=121532 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 672.133016][ T3031] loop4: p1 p3 p4 [ 672.138574][ T3031] loop4: p1 start 16777216 is beyond EOD, truncated [ 672.150225][ T3071] loop1: detected capacity change from 0 to 128 [ 672.171859][ T3031] loop4: p4 start 16777223 is beyond EOD, truncated [ 672.308623][ T3078] syzkaller0: entered promiscuous mode [ 672.335917][ T3078] syzkaller0: entered allmulticast mode [ 672.342222][ T3082] FAULT_INJECTION: forcing a failure. [ 672.342222][ T3082] name failslab, interval 1, probability 0, space 0, times 0 [ 672.360038][ T3082] CPU: 0 UID: 0 PID: 3082 Comm: syz.0.11427 Tainted: G W syzkaller #0 PREEMPT(full) [ 672.360080][ T3082] Tainted: [W]=WARN [ 672.360090][ T3082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 672.360107][ T3082] Call Trace: [ 672.360115][ T3082] [ 672.360189][ T3082] __dump_stack+0x1d/0x30 [ 672.360354][ T3082] dump_stack_lvl+0x95/0xd0 [ 672.360435][ T3082] dump_stack+0x15/0x1b [ 672.360535][ T3082] should_fail_ex+0x263/0x280 [ 672.360572][ T3082] should_failslab+0x8c/0xb0 [ 672.360640][ T3082] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 672.360667][ T3082] ? __d_alloc+0x37/0x340 [ 672.360702][ T3082] __d_alloc+0x37/0x340 [ 672.360736][ T3082] ? __ns_ref_active_get+0x53/0xd0 [ 672.360829][ T3082] d_alloc_anon+0x17/0x20 [ 672.360862][ T3082] path_from_stashed+0x1cf/0x330 [ 672.360914][ T3082] ? __pfx_proc_ns_get_link+0x10/0x10 [ 672.360949][ T3082] ns_get_path+0x62/0x80 [ 672.361055][ T3082] proc_ns_get_link+0x80/0x160 [ 672.361122][ T3082] pick_link+0x4b1/0x8e0 [ 672.361244][ T3082] step_into_slowpath+0x36a/0x4c0 [ 672.361333][ T3082] path_openat+0x15d0/0x2050 [ 672.361462][ T3082] do_file_open+0x16c/0x290 [ 672.361514][ T3082] do_sys_openat2+0x94/0x130 [ 672.361563][ T3082] __x64_sys_openat+0xf2/0x120 [ 672.361599][ T3082] x64_sys_call+0x1e39/0x3020 [ 672.361635][ T3082] do_syscall_64+0x12c/0x370 [ 672.361748][ T3082] ? arch_exit_work+0x49/0x70 [ 672.361799][ T3082] ? arch_exit_to_user_mode_prepare+0xab/0xc0 [ 672.361843][ T3082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.361867][ T3082] RIP: 0033:0x7ff47c96cece [ 672.361906][ T3082] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 672.362002][ T3082] RSP: 002b:00007ff47b3feec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 672.362028][ T3082] RAX: ffffffffffffffda RBX: 00007ff47b3ff6c0 RCX: 00007ff47c96cece [ 672.362124][ T3082] RDX: 0000000000000002 RSI: 00007ff47b3fef90 RDI: ffffffffffffff9c [ 672.362142][ T3082] RBP: 00007ff47b3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 672.362156][ T3082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 672.362170][ T3082] R13: 00007ff47cc26038 R14: 00007ff47cc25fa0 R15: 00007ffc6c824bb8 [ 672.362264][ T3082] [ 672.706184][ T28] audit: type=1400 audit(2000000570.770:21721): avc: denied { map } for pid=3091 comm="syz.0.11431" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 672.808901][ T28] audit: type=1400 audit(2000000570.770:21722): avc: denied { execute } for pid=3091 comm="syz.0.11431" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 672.864896][ T3105] loop8: detected capacity change from 0 to 512 [ 673.030659][ T3105] loop8: detected capacity change from 0 to 256 [ 673.045513][ T3122] netlink: 'syz.3.11442': attribute type 12 has an invalid length. [ 673.058351][ T3105] FAT-fs (loop8): Directory bread(block 64) failed [ 673.065009][ T3105] FAT-fs (loop8): Directory bread(block 65) failed [ 673.072892][ T3122] netlink: 'syz.3.11442': attribute type 29 has an invalid length. [ 673.083742][ T3122] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11442'. [ 673.116784][ T3105] FAT-fs (loop8): Directory bread(block 66) failed [ 673.137818][ T3105] FAT-fs (loop8): Directory bread(block 67) failed [ 673.147655][ T3105] FAT-fs (loop8): Directory bread(block 68) failed [ 673.155716][ T3105] FAT-fs (loop8): Directory bread(block 69) failed [ 673.191060][ T3105] FAT-fs (loop8): Directory bread(block 70) failed [ 673.198506][ T3105] FAT-fs (loop8): Directory bread(block 71) failed [ 673.205260][ T3105] FAT-fs (loop8): Directory bread(block 72) failed [ 673.230637][ T3105] FAT-fs (loop8): Directory bread(block 73) failed [ 673.256483][ T3132] netlink: 'syz.3.11445': attribute type 83 has an invalid length. [ 673.265242][ T28] audit: type=1400 audit(2000000571.284:21723): avc: denied { mounton } for pid=3101 comm="syz.8.11435" path="/26/bus/bus" dev="loop8" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 673.290200][ T3135] FAULT_INJECTION: forcing a failure. [ 673.290200][ T3135] name failslab, interval 1, probability 0, space 0, times 0 [ 673.307846][ T3135] CPU: 0 UID: 0 PID: 3135 Comm: syz.1.11446 Tainted: G W syzkaller #0 PREEMPT(full) [ 673.307878][ T3135] Tainted: [W]=WARN [ 673.307886][ T3135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 673.307903][ T3135] Call Trace: [ 673.307910][ T3135] [ 673.307987][ T3135] __dump_stack+0x1d/0x30 [ 673.308014][ T3135] dump_stack_lvl+0x95/0xd0 [ 673.308043][ T3135] dump_stack+0x15/0x1b [ 673.308071][ T3135] should_fail_ex+0x263/0x280 [ 673.308101][ T3135] should_failslab+0x8c/0xb0 [ 673.308123][ T3135] kmem_cache_alloc_noprof+0x66/0x400 [ 673.308227][ T3135] ? do_getname+0x2e/0x1c0 [ 673.308255][ T3135] do_getname+0x2e/0x1c0 [ 673.308291][ T3135] getname_flags+0x1d/0x30 [ 673.308317][ T3135] do_sys_openat2+0x60/0x130 [ 673.308423][ T3135] __x64_sys_openat+0xf2/0x120 [ 673.308457][ T3135] x64_sys_call+0x1e39/0x3020 [ 673.308490][ T3135] do_syscall_64+0x12c/0x370 [ 673.308531][ T3135] ? arch_exit_work+0x49/0x70 [ 673.308561][ T3135] ? arch_exit_to_user_mode_prepare+0xab/0xc0 [ 673.308660][ T3135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.308684][ T3135] RIP: 0033:0x7fa0089fcece [ 673.308700][ T3135] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 673.308788][ T3135] RSP: 002b:00007fa007496ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 673.308812][ T3135] RAX: ffffffffffffffda RBX: 00007fa0074976c0 RCX: 00007fa0089fcece [ 673.308826][ T3135] RDX: 0000000000000000 RSI: 00007fa007496f90 RDI: ffffffffffffff9c [ 673.308842][ T3135] RBP: 00007fa007497090 R08: 0000000000000000 R09: 0000000000000000 [ 673.308858][ T3135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 673.308872][ T3135] R13: 00007fa008cb6038 R14: 00007fa008cb5fa0 R15: 00007ffc7ad1f158 [ 673.308928][ T3135] [ 673.580051][ T3154] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 673.588790][ T3148] tipc: Enabling of bearer rejected, failed to enable media [ 673.606524][ T3154] EXT4-fs (loop4): 1 truncate cleaned up [ 673.613812][ T2688] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 673.623597][ T2688] FAT-fs (loop8): Filesystem has been set read-only [ 673.642921][ T3154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.717438][ T28] audit: type=1400 audit(2000000571.715:21724): avc: denied { create } for pid=3147 comm="syz.4.11451" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 673.790627][T27020] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.991989][ T3183] hub 8-0:1.0: USB hub found [ 673.996873][ T3183] hub 8-0:1.0: 8 ports detected [ 674.011611][ T3183] netlink: 'syz.4.11457': attribute type 36 has an invalid length. [ 674.653841][ T3197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11465'. [ 674.663203][ T3197] netlink: 200 bytes leftover after parsing attributes in process `syz.0.11465'. [ 674.735166][ T3171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 674.758725][ T3183] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 674.768662][ T3183] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 674.802284][ T30] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.905490][ T3202] syzkaller0: entered promiscuous mode [ 674.911018][ T3202] syzkaller0: entered allmulticast mode [ 674.929698][ T30] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.955183][ T3215] wg1 speed is unknown, defaulting to 1000 [ 674.962749][ T3219] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.973642][ T3219] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.985933][ T3215] ip6_vti0 speed is unknown, defaulting to 1000 [ 674.996791][ T30] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.075641][ T3219] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.085685][ T3219] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.275592][ T30] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.303270][ T3191] wg1 speed is unknown, defaulting to 1000 [ 675.311130][ T3219] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.321528][ T3219] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.371792][ T3191] ip6_vti0 speed is unknown, defaulting to 1000 [ 675.392584][ T28] audit: type=1400 audit(2000000573.286:21725): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 675.401567][ T3219] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.446155][ T3219] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.553874][ T28] audit: type=1400 audit(2000000573.436:21726): avc: denied { search } for pid=3041 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.589013][ T28] audit: type=1400 audit(2000000573.436:21727): avc: denied { search } for pid=3041 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.626363][ T30] bridge_slave_1: left allmulticast mode [ 675.629447][ T28] audit: type=1400 audit(2000000573.436:21728): avc: denied { search } for pid=3041 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.636048][ T3247] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.11483: iget: bad i_size value: 38620345925642 [ 675.668272][ T30] bridge_slave_1: left promiscuous mode [ 675.674535][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.682431][ T3247] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 675.682628][ T3247] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.11483: couldn't read orphan inode 15 (err -117) [ 675.691890][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 675.691909][ C0] EXT4-fs (loop4): initial error at time 2000000573: ext4_orphan_get:1391: inode 15 [ 675.691934][ C0] EXT4-fs (loop4): last error at time 2000000573: ext4_orphan_get:1391: inode 15 [ 675.729397][ T3247] loop4: lost filesystem error report for type 5 error -117 [ 675.732108][ T3247] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.765955][ T30] bridge_slave_0: left allmulticast mode [ 675.781614][ T3247] EXT4-fs (loop4): shut down requested (0) [ 675.792814][ T30] bridge_slave_0: left promiscuous mode [ 675.809409][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.829327][T27020] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 675.843375][T27261] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 675.861449][T27261] FAT-fs (loop0): Filesystem has been set read-only [ 676.053630][ T2263] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.081508][ T2263] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.177037][ T2263] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.195919][ T2263] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.205185][ T2263] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.215954][ T2263] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.238618][ T30] hsr_slave_0: left promiscuous mode [ 676.244585][ T30] hsr_slave_1: left promiscuous mode [ 676.250503][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.258455][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.275296][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.302772][T22570] udevd[22570]: symlink '../../loop0' '/dev/disk/by-diskseq/1738.tmp-b7:0' failed: Read-only file system [ 676.318200][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.362098][T22570] udevd[22570]: symlink '../../loop0' '/dev/disk/by-diskseq/1740.tmp-b7:0' failed: Read-only file system [ 676.381358][ T30] veth1_macvtap: left promiscuous mode [ 676.400019][ T30] veth0_macvtap: left promiscuous mode [ 676.414240][ T30] veth1_vlan: left promiscuous mode [ 676.424618][T22570] udevd[22570]: symlink '../../loop0' '/dev/disk/by-diskseq/1740.tmp-b7:0' failed: Read-only file system [ 676.430817][ T30] veth0_vlan: left promiscuous mode [ 676.450621][T22570] udevd[22570]: symlink '../../loop0' '/dev/disk/by-diskseq/1740.tmp-b7:0' failed: Read-only file system [ 676.475231][T20180] udevd[20180]: symlink '../../loop9' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system [ 676.490465][ T1752] udevd[1752]: symlink '../../loop4' '/dev/disk/by-diskseq/1737.tmp-b7:4' failed: Read-only file system [ 676.507112][T22570] loop0: p1 p3 p4 [ 676.511308][T22570] loop0: p1 start 16777216 is beyond EOD, truncated [ 676.532648][T20180] udevd[20180]: symlink '../../loop9' '/dev/disk/by-uuid/1DE0-4C13.tmp-b7:1' failed: Read-only file system [ 676.549550][T22570] loop0: p4 start 16777223 is beyond EOD, truncated [ 676.559555][ T3292] selinux_netlink_send: 24 callbacks suppressed [ 676.559572][ T3292] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3292 comm=syz.4.11492 [ 676.564330][T20180] udevd[20180]: symlink '../../loop1' '/dev/disk/by-diskseq/1739.tmp-b7:1' failed: Read-only file system [ 676.586534][ T3285] loop0: p1 p3 p4 [ 676.599355][T20180] udevd[20180]: symlink '../../loop1' '/dev/disk/by-diskseq/1739.tmp-b7:1' failed: Read-only file system [ 676.611752][ T3285] loop0: p1 start 16777216 is beyond EOD, truncated [ 676.643848][ T3285] loop0: p4 start 16777223 is beyond EOD, truncated [ 676.651468][T20180] udevd[20180]: symlink '../../loop1' '/dev/disk/by-diskseq/1743.tmp-b7:1' failed: Read-only file system [ 676.711900][ T30] team0 (unregistering): Port device team_slave_1 removed [ 676.727284][ T30] team0 (unregistering): Port device team_slave_0 removed [ 676.824164][ T2263] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.840375][ T2263] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.875512][ T3315] set_capacity_and_notify: 7 callbacks suppressed [ 676.875534][ T3315] loop1: detected capacity change from 0 to 512 [ 676.902968][ T3191] chnl_net:caif_netlink_parms(): no params data found [ 676.929482][ T3318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11497'. [ 676.996674][ T3315] FAT-fs (loop1): FAT read failed (blocknr 128) [ 677.020803][ T3191] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.028296][ T3191] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.036591][ T3191] bridge_slave_0: entered allmulticast mode [ 677.048513][ T3191] bridge_slave_0: entered promiscuous mode [ 677.055918][ T3191] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.063098][ T3191] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.071869][ T3191] bridge_slave_1: entered allmulticast mode [ 677.079522][ T3191] bridge_slave_1: entered promiscuous mode [ 677.100031][ T3191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.111078][ T3191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.160923][ T3191] team0: Port device team_slave_0 added [ 677.176568][ T3191] team0: Port device team_slave_1 added [ 677.241210][ T3191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.249422][ T3191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.281195][ T3191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.296019][ T3191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.304273][ T3191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.330925][ T3191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.389804][ T3191] hsr_slave_0: entered promiscuous mode [ 677.406570][ T3191] hsr_slave_1: entered promiscuous mode [ 677.412978][ T3191] debugfs: 'hsr0' already exists in 'hsr' [ 677.426096][ T3191] Cannot create hsr debugfs directory [ 677.890580][ T3191] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 677.900640][ T3191] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 677.931607][ T3191] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 677.941513][ T3191] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 678.029329][ T3191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.064368][ T3191] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.075411][ T2263] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.082540][ T2263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.102208][T19188] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.109324][T19188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.224099][ T3457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11515'. [ 678.233725][ T3462] netlink: 'syz.0.11517': attribute type 12 has an invalid length. [ 678.257510][ T3463] loop3: detected capacity change from 0 to 128 [ 678.280715][ T3462] netlink: 'syz.0.11517': attribute type 29 has an invalid length. [ 678.293568][ T3462] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11517'. [ 678.331797][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 678.331814][ T28] audit: type=1400 audit(2000000576.036:21745): avc: denied { setopt } for pid=3454 comm="syz.1.11514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 678.368630][ T3471] FAULT_INJECTION: forcing a failure. [ 678.368630][ T3471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.410342][ T3471] CPU: 0 UID: 0 PID: 3471 Comm: syz.4.11518 Tainted: G W syzkaller #0 PREEMPT(full) [ 678.410393][ T3471] Tainted: [W]=WARN [ 678.410403][ T3471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.410418][ T3471] Call Trace: [ 678.410426][ T3471] [ 678.410435][ T3471] __dump_stack+0x1d/0x30 [ 678.410522][ T3471] dump_stack_lvl+0x95/0xd0 [ 678.410545][ T3471] dump_stack+0x15/0x1b [ 678.410591][ T3471] should_fail_ex+0x263/0x280 [ 678.410621][ T3471] should_fail+0xb/0x20 [ 678.410644][ T3471] should_fail_usercopy+0x1a/0x20 [ 678.410673][ T3471] _copy_from_user+0x1c/0xb0 [ 678.410771][ T3471] ___sys_sendmsg+0xc1/0x1e0 [ 678.410816][ T3471] __x64_sys_sendmsg+0xd4/0x160 [ 678.410864][ T3471] x64_sys_call+0x194c/0x3020 [ 678.410977][ T3471] do_syscall_64+0x12c/0x370 [ 678.411024][ T3471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.411127][ T3471] RIP: 0033:0x7f04d78ec629 [ 678.411149][ T3471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.411173][ T3471] RSP: 002b:00007f04d6347028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.411200][ T3471] RAX: ffffffffffffffda RBX: 00007f04d7b65fa0 RCX: 00007f04d78ec629 [ 678.411218][ T3471] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 678.411262][ T3471] RBP: 00007f04d6347090 R08: 0000000000000000 R09: 0000000000000000 [ 678.411320][ T3471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.411336][ T3471] R13: 00007f04d7b66038 R14: 00007f04d7b65fa0 R15: 00007fff5a437d98 [ 678.411399][ T3471] [ 678.586081][ T3474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11519'. [ 678.760508][ T3491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3491 comm=syz.0.11522 [ 678.804067][ T3483] netlink: 'syz.4.11520': attribute type 8 has an invalid length. [ 678.817716][ T3455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 678.837695][ T3491] netlink: 'syz.0.11522': attribute type 12 has an invalid length. [ 678.859140][ T3491] netlink: 'syz.0.11522': attribute type 29 has an invalid length. [ 678.871132][ T3491] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11522'. [ 678.920399][ T3191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.226275][ T3541] wg1 speed is unknown, defaulting to 1000 [ 679.235403][ T3541] ip6_vti0 speed is unknown, defaulting to 1000 [ 679.306430][ T3191] veth0_vlan: entered promiscuous mode [ 679.323072][ T3191] veth1_vlan: entered promiscuous mode [ 679.354284][ T3191] veth0_macvtap: entered promiscuous mode [ 679.359204][ T28] audit: type=1400 audit(2000000577.000:21746): avc: denied { write } for pid=3516 comm="syz.0.11527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 679.360601][ T3191] veth1_macvtap: entered promiscuous mode [ 679.378190][ T3191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.388305][ T3191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.448444][ T3555] loop0: detected capacity change from 0 to 2048 [ 679.767905][ T3555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.819070][ T3547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=3547 comm=syz.0.11527 [ 679.903805][ T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.934620][ T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.953163][ T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.001322][ T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.041561][ T3592] netlink: 564 bytes leftover after parsing attributes in process `syz.3.11535'. [ 680.062010][ T3592] netlink: 564 bytes leftover after parsing attributes in process `syz.3.11535'. [ 680.235845][ T3615] FAULT_INJECTION: forcing a failure. [ 680.235845][ T3615] name failslab, interval 1, probability 0, space 0, times 0 [ 680.266460][ T3615] CPU: 0 UID: 0 PID: 3615 Comm: syz.7.11540 Tainted: G W syzkaller #0 PREEMPT(full) [ 680.266494][ T3615] Tainted: [W]=WARN [ 680.266501][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 680.266514][ T3615] Call Trace: [ 680.266522][ T3615] [ 680.266531][ T3615] __dump_stack+0x1d/0x30 [ 680.266564][ T3615] dump_stack_lvl+0x95/0xd0 [ 680.266589][ T3615] dump_stack+0x15/0x1b [ 680.266614][ T3615] should_fail_ex+0x263/0x280 [ 680.266637][ T3615] should_failslab+0x8c/0xb0 [ 680.266656][ T3615] kmem_cache_alloc_noprof+0x66/0x400 [ 680.266677][ T3615] ? vm_area_alloc+0x2c/0xb0 [ 680.266703][ T3615] ? hugetlbfs_file_mmap_prepare+0x2cc/0x2e0 [ 680.266741][ T3615] vm_area_alloc+0x2c/0xb0 [ 680.266765][ T3615] mmap_region+0x11ce/0x2050 [ 680.266838][ T3615] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 680.266884][ T3615] do_mmap+0x9b2/0xbd0 [ 680.266912][ T3615] __se_sys_remap_file_pages+0x54d/0x5e0 [ 680.266948][ T3615] ? mutex_lock+0x57/0x90 [ 680.266979][ T3615] ? mutex_unlock+0x4e/0x90 [ 680.267013][ T3615] __x64_sys_remap_file_pages+0x67/0x80 [ 680.267045][ T3615] x64_sys_call+0x2e53/0x3020 [ 680.267072][ T3615] do_syscall_64+0x12c/0x370 [ 680.267106][ T3615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.267132][ T3615] RIP: 0033:0x7fb6d65cc629 [ 680.267153][ T3615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.267175][ T3615] RSP: 002b:00007fb6d501f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 680.267200][ T3615] RAX: ffffffffffffffda RBX: 00007fb6d6845fa0 RCX: 00007fb6d65cc629 [ 680.267218][ T3615] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 680.267234][ T3615] RBP: 00007fb6d501f090 R08: 0000000000000000 R09: 0000000000000000 [ 680.267251][ T3615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.267267][ T3615] R13: 00007fb6d6846038 R14: 00007fb6d6845fa0 R15: 00007ffd3795a7e8 [ 680.267292][ T3615] [ 680.500143][ T3576] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 680.621119][ T3631] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 680.657740][ T3631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11543'. [ 681.894016][T22570] udevd[22570]: symlink '../../loop3' '/dev/disk/by-diskseq/1749.tmp-b7:3' failed: Read-only file system [ 681.912459][T20180] udevd[20180]: symlink '../../loop4' '/dev/disk/by-diskseq/1737.tmp-b7:4' failed: Read-only file system [ 681.980047][ T3731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.996928][T22570] udevd[22570]: symlink '../../loop1' '/dev/disk/by-diskseq/1746.tmp-b7:1' failed: Read-only file system [ 682.015025][ T3731] netlink: 'syz.4.11560': attribute type 10 has an invalid length. [ 682.050566][ T3731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.068840][ T3731] batadv0: entered promiscuous mode [ 682.079614][ T3731] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 682.096176][T22570] udevd[22570]: symlink '../../loop7' '/dev/disk/by-diskseq/1750.tmp-b7:7' failed: Read-only file system [ 682.117511][ T3740] vlan2: entered promiscuous mode [ 682.123809][ T3740] hsr0: entered promiscuous mode [ 682.139805][ T3743] loop1: detected capacity change from 0 to 512 [ 682.173268][ T3743] EXT4-fs (loop1): 1 orphan inode deleted [ 682.175258][T22570] udevd[22570]: symlink '../../loop7' '/dev/disk/by-diskseq/1750.tmp-b7:7' failed: Read-only file system [ 682.201254][ T3743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.218507][ T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 682.230987][T20180] udevd[20180]: symlink '../../loop1' '/dev/disk/by-diskseq/1751.tmp-b7:1' failed: Read-only file system [ 682.245165][T20180] udevd[20180]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 682.261504][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7039: comm kworker/u8:2: Failed to release dquot type 1 [ 682.274020][ T3743] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.280780][T22570] udevd[22570]: symlink '../../loop4' '/dev/disk/by-diskseq/1737.tmp-b7:4' failed: Read-only file system [ 682.297678][T20180] udevd[20180]: symlink '../../loop1' '/dev/disk/by-diskseq/1751.tmp-b7:1' failed: Read-only file system [ 682.358188][T27261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.370849][T20180] udevd[20180]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 682.451014][ T3758] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 682.475872][ T3758] syzkaller0: linktype set to 823 [ 682.576887][T27514] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.760765][ T3778] netlink: 'syz.0.11569': attribute type 322 has an invalid length. [ 682.772773][ T3782] loop1: detected capacity change from 0 to 128 [ 682.892010][ T3791] loop3: detected capacity change from 0 to 512 [ 682.961234][ T3791] loop3: detected capacity change from 0 to 8192 [ 683.024345][T22570] loop3: p1 p3 p4 [ 683.032535][T22570] loop3: p1 start 16777216 is beyond EOD, truncated [ 683.040176][T22570] loop3: p4 start 16777223 is beyond EOD, truncated [ 683.057194][ T3791] loop3: p1 p3 p4 [ 683.061517][ T3791] loop3: p1 start 16777216 is beyond EOD, truncated [ 683.079424][ T3791] loop3: p4 start 16777223 is beyond EOD, truncated [ 683.134523][ T3798] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 683.308232][ T3804] FAULT_INJECTION: forcing a failure. [ 683.308232][ T3804] name failslab, interval 1, probability 0, space 0, times 0 [ 683.351105][ T3804] CPU: 0 UID: 0 PID: 3804 Comm: syz.7.11580 Tainted: G W syzkaller #0 PREEMPT(full) [ 683.351147][ T3804] Tainted: [W]=WARN [ 683.351156][ T3804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.351229][ T3804] Call Trace: [ 683.351283][ T3804] [ 683.351293][ T3804] __dump_stack+0x1d/0x30 [ 683.351327][ T3804] dump_stack_lvl+0x95/0xd0 [ 683.351358][ T3804] dump_stack+0x15/0x1b [ 683.351387][ T3804] should_fail_ex+0x263/0x280 [ 683.351452][ T3804] should_failslab+0x8c/0xb0 [ 683.351485][ T3804] __kmalloc_noprof+0xb8/0x4e0 [ 683.351514][ T3804] ? bpf_test_init+0x86/0x130 [ 683.351543][ T3804] bpf_test_init+0x86/0x130 [ 683.351585][ T3804] bpf_prog_test_run_skb+0x2b5/0xef0 [ 683.351621][ T3804] ? __fget_files+0x184/0x1c0 [ 683.351731][ T3804] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 683.351764][ T3804] bpf_prog_test_run+0x204/0x340 [ 683.351795][ T3804] __sys_bpf+0x52e/0x7e0 [ 683.351832][ T3804] __x64_sys_bpf+0x41/0x50 [ 683.351877][ T3804] x64_sys_call+0x10cb/0x3020 [ 683.351924][ T3804] do_syscall_64+0x12c/0x370 [ 683.351970][ T3804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.352000][ T3804] RIP: 0033:0x7fb6d65cc629 [ 683.352020][ T3804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.352043][ T3804] RSP: 002b:00007fb6d501f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 683.352063][ T3804] RAX: ffffffffffffffda RBX: 00007fb6d6845fa0 RCX: 00007fb6d65cc629 [ 683.352081][ T3804] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 683.352105][ T3804] RBP: 00007fb6d501f090 R08: 0000000000000000 R09: 0000000000000000 [ 683.352121][ T3804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.352137][ T3804] R13: 00007fb6d6846038 R14: 00007fb6d6845fa0 R15: 00007ffd3795a7e8 [ 683.352163][ T3804] [ 683.365351][ T3806] FAULT_INJECTION: forcing a failure. [ 683.365351][ T3806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.569656][ T3806] CPU: 1 UID: 0 PID: 3806 Comm: syz.3.11581 Tainted: G W syzkaller #0 PREEMPT(full) [ 683.569696][ T3806] Tainted: [W]=WARN [ 683.569705][ T3806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.569722][ T3806] Call Trace: [ 683.569730][ T3806] [ 683.569796][ T3806] __dump_stack+0x1d/0x30 [ 683.569832][ T3806] dump_stack_lvl+0x95/0xd0 [ 683.569862][ T3806] dump_stack+0x15/0x1b [ 683.569891][ T3806] should_fail_ex+0x263/0x280 [ 683.569918][ T3806] should_fail+0xb/0x20 [ 683.570020][ T3806] should_fail_usercopy+0x1a/0x20 [ 683.570050][ T3806] _copy_to_user+0x20/0xa0 [ 683.570083][ T3806] simple_read_from_buffer+0xb5/0x130 [ 683.570111][ T3806] proc_fail_nth_read+0x10e/0x150 [ 683.570182][ T3806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 683.570294][ T3806] vfs_read+0x1ab/0x7f0 [ 683.570396][ T3806] ? __rcu_read_unlock+0x4e/0x70 [ 683.570424][ T3806] ? __fget_files+0x184/0x1c0 [ 683.570453][ T3806] ? mutex_lock+0x57/0x90 [ 683.570507][ T3806] ksys_read+0xdc/0x1a0 [ 683.570540][ T3806] __x64_sys_read+0x40/0x50 [ 683.570579][ T3806] x64_sys_call+0x2886/0x3020 [ 683.570652][ T3806] do_syscall_64+0x12c/0x370 [ 683.570694][ T3806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.570716][ T3806] RIP: 0033:0x7f37fe9ecece [ 683.570783][ T3806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 683.570802][ T3806] RSP: 002b:00007f37fd47efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 683.570822][ T3806] RAX: ffffffffffffffda RBX: 00007f37fd47f6c0 RCX: 00007f37fe9ecece [ 683.570862][ T3806] RDX: 000000000000000f RSI: 00007f37fd47f0a0 RDI: 0000000000000003 [ 683.570875][ T3806] RBP: 00007f37fd47f090 R08: 0000000000000000 R09: 0000000000000000 [ 683.570888][ T3806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.570901][ T3806] R13: 00007f37feca6038 R14: 00007f37feca5fa0 R15: 00007ffeb28504a8 [ 683.570921][ T3806] [ 683.827482][ T3810] loop7: detected capacity change from 0 to 128 [ 683.860372][ T3820] loop0: detected capacity change from 0 to 1024 [ 683.879040][ T3822] loop4: detected capacity change from 0 to 512 [ 683.887774][ T3820] EXT4-fs: Ignoring removed mblk_io_submit option [ 683.894300][ T3820] EXT4-fs: inline encryption not supported [ 683.914554][ T3822] ext4: Unknown parameter 'fsuuid' [ 683.917228][ T3820] EXT4-fs: Ignoring removed bh option [ 683.935640][ T3820] EXT4-fs: Ignoring removed bh option [ 683.953448][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.961730][ T3825] bridge0: entered allmulticast mode [ 683.983150][ T3827] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 684.004067][ T3820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.033618][ T3820] netlink: 'syz.0.11588': attribute type 16 has an invalid length. [ 684.041940][ T3820] netlink: 'syz.0.11588': attribute type 3 has an invalid length. [ 684.050295][ T3820] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.11588'. [ 684.076208][ T3820] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4224: comm syz.0.11588: Allocating blocks 497-513 which overlap fs metadata [ 684.129520][ T3820] EXT4-fs (loop0): Remounting filesystem read-only [ 684.208963][T27261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.270121][ T3842] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11595'. [ 684.321388][ T3843] loop0: detected capacity change from 0 to 512 [ 684.384767][ T3843] EXT4-fs: Ignoring removed bh option [ 684.393827][ T3844] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11595'. [ 684.421439][ T3843] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 684.454851][ T3843] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 684.485669][ T3843] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 684.498085][ T3843] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 684.558189][ T3843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.789580][T27261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.801451][ T3858] loop3: detected capacity change from 0 to 512 [ 684.829434][ T3858] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 684.869891][ T3854] IPVS: set_ctl: invalid protocol: 50 172.20.20.22:20002 [ 684.966489][ T3866] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 684.973051][ T3866] batman_adv: batadv0: Adding interface: gretap2 [ 685.071686][ T3866] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.121828][ T3868] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 685.132237][ T3866] batman_adv: batadv0: Interface activated: gretap2 [ 685.241106][ T3877] FAULT_INJECTION: forcing a failure. [ 685.241106][ T3877] name failslab, interval 1, probability 0, space 0, times 0 [ 685.275372][ T3877] CPU: 0 UID: 0 PID: 3877 Comm: syz.7.11607 Tainted: G W syzkaller #0 PREEMPT(full) [ 685.275415][ T3877] Tainted: [W]=WARN [ 685.275425][ T3877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 685.275441][ T3877] Call Trace: [ 685.275455][ T3877] [ 685.275464][ T3877] __dump_stack+0x1d/0x30 [ 685.275496][ T3877] dump_stack_lvl+0x95/0xd0 [ 685.275608][ T3877] dump_stack+0x15/0x1b [ 685.275637][ T3877] should_fail_ex+0x263/0x280 [ 685.275717][ T3877] should_failslab+0x8c/0xb0 [ 685.275737][ T3877] __kmalloc_noprof+0xb8/0x4e0 [ 685.275758][ T3877] ? sk_prot_alloc+0xa8/0x180 [ 685.275920][ T3877] ? should_failslab+0x8c/0xb0 [ 685.275993][ T3877] sk_prot_alloc+0xa8/0x180 [ 685.276026][ T3877] sk_alloc+0x35/0x3e0 [ 685.276058][ T3877] bpf_prog_test_run_skb+0x31b/0xef0 [ 685.276114][ T3877] ? __fget_files+0x184/0x1c0 [ 685.276145][ T3877] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 685.276298][ T3877] bpf_prog_test_run+0x204/0x340 [ 685.276333][ T3877] __sys_bpf+0x52e/0x7e0 [ 685.276367][ T3877] __x64_sys_bpf+0x41/0x50 [ 685.276407][ T3877] x64_sys_call+0x10cb/0x3020 [ 685.276468][ T3877] do_syscall_64+0x12c/0x370 [ 685.276510][ T3877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.276539][ T3877] RIP: 0033:0x7fb6d65cc629 [ 685.276558][ T3877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.276576][ T3877] RSP: 002b:00007fb6d501f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 685.276619][ T3877] RAX: ffffffffffffffda RBX: 00007fb6d6845fa0 RCX: 00007fb6d65cc629 [ 685.276632][ T3877] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 685.276646][ T3877] RBP: 00007fb6d501f090 R08: 0000000000000000 R09: 0000000000000000 [ 685.276659][ T3877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.276670][ T3877] R13: 00007fb6d6846038 R14: 00007fb6d6845fa0 R15: 00007ffd3795a7e8 [ 685.276719][ T3877] [ 685.510048][ T3884] loop3: detected capacity change from 0 to 512 [ 685.613485][ C1] sd 0:0:1:0: [sda] tag#7761 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.624160][ C1] sd 0:0:1:0: [sda] tag#7761 CDB: Read(6) 08 00 00 00 00 00 [ 685.632834][ C1] sd 0:0:1:0: [sda] tag#7762 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.643621][ C1] sd 0:0:1:0: [sda] tag#7762 CDB: Read(6) 08 00 00 00 00 00 [ 685.651465][ C1] sd 0:0:1:0: [sda] tag#7763 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.662055][ C1] sd 0:0:1:0: [sda] tag#7763 CDB: Read(6) 08 00 00 00 00 00 [ 685.670611][ C1] sd 0:0:1:0: [sda] tag#7764 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.681233][ C1] sd 0:0:1:0: [sda] tag#7764 CDB: Read(6) 08 00 00 00 00 00 [ 685.689027][ C1] sd 0:0:1:0: [sda] tag#7765 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.700601][ C1] sd 0:0:1:0: [sda] tag#7765 CDB: Read(6) 08 00 00 00 00 00 [ 685.708306][ C1] sd 0:0:1:0: [sda] tag#7766 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.719682][ C1] sd 0:0:1:0: [sda] tag#7766 CDB: Read(6) 08 00 00 00 00 00 [ 685.727071][ C1] sd 0:0:1:0: [sda] tag#7767 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.737576][ C1] sd 0:0:1:0: [sda] tag#7767 CDB: Read(6) 08 00 00 00 00 00 [ 685.744992][ C1] sd 0:0:1:0: [sda] tag#7768 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.755653][ C1] sd 0:0:1:0: [sda] tag#7768 CDB: Read(6) 08 00 00 00 00 00 [ 685.763401][ C1] sd 0:0:1:0: [sda] tag#7769 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.773841][ C1] sd 0:0:1:0: [sda] tag#7769 CDB: Read(6) 08 00 00 00 00 00 [ 685.781240][ C1] sd 0:0:1:0: [sda] tag#7770 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.792179][ C1] sd 0:0:1:0: [sda] tag#7770 CDB: Read(6) 08 00 00 00 00 00 [ 685.828781][ T3884] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 685.841007][ T3894] loop7: detected capacity change from 0 to 1024 [ 685.847814][ T3884] EXT4-fs (loop3): orphan cleanup on readonly fs [ 685.856104][ T3899] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 685.867156][ T3884] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 4294967295 out of range 0-7 [ 685.882348][ T3884] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 685.885696][ T3894] EXT4-fs: Ignoring removed orlov option [ 685.899091][ T3884] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.11610: Failed to acquire dquot type 1 [ 685.925490][ T3884] loop3: lost filesystem error report for type 5 error -117 [ 685.926816][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 685.940629][ C1] EXT4-fs (loop3): initial error at time 2000000583: ext4_acquire_dquot:7003 [ 685.949462][ C1] EXT4-fs (loop3): last error at time 2000000583: ext4_acquire_dquot:7003 [ 685.959568][ T3884] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.11610: corrupted inode contents [ 685.972853][ T3884] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 685.972982][ T3884] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #16: comm syz.3.11610: mark_inode_dirty error [ 686.011457][ T3894] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.025123][ T3884] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 686.025512][ T3884] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.11610: corrupted inode contents [ 686.050439][ T3884] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 686.056392][ T28] audit: type=1400 audit(2000000583.258:21747): avc: denied { execute } for pid=3888 comm="syz.7.11612" path="/20/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 686.092331][ T3884] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.11610: mark_inode_dirty error [ 686.109715][ T3884] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 686.119910][ T3884] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.11610: corrupted inode contents [ 686.150470][ T3884] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 686.182184][ T3911] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 686.182486][ T3884] ================================================================== [ 686.209288][ T3884] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 686.215942][ T3884] [ 686.218300][ T3884] write to 0xffffffff86c98b70 of 8 bytes by task 3911 on cpu 0: [ 686.226008][ T3884] data_alloc+0x31c/0x390 [ 686.230386][ T3884] prb_reserve+0x8d7/0xae0 [ 686.234868][ T3884] vprintk_store+0x54a/0x910 [ 686.239490][ T3884] vprintk_emit+0x1a4/0x600 [ 686.244019][ T3884] vprintk_default+0x26/0x30 [ 686.248633][ T3884] vprintk+0x1d/0x30 [ 686.252559][ T3884] _printk+0x79/0xa0 [ 686.256572][ T3884] __ext4_msg+0x1aa/0x1c0 [ 686.260921][ T3884] ext4_check_journal_data_mode+0x16f/0x210 [ 686.266841][ T3884] ext4_fill_super+0x1c9b/0x37c0 [ 686.271907][ T3884] get_tree_bdev_flags+0x291/0x300 [ 686.277063][ T3884] get_tree_bdev+0x1f/0x30 [ 686.281517][ T3884] ext4_get_tree+0x1c/0x30 [ 686.285953][ T3884] vfs_get_tree+0x57/0x1d0 [ 686.290405][ T3884] do_new_mount+0x288/0x8d0 [ 686.294940][ T3884] path_mount+0x4d0/0xbc0 [ 686.299301][ T3884] __se_sys_mount+0x28c/0x2e0 [ 686.304017][ T3884] __x64_sys_mount+0x67/0x80 [ 686.308632][ T3884] x64_sys_call+0x2d61/0x3020 [ 686.313341][ T3884] do_syscall_64+0x12c/0x370 [ 686.318151][ T3884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.324075][ T3884] [ 686.326437][ T3884] read to 0xffffffff86c98b70 of 8 bytes by task 3884 on cpu 1: [ 686.334082][ T3884] prb_reserve+0x207/0xae0 [ 686.338638][ T3884] vprintk_store+0x54a/0x910 [ 686.343354][ T3884] vprintk_emit+0x1a4/0x600 [ 686.348005][ T3884] vprintk_default+0x26/0x30 [ 686.352639][ T3884] vprintk+0x1d/0x30 [ 686.356753][ T3884] _printk+0x79/0xa0 [ 686.360700][ T3884] __ext4_std_error+0x31d/0x350 [ 686.365578][ T3884] ext4_orphan_del+0x689/0x710 [ 686.370372][ T3884] ext4_truncate+0x89c/0xb00 [ 686.374997][ T3884] ext4_process_orphan+0x110/0x1c0 [ 686.380133][ T3884] ext4_orphan_cleanup+0x6a8/0xa00 [ 686.385634][ T3884] ext4_fill_super+0x3408/0x37c0 [ 686.390694][ T3884] get_tree_bdev_flags+0x291/0x300 [ 686.395858][ T3884] get_tree_bdev+0x1f/0x30 [ 686.400407][ T3884] ext4_get_tree+0x1c/0x30 [ 686.404869][ T3884] vfs_get_tree+0x57/0x1d0 [ 686.409323][ T3884] do_new_mount+0x288/0x8d0 [ 686.413861][ T3884] path_mount+0x4d0/0xbc0 [ 686.418324][ T3884] __se_sys_mount+0x28c/0x2e0 [ 686.423023][ T3884] __x64_sys_mount+0x67/0x80 [ 686.427638][ T3884] x64_sys_call+0x2d61/0x3020 [ 686.432452][ T3884] do_syscall_64+0x12c/0x370 [ 686.437073][ T3884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.443157][ T3884] [ 686.445489][ T3884] value changed: 0x00000000000595c0 -> 0x00000000000f54e8 [ 686.452691][ T3884] [ 686.455115][ T3884] Reported by Kernel Concurrency Sanitizer on: [ 686.461464][ T3884] CPU: 1 UID: 0 PID: 3884 Comm: syz.3.11610 Tainted: G W syzkaller #0 PREEMPT(full) [ 686.472522][ T3884] Tainted: [W]=WARN [ 686.476339][ T3884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 686.486421][ T3884] ================================================================== [ 686.182177][ T3884] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 686.527524][ T3911] EXT4-fs (loop0): 1 truncate cleaned up [ 686.542221][ T3884] loop3: lost filesystem error report for type 5 error -117 [ 686.550382][ T3884] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.11610: corrupted inode contents [ 686.582300][ T3191] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.592241][ T3911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.605632][ T3884] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 686.607419][ T3884] EXT4-fs error (device loop3): ext4_truncate:4587: inode #16: comm syz.3.11610: mark_inode_dirty error [ 686.628904][ T3884] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 686.629988][ T3884] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 686.656873][ T3884] loop3: lost filesystem error report for type 5 error -117 [ 686.660849][ T3884] EXT4-fs (loop3): 1 truncate cleaned up [ 686.680838][ T3884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 686.904049][T29271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 687.065667][T27261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.