last executing test programs: 4m20.438917763s ago: executing program 32 (id=214): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be70", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x804) 4m18.667489127s ago: executing program 33 (id=250): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x5, 0x48f, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x80, 0x8, 0x519}}) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r1, 0x0, 0xb6, 0x1000, &(0x7f0000000680)="6f8d7ae0d3ef245c2d31c2a364daa557615d62be56dab00950534d7c968b99fd2c7b060fc6f450e1d4a535e692452030d288bd43741df2bf5aca00d0827566afe4c4d00aeb818f0f0eac9785c1f4d82ce00c8116c0b5262e7ce1a1fc7b120d4f5aced711a19d6b1a226a3a1159e70ea866e055d7449885913b7c42c536ef46f12c7ff6451bc91516125132bcedddf8b1585636aa52d0abafff2b82e7d9d5c1fa14eb98159935d94bda6b5e2317cde589584db7d18f8d", &(0x7f0000000740)=""/4096, 0x8, 0x0, 0x45, 0xc1, &(0x7f0000001740)="34fc001417c235a36eb8ebe406de596d806e730dd104ba71a88d905b023775ab63d1e56b7e264ebfc405004bc77dc24a7c354aaace93e70b237b1411b6f5e5ee9635efca3f", &(0x7f00000017c0)="53c2d2c2a281a0e80039cc8ae55b275421932f81b0b76899a2f854faf5c098a79f15bba079a0b50cce867668a51fb8f2a063c5a3024eb6a4d7bfee7e292d9de423e1654cc77b492a2b143e898840c391d7d5be9fbab14e8d96a4da58155ad6d9aef8a68a68111ea639de307296a212a10ceba991e983c80e99df2b984917c070182e0798dd012f2be08630d3c7543b2cdb2433335a72f176112bbae90a5de935d8c4f78eaec2c1e0cbf1ca5a4e1f108ef93b92fa543f4ccefb6ab2ea030ff802d9", 0x4, 0x0, 0x9}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0xa, [@func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xf}, {0xc, 0x2}, {0x0, 0x5}, {0x8, 0x2}, {0xc, 0x3}, {0xe}, {0xe, 0x5}, {0xa, 0x1}, {0x7, 0x4}, {0xf, 0x4}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x9}, @datasec={0x2, 0x4, 0x0, 0xf, 0x1, [{0x2, 0xf}, {0x3, 0xfffff801}, {0x3, 0xaa, 0x5}, {0x5, 0x0, 0x101}], "ea"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x5}}, @func={0x6, 0x0, 0x0, 0xc, 0x5}, @func={0x7, 0x0, 0x0, 0xc, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x5}}]}, {0x0, [0x61, 0x30, 0x0, 0x30, 0x30, 0x0, 0x0, 0x0]}}, &(0x7f0000000200)=""/32, 0x116, 0x20, 0x1, 0xb}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x8, &(0x7f0000000100)=""/8, 0x40f00, 0x8, '\x00', r0, 0x1b, r2, 0x8, &(0x7f0000000480)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x4, 0xc, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[{0x1, 0x4, 0x7, 0x7}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ab02000000000000060000007110ac000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 3m58.27714429s ago: executing program 34 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x3ff, 0x0, 0xfffffffc, 0x8, 0x100, 0x1591}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[], 0x15) 3m48.69698037s ago: executing program 35 (id=676): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x80) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x1, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 3m31.279600809s ago: executing program 36 (id=963): socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x67, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0xa060, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x408, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x40020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x2e7, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3m19.496512919s ago: executing program 37 (id=1239): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c3}}, {@usrjquota}]}, 0x1, 0x46d, &(0x7f0000000380)="$eJzs28tvG8UfAPDvbh6/Pn8JVXn0AQ0URMUjadJSeuACAokDSEhwKMeQpFWo26AmSLSqoEWoHFEl7ogjUv8CTnBBwAnBFTijShXqpYWT0dq7je3armMlcRp/PtK2M95xZr7emfXsjjeAvjWW/ZNE7IiI3yNipJqtLzBW/e/2zYsz/9y8OJNEufz230ml3K2bF2eKosX7theZwYj0syT2Nal38fyF09Ol0ty5PD+xdOaDicXzF56fPzN9au7U3Nmp48ePHpl88djUC6sSZxbXrb0fL+zf8/q7V9+cOXH1vZ+uJUX8DXF0YuDeRcba7XyqXF5JdRvezpp0MtjDhrAiA9VhGkOV8T8SA7F88EbitU972jhgTZXL5fJDrXdfqxQANqnEEIc+VXzRZ9e/xbZOU48N4cbL1QugLO7b+VbdMxhpXmao4fp2NY1FxIlL/36VbdF4H2LrGlUKAPS177L5z3PN5n9p1N4X+n++hjIaEQ9ExK6IOBYRuyPiwYhK2Ycj4pEV1t+4SHL3/DO93lVgHcrmfy/la1v1879i9hejA3luZyX+oeTkfGnucPaZ/HqgWmK+NDfZpo7vX/3ti1b7aud/2ZbVX8wF83ZcH/xf/Xtmp5emuw64wY3LEXsHm8Wf3FkJSCJiT0Ts7bKO+We+2d9qX4v4hzv6w6uwzlT+OuLp6vG/FA3xF5L265MTW6I0d3gi7xVNlvV+/uXKW63qv/fxb2NLNxHXu3E5it511/Gv+nM0qV2vXVx5HVf++LzlNWWn/T+teU/W/4eTd+r+zkfTS0vnJiOGkzcq+dHa16cayk0tl8/6/6GDzcf/rlj+JPZFRNaJH42IxyLiQN72xyPiiYg42Cb+H1958v3u419bWfyzTc9/d/p/w/FfTgxH4yvNEwOnf/i2rtLRlcSfHf+jldSh/JVOzn+dtKu73gwAAAD3nzQidkSSjt9Jp+n4ePU3/LtjW1paWFx69uTCh2dnq88IjMZQWtz/HKm5HzqZX9YX+an8t8VF/kh+3/jLga2V/PjMQmm218FDn9veYvxn/urgIRfgPte4jratR+0A1p/nNaF/Gf/QnxLjH/pak/Hv0TPoE82+/z/pQTuA9dcw/tsu+5kYwObi+h/6l/EP/av1+E/XtR3AulrcGvd+SH5zJLJz2QZoRueJ6ZEN0YwWiUg3RDMk1ijR6zMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6vgvAAD//9o+4zE=") open(&(0x7f0000000180)='./file0\x00', 0x8000, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100), &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) shutdown(r0, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socket(0xa, 0x1, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 3m11.121077138s ago: executing program 2 (id=1375): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r1, 0x8931, &(0x7f0000000140)="b43a") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af151000000fe00"/28, 0x1c}], 0x2) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af151000000fe00"/28, 0x1c}], 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r4, 0xac8f9000) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) (async) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x88c, 0x30, 0xffff, 0x70bd29, 0xffe4, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x1, 0x5c4, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x0, 0x0, 0x3, 0x0, 0xff}, 0x0, 0xfffffffe}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 3m10.93760577s ago: executing program 2 (id=1379): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r1 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000180), &(0x7f00000002c0)=@tcp6=r1, 0x2}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) io_setup(0x2, &(0x7f0000000000)=0x0) r5 = eventfd(0x7) io_submit(r4, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42, r5, 0x0, 0x0, 0x34, 0x0, 0x0, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x3, 0x0, r5, 0x0, 0x0, 0x5, 0x0, 0x1}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r8, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000002000000000000000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x2000, 0x0) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x0) 3m10.896236542s ago: executing program 2 (id=1382): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) dup(0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa2, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = getpgrp(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, r0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) r2 = gettid() write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc0ffff}, &(0x7f00000003c0), &(0x7f0000000140)) 3m10.620702608s ago: executing program 2 (id=1386): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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") r0 = open(0x0, 0x14167e, 0xdc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="6503000000000000"], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x80ab, @empty, 0x1}, 0x1c) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x13, &(0x7f00000014c0)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbd}, @call={0x85, 0x0, 0x0, 0x21}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], &(0x7f00000005c0)='GPL\x00', 0x7fffffff, 0xb8, &(0x7f0000000600)=""/184, 0x40f00, 0x6, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x0, 0x8, 0x10}, 0x10, 0x1b1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xaf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xa0, 0x0, &(0x7f0000000700)="b9b7d26ebefbc51626150b0d5ea6887e4e448d0006033081b6e82875b115e1dcd23a86b50c9d95a52f338b9eb4eb03ed765a238c6a3afa6b671693a1d5ceeb2a83f4a6cdbb240035fb956ea44d65295b705cec161c1fce65f636bba7e563844c50840c68fdf0c7b02b31d802256ab5da2fb313416fedd7d634c85262392441e5c4d5957df4acf3f7c827c8cf8768d2b72ffe428044d11d506eb50d440ef8fb3e", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000001600)=ANY=[@ANYBLOB="24010000", @ANYRES16, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x840}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x9) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01000cc77000fc53ce25010000008a8ce4371c715b8a47a15a4c97977045d4fa62adcd3ef51e99fdbb293aa14cb0914a6a3c89358aa7f2eacc10f785485370797502be4e6488ac1a9d3be971b500e4b6d57b591189e5509a69af8e62d7631cf75bbf0bf105239b5c06a80e778a56fd169fd214f31775b1c78fd4ec1b1a0f32901d2a0a"], 0x14}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3) fcntl$getownex(r3, 0x10, &(0x7f0000000400)={0x0, 0x0}) r9 = syz_clone(0x3012000, &(0x7f0000000d40)="c0114be62ae3e8ecf2220923503869c9157995b9c45f4ca69cf135bf843cd7174555005e07edc676beb363fe5c21f111e2af8a265d4347baab579a75081c991f6c3f295610f3e9d1c8428ea667c86326024d8566901d321c66353e071b8606357cc90d1f643c22aaa5f4e94abe851e7ee689e89befa09096c65c10b68f9311de1218e29dc1f5b17c33218c3aa3970522b07b9546dfb615981a82614c666d1658a63a1a6dd592a8738b7ab4a690ea073920323266900b04a79cfa5f0579b40c328af09f0f", 0xc4, &(0x7f0000000e40), &(0x7f0000000e80), &(0x7f0000000ec0)="d1fe73c054d456be6ec2d20788e3e60bd96496c6ab32175b6e442e8541337460024801b6988f8576a4997db1ebe060b340fd54afbc1580ad2d6a88dcdacaa80b652bb258e34f9feea3db5353a72e22cf79f265d0ad89e90cf6c2e09c5f49bdcbdcccf7da104cdc") sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000001080)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r7, @ANYBLOB="000428bd7000fedbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r8, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="080001007063690400000200303030303a30303a31302e300000000008008b00", @ANYRES32=r9, @ANYBLOB], 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) accept4(r3, &(0x7f00000010c0)=@nfc, &(0x7f0000001140)=0x80, 0x80800) sendmsg$nl_generic(r4, &(0x7f00000015c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001580)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x8045}, 0x20000810) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000011c0)='F\xdf\x9a\xb9T.\x9foH>S^\a\xd63\x8b\xb0\x9c;d\xe6b8\x97o\xc8[]\xdaB{\x91n\xe6\xdb[\xfe-\xa3\x8f\x11\xb3\x03\xd5\xd0ae\xc2\xda\x87?\x19\xafU\xc3\x9d\xe7\xc9\xc5q\xb5\x96\x9d\x1e\xbesI\x7f\x892\xb2\xfb,p\x89\xbd\x1e8\x17\xec\xda}M\x84z=V\xc4\x86!A\x8c\xdc\x1c\x89\xb0\xf8\xe0\xed\xa6.\xf8P\xf1T\x90\x94\xd2+\"\xa8\xcc\x18\xbe1gv\x12\xa4\xbe\xee\xa2l>x\xe90i\x19\xe9y\x7fi\xcf\x84\"\xf9gqI\xc4\xb1A\xb0\x7fe1\xdcJM\xb2\xa9G*\xf5/0\xdd\xb2\xb7h\x11H\xc3\x80\x06L\xce\xa4r7\x9f\xe0\x16\xce1\x19\xdd&\xbb\xc6\xbd\x82p\xf3\x12\xa2j(+\xdbr\xf8\xe4\xc61~\xc3\x97\xdc\xa0\x1d\xfdAc(\xb5\xf5\xfbt\x05=\x80\x143i\t\xc1\x89J\xf5\xc3\xdf\x03\x8f5\xe8\x85\x1fk\xd2\xc4\xb8\xa0\x1d\xb1\xb8\x9f\xe9?\xd2\xbf\xc0\xe5\x7f(\xcf\x8c\x90\xc5|\a\xe3(\xa8\xaa\x9e\x1a\xfd%\xaatP\xd0\xc9\xa3\xc5G\\\xf9=\xd0O\x9e\x91\xaclaeQ@i:\x0f\x88h\x9b\xe8.\x1eU\xb8^\"(\x04\x94/\xb2!\xed\x04gy\x97I\xb9\x043cz\x87\xb3\xe8\xcd\xea\x84\x14 \xaa\xff\x85\x15\n\xd2\x16~x\x8c\xabTN\xfc:\xe0\x03\x18\x1d\x98\xa2\xcd#\xfc\x14\xde\xc3\xe7\xa3\xcd6p\xac[\xb9\xfe@\x99\xd5\xdc\xb2\x13a\r\xa6\xba\x92p\x82C\xe1\x80\xae\xb0\xff\x14H2\'\xbbC\a\x99\xbc\xe5R\xdb\x1d%\xe3\xd2\xa0I(d\xf5V\xc2\x88~|98\xa8\xab\'8s\xc1\xc1\xe8~*\x04\x94\xf5\xe1\x06I\x14JD\xb1\xc2\xfe\x8b\xcd\xcd*\xe0\xads\xc5\xe7o\x04Of\x97\xbb\xc5$\xe7\b\x91=\xb9\xc8e$t\xf1\xd4\xd9A\xc2x\x92\xf0\xdd\x88AT\xee\x1c\xe8\xaau\x8b\xd1{\xfe\xff\x14y\x8a\xf0?\xaa\x01\x9b\xec8\x1du/2e\x1ec\x8dqUM\xe9\x89\x10C\x83M\x0fa\xd5k\xa4\xf2\x82\x1a\x05\xac\x1aZ\xfe\xda\x94\xd5\xecmtY\x8b+~\xa6\xbdmi&\xbcFf\x05j\xc1\x85_A\xe4\x06\xd0C\xbdY\x82Q\x8c\xd8\xdd\xeb\xa1\xb3O\xca\xbe]a\xaf\x17\xf45\xd5J\x84\xdbJ\xb9@5\x8f\xdf{\n<\xe7\x0f\x13\xc3\xdd\x8f\xe4\xba\xc4T\xe4\x12\x9b\r-\xe7$\x1b\xf1\xdc05g\'Y{\xac\x18\x17v\xdc\x1cS\x11\x13\x1eE\xbe\xcb\x9d\xf5\x9dx\xd04\xe5\xa7\xe8kk\xd0\x1b0I\xd7\xb3\xf4\x89\xb9wo\x82x\x0e\xc3\x1d\x94\xdd\xf8\xa0\xbe1b\x85xa\xf5\r\xc0{\xf5\x86\xd1R\xf4d\xa0') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0x0) 3m9.691759362s ago: executing program 2 (id=1403): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={0x0}}, 0x4000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004, 0x1000000}) 3m9.240726108s ago: executing program 2 (id=1412): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000002c0)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) 3m9.168771743s ago: executing program 38 (id=1412): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000002c0)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) 3m8.995205563s ago: executing program 3 (id=1416): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x400) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000480)=0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x400c9c1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301014000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m8.851486692s ago: executing program 3 (id=1417): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0xb7, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xc, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0xe8defea75728d8e9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x100062, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00183afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe880000000000000000000000000001fabbe93d458f5a4cd6ea083550b6b2577fe4b5d3dce8fa94afe755098a63c27a12ae9a03c256f8be711e60bf37e8f4e8537a05a5b62078ee638b1d3982be51e0a32818c686a66f000741fc412abf8b3bf1"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) sendmmsg$inet(r10, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb17cfe4acd3a98e3e2b000000004ef2b8e4fff8a3be978b94b8a6c2f345d98ef5e8df0695620b81a51badebba", 0x2d}, {&(0x7f00000009c0)="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", 0x580}], 0x2}}], 0x2, 0x40) unshare(0x26020480) r11 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r11, 0x0, 0x0, 0x4008) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xed1ca, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0xd, 0x8b, 0x0, 0x66, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r3, 0x2) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setresuid(0x0, r13, 0xee00) 3m8.727311739s ago: executing program 3 (id=1421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'pimreg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000000080)={&(0x7f0000000940)=@newchain={0x1f70, 0x64, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd, 0xfff1}, {0xd, 0xc}, {0xfff3, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x1090, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xa, 0x10}}, @TCA_FW_INDEV={0x14, 0x3, 'virt_wifi0\x00'}, @TCA_FW_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x78c, 0x6, 0x80, 0x200, 0xb, 0x3, 0x9, 0x1, 0x6a1, 0x0, 0xfffffffe, 0x7, 0x8, 0x78cc, 0xfff, 0x4, 0x7, 0x3, 0x400, 0xc6, 0xfffffacb, 0x8, 0x9, 0x1, 0x9, 0x46f, 0x8000, 0x7, 0x1, 0x5, 0x1, 0x5, 0x3, 0x8, 0xffffffff, 0x80, 0x6, 0xffff7fff, 0x4, 0x2, 0xf3d7, 0x0, 0x8, 0x4, 0xe, 0x6, 0x9, 0x2, 0x7, 0x0, 0x9ac, 0x10000, 0x3, 0x7, 0x9, 0x81, 0x9, 0x69, 0x10, 0x100, 0x3, 0x3, 0x80, 0x9e4, 0x6, 0xfffffffc, 0x9, 0x7, 0xfffffffd, 0x5, 0x1, 0x8, 0x9, 0x1, 0x557, 0x9, 0x5, 0x0, 0xa2a6, 0x3, 0x5, 0x1, 0x8, 0x0, 0x9, 0x2, 0x2, 0x2, 0x0, 0x3, 0xdfc, 0x5, 0x5b, 0x400, 0x47c, 0x7, 0x7f, 0xfffffffb, 0x6e4b73db, 0x945, 0x9, 0x8, 0xdbb, 0x35, 0x0, 0x8, 0xc8, 0x5, 0xaf, 0x7, 0x8, 0x8, 0x8000, 0x3ff, 0x80000001, 0x71b, 0x3, 0x2, 0x2, 0xffffffff, 0x9, 0x9, 0x3ff, 0x1000, 0x7e5abcf2, 0x5, 0x0, 0x9, 0x4, 0x101, 0x81, 0x5, 0xffff7fff, 0x4, 0x10, 0x7, 0x8, 0x3, 0x2, 0x3, 0xd2, 0x9, 0x8, 0x800, 0xf, 0x4846be8f, 0x10000, 0x8000, 0xd, 0x3b12, 0x0, 0x5, 0x2, 0x10, 0x3, 0x8, 0xd, 0x7, 0xffff, 0x9, 0x4, 0x0, 0xd, 0xd, 0xf, 0x4334, 0x2, 0x3, 0x3, 0x0, 0x1, 0x716800, 0x3, 0x7ab3f870, 0x400, 0x7, 0x7ff, 0x7f, 0x8001, 0xffff, 0x6, 0x2, 0x2, 0x8, 0x8, 0xff, 0x2, 0x1000, 0x5, 0x7, 0x2afc1da8, 0x0, 0x5, 0x318e, 0x8000, 0xfffffffa, 0x3, 0x55c, 0x9, 0x0, 0xf, 0x5, 0x2, 0x0, 0x1, 0x6, 0x7, 0x2, 0x0, 0x7, 0x2, 0x5, 0x5, 0xf3e, 0x8, 0x7, 0x4, 0x1, 0xffffffff, 0xc, 0xb14000, 0xfffff801, 0x7, 0x8, 0x10001, 0x2, 0x3, 0x10, 0x21b2, 0x5, 0x9, 0x3, 0x0, 0x6, 0x8, 0x4, 0x3, 0x4, 0x9, 0x6ec6, 0x8, 0x0, 0x10000, 0x9, 0x1ff, 0x17a, 0x93, 0x7, 0x5, 0x0, 0x169, 0x2, 0xe31a, 0x5, 0x23, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xff4, 0x99, 0xfffff001, 0x4, 0x3, 0x9, 0x0, 0x7, 0x10, 0x0, 0xfff, 0x33c, 0x2, 0x3, 0x4, 0xb4, 0x6, 0x40, 0x7, 0xae, 0x6, 0x6, 0x7, 0xffffffff, 0x7, 0x7ff, 0x4, 0xb96, 0x8, 0xc, 0xa, 0x1, 0x4, 0x7, 0x401, 0x8, 0x7, 0x3, 0x4, 0x6, 0xa, 0x100, 0x7, 0x9, 0xff, 0x6, 0x2, 0x6, 0x1, 0x50e, 0x74, 0x8, 0x8, 0x7, 0x7d9be47d, 0x200, 0xba, 0xfffffffc, 0x0, 0x80000000, 0x4, 0x5, 0x9, 0x7fff, 0xffffffd2, 0x80, 0x7ff, 0x5, 0x10000, 0xfffffff5, 0x2, 0x80, 0x8000, 0x81, 0x1697, 0x2, 0x9, 0x5, 0x4, 0x58363056, 0x2, 0x3ff, 0xc990, 0xfffffffd, 0x2, 0x16, 0x10000, 0x1, 0x400, 0x6, 0x2, 0x0, 0x5, 0x5c9, 0x5, 0x4, 0x2, 0x8, 0xf, 0x8000, 0x7, 0x7, 0x2, 0x1ff, 0x4, 0x7, 0x8, 0x8, 0xc, 0x8, 0x6, 0x14e3, 0x7d, 0x0, 0x0, 0x53b, 0x53c, 0x9, 0x80, 0x0, 0x100, 0x28, 0x3, 0xfffffff9, 0x8b7, 0x7, 0x4, 0x0, 0x4, 0xc83, 0xfffffff7, 0x81, 0x7, 0x79ec, 0x7, 0x9, 0xce, 0x4, 0x7, 0x4, 0x5, 0x8, 0x800, 0x6, 0x4, 0x8, 0x81c, 0x8, 0x6, 0x9, 0x7b, 0x7fffffff, 0x200, 0x4, 0x0, 0x638, 0x3, 0x2, 0x5f, 0x800, 0x3, 0x385f, 0xfffffc00, 0x80000001, 0x3, 0x5, 0xfffffff9, 0x100, 0x1b, 0x7ff, 0x8, 0x7, 0xca, 0xffffff70, 0x4, 0x2, 0x7fff, 0x2, 0xc, 0xdd63, 0x8a, 0x401, 0x7, 0x2, 0x9d9b, 0x600000, 0x4, 0x8001, 0x6, 0x0, 0x7, 0x7, 0x7, 0x2, 0x3, 0x2, 0x800, 0x400, 0x4, 0x6, 0x277, 0x8, 0x5, 0x0, 0x4, 0x4, 0xef2, 0x1146, 0x0, 0x2f, 0x3, 0x8001, 0x9, 0x2, 0x0, 0x3, 0x8, 0x9, 0x8, 0x87, 0xbe1f, 0x7, 0x4, 0x7de, 0x3, 0xfffffffa, 0x3, 0x80000001, 0x7, 0x6, 0x5, 0x10000, 0xfff, 0x10000, 0x8, 0x6, 0x3e, 0x40, 0x7, 0x95, 0xa9, 0x10, 0x4, 0x84, 0x8, 0x9, 0x6, 0x2, 0x8001, 0x8, 0x5, 0x2, 0x4, 0xffffffff, 0x6]}]}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_POLICE={0x83c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x90, 0xba55, 0x0, 0x6, 0xe280, 0x1ff, 0x8, 0x3, 0xfffeffff, 0x4, 0x7ff, 0xa03d, 0x19, 0x6a8daecb, 0x7e, 0x2, 0x0, 0x3, 0x6, 0x9, 0x0, 0x3, 0x9f, 0x45b2, 0x1, 0x8, 0x1, 0x800, 0x6, 0x8, 0x80000000, 0xbe4d, 0x4, 0xe5cf, 0x6, 0x7f, 0x5, 0x6, 0x401, 0x10000000, 0x0, 0x1, 0x7fff, 0x6, 0x3, 0x9, 0x1, 0x2, 0x203, 0x5, 0x2, 0x6, 0xce, 0xff, 0x7, 0x1, 0xfffffa55, 0xb, 0xb3fa, 0x4, 0x3ff, 0xffff9662, 0x0, 0x603, 0x4, 0x7, 0x8, 0x3, 0x9, 0x1ff, 0x101, 0x4, 0x6, 0x0, 0x5, 0x9, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x4, 0xab58, 0x10000, 0x1945, 0x0, 0x8, 0x5, 0xc6, 0x5, 0xb, 0x3055, 0x40000000, 0x7f4b, 0x9, 0x0, 0x3ff, 0xff, 0x7, 0x2, 0x7f, 0x1, 0xefb3, 0x7ff, 0x2, 0xc, 0x2, 0x4, 0x6f814985, 0x6, 0x4, 0x4656, 0x400, 0x7000, 0x0, 0x8, 0x3, 0xc0ab, 0xffffffff, 0x6, 0x40, 0x6, 0x10, 0x7, 0x3d1d, 0x9, 0x1, 0x40, 0xffff, 0x7, 0x9, 0x8, 0x10, 0xdf0, 0x1, 0x4, 0x5, 0x6, 0x6, 0x3000000, 0x3, 0xfffff001, 0x8000, 0x8, 0x2, 0xe, 0x6, 0x0, 0x5f4e50e9, 0xa8e, 0x101, 0x4, 0x59, 0x77a, 0x27, 0x7, 0x4, 0x7, 0x7, 0x4, 0x800, 0x6, 0xffff4fcb, 0x6, 0xda1, 0x8e70, 0x124e, 0x81, 0x9, 0x7, 0x1000000, 0x168e, 0x3, 0x1, 0x2bed, 0xed96, 0xf24, 0x2, 0x1, 0x80, 0x1, 0x2, 0x3, 0x9, 0xf232, 0x400, 0xdb, 0xc0400000, 0x5, 0x0, 0x394, 0x1ff, 0xffff, 0x2, 0x5, 0x8, 0x1, 0x8, 0x2, 0x10001, 0x3, 0x3ff, 0x1, 0x18, 0x2, 0x0, 0x40, 0x0, 0xc9fb, 0x400, 0x4, 0xfffffffa, 0x6, 0x4, 0x9, 0x4, 0x2, 0x4, 0x5, 0x2, 0x8001, 0x0, 0x7, 0x7, 0x1, 0x8, 0x9, 0x4, 0x8, 0x4, 0x2, 0x1, 0x7, 0x200, 0xe409, 0x10000, 0x4, 0x10, 0x8, 0xc7, 0x6, 0x7, 0x2, 0x81, 0x401, 0x6, 0x7ff, 0x800, 0x9, 0xe, 0x7ff, 0x9, 0x5b, 0x7, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1723, 0x6, 0x5, 0x7, 0x8, 0x4, 0x3, 0x40, 0xabe, 0x1, 0x4, 0x20d, 0x1, 0x4a, 0xbb, 0xfffffffa, 0x1, 0xa, 0x2, 0xd, 0x8, 0xfffffffb, 0x6, 0x9, 0x5, 0x7, 0xa8, 0x5, 0xfffff799, 0xc5eb, 0x2, 0x6, 0x100, 0xcb, 0x4, 0x4, 0x8000, 0x200, 0x0, 0x7, 0x9, 0x7, 0x4, 0x5, 0x8, 0xaa2, 0x80000000, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8f, 0xc5, 0x101, 0x2, 0x7f, 0x4, 0x5, 0x7, 0x0, 0x7fff, 0x1ff, 0x10001, 0x343, 0x1ff, 0x80, 0x6, 0x5, 0x6, 0xefc0, 0x5aa, 0x2, 0x9, 0xffffffff, 0x37, 0x3ff, 0xfdc, 0x0, 0x2, 0x7, 0x8, 0x10001, 0x1, 0x500000, 0x380000, 0x660, 0x10001, 0x7, 0x9, 0x9, 0x1, 0xffffffff, 0x7, 0xfffff255, 0xbbd, 0x400, 0x200, 0x5, 0x0, 0x3, 0x10, 0x1, 0x7, 0x3, 0xffff351b, 0x800, 0x1b98, 0x8000, 0xfffffffe, 0x8001, 0x8, 0xc34a, 0x9, 0x10001, 0x3, 0xfffffffd, 0xfffffffd, 0x6, 0x8, 0x5, 0xfffffffb, 0xdb, 0x4, 0xdef0, 0x86e0, 0x627, 0x90c47eb, 0x4, 0x2c, 0x7, 0x739, 0x6, 0x3, 0xb, 0x9, 0x0, 0x3, 0x40, 0x4ec, 0x10000, 0x6000, 0x7, 0x5, 0x6, 0x7, 0x4, 0xfffff596, 0x5, 0x9, 0x5, 0x7f100000, 0x5bf, 0x80000001, 0x10, 0x1, 0x0, 0x3, 0x5, 0x3, 0x0, 0x4, 0xd4, 0x7, 0x7, 0x7, 0x80, 0x7fffffff, 0x0, 0x7, 0x9, 0x203f1e7c, 0xfe, 0x0, 0x4, 0x3, 0x35, 0x4, 0xffffffff, 0x6, 0x7fffffff, 0x0, 0xffff, 0x6, 0x5, 0x3, 0xfffffff9, 0x93, 0x800, 0xffff1e61, 0x9, 0x8, 0x4, 0xd, 0x6, 0x3, 0x0, 0xaa0, 0x81, 0x6, 0x4, 0x101, 0x8, 0x400, 0x1ff, 0x21fe, 0x401, 0x1, 0x80000000, 0x2, 0x6, 0x7fffffff, 0x1, 0x0, 0xffffffff, 0x1, 0xc, 0x2800, 0x10000, 0x438, 0x4, 0x4, 0x6, 0x0, 0xc3af, 0x1, 0xfffffff8, 0x653, 0x7f, 0x6, 0x7, 0x5, 0x5, 0x7, 0x0, 0xe, 0x7, 0x1, 0x800, 0x8, 0x8, 0x6, 0x1, 0x4, 0x7fff, 0x0, 0x7, 0x0, 0x60000000, 0x2, 0x1, 0x7, 0xcdb, 0x6]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x1ff}, @filter_kind_options=@f_fw={{0x7}, {0xe94, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @TCA_FW_POLICE={0x46c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5fd6a67b98060967, 0x3, 0x8b67, 0x50, {0x7f, 0x0, 0x9, 0x0, 0x7, 0x9}, {0x2, 0x0, 0x2, 0x2, 0x0, 0x9}, 0x0, 0x581, 0x100}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x800, 0x9, 0x9, 0x2, 0x100000, 0x9, 0x5, 0x0, 0x9, 0x9, 0xf67, 0x1ca4, 0x1a24, 0x837b, 0x7ab, 0x3, 0x100, 0x80000000, 0xa, 0x9, 0x6, 0x0, 0xfffffffa, 0xc, 0x8c95, 0x5, 0xb, 0x3, 0x6a0, 0x0, 0x36b, 0x4, 0x7, 0x3, 0x401, 0x7, 0x784f, 0x8, 0x3, 0x2, 0x1, 0x10, 0x1, 0x2, 0x7, 0x2, 0x9, 0x7, 0x9, 0x3, 0x6, 0x183, 0xf95a, 0x0, 0x9, 0x8, 0x5ee1, 0x10001, 0x8, 0x5, 0x9, 0x300000, 0x3, 0x4, 0x1, 0x3, 0x2f8, 0x49, 0x401, 0x7f, 0x9, 0x83a8, 0xf, 0x3ff, 0x88, 0x101, 0x8, 0x7909fa9c, 0xffff, 0xe, 0xdb51, 0x6, 0x8, 0x7f, 0x2, 0x1, 0x5, 0x7, 0x4, 0xfffffff8, 0x6, 0x4, 0x1, 0x1, 0xcfaa, 0x7f, 0x40, 0xe, 0x3100, 0x80000001, 0x4, 0xf45e, 0x6, 0xf298, 0x1, 0x7, 0x0, 0x4, 0x5, 0x8, 0x7, 0x0, 0xdcec, 0x7fff, 0x6, 0x3e79, 0x400, 0x6, 0x5, 0x7fffffff, 0x480, 0x8, 0x1ff, 0xf, 0xfff, 0xd9, 0xd92, 0x1000, 0x1, 0x88, 0x9, 0x0, 0x7, 0x7, 0xd5, 0xffffffff, 0x7, 0x1, 0xfffffff8, 0x6e10, 0x7, 0x7fff, 0x6000, 0x80, 0x3, 0x5, 0x3, 0x8, 0x8, 0x80, 0x7, 0x1, 0x2, 0x5, 0x19, 0x3, 0x1ff, 0x1ff, 0x9, 0x3, 0x0, 0x0, 0x32d, 0x100, 0xa, 0x0, 0xa8, 0x9, 0xd, 0xfffffff6, 0x0, 0x3, 0xfffff983, 0x5, 0x0, 0x8122, 0x10, 0x10001, 0x2, 0x534c5c50, 0xa86, 0x0, 0x6, 0x1, 0xae0e, 0x2, 0x4, 0x7, 0x5, 0x2, 0x2, 0x4e1b, 0xd9, 0x5fa9adad, 0x40, 0x0, 0x40, 0x80000001, 0x2, 0x3, 0xdbf, 0x5, 0x2, 0xbb8a, 0x2, 0x5, 0x1ff, 0x1000, 0x27ab8d7c, 0x28cc9c35, 0x4, 0x7, 0x0, 0x3, 0x6, 0xf0, 0x0, 0x4, 0x3, 0x100, 0x3, 0x256, 0x10001, 0xd74, 0x2, 0x6, 0x8001, 0xa9b0, 0x3, 0x5d, 0x10, 0xbe58, 0x5, 0x0, 0x0, 0x7, 0x6, 0x7, 0x9, 0x40, 0xce6, 0xfffffff5, 0x7, 0xf1a5, 0x9, 0x8, 0x2e0, 0x0, 0x6, 0x9, 0x7fffffff, 0x1c0, 0x1000, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x900}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_FW_ACT={0x584, 0x4, [@m_sample={0x120, 0x4, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x6, 0x1, 0x4000, 0x6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x82, 0x20000000, 0x80000001, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8a7a}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x93, 0x6, "27105b84d02d3bf038905384ed65a8a4db1522c19c8c1338a9df08de414b1ea59805d9952f495bf0b011c6ed63348c06e57277fce494fd281c32f2c74a24d5baa63a46d3e1c0824302dc8fa96c9abbbe38d46c8f504a114c49083f22185421a31c138fc7b88cfb2b1660fa2a10e4f3cef39eb50e85cb9e5a22f21799b9a6c339432808b0274d7271a898f5d2b0e1d4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_connmark={0x1c0, 0x1, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2ae, 0x7, 0x4, 0x8, 0x2}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x80000000, 0x2, 0x60, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x0, 0x3ff, 0x6}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xed67, 0xfffffff7, 0x4, 0x5, 0x1}, 0x1168}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x2, 0x4, 0x3, 0x4}, 0xf801}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x4, 0x2, 0x7f}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x99ad, 0x4, 0x20000000, 0x4, 0x1000}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcbd, 0x9644, 0x7, 0x5, 0xfffffffd}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc98, 0x0, 0x4, 0x4}, 0x6c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x10, 0x20000000, 0x1ff, 0xd06}, 0xe5d2}}]}, {0x78, 0x6, "11842e1427fc1882d740c3307a7928e3aef2a86ab7b22e3096a91962037888a8ce1de885ec434ad948cac49cc254249b9860244dd4d09d5cb4dbf077ee4187d66582577b3b54579b4f0703c166db87007a3c3e5fe302fbc747b5ba221f40b1e72f02bd30553e912fed849a97dfe04b361e1a0466"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x140, 0x1b, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xef, 0x7, 0x7, 0x2, 0x7fffffff}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x74, 0x0, 0x9d, 0x3}, 0x8}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7f}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7d6}]}, {0x8d, 0x6, "7b79fe676fff9870d695936391daa26dcbb89a7893a32645db555bca07d699e99b473afd7964d263c54fc627beadb1dd9f5dc5e775ffeab71e8ae5d3fdcbaf8ae7577205ac5a4d5acb2a59d5ae5e2c77973cdf98a0f3fc6d41f070c67f06690dae88060360fe4696ab530f67d74a3b1f6d4540d0ba3e2e8eb9e06874633366319d966c86b90bdde4a5"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x6c, 0xf, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x2, 0x101, 0xf1e}, 0x14}}]}, {0x24, 0x6, "e61aa5668e15a15f55827e620cb0d2804ee494112af0cce8ed6c7dcf7bc4e4be"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0xf4, 0x9, 0x0, 0x0, {{0x9}, {0xc4, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x4, 0x5, 0x1000, 0x6be}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x10001, 0x10000000, 0x8255, 0x9}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4a, 0x10000, 0xffffffffffffffff, 0x10001, 0x8}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x0, 0x7f}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x10, 0xffffffffffffffff, 0x4, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0xb, 0x8, 0x7, 0x3}, 0x2}}]}, {0x5, 0x6, "b7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0xc911}, @TCA_FW_MASK={0x8, 0x5, 0xa}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_POLICE={0x45c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x9, 0x7, 0x1f, {0x6, 0x1, 0x37, 0x6, 0x4, 0x4}, {0xa, 0x2, 0x5, 0x0, 0x10, 0x1}, 0x4, 0x400, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x3, 0x4, 0x2, 0x80000000, 0x1000, 0x5, 0x400, 0x4, 0x8, 0x6, 0x3, 0x40, 0x8, 0x0, 0x101, 0x800, 0xfffffffd, 0x8000, 0x100, 0x7e70, 0xb9c, 0x5, 0x0, 0x7b, 0x5, 0x7, 0x8, 0x6, 0x800, 0x8, 0x8, 0x26f7, 0xf417af4a, 0xc5c, 0x4, 0xe, 0x8001, 0x5, 0x81, 0xf2, 0x7, 0x8, 0x5, 0x6, 0x6, 0x1, 0x140, 0x7, 0x923, 0x7, 0x9, 0x8, 0x5, 0x4, 0x0, 0x149a, 0x2, 0x3c1b, 0x0, 0x7, 0xf, 0x7, 0x10000, 0x2, 0x3, 0x6, 0x3ff, 0x8, 0x400, 0x7f, 0x7fffffff, 0x86f, 0x800, 0x1, 0xfe000000, 0x1, 0x6, 0x7, 0x6, 0x7, 0x7, 0x7ff, 0x6, 0x800, 0x1, 0x7fffffff, 0x4, 0x1, 0x2, 0x4, 0x0, 0xff, 0x7, 0xfffffffe, 0x40, 0xfffffffc, 0x0, 0x4, 0x2, 0x5, 0xd3, 0x6, 0x8, 0x38f0, 0x2, 0x3, 0x8, 0xfffff76f, 0x7, 0x4, 0xa, 0x5, 0x200, 0x1, 0x2, 0x3, 0x2, 0x7fffffff, 0xfffffffe, 0xfffffffc, 0x2, 0x30, 0x8, 0x5ee, 0x1, 0x1, 0xfffffff7, 0x8, 0x101, 0xa, 0x6, 0x3, 0x5, 0x8, 0x80000001, 0x1, 0x9, 0x5, 0x6, 0xfffffff7, 0x7, 0xffffffed, 0x10, 0x2, 0x0, 0x100, 0x1, 0x1, 0xd, 0xffffffff, 0x3800, 0x8, 0x3, 0x4, 0x8, 0x73, 0x8, 0x3, 0x1, 0x3, 0x8, 0x9, 0x9, 0x6, 0x6, 0x1000, 0x6, 0x6, 0xfffffffa, 0x0, 0x8, 0x8000, 0x7, 0x3, 0x3, 0xfff, 0x16, 0xcca, 0x8, 0xbe27960e, 0x7, 0x9, 0x1, 0xffff, 0x4, 0x7, 0x0, 0x0, 0x1, 0x8001, 0x1ff, 0x9, 0x1, 0x3f, 0x4, 0x1, 0xb, 0x1, 0x7158, 0x4, 0xc, 0x7, 0x2ce, 0x3, 0x80000001, 0x0, 0x7ec, 0x5, 0x80, 0xfffffffd, 0x200, 0x200, 0x0, 0xd, 0xffffffff, 0x9, 0x6, 0x3ff, 0x2, 0x1, 0x74, 0x6, 0x8, 0x2, 0x38, 0x81, 0x8, 0x8fd, 0x80000000, 0x1, 0x3, 0x5, 0xf, 0x6, 0x2, 0x6, 0xfffff000, 0x7, 0x10001, 0x2, 0x1, 0x8, 0x9, 0x81, 0x8, 0x3, 0x0, 0x6ec, 0x258, 0xd, 0x8, 0xfffffff7, 0x9, 0x10001]}]}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x1f70}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r3, @ANYBLOB="0000000000000000200012800800010073697400140002"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) 3m8.149498203s ago: executing program 3 (id=1426): r0 = socket$inet(0xa, 0x800, 0x94) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x0, 0xf9fc}, 0x8) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000800)={[{@fat=@time_offset={'time_offset', 0x3d, 0x3bf}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@discard}, {@fat=@debug}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x2a5, &(0x7f0000000540)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) (async) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f0000001900)=""/4079, 0xfef, 0x66) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x2, 0x7a}, 0x8) 3m8.034102489s ago: executing program 3 (id=1428): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socket(0xa, 0x1, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9605, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000200000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 3m7.593988605s ago: executing program 3 (id=1429): socket$inet(0x2, 0x800, 0x1000) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x57}}}}}}, 0x0) socket$inet(0x2, 0x800, 0x1000) (async) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x57}}}}}}, 0x0) (async) 3m7.539291188s ago: executing program 39 (id=1429): socket$inet(0x2, 0x800, 0x1000) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x57}}}}}}, 0x0) socket$inet(0x2, 0x800, 0x1000) (async) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x57}}}}}}, 0x0) (async) 2m12.096085722s ago: executing program 8 (id=2332): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, 0x0, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x4, 0x701, 0x2, 0x40000006, 0x0, 0x7, 0x9}, 0x0, 0x0, 0x0) 2m12.039914545s ago: executing program 8 (id=2333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xff88}, 0x0) 2m12.039433315s ago: executing program 8 (id=2334): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aac3aaaaaaaaaaaaaaaaaaaa86dd090035f200140600fe5000000000000000000000f2ffffbafe80080095ffffffffffffff000000c37aaa3f6cb78254d219baaa00004ed614e9d28682e425bec32842d91b4694ec09042d4af3be27dea85b514d96b5d77d7bb087150d4ae5d433d098828bebac728331173275efd779058954f1c2cf9d8c17fc6682c428b4186ce61794ebca28611a0256ad96bae4272636219b9a975e75395ceae05e09", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x50) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x2000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r5, &(0x7f00000000c0)="2950f24f00c18cadbbb17655d2f721dc4009487fd8a5587da6845e13b773611101701472cbb97dedc7565c0349", &(0x7f00000001c0)=""/149, 0x4}, 0x20) 2m12.038937425s ago: executing program 8 (id=2335): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x7fd, &(0x7f0000000840)="$eJzs3U1oHPfZAPBnZMmRlfc1Ie+LX2NsZ+LkBRscZSU7CiKFZLMayZOsdsXuKtiEkphaDsZyE+IGah/q+JLS0hJ66jHJoZf2VHppKbTQHtpTob32Fgj0kLS0t5aAyszs2pL14S/FNunvJ6z5eub/f+av9TwaSTMbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAkjZlabSKJZt5aPJlurjHTac9vsX3Q3q/XTLboNyIp/sXoaOytVu393+ub9xSfDsX+aml/jBaT0bj88J5Hnvuf4aHB/lsktN2GN1p58dLl86eXl5fevpUWRrY9p+3y3V+uWfzRWNziyM5lrbzbzufrc1mad9vp9NRU7ekTs910Nm9m3VPdXjafNjpZvdfupIcbR9KJ6eljaTZ+qr3YmpupN7N0uFr57FOTtdpU+tL4QlbvdNutp18a7zZO5M1m3pordyw2FzHPFi/El/Ne2svq82l69tzy0rG1Ke1al2QRNLFmzecrq5f2P/nIJ+98/I9zS5M3O9zJ2uTkxMTk5MRUEhG12vD1Fc9MP/NsrTZcu0Gsi7inL1oeQNt8Boc7N9Sv/9GMPFqxGCcj3fCjETPRiXbMx/UX8OrtfYP6//9P//UPW/X7/qr6X1X5of17r2/eF2X9P1gtHdys/ld973xok5y/qI/SV4pPF+NSXI7zcTqWYzmW4u0vpL9k+9oa2t7M5iKLVuTRjXbkMR/1ck3aX5PGdEzFVNTitTgRs9GNNGYjj2Zk0Y1T0Y1eZOUrqhGdyKIevWhHJ9I4HI04EmlMxHRMx7FII4vxOBXtWIxWzMVM1MtWzsa5ctyP3ZDXnm+9/os3/vjJB+VXaxA0sdUQvxtRBv19i6B1xVz957ZFxG+37wQOd2FlUP8BAACAL62k/Ol7cf0/EgfKudm8mb26JubVz27ca7j49O49TBMAAAC4C+Vv/vdHUs3EgUiK6//a2qCfjJSTh+5DfgAAAMDdS8p77IqL/7F4rJob3C5Vu9+5AQAAANuj/LX/wWIyFnGlXOH6HwAAAL5kXvlZf+bGZ+x/PHjG7tDCQ8mv/hadzkhy/MOTTyYX6kVc/cKOar/+5JVrLfZm9w3uJqjamhq+/HCxPNzI9ieDBwV/3r+ZoHq0wL7ha7uvzeOFXdXaJEmKBK4ubJpArElgd/8oriVQLsX34vEq5vEz1fTMYEt1tGOzeTMbb7Sbz01Evb57qJed7L3z9XPfjPLwv9Oa353E2XPLS+Nfe3P5TJnL1aKVqxf6x7vuOYpb5LIyuJ3iwPqnGxdNjZQ3YvT7Hav6ra0+/qGLu4uZoRvHYIs+34tD/1XGHBqrYsfWHv9o0efE+GZHP1Yd38S6Ix9e/8KqsjjVXyqyuHb7yHvxRDXzxOEnqskGWUxulUUxFpOrs6jGLIZuY/w3ySIeiYgPHr9y8sBoRHbsZlkcu8ssAO6Xs+VTf4oqVJ2eqyr0r5VKUf87nZGdsabuVDvc6lkuKXu5yTv5jBSn/luq7v9c2eKMfriKOVx9PzG8b4O6UtvgjP7Wubd+1z+jH//xDz/86sHf//SO6/roIGTXYObR3zw8FGUWu/pZXO5v6Ywk379WSaqq+lGx/qNN++02J5NiCHd848JbsefipctPnbtw+o2lN5Z2RsRU7Xit9kyS9L94K+V3DGoPABs4FAerQr7pe+xs8i485TcAZURyfKur6h2RPHrtTwqKmvhmLMeZOFrebRARj23c79iqP0M4Gof6yW581Tq26h1ejm50VXclrsUWdbKKndw4dsN2j60asf/7wRf59QCAe+HQTerwpvX/ekRy9CbX3Wtr+ZEq9sggg81reUQ8f29HAwD+M2Sdz5Kx3reTTidfeG1ienqi3juRpZ124+W0k8/MZWne6mWdGK635rJ0odPutRvtZjHzSj6TddPu4sJCu9NLZ9uddKHdzU+W7/ye9t/6vZvN11u9vNFdaGb1bpY22q1evdFLZ/JuI11YfLGZd09knXLn7kLWyGfzRr2Xt1tpt73YaWTjadrNslWB+UzW6uWzeTHbShc6+Xy9czUimovzWTqTdRudfKHXrhoc9JW3Ztud+bLZv+y+36MNAA+Gi5cunz+9vLz09p3N/PlWgjfvfXTkXh4rAFC5XqU//e8bt/nhOwAAAAAAAAAAAAAAPBju8v6/9TO7trfB0a1iVq5ErN+UrKys3EYXu+ImMTurkdoR2ztQ92Tm6ra0MxQbjfODM5Nsvun1558/v9nuL17Ze+LWurjp/5ThiOjf6vrupzt//n616YU7Opyh29/rTxFxB32tJFvE3OcTEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs4N8BAAD//2uxZPA=") openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0xa000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) mprotect(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x2000006) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0xe, 0x6}]}) timer_create(0x7, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x9, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) close(r1) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r6, 0x0, 0x7c, 0x8) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) write(r4, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x930, &(0x7f0000000800)) r8 = socket$l2tp(0x2, 0x2, 0x73) getpeername(r8, &(0x7f00000001c0)=@isdn, &(0x7f0000000040)=0x80) ptrace$poke(0x21, r7, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 2m11.182736006s ago: executing program 8 (id=2336): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001600)=ANY=[@ANYBLOB="58130000160001052cbd7000fbdbdf2500000000000000000000000000000001e00000020000000000000000000000004e2200064e24fffa0200802088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d53300000000000000000000000000000000000000ff01000000000000a2000000000000000700000000000000fcffffffffffffff98040000000000000400000000000000ff7f000000000000fe480000000000000400000000000000ff7fffffffffffffdf5f742100000000940b00000000000005000000f8ffffff0906000000000000000000000a00027f010000000000000003000000de000000ac000700fe8000000000000000000000000000bbfc0100000000000000000000000000014e2200024e21000d020020a032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1358}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) 2m10.956379058s ago: executing program 8 (id=2337): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x40}, 0x100b28, 0xa, 0x0, 0x7, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec0000e01000010800"/20, @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 2m10.93781379s ago: executing program 40 (id=2337): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x40}, 0x100b28, 0xa, 0x0, 0x7, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec0000e01000010800"/20, @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1m46.202646857s ago: executing program 9 (id=2880): unshare(0x22020400) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f00000000c0)="b79b147841", 0x5}], 0x1) 1m46.201687537s ago: executing program 9 (id=2882): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001900), r1) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m46.121961951s ago: executing program 9 (id=2884): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c0000800800034000000002"], 0xf8}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) 1m45.485444889s ago: executing program 9 (id=2902): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000001c80)={@loopback, 0x6b, r3}) 1m45.141558619s ago: executing program 9 (id=2909): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffb0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 1m44.667469216s ago: executing program 9 (id=2919): prctl$PR_GET_THP_DISABLE(0x2a) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000080)=0x6, 0x4) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000140), 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000240)) socket$nl_xfrm(0x10, 0x3, 0x6) 1m44.655294467s ago: executing program 41 (id=2919): prctl$PR_GET_THP_DISABLE(0x2a) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000080)=0x6, 0x4) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000140), 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000240)) socket$nl_xfrm(0x10, 0x3, 0x6) 32.698458827s ago: executing program 4 (id=4675): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_create1(0x80000) accept4(r0, 0x0, 0x0, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unshare(0x22020400) sendfile(r1, r1, 0x0, 0xe3aa6ea) 32.503336728s ago: executing program 4 (id=4678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x4, &(0x7f0000000100)=[{0x25, 0x2, 0x2, 0xfffffffe}, {0x14}, {}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff, 0x473f}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x7) socket$unix(0x1, 0x1, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbfb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x7, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0x10, 0x6, 0x100, 0x6, 0xfffffffc, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x7, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x3, 0x2af, 0x3, 0x5, 0x2, 0x300000, 0x9, 0xbbce, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x7, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x102, 0x5, 0x252, 0x81, 0xb, 0x4, 0xa0006, 0xc4e, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x10000008, 0x8, 0x5, 0x1fc, 0x1ff, 0x3]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 31.610549431s ago: executing program 4 (id=4693): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x600000000000000, 0x0, 0x20008000}, 0x0) 31.510439397s ago: executing program 4 (id=4697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 31.476263608s ago: executing program 4 (id=4698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0xfffc, 0x20, 0xfff3, 0x20}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x1001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x15, 0x0, &(0x7f0000000400)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000f00)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe80000000dc000000000000000000aaff0200000000000000000000000000013a00000000000000030090780800000060aabc2b00028401fe8000000000000000000000000000aafc0200"/110], 0xfdef) r7 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r8, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x50, r10, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_USER_PRIO={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48041}, 0x0) 31.195403505s ago: executing program 4 (id=4704): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="4f7229ef3e12208b7a56635b8468808c7092c016f3c14b983f39a84cdaef484a099bad76e5da6144bfd23797093e81ad0283d1f3f3bc25b732d8b7604aea40004b4528a024264dd09501bf9ac6d7206b3bf20fa5f2ca15c2784533af636c26cc7d6e6eb3a84ed73f152de6386100f5a3bfd376885f9f4ebdd36c91f3c306704df07c", 0x82}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 16.030583002s ago: executing program 42 (id=4704): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="4f7229ef3e12208b7a56635b8468808c7092c016f3c14b983f39a84cdaef484a099bad76e5da6144bfd23797093e81ad0283d1f3f3bc25b732d8b7604aea40004b4528a024264dd09501bf9ac6d7206b3bf20fa5f2ca15c2784533af636c26cc7d6e6eb3a84ed73f152de6386100f5a3bfd376885f9f4ebdd36c91f3c306704df07c", 0x82}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 4.026791494s ago: executing program 6 (id=5006): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc}, {}, {}, {0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000, 0x0, 0x8000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x0, 0x100) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd30, 0x35dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8048}, 0x24040014) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x44}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x46}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000001}, 0x4000) listen(r0, 0x5) syz_clone3(&(0x7f0000000380)={0x4840080, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x2}, &(0x7f0000000100)=""/191, 0xbf, &(0x7f00000001c0)=""/196, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 3.939574199s ago: executing program 6 (id=5008): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8004}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 3.723747522s ago: executing program 0 (id=5012): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500007fff0000000000000000", @ANYRES32=r1, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r1], 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048880) 3.551612892s ago: executing program 0 (id=5015): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x338085, &(0x7f0000000080)={[{@discard}, {@nouid32}]}, 0xff, 0x44d, &(0x7f00000004c0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bc2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x12, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffffffffffffcd}}, @qdisc_kind_options=@q_red={{}, {0x0, 0x2, [@TCA_RED_PARMS={0x0, 0x1, {0x6, 0x8000, 0x9, 0xbf, 0x1c, 0x1a, 0x4}}]}}, @TCA_RATE={0x0, 0x5, {0x10}}]}, 0x34}, 0x1, 0x0, 0xfffffffffffffff1}, 0x0) 3.488388976s ago: executing program 0 (id=5017): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x18}, 0x48) 3.379710272s ago: executing program 0 (id=5020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000090000", @ANYBLOB="010000000000000024001280090001"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3.089585339s ago: executing program 0 (id=5022): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000001e40)=[0xfffffff9, 0x2], 0x2) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT_TABLE(r1, 0x112, 0xcf, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000007c0)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0xa8, 0xffffffff, 0x150, 0x150, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, &(0x7f0000000340), {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @loopback, @loopback, @gre_key, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @local, @multicast2, @port=0x4e22, @port=0x4e20}}}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff000000, 0xff000000, 'pim6reg\x00', 'dummy0\x00', {0xff}, {0xff}, 0x89, 0x6, 0xa}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @local, @local, @gre_key=0x7, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @multicast1, @port=0x4e22, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x7ff, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffa}]}) munlock(&(0x7f0000f1e000/0x1000)=nil, 0x1000) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) accept4$inet(r8, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x80000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) cachestat(r9, &(0x7f00000001c0)={0x6}, &(0x7f0000000200), 0x0) 2.780274827s ago: executing program 5 (id=5024): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x8, 0x4000, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x8}, 0x120, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, r2, 0x2) perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe, 0xa4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1ff}, 0x100006, 0x2, 0xfffffffc, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r3, 0x0, 0x0) preadv2(r3, &(0x7f0000002580)=[{&(0x7f00000013c0)=""/45, 0x2d}, {0x0}], 0x2, 0x7, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2.752127919s ago: executing program 0 (id=5025): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0xa00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000440)={0x80000001, 0xffd, 0x3, 0x5, 0x3, 0x0, [{0x3, 0xb8, 0x5}, {0x8, 0x7, 0x52d, '\x00', 0xb80}, {0x9, 0x5, 0x9, '\x00', 0x1004}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) splice(r1, 0x0, r2, 0x0, 0x39000, 0x3) 2.533732082s ago: executing program 6 (id=5029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x6f, &(0x7f0000000180)=""/111, 0x41000, 0x4}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r1 = gettid() socket$pppl2tp(0x18, 0x1, 0x1) timer_create(0x1, &(0x7f0000002040)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280)={r0, 0x66, "9688c039a7c444b51535b1cd9e600294325ebe58f0be91bc9cb79db1672bf97cbc154564722fcf7335faca099275d5119baa0860cec174140d0dad221f6fda4ea8c45c71aa8bf8df24cf88632eeb73e36c82d9bed884aee216c024fa3217d6bbed7fb4f08ff9"}, &(0x7f0000000300)=0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40500c0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)={r3, 0xf, "cd05ca2c4919e5de7e195dcf4fce2f"}, &(0x7f0000000380)=0x17) rt_sigsuspend(&(0x7f0000000180)={[0x6]}, 0x8) 1.660605803s ago: executing program 6 (id=5045): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x6, 0x8, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x40, 0x8, 0x7}}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r3, 0xc0085508, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)={@random="5d950784f28b", @random="623d87a2a1de", @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "e3", "0541e4", 0x6, "2477ddd2d0ec4bdc01"}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x15, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@jmp={0x5, 0x0, 0x8, 0x8, 0x1, 0x10, 0x4}, @call={0x85, 0x0, 0x0, 0x65}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x4, 0x6e, &(0x7f0000000840)=""/110, 0x40f00, 0x2, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0xa, 0xcc, 0xab}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000980)=[{0x1, 0x1, 0x3, 0x3}, {0x5, 0x4, 0x10, 0xb}], 0x10, 0x1}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x20, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="310000003f3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="24001280110001006272696467655f736c617665000000000c00058008002200", @ANYRES64=r6], 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r4, r6, 0x25, 0x0, @void}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x4, [@union={0xb, 0x7, 0x0, 0x5, 0x1, 0xba84729, [{0xc, 0x2, 0x400}, {0x8, 0x3, 0xde}, {0xa, 0x4, 0x4}, {0xc, 0x2, 0x1}, {0xb, 0x1, 0x673}, {0x3, 0x3, 0x4}, {0xd, 0x0, 0x6}]}, @restrict={0x8}, @restrict={0x7, 0x0, 0x0, 0xb, 0x5}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x44, 0x0, 0x67, 0x3}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000380)=""/196, 0xa4, 0xc4, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/11, @ANYRES32=r2, @ANYRES32=r9, @ANYBLOB="020000000200"/28], 0x50) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="f4000900062b2c25fe8000000000e40ddc8b850f238466ccff8d7a00b02dc56e911b51818462b4003a0000018baddbeb26e47f9403c0bb1a", 0x38}], 0x1}, 0x0) 1.640037944s ago: executing program 5 (id=5047): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) epoll_create1(0x80000) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x1a, r4}, 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x420000, 0x400, 0x8, 0x7}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x40}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480"], 0xf4}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="3c00000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280080001006772650010000280ed40839d899fc1050000000400120000000000"], 0x3c}}, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000100)={0x20000000}) close_range(r0, 0xffffffffffffffff, 0x0) 1.419276427s ago: executing program 5 (id=5049): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000001080003000b000000", 0x24) 1.418870307s ago: executing program 5 (id=5050): r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, 0x0}, 0x40800) r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x1a6}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 931.653656ms ago: executing program 5 (id=5056): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmsg(r1, &(0x7f0000002400)={&(0x7f0000000000)=@can={0x1d, r2}, 0x80, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000200)}, {&(0x7f0000001200)="7e396b3ccfb7f1cd6429123078b486af22639b09e07e8c64ff28a0a8ba295a4a769249b4c0ed5ba3de3be562621b318a04ca977719eff3c336ab7e893ebaa35ae397f70394084c0e5caf7b8c0f4ad737b1173a950cdf662c623847", 0x5b}], 0x3, &(0x7f0000001340)=[{0xee0, 0x88, 0x4, "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"}, {0x10, 0x10c, 0x7}], 0xef0}, 0x20000001) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r0, @ANYBLOB="6d55274ff48cd3bea200"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="03000000020000000300"/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x84000000) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000072c0)={@map, r0, 0x36, 0x10, 0x0, @void, @value=r0}, 0x20) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 881.109019ms ago: executing program 6 (id=5057): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r1 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x86) fchdir(r2) (async) openat$cgroup_type(r2, &(0x7f00000002c0), 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async) unshare(0x22020600) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x3) (async) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 739.923227ms ago: executing program 5 (id=5059): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0xf00) connect$inet(r0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xb, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x20, 0x4, @thr={&(0x7f0000000400)="c497cca9c2077c87c7af26d4624f397a274d39413dc12b4a3da2e85de6ad60886edef6a8e81393ef6e6e032a32a8f9aa07308008383550c2607cd576932942c16efccca0c1248bb50e9565d4da34e043844459c8b4dd2e958b3f54425eafcc06c8b04f089591337b21cff3aca86ae5f5e52be0955a4aad0bc5cef5dfa9005bacf22d11281f6abe56ec530abd0dcfe8229628f150e763e91bee87ea44d23040f511e363abc68aab414eebd898d23283a1f5243452f33687", 0x0}}) syz_open_procfs(0x0, 0x0) 739.037837ms ago: executing program 6 (id=5061): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0x461e, 0x4000, 0x3, 0x369}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = syz_io_uring_setup(0x7dc9, &(0x7f0000000340)={0x0, 0x849b, 0x10100, 0xfffffff8, 0x234, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) socket(0x0, 0x80000, 0xea) socket$inet6(0xa, 0x800000000000002, 0x0) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x1, 0x0, 0x2e787ec3, 0x900, 0x1}, 0x0, 0x0, 0x0) 671.984831ms ago: executing program 7 (id=5062): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setitimer(0x2, &(0x7f0000000280)={{0x77359400}, {0x0, 0xea60}}, &(0x7f00000002c0)) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3e8}, [], {0x14, 0x3ec, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e23, 0x400, @mcast1, 0x80000001}, {0xa, 0x4e20, 0x225, @private2, 0x10001}, 0xffffffffffffffff, {[0x8001, 0x1, 0xfffffff8, 0x100, 0x0, 0x1, 0x6, 0x101]}}, 0x5c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/freeze_filesystems', 0x149a82, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x1, 0x3a, '\x00', 0x3a, '\x00', 0x3a, './file0'}, 0x29) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000300), &(0x7f0000000340)=0x4) unshare(0x22020600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x2000, r4}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) listen(r0, 0x100) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r5, 0x5bd5, 0x1, [0x1000]}, 0xa) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x8, 0x6}, &(0x7f0000000180)=0x8) 605.454104ms ago: executing program 1 (id=5064): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 575.068426ms ago: executing program 1 (id=5065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 501.399751ms ago: executing program 1 (id=5066): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x527, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x14000, 0x8, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$rds(0x15, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00d38a7c929d685d65a2000010000000ff61223100080000000000", @ANYRES32=r0, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="ff00000000000000000006000000000000000000", @ANYRES32=0x0, @ANYBLOB="0815010021100000280012800b00010069703667726500001800028014000700fc01000000000000000000000000000108000a00", @ANYRES32=r3, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x101, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007112bd000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) io_uring_setup(0x2809, &(0x7f0000000000)={0x0, 0x8e40, 0x80, 0x0, 0x12a}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x43a, 0x2, 0x1, 0x4}) 426.011685ms ago: executing program 1 (id=5067): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) 389.926227ms ago: executing program 1 (id=5068): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004, 0xffffff7f}) 283.492804ms ago: executing program 7 (id=5069): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x448, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000700)=0xffffffff, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "02823f6bd900000000000097efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) request_key(0x0, 0x0, 0x0, 0x0) 264.604324ms ago: executing program 7 (id=5070): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000018000000", @ANYRES32, @ANYRESDEC], 0x50) 240.210756ms ago: executing program 7 (id=5071): syz_read_part_table(0x5bf, &(0x7f0000000280)="$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") r0 = creat(&(0x7f0000000100)='./file0\x00', 0x50) write$binfmt_elf32(r0, 0x0, 0x69) 175.13129ms ago: executing program 1 (id=5072): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@data_ordered}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3fb}}, {@nobarrier}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0x5, 0x3, 0x2, 0x0, 0xe61b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r1 = syz_io_uring_setup(0x643c, &(0x7f0000000080)={0x0, 0xdca8, 0x1, 0xfffffffe, 0x1a4}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x51, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x7, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x1000000, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x2600, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) epoll_create1(0x80000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000004180)={0x0, {{0x2, 0x4e23, @empty}}}, 0x88) socket(0x1, 0x80802, 0x0) r6 = epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0xe36}, 0x0, &(0x7f00000002c0)={0x23ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(r6) shutdown(r0, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101200, 0x4) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 47.046727ms ago: executing program 7 (id=5073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000001", @ANYRES32=0x0], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRESDEC=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r8, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd85, &(0x7f0000001d00)={@local, @link_local, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xc79, 0x0, 0x0, 0x14, 0x84, 0x0, @multicast1, @broadcast}, "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"}}}}, 0x0) 0s ago: executing program 7 (id=5074): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0xfe, 0xff, 0x0, 0x0, 0x3, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x8482, 0x5bd20d9e, 0x800000, 0x3, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='*-\x00') write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1820) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x9, 0x1, 'dccp\x00'}, @NFTA_MATCH_INFO={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) setpgid(r1, r1) setpgid(0x0, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) nanosleep(&(0x7f0000000080), &(0x7f00000000c0)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x12, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYBLOB="050000000000000000000f0000000800", @ANYRES32, @ANYBLOB="47000e00800000000802110000000802"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) epoll_create1(0x80000) fcntl$setpipe(r3, 0x407, 0x10005) open_tree(0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', 0x9100) listen(0xffffffffffffffff, 0x5) kernel console output (not intermixed with test programs): 8 [ 273.370000][T18531] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.387455][T18531] ext4 filesystem being mounted at /546/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 273.433658][ T8752] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.473855][T18547] loop5: detected capacity change from 0 to 512 [ 273.483296][T18547] msdos: Unknown parameter 'nfsdots' [ 273.543875][T18546] lo speed is unknown, defaulting to 1000 [ 273.615134][T18556] loop5: detected capacity change from 0 to 2048 [ 273.615128][T18546] lo speed is unknown, defaulting to 1000 [ 273.629209][T18556] journal_path: Non-blockdev passed as './file1' [ 273.629341][T18535] lo speed is unknown, defaulting to 1000 [ 273.636114][T18556] EXT4-fs: error: could not find journal device path [ 273.687256][T18558] FAULT_INJECTION: forcing a failure. [ 273.687256][T18558] name failslab, interval 1, probability 0, space 0, times 0 [ 273.700075][T18558] CPU: 1 UID: 0 PID: 18558 Comm: syz.5.4587 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 273.700180][T18558] Tainted: [W]=WARN [ 273.700188][T18558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.700201][T18558] Call Trace: [ 273.700207][T18558] [ 273.700215][T18558] __dump_stack+0x1d/0x30 [ 273.700315][T18558] dump_stack_lvl+0x95/0xd0 [ 273.700338][T18558] dump_stack+0x15/0x1b [ 273.700362][T18558] should_fail_ex+0x263/0x280 [ 273.700400][T18558] should_failslab+0x8c/0xb0 [ 273.700461][T18558] __kmalloc_cache_noprof+0x64/0x4a0 [ 273.700496][T18558] ? __se_sys_memfd_create+0x1df/0x3b0 [ 273.700608][T18558] ? fput+0x8f/0xc0 [ 273.700640][T18558] __se_sys_memfd_create+0x1df/0x3b0 [ 273.700675][T18558] __x64_sys_memfd_create+0x31/0x40 [ 273.700725][T18558] x64_sys_call+0x28cb/0x3000 [ 273.700759][T18558] do_syscall_64+0xc0/0x2a0 [ 273.700791][T18558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.700819][T18558] RIP: 0033:0x7f105de8aeb9 [ 273.700855][T18558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.700880][T18558] RSP: 002b:00007f105c8e6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 273.700905][T18558] RAX: ffffffffffffffda RBX: 0000000000000774 RCX: 00007f105de8aeb9 [ 273.700924][T18558] RDX: 00007f105c8e6ee0 RSI: 0000000000000000 RDI: 00007f105def7333 [ 273.700941][T18558] RBP: 00002000000007c0 R08: 00000000ffffffff R09: 0000000000000000 [ 273.700977][T18558] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 273.700989][T18558] R13: 00007f105c8e6ee0 R14: 00007f105c8e6ea0 R15: 00002000000011c0 [ 273.701057][T18558] [ 273.891081][T18535] lo speed is unknown, defaulting to 1000 [ 273.960441][T18535] chnl_net:caif_netlink_parms(): no params data found [ 274.039980][T18535] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.047238][T18535] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.079168][T18569] loop5: detected capacity change from 0 to 2048 [ 274.097440][T18573] loop0: detected capacity change from 0 to 128 [ 274.105413][T18573] vfat: Unknown parameter 'shor' [ 274.120613][T18535] bridge_slave_0: entered allmulticast mode [ 274.127165][T18569] journal_path: Non-blockdev passed as './file1' [ 274.134405][T18569] EXT4-fs: error: could not find journal device path [ 274.150094][T18576] netlink: 'syz.6.4591': attribute type 21 has an invalid length. [ 274.158165][T18576] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4591'. [ 274.171096][T18535] bridge_slave_0: entered promiscuous mode [ 274.197894][T18535] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.205076][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.264028][T18535] bridge_slave_1: entered allmulticast mode [ 274.274792][T18582] FAULT_INJECTION: forcing a failure. [ 274.274792][T18582] name failslab, interval 1, probability 0, space 0, times 0 [ 274.288018][T18582] CPU: 1 UID: 0 PID: 18582 Comm: syz.6.4594 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 274.288121][T18582] Tainted: [W]=WARN [ 274.288129][T18582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.288146][T18582] Call Trace: [ 274.288156][T18582] [ 274.288167][T18582] __dump_stack+0x1d/0x30 [ 274.288213][T18582] dump_stack_lvl+0x95/0xd0 [ 274.288241][T18582] dump_stack+0x15/0x1b [ 274.288336][T18582] should_fail_ex+0x263/0x280 [ 274.288369][T18582] should_failslab+0x8c/0xb0 [ 274.288408][T18582] __kmalloc_noprof+0xb8/0x580 [ 274.288441][T18582] ? kernfs_fop_write_iter+0xe2/0x300 [ 274.288484][T18582] kernfs_fop_write_iter+0xe2/0x300 [ 274.288590][T18582] ? rw_verify_area+0x8d/0x160 [ 274.288616][T18582] aio_write+0x2fe/0x430 [ 274.288657][T18582] io_submit_one+0xbc1/0x1350 [ 274.288735][T18582] __se_sys_io_submit+0xfb/0x280 [ 274.288803][T18582] __x64_sys_io_submit+0x43/0x50 [ 274.288836][T18582] x64_sys_call+0x2e40/0x3000 [ 274.288935][T18582] do_syscall_64+0xc0/0x2a0 [ 274.289022][T18582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.289049][T18582] RIP: 0033:0x7f566eb1aeb9 [ 274.289065][T18582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.289164][T18582] RSP: 002b:00007f566d577028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 274.289256][T18582] RAX: ffffffffffffffda RBX: 00007f566ed95fa0 RCX: 00007f566eb1aeb9 [ 274.289275][T18582] RDX: 0000200000000400 RSI: 0000000000000001 RDI: 00007f566f8ce000 [ 274.289302][T18582] RBP: 00007f566d577090 R08: 0000000000000000 R09: 0000000000000000 [ 274.289342][T18582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.289355][T18582] R13: 00007f566ed96038 R14: 00007f566ed95fa0 R15: 00007ffcfc7b6a28 [ 274.289375][T18582] [ 274.294021][T18535] bridge_slave_1: entered promiscuous mode [ 274.499917][T18589] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4596'. [ 274.511158][T18578] batadv0: entered promiscuous mode [ 274.516997][T18578] macvtap1: entered promiscuous mode [ 274.523353][T18578] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 274.532258][T18578] batadv0: left promiscuous mode [ 274.549370][T18535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.560583][T18535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.585251][T18535] team0: Port device team_slave_0 added [ 274.592231][T18535] team0: Port device team_slave_1 added [ 274.627334][T18592] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4597'. [ 274.639309][T18535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.646326][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.672346][T18535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.695073][T18535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.702173][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.728585][T18535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.809300][T18603] FAULT_INJECTION: forcing a failure. [ 274.809300][T18603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.825015][T18603] CPU: 1 UID: 0 PID: 18603 Comm: syz.5.4603 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 274.825055][T18603] Tainted: [W]=WARN [ 274.825063][T18603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.825157][T18603] Call Trace: [ 274.825166][T18603] [ 274.825176][T18603] __dump_stack+0x1d/0x30 [ 274.825221][T18603] dump_stack_lvl+0x95/0xd0 [ 274.825250][T18603] dump_stack+0x15/0x1b [ 274.825288][T18603] should_fail_ex+0x263/0x280 [ 274.825329][T18603] should_fail+0xb/0x20 [ 274.825361][T18603] should_fail_usercopy+0x1a/0x20 [ 274.825405][T18603] _copy_from_user+0x1c/0xb0 [ 274.825542][T18603] get_itimerspec64+0x4c/0x1b0 [ 274.825588][T18603] __x64_sys_timerfd_settime+0x89/0x140 [ 274.825622][T18603] x64_sys_call+0x2b12/0x3000 [ 274.825675][T18603] do_syscall_64+0xc0/0x2a0 [ 274.825717][T18603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.825747][T18603] RIP: 0033:0x7f105de8aeb9 [ 274.825767][T18603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.825791][T18603] RSP: 002b:00007f105c8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 274.825903][T18603] RAX: ffffffffffffffda RBX: 00007f105e105fa0 RCX: 00007f105de8aeb9 [ 274.825922][T18603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 274.825937][T18603] RBP: 00007f105c8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 274.826043][T18603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.826056][T18603] R13: 00007f105e106038 R14: 00007f105e105fa0 R15: 00007ffe30566568 [ 274.826139][T18603] [ 274.998902][T18535] hsr_slave_0: entered promiscuous mode [ 275.005158][T18535] hsr_slave_1: entered promiscuous mode [ 275.013362][T18535] debugfs: 'hsr0' already exists in 'hsr' [ 275.019192][T18535] Cannot create hsr debugfs directory [ 275.081159][T18612] loop5: detected capacity change from 0 to 512 [ 275.131093][T18612] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 275.141306][T18612] EXT4-fs (loop5): group descriptors corrupted! [ 275.304167][T18625] netlink: 'syz.0.4610': attribute type 6 has an invalid length. [ 275.320272][T18619] lo speed is unknown, defaulting to 1000 [ 275.361873][T18632] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 275.377770][T18631] loop5: detected capacity change from 0 to 512 [ 275.416823][T18631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 275.463024][T18535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.499280][T18535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.506619][T18631] ext4 filesystem being mounted at /558/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.542967][T18639] loop6: detected capacity change from 0 to 512 [ 275.551660][T18535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.561778][T18631] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4614: Failed to acquire dquot type 0 [ 275.583268][T18619] lo speed is unknown, defaulting to 1000 [ 275.589383][T18535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.617828][T18639] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 275.636620][T18639] ext4 filesystem being mounted at /253/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.664544][ T8752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 275.731703][T13780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 275.758690][T18653] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 275.852352][T18535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.887108][T18659] loop0: detected capacity change from 0 to 1024 [ 275.898616][T18659] EXT4-fs: Ignoring removed orlov option [ 275.904749][T18659] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.917886][T18535] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.947534][T18665] 9pnet_fd: Insufficient options for proto=fd [ 275.951801][T18667] IPVS: Error connecting to the multicast addr [ 275.970693][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.977879][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.009076][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.016210][ T5888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.028998][T18659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.042696][T18535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.053241][T18535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.057078][T18671] loop5: detected capacity change from 0 to 128 [ 276.088587][T18659] sctp: [Deprecated]: syz.0.4621 (pid 18659) Use of int in max_burst socket option deprecated. [ 276.088587][T18659] Use struct sctp_assoc_value instead [ 276.150792][T18671] iso9660: Unknown parameter 'gi' [ 276.202881][T18679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.221002][T18535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.250997][T17518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.268848][T18679] netlink: 'syz.7.4628': attribute type 10 has an invalid length. [ 276.369748][T18696] sctp: [Deprecated]: syz.7.4632 (pid 18696) Use of int in max_burst socket option deprecated. [ 276.369748][T18696] Use struct sctp_assoc_value instead [ 276.604016][T18535] veth0_vlan: entered promiscuous mode [ 276.633459][T18535] veth1_vlan: entered promiscuous mode [ 276.649426][T18727] netlink: 'syz.0.4639': attribute type 27 has an invalid length. [ 276.924545][T18744] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 276.970381][T18744] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4645: inode has both inline data and extents flags [ 277.000236][T18744] EXT4-fs (loop6): Remounting filesystem read-only [ 277.007932][T18744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.061379][T18727] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.068687][T18727] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.192212][T18747] EXT4-fs: Ignoring removed bh option [ 277.197764][T18747] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.222651][T18747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.257855][ T8752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.276710][T13780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.739951][T18727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.805112][T18727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.975507][T18758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.994811][T18758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.008496][T18758] ext4 filesystem being mounted at /571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.022430][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 278.022450][ T29] audit: type=1400 audit(1769989139.211:70143): avc: denied { read append } for pid=18757 comm="syz.5.4649" path="/571/file0/cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 278.098240][ T29] audit: type=1400 audit(1769989139.271:70144): avc: denied { map } for pid=18757 comm="syz.5.4649" path="/571/file0/cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 278.138138][ T8752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.247365][ T29] audit: type=1400 audit(1769989139.431:70145): avc: denied { read write } for pid=18763 comm="syz.5.4650" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 278.295834][ T29] audit: type=1400 audit(1769989139.431:70146): avc: denied { open } for pid=18763 comm="syz.5.4650" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 278.344830][T18732] bridge0: left promiscuous mode [ 278.378525][T18732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.398380][T18732] net_ratelimit: 12 callbacks suppressed [ 278.398393][T18732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.436710][ T5886] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.473227][T18535] veth0_macvtap: entered promiscuous mode [ 278.481941][T18771] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 278.488799][ T29] audit: type=1400 audit(1769989139.671:70147): avc: denied { create } for pid=18770 comm="syz.7.4653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 278.509601][ T29] audit: type=1400 audit(1769989139.671:70148): avc: denied { write } for pid=18770 comm="syz.7.4653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 278.514383][T18535] veth1_macvtap: entered promiscuous mode [ 278.587366][ T5886] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.600818][ T5886] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.630543][ T29] audit: type=1326 audit(1769989139.801:70149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18769 comm="syz.5.4652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f105de8aeb9 code=0x0 [ 278.662348][T18535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.671975][T18774] set_capacity_and_notify: 4 callbacks suppressed [ 278.671992][T18774] loop6: detected capacity change from 0 to 1764 [ 278.690095][ T5875] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.700681][T18535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.712120][T18774] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 278.747335][ T5886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.758922][ T5875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.759398][ T29] audit: type=1400 audit(1769989139.941:70150): avc: denied { mount } for pid=18773 comm="syz.6.4654" name="/" dev="loop6" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 278.774310][ T5875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.801170][ T29] audit: type=1400 audit(1769989139.981:70151): avc: denied { bind } for pid=18769 comm="syz.5.4652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 278.820935][ T29] audit: type=1400 audit(1769989139.981:70152): avc: denied { name_bind } for pid=18769 comm="syz.5.4652" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 278.846611][ T5889] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.860537][T18784] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 278.962329][T18794] __nla_validate_parse: 6 callbacks suppressed [ 278.962429][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4659'. [ 278.977659][T18794] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4659'. [ 278.986649][T18794] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4659'. [ 279.004487][T18796] loop4: detected capacity change from 0 to 518 [ 279.011520][T18794] vlan0: entered promiscuous mode [ 279.018620][T18796] ext4: Unknown parameter 'dont_appraise' [ 279.136475][ T3417] IPVS: starting estimator thread 0... [ 279.226489][T18805] IPVS: using max 2208 ests per chain, 110400 per kthread [ 279.277533][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4666'. [ 279.286971][T18812] chnl_net:caif_netlink_parms(): no params data found [ 279.306694][T18814] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4667'. [ 279.316544][T18814] netlink: 'syz.7.4667': attribute type 7 has an invalid length. [ 279.324625][T18814] netlink: 'syz.7.4667': attribute type 8 has an invalid length. [ 279.332716][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4667'. [ 279.500950][T18826] loop0: detected capacity change from 0 to 512 [ 279.518998][T18826] EXT4-fs: Ignoring removed oldalloc option [ 279.536037][T18826] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 279.591722][T18826] EXT4-fs (loop0): 1 truncate cleaned up [ 279.887346][T18846] bond0: entered promiscuous mode [ 279.892528][T18846] bond_slave_0: entered promiscuous mode [ 279.898348][T18846] bond_slave_1: entered promiscuous mode [ 279.966900][T18846] batadv0: entered promiscuous mode [ 279.976559][T18846] debugfs: 'hsr1' already exists in 'hsr' [ 279.982361][T18846] Cannot create hsr debugfs directory [ 280.007297][T18846] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 280.030616][T18818] loop5: detected capacity change from 0 to 32768 [ 280.041870][T18846] hsr1: entered promiscuous mode [ 280.051037][T18846] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 280.088643][T18849] loop0: detected capacity change from 0 to 736 [ 280.111899][ T5999] loop5: p1 p2 p3 < p5 p6 > [ 280.118048][ T5999] loop5: p2 size 16775168 extends beyond EOD, truncated [ 280.133807][ T5999] loop5: p5 start 4294970168 is beyond EOD, truncated [ 280.166770][T18849] ISOFS: unable to read i-node block [ 280.172458][T18849] isofs_fill_super: get root inode failed [ 280.192058][T18818] loop5: p1 p2 p3 < p5 p6 > [ 280.199632][T18818] loop5: p2 size 16775168 extends beyond EOD, truncated [ 280.207322][T18849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4679'. [ 280.219518][T18818] loop5: p5 start 4294970168 is beyond EOD, truncated [ 280.410970][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 280.421653][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 280.432361][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 280.442898][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 280.451741][T18877] loop0: detected capacity change from 0 to 8192 [ 280.468196][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 280.472175][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 280.481633][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 280.499104][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 280.509762][T18877] loop0: p1 < > p4 < > [ 280.565598][T18884] loop0: detected capacity change from 0 to 128 [ 280.591948][T18884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=323 sclass=netlink_route_socket pid=18884 comm=syz.0.4690 [ 280.626319][T18890] netlink: 'syz.4.4693': attribute type 4 has an invalid length. [ 280.628767][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 280.644582][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 280.770602][T18900] xt_hashlimit: size too large, truncated to 1048576 [ 280.958123][T18914] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4703'. [ 280.981415][T18914] lo: entered promiscuous mode [ 280.986250][T18914] lo: entered allmulticast mode [ 280.992422][T18914] tunl0: entered promiscuous mode [ 280.997539][T18914] tunl0: entered allmulticast mode [ 281.004360][T18914] gre0: entered allmulticast mode [ 281.010602][T18914] gretap0: entered promiscuous mode [ 281.015958][T18914] gretap0: entered allmulticast mode [ 281.023070][T18914] erspan0: entered promiscuous mode [ 281.028391][T18914] erspan0: entered allmulticast mode [ 281.060356][T18914] ip_vti0: entered promiscuous mode [ 281.065730][T18914] ip_vti0: entered allmulticast mode [ 281.072646][T18914] ip6_vti0: entered promiscuous mode [ 281.078024][T18914] ip6_vti0: entered allmulticast mode [ 281.084894][T18914] sit0: entered promiscuous mode [ 281.090032][T18914] sit0: entered allmulticast mode [ 281.097544][T18914] ip6tnl0: entered promiscuous mode [ 281.102877][T18914] ip6tnl0: entered allmulticast mode [ 281.109797][T18914] ip6gre0: entered promiscuous mode [ 281.115209][T18914] ip6gre0: entered allmulticast mode [ 281.123078][T18914] syz_tun: entered promiscuous mode [ 281.128436][T18914] syz_tun: entered allmulticast mode [ 281.152876][T18914] ip6gretap0: entered promiscuous mode [ 281.158516][T18914] ip6gretap0: entered allmulticast mode [ 281.177595][T18914] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.184805][T18914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.192163][T18914] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.199406][T18914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.224320][T18914] bridge0: entered allmulticast mode [ 281.236983][T18914] vcan0: entered promiscuous mode [ 281.242063][T18914] vcan0: entered allmulticast mode [ 281.253724][T18914] bond0: entered allmulticast mode [ 281.258967][T18914] bond_slave_0: entered allmulticast mode [ 281.264775][T18914] bond_slave_1: entered allmulticast mode [ 281.275023][T18914] dummy0: entered promiscuous mode [ 281.284522][T18914] dummy0: entered allmulticast mode [ 281.292136][T18914] nlmon0: entered promiscuous mode [ 281.297469][T18914] nlmon0: entered allmulticast mode [ 281.304529][T18914] caif0: entered promiscuous mode [ 281.309811][T18914] caif0: entered allmulticast mode [ 281.315240][T18914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.331250][ T23] lo speed is unknown, defaulting to 1000 [ 281.437376][T18937] program syz.6.4710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.526923][T18942] IPVS: Error connecting to the multicast addr [ 281.684530][T18960] loop6: detected capacity change from 0 to 512 [ 281.884169][T18977] loop6: detected capacity change from 0 to 256 [ 281.896093][T18975] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4723'. [ 281.945684][T18977] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.987131][T18977] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 281.995821][T18977] FAT-fs (loop6): Filesystem has been set read-only [ 282.298980][T18991] loop6: detected capacity change from 0 to 512 [ 282.330632][T18991] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.641186][T18998] FAULT_INJECTION: forcing a failure. [ 282.641186][T18998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.655156][T18998] CPU: 1 UID: 0 PID: 18998 Comm: syz.0.4732 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.655281][T18998] Tainted: [W]=WARN [ 282.655292][T18998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.655307][T18998] Call Trace: [ 282.655314][T18998] [ 282.655322][T18998] __dump_stack+0x1d/0x30 [ 282.655403][T18998] dump_stack_lvl+0x95/0xd0 [ 282.655426][T18998] dump_stack+0x15/0x1b [ 282.655527][T18998] should_fail_ex+0x263/0x280 [ 282.655578][T18998] should_fail+0xb/0x20 [ 282.655669][T18998] should_fail_usercopy+0x1a/0x20 [ 282.655708][T18998] _copy_from_user+0x1c/0xb0 [ 282.655738][T18998] __sys_bpf+0x183/0x7b0 [ 282.655810][T18998] __x64_sys_bpf+0x41/0x50 [ 282.655838][T18998] x64_sys_call+0x28e1/0x3000 [ 282.655889][T18998] do_syscall_64+0xc0/0x2a0 [ 282.655931][T18998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.655969][T18998] RIP: 0033:0x7fe5ff00aeb9 [ 282.655991][T18998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.656016][T18998] RSP: 002b:00007fe5fda67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.656041][T18998] RAX: ffffffffffffffda RBX: 00007fe5ff285fa0 RCX: 00007fe5ff00aeb9 [ 282.656056][T18998] RDX: 0000000000000020 RSI: 0000200000000680 RDI: 0000000000000009 [ 282.656122][T18998] RBP: 00007fe5fda67090 R08: 0000000000000000 R09: 0000000000000000 [ 282.656140][T18998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.656158][T18998] R13: 00007fe5ff286038 R14: 00007fe5ff285fa0 R15: 00007fff6659bfd8 [ 282.656179][T18998] [ 282.905260][T19002] EXT4-fs: Ignoring removed bh option [ 283.077184][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 283.077199][ T29] audit: type=1326 audit(1769989144.261:70401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.6.4738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f566eb1aeb9 code=0x0 [ 283.220072][ T29] audit: type=1400 audit(1769989144.401:70402): avc: denied { read write } for pid=19031 comm="syz.5.4743" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 283.245294][ T29] audit: type=1400 audit(1769989144.401:70403): avc: denied { open } for pid=19031 comm="syz.5.4743" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 283.373672][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4746'. [ 283.446557][ T29] audit: type=1400 audit(1769989144.511:70404): avc: denied { write } for pid=19022 comm="syz.0.4740" name="fib_triestat" dev="proc" ino=4026533461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 283.470136][ T29] audit: type=1400 audit(1769989144.591:70405): avc: denied { mounton } for pid=19043 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 283.640204][T19059] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #3: comm syz.5.4750: corrupted inode contents [ 283.796557][T19059] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #3: comm syz.5.4750: mark_inode_dirty error [ 283.817023][T19059] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #3: comm syz.5.4750: corrupted inode contents [ 283.857461][T19059] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.4750: mark_inode_dirty error [ 283.916967][T19059] Quota error (device loop5): write_blk: dquota write failed [ 283.924430][T19059] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 283.936919][T19059] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4750: Failed to acquire dquot type 0 [ 283.952452][T19059] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.4750: corrupted inode contents [ 283.977397][T19043] lo speed is unknown, defaulting to 1000 [ 283.996474][T19064] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4751'. [ 284.003858][T19059] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #16: comm syz.5.4750: mark_inode_dirty error [ 284.027965][T19059] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.4750: corrupted inode contents [ 284.049503][T19043] lo speed is unknown, defaulting to 1000 [ 284.055972][T19059] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.4750: mark_inode_dirty error [ 284.092939][T19059] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.4750: corrupted inode contents [ 284.116937][T19059] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 284.147267][T19059] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.4750: corrupted inode contents [ 284.187825][T19059] EXT4-fs error (device loop5): ext4_truncate:4635: inode #16: comm syz.5.4750: mark_inode_dirty error [ 284.199454][ T29] audit: type=1400 audit(1769989145.381:70406): avc: denied { cpu } for pid=19072 comm="syz.6.4754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 284.246487][T19059] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 284.269411][T19059] EXT4-fs (loop5): 1 truncate cleaned up [ 284.285296][T19059] EXT4-fs mount: 6 callbacks suppressed [ 284.285319][T19059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.303916][T19043] chnl_net:caif_netlink_parms(): no params data found [ 284.331853][T19059] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.352199][ T29] audit: type=1400 audit(1769989145.531:70407): avc: denied { create } for pid=19076 comm="syz.0.4755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 284.374178][ T5875] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.387051][T19077] netlink: 'syz.0.4755': attribute type 9 has an invalid length. [ 284.395019][T19077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4755'. [ 284.426063][T19073] set_capacity_and_notify: 2 callbacks suppressed [ 284.426173][T19073] loop6: detected capacity change from 0 to 8192 [ 284.460402][T19077] netlink: 'syz.0.4755': attribute type 9 has an invalid length. [ 284.468438][T19077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4755'. [ 284.480709][ T5875] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.491524][ T8752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.511286][ T5886] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.538683][ T5886] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.551849][ T5875] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.567310][ T3302] loop6: p2 p3 p4[EZD] [ 284.581938][ T5886] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.587227][ T3302] loop6: p3 start 331781 is beyond EOD, truncated [ 284.597244][ T3302] loop6: p4 size 197376 extends beyond EOD, truncated [ 284.643512][ T5875] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.659899][T19073] loop_reread_partitions: partition scan of loop6 () failed (rc=-16) [ 284.692905][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4757'. [ 284.701892][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4757'. [ 284.729730][ T5886] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.756925][T19043] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.764620][T19043] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.802811][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4760'. [ 284.812568][ T3001] loop6: p2 p3 p4[EZD] [ 284.816855][T19043] bridge_slave_0: entered allmulticast mode [ 284.825228][ T3001] loop6: p3 start 331781 is beyond EOD, truncated [ 284.828812][T19043] bridge_slave_0: entered promiscuous mode [ 284.832606][ T3001] loop6: p4 size 197376 extends beyond EOD, truncated [ 284.882479][T19043] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.889830][T19043] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.926697][T19043] bridge_slave_1: entered allmulticast mode [ 284.941290][T19043] bridge_slave_1: entered promiscuous mode [ 284.951829][T19094] loop0: detected capacity change from 0 to 1024 [ 284.978185][ T29] audit: type=1400 audit(1769989146.161:70408): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 285.000305][T19096] syzkaller0: entered promiscuous mode [ 285.005872][T19096] syzkaller0: entered allmulticast mode [ 285.064252][T19094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.085358][ T5875] bridge_slave_1: left allmulticast mode [ 285.091171][ T5875] bridge_slave_1: left promiscuous mode [ 285.096917][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.118204][ T5875] bridge_slave_0: left promiscuous mode [ 285.124617][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.176756][T19105] loop5: detected capacity change from 0 to 512 [ 285.203070][T19105] EXT4-fs: Ignoring removed nobh option [ 285.209488][T19105] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 285.222643][T19107] netlink: 'syz.0.4761': attribute type 2 has an invalid length. [ 285.233137][T19105] EXT4-fs (loop5): 1 truncate cleaned up [ 285.239769][T19105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.310079][T17518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.319774][T19111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4763'. [ 285.719778][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.729423][ T5875] bond_slave_0: left promiscuous mode [ 285.735052][ T5875] bond_slave_0: left allmulticast mode [ 285.742046][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.752420][ T5875] bond_slave_1: left promiscuous mode [ 285.758050][ T5875] bond_slave_1: left allmulticast mode [ 285.765548][ T5875] bond0 (unregistering): Released all slaves [ 285.773750][ T5875] bond1 (unregistering): Released all slaves [ 285.783129][ T5875] bond2 (unregistering): Released all slaves [ 285.793397][T19043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.806874][T19043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.834586][T19043] team0: Port device team_slave_0 added [ 285.843613][ T5875] tipc: Disabling bearer [ 285.849583][ T5875] tipc: Left network mode [ 285.855330][T19043] team0: Port device team_slave_1 added [ 285.862298][ T5875] IPVS: stopping master sync thread 18632 ... [ 285.900122][T19043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.907215][T19043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.937866][T19043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.977323][T19043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.984409][T19043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.010482][T19043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.026965][ T5875] batadv0: left promiscuous mode [ 286.038398][ T8752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.048890][ T5875] hsr_slave_0: left promiscuous mode [ 286.060170][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.067712][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.098036][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.105483][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.127893][ T5875] veth1_macvtap: left promiscuous mode [ 286.135070][ T5875] veth0_macvtap: left promiscuous mode [ 286.140887][ T5875] veth1_vlan: left promiscuous mode [ 286.319520][ T5889] smc: removing ib device syz1 [ 286.329951][T10195] lo speed is unknown, defaulting to 1000 [ 286.335917][T10195] syz2: Port: 1 Link DOWN [ 286.399719][T19043] hsr_slave_0: entered promiscuous mode [ 286.416223][T19043] hsr_slave_1: entered promiscuous mode [ 286.426547][T19043] debugfs: 'hsr0' already exists in 'hsr' [ 286.432342][T19043] Cannot create hsr debugfs directory [ 287.009356][ T5875] IPVS: stop unused estimator thread 0... [ 287.063672][T19043] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 287.089579][T19043] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 287.107246][T19043] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 287.116801][T19043] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 287.222899][T19043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.251882][T19043] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.271912][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.279140][ T5886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.308610][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.315801][ T5889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.346133][T19043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.460122][T19043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.707739][T19043] veth0_vlan: entered promiscuous mode [ 287.716867][T19043] veth1_vlan: entered promiscuous mode [ 287.735741][T19043] veth0_macvtap: entered promiscuous mode [ 287.744726][T19043] veth1_macvtap: entered promiscuous mode [ 287.765935][T19043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.788467][T19043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.802297][ T5889] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.813519][ T5889] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.844531][ T5889] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.864310][ T5889] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.005344][T19251] loop7: detected capacity change from 0 to 8192 [ 288.054565][T19260] ip6gre0: left promiscuous mode [ 288.059856][T19260] ip6gre0: left allmulticast mode [ 288.161680][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 288.161701][ T29] audit: type=1400 audit(1769989149.341:70555): avc: denied { create } for pid=19270 comm="syz.7.4779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.237405][ T29] audit: type=1400 audit(1769989149.381:70556): avc: denied { create } for pid=19272 comm="syz.6.4780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 288.257712][ T29] audit: type=1400 audit(1769989149.381:70557): avc: denied { setopt } for pid=19272 comm="syz.6.4780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 288.346924][ T29] audit: type=1400 audit(1769989149.531:70558): avc: denied { connect } for pid=19270 comm="syz.7.4779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.512167][T19290] loop7: detected capacity change from 0 to 1024 [ 288.537979][T19290] EXT4-fs: Mount option(s) incompatible with ext2 [ 288.739796][T19264] chnl_net:caif_netlink_parms(): no params data found [ 288.800223][ T3448] bond0: (slave netdevsim1): Releasing backup interface [ 288.932570][T19264] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.939826][T19264] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.948363][T19264] bridge_slave_0: entered allmulticast mode [ 288.955116][T19264] bridge_slave_0: entered promiscuous mode [ 288.975559][T19264] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.982773][T19264] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.002391][T19264] bridge_slave_1: entered allmulticast mode [ 289.013643][T19264] bridge_slave_1: entered promiscuous mode [ 289.029447][ T29] audit: type=1400 audit(1769989150.211:70559): avc: denied { bind } for pid=19272 comm="syz.6.4780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 289.054951][T19264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.067142][T19264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.077454][ T3448] bridge_slave_1: left allmulticast mode [ 289.083132][ T3448] bridge_slave_1: left promiscuous mode [ 289.089009][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.099073][ T29] audit: type=1400 audit(1769989150.231:70560): avc: denied { read } for pid=19272 comm="syz.6.4780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 289.123975][ T3448] bridge_slave_0: left promiscuous mode [ 289.129970][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.144539][ T3448] tipc: Resetting bearer [ 289.199282][ T3448] dvmrp0 (unregistering): left allmulticast mode [ 289.303033][ T3448] tipc: Disabling bearer [ 289.513828][T19320] loop0: detected capacity change from 0 to 512 [ 289.521246][T19320] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.531688][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.542502][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.553177][T19320] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.4789: ea_inode with extended attributes [ 289.574705][ T3448] bond0 (unregistering): Released all slaves [ 289.589334][ T3448] bond1 (unregistering): Released all slaves [ 289.602196][T19320] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.4789: error while reading EA inode 11 err=-117 [ 289.619304][ T3448] bond2 (unregistering): Released all slaves [ 289.625906][T19320] EXT4-fs (loop0): 1 orphan inode deleted [ 289.657191][T19320] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.682635][ T3448] tipc: Left network mode [ 289.729518][T19320] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 289.745550][T19264] team0: Port device team_slave_0 added [ 289.755056][ T29] audit: type=1400 audit(1769989150.921:70561): avc: denied { create } for pid=19324 comm="syz.7.4790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 289.805515][T19320] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4789'. [ 289.824102][T19264] team0: Port device team_slave_1 added [ 289.862034][ T29] audit: type=1400 audit(1769989150.941:70562): avc: denied { bind } for pid=19324 comm="syz.7.4790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 289.886717][ T3448] hsr_slave_0: left promiscuous mode [ 289.892568][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.908481][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.010990][ T5889] smc: removing ib device !yz! [ 290.013748][T19337] loop7: detected capacity change from 0 to 512 [ 290.053605][T19337] EXT4-fs: Ignoring removed i_version option [ 290.076301][T19337] EXT4-fs (loop7): orphan cleanup on readonly fs [ 290.083780][ T29] audit: type=1400 audit(1769989151.251:70563): avc: denied { setopt } for pid=19343 comm="syz.0.4794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.098181][T19337] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.4792: EA inode hash validation failed [ 290.104182][ T29] audit: type=1326 audit(1769989151.251:70564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.0.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 290.152416][T19337] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 290.191466][T19337] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.4792: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 290.226639][T19337] EXT4-fs (loop7): Remounting filesystem read-only [ 290.233625][T19337] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.7.4792: ea_inode dec ref err=-117 [ 290.254105][T19264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.261155][T19264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.288750][T19264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.296618][T19337] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 290.322605][T19337] EXT4-fs (loop7): 1 orphan inode deleted [ 290.359309][T19337] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 290.386920][T19264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.394085][T19264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.420594][T19264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.484801][T19358] loop6: detected capacity change from 0 to 4096 [ 290.485907][T19043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.543386][T19364] loop7: detected capacity change from 0 to 512 [ 290.658331][T19358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.703452][T19364] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.4797: corrupted inode contents [ 290.742802][T19264] hsr_slave_0: entered promiscuous mode [ 290.762264][T19364] EXT4-fs (loop7): Remounting filesystem read-only [ 290.770406][T19264] hsr_slave_1: entered promiscuous mode [ 290.777543][T19358] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4796'. [ 290.807302][T19364] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 290.836723][T19264] debugfs: 'hsr0' already exists in 'hsr' [ 290.842588][T19264] Cannot create hsr debugfs directory [ 290.881109][T19364] EXT4-fs (loop7): 1 orphan inode deleted [ 290.904728][T19364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.999307][T19043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.072225][T19388] loop7: detected capacity change from 0 to 512 [ 291.079116][T13780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.139404][T19388] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 291.173971][T19388] EXT4-fs (loop7): orphan cleanup on readonly fs [ 291.210218][T19388] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 291.273110][T19388] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 291.310225][T19388] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.4799: corrupted inode contents [ 291.364418][T19388] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #16: comm syz.7.4799: mark_inode_dirty error [ 291.392662][T19388] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.4799: corrupted inode contents [ 291.405013][T19388] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.4799: mark_inode_dirty error [ 291.416903][T19388] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.4799: corrupted inode contents [ 291.443155][T19388] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 291.452187][T19388] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.4799: corrupted inode contents [ 291.464885][T19388] EXT4-fs error (device loop7): ext4_truncate:4635: inode #16: comm syz.7.4799: mark_inode_dirty error [ 291.480231][T19388] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 291.510189][T19388] EXT4-fs (loop7): 1 truncate cleaned up [ 291.517844][T19388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.606313][T19043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.647970][T19427] netlink: 'syz.7.4802': attribute type 10 has an invalid length. [ 291.675533][T19427] team0: Failed to send options change via netlink (err -105) [ 291.687442][T19427] team0: Port device dummy0 added [ 291.710072][T19430] netlink: 'syz.7.4802': attribute type 10 has an invalid length. [ 291.719262][T19430] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 291.737094][T19430] team0: Failed to send options change via netlink (err -105) [ 291.754756][T19430] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 291.781113][T19430] team0: Port device dummy0 removed [ 291.796169][T19430] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 291.897583][T19264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 291.921888][T19264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 291.931040][T19449] loop7: detected capacity change from 0 to 128 [ 291.944496][T19264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 291.964449][T19264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 291.986681][T19449] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.023105][T19449] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 292.175015][T19472] bridge0: left allmulticast mode [ 292.248489][T19482] lo speed is unknown, defaulting to 1000 [ 292.269443][T19482] lo speed is unknown, defaulting to 1000 [ 292.275395][T19482] lo speed is unknown, defaulting to 1000 [ 292.325630][T19264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.335401][T19488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19488 comm=syz.6.4807 [ 292.344813][T19482] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 292.370681][T19264] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.390724][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.397867][ T5886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.429917][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.437164][ T5886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.473713][T19482] lo speed is unknown, defaulting to 1000 [ 292.514142][T19482] lo speed is unknown, defaulting to 1000 [ 292.535985][T19482] lo speed is unknown, defaulting to 1000 [ 292.565170][T19482] lo speed is unknown, defaulting to 1000 [ 292.592067][T19482] lo speed is unknown, defaulting to 1000 [ 292.608438][T19482] lo speed is unknown, defaulting to 1000 [ 292.614789][T19264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.638397][T19482] lo speed is unknown, defaulting to 1000 [ 292.666864][T19482] lo speed is unknown, defaulting to 1000 [ 292.820864][T19043] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.904587][T19514] FAULT_INJECTION: forcing a failure. [ 292.904587][T19514] name failslab, interval 1, probability 0, space 0, times 0 [ 292.917448][T19514] CPU: 0 UID: 0 PID: 19514 Comm: syz.7.4810 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 292.917487][T19514] Tainted: [W]=WARN [ 292.917510][T19514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.917526][T19514] Call Trace: [ 292.917534][T19514] [ 292.917541][T19514] __dump_stack+0x1d/0x30 [ 292.917571][T19514] dump_stack_lvl+0x95/0xd0 [ 292.917598][T19514] dump_stack+0x15/0x1b [ 292.917625][T19514] should_fail_ex+0x263/0x280 [ 292.917675][T19514] should_failslab+0x8c/0xb0 [ 292.917708][T19514] __kmalloc_cache_noprof+0x64/0x4a0 [ 292.917819][T19514] ? __snd_timer_user_ioctl+0x1286/0x2bc0 [ 292.917863][T19514] __snd_timer_user_ioctl+0x1286/0x2bc0 [ 292.917989][T19514] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 292.918059][T19514] snd_timer_user_ioctl+0x45/0x90 [ 292.918097][T19514] __se_sys_ioctl+0xce/0x140 [ 292.918134][T19514] __x64_sys_ioctl+0x43/0x50 [ 292.918253][T19514] x64_sys_call+0x14b0/0x3000 [ 292.918285][T19514] do_syscall_64+0xc0/0x2a0 [ 292.918417][T19514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.918441][T19514] RIP: 0033:0x7ff28fdfaeb9 [ 292.918458][T19514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.918480][T19514] RSP: 002b:00007ff28e857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.918537][T19514] RAX: ffffffffffffffda RBX: 00007ff290075fa0 RCX: 00007ff28fdfaeb9 [ 292.918560][T19514] RDX: 0000200000000100 RSI: 0000000040345410 RDI: 0000000000000003 [ 292.918579][T19514] RBP: 00007ff28e857090 R08: 0000000000000000 R09: 0000000000000000 [ 292.918597][T19514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.918613][T19514] R13: 00007ff290076038 R14: 00007ff290075fa0 R15: 00007ffcf779ea58 [ 292.918634][T19514] [ 293.181795][T19264] veth0_vlan: entered promiscuous mode [ 293.282641][T19264] veth1_vlan: entered promiscuous mode [ 293.296732][T19264] veth0_macvtap: entered promiscuous mode [ 293.315062][T19264] veth1_macvtap: entered promiscuous mode [ 293.325793][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 293.325811][ T29] audit: type=1326 audit(1769989154.501:70838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.0.4808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 293.372899][T19264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.386063][T19264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.398087][ T3448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.418734][ T3448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.424170][T19529] loop0: detected capacity change from 0 to 1024 [ 293.452604][ T3448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.464356][T19529] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 293.494169][ T3448] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.521589][T19529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 293.586265][T17518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.604150][T19537] program syz.7.4818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.635980][T19542] bridge_slave_1: left allmulticast mode [ 293.641862][T19542] bridge_slave_1: left promiscuous mode [ 293.647840][T19542] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.679512][T19542] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 293.704618][T19543] loop5: detected capacity change from 0 to 1024 [ 293.721552][T19543] EXT4-fs: Ignoring removed bh option [ 293.728023][T19549] macvtap1: entered promiscuous mode [ 293.746608][T19549] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 293.755530][T19549] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 293.832306][ T29] audit: type=1326 audit(1769989155.001:70839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19550 comm="syz.7.4821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff28fdfaeb9 code=0x0 [ 293.977840][T19543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.111599][ T29] audit: type=1326 audit(1769989155.291:70840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19557 comm="syz.0.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x50000 [ 294.135020][ T29] audit: type=1326 audit(1769989155.291:70841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19557 comm="syz.0.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x50000 [ 294.158765][ T29] audit: type=1326 audit(1769989155.291:70842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19557 comm="syz.0.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x50000 [ 294.182498][ T29] audit: type=1326 audit(1769989155.291:70843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19557 comm="syz.0.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x50000 [ 294.206051][T19560] netlink: 'syz.5.4777': attribute type 10 has an invalid length. [ 294.206058][ T29] audit: type=1326 audit(1769989155.291:70844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19557 comm="syz.0.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x50000 [ 294.206095][ T29] audit: type=1326 audit(1769989155.291:70845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19557 comm="syz.0.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x50000 [ 294.206127][ T29] audit: type=1326 audit(1769989155.291:70846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19557 comm="syz.0.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x50000 [ 294.285569][ T29] audit: type=1326 audit(1769989155.291:70847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19557 comm="syz.0.4822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x50000 [ 294.335009][T19560] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 294.437305][T19540] Set syz1 is full, maxelem 65536 reached [ 294.532627][T19264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.665041][T19564] loop5: detected capacity change from 0 to 128 [ 294.692594][T19564] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 294.727492][T19564] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.761181][T19564] ext2 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.794482][T19564] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4824'. [ 294.836606][T19564] tipc: Invalid UDP bearer configuration [ 294.836623][T19564] tipc: Enabling of bearer rejected, failed to enable media [ 294.914669][T19572] FAULT_INJECTION: forcing a failure. [ 294.914669][T19572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.929095][T19572] CPU: 1 UID: 0 PID: 19572 Comm: syz.7.4827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.929140][T19572] Tainted: [W]=WARN [ 294.929151][T19572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.929236][T19572] Call Trace: [ 294.929245][T19572] [ 294.929256][T19572] __dump_stack+0x1d/0x30 [ 294.929289][T19572] dump_stack_lvl+0x95/0xd0 [ 294.929337][T19572] dump_stack+0x15/0x1b [ 294.929364][T19572] should_fail_ex+0x263/0x280 [ 294.929399][T19572] should_fail+0xb/0x20 [ 294.929429][T19572] should_fail_usercopy+0x1a/0x20 [ 294.929539][T19572] _copy_from_user+0x1c/0xb0 [ 294.929592][T19572] get_itimerspec64+0x102/0x1b0 [ 294.929704][T19572] __x64_sys_timerfd_settime+0x89/0x140 [ 294.929737][T19572] x64_sys_call+0x2b12/0x3000 [ 294.929774][T19572] do_syscall_64+0xc0/0x2a0 [ 294.929857][T19572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.929881][T19572] RIP: 0033:0x7ff28fdfaeb9 [ 294.929909][T19572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.929936][T19572] RSP: 002b:00007ff28e857028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 294.929964][T19572] RAX: ffffffffffffffda RBX: 00007ff290075fa0 RCX: 00007ff28fdfaeb9 [ 294.930005][T19572] RDX: 0000200000007000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 294.930023][T19572] RBP: 00007ff28e857090 R08: 0000000000000000 R09: 0000000000000000 [ 294.930094][T19572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.930112][T19572] R13: 00007ff290076038 R14: 00007ff290075fa0 R15: 00007ffcf779ea58 [ 294.930158][T19572] [ 295.206213][T19577] loop7: detected capacity change from 0 to 1024 [ 295.213598][T19577] EXT4-fs: inline encryption not supported [ 295.219803][T19577] EXT4-fs: Ignoring removed i_version option [ 295.247960][T19577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.287468][T19043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.448500][T19264] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.352249][T19604] syz_tun: entered allmulticast mode [ 296.372411][T19604] loop7: detected capacity change from 0 to 2048 [ 296.379450][T19604] journal_path: Non-blockdev passed as './file1' [ 296.385839][T19604] EXT4-fs: error: could not find journal device path [ 296.393656][T19590] lo speed is unknown, defaulting to 1000 [ 296.418655][ T5889] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.480459][ T5889] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.543535][T19612] netlink: 'syz.6.4840': attribute type 1 has an invalid length. [ 296.571236][T19612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.586044][ T5889] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.649019][T19612] macvlan2: entered promiscuous mode [ 296.654499][T19612] macvlan2: entered allmulticast mode [ 296.680942][ T5889] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.718386][T19590] chnl_net:caif_netlink_parms(): no params data found [ 296.727809][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4844'. [ 296.736911][T19632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4844'. [ 296.852735][T19642] loop6: detected capacity change from 0 to 1024 [ 296.863801][T19639] loop0: detected capacity change from 0 to 512 [ 296.881155][T19642] EXT4-fs (loop6): blocks per group (131072) and clusters per group (8192) inconsistent [ 296.921675][T19590] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.929030][T19590] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.945200][T19590] bridge_slave_0: entered allmulticast mode [ 296.952627][T19590] bridge_slave_0: entered promiscuous mode [ 296.959285][T19639] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 296.968717][T19639] EXT4-fs (loop0): orphan cleanup on readonly fs [ 296.970690][ T5889] bridge_slave_1: left allmulticast mode [ 296.979042][T19639] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.4844: corrupted inode contents [ 296.981036][ T5889] bridge_slave_1: left promiscuous mode [ 296.998170][T19639] EXT4-fs (loop0): Remounting filesystem read-only [ 296.998730][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.005271][T19639] EXT4-fs (loop0): 1 truncate cleaned up [ 297.026418][ T3448] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 297.037130][ T3448] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 297.058254][ T3448] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 297.069519][T19639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.077378][ T5889] bridge_slave_0: left allmulticast mode [ 297.088448][ T5889] bridge_slave_0: left promiscuous mode [ 297.094214][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.159170][T17518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.199980][ T5889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.212241][ T5889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.223302][ T5889] bond0 (unregistering): Released all slaves [ 297.240426][ T5889] bond1 (unregistering): Released all slaves [ 297.254897][ T5889] bond2 (unregistering): Released all slaves [ 297.270400][T19590] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.277682][T19590] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.285166][T19590] bridge_slave_1: entered allmulticast mode [ 297.293450][T19590] bridge_slave_1: entered promiscuous mode [ 297.338990][ T5889] hsr_slave_0: left promiscuous mode [ 297.344716][T19660] loop0: detected capacity change from 0 to 1024 [ 297.351919][ T5889] hsr_slave_1: left promiscuous mode [ 297.358451][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.365893][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.373222][T19660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.386627][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.394017][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.407282][ T5889] veth1_macvtap: left promiscuous mode [ 297.412898][ T5889] veth0_macvtap: left promiscuous mode [ 297.418578][ T5889] veth1_vlan: left promiscuous mode [ 297.424228][ T5889] veth0_vlan: left promiscuous mode [ 297.477469][T17518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.518230][ T5889] team0 (unregistering): Port device team_slave_1 removed [ 297.535465][ T5889] team0 (unregistering): Port device team_slave_0 removed [ 297.572323][T19590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.585264][T19590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.596041][T19668] netlink: 'syz.0.4853': attribute type 1 has an invalid length. [ 297.604443][T19668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4853'. [ 297.617736][T19590] team0: Port device team_slave_0 added [ 297.623860][T19668] batman_adv: batadv0: Adding interface: dummy0 [ 297.630210][T19668] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.655657][T19668] batman_adv: batadv0: Interface activated: dummy0 [ 297.663407][T19590] team0: Port device team_slave_1 added [ 297.677695][T19668] batadv0: mtu less than device minimum [ 297.683823][T19668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.694965][T19668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.705881][T19668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.716886][T19668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.728059][T19668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.739417][T19668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.750663][T19668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.793466][T19590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.800557][T19590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.826558][T19590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.847600][T19590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.854643][T19590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.880757][T19590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.913054][T19590] hsr_slave_0: entered promiscuous mode [ 297.923568][T19590] hsr_slave_1: entered promiscuous mode [ 297.938492][T19590] debugfs: 'hsr0' already exists in 'hsr' [ 297.944368][T19590] Cannot create hsr debugfs directory [ 298.052888][ T5889] IPVS: stop unused estimator thread 0... [ 298.090717][T19676] netlink: 'syz.6.4855': attribute type 4 has an invalid length. [ 298.099863][T10195] lo speed is unknown, defaulting to 1000 [ 298.105727][T10195] syz2: Port: 1 Link DOWN [ 298.277265][T19682] loop6: detected capacity change from 0 to 1024 [ 298.284042][T19682] EXT4-fs: dax option not supported [ 298.410976][ T29] kauditd_printk_skb: 7278 callbacks suppressed [ 298.410995][ T29] audit: type=1400 audit(1769989159.591:78120): avc: denied { create } for pid=19685 comm="syz.6.4860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 298.437399][ T29] audit: type=1400 audit(1769989159.611:78121): avc: denied { ioctl } for pid=19685 comm="syz.6.4860" path="socket:[61803]" dev="sockfs" ino=61803 ioctlcmd=0x891d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 299.541331][T19611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.555605][T19590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 299.586506][T19590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 299.615958][T19590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 299.617417][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4861'. [ 299.645390][T19590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 299.685878][T19701] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4864'. [ 299.802487][T19719] SELinux: policydb magic number 0x6c006466 does not match expected magic number 0xf97cff8c [ 299.812855][ T29] audit: type=1400 audit(1769989160.981:78122): avc: denied { map } for pid=19718 comm="syz.0.4867" path="socket:[62799]" dev="sockfs" ino=62799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 299.836652][ T29] audit: type=1400 audit(1769989160.981:78123): avc: denied { read accept } for pid=19718 comm="syz.0.4867" path="socket:[62799]" dev="sockfs" ino=62799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 299.848764][T19590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.861557][ T29] audit: type=1400 audit(1769989160.981:78124): avc: denied { load_policy } for pid=19718 comm="syz.0.4867" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 299.891476][T19719] SELinux: failed to load policy [ 299.935382][T19590] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.942024][ T29] audit: type=1326 audit(1769989161.061:78125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.6.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566eb1aeb9 code=0x7ffc0000 [ 299.965923][ T29] audit: type=1326 audit(1769989161.061:78126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.6.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566eb1aeb9 code=0x7ffc0000 [ 299.989653][ T29] audit: type=1326 audit(1769989161.061:78127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.6.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f566eb1aeb9 code=0x7ffc0000 [ 300.009250][T19590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.024503][T19590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.024821][ T29] audit: type=1326 audit(1769989161.061:78128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.6.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566eb1aeb9 code=0x7ffc0000 [ 300.059060][ T29] audit: type=1326 audit(1769989161.061:78129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19720 comm="syz.6.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f566eb1aeb9 code=0x7ffc0000 [ 300.089316][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.096614][ T5886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.105765][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.113021][ T5886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.209114][ T3416] hid-generic 0080:0003:0001.0009: item fetching failed at offset 0/2 [ 300.236561][ T3416] hid-generic 0080:0003:0001.0009: probe with driver hid-generic failed with error -22 [ 300.285434][T19590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.325166][T19754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4877'. [ 300.467572][T19772] xt_connbytes: Forcing CT accounting to be enabled [ 300.474335][T19772] xt_NFQUEUE: number of total queues is 0 [ 300.511854][T19590] veth0_vlan: entered promiscuous mode [ 300.532969][T19590] veth1_vlan: entered promiscuous mode [ 300.539491][T19779] netlink: 'syz.0.4883': attribute type 1 has an invalid length. [ 300.574885][T19779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.608300][T19590] veth0_macvtap: entered promiscuous mode [ 300.625577][T19785] loop7: detected capacity change from 0 to 512 [ 300.635099][T19590] veth1_macvtap: entered promiscuous mode [ 300.647663][T19785] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4884: bg 0: block 393: padding at end of block bitmap is not set [ 300.670987][T19791] macvlan3: entered promiscuous mode [ 300.676549][T19791] macvlan3: entered allmulticast mode [ 300.684920][T19785] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 300.703778][T19590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.726266][T19785] EXT4-fs (loop7): 2 truncates cleaned up [ 300.739093][T19742] loop6: detected capacity change from 0 to 32768 [ 300.746111][T19785] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.783921][T19590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.799653][T19785] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.7.4884: path /33/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 300.832034][ T5888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.847227][ T3302] loop6: p1 p2 p3 < p5 p6 > [ 300.851496][ T5888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.863367][ T3302] loop6: p2 size 16775168 extends beyond EOD, truncated [ 300.868100][ T5888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.884288][ T5888] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.911280][ T3302] loop6: p5 start 4294970168 is beyond EOD, truncated [ 300.940985][T19742] loop6: p1 p2 p3 < p5 p6 > [ 300.957893][T19742] loop6: p2 size 16775168 extends beyond EOD, truncated [ 300.965819][T19043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.992677][T19742] loop6: p5 start 4294970168 is beyond EOD, truncated [ 301.091055][T19808] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 301.127707][T19808] bond1 (unregistering): Released all slaves [ 301.141401][T19820] loop1: detected capacity change from 0 to 256 [ 301.197966][T19820] FAT-fs (loop1): Directory bread(block 64) failed [ 301.213704][T19826] [syz.5.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 301.233081][T19823] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.4891'. [ 301.237834][T19820] FAT-fs (loop1): Directory bread(block 65) failed [ 301.253836][T19820] FAT-fs (loop1): Directory bread(block 66) failed [ 301.261528][T19820] FAT-fs (loop1): Directory bread(block 67) failed [ 301.288402][T19823] loop6: detected capacity change from 0 to 512 [ 301.305231][T19820] FAT-fs (loop1): Directory bread(block 68) failed [ 301.316222][T19797] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4886'. [ 301.331293][T19820] FAT-fs (loop1): Directory bread(block 69) failed [ 301.350398][T19823] FAT-fs (loop6): error, corrupted file size (i_pos 51, 9216) [ 301.355945][T19820] FAT-fs (loop1): Directory bread(block 70) failed [ 301.358422][T19823] FAT-fs (loop6): Filesystem has been set read-only [ 301.371944][T19820] FAT-fs (loop1): Directory bread(block 71) failed [ 301.389005][T19820] FAT-fs (loop1): Directory bread(block 72) failed [ 301.405720][T19820] FAT-fs (loop1): Directory bread(block 73) failed [ 301.433458][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 301.445709][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 301.447728][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 301.466450][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 301.494785][T19820] syz.1.4890: attempt to access beyond end of device [ 301.494785][T19820] loop1: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 301.538614][T19840] loop7: detected capacity change from 0 to 128 [ 301.569147][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 301.580357][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 301.592246][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 301.607385][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 301.637149][T19848] blktrace: Concurrent blktraces are not allowed on loop5 [ 301.718448][T19851] loop1: detected capacity change from 0 to 512 [ 301.725785][T19858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.779247][T19858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.796287][T19851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.850369][T19876] loop6: detected capacity change from 0 to 512 [ 301.878025][T19862] loop5: detected capacity change from 0 to 8192 [ 301.887709][T19851] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.892280][T19876] ext4: Unknown parameter 'noacl' [ 301.904830][T19851] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4896: corrupted xattr block 33: bad e_name length [ 301.937335][T19851] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 301.946839][ T5999] loop5: p1 < > p4 < > [ 301.951320][T19851] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4896: corrupted xattr block 33: bad e_name length [ 301.983199][T19862] loop5: p1 < > p4 < > [ 301.994051][T19881] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4896: Failed to acquire dquot type 0 [ 302.015176][T19851] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 302.045067][T19851] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4896: corrupted xattr block 33: bad e_name length [ 302.126255][T19889] loop0: detected capacity change from 0 to 512 [ 302.141476][T19851] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4896: corrupted xattr block 33: bad e_name length [ 302.179487][T19889] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 302.216845][T19889] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.4906: inode has both inline data and extents flags [ 302.265728][T19851] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 302.277284][T19889] EXT4-fs (loop0): Remounting filesystem read-only [ 302.292660][T19851] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4896: Failed to acquire dquot type 0 [ 302.311270][T19889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.356152][T19903] netlink: 'syz.7.4909': attribute type 6 has an invalid length. [ 302.400986][T17518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.467931][T19914] loop0: detected capacity change from 0 to 128 [ 302.479515][ T5885] bond0: (slave bond_slave_0): interface is now down [ 302.486414][ T5885] bond0: (slave bond_slave_1): interface is now down [ 302.493228][ T5885] bond0: (slave dummy0): interface is now down [ 302.516907][T19914] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.533070][T19590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.551279][T19920] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 302.583145][T19914] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 302.637375][ T5885] bond0: (slave bond_slave_0): interface is now down [ 302.644133][ T5885] bond0: (slave bond_slave_1): interface is now down [ 302.651180][ T5885] bond0: (slave dummy0): interface is now down [ 302.671789][T19930] netlink: 'syz.5.4917': attribute type 1 has an invalid length. [ 302.728655][ T5885] bond0: now running without any active interface! [ 302.748350][T19934] EXT4-fs: Ignoring removed nobh option [ 302.755558][T19930] macvlan2: entered promiscuous mode [ 302.761082][T19930] macvlan2: entered allmulticast mode [ 302.776383][T19936] EXT4-fs: Mount option(s) incompatible with ext3 [ 302.797501][T19930] veth0_virt_wifi: entered promiscuous mode [ 302.803475][T19930] veth0_virt_wifi: entered allmulticast mode [ 302.834789][T19930] team0: Port device macvlan2 added [ 302.846105][T19934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.892846][T19934] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.914750][T19953] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.936558][T19953] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.966588][T19590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.007284][T13780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.091579][T19972] FAULT_INJECTION: forcing a failure. [ 303.091579][T19972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.104894][T19972] CPU: 1 UID: 0 PID: 19972 Comm: syz.1.4926 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 303.104933][T19972] Tainted: [W]=WARN [ 303.104940][T19972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.104957][T19972] Call Trace: [ 303.104967][T19972] [ 303.105056][T19972] __dump_stack+0x1d/0x30 [ 303.105087][T19972] dump_stack_lvl+0x95/0xd0 [ 303.105115][T19972] dump_stack+0x15/0x1b [ 303.105140][T19972] should_fail_ex+0x263/0x280 [ 303.105215][T19972] should_fail+0xb/0x20 [ 303.105244][T19972] should_fail_usercopy+0x1a/0x20 [ 303.105282][T19972] _copy_to_user+0x20/0xa0 [ 303.105329][T19972] simple_read_from_buffer+0xb5/0x130 [ 303.105379][T19972] proc_fail_nth_read+0x10e/0x150 [ 303.105412][T19972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.105489][T19972] vfs_read+0x1ab/0x7f0 [ 303.105569][T19972] ? __rcu_read_unlock+0x4e/0x70 [ 303.105608][T19972] ? __fget_files+0x184/0x1c0 [ 303.105639][T19972] ? mutex_lock+0x57/0x90 [ 303.105672][T19972] ksys_read+0xdc/0x1a0 [ 303.105782][T19972] __x64_sys_read+0x40/0x50 [ 303.105802][T19972] x64_sys_call+0x2889/0x3000 [ 303.105835][T19972] do_syscall_64+0xc0/0x2a0 [ 303.105945][T19972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.105974][T19972] RIP: 0033:0x7f47e5a9b78e [ 303.106059][T19972] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 303.106084][T19972] RSP: 002b:00007f47e4536fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.106106][T19972] RAX: ffffffffffffffda RBX: 00007f47e45376c0 RCX: 00007f47e5a9b78e [ 303.106176][T19972] RDX: 000000000000000f RSI: 00007f47e45370a0 RDI: 0000000000000004 [ 303.106276][T19972] RBP: 00007f47e4537090 R08: 0000000000000000 R09: 0000000000000000 [ 303.106291][T19972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.106306][T19972] R13: 00007f47e5d56038 R14: 00007f47e5d55fa0 R15: 00007fffa1cabc88 [ 303.106331][T19972] [ 303.130492][T19973] tipc: Enabling of bearer rejected, failed to enable media [ 303.322609][T19968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.389832][T19968] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.441260][T19982] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 303.478241][T19970] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 303.489555][T19968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4928'. [ 303.509298][T19970] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 303.518186][T19970] FAT-fs (loop6): Filesystem has been set read-only [ 303.530103][T19982] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 303.540267][T19970] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 303.553513][T19970] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 303.562890][T19970] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 303.584206][T17518] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.615727][T19970] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 303.643914][T19970] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 303.661726][T19970] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 303.685239][T19970] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 303.704859][T19970] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 303.736655][T19970] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 303.797401][T20010] tipc: Failed to remove unknown binding: 66,0,0/0:780574816/780574817 [ 303.851580][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 303.851598][ T29] audit: type=1326 audit(1769989165.031:78164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 303.937166][ T29] audit: type=1326 audit(1769989165.101:78165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 303.960819][ T29] audit: type=1326 audit(1769989165.101:78166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 303.984790][ T29] audit: type=1326 audit(1769989165.101:78167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20020 comm="syz.0.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 304.060434][T20030] EXT4-fs: dax option not supported [ 304.080346][T20035] netlink: 204 bytes leftover after parsing attributes in process `syz.7.4942'. [ 304.141310][T20043] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4937'. [ 304.201544][ T29] audit: type=1400 audit(1769989165.341:78168): avc: denied { lock } for pid=20040 comm="syz.7.4944" path="socket:[63384]" dev="sockfs" ino=63384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.259627][T20055] netlink: 'syz.5.4943': attribute type 142 has an invalid length. [ 304.267692][T20055] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4943'. [ 304.288679][T20041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.369975][ T29] audit: type=1400 audit(1769989165.541:78169): avc: denied { connect } for pid=20059 comm="syz.1.4948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 304.385294][T20041] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.464283][ T29] audit: type=1400 audit(1769989165.641:78170): avc: denied { execute_no_trans } for pid=20040 comm="syz.7.4944" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 304.571193][ T29] audit: type=1400 audit(1769989165.671:78171): avc: denied { read } for pid=20069 comm="syz.0.4951" path="socket:[62313]" dev="sockfs" ino=62313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 304.650138][T20041] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.678441][T20083] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20083 comm=syz.6.4954 [ 304.759572][ T29] audit: type=1400 audit(1769989165.941:78172): avc: denied { write } for pid=20082 comm="syz.1.4955" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 304.848102][T20099] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.861285][T20101] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 304.895214][T20099] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.938958][T20099] ip6erspan0: entered allmulticast mode [ 304.971277][T13780] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.005038][T20112] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 305.048760][T20112] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84dc01c, mo2=0003] [ 305.071481][T20112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.139939][ T29] audit: type=1400 audit(1769989166.321:78173): avc: denied { checkpoint_restore } for pid=20111 comm="syz.1.4961" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 305.191504][T20112] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 305.236131][T19590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.337928][T20143] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.340128][T20148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4967'. [ 305.391748][T19043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.451910][T20161] EXT4-fs: inline encryption not supported [ 305.460917][T20159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4969'. [ 305.461096][T20161] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 305.490715][T20161] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4968: invalid indirect mapped block 2683928664 (level 1) [ 305.505964][T20161] EXT4-fs (loop7): 1 truncate cleaned up [ 305.513103][T20161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.572088][T20161] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4968: Invalid block bitmap block 3 in block_group 0 [ 305.586277][T20161] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4968: Invalid block bitmap block 3 in block_group 0 [ 305.610720][T20161] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4968: Invalid block bitmap block 3 in block_group 0 [ 305.628757][T20177] set_capacity_and_notify: 13 callbacks suppressed [ 305.628777][T20177] loop5: detected capacity change from 0 to 512 [ 305.645447][T20177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.679560][T19043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.711845][T19264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.800347][T20185] loop7: detected capacity change from 0 to 128 [ 305.845895][T20185] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.863653][T20185] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.944767][T19043] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.957870][T20209] loop6: detected capacity change from 0 to 512 [ 305.981336][T20189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.995351][T20209] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 306.009596][T20189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.012250][T20214] -1: renamed from syzkaller0 [ 306.023382][T20209] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4975: inode has both inline data and extents flags [ 306.042171][T20209] EXT4-fs (loop6): Remounting filesystem read-only [ 306.049458][T20209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.112487][T13780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.178546][T20226] loop6: detected capacity change from 0 to 2048 [ 306.179697][T20232] FAULT_INJECTION: forcing a failure. [ 306.179697][T20232] name failslab, interval 1, probability 0, space 0, times 0 [ 306.210602][T20232] CPU: 0 UID: 0 PID: 20232 Comm: syz.7.4979 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 306.210642][T20232] Tainted: [W]=WARN [ 306.210651][T20232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.210666][T20232] Call Trace: [ 306.210673][T20232] [ 306.210683][T20232] __dump_stack+0x1d/0x30 [ 306.210870][T20232] dump_stack_lvl+0x95/0xd0 [ 306.210970][T20232] dump_stack+0x15/0x1b [ 306.210998][T20232] should_fail_ex+0x263/0x280 [ 306.211040][T20232] should_failslab+0x8c/0xb0 [ 306.211091][T20232] __kmalloc_noprof+0xb8/0x580 [ 306.211204][T20232] ? security_prepare_creds+0x52/0x120 [ 306.211243][T20232] security_prepare_creds+0x52/0x120 [ 306.211365][T20232] prepare_creds+0x37e/0x550 [ 306.211413][T20232] set_current_groups+0x1b/0x180 [ 306.211443][T20232] __se_sys_setgroups+0x286/0x310 [ 306.211491][T20232] __x64_sys_setgroups+0x31/0x40 [ 306.211600][T20232] x64_sys_call+0x2be3/0x3000 [ 306.211634][T20232] do_syscall_64+0xc0/0x2a0 [ 306.211675][T20232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.211704][T20232] RIP: 0033:0x7ff28fdfaeb9 [ 306.211745][T20232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.211770][T20232] RSP: 002b:00007ff28e857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 306.211893][T20232] RAX: ffffffffffffffda RBX: 00007ff290075fa0 RCX: 00007ff28fdfaeb9 [ 306.211912][T20232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.211974][T20232] RBP: 00007ff28e857090 R08: 0000000000000000 R09: 0000000000000000 [ 306.211988][T20232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.212061][T20232] R13: 00007ff290076038 R14: 00007ff290075fa0 R15: 00007ffcf779ea58 [ 306.212128][T20232] [ 306.214973][T20226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.557710][T20260] FAULT_INJECTION: forcing a failure. [ 306.557710][T20260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.570943][T20260] CPU: 1 UID: 0 PID: 20260 Comm: syz.7.4984 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 306.571011][T20260] Tainted: [W]=WARN [ 306.571031][T20260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.571075][T20260] Call Trace: [ 306.571084][T20260] [ 306.571095][T20260] __dump_stack+0x1d/0x30 [ 306.571146][T20260] dump_stack_lvl+0x95/0xd0 [ 306.571168][T20260] dump_stack+0x15/0x1b [ 306.571193][T20260] should_fail_ex+0x263/0x280 [ 306.571256][T20260] should_fail+0xb/0x20 [ 306.571290][T20260] should_fail_usercopy+0x1a/0x20 [ 306.571331][T20260] _copy_to_user+0x20/0xa0 [ 306.571354][T20260] bpf_test_finish+0x157/0x500 [ 306.571463][T20260] bpf_prog_test_run_skb+0xcb1/0xf50 [ 306.571498][T20260] ? __fget_files+0x184/0x1c0 [ 306.571532][T20260] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 306.571639][T20260] bpf_prog_test_run+0x204/0x340 [ 306.571680][T20260] __sys_bpf+0x4c0/0x7b0 [ 306.571844][T20260] __x64_sys_bpf+0x41/0x50 [ 306.571878][T20260] x64_sys_call+0x28e1/0x3000 [ 306.571912][T20260] do_syscall_64+0xc0/0x2a0 [ 306.572014][T20260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.572044][T20260] RIP: 0033:0x7ff28fdfaeb9 [ 306.572066][T20260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.572161][T20260] RSP: 002b:00007ff28e857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.572189][T20260] RAX: ffffffffffffffda RBX: 00007ff290075fa0 RCX: 00007ff28fdfaeb9 [ 306.572209][T20260] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 306.572228][T20260] RBP: 00007ff28e857090 R08: 0000000000000000 R09: 0000000000000000 [ 306.572267][T20260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.572285][T20260] R13: 00007ff290076038 R14: 00007ff290075fa0 R15: 00007ffcf779ea58 [ 306.572313][T20260] [ 306.824357][T20265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=20265 comm=syz.5.4985 [ 306.987566][T20278] ip6t_srh: unknown srh match flags FF3F [ 307.037273][ T3448] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 307.073906][ T3448] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 800 with error 28 [ 307.086495][ T3448] EXT4-fs (loop6): This should not happen!! Data will be lost [ 307.086495][ T3448] [ 307.096283][ T3448] EXT4-fs (loop6): Total free blocks count 0 [ 307.102566][ T3448] EXT4-fs (loop6): Free/Dirty block details [ 307.108638][ T3448] EXT4-fs (loop6): free_blocks=2415919504 [ 307.114765][ T3448] EXT4-fs (loop6): dirty_blocks=800 [ 307.120227][ T3448] EXT4-fs (loop6): Block reservation details [ 307.126257][ T3448] EXT4-fs (loop6): i_reserved_data_blocks=50 [ 307.140143][T20288] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4994'. [ 307.150400][T20289] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 307.165281][T13780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.223328][T20294] loop1: detected capacity change from 0 to 512 [ 307.238447][T20297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.247122][T20297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.259347][T20288] loop5: detected capacity change from 0 to 512 [ 307.283589][T20294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.302035][T20288] EXT4-fs (loop5): invalid inodes per group: 0 [ 307.302035][T20288] [ 307.302435][T20294] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.322901][T20294] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4995: corrupted xattr block 33: bad e_name length [ 307.336730][T20294] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 307.357729][T20297] tipc: Enabling of bearer rejected, failed to enable media [ 307.366284][T20294] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4995: corrupted xattr block 33: bad e_name length [ 307.385497][T20302] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4995: Failed to acquire dquot type 0 [ 307.405799][T20294] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 307.415782][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4994'. [ 307.424889][T20294] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4995: corrupted xattr block 33: bad e_name length [ 307.443511][T20294] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4995: corrupted xattr block 33: bad e_name length [ 307.475790][T20294] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 307.486070][T20294] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4995: Failed to acquire dquot type 0 [ 307.607582][T19590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.666278][T20312] veth5: entered promiscuous mode [ 307.671729][T20312] veth5: entered allmulticast mode [ 307.762716][T20320] FAULT_INJECTION: forcing a failure. [ 307.762716][T20320] name failslab, interval 1, probability 0, space 0, times 0 [ 307.775518][T20320] CPU: 0 UID: 0 PID: 20320 Comm: syz.6.5003 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 307.775612][T20320] Tainted: [W]=WARN [ 307.775620][T20320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.775638][T20320] Call Trace: [ 307.775647][T20320] [ 307.775658][T20320] __dump_stack+0x1d/0x30 [ 307.775691][T20320] dump_stack_lvl+0x95/0xd0 [ 307.775720][T20320] dump_stack+0x15/0x1b [ 307.775790][T20320] should_fail_ex+0x263/0x280 [ 307.775848][T20320] should_failslab+0x8c/0xb0 [ 307.775930][T20320] __kmalloc_node_noprof+0xbd/0x590 [ 307.776020][T20320] ? crypto_create_tfm_node+0x5c/0x250 [ 307.776093][T20320] ? ___slab_alloc+0xb8/0xb00 [ 307.776196][T20320] crypto_create_tfm_node+0x5c/0x250 [ 307.776226][T20320] ? crypto_mod_get+0x5a/0x90 [ 307.776323][T20320] crypto_spawn_tfm2+0x43/0x80 [ 307.776364][T20320] ? __pfx_crypto_gcm_init_tfm+0x10/0x10 [ 307.776398][T20320] crypto_gcm_init_tfm+0x32/0x120 [ 307.776521][T20320] ? __pfx_crypto_gcm_init_tfm+0x10/0x10 [ 307.776608][T20320] crypto_aead_init_tfm+0xba/0xd0 [ 307.776711][T20320] crypto_create_tfm_node+0x108/0x250 [ 307.776747][T20320] crypto_alloc_tfm_node+0xdc/0x2b0 [ 307.776849][T20320] crypto_alloc_aead+0x2d/0x40 [ 307.776874][T20320] macsec_validate_attr+0xa4/0x2e0 [ 307.776897][T20320] rtnl_newlink+0x87c/0x1370 [ 307.777001][T20320] ? __rcu_read_unlock+0x4e/0x70 [ 307.777035][T20320] ? skb_network_protocol+0x329/0x420 [ 307.777069][T20320] ? __rcu_read_unlock+0x4e/0x70 [ 307.777129][T20320] ? avc_has_perm_noaudit+0xab/0x130 [ 307.777167][T20320] ? cred_has_capability+0x224/0x290 [ 307.777207][T20320] ? selinux_capable+0x31/0x40 [ 307.777246][T20320] ? security_capable+0x7b/0x90 [ 307.777281][T20320] ? ns_capable+0x7c/0xb0 [ 307.777313][T20320] ? __pfx_rtnl_newlink+0x10/0x10 [ 307.777371][T20320] rtnetlink_rcv_msg+0x64b/0x720 [ 307.777439][T20320] netlink_rcv_skb+0x123/0x220 [ 307.777522][T20320] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.777603][T20320] rtnetlink_rcv+0x1c/0x30 [ 307.777629][T20320] netlink_unicast+0x5c0/0x690 [ 307.777666][T20320] netlink_sendmsg+0x5c8/0x6f0 [ 307.777693][T20320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.777737][T20320] ____sys_sendmsg+0x5af/0x600 [ 307.777886][T20320] ___sys_sendmsg+0x195/0x1e0 [ 307.777928][T20320] __x64_sys_sendmsg+0xd4/0x160 [ 307.778019][T20320] x64_sys_call+0x17ba/0x3000 [ 307.778110][T20320] do_syscall_64+0xc0/0x2a0 [ 307.778226][T20320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.778252][T20320] RIP: 0033:0x7f566eb1aeb9 [ 307.778345][T20320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.778370][T20320] RSP: 002b:00007f566d577028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.778440][T20320] RAX: ffffffffffffffda RBX: 00007f566ed95fa0 RCX: 00007f566eb1aeb9 [ 307.778459][T20320] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 307.778476][T20320] RBP: 00007f566d577090 R08: 0000000000000000 R09: 0000000000000000 [ 307.778513][T20320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.778526][T20320] R13: 00007f566ed96038 R14: 00007f566ed95fa0 R15: 00007ffcfc7b6a28 [ 307.778602][T20320] [ 308.189279][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5006'. [ 308.274770][T20335] loop5: detected capacity change from 0 to 1024 [ 308.303018][T20337] loop7: detected capacity change from 0 to 512 [ 308.322902][T20335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.337704][T20337] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.366576][T20334] infiniband !yz!: set down [ 308.371236][T20334] infiniband !yz!: added team_slave_0 [ 308.377174][T20335] EXT4-fs (loop5): shut down requested (2) [ 308.386918][T20337] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.401620][T20345] binfmt_misc: register: failed to install interpreter file ./file0 [ 308.406262][T20334] RDS/IB: !yz!: added [ 308.435979][T20334] smc: adding ib device !yz! with port count 1 [ 308.457525][T20337] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.5010: corrupted xattr block 33: bad e_name length [ 308.464533][T20334] smc: ib device !yz! port 1 has no pnetid [ 308.516001][T20337] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 308.538266][T20337] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.5010: corrupted xattr block 33: bad e_name length [ 308.563787][T20349] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5010: Failed to acquire dquot type 0 [ 308.583116][T20350] loop5: detected capacity change from 0 to 1024 [ 308.597126][T20337] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 308.606188][T20337] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.5010: corrupted xattr block 33: bad e_name length [ 308.632428][T20337] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.5010: corrupted xattr block 33: bad e_name length [ 308.648841][T20354] loop0: detected capacity change from 0 to 512 [ 308.664618][T20350] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.692593][T20337] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 308.736517][T20337] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5010: Failed to acquire dquot type 0 [ 308.764715][T20361] netlink: 'syz.5.5016': attribute type 4 has an invalid length. [ 308.764803][T20360] netlink: 'syz.5.5016': attribute type 4 has an invalid length. [ 308.787753][T20340] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 308.853151][T20367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5020'. [ 308.938120][T20369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5019'. [ 309.008929][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 309.008945][ T29] audit: type=1400 audit(1769989170.191:78213): avc: denied { relabelfrom } for pid=20370 comm="syz.7.5021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 309.035667][ T29] audit: type=1400 audit(1769989170.191:78214): avc: denied { relabelto } for pid=20370 comm="syz.7.5021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 309.055965][T20371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5021'. [ 309.094051][T20363] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 309.170039][T20371] geneve0: entered promiscuous mode [ 309.175554][T20371] macsec1: entered allmulticast mode [ 309.180985][T20371] geneve0: entered allmulticast mode [ 309.198263][T20371] geneve0: left allmulticast mode [ 309.199707][ T29] audit: type=1326 audit(1769989170.291:78215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20375 comm="syz.0.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 309.203383][T20371] geneve0: left promiscuous mode [ 309.227105][ T29] audit: type=1326 audit(1769989170.291:78216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20375 comm="syz.0.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 309.256335][ T29] audit: type=1326 audit(1769989170.291:78217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20375 comm="syz.0.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 309.280165][ T29] audit: type=1326 audit(1769989170.291:78218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20375 comm="syz.0.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 309.304548][ T29] audit: type=1326 audit(1769989170.291:78219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20375 comm="syz.0.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 309.328553][ T29] audit: type=1326 audit(1769989170.291:78220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20375 comm="syz.0.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 309.352589][ T29] audit: type=1326 audit(1769989170.291:78221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20375 comm="syz.0.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 309.376522][ T29] audit: type=1326 audit(1769989170.291:78222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20375 comm="syz.0.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff00aeb9 code=0x7ffc0000 [ 309.744065][T20405] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 309.767442][T20405] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.774696][T20405] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.258722][T20433] FAULT_INJECTION: forcing a failure. [ 310.258722][T20433] name failslab, interval 1, probability 0, space 0, times 0 [ 310.271768][T20433] CPU: 0 UID: 0 PID: 20433 Comm: syz.1.5040 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 310.271816][T20433] Tainted: [W]=WARN [ 310.271823][T20433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.271836][T20433] Call Trace: [ 310.271842][T20433] [ 310.271849][T20433] __dump_stack+0x1d/0x30 [ 310.271929][T20433] dump_stack_lvl+0x95/0xd0 [ 310.271949][T20433] dump_stack+0x15/0x1b [ 310.271982][T20433] should_fail_ex+0x263/0x280 [ 310.272010][T20433] should_failslab+0x8c/0xb0 [ 310.272036][T20433] __kmalloc_noprof+0xb8/0x580 [ 310.272059][T20433] ? sock_kmalloc+0x85/0xc0 [ 310.272077][T20433] sock_kmalloc+0x85/0xc0 [ 310.272093][T20433] ____sys_sendmsg+0xf9/0x600 [ 310.272116][T20433] ___sys_sendmsg+0x195/0x1e0 [ 310.272220][T20433] __sys_sendmmsg+0x185/0x320 [ 310.272248][T20433] __x64_sys_sendmmsg+0x57/0x70 [ 310.272266][T20433] x64_sys_call+0x1e28/0x3000 [ 310.272345][T20433] do_syscall_64+0xc0/0x2a0 [ 310.272387][T20433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.272408][T20433] RIP: 0033:0x7f47e5adaeb9 [ 310.272468][T20433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.272485][T20433] RSP: 002b:00007f47e4537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 310.272504][T20433] RAX: ffffffffffffffda RBX: 00007f47e5d55fa0 RCX: 00007f47e5adaeb9 [ 310.272605][T20433] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 310.272617][T20433] RBP: 00007f47e4537090 R08: 0000000000000000 R09: 0000000000000000 [ 310.272693][T20433] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 310.272705][T20433] R13: 00007f47e5d56038 R14: 00007f47e5d55fa0 R15: 00007fffa1cabc88 [ 310.272745][T20433] [ 310.515828][T20441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5044'. [ 310.576864][ T3302] loop7: p1 p3 p4 [ 310.582100][ T3302] loop7: p4 size 589824 extends beyond EOD, truncated [ 310.606691][T20442] loop7: p1 p3 p4 [ 310.617344][T20442] loop7: p4 size 589824 extends beyond EOD, truncated [ 310.637992][T20448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5047'. [ 310.647135][T20448] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5047'. [ 310.671326][T20448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5047'. [ 310.741763][T20450] set_capacity_and_notify: 4 callbacks suppressed [ 310.741784][T20450] loop1: detected capacity change from 0 to 512 [ 310.763258][T20444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.779477][T20444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.798139][T20450] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.824510][T20450] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.5048: Failed to acquire dquot type 0 [ 310.839949][T20457] lo speed is unknown, defaulting to 1000 [ 310.947754][T20463] loop7: detected capacity change from 0 to 512 [ 310.977615][T20463] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 310.991481][T20463] EXT4-fs (loop7): orphan cleanup on readonly fs [ 311.000360][T20463] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 311.066708][T20463] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 311.074508][T20463] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.5053: corrupted inode contents [ 311.117204][T20463] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #16: comm syz.7.5053: mark_inode_dirty error [ 311.146575][T20463] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.5053: corrupted inode contents [ 311.158843][T20463] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.5053: mark_inode_dirty error [ 311.171246][T20463] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.5053: corrupted inode contents [ 311.183774][T20463] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 311.226652][T20463] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.5053: corrupted inode contents [ 311.248850][T20463] EXT4-fs error (device loop7): ext4_truncate:4635: inode #16: comm syz.7.5053: mark_inode_dirty error [ 311.262558][T20463] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 311.272261][T20463] EXT4-fs (loop7): 1 truncate cleaned up [ 311.341259][T20478] loop6: detected capacity change from 0 to 512 [ 311.348679][T20478] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 311.363271][T20478] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 311.388380][T20478] EXT4-fs (loop6): 1 truncate cleaned up [ 311.704691][T20511] loop1: detected capacity change from 0 to 512 [ 311.715075][T20511] EXT4-fs: Ignoring removed i_version option [ 311.721798][T20511] EXT4-fs: Ignoring removed bh option [ 311.740678][T20511] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 311.839734][T20519] loop1: detected capacity change from 0 to 1024 [ 311.858326][T20519] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.900178][T20523] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 311.909067][T20523] net_ratelimit: 13 callbacks suppressed [ 311.909085][T20523] mroute: pending queue full, dropping entries [ 311.923830][T20524] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.5068: Freeing blocks not in datazone - block = 0, count = 16 [ 311.986630][T20528] loop7: detected capacity change from 0 to 2048 [ 311.994222][ T3448] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 312.013318][ T3448] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 312.026240][ T3448] EXT4-fs (loop1): This should not happen!! Data will be lost [ 312.026240][ T3448] [ 312.036034][ T3448] EXT4-fs (loop1): Total free blocks count 0 [ 312.042222][ T3448] EXT4-fs (loop1): Free/Dirty block details [ 312.048258][ T3448] EXT4-fs (loop1): free_blocks=16 [ 312.053341][ T3448] EXT4-fs (loop1): dirty_blocks=16 [ 312.058580][ T3448] EXT4-fs (loop1): Block reservation details [ 312.064579][ T3448] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 312.088855][ T3302] loop7: p1 p3 p4 [ 312.094606][ T3302] loop7: p4 size 589824 extends beyond EOD, truncated [ 312.105955][T20528] loop7: p1 p3 p4 [ 312.112593][T20528] loop7: p4 size 589824 extends beyond EOD, truncated [ 312.119953][T20530] loop1: detected capacity change from 0 to 1024 [ 312.127016][T20530] EXT4-fs: inline encryption not supported [ 312.132966][T20530] EXT4-fs: Ignoring removed i_version option [ 312.167447][T20530] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 312.213396][ T4141] ================================================================== [ 312.215328][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 312.221643][ T4141] BUG: KCSAN: data-race in generic_fillattr / touch_atime [ 312.221687][ T4141] [ 312.221695][ T4141] read to 0xffff88811a3ad548 of 4 bytes by task 3302 on cpu 1: [ 312.248743][ T4141] generic_fillattr+0x172/0x340 [ 312.253628][ T4141] shmem_getattr+0x181/0x200 [ 312.258774][ T4141] vfs_getattr_nosec+0x146/0x1e0 [ 312.263738][ T4141] __se_sys_newfstat+0x96/0x460 [ 312.268621][ T4141] __x64_sys_newfstat+0x31/0x40 [ 312.273600][ T4141] x64_sys_call+0x2c51/0x3000 [ 312.278406][ T4141] do_syscall_64+0xc0/0x2a0 [ 312.283040][ T4141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.289139][ T4141] [ 312.291586][ T4141] write to 0xffff88811a3ad548 of 4 bytes by task 4141 on cpu 0: [ 312.300071][ T4141] touch_atime+0x1e8/0x340 [ 312.304792][ T4141] shmem_file_read_iter+0x477/0x540 [ 312.310160][ T4141] vfs_read+0x6c0/0x7f0 [ 312.314519][ T4141] ksys_read+0xdc/0x1a0 [ 312.318893][ T4141] __x64_sys_read+0x40/0x50 [ 312.324222][ T4141] x64_sys_call+0x2889/0x3000 [ 312.329011][ T4141] do_syscall_64+0xc0/0x2a0 [ 312.333555][ T4141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.339505][ T4141] [ 312.341850][ T4141] value changed: 0x180ac4ae -> 0x1837e83f [ 312.347601][ T4141] [ 312.349951][ T4141] Reported by Kernel Concurrency Sanitizer on: [ 312.356212][ T4141] CPU: 0 UID: 0 PID: 4141 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 312.367780][ T4141] Tainted: [W]=WARN [ 312.371606][ T4141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.381680][ T4141] ================================================================== [ 312.395723][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 312.445177][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 312.460549][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 312.473331][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 312.485317][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory