last executing test programs: 7m15.124878856s ago: executing program 32 (id=3737): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000780)='4', 0x1}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r1, 0xffffffffffffffff, 0x25, 0x0, @val=@tcx}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$eJzs3V9rZGcZAPDnTGYmyW40UXtRhdbFFnaLbrLp2jaIdFcQ7wpK9XoN2dkQdpJZkkm7CUWy+AEEES14o1feCH4AQfYjFKFg78WKsuhWwSLaI+dPdpN0TpNJMzM2+f3g3fPOOe85z/POTM7/2RPAmXUhIq5HxFhEPBcR0+X4WllipyhZu/cevrGUlSTS9NW/JZGU47JmSVky58vZJorBfpPFYGNr+/Ziu91aL0fPdVfvzG1sbV9eWV1cbi231q5enX9x4aWFFxaunEg/s369/M0///RHv/rWy7/7yut/vPHXSz/I8p0qp+/246QV70kjey8eqUfE+iCCjcBY2Z9/p4WKZuNDTgsAgArZPv5nI+JL+f7/dIzle3PVmnvqycCzAwAAAE5Cem0q/pNEpH1q9D0HAAAAMCq1/B7YpDZb3gswFbXa7GxxD+8Tca7W7mx0v3yrs7l2s7hXdiYatVsr7daV/J7a8YhoJNnr+UdnFIrXz+dts5Lsuwf4J9OT+fTZpU775ihOeAAAAMAZdP7A8f8/p4vjfwAAAOCUmSmH50acBwAAADA4M6NOAAAAABi4Yxz/NweRBwAAADAQ337llayku8+/vvna1ubtzmuXb7Y2bs+ubi7NLnXW78wudzrL7XQ8YvWw5bU7nTtfjbXNu3Pd1kZ3bmNr+8ZqZ3Ote2Nl3yOwAQAAgCH6zBfvv5NExM7XJvMSu9f2xypm8FsBODVq/bR4d7C5AMNVtZkHTr/6R09u9tEW+IRpFINk1HkAo3PYCmCiqsVbxwrn50MAADACFz9//500+fD1//rjcwPAKXX49X/gtKq4/p9ODzsRYOgqr+m72A+nXsMdgHDmHX79v8Jb+aTrh0dI00OXBQAADNRUXpLabHktcCpq76eFmIlGcmul3boSEZ+OiD9MN8az1/P5nIkfDQAAAAAAAAAAAAAAAAAAAAAAAADAEaVpEukx1I81FwAAADAKEbW/JOVzgC9OPzt18PxAM3k/fxTwB2mavv7zV392d7HbXZ/Pxv89H9+MiO6b2fjmKE5fAAAAAHvsPuU/P35/vjHibAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4rd57+MbSbhlm3AffiIiZXvHrMZEPJ6IREef+kUR9z3xJRIydQPydexHxZK/4E1laMVNmcTB+LSIm8ywGFT/Zjf9UmqY945//2NHhbLufrX+u9/r7q8WFfNj7779elGsfN371+q/2aP03tjf+ThE4W/N86ogxvvD2b+b2vPze4+p4Mb3ee/2zGz+pWP8+0ytY/cOjvv/d7e2q3NJfRlzsuf1J9sWa667emdvY2r68srq43FpurV29Ov/iwksLLyxcmbu10m6V//aM8eOnfvtBVfwHFyLOlfGbuzmVG5aZYvD15FEqzX05PZtVGlVLfuy/b999+Lmiurd1vtQH9yIuPdP7838yH/Z8/3/xrzSXbwey6RfLbUKyU9Qjyq9vRDz9698/Xdn/exNlrf/P/9LhXc89950f/umITQGAIdjY2r692G631gdeeTNN06M1zvZKj77kJGLn4KRsB+6EezEZERWT9seaLN/VOOqSn6hM9d3JiCF9Ov1WrvXTOB3v68uW7PwfdPAMV5r5F3LUayYAAOCkPd77H3UmAAAAAAAAAAAAAAAAAAAAcHYN4/8VOxhzZzRdBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4SP8LAAD//8Q31n8=") 7m5.735951233s ago: executing program 33 (id=3838): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x200000000622c, 0x0) 6m43.767448274s ago: executing program 34 (id=4138): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100f103000008000340000000011400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6m23.003844934s ago: executing program 35 (id=4352): r0 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bind$can_raw(r0, &(0x7f0000000040), 0x10) 4m50.833464827s ago: executing program 36 (id=5717): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x2000000, 0x20004074}, 0x0) 4m47.417298386s ago: executing program 37 (id=5766): r0 = io_uring_setup(0x68a8, &(0x7f00000000c0)={0x0, 0x3177, 0x20000, 0x3, 0x1b1}) r1 = syz_io_uring_setup(0x4d93, &(0x7f0000000300)={0x0, 0x822c, 0x8000, 0x10000003, 0x104, 0x0, r0}, &(0x7f00000002c0), &(0x7f00000001c0)) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0xf, 0x1) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x50, r2, 0xff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@ignoreqv}]}}) 4m33.013729196s ago: executing program 38 (id=5917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0xfe, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0x4e) 3m53.447595902s ago: executing program 39 (id=6470): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x3, 0x4e}, 0x100, './file0\x00'}) socket$kcm(0x29, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x4) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r1}) 3m12.197550177s ago: executing program 40 (id=7091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) socket$rds(0x15, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89e1, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x210, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3m11.289512049s ago: executing program 7 (id=7104): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}}, 0x4) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) timer_settime(0x0, 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) 3m10.112890628s ago: executing program 7 (id=7108): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmmsg(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x358}}], 0x1, 0x0) setresuid(0x0, r0, 0x0) getuid() r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[], 0xf6, 0xa15, &(0x7f00000002c0)="$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") get_robust_list(r4, 0x0, 0x0) r5 = socket(0x1, 0x3, 0x0) syz_io_uring_setup(0x2afc, &(0x7f00000005c0)={0x0, 0x0, 0x13090, 0x1, 0x800002}, 0x0, 0x0) mq_open(&(0x7f00000001c0)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x33, &(0x7f0000000040)={0x0, 0xe3d2, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001780)=ANY=[], 0x11cc}, 0x1, 0x0, 0x0, 0x5}, 0x20008000) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x80, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r8, @ANYRES32=r8, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100", @ANYRES32, @ANYBLOB="14000600fe80000000000000000000000000003614000700fe", @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r9 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r9, 0x29, 0x18, &(0x7f00000009c0)=0xa7b, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000210100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0300c220010000000200008003030000e5893dc12284be62"], 0x48}, 0x1, 0x0, 0x0, 0x20004010}, 0x4010) 3m9.018610912s ago: executing program 7 (id=7116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000540)="d2b7010000001f91cdfa02", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m8.931995397s ago: executing program 7 (id=7117): socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8921, 0x0, 0x7fc, 0x6, 0x0, 0x0, 0x2000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) (async) r0 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) io_setup(0x80, &(0x7f0000000480)) (async) io_setup(0x80, &(0x7f0000000480)=0x0) io_submit(r1, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r0}, 0x0]) socket(0x10, 0x2, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="4461ef6f000000100005ff00000002ffdbdf2500", @ANYRES32=0x0, @ANYBLOB="00000000000024e7ca99b356f66c010076657468000000000420028008001303f600", @ANYRES64=r1], 0x44}}, 0x8000000) 3m8.87803269s ago: executing program 7 (id=7120): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) 3m8.141310753s ago: executing program 7 (id=7129): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCNXCL(r5, 0x540d) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x300, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r10 = syz_pidfd_open(0x0, 0x0) fremovexattr(r10, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00') 3m8.103849406s ago: executing program 41 (id=7129): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCNXCL(r5, 0x540d) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x300, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r10 = syz_pidfd_open(0x0, 0x0) fremovexattr(r10, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00') 2m45.001552402s ago: executing program 6 (id=7407): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2m44.567516897s ago: executing program 6 (id=7417): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4d0fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb446edcd875b863c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x1e8, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0x0, 0xff], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x2, 0x9, 0x8001, 'pptp\x00', 'syz0\x00', {0x6f7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 2m44.363323989s ago: executing program 6 (id=7421): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x134, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_PAYLOAD={0xf9, 0xa, "18148bb21bf6d847f04ee0d4e013c1b3170319caffc85b6297d9010a521aa30b2f2bb7937714a625b615b99105999c107bf8c8a8bc44cbe227e0b52309b23173ea3327adbc7de8e59d9bc794f19b3ac7320a34daaf2c6f0cf0b4d7ac3523e20e0ec99c08fada42f750cb2506a882ea0f1abe04eb7d3f112974d09d4a9e35a10d9f088cb23bd488cadee525964654aed9c9ee62967fa8c8bab87f632b7fb90f3f520908e54363a9990530f8dbd95cf505b121495988720ea76090f6caf094c3e783c1516cea477e4389b9efb1b532572644408f57dc13697c275790141512f84142518736b677f1b68c77c0242697139b427d8bcc55"}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x200, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 2m42.059948093s ago: executing program 6 (id=7450): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\a\x00\x00\x00, \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="d4796b6e71b9679a505806042a0409e50789acfd894fc48413a101dc8c16d4ea69446f71a4f1740e1c0b3904000000000100001bdb3718e08b4418f899c33e7b8f968343cd5dbb5c50ed5859358a5bc0554472", @ANYRES64=0x0], 0x20) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140), 0x3, 0x44a, &(0x7f00000001c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000100000000071118e000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r2 = request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000580)='*\x00\x00\x00\x00\x00\x000\x00\xa5^y\xa9n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xb3\x00\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', r2) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="f6535266b8ab8121ff2044067420047b87e99bb83dff902e2efb4abfeb9d94c05cebbfb5a8bd63d9b0d8b4a12af79b7dc7e376d7617d05e212d976c57e6bc2646c871213da5d09320c7fa9efe2bfc8b11e777bc2e7cb7016bfcfa383d8e577f6a69188d9893faca89af2", 0x6a}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/640], 0x280}, 0x8000) r3 = io_uring_setup(0x55a5, &(0x7f0000000380)={0x0, 0x5e6e, 0x80, 0x1, 0x3e6}) r4 = dup2(r3, r3) io_uring_setup(0x5b1, &(0x7f0000000400)={0x0, 0xc8d4, 0x8000, 0x80000, 0xea, 0x0, r4}) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) perf_event_open(&(0x7f0000000b40)={0x4, 0x80, 0x4, 0x4, 0x2, 0x1, 0x0, 0x7, 0x220, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xeff}, 0x2010, 0x7, 0xeb, 0x0, 0xcee, 0xcec0, 0x3, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r5, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') getdents(r6, &(0x7f0000000000)=""/159, 0x9f) getdents64(r6, 0xffffffffffffffff, 0x43) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x9, &(0x7f00000008c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000680)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x18, r4, 0x8, &(0x7f0000000940)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x23cb5, 0xffffffffffffffff, 0x3, &(0x7f0000000980)=[r6, r4, r6, r4, r4, r4, r4, r1], &(0x7f00000009c0)=[{0x2, 0x5, 0x5, 0x5}, {0x0, 0x2, 0xc, 0xc}, {0x5, 0x5, 0xa, 0x6}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r7, 0x0, 0x65, 0x10, &(0x7f0000000480)="11deca7fed2593f24291bb8b84ed390d4197048b90af79f9003cc2ee2a6d2a9f2f44abf81d559c11a53c6eb31a15a56d377f4e8bd823f23502cde685fc09d1a35652fdbfa3e11a12c84783ee3e01caa5bbb7d23f7403c334fa3265f7e4db35fdad25a309b64224be2587854fe00e7ee92ac3ddd317c0d9328dacfd715fb6c919692a3d7468eadef01e2ff1532cf802d2f33af77a5aac02d7b9bea2542b014a922005070e388d9a119f2c0460bdd6ce50cbdd380674377abc93a1906bb200"/202, &(0x7f0000000580)=""/16, 0x8, 0x0, 0x79, 0x32, &(0x7f00000005c0)="ca4a5a6b765dc3820112075cea25e84acebee2e5c52ad7ef1984198bbe8735c34c8657da3bab19d5ab16560a942b393d259a6e53f214a0ef40b714c1727ecc769cdbfd4a72acf250d4f6895ca2234dc10777ee64870b58f8d9d38a2b9c2ac83193b53dbbf96c5511da8c8b98329595d262a80a1ee196a76ced", &(0x7f0000000880)="13b32080f18d4fb83e562007639fe4f85c1967020d3a020c86589d00"/37, 0x6, 0x0, 0x6}, 0x50) r8 = accept4(r4, &(0x7f0000000740)=@in={0x2, 0x0, @private}, &(0x7f00000007c0)=0x80, 0x800) r9 = open_tree(r0, &(0x7f0000000800)='./file0\x00', 0x8101) poll(&(0x7f0000000840)=[{r8, 0x168e}, {r9, 0x340}, {r3}], 0x3, 0x7) 2m41.019837214s ago: executing program 6 (id=7464): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffffffd}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000040)=0x5, 0x4) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x80000000}], 0x1, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0x800000ad) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) readv(r3, &(0x7f0000002600)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1) fallocate(r1, 0x1, 0x2, 0x7) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="87", 0x1}], 0x3f, 0x1) fcntl$setpipe(r4, 0x407, 0x176) vmsplice(r5, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(r4, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x1000) 2m39.701309561s ago: executing program 6 (id=7483): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 2m39.679670912s ago: executing program 42 (id=7483): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) 1m48.657890796s ago: executing program 9 (id=8172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r1, @ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) sendfile(r2, r2, 0x0, 0x4) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r3, 0x209, 0x40, 0x1000000}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) 1m48.317475986s ago: executing program 9 (id=8176): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x2, 0x30, 0xa76, 0x9}, &(0x7f0000000180)=0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x440840, 0x120) getdents64(r2, &(0x7f0000000040)=""/225, 0xe1) 1m47.721459761s ago: executing program 9 (id=8182): r0 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) dup(r0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x6, 0xfc, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x5, 0x342a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = socket(0x1d, 0x2, 0x6) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000010c0)={0x90000001}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000080)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34363b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d3b6d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e75a5cffcdc2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359b93ffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7969d1685a882e8020f06c4c2ba1dd5cac7c18876da865d25d8a71ccd583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba5718e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d356bc309d0de93bfb7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa439d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e9ac557a22757c0595f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000003017808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767ddf0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319ca34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24ee0c4f1c5e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f29c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e5435dde5800000000df07720ba2b26b01000000a0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836154faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b000000000000000000000000000000000000f000", 0x1000}}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022dbd7000ffdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x10000800}, 0x48885) fchdir(r1) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r8) r9 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r9, 0x852ac000) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @ib={0x1b, 0x1, 0x0, {"15a82a35c72b55077ec82827906f7f19"}, 0x8001, 0x7, 0x7}}}, 0x118) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r8}}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r12, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}, 0x2}, 0x18) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x7, 0x1}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 1m47.428480558s ago: executing program 9 (id=8187): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@prjquota}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$eJzs3U1vW1kZAOD33thMk2ZIBljMjMTMiBmUVFAnmdBpxKKAhGBVCSj7EhI3iuLEVeK0TVRBKn4AEkKAxAZWbJD4AUioPwEhKsEeAQJV0LJhUbjI9nWapraTUn9onOeRTu6Hj/2eN5aP7/E99g3gzHonImYjIsuy7EJETOX707zEQbPU6z1+dHelXpLIsmv/SCLJ97Ue65V8eT6/27mI+MZXI76dPB93Z29/Y7lSKW/n23O1zeRJlu1fXN9cXiuvlbcWFxc+WLq8dGlpvid5TkfElS//9Uff/8VXrvzms7f/dP3vs99pJth0NI9eaqZebPwvWgoRsd2PYENSaGTYdGnIbQEAoLv68f7HIuJTEXEhpmKscTQHAAAAjJLsC5PxJGme/wMAAABGUxoRk5GkpXy+72SkaanUnMP7iZhIK9Wd2meyqcPPC6ajmN5Yr5Tn87kD01FM6tsL+Rzb1vb7x7YXI+K1iPjh1Hhju7RSrawO9ZMPAAAAODvOPx3/v5F/h7Mx/gcAAABGzPSwGwAAAAD0nfE/AAAAjD7jfwAAABhpX7t6tV6y1vWvV2/t7W5Ub11cLe9slDZ3V0or1e2bpbVqda3xm32bJz1epVq9+bnY2r0zVyvv1OZ29vavb1Z3t2rX15+5BDYAAAAwQK+9ff+PSUQcfH48jYgsOXJbMSIbO1q5MPj2Af2Tvkjlv/SvHcDgjQ27AcDQOKSHs6t4chXfDoARd1I/0HHyzm973xYAAKA/Zt44PP/fKMDZcf9hY5Ekw24IMHDdzv+bGwCj7RTn/4ARVez2Lm9QACMv7fJSb30h6OXP/2fZi7cMAADopclGSdJSPg6YjDQtlSJebUz8LyY31ivl+Yj4aET8Yar4Sn17oXHPxMcDAAAAAAAAAAAAAAAAAAAAAAAAAHBKWZZE1sH4YR0AAADgwywi/VuSX/9rZuq9yeaI/+lVQT+S/HuqsYyI2z+99uM7y7Xa9kJ9/z8P99d+ku9/fxifYAAAAADHtcbprXE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTS40d3V1plkHEffikiptvFL8S5xvJcFCNi4l9JFI7cL4mIsR7EP5iIiNfbxU/qzYrpvBXH46cRMd6L+Pf+//jnexAfzrL79f7ni+1ef2m801i2f/0V8vKyOvd/6WH/N9ah/3u13QOmz+9688Gv5jrGvxfxZqF9/9OKn3SI/+4pc/zWN/f3O92W/Txipu37T/JMrLmkcHNuZ2//4vrm8lp5rby1uLjwwdLlpUtL83M31ivl/G/bGD/45K//2y3/iQ7xp0/I/71T5v+fB3cefby5Wjx2UzF+lmWz77Z//l/vEL/13vfp/Omub8+01g+a60e99cvfvfV2l/xXO+R/0vM/e8r8L3z9e38+ZVUAYAB29vY3liuV8rYVK31bGY8BBl2ObnVaB7EDaM9381D9CvH7YkT/shhipwQAAPTF04P+YbcEAAAAAAAAAAAAAAAAAAAAzq6TfgasFz8wdjzmwXBSBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo6n8BAAD///phy8c=") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) unshare(0x22020600) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="800000001e00010900000000040000710002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, 0x0, &(0x7f0000000040)=0x1e) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x1, 0x1000000, 0x1, {0x6, 0x1}, 0x4, 0x800}) vmsplice(r7, &(0x7f0000000cc0)=[{0x0}], 0x1, 0x0) 1m46.796628614s ago: executing program 9 (id=8196): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@nodelalloc}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x400}}]}, 0x1, 0x5ee, &(0x7f0000001580)="$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") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1, 0x8a, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000005000000070000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000200), &(0x7f0000000340)=r4}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000200025a729bd7000fcdbdf250a0000cdff000001020001000c0014005aaddbb021cf4c62f6e55790316f8942f5f3a7fc35a262313bf39d18555b1c16732db745f5165fe51e8f6e018a4bdba7aadf3d1b2e34f9291b6ada799af15254c7dca74ad64c5af6ba1ad1f01d547769954afb08a24765ffb0957fd002953c", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f00000003c0)={[], [{@flag='silent'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@uid_gt={'uid>', 0xee01}}, {@fowner_lt={'fowner<', r8}}, {@smackfsdef={'smackfsdef', 0x3d, '#,^!}@#{'}}]}, 0x1, 0x77f, &(0x7f0000000a40)="$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") r9 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffea3}], 0x1, 0x80000, 0x0, 0x1b) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x25, "b9c593f87c5c5a77f8b5b2f0ba30742def30b43785806a6b62fa119a07921f9528e6ff823e"}, &(0x7f0000000440)=0x2d) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000004c0)={r10, 0x1}, &(0x7f0000000500)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 1m46.19847554s ago: executing program 9 (id=8201): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_vlan\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) (async, rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m46.045339258s ago: executing program 43 (id=8201): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_vlan\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) (async, rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 51.237851483s ago: executing program 1 (id=8888): openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x27, 0x3}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 50.025609064s ago: executing program 1 (id=8901): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = getpid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x86, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000240)='L', 0x1}], 0x1}}, {{&(0x7f00000005c0)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)='\n', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8912, &(0x7f00000005c0)='\xea\xc1x&GQ\xcc\a\xad9\x0f\\\x93\xb6\x02\xf9\xfaK\xc4$+\x8a\xa7\x91\x89e\xfc\x9aK\xed}\xb3&\xed\xa2\b?\x93\xff\n\x91\x9de\x13\xd3\xfaP\x15\xc42\xf7T\x17\xc7Oj\xd7\x8f\xd8\xdex\xde\xbd%\xd3\x81\xd8\x1a\xa8\x035Y]\a\x15\xc0\x97\xd9\xc2\x92\x02,\xf9X\xf9\xe9\x14\xd3\xdf8\x1a\xea\x04\xfc\xa0\xe7\x19\xb4T\x04\x99wlq\xad\x88-f6\xb5+[x\xa3\"\xc7\xa2FQw~\xd1\xd8\xca\x1b\x1d\xbd\xae\x1d\x80\t\xa7\xad\x8f\xc8W\xa6\xc6\xd9H\xaa\x7fQ\xfd\xef\xee\x9a\x9d\x19\x86\xd0\x05\xef#5\xed\xf99\xcfEf\xb7\x01|\x98Z\x8a\xe5\xed%\x1c\x8cM\xd2\x844\ai\x8d\xa0~f\x84)\x04\xbe\x06\"A\xfb\x9c\xc3\xcc') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x41}, 0x4008000) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[], 0x12) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001a80)=""/4102, &(0x7f00000001c0)=0x1006) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@mcast2, 0x0, r8}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113730000000000bf300000000000002500070007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000000)="1a", 0x1}], 0x1}}, {{&(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f00000003c0)="4dc4ae0170e72be87010148e88fa85bf835d83a98a45811162291cda7dfac9c3c66e4c18ed54e6c160ba36e41f853262a9cdaccf463ed05d37d40992ea0d80c3b4b658a37a1c64dfe9812cb178e257ded134c4298497442c34f43404be4968a7478755a908ba7982083ebf52641ab34c9afd4723e0bf20aacdd89897f1ff20c2f13165c5daa0f881d591cc39fbca150a22ff9b22dec0cd6fd6fad6cab1c5de1a8f6ec087066ecda999cb1741e48cc35dbcd81305f7c447a5a9df7f49a9199d5f533a57c2f58b", 0xc6}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x4b0}}], 0x2, 0x4044044) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd, 0x0, 0x0, 0x10, 0x1}, 0x94) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 49.378574271s ago: executing program 1 (id=8907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000042000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000274000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000d9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00002be000/0x2000)=nil, &(0x7f00000cf000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0)="b8daaebacdf8d8749edc1867e7f6d0827cfd", 0x12, r0}, 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'ipvlan1\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x1, 0x0, 0x3]}}) truncate(&(0x7f0000000040)='./file1\x00', 0x2fffffc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x0, 0xce, 0x75, &(0x7f0000000640)="2684c33205d0343a08081314b30c440d7573b93720a21306494395d36f43a44a71e63f3bb9e8dcdb5d6f0712a227153c3cd1c84e17834453341a29a7b82822ad6120215f43ba3de8c3e581c8ead008482e095521e1f52348e9805ac83a069894fb5b2b94c3227c7d84b8ad44735537b1c3df3b647bece29aa2debf054e86a5e3b96003b16e936b3bf9ea59f9bb7f4146919022e988a187b6993ac584bf5eaba788e8ca951d355852823d85258725741ea1da1c0f2fb67c24927b7b8dd9e0222443911b9b13f022c7ecb9486ec0ab", &(0x7f0000000740)=""/117, 0xfffffffa, 0x0, 0x6d, 0xab, &(0x7f00000007c0)="4edaeabda878018e3818fb46acd1566efbd45659d0e7812e67c5c6412c5f5fba2bec6cc4d72b3390cd417945620ef6702880323e5d1454e38d6f4dc5385529ed43d8dbaca4886b71e128f20d29dd2ed48199f9538cee2b0a3cb44c48f688fe9350240b18d520d3483c55857aa2", &(0x7f0000000840)="a2e6fda379b64dd373edb83432bf310b031817904738f6d0575e42f2b251f0a71bb2c815b919e88c93560b48859b792f031c9ded5707e1e7bb37c83597fcffe82d9f0e0afa3707709351fab83378b2faa4335fa9d7116e2da73357aa1e4d52ce9495f6c600609297f63ca18dd8a4067bf59bac8d38edbda7303f272e843b2098f0601dd1d79dac1557246d27c9ab72d1a381acb695970e8bd89c42439b422a646ed3196ad951bd92396923", 0x1, 0x0, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000f8ffffff85000000070000009500"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 48.559299609s ago: executing program 1 (id=8911): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@nodelalloc}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x400}}]}, 0x1, 0x5ee, &(0x7f0000001580)="$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") r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x169a82, 0x109) sendfile(r1, r1, 0x0, 0xb) mq_notify(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x1000005, 0x0, @thr={0x0, 0x0}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8000}}, './bus\x00'}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x101200, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0xfffffffffffffffe, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x0, 0x5, 0x30, @empty, @empty, 0x40, 0x10, 0x8001, 0x7e}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') statx(r10, 0x0, 0x1000, 0x10, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000011c0)=@rnullb, 0x0, &(0x7f0000000100)={0x3, 0x1, 0xc6, 0xf, 0x100000000000002, 0xc5, 0xfffffffffffffff7, 0x0, 0x9d}) r11 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x9c37611dc13d0da6) write$UHID_INPUT(r11, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1b00000000000000000000005f00000000000000", @ANYRESOCT=r5, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000f5010000fe0400"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x2b, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000800000000000003472000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000d2000000186100001000000000000000080000001800000001000000000000000600000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000000000008500000005000000b7000000000000d03632000002000000000000000000000018000000001000000000000003000000cec7bb625f5a2f3504f06db61800000008532db74132000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018600000090000000000000000040000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x8749, 0x6e, &(0x7f0000000180)=""/110, 0x1f00, 0x0, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xd, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r10, r12, r0], 0x0, 0x10, 0x1800000}, 0x94) r13 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r13, &(0x7f00000004c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @local, 0xffffffcc}}, 0x24) 48.314140804s ago: executing program 1 (id=8914): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = io_uring_setup(0x33a6, &(0x7f0000000480)={0x0, 0x10000, 0x1880, 0x1}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000240)={[{}, {@subsystem='freezer'}]}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x240448c1) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/9, 0x9}], 0x1}, 0x40000040) close_range(r2, 0xffffffffffffffff, 0x0) 48.018803861s ago: executing program 1 (id=8918): openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d292900"/240], 0x148}}, 0x0) 47.940681145s ago: executing program 44 (id=8918): openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d292900"/240], 0x148}}, 0x0) 34.418809913s ago: executing program 0 (id=9030): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46804004000500000000000000020006"], 0xb0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001ac0)=""/14, 0xe}], 0x2) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 34.398221355s ago: executing program 0 (id=9031): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xea2a, 0x12000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x2000c0f0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) socket(0x1d, 0x3, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = getpgrp(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_pidfd_open(r4, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x10080000, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 34.325716688s ago: executing program 0 (id=9032): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000040)={[{@map_off}, {@map_acorn, 0x0}, {@sbsector={'sbsector', 0x3d, 0x100000001}}, {@sbsector={'sbsector', 0x3d, 0x5}}, {@session={'session', 0x3d, 0x62}}, {@nojoliet, 0x41}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {}]}, 0xfa, 0x69f, &(0x7f0000000840)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getdents64(r0, &(0x7f0000000f80)=""/4091, 0xffb) 34.197625416s ago: executing program 0 (id=9035): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) syz_open_procfs(r1, &(0x7f0000000180)='timers\x00') openat(r0, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc00) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x0, 0x0, 0x3c, 0xffff, 0x0, 0x5, 0x0, 0xedf2}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) syz_io_uring_setup(0x1206, &(0x7f0000000380)={0x0, 0x4db5, 0x1, 0x1, 0x2d1}, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 34.028888806s ago: executing program 0 (id=9036): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) unshare(0x2040400) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0xdeef5fff, 0x1000, 0xe, 0x1}, 0x20) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRESDEC=r1], 0x1, 0x2aa, &(0x7f0000000540)="$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") r3 = open(&(0x7f0000000040)='./file1\x00', 0x4440, 0xb4) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 33.693590696s ago: executing program 0 (id=9041): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) (async) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000003c00)=[{0x0}, {&(0x7f0000003bc0)=""/27, 0x1b}], 0x2}, 0x10000}], 0x1, 0x10002, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100c5ae000f170000000c000000fdffffffff030000006100615f2e00"], &(0x7f0000005bc0)=""/255, 0x18, 0xff, 0x9, 0x1000}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000100000002000000000000000000000400000000000043ce6f8105deea3ab434a1af7cc50df9b0fc8757e0200e697bb14f65b703ba993fa1dea9cbf4588246de36"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xfffffffffffffe86, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x29, 0x0}}, 0x10) 33.692716126s ago: executing program 45 (id=9041): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) (async) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000003c00)=[{0x0}, {&(0x7f0000003bc0)=""/27, 0x1b}], 0x2}, 0x10000}], 0x1, 0x10002, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100c5ae000f170000000c000000fdffffffff030000006100615f2e00"], &(0x7f0000005bc0)=""/255, 0x18, 0xff, 0x9, 0x1000}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000100000002000000000000000000000400000000000043ce6f8105deea3ab434a1af7cc50df9b0fc8757e0200e697bb14f65b703ba993fa1dea9cbf4588246de36"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xfffffffffffffe86, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x29, 0x0}}, 0x10) 4.764456432s ago: executing program 3 (id=9430): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) 4.685569186s ago: executing program 3 (id=9431): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x4, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@dstopts={0x2c}]}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000400)=r0}, 0x6f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="e2859adfdf1aadcc1f1a36e1404ce9620268d0781b7eb2163966db13bcaca8ae2d7466f1e302070a625a90a616c81cb13356ebd346d317445baa37d60927f8985b171c283a0858874c51a2caa221f34431663ebb80d378431e5e59930106e65bc2d44ecc19aebb26aa2649a524d0020f5ddb2ca325e9395ab8781f62cf62c8f6fca4", 0x82}, {&(0x7f0000000200)="b57e9e61a237b117d6379f5199e8a19acc470b0248e8ae26cc376a25077af56d200c6162e9dbc3a26d656ff9c448ccd6fa20e78c7977fee00f6051efa5ece96c226a57c5b12b650e9341f9bcb05af067609c30d7411d65da669074e6e2cf611984467009fa086af9aefe73df9a6c1b563c3e3d599b03fc908e3cf2eea5af8935ecf5ae8a061f5aaa047f", 0x8a}, {&(0x7f0000000000)="0affd312b15a4d2353cacd277bd0333170d76f6cdb8dd504512c128cbdb383f938c6bee8c5c73cb2d7e3e6d50d8235b2", 0x30}], 0x3, &(0x7f0000000ac0)=[{0x108, 0x102, 0x400, "97a3b29f89410b14c170be8d54f9ccef83f71cdb3eccaf2ec1c69e4e26e06d4123ee4f91a54c1cb7305a7aaceb0e6652c0035844ac53744c51aaaf6cda27181c22ce230f63171d151c0f50157110421b7af800a1ea28013e3329cc5749904cb8d82eff96c8fcda023914ae20ec3ec5edaf1df62a996d17eb62d74f83aba068a1613c801c58d0b10243b6d4521c4c9d835cccdd4b63061195aba14f7cafa850a81ba2495a2f06746265f04e7d67f929507d0ec009f12dd883900438f7b1cc1bebe541aa8a293c353141178448f06a3d282e537d2cabc1cbb75cd3a31f8b943a4847a46c1a4ba7abd6888159cee7dfe18eb6a1d8d9"}, {0xa0, 0x0, 0x3, "cf57344c3b7875da0b5bb543648bc8576b0f8e7782cc4d5560254ba3b00a77b7fb35bffb139a8d55061509d4824bf6d50ee2a814d25298afae7748d67042c99d42bc3e934a2c5bf1af1f8428b4d76473832f394a082c67ea636eb8e6b17108b541a8593578d3192d465f98c72ad33ea4532106a448ad52efa6004bde387e23fc9ba1195342e064f4268f0ac4a7b2"}, {0x68, 0x102, 0x10001, "3af5cdab8abc9d366cfd66aa936e085a7d59c81cb319cd5722100f6a6690685d3e2893bbe3d6f3ed9949e4bb2ad9b952fb8ee4485803bcc0d8ceadcdf58002e75ca7251889e927ed821fbaddc8dc980dd4c1ad"}, {0x108, 0x110, 0x1, "7a08cc5abe7cfbd2f71418ee99f1baffc782f9ef7d7406bd81276e2364117a10ed680b23019b198e4a957da7a383781670d88648ea2da5976a7f751a2b0a6736e60f08aa58071a6fd3ba1760ec604f2bbd45504bd2f41db023a51a3bafefbdd72f8960ee671ad2ebea926d72ff25df7674066ad5a5c5a07511b7a0c95b0726371550b4abe676105635edfa6fa7d75bc58b248d894e5ba47297ee34d841773ab93081da64bfbfdb3406294db80c4e638a0a3ebbccd8172e6c9e50d294ad3c834ab111acffd1a58621a7d8664093a171ec497ff9a9c4a30a90747e2941c41b294a1290e8c0a41dfd58eb069da683459d31f942"}, {0x58, 0x6, 0x10001, "af243d5cb200a896be6103edf6d51e17962d70e102f5ab3c8abcdce942f0712af5f2f7794e14da63b5b148aa64a455a528ff58ddd2484c30ef97baf556495eff571c35fb"}, {0x30, 0x101, 0x8, "f1b38bc004ceeeea380fa9f24883fb6d16ef9843e9bad41fa307405829997f25"}, {0x108, 0x10a, 0x7, "9255b737e8cd984ac89081ebbe650a64c0b30f9e0ca6de65dca8820b25c28d8f8ae2a8ce9da8e7efaecb0854c1cf458ceeef9ef3dfe3f8c59fef9095f45d93f80ae4606e13b126c53514fc13f4fd74314da740b87e18f44504ad1eefb6ff21d849cecff9c70d41de80aa6b6c7b954adef64d70d8724fd1cee0d0fc5e3286cdb514c38e86fdcffabe3b6adc84ff015dda81200afe8ded33ee9e7740f0757f58caa7cecc697e5f335d4029e954b8f6e244866e7706c2fc426cb9d93a4f7c0ad5b232637e3d2b668bb14c4e17e1c7f936cf4faa7583d1ef5733c00426e5fbe7dda8da8f031372d8c6d0a606c9d029ad6634e1a107607195"}], 0x4a8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x6c, 0x0, 0xf, 0x5}, @struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x3, 0x2, 0x940}]}]}, {0x0, [0x2e, 0x61, 0x0, 0x0, 0x2e]}}, &(0x7f00000004c0)=""/165, 0x53, 0xa5}, 0x28) 4.62027267s ago: executing program 3 (id=9433): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x4, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000400)=r0}, 0x6f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) (fail_nth: 7) 4.483859998s ago: executing program 3 (id=9434): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x40002000, 0xfffffffb, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') finit_module(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xa, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, r5, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu==0||!') r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r7, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000080000000c000000", @ANYRES32, @ANYBLOB="ffffffff"], 0x48) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.389420102s ago: executing program 3 (id=9445): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) unshare(0x2040400) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000200)='./file0\x00', 0x28040, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) flock(r2, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x5) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000240)) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x4}, 0x8887, 0x10002, 0x8, 0x1, 0x80a, 0x80006, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) close_range(r3, 0xffffffffffffffff, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', r7, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r10) gettid() 2.492913354s ago: executing program 3 (id=9459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0x8b25714e) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x8000000000000001, 0xf60e}, 0x19096, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000040)=0xae, 0xde6e, 0x5) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x1100, 0x0, 0x4040010}, 0x30) 1.35992846s ago: executing program 2 (id=9481): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) fcntl$lock(r2, 0x5, &(0x7f00000000c0)={0x0, 0x1, 0xa, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000969000/0x3000)=nil, 0x3000, 0x100000b, 0x100010, r0, 0x64fe3000) times(&(0x7f0000002280)) 1.341862451s ago: executing program 2 (id=9483): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa4c7baaaaaaaaaaaaaa2286dd6c370c8900082b01fe800000000000000000000000000025fe8000000000000000000000000000aa2c00000000000000"], 0x0) 1.314853893s ago: executing program 4 (id=9485): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) socket$packet(0x11, 0x3, 0x300) r2 = io_uring_setup(0x3be8, &(0x7f0000000140)={0x0, 0x7e15, 0x0, 0xfffffffe, 0x2aa}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000016230000000000000000850000002000000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d0000978276fcf294", 0x0, 0x24000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000380)=0x1) setsockopt$inet6_tcp_int(r6, 0x6, 0xc, &(0x7f0000000080), 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000845, &(0x7f0000000100)={0xa, 0x4001, 0xfffe, @loopback, 0x4}, 0x1c) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x8028451f, 0x0) socket$inet6(0xa, 0x80803, 0x87) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x4, 0x0, 0x9, 0x690ab, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0xff, 0x0, 0x26}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000200)=0x8) 1.261616636s ago: executing program 2 (id=9486): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r0, &(0x7f0000000000)=""/90, 0x5a) exit(0xbfd8) getdents64(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000c748aa0b1c001a8018000a8014000700200100000000000000000000000000001400350077673100000000000000000000000000080004"], 0x58}}, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xa3d, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8e, 0x5, 0x1, 0xb6, 0x0, 0x1, 0x44800, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x4, @perf_config_ext={0x6, 0xa}, 0x0, 0x4, 0x8, 0x2, 0x2, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x8) 1.166101962s ago: executing program 8 (id=9487): syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x1fffff) 1.139456233s ago: executing program 8 (id=9488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x1, [@private=0xa010102]}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x50) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="59834559900e5b4ac7e32abdb98d97cf", 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0x11, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@x25={0x805, {0x3, 0x80, 0x1b}}}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200"], 0x44}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002"], 0x50}}, 0x0) 1.101614355s ago: executing program 5 (id=9489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000580)={0x14, r1, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x0) unshare(0x2040400) r2 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000003000000040000000108000000000000", @ANYRES32, @ANYBLOB="b415000000000000000000000000000000000000e6560e83635b1e53b68bed38bbedc1cb76c397c8642d9b3d1f384903cd096fd62604db0c5b5811b076bce99411fb20d96e50ea8a40c2fd7e46d28c50ae290a153786d53d03276f1ff07604b3c5b88395ae2db71f7076a6473d154f5cecbb62dc419cd6546d6218186e56427f1154199757e3e47cae348380bdde08d67cd2082d7f7280fcd4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.02839651s ago: executing program 8 (id=9490): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf6d0e000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x100000000000000, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x20) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.02812198s ago: executing program 5 (id=9491): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x147100) r1 = dup2(r0, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000002, 0x12, r1, 0x8000000) 1.02768001s ago: executing program 4 (id=9492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xf5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 1.02719572s ago: executing program 5 (id=9493): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d4, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x2f4, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x20, 0x2f, 0x0, @empty, @empty}}}}) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400383a00fe8000000000f6ffffff0000000000bbff02000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000ff0200000000000000000000000000010000010000000000"], 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000140), 0x1, 0x553, &(0x7f0000000d00)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r3, &(0x7f0000000100)='./file7\x00', 0xc000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r4, &(0x7f0000000100)=""/208, 0xd0) unlinkat(r4, &(0x7f0000000040)='./file0\x00', 0x200) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001d5566752ecbe95886"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x58, &(0x7f00000002c0)}, 0x10) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000) getsockopt$sock_buf(r5, 0x1, 0x22, 0x0, &(0x7f0000000080)) 945.561245ms ago: executing program 4 (id=9494): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2) 776.362315ms ago: executing program 4 (id=9495): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x7400}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 681.34947ms ago: executing program 4 (id=9496): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x75}, 0x38) prctl$PR_SET_THP_DISABLE(0x19, 0xfffffffffffdc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x15, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x5, 0xd, 0x4, 0x0, 0x7fffffff, 0x7a5d4, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdbffbfff, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x11}, 0x2, 0x1, 0x7, 0x1, 0x80, 0x5, 0x9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x7}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffdb0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0xd, 0x0) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000140)=0x1) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000180)) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000001c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1a27ce8b732cb5e1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESDEC=r6, @ANYRES8=r3, @ANYRES16=r1, @ANYBLOB="1eda4dc8eadb55f569d4c1b962c0ac8acb22fff90b8417439ace3d45c3233cc4b0723536f2e07ac5e47f335e31f0847d0255e2b2ad3c3f7b622af48f828da19646ee4451"], 0x28}, 0x1, 0x0, 0x0, 0x40841}, 0x4000000) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$selinux_attr(r8, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000340), 0x10) socket(0x2b, 0x80801, 0x1) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000129bd7000fedbdf250b00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900070000005e00000009000700c3f202a63400000011000a00ed1e7a735e0f9b3771e15ffb46e992b0c00000000f000a001068ffa1a778d56fdb277f0006000a00e11c00000800090001ac0f00040028000800090005ac0f00"], 0x74}, 0x1, 0x0, 0x0, 0x18055}, 0x4000001) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000ddffff070003"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4c044) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 630.411833ms ago: executing program 4 (id=9497): socket$inet6(0xa, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) open(&(0x7f0000000280)='.\x00', 0x80, 0x122) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$can_raw(0x1d, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet(0x2, 0x2000000080002, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d756e695e656b7da8fa746fd8b11ade1897bdd2f229ea14264baa7081f14a77cd06730bb61f411cb2dfcc347d2833898586ebdd92d9"]) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) clock_gettime(0x4b0ec3469dcd44bf, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[], 0x48) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) r6 = fcntl$dupfd(r5, 0x0, r5) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000001cc0), 0x800) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='status\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000080)=ANY=[@ANYRES32=r7], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r8, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 566.778857ms ago: executing program 5 (id=9498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x18}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3800000}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000019c0)={r3, r1}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000001980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}}, 0x4010) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000fdffffff000000000100010085100000fbffffff180000000500000000000000020000000c040700ceb50000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184a006d3e0938de76b200f8ffffff000000000000000018400000060000000000000000000000950000000000000022650400fcffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x1000, &(0x7f0000000640)=""/4096, 0x41100, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x0, 0xbe95, 0x7f01}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r2, r2, r2, r2, r2, r2, r2, r2, r2], 0x0, 0x10, 0x2}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a01"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001840)={r6, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000001640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000005c0), &(0x7f00000016c0), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/272, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) 445.661294ms ago: executing program 5 (id=9499): set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x2000)=nil, 0x5000) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x448}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) shmctl$SHM_LOCK(r1, 0xb) fsopen(&(0x7f00000003c0)='bdev\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') shmctl$SHM_UNLOCK(r1, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 445.314374ms ago: executing program 8 (id=9500): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 439.886584ms ago: executing program 2 (id=9501): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07106706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)="759892c3eb", 0x5}], 0x1}}, {{&(0x7f0000000900)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000940)="d1a2", 0x2}], 0x1}}], 0x2, 0x4000014) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r3, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r4, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 430.641375ms ago: executing program 5 (id=9502): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000001c0)="4d807f4abd4b984986e357cd82235f57841fb1ab3edff90afc96130c79e58683952f39f61421d4504cea9e44a816022cd73d0717d31b74156dcf31fe615b26a8a5909a5e9e0e725bf45bee2f4b8f1f4b746eadd843ddc3607c8da3acd7ee1f147c7bd82c46bc9b3b6f99145230975abbf81e185456871e0140ae8bdee55ec9007b23f788900c9fefabdcaecd8b3d275c31ceb222aef933ef84807a63a927a1da0a5f81d17eb8504bdb5b9e174604ab9462fe", 0xb2) r2 = socket$tipc(0x1e, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x0, 0x37, 0x0, 0x9}, 0x28) io_setup(0x0, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000580)={0x111840000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_cancel(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x68d5, 0x0, 0x3}, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2004c0d0}, 0x4000044) 231.965936ms ago: executing program 2 (id=9503): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) fcntl$setstatus(r0, 0x4, 0x2000) (async) fcntl$setstatus(r0, 0x4, 0x2000) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) (async) sendmsg$key(r3, 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, 0x0) (async) ioctl$TIOCMGET(r2, 0x5415, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x40000) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x40000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r6}) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1f, 0x0, 0x10001, 0x2000, 0x100, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) listen(r7, 0xfff) 194.935489ms ago: executing program 8 (id=9504): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0xff, 0x4b4, &(0x7f0000000c80)="$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") 346.459µs ago: executing program 8 (id=9505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040081) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) listen(r2, 0x7e5a) r3 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) lseek(r3, 0x8000000000000000, 0x3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000140)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r4, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r4, &(0x7f0000000240)='P', 0x0}, 0x20) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000004c0)=[{0x0, 0x2, {0x2, 0xff, 0x3}, {0x0, 0xf0, 0x4}, 0x1, 0x2}, {0x0, 0x2, {0x2, 0xff, 0x2}, {0x2, 0xf0, 0x1}, 0x2}, {0x2, 0x1, {0x0, 0xff, 0x1}, {0x1, 0xf0}, 0x1, 0x2}, {0x2, 0x3, {0x1}, {0x2, 0xff, 0x1}, 0x1, 0x1}], 0x80) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xe19}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xb}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000890}, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 0s ago: executing program 2 (id=9506): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x7400}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 7843][ T752] loop2: p6 size 14876672 extends beyond EOD, truncated [ 642.255290][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 642.255311][ T29] audit: type=1326 audit(1770636906.787:20661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=748 comm="syz.5.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f17bd37aeb9 code=0x7ffc0000 [ 642.420219][T12315] udevd[12315]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 642.420744][T32021] udevd[32021]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 642.434246][T31671] udevd[31671]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 642.449571][T12312] udevd[12312]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 642.459740][T30062] udevd[30062]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 642.474370][ T796] loop2: detected capacity change from 0 to 512 [ 642.489085][ T29] audit: type=1326 audit(1770636907.007:20662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d5feaeb9 code=0x7ffc0000 [ 642.512769][ T29] audit: type=1326 audit(1770636907.007:20663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d5feaeb9 code=0x7ffc0000 [ 642.536348][ T29] audit: type=1326 audit(1770636907.007:20664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7ff8d5feaeb9 code=0x7ffc0000 [ 642.559793][ T29] audit: type=1326 audit(1770636907.007:20665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d5feaeb9 code=0x7ffc0000 [ 642.583276][ T29] audit: type=1326 audit(1770636907.007:20666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d5feaeb9 code=0x7ffc0000 [ 642.607155][ T29] audit: type=1326 audit(1770636907.007:20667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff8d5feaeb9 code=0x7ffc0000 [ 642.630783][ T29] audit: type=1326 audit(1770636907.007:20668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff8d5feac22 code=0x7ffc0000 [ 642.654063][ T29] audit: type=1326 audit(1770636907.007:20669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff8d5fab78e code=0x7ffc0000 [ 642.677367][ T29] audit: type=1326 audit(1770636907.007:20670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=795 comm="syz.2.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff8d5feace7 code=0x7ffc0000 [ 642.741909][ T796] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 642.757933][ T796] EXT4-fs (loop2): orphan cleanup on readonly fs [ 642.776229][ T796] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.8991: Failed to acquire dquot type 1 [ 642.794667][ T796] EXT4-fs (loop2): Remounting filesystem read-only [ 642.801559][ T796] EXT4-fs (loop2): 1 truncate cleaned up [ 642.845508][T22775] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 642.856158][T22775] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 642.885268][T22775] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 642.921752][ T796] EXT4-fs mount: 7 callbacks suppressed [ 642.921824][ T796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 642.932007][ T818] FAULT_INJECTION: forcing a failure. [ 642.932007][ T818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.953198][ T818] CPU: 0 UID: 0 PID: 818 Comm: syz.5.8993 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 642.953239][ T818] Tainted: [W]=WARN [ 642.953247][ T818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 642.953263][ T818] Call Trace: [ 642.953272][ T818] [ 642.953292][ T818] __dump_stack+0x1d/0x30 [ 642.953322][ T818] dump_stack_lvl+0x95/0xd0 [ 642.953372][ T818] dump_stack+0x15/0x1b [ 642.953396][ T818] should_fail_ex+0x263/0x280 [ 642.953503][ T818] should_fail+0xb/0x20 [ 642.953536][ T818] should_fail_usercopy+0x1a/0x20 [ 642.953596][ T818] _copy_to_user+0x20/0xa0 [ 642.953621][ T818] simple_read_from_buffer+0xb5/0x130 [ 642.953664][ T818] proc_fail_nth_read+0x10e/0x150 [ 642.953698][ T818] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 642.953762][ T818] vfs_read+0x1ab/0x7f0 [ 642.953783][ T818] ? __rcu_read_unlock+0x4e/0x70 [ 642.953832][ T818] ? __fget_files+0x184/0x1c0 [ 642.953859][ T818] ? mutex_lock+0x57/0x90 [ 642.953887][ T818] ksys_read+0xdc/0x1a0 [ 642.953911][ T818] __x64_sys_read+0x40/0x50 [ 642.953933][ T818] x64_sys_call+0x2889/0x3000 [ 642.953974][ T818] do_syscall_64+0xc0/0x2a0 [ 642.954010][ T818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.954034][ T818] RIP: 0033:0x7f17bd33b78e [ 642.954112][ T818] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 642.954135][ T818] RSP: 002b:00007f17bbdcefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 642.954183][ T818] RAX: ffffffffffffffda RBX: 00007f17bbdcf6c0 RCX: 00007f17bd33b78e [ 642.954200][ T818] RDX: 000000000000000f RSI: 00007f17bbdcf0a0 RDI: 0000000000000004 [ 642.954223][ T818] RBP: 00007f17bbdcf090 R08: 0000000000000000 R09: 0000000000000000 [ 642.954238][ T818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.954253][ T818] R13: 00007f17bd5f6038 R14: 00007f17bd5f5fa0 R15: 00007ffd3b9c3358 [ 642.954277][ T818] [ 643.213741][T27562] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 643.286498][T32713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.551178][ T850] loop0: detected capacity change from 0 to 8192 [ 643.570827][T30945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.591574][ T850] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 643.596976][ T850] loop0: partition table partially beyond EOD, truncated [ 643.604387][ T850] loop0: p1 start 100663296 is beyond EOD, truncated [ 643.611294][ T850] loop0: p2 size 134217732 extends beyond EOD, truncated [ 643.645481][ T850] loop0: p4 size 14876672 extends beyond EOD, truncated [ 643.663732][ T850] loop0: p5 size 134217732 extends beyond EOD, truncated [ 643.671334][ T857] FAULT_INJECTION: forcing a failure. [ 643.671334][ T857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.684462][ T857] CPU: 0 UID: 0 PID: 857 Comm: syz.8.9004 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 643.684551][ T857] Tainted: [W]=WARN [ 643.684559][ T857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 643.684573][ T857] Call Trace: [ 643.684580][ T857] [ 643.684591][ T857] __dump_stack+0x1d/0x30 [ 643.684617][ T857] dump_stack_lvl+0x95/0xd0 [ 643.684689][ T857] dump_stack+0x15/0x1b [ 643.684710][ T857] should_fail_ex+0x263/0x280 [ 643.684807][ T857] should_fail+0xb/0x20 [ 643.684881][ T857] should_fail_usercopy+0x1a/0x20 [ 643.684917][ T857] _copy_to_user+0x20/0xa0 [ 643.684940][ T857] simple_read_from_buffer+0xb5/0x130 [ 643.685038][ T857] proc_fail_nth_read+0x10e/0x150 [ 643.685110][ T857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 643.685232][ T857] vfs_read+0x1ab/0x7f0 [ 643.685252][ T857] ? __rcu_read_unlock+0x4e/0x70 [ 643.685285][ T857] ? __fget_files+0x184/0x1c0 [ 643.685310][ T857] ? mutex_lock+0x57/0x90 [ 643.685388][ T857] ksys_read+0xdc/0x1a0 [ 643.685491][ T857] __x64_sys_read+0x40/0x50 [ 643.685512][ T857] x64_sys_call+0x2889/0x3000 [ 643.685617][ T857] do_syscall_64+0xc0/0x2a0 [ 643.685652][ T857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.685676][ T857] RIP: 0033:0x7f609a55b78e [ 643.685698][ T857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 643.685718][ T857] RSP: 002b:00007f6098ff6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.685816][ T857] RAX: ffffffffffffffda RBX: 00007f6098ff76c0 RCX: 00007f609a55b78e [ 643.685831][ T857] RDX: 000000000000000f RSI: 00007f6098ff70a0 RDI: 0000000000000003 [ 643.685845][ T857] RBP: 00007f6098ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 643.685859][ T857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.685872][ T857] R13: 00007f609a816038 R14: 00007f609a815fa0 R15: 00007ffec6bec168 [ 643.685921][ T857] [ 643.893585][ T850] loop0: p6 size 14876672 extends beyond EOD, truncated [ 643.901037][ T858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9003'. [ 643.967126][ T864] netlink: 'syz.4.9002': attribute type 11 has an invalid length. [ 643.975055][ T864] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9002'. [ 644.039315][ T855] hub 2-0:1.0: USB hub found [ 644.044093][ T855] hub 2-0:1.0: 8 ports detected [ 644.065960][ T867] loop8: detected capacity change from 0 to 128 [ 644.082669][ T869] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9006'. [ 644.132252][ T872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15690 sclass=netlink_route_socket pid=872 comm=syz.2.9007 [ 644.284204][ T882] SELinux: failed to load policy [ 644.387330][ T887] loop5: detected capacity change from 0 to 8192 [ 644.435915][ T887] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 644.441144][ T887] loop5: partition table partially beyond EOD, truncated [ 644.449780][ T887] loop5: p1 start 100663296 is beyond EOD, truncated [ 644.456542][ T887] loop5: p2 size 134217732 extends beyond EOD, truncated [ 644.466578][ T887] loop5: p4 size 14876672 extends beyond EOD, truncated [ 644.474497][ T887] loop5: p5 size 134217732 extends beyond EOD, truncated [ 644.511629][ T887] loop5: p6 size 14876672 extends beyond EOD, truncated [ 644.613263][ T906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9017'. [ 644.713233][ T913] loop8: detected capacity change from 0 to 1024 [ 644.757918][ T913] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 644.782770][ T913] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.125729][ T897] Set syz1 is full, maxelem 65536 reached [ 645.239152][ T302] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 645.454794][T12649] IPVS: starting estimator thread 0... [ 645.486385][ T946] loop8: detected capacity change from 0 to 512 [ 645.493664][ T946] EXT4-fs: Ignoring removed oldalloc option [ 645.493961][ T947] loop0: detected capacity change from 0 to 164 [ 645.509860][ T946] EXT4-fs (loop8): 1 truncate cleaned up [ 645.520471][ T946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.545514][ T943] IPVS: using max 2208 ests per chain, 110400 per kthread [ 645.606387][ T302] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.663063][ T951] loop8: detected capacity change from 0 to 8192 [ 645.680614][ T953] EXT4-fs: Ignoring removed oldalloc option [ 645.688409][ T953] EXT4-fs (loop0): 1 truncate cleaned up [ 645.694711][ T953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.736141][ T951] loop8: p1 < > p2 p3 < p5 p6 > p4 [ 645.741412][ T951] loop8: partition table partially beyond EOD, truncated [ 645.748838][ T951] loop8: p1 start 100663296 is beyond EOD, truncated [ 645.755588][ T951] loop8: p2 size 134217732 extends beyond EOD, truncated [ 645.764578][ T951] loop8: p4 size 14876672 extends beyond EOD, truncated [ 645.773395][ T951] loop8: p5 size 134217732 extends beyond EOD, truncated [ 645.784181][ T951] loop8: p6 size 14876672 extends beyond EOD, truncated [ 645.794894][T32713] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 645.815494][T32713] EXT4-fs (loop0): Remounting filesystem read-only [ 645.916296][ T955] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.930982][ T962] __nla_validate_parse: 1 callbacks suppressed [ 645.931001][ T962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9037'. [ 646.022977][ T967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9039'. [ 646.127543][ T971] netlink: 64 bytes leftover after parsing attributes in process `syz.8.9040'. [ 646.178954][ T973] netlink: 'syz.4.9039': attribute type 10 has an invalid length. [ 646.359073][ T992] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 646.426737][ T973] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 646.526536][T22809] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.611347][ T977] lo speed is unknown, defaulting to 1000 [ 646.706709][T22809] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.739814][ T1014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9052'. [ 646.838644][ T1017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 646.870293][ T1017] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.929821][T22809] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.944209][T30062] loop8: p1 < > p2 p4 < p5 > [ 646.949015][T30062] loop8: partition table partially beyond EOD, truncated [ 646.956211][T30062] loop8: p1 start 134217728 is beyond EOD, truncated [ 646.962962][T30062] loop8: p2 size 591360 extends beyond EOD, truncated [ 646.992406][T30062] loop8: p5 size 591360 extends beyond EOD, truncated [ 647.027220][ T1018] loop8: p1 < > p2 p4 < p5 > [ 647.031968][ T1018] loop8: partition table partially beyond EOD, truncated [ 647.055470][ T1018] loop8: p1 start 134217728 is beyond EOD, truncated [ 647.062388][ T1018] loop8: p2 size 591360 extends beyond EOD, truncated [ 647.096887][T22809] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.110895][ T1018] loop8: p5 size 591360 extends beyond EOD, truncated [ 647.146110][T25885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 647.229503][ T1026] set_capacity_and_notify: 3 callbacks suppressed [ 647.229521][ T1026] loop4: detected capacity change from 0 to 1024 [ 647.251490][ T1035] program syz.2.9060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 647.376882][T22809] bridge_slave_1: left allmulticast mode [ 647.382639][T22809] bridge_slave_1: left promiscuous mode [ 647.388409][T22809] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.475213][ T1022] syz.4.9056 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 647.489479][ T1022] CPU: 1 UID: 0 PID: 1022 Comm: syz.4.9056 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 647.489518][ T1022] Tainted: [W]=WARN [ 647.489528][ T1022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 647.489546][ T1022] Call Trace: [ 647.489556][ T1022] [ 647.489567][ T1022] __dump_stack+0x1d/0x30 [ 647.489655][ T1022] dump_stack_lvl+0x95/0xd0 [ 647.489742][ T1022] dump_stack+0x15/0x1b [ 647.489765][ T1022] dump_header+0x80/0x240 [ 647.489799][ T1022] oom_kill_process+0x295/0x350 [ 647.489827][ T1022] out_of_memory+0x97d/0xb80 [ 647.489895][ T1022] try_charge_memcg+0x62e/0xa10 [ 647.489937][ T1022] obj_cgroup_charge_pages+0x23/0xc0 [ 647.490039][ T1022] __memcg_kmem_charge_page+0x9e/0x170 [ 647.490116][ T1022] __alloc_frozen_pages_noprof+0x18a/0x350 [ 647.490156][ T1022] alloc_pages_mpol+0xb3/0x260 [ 647.490218][ T1022] alloc_pages_noprof+0x8f/0x130 [ 647.490262][ T1022] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 647.490317][ T1022] __kvmalloc_node_noprof+0x471/0x680 [ 647.490446][ T1022] ? ip_set_alloc+0x24/0x30 [ 647.490558][ T1022] ? ip_set_alloc+0x24/0x30 [ 647.490636][ T1022] ip_set_alloc+0x24/0x30 [ 647.490666][ T1022] hash_netiface_create+0x282/0x740 [ 647.490749][ T1022] ? __pfx_hash_netiface_create+0x10/0x10 [ 647.490792][ T1022] ip_set_create+0x3cf/0x970 [ 647.490884][ T1022] ? __nla_parse+0x40/0x60 [ 647.490906][ T1022] nfnetlink_rcv_msg+0x509/0x5d0 [ 647.491003][ T1022] netlink_rcv_skb+0x123/0x220 [ 647.491040][ T1022] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 647.491085][ T1022] nfnetlink_rcv+0x167/0x1720 [ 647.491162][ T1022] ? __kfree_skb+0x109/0x150 [ 647.491247][ T1022] ? nlmon_xmit+0x4f/0x60 [ 647.491318][ T1022] ? consume_skb+0x49/0x140 [ 647.491359][ T1022] ? nlmon_xmit+0x4f/0x60 [ 647.491422][ T1022] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 647.491468][ T1022] ? __dev_queue_xmit+0x139a/0x1f20 [ 647.491573][ T1022] ? __dev_queue_xmit+0x148/0x1f20 [ 647.491614][ T1022] ? ref_tracker_free+0x37d/0x3e0 [ 647.491658][ T1022] ? __netlink_deliver_tap+0x4dc/0x500 [ 647.491699][ T1022] netlink_unicast+0x5c0/0x690 [ 647.491806][ T1022] netlink_sendmsg+0x5c8/0x6f0 [ 647.491901][ T1022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.491927][ T1022] ____sys_sendmsg+0x5af/0x600 [ 647.491960][ T1022] ___sys_sendmsg+0x195/0x1e0 [ 647.492009][ T1022] __x64_sys_sendmsg+0xd4/0x160 [ 647.492126][ T1022] x64_sys_call+0x17ba/0x3000 [ 647.492227][ T1022] do_syscall_64+0xc0/0x2a0 [ 647.492271][ T1022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.492357][ T1022] RIP: 0033:0x7fb0514daeb9 [ 647.492379][ T1022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.492404][ T1022] RSP: 002b:00007fb04ff2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.492431][ T1022] RAX: ffffffffffffffda RBX: 00007fb051755fa0 RCX: 00007fb0514daeb9 [ 647.492446][ T1022] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 647.492459][ T1022] RBP: 00007fb051548c1f R08: 0000000000000000 R09: 0000000000000000 [ 647.492496][ T1022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.492512][ T1022] R13: 00007fb051756038 R14: 00007fb051755fa0 R15: 00007ffc3f627ea8 [ 647.492540][ T1022] [ 647.492550][ T1022] memory: usage 296540kB, limit 307200kB, failcnt 3094 [ 647.693216][ T1026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 647.697228][ T1022] memory+swap: usage 197612kB, limit 9007199254740988kB, failcnt 0 [ 647.697251][ T1022] kmem: usage 196076kB, limit 9007199254740988kB, failcnt 0 [ 647.810387][ T1022] Memory cgroup stats for /syz4: [ 647.826248][ T1022] cache 540672 [ 647.856047][ T1022] rss 4096 [ 647.859094][ T1022] shmem 0 [ 647.862063][ T1022] mapped_file 65536 [ 647.865918][ T1022] dirty 4096 [ 647.869189][ T1022] writeback 0 [ 647.872563][ T1022] workingset_refault_anon 1292 [ 647.877435][ T1022] workingset_refault_file 9916 [ 647.882230][ T1022] swap 946176 [ 647.885584][ T1022] swapcached 12288 [ 647.889332][ T1022] pgpgin 785852 [ 647.893078][ T1022] pgpgout 785714 [ 647.896680][ T1022] pgfault 652635 [ 647.900296][ T1022] pgmajfault 818 [ 647.903900][ T1022] inactive_anon 12288 [ 647.908129][ T1022] active_anon 0 [ 647.911612][ T1022] inactive_file 28672 [ 647.915670][ T1022] active_file 524288 [ 647.919581][ T1022] unevictable 0 [ 647.923056][ T1022] hierarchical_memory_limit 314572800 [ 647.928550][ T1022] hierarchical_memsw_limit 9223372036854771712 [ 647.934728][ T1022] total_cache 540672 [ 647.938736][ T1022] total_rss 4096 [ 647.942303][ T1022] total_shmem 0 [ 647.945857][ T1022] total_mapped_file 65536 [ 647.950277][ T1022] total_dirty 4096 [ 647.954089][ T1022] total_writeback 0 [ 647.956878][ T1026] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.957990][ T1022] total_workingset_refault_anon 1292 [ 647.973736][ T1022] total_workingset_refault_file 9916 [ 647.979207][ T1022] total_swap 946176 [ 647.983103][ T1022] total_swapcached 12288 [ 647.987384][ T1022] total_pgpgin 785910 [ 647.991393][ T1022] total_pgpgout 785772 [ 647.995542][ T1022] total_pgfault 652709 [ 647.999633][ T1022] total_pgmajfault 818 [ 648.003732][ T1022] total_inactive_anon 12288 [ 648.008405][ T1022] total_active_anon 0 [ 648.012511][ T1022] total_inactive_file 28672 [ 648.017091][ T1022] total_active_file 524288 [ 648.021537][ T1022] total_unevictable 0 [ 648.025586][ T1022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9056,pid=1021,uid=0 [ 648.040331][ T1022] Memory cgroup out of memory: Killed process 1021 (syz.4.9056) total-vm:98512kB, anon-rss:1344kB, file-rss:26388kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 648.085810][T22809] bridge_slave_0: left allmulticast mode [ 648.091518][T22809] bridge_slave_0: left promiscuous mode [ 648.097807][T22809] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.158718][T30945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 648.213339][ T1051] 9p: Bad value for 'rfdno' [ 648.220786][ T1054] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9064'. [ 648.338215][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 648.338267][ T29] audit: type=1400 audit(1770636912.876:20859): avc: denied { mount } for pid=1065 comm="syz.4.9068" name="/" dev="autofs" ino=105394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 648.368957][ T1071] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9065'. [ 648.412851][ T1071] netlink: 'syz.8.9065': attribute type 10 has an invalid length. [ 648.432637][ T1075] 9p: Bad value for 'wfdno' [ 648.444909][ T1075] loop5: detected capacity change from 0 to 164 [ 648.459078][ T1078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1078 comm=syz.2.9066 [ 648.474524][ T1075] Unable to read rock-ridge attributes [ 648.481292][ T1075] Unable to read rock-ridge attributes [ 648.491239][ T1075] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 648.499295][T22809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.576179][T22809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.617033][T22809] bond0 (unregistering): Released all slaves [ 648.671354][ T977] chnl_net:caif_netlink_parms(): no params data found [ 648.703733][ T1071] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 648.766749][ T1086] loop4: detected capacity change from 0 to 8192 [ 648.805845][T12312] loop4: p1 < > p2 p4 < p5 > [ 648.810745][T12312] loop4: partition table partially beyond EOD, truncated [ 648.821981][T12312] loop4: p1 start 134217728 is beyond EOD, truncated [ 648.828852][T12312] loop4: p2 size 591360 extends beyond EOD, truncated [ 648.837887][T12312] loop4: p5 size 591360 extends beyond EOD, truncated [ 648.883302][ T1086] loop4: p1 < > p2 p4 < p5 > [ 648.888176][ T1086] loop4: partition table partially beyond EOD, truncated [ 648.907398][ T1094] loop8: detected capacity change from 0 to 512 [ 648.914005][ T1094] EXT4-fs: dax option not supported [ 648.920522][ T1094] SELinux: security_context_str_to_sid () failed with errno=-22 [ 648.929931][ T1086] loop4: p1 start 134217728 is beyond EOD, truncated [ 648.937034][ T1086] loop4: p2 size 591360 extends beyond EOD, truncated [ 648.951931][ T1086] loop4: p5 size 591360 extends beyond EOD, truncated [ 648.971096][ T977] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.978347][ T977] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.034384][ T977] bridge_slave_0: entered allmulticast mode [ 649.053285][ T977] bridge_slave_0: entered promiscuous mode [ 649.166047][T22809] hsr_slave_0: left promiscuous mode [ 649.171776][ T1108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9079'. [ 649.206242][T22809] hsr_slave_1: left promiscuous mode [ 649.212352][T22809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.219793][T22809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.256633][T22809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.264094][T22809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.302281][ T1114] loop4: detected capacity change from 0 to 1024 [ 649.309004][T22809] veth1_macvtap: left promiscuous mode [ 649.314556][T22809] veth0_macvtap: left promiscuous mode [ 649.320482][T22809] veth1_vlan: left promiscuous mode [ 649.327887][ T1114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 649.331880][T22809] veth0_vlan: left promiscuous mode [ 649.340969][ T1114] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 649.567238][T30945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 649.665903][T22809] team0 (unregistering): Port device team_slave_1 removed [ 649.706006][T22809] team0 (unregistering): Port device team_slave_0 removed [ 649.779412][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.786569][ T977] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.791121][ T1122] SELinux: failed to load policy [ 649.794099][ T977] bridge_slave_1: entered allmulticast mode [ 649.805554][ T977] bridge_slave_1: entered promiscuous mode [ 649.837276][ T977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.870764][ T977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.892291][ T1129] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 649.902734][ T29] audit: type=1326 audit(1770636914.446:20860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 649.927154][ T29] audit: type=1326 audit(1770636914.446:20861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 649.951694][ T29] audit: type=1326 audit(1770636914.446:20862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 649.963177][ T977] team0: Port device team_slave_0 added [ 649.976966][ T29] audit: type=1326 audit(1770636914.446:20863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 650.005016][ T29] audit: type=1326 audit(1770636914.446:20864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1128 comm="syz.8.9086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a59aeb9 code=0x7ffc0000 [ 650.023570][ T977] team0: Port device team_slave_1 added [ 650.030275][ T29] audit: type=1326 audit(1770636914.446:20866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1128 comm="syz.8.9086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a59aeb9 code=0x7ffc0000 [ 650.058660][ T29] audit: type=1326 audit(1770636914.446:20865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 650.082978][ T29] audit: type=1326 audit(1770636914.446:20867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 650.107624][ T29] audit: type=1326 audit(1770636914.446:20868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1124 comm="syz.4.9087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 650.139312][ T1139] netlink: 'syz.4.9089': attribute type 2 has an invalid length. [ 650.150650][ T977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.150669][ T977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.150713][ T977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.151445][ T977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.151471][ T977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.151507][ T977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.221070][ T977] hsr_slave_0: entered promiscuous mode [ 650.226511][ T977] hsr_slave_1: entered promiscuous mode [ 650.240622][ T1139] netlink: 'syz.4.9089': attribute type 4 has an invalid length. [ 650.294581][ T977] debugfs: 'hsr0' already exists in 'hsr' [ 650.294602][ T977] Cannot create hsr debugfs directory [ 650.353710][ T1139] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9089'. [ 650.437243][ T1155] netlink: 'syz.4.9093': attribute type 2 has an invalid length. [ 650.445090][ T1155] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9093'. [ 650.465354][ T1158] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 650.558221][ T1160] loop8: detected capacity change from 0 to 8192 [ 650.646135][ T1160] loop8: p1 < > p2 p3 < p5 p6 > p4 [ 650.651463][ T1160] loop8: partition table partially beyond EOD, truncated [ 650.682027][ T1160] loop8: p1 start 100663296 is beyond EOD, truncated [ 650.689067][ T1160] loop8: p2 size 134217732 extends beyond EOD, truncated [ 650.704288][ T1160] loop8: p4 size 14876672 extends beyond EOD, truncated [ 650.712206][ T1160] loop8: p5 size 134217732 extends beyond EOD, truncated [ 650.720135][ T1160] loop8: p6 size 14876672 extends beyond EOD, truncated [ 650.756165][ T1174] SELinux: failed to load policy [ 650.788956][ T1173] netlink: 124 bytes leftover after parsing attributes in process `syz.2.9094'. [ 650.849389][ T1188] xt_hashlimit: max too large, truncated to 1048576 [ 650.976374][ T1201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=1201 comm=syz.4.9101 [ 651.031609][ T1199] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 651.122761][ T1217] FAULT_INJECTION: forcing a failure. [ 651.122761][ T1217] name failslab, interval 1, probability 0, space 0, times 0 [ 651.136315][ T1217] CPU: 0 UID: 0 PID: 1217 Comm: syz.2.9107 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 651.136351][ T1217] Tainted: [W]=WARN [ 651.136360][ T1217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 651.136377][ T1217] Call Trace: [ 651.136385][ T1217] [ 651.136396][ T1217] __dump_stack+0x1d/0x30 [ 651.136448][ T1217] dump_stack_lvl+0x95/0xd0 [ 651.136471][ T1217] dump_stack+0x15/0x1b [ 651.136492][ T1217] should_fail_ex+0x263/0x280 [ 651.136593][ T1217] should_failslab+0x8c/0xb0 [ 651.136625][ T1217] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 651.136661][ T1217] ? __alloc_skb+0x2f0/0x4b0 [ 651.136766][ T1217] __alloc_skb+0x2f0/0x4b0 [ 651.136794][ T1217] ? __alloc_skb+0x219/0x4b0 [ 651.136898][ T1217] nldev_res_get_doit+0x1bc/0x3b0 [ 651.136955][ T1217] ? __pfx_nldev_res_get_doit+0x10/0x10 [ 651.136975][ T1217] rdma_nl_rcv+0x477/0x5b0 [ 651.136997][ T1217] ? selinux_nlmsg_lookup+0x99/0x890 [ 651.137056][ T1217] netlink_unicast+0x5c0/0x690 [ 651.137095][ T1217] netlink_sendmsg+0x5c8/0x6f0 [ 651.137115][ T1217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.137132][ T1217] ____sys_sendmsg+0x5af/0x600 [ 651.137153][ T1217] ___sys_sendmsg+0x195/0x1e0 [ 651.137185][ T1217] __x64_sys_sendmsg+0xd4/0x160 [ 651.137271][ T1217] x64_sys_call+0x17ba/0x3000 [ 651.137293][ T1217] do_syscall_64+0xc0/0x2a0 [ 651.137323][ T1217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.137380][ T1217] RIP: 0033:0x7ff8d5feaeb9 [ 651.137477][ T1217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.137495][ T1217] RSP: 002b:00007ff8d4a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.137513][ T1217] RAX: ffffffffffffffda RBX: 00007ff8d6265fa0 RCX: 00007ff8d5feaeb9 [ 651.137527][ T1217] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 651.137604][ T1217] RBP: 00007ff8d4a47090 R08: 0000000000000000 R09: 0000000000000000 [ 651.137685][ T1217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.137702][ T1217] R13: 00007ff8d6266038 R14: 00007ff8d6265fa0 R15: 00007ffcd1d128a8 [ 651.137722][ T1217] [ 651.152571][T22809] IPVS: stop unused estimator thread 0... [ 651.541542][ T1215] bond1: ARP target 9.0.0.0 is already present [ 651.547803][ T1215] bond1: option arp_ip_target: invalid value (9) [ 651.558050][ T1215] bond1 (unregistering): Released all slaves [ 651.695306][ T1235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9112'. [ 651.705546][ T977] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 651.727920][ T977] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 651.750495][ T1242] loop5: detected capacity change from 0 to 512 [ 651.779602][ T1242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.792473][ T1242] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.807635][ T1246] bond1: Unable to set up delay as MII monitoring is disabled [ 651.837230][ T1246] bond1 (unregistering): Released all slaves [ 651.856795][ T1257] netlink: 'syz.4.9112': attribute type 10 has an invalid length. [ 651.936465][ T977] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 651.968580][ T977] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 651.977028][ T1261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=1261 comm=syz.8.9116 [ 651.993383][ T1263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9117'. [ 652.008470][ T1257] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 652.033637][ T1263] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9117'. [ 652.046036][ T1260] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 652.054278][T25885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.090084][ T977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.130955][ T977] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.220792][T29894] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.227967][T29894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.241823][T29894] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.249072][T29894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.375290][ T977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.413170][ T1324] FAULT_INJECTION: forcing a failure. [ 652.413170][ T1324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.427189][ T1324] CPU: 0 UID: 0 PID: 1324 Comm: syz.5.9123 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 652.427232][ T1324] Tainted: [W]=WARN [ 652.427243][ T1324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 652.427297][ T1324] Call Trace: [ 652.427307][ T1324] [ 652.427317][ T1324] __dump_stack+0x1d/0x30 [ 652.427378][ T1324] dump_stack_lvl+0x95/0xd0 [ 652.427410][ T1324] dump_stack+0x15/0x1b [ 652.427522][ T1324] should_fail_ex+0x263/0x280 [ 652.427566][ T1324] should_fail+0xb/0x20 [ 652.427595][ T1324] should_fail_usercopy+0x1a/0x20 [ 652.427633][ T1324] _copy_to_user+0x20/0xa0 [ 652.427749][ T1324] simple_read_from_buffer+0xb5/0x130 [ 652.427896][ T1324] proc_fail_nth_read+0x10e/0x150 [ 652.427926][ T1324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 652.428024][ T1324] vfs_read+0x1ab/0x7f0 [ 652.428051][ T1324] ? __rcu_read_unlock+0x4e/0x70 [ 652.428114][ T1324] ? __fget_files+0x184/0x1c0 [ 652.428156][ T1324] ? mutex_lock+0x57/0x90 [ 652.428191][ T1324] ksys_read+0xdc/0x1a0 [ 652.428219][ T1324] __x64_sys_read+0x40/0x50 [ 652.428247][ T1324] x64_sys_call+0x2889/0x3000 [ 652.428353][ T1324] do_syscall_64+0xc0/0x2a0 [ 652.428397][ T1324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.428440][ T1324] RIP: 0033:0x7f17bd33b78e [ 652.428462][ T1324] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 652.428488][ T1324] RSP: 002b:00007f17bbdcefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 652.428516][ T1324] RAX: ffffffffffffffda RBX: 00007f17bbdcf6c0 RCX: 00007f17bd33b78e [ 652.428568][ T1324] RDX: 000000000000000f RSI: 00007f17bbdcf0a0 RDI: 0000000000000005 [ 652.428587][ T1324] RBP: 00007f17bbdcf090 R08: 0000000000000000 R09: 0000000000000000 [ 652.428605][ T1324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.428623][ T1324] R13: 00007f17bd5f6038 R14: 00007f17bd5f5fa0 R15: 00007ffd3b9c3358 [ 652.428652][ T1324] [ 652.842510][ T977] veth0_vlan: entered promiscuous mode [ 652.853233][ T977] veth1_vlan: entered promiscuous mode [ 652.878225][ T977] veth0_macvtap: entered promiscuous mode [ 652.886576][ T977] veth1_macvtap: entered promiscuous mode [ 652.930338][ T977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.960284][ T977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.983636][T22775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.993302][ T1369] tmpfs: Too small a size for current use [ 653.019469][T22775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.090036][T22775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.107793][T22775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.121590][ T1382] loop8: detected capacity change from 0 to 128 [ 653.129095][ T1382] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 653.159337][ T1382] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 653.180906][ T1382] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 653.189091][ T1382] FAT-fs (loop8): Filesystem has been set read-only [ 653.218830][ T1389] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9136'. [ 653.396271][ T1415] netlink: 'syz.5.9136': attribute type 10 has an invalid length. [ 653.404504][ T1415] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 653.430697][ T1418] FAULT_INJECTION: forcing a failure. [ 653.430697][ T1418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.443892][ T1418] CPU: 1 UID: 0 PID: 1418 Comm: syz.8.9140 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 653.443969][ T1418] Tainted: [W]=WARN [ 653.443976][ T1418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 653.444047][ T1418] Call Trace: [ 653.444055][ T1418] [ 653.444065][ T1418] __dump_stack+0x1d/0x30 [ 653.444098][ T1418] dump_stack_lvl+0x95/0xd0 [ 653.444126][ T1418] dump_stack+0x15/0x1b [ 653.444169][ T1418] should_fail_ex+0x263/0x280 [ 653.444276][ T1418] should_fail+0xb/0x20 [ 653.444313][ T1418] should_fail_usercopy+0x1a/0x20 [ 653.444403][ T1418] _copy_to_user+0x20/0xa0 [ 653.444486][ T1418] simple_read_from_buffer+0xb5/0x130 [ 653.444577][ T1418] proc_fail_nth_read+0x10e/0x150 [ 653.444616][ T1418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.444651][ T1418] vfs_read+0x1ab/0x7f0 [ 653.444677][ T1418] ? __rcu_read_unlock+0x4e/0x70 [ 653.444727][ T1418] ? __fget_files+0x184/0x1c0 [ 653.444757][ T1418] ? mutex_lock+0x57/0x90 [ 653.444790][ T1418] ksys_read+0xdc/0x1a0 [ 653.444823][ T1418] __x64_sys_read+0x40/0x50 [ 653.444849][ T1418] x64_sys_call+0x2889/0x3000 [ 653.444882][ T1418] do_syscall_64+0xc0/0x2a0 [ 653.444921][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.445027][ T1418] RIP: 0033:0x7f609a55b78e [ 653.445130][ T1418] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 653.445156][ T1418] RSP: 002b:00007f6098ff6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 653.445184][ T1418] RAX: ffffffffffffffda RBX: 00007f6098ff76c0 RCX: 00007f609a55b78e [ 653.445204][ T1418] RDX: 000000000000000f RSI: 00007f6098ff70a0 RDI: 0000000000000004 [ 653.445222][ T1418] RBP: 00007f6098ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 653.445271][ T1418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.445289][ T1418] R13: 00007f609a816038 R14: 00007f609a815fa0 R15: 00007ffec6bec168 [ 653.445318][ T1418] [ 653.675165][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 653.675180][ T29] audit: type=1400 audit(1770636918.206:20875): avc: denied { relabelfrom } for pid=1426 comm="syz.4.9142" name="" dev="pipefs" ino=106385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 653.731463][ T29] audit: type=1400 audit(1770636918.246:20876): avc: denied { connect } for pid=1426 comm="syz.4.9142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 653.751944][ T29] audit: type=1326 audit(1770636918.246:20877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 653.776426][ T29] audit: type=1326 audit(1770636918.246:20878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 653.800742][ T29] audit: type=1326 audit(1770636918.246:20879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 653.825098][ T29] audit: type=1326 audit(1770636918.246:20880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 653.849555][ T29] audit: type=1326 audit(1770636918.246:20881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 653.874003][ T29] audit: type=1326 audit(1770636918.246:20882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 653.898895][ T29] audit: type=1326 audit(1770636918.246:20883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 653.923778][ T29] audit: type=1326 audit(1770636918.246:20884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1426 comm="syz.4.9142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 654.160575][ T1458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9147'. [ 654.335762][ T1486] FAULT_INJECTION: forcing a failure. [ 654.335762][ T1486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.349831][ T1486] CPU: 0 UID: 0 PID: 1486 Comm: syz.4.9153 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 654.349874][ T1486] Tainted: [W]=WARN [ 654.349883][ T1486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 654.349901][ T1486] Call Trace: [ 654.349910][ T1486] [ 654.349921][ T1486] __dump_stack+0x1d/0x30 [ 654.349976][ T1486] dump_stack_lvl+0x95/0xd0 [ 654.350005][ T1486] dump_stack+0x15/0x1b [ 654.350083][ T1486] should_fail_ex+0x263/0x280 [ 654.350169][ T1486] should_fail+0xb/0x20 [ 654.350201][ T1486] should_fail_usercopy+0x1a/0x20 [ 654.350323][ T1486] _copy_from_user+0x1c/0xb0 [ 654.350382][ T1486] do_sock_getsockopt+0xf1/0x210 [ 654.350430][ T1486] __x64_sys_getsockopt+0x11d/0x1a0 [ 654.350522][ T1486] x64_sys_call+0x2dc7/0x3000 [ 654.350580][ T1486] do_syscall_64+0xc0/0x2a0 [ 654.350628][ T1486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.350658][ T1486] RIP: 0033:0x7fb0514daeb9 [ 654.350679][ T1486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.350726][ T1486] RSP: 002b:00007fb04ff2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 654.350754][ T1486] RAX: ffffffffffffffda RBX: 00007fb051755fa0 RCX: 00007fb0514daeb9 [ 654.350773][ T1486] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000004 [ 654.350789][ T1486] RBP: 00007fb04ff2f090 R08: 0000200000000300 R09: 0000000000000000 [ 654.350804][ T1486] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 654.350817][ T1486] R13: 00007fb051756038 R14: 00007fb051755fa0 R15: 00007ffc3f627ea8 [ 654.350844][ T1486] [ 654.594375][ T1496] SELinux: failed to load policy [ 654.653287][ T1506] FAULT_INJECTION: forcing a failure. [ 654.653287][ T1506] name failslab, interval 1, probability 0, space 0, times 0 [ 654.666862][ T1506] CPU: 0 UID: 0 PID: 1506 Comm: syz.4.9158 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 654.666906][ T1506] Tainted: [W]=WARN [ 654.666916][ T1506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 654.666931][ T1506] Call Trace: [ 654.666940][ T1506] [ 654.666951][ T1506] __dump_stack+0x1d/0x30 [ 654.667023][ T1506] dump_stack_lvl+0x95/0xd0 [ 654.667103][ T1506] dump_stack+0x15/0x1b [ 654.667127][ T1506] should_fail_ex+0x263/0x280 [ 654.667164][ T1506] should_failslab+0x8c/0xb0 [ 654.667205][ T1506] __kvmalloc_node_noprof+0x148/0x680 [ 654.667284][ T1506] ? xt_alloc_entry_offsets+0x4d/0x60 [ 654.667334][ T1506] xt_alloc_entry_offsets+0x4d/0x60 [ 654.667392][ T1506] translate_table+0xa8/0x11b0 [ 654.667434][ T1506] ? __rcu_read_unlock+0x4e/0x70 [ 654.667477][ T1506] ? __memcg_slab_post_alloc_hook+0x44a/0x530 [ 654.667536][ T1506] ? should_fail_ex+0xd9/0x280 [ 654.667619][ T1506] ? _copy_from_user+0x89/0xb0 [ 654.667650][ T1506] do_ip6t_set_ctl+0x6d9/0x8f0 [ 654.667740][ T1506] ? kstrtoull+0x111/0x140 [ 654.667777][ T1506] ? __rcu_read_unlock+0x4e/0x70 [ 654.667825][ T1506] nf_setsockopt+0x199/0x1b0 [ 654.667859][ T1506] ipv6_setsockopt+0x11a/0x130 [ 654.667902][ T1506] tcp_setsockopt+0x98/0xb0 [ 654.667938][ T1506] sock_common_setsockopt+0x69/0x80 [ 654.667974][ T1506] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 654.668011][ T1506] __sys_setsockopt+0x184/0x200 [ 654.668060][ T1506] __x64_sys_setsockopt+0x64/0x80 [ 654.668104][ T1506] x64_sys_call+0x21d5/0x3000 [ 654.668138][ T1506] do_syscall_64+0xc0/0x2a0 [ 654.668197][ T1506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.668228][ T1506] RIP: 0033:0x7fb0514daeb9 [ 654.668278][ T1506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.668301][ T1506] RSP: 002b:00007fb04ff2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 654.668328][ T1506] RAX: ffffffffffffffda RBX: 00007fb051755fa0 RCX: 00007fb0514daeb9 [ 654.668348][ T1506] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 654.668365][ T1506] RBP: 00007fb04ff2f090 R08: 00000000000003a8 R09: 0000000000000000 [ 654.668444][ T1506] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000001 [ 654.668463][ T1506] R13: 00007fb051756038 R14: 00007fb051755fa0 R15: 00007ffc3f627ea8 [ 654.668491][ T1506] [ 654.957029][ T1515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9161'. [ 655.028650][ T1523] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9164'. [ 655.116568][ T1550] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 655.131318][ T1550] SELinux: failed to load policy [ 655.137058][ T1554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9166'. [ 655.148021][ T1555] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 655.191015][ T1555] SELinux: failed to load policy [ 655.260932][ T1563] loop4: detected capacity change from 0 to 4096 [ 655.282595][ T1567] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9170'. [ 655.304682][ T1563] ext4: Unknown parameter 'smackfsfloor' [ 655.311075][ T1570] loop3: detected capacity change from 0 to 2048 [ 655.410224][ T1563] lo speed is unknown, defaulting to 1000 [ 655.432171][ T1570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.447596][ T1567] netlink: 'syz.8.9170': attribute type 10 has an invalid length. [ 655.455477][ T1567] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 655.484865][ T1563] lo speed is unknown, defaulting to 1000 [ 655.508327][ T1563] lo speed is unknown, defaulting to 1000 [ 655.577044][ T1584] loop8: detected capacity change from 0 to 8192 [ 655.596170][ T1584] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 655.617973][ T977] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.655469][ T1587] loop5: detected capacity change from 0 to 512 [ 655.676790][ T1587] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 655.707150][ T1563] infiniband syz0: set down [ 655.711879][ T1563] infiniband syz0: added lo [ 655.716486][T12657] lo speed is unknown, defaulting to 1000 [ 655.736377][ T1587] EXT4-fs (loop5): invalid journal inode [ 655.753005][ T1587] EXT4-fs (loop5): can't get journal size [ 655.776399][ T1563] RDS/IB: syz0: added [ 655.777411][ T1587] EXT4-fs (loop5): 1 truncate cleaned up [ 655.792821][ T1587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.799293][ T1563] smc: adding ib device syz0 with port count 1 [ 655.822908][ T1563] smc: ib device syz0 port 1 has no pnetid [ 655.829116][T12657] lo speed is unknown, defaulting to 1000 [ 655.835400][ T1563] lo speed is unknown, defaulting to 1000 [ 655.900112][ T1608] SELinux: failed to load policy [ 655.908398][ T1563] lo speed is unknown, defaulting to 1000 [ 655.980252][ T1563] lo speed is unknown, defaulting to 1000 [ 656.021152][ T1563] lo speed is unknown, defaulting to 1000 [ 656.056311][ T1624] loop3: detected capacity change from 0 to 128 [ 656.065893][ T1563] lo speed is unknown, defaulting to 1000 [ 656.076953][ T1624] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 656.106885][ T1624] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 656.143436][T22780] Bluetooth: hci0: Frame reassembly failed (-84) [ 656.157518][T25885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.228711][ T1563] lo speed is unknown, defaulting to 1000 [ 656.276560][ T1563] lo speed is unknown, defaulting to 1000 [ 656.284578][ T1632] SELinux: failed to load policy [ 656.332193][ T1563] lo speed is unknown, defaulting to 1000 [ 656.354094][ T1642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=1642 comm=syz.5.9184 [ 656.388211][ T1642] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 656.510002][ T1666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9187'. [ 656.548720][ T1666] netlink: 'syz.2.9187': attribute type 10 has an invalid length. [ 656.556703][ T1666] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 656.687395][ T1689] SELinux: failed to load policy [ 656.697716][ T1692] loop8: detected capacity change from 0 to 1024 [ 656.718804][ T1692] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 656.741490][ T1692] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #3: block 1: comm syz.8.9192: lblock 1 mapped to illegal pblock 1 (length 1) [ 656.756738][ T1692] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.9192: Failed to acquire dquot type 0 [ 656.768518][ T1692] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.9192: Freeing blocks not in datazone - block = 0, count = 4096 [ 656.796976][ T1692] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.9192: Invalid inode bitmap blk 0 in block_group 0 [ 656.817582][ T1706] loop5: detected capacity change from 0 to 512 [ 656.825448][ T1692] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 656.835487][ T1706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 656.844418][ T1692] EXT4-fs (loop8): 1 orphan inode deleted [ 656.844990][ T1692] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.876940][T29899] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 656.908872][ T1706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.921689][T29899] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:33: Failed to release dquot type 0 [ 656.938140][ T1706] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 656.950831][ T302] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.047794][ T1720] SELinux: failed to load policy [ 657.177607][ T1727] __nla_validate_parse: 1 callbacks suppressed [ 657.177629][ T1727] netlink: 64 bytes leftover after parsing attributes in process `syz.8.9199'. [ 657.207091][T25885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.415951][ T1768] SELinux: failed to load policy [ 657.508830][ T1781] loop8: detected capacity change from 0 to 512 [ 657.539053][ T1781] EXT4-fs (loop8): 1 truncate cleaned up [ 657.545183][ T1781] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.677668][ T302] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.699222][ T1791] loop4: detected capacity change from 0 to 128 [ 657.849146][ T1812] tipc: Started in network mode [ 657.854095][ T1812] tipc: Node identity ac14140f, cluster identity 4711 [ 657.866381][ T1812] tipc: New replicast peer: 255.255.255.255 [ 657.872622][ T1812] tipc: Enabled bearer , priority 10 [ 657.880231][ T1807] tipc: Enabling of bearer rejected, already enabled [ 658.140483][ T1784] Set syz1 is full, maxelem 65536 reached [ 658.166896][T12312] loop8: p1 p2 p4 < > [ 658.171098][T12312] loop8: partition table partially beyond EOD, truncated [ 658.187721][T12312] loop8: p1 start 16777216 is beyond EOD, truncated [ 658.194444][T12312] loop8: p2 size 515840 extends beyond EOD, truncated [ 658.198708][T16432] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 658.206501][ T1627] Bluetooth: hci0: command 0x1003 tx timeout [ 658.218511][T12312] loop8: p4 start 16777216 is beyond EOD, truncated [ 658.228863][T29577] hid_parser_main: 33 callbacks suppressed [ 658.228886][T29577] hid-generic 0103:0006:0000.000B: unknown main item tag 0x0 [ 658.242945][T29577] hid-generic 0103:0006:0000.000B: unknown main item tag 0x0 [ 658.250415][T29577] hid-generic 0103:0006:0000.000B: unknown main item tag 0x0 [ 658.258745][T29577] hid-generic 0103:0006:0000.000B: unknown main item tag 0x0 [ 658.266191][T29577] hid-generic 0103:0006:0000.000B: unknown main item tag 0x0 [ 658.273626][T29577] hid-generic 0103:0006:0000.000B: unknown main item tag 0x0 [ 658.281891][T29577] hid-generic 0103:0006:0000.000B: unknown main item tag 0x0 [ 658.289479][T29577] hid-generic 0103:0006:0000.000B: unknown main item tag 0x0 [ 658.297679][T29577] hid-generic 0103:0006:0000.000B: unknown main item tag 0x0 [ 658.305183][T29577] hid-generic 0103:0006:0000.000B: unknown main item tag 0x0 [ 658.316950][ T1814] loop8: p1 p2 p4 < > [ 658.321065][ T1814] loop8: partition table partially beyond EOD, truncated [ 658.338095][ T1814] loop8: p1 start 16777216 is beyond EOD, truncated [ 658.345000][ T1814] loop8: p2 size 515840 extends beyond EOD, truncated [ 658.370127][ T1814] loop8: p4 start 16777216 is beyond EOD, truncated [ 658.377357][ T977] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 658.418053][T29577] hid-generic 0103:0006:0000.000B: hidraw0: HID v0.02 Device [syz0] on syz1 [ 658.455672][ T1830] fido_id[1830]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 658.582386][T12312] udevd[12312]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 658.634668][T12312] udevd[12312]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 658.838125][ T1843] set_capacity_and_notify: 1 callbacks suppressed [ 658.838159][ T1843] loop8: detected capacity change from 0 to 8192 [ 658.932694][ T1847] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 658.955379][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9219'. [ 658.982515][ T1850] loop3: detected capacity change from 0 to 512 [ 658.993148][ T1841] vlan2: entered promiscuous mode [ 658.999470][ T1841] vlan2: entered allmulticast mode [ 659.004683][ T1841] hsr_slave_1: entered allmulticast mode [ 659.012602][ T1850] EXT4-fs: Ignoring removed nobh option [ 659.025605][ T1850] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 659.106481][ T1850] EXT4-fs (loop3): 1 truncate cleaned up [ 659.112862][ T1850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.255381][ T1859] SELinux: failed to load policy [ 659.340404][T29577] tipc: Node number set to 2886997007 [ 659.386948][ T1862] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.437718][ T1867] bridge0: Caught tx_queue_len zero misconfig [ 659.445453][ T977] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.476095][ T1873] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 659.488674][ T1875] loop3: detected capacity change from 0 to 512 [ 659.494230][ T1873] SELinux: failed to load policy [ 659.504569][ T1875] EXT4-fs: Mount option(s) incompatible with ext2 [ 659.511938][ T1862] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.565754][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 659.565773][ T29] audit: type=1400 audit(1770636924.095:21050): avc: denied { create } for pid=1874 comm="syz.3.9230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 659.612514][ T29] audit: type=1400 audit(1770636924.135:21051): avc: denied { write } for pid=1874 comm="syz.3.9230" path="socket:[107965]" dev="sockfs" ino=107965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 659.638344][ T29] audit: type=1400 audit(1770636924.135:21052): avc: denied { read } for pid=1874 comm="syz.3.9230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 659.660646][ T29] audit: type=1326 audit(1770636924.205:21053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1881 comm="syz.3.9233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f017f19aeb9 code=0x0 [ 659.685427][ T1862] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.767722][ T1862] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.788877][ T1871] loop8: detected capacity change from 0 to 2048 [ 659.854261][ T1871] loop8: p3 < > p4 < > [ 659.860634][ T1871] loop8: partition table partially beyond EOD, truncated [ 659.888948][ T1871] loop8: p3 start 4284289 is beyond EOD, truncated [ 659.937236][ T1893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9237'. [ 659.942166][T29899] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.962947][T29899] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.964132][ T2999] loop8: p3 < > p4 < > [ 659.973671][T29899] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.975474][ T2999] loop8: partition table partially beyond EOD, truncated [ 659.984021][T29899] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.995936][ T2999] loop8: p3 start 4284289 is beyond EOD, truncated [ 660.126564][ T1898] loop8: detected capacity change from 0 to 128 [ 660.139823][ T1898] FAULT_INJECTION: forcing a failure. [ 660.139823][ T1898] name failslab, interval 1, probability 0, space 0, times 0 [ 660.152639][ T1898] CPU: 1 UID: 0 PID: 1898 Comm: syz.8.9238 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 660.152676][ T1898] Tainted: [W]=WARN [ 660.152683][ T1898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 660.152696][ T1898] Call Trace: [ 660.152704][ T1898] [ 660.152712][ T1898] __dump_stack+0x1d/0x30 [ 660.152759][ T1898] dump_stack_lvl+0x95/0xd0 [ 660.152854][ T1898] dump_stack+0x15/0x1b [ 660.152875][ T1898] should_fail_ex+0x263/0x280 [ 660.152915][ T1898] should_failslab+0x8c/0xb0 [ 660.152946][ T1898] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 660.152980][ T1898] ? __d_alloc+0x37/0x340 [ 660.153082][ T1898] __d_alloc+0x37/0x340 [ 660.153112][ T1898] d_alloc+0x2e/0x100 [ 660.153166][ T1898] lookup_one_qstr_excl+0x99/0x250 [ 660.153198][ T1898] filename_create+0x155/0x220 [ 660.153307][ T1898] do_mkdirat+0x82/0x3b0 [ 660.153336][ T1898] __x64_sys_mkdirat+0x4c/0x60 [ 660.153356][ T1898] x64_sys_call+0x30c/0x3000 [ 660.153409][ T1898] do_syscall_64+0xc0/0x2a0 [ 660.153450][ T1898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.153586][ T1898] RIP: 0033:0x7f609a59aeb9 [ 660.153608][ T1898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.153633][ T1898] RSP: 002b:00007f6098ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 660.153678][ T1898] RAX: ffffffffffffffda RBX: 00007f609a815fa0 RCX: 00007f609a59aeb9 [ 660.153697][ T1898] RDX: 0000000000000000 RSI: 0000200000002000 RDI: ffffffffffffff9c [ 660.153716][ T1898] RBP: 00007f6098ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 660.153798][ T1898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.153816][ T1898] R13: 00007f609a816038 R14: 00007f609a815fa0 R15: 00007ffec6bec168 [ 660.153887][ T1898] [ 660.495781][T12651] IPVS: starting estimator thread 0... [ 660.530491][ T1911] netlink: 'syz.8.9244': attribute type 27 has an invalid length. [ 660.596434][ T1909] IPVS: using max 2160 ests per chain, 108000 per kthread [ 660.627323][ T1901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9240'. [ 660.718340][ T1959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9246'. [ 660.784993][ T1959] netlink: 'syz.3.9246': attribute type 10 has an invalid length. [ 660.931553][ T1911] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.938958][ T1911] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.545625][ T1911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.711247][ T1986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9252'. [ 661.720219][ T1986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9252'. [ 661.750170][ T29] audit: type=1326 audit(1770636926.285:21054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1989 comm="syz.2.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d5feaeb9 code=0x7ffc0000 [ 661.761157][ T1911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.814428][ T29] audit: type=1326 audit(1770636926.315:21055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1989 comm="syz.2.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d5feaeb9 code=0x7ffc0000 [ 661.839011][ T29] audit: type=1326 audit(1770636926.315:21056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1989 comm="syz.2.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d5feaeb9 code=0x7ffc0000 [ 661.863458][ T29] audit: type=1326 audit(1770636926.315:21057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1989 comm="syz.2.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8d5feaeb9 code=0x7ffc0000 [ 661.887896][ T29] audit: type=1326 audit(1770636926.315:21058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1989 comm="syz.2.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d5feaeb9 code=0x7ffc0000 [ 661.912254][ T29] audit: type=1326 audit(1770636926.315:21059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1989 comm="syz.2.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d5feaeb9 code=0x7ffc0000 [ 662.373199][ T2034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9256'. [ 662.382223][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9256'. [ 662.565791][ T2047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15690 sclass=netlink_route_socket pid=2047 comm=syz.5.9257 [ 662.666563][ T2047] loop5: detected capacity change from 0 to 8192 [ 662.707818][ T2047] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 662.713084][ T2047] loop5: partition table partially beyond EOD, truncated [ 662.720551][ T2047] loop5: p1 start 100663296 is beyond EOD, truncated [ 662.727312][ T2047] loop5: p2 size 134217732 extends beyond EOD, truncated [ 662.737810][ T2047] loop5: p4 size 14876672 extends beyond EOD, truncated [ 662.745709][ T2047] loop5: p5 size 134217732 extends beyond EOD, truncated [ 662.754071][ T2047] loop5: p6 size 14876672 extends beyond EOD, truncated [ 662.853545][ T1918] bridge_slave_0: left allmulticast mode [ 662.860055][ T1918] bridge_slave_0: left promiscuous mode [ 662.865782][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.947881][ T1918] bridge_slave_1: left allmulticast mode [ 662.953700][ T1918] bridge_slave_1: left promiscuous mode [ 662.959438][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.059540][ T1918] bond0: (slave bond_slave_0): Releasing backup interface [ 663.117523][ T1918] bond0: (slave bond_slave_1): Releasing backup interface [ 663.177876][ T1918] team0: Port device team_slave_0 removed [ 663.217496][ T1918] team0: Port device team_slave_1 removed [ 663.223477][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.257812][ T1918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.297658][ T1918] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 663.316349][ T1959] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 663.337226][ T1938] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.354478][ T1938] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.379693][ T2087] FAULT_INJECTION: forcing a failure. [ 663.379693][ T2087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.393154][ T2087] CPU: 0 UID: 0 PID: 2087 Comm: syz.2.9261 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 663.393197][ T2087] Tainted: [W]=WARN [ 663.393207][ T2087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 663.393225][ T2087] Call Trace: [ 663.393234][ T2087] [ 663.393244][ T2087] __dump_stack+0x1d/0x30 [ 663.393354][ T2087] dump_stack_lvl+0x95/0xd0 [ 663.393385][ T2087] dump_stack+0x15/0x1b [ 663.393413][ T2087] should_fail_ex+0x263/0x280 [ 663.393457][ T2087] should_fail+0xb/0x20 [ 663.393495][ T2087] should_fail_usercopy+0x1a/0x20 [ 663.393536][ T2087] _copy_from_user+0x1c/0xb0 [ 663.393631][ T2087] ucma_join_multicast+0x52/0xe0 [ 663.393678][ T2087] ? __pfx_ucma_join_multicast+0x10/0x10 [ 663.393811][ T2087] ucma_write+0x1c9/0x260 [ 663.393876][ T2087] ? __pfx_ucma_write+0x10/0x10 [ 663.393914][ T2087] vfs_write+0x269/0x9f0 [ 663.393934][ T2087] ? __rcu_read_unlock+0x4e/0x70 [ 663.394055][ T2087] ? __fget_files+0x184/0x1c0 [ 663.394139][ T2087] ? fdget_pos+0x26/0x1d0 [ 663.394176][ T2087] ksys_write+0xdc/0x1a0 [ 663.394203][ T2087] __x64_sys_write+0x40/0x50 [ 663.394230][ T2087] x64_sys_call+0x2847/0x3000 [ 663.394325][ T2087] do_syscall_64+0xc0/0x2a0 [ 663.394367][ T2087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.394396][ T2087] RIP: 0033:0x7ff8d5feaeb9 [ 663.394417][ T2087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.394441][ T2087] RSP: 002b:00007ff8d4a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 663.394515][ T2087] RAX: ffffffffffffffda RBX: 00007ff8d6265fa0 RCX: 00007ff8d5feaeb9 [ 663.394535][ T2087] RDX: 00000000000000a0 RSI: 0000200000000280 RDI: 0000000000000003 [ 663.394554][ T2087] RBP: 00007ff8d4a47090 R08: 0000000000000000 R09: 0000000000000000 [ 663.394572][ T2087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.394589][ T2087] R13: 00007ff8d6266038 R14: 00007ff8d6265fa0 R15: 00007ffcd1d128a8 [ 663.394618][ T2087] [ 663.617387][ T2089] ucma_write: process 46 (syz.3.9262) changed security contexts after opening file descriptor, this is not allowed. [ 663.635967][ T1938] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.645809][ T1938] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.725525][ T2104] loop8: detected capacity change from 0 to 128 [ 663.744035][ T2104] msdos: Unknown parameter '' [ 663.751780][ T2101] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.761749][ T2101] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.818659][ T2105] bond0: Caught tx_queue_len zero misconfig [ 663.854213][ T2108] loop5: detected capacity change from 0 to 136 [ 663.881851][ T2101] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.891785][ T2101] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.937512][ T2112] loop8: detected capacity change from 0 to 8192 [ 663.962653][ T2112] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9271'. [ 663.973041][ T2112] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9271'. [ 664.037761][ T2101] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.048316][ T2101] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.313514][ T2124] can0: slcan on ttyS3. [ 664.348249][ T2101] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.358238][ T2101] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.497366][ T2123] can0 (unregistered): slcan off ttyS3. [ 664.551041][ T2130] 9p: Could not find request transport: uni^ek}toر)&KpJws A4}(3ݒ [ 664.567380][ T1921] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.575692][ T1921] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.609112][ T1921] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.617466][ T1921] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.634375][ T1921] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.642666][ T1921] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.656475][ T1921] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.664865][ T1921] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.763258][ T2139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=2139 comm=syz.4.9279 [ 664.823050][ T2138] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 664.832344][ T2142] loop5: detected capacity change from 0 to 7 [ 664.952562][ T2149] FAULT_INJECTION: forcing a failure. [ 664.952562][ T2149] name failslab, interval 1, probability 0, space 0, times 0 [ 664.966102][ T2149] CPU: 0 UID: 0 PID: 2149 Comm: syz.8.9283 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 664.966204][ T2149] Tainted: [W]=WARN [ 664.966213][ T2149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 664.966231][ T2149] Call Trace: [ 664.966240][ T2149] [ 664.966261][ T2149] __dump_stack+0x1d/0x30 [ 664.966325][ T2149] dump_stack_lvl+0x95/0xd0 [ 664.966409][ T2149] dump_stack+0x15/0x1b [ 664.966435][ T2149] should_fail_ex+0x263/0x280 [ 664.966505][ T2149] should_failslab+0x8c/0xb0 [ 664.966578][ T2149] kmem_cache_alloc_noprof+0x68/0x490 [ 664.966607][ T2149] ? fcntl_setlk+0x53/0x950 [ 664.966697][ T2149] ? __rcu_read_unlock+0x4e/0x70 [ 664.966731][ T2149] fcntl_setlk+0x53/0x950 [ 664.966757][ T2149] ? avc_has_perm+0x101/0x190 [ 664.966847][ T2149] ? should_fail_ex+0xd9/0x280 [ 664.966882][ T2149] do_fcntl+0x6a1/0xf80 [ 664.967015][ T2149] __se_sys_fcntl+0xb1/0x120 [ 664.967048][ T2149] __x64_sys_fcntl+0x43/0x50 [ 664.967079][ T2149] x64_sys_call+0x2d6f/0x3000 [ 664.967116][ T2149] do_syscall_64+0xc0/0x2a0 [ 664.967215][ T2149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.967238][ T2149] RIP: 0033:0x7f609a59aeb9 [ 664.967256][ T2149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.967276][ T2149] RSP: 002b:00007f6098ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 664.967303][ T2149] RAX: ffffffffffffffda RBX: 00007f609a815fa0 RCX: 00007f609a59aeb9 [ 664.967329][ T2149] RDX: 0000200000000000 RSI: 0000000000000025 RDI: 0000000000000003 [ 664.967343][ T2149] RBP: 00007f6098ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 664.967357][ T2149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.967370][ T2149] R13: 00007f609a816038 R14: 00007f609a815fa0 R15: 00007ffec6bec168 [ 664.967394][ T2149] [ 665.197469][ T2153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15690 sclass=netlink_route_socket pid=2153 comm=syz.4.9284 [ 665.239746][ T2153] loop4: detected capacity change from 0 to 8192 [ 665.267637][ T2158] IPv6: NLM_F_CREATE should be specified when creating new route [ 665.277100][T12312] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 665.282341][T12312] loop4: partition table partially beyond EOD, truncated [ 665.296662][T12312] loop4: p1 start 100663296 is beyond EOD, truncated [ 665.303412][T12312] loop4: p2 size 134217732 extends beyond EOD, truncated [ 665.315415][T12312] loop4: p4 size 14876672 extends beyond EOD, truncated [ 665.324315][T12312] loop4: p5 size 134217732 extends beyond EOD, truncated [ 665.332526][T12312] loop4: p6 size 14876672 extends beyond EOD, [ 665.332542][ T2159] loop3: detected capacity change from 0 to 512 [ 665.332549][T12312] truncated [ 665.358296][ T2153] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 665.363646][ T2153] loop4: partition table partially beyond EOD, truncated [ 665.376314][ T2153] loop4: p1 start 100663296 is beyond EOD, truncated [ 665.383206][ T2153] loop4: p2 size 134217732 extends beyond EOD, truncated [ 665.404599][ T2153] loop4: p4 size 14876672 extends beyond EOD, truncated [ 665.407702][ T2159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.426911][ T2153] loop4: p5 size 134217732 extends beyond EOD, truncated [ 665.442695][ T2159] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 665.453451][ T2153] loop4: p6 size 14876672 extends beyond EOD, truncated [ 665.463734][ T2168] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9290'. [ 665.489901][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 665.489927][ T29] audit: type=1400 audit(1770636930.035:21105): avc: denied { getattr } for pid=2157 comm="syz.3.9287" path="/proc/56/cgroup" dev="nsfs" ino=4026532610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 665.567324][ T977] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.639193][ T2172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9291'. [ 665.662768][ T2177] loop8: detected capacity change from 0 to 256 [ 665.696106][ T2183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1052 sclass=netlink_route_socket pid=2183 comm=syz.8.9294 [ 665.710533][ T2184] netlink: 'syz.5.9290': attribute type 10 has an invalid length. [ 665.718567][ T2184] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 665.841522][ T2192] netlink: 'syz.3.9291': attribute type 10 has an invalid length. [ 665.849475][ T2192] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 666.191243][ T2204] bridge0: port 3(vlan2) entered blocking state [ 666.197795][ T2204] bridge0: port 3(vlan2) entered disabled state [ 666.204373][ T2204] vlan2: entered allmulticast mode [ 666.209683][ T2204] bridge0: entered allmulticast mode [ 666.226911][ T2204] vlan2: left allmulticast mode [ 666.231826][ T2204] bridge0: left allmulticast mode [ 666.483900][ T2212] IPv6: NLM_F_CREATE should be specified when creating new route [ 666.542218][ T2209] loop5: detected capacity change from 0 to 8192 [ 666.563069][ T2218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15690 sclass=netlink_route_socket pid=2218 comm=syz.3.9306 [ 666.577970][T12312] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 666.583242][T12312] loop5: partition table partially beyond EOD, truncated [ 666.606817][T12312] loop5: p1 start 100663296 is beyond EOD, truncated [ 666.613562][T12312] loop5: p2 size 134217732 extends beyond EOD, truncated [ 666.626085][T12312] loop5: p4 size 14876672 extends beyond EOD, truncated [ 666.636894][T12312] loop5: p5 size 134217732 extends beyond EOD, truncated [ 666.645006][T12312] loop5: p6 size 14876672 extends beyond EOD, truncated [ 666.656243][ T2218] loop3: detected capacity change from 0 to 8192 [ 666.662393][ T2209] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 666.668591][ T2209] loop5: partition table partially beyond EOD, truncated [ 666.675828][ T2209] loop5: p1 start 100663296 is beyond EOD, truncated [ 666.683398][ T2209] loop5: p2 size 134217732 extends beyond EOD, truncated [ 666.693135][ T2209] loop5: p4 size 14876672 extends beyond EOD, truncated [ 666.701005][T30062] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 666.701265][ T2209] loop5: p5 size 134217732 extends beyond EOD, truncated [ 666.706243][T30062] loop3: partition table partially beyond EOD, truncated [ 666.706801][T30062] loop3: p1 start 100663296 is beyond EOD, [ 666.718859][ T2209] loop5: p6 size 14876672 extends beyond EOD, [ 666.720525][T30062] truncated [ 666.726426][ T2209] truncated [ 666.739037][T30062] loop3: p2 size 134217732 extends beyond EOD, truncated [ 666.762572][T30062] loop3: p4 size 14876672 extends beyond EOD, truncated [ 666.781863][T30062] loop3: p5 size 134217732 extends beyond EOD, truncated [ 666.795330][T30062] loop3: p6 size 14876672 extends beyond EOD, truncated [ 666.806073][ T29] audit: type=1400 audit(1770636931.345:21106): avc: denied { append } for pid=2222 comm="syz.4.9308" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 666.841156][ T2218] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 666.846414][ T2218] loop3: partition table partially beyond EOD, truncated [ 666.862738][ T2218] loop3: p1 start 100663296 is beyond EOD, truncated [ 666.870299][ T2218] loop3: p2 size 134217732 extends beyond EOD, truncated [ 666.875262][ T2228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9310'. [ 666.884232][ T2218] loop3: p4 size 14876672 extends beyond EOD, truncated [ 666.895424][ T2218] loop3: p5 size 134217732 extends beyond EOD, truncated [ 666.897263][ T2230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9311'. [ 666.905316][ T2218] loop3: p6 size 14876672 extends beyond EOD, truncated [ 666.941826][T12315] udevd[12315]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 666.942560][T31671] udevd[31671]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 666.954232][T32021] udevd[32021]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 666.973939][T11514] udevd[11514]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 666.985705][T12312] udevd[12312]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 667.005921][T12315] udevd[12315]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 667.017636][T11514] udevd[11514]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 667.028959][T32021] udevd[32021]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 667.032154][T31671] udevd[31671]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 667.052179][T12312] udevd[12312]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 667.163044][ T2241] netlink: 'syz.5.9311': attribute type 10 has an invalid length. [ 667.171710][ T2241] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 667.308228][ T2255] loop8: detected capacity change from 0 to 1024 [ 667.315175][ T2255] EXT4-fs: inline encryption not supported [ 667.329816][ T2257] loop4: detected capacity change from 0 to 512 [ 667.336869][ T29] audit: type=1326 audit(1770636931.865:21107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2256 comm="syz.4.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 667.337043][ T2257] msdos: Unknown parameter 'disca2d' [ 667.362285][ T29] audit: type=1326 audit(1770636931.865:21108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2256 comm="syz.4.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 667.389473][ T29] audit: type=1326 audit(1770636931.875:21109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2256 comm="syz.4.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 667.413758][ T29] audit: type=1326 audit(1770636931.875:21110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2256 comm="syz.4.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 667.438088][ T29] audit: type=1326 audit(1770636931.875:21111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2256 comm="syz.4.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb0514dac22 code=0x7ffc0000 [ 667.461591][ T29] audit: type=1326 audit(1770636931.875:21112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2256 comm="syz.4.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb05149b78e code=0x7ffc0000 [ 667.485836][ T29] audit: type=1326 audit(1770636931.875:21113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2256 comm="syz.4.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb0514dace7 code=0x7ffc0000 [ 667.510203][ T29] audit: type=1326 audit(1770636931.875:21114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2256 comm="syz.4.9320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb05149b78e code=0x7ffc0000 [ 667.549930][ T2255] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.564243][ T2261] random: crng reseeded on system resumption [ 667.615518][ T2255] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.9319: Allocating blocks 497-513 which overlap fs metadata [ 667.630483][ T2255] EXT4-fs (loop8): Remounting filesystem read-only [ 667.698019][ T302] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.737235][ T2270] netlink: 'syz.4.9324': attribute type 13 has an invalid length. [ 667.791965][ T2276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9324'. [ 667.907961][T12312] loop5: p1 < > p2 p4 < p5 > [ 667.912761][T12312] loop5: partition table partially beyond EOD, truncated [ 667.920165][T12312] loop5: p1 start 134217728 is beyond EOD, truncated [ 667.927570][T12312] loop5: p2 size 591360 extends beyond EOD, truncated [ 667.935759][ T2270] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.937272][T12312] loop5: p5 size 591360 extends beyond EOD, truncated [ 667.943286][ T2270] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.961305][ T2281] loop5: p1 < > p2 p4 < p5 > [ 667.966127][ T2281] loop5: partition table partially beyond EOD, truncated [ 667.984651][ T2281] loop5: p1 start 134217728 is beyond EOD, truncated [ 667.992209][ T2281] loop5: p2 size 591360 extends beyond EOD, truncated [ 668.005983][ T2281] loop5: p5 size 591360 extends beyond EOD, truncated [ 668.351347][ T2270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.362882][ T2270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.602545][ T2305] EXT4-fs (loop5): Invalid default hash set in the superblock [ 668.684414][ T2308] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9335'. [ 668.743300][ T1921] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.751919][ T1921] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.788977][ T2286] lo speed is unknown, defaulting to 1000 [ 668.789232][ T1921] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.803214][ T1921] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.854941][ T1921] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.863470][ T1921] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.877529][ T2317] netlink: 'syz.5.9335': attribute type 10 has an invalid length. [ 668.885417][ T2317] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 668.922984][ T1921] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.931557][ T1921] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.983309][ T2334] set_capacity_and_notify: 3 callbacks suppressed [ 668.983329][ T2334] loop8: detected capacity change from 0 to 512 [ 669.007420][ T2334] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 669.019283][ T2334] EXT4-fs error (device loop8): ext4_init_orphan_info:620: comm syz.8.9341: orphan file block 0: bad magic [ 669.032137][ T2334] EXT4-fs (loop8): Remounting filesystem read-only [ 669.047393][ T2334] EXT4-fs (loop8): mount failed [ 669.070147][ T2339] loop8: detected capacity change from 0 to 164 [ 669.084938][ T2286] lo speed is unknown, defaulting to 1000 [ 669.112514][ T2339] iso9660: Unknown parameter 'b$k?mIlmkoyeTr&g'd8zu߾hu~ni' [ 669.216614][ T2348] siw: device registration error -23 [ 669.304950][ T2353] loop8: detected capacity change from 0 to 8192 [ 669.352940][ T2374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.364194][ T2374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.379724][ T2374] loop4: detected capacity change from 0 to 1024 [ 669.389673][ T2374] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 669.394518][T12312] loop8: p1 < > p2 p3 < p5 p6 > p4 [ 669.402916][T12312] loop8: partition table partially beyond EOD, truncated [ 669.419954][ T2376] ip6erspan0: entered allmulticast mode [ 669.426007][T12312] loop8: p1 start 100663296 is beyond EOD, truncated [ 669.432889][T12312] loop8: p2 size 134217732 extends beyond EOD, truncated [ 669.442042][T12312] loop8: p4 size 14876672 extends beyond EOD, truncated [ 669.449744][T12312] loop8: p5 size 134217732 extends beyond EOD, truncated [ 669.458135][T12312] loop8: p6 size 14876672 extends beyond EOD, truncated [ 669.469438][ T2353] loop8: p1 < > p2 p3 < p5 p6 > p4 [ 669.474689][ T2353] loop8: partition table partially beyond EOD, truncated [ 669.482756][ T2353] loop8: p1 start 100663296 is beyond EOD, truncated [ 669.489630][ T2353] loop8: p2 size 134217732 extends beyond EOD, truncated [ 669.498932][ T2353] loop8: p4 size 14876672 extends beyond EOD, truncated [ 669.510626][ T2353] loop8: p5 size 134217732 extends beyond EOD, truncated [ 669.529101][ T2353] loop8: p6 size 14876672 extends beyond EOD, truncated [ 669.790935][ T2392] FAULT_INJECTION: forcing a failure. [ 669.790935][ T2392] name failslab, interval 1, probability 0, space 0, times 0 [ 669.804354][ T2392] CPU: 0 UID: 0 PID: 2392 Comm: syz.5.9353 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 669.804462][ T2392] Tainted: [W]=WARN [ 669.804470][ T2392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 669.804485][ T2392] Call Trace: [ 669.804492][ T2392] [ 669.804500][ T2392] __dump_stack+0x1d/0x30 [ 669.804526][ T2392] dump_stack_lvl+0x95/0xd0 [ 669.804553][ T2392] dump_stack+0x15/0x1b [ 669.804585][ T2392] should_fail_ex+0x263/0x280 [ 669.804662][ T2392] should_failslab+0x8c/0xb0 [ 669.804695][ T2392] kmem_cache_alloc_noprof+0x68/0x490 [ 669.804746][ T2392] ? security_inode_alloc+0x37/0x100 [ 669.804855][ T2392] security_inode_alloc+0x37/0x100 [ 669.804886][ T2392] inode_init_always_gfp+0x4b7/0x500 [ 669.804908][ T2392] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 669.804971][ T2392] alloc_inode+0x58/0x170 [ 669.804990][ T2392] new_inode+0x1d/0xe0 [ 669.805011][ T2392] __debugfs_create_file+0x97/0x2b0 [ 669.805054][ T2392] debugfs_create_file_full+0x3f/0x60 [ 669.805125][ T2392] ? __pfx_vlan_setup+0x10/0x10 [ 669.805144][ T2392] ref_tracker_dir_debugfs+0x10e/0x220 [ 669.805365][ T2392] alloc_netdev_mqs+0x1a7/0xa40 [ 669.805402][ T2392] rtnl_create_link+0x239/0x720 [ 669.805604][ T2392] rtnl_newlink_create+0x174/0x650 [ 669.805632][ T2392] ? security_capable+0x7b/0x90 [ 669.805661][ T2392] ? netlink_ns_capable+0x86/0xa0 [ 669.805750][ T2392] rtnl_newlink+0xf5b/0x1370 [ 669.805779][ T2392] ? xas_load+0x413/0x430 [ 669.805856][ T2392] ? __rcu_read_unlock+0x4e/0x70 [ 669.806023][ T2392] ? xa_load+0xb1/0xe0 [ 669.806075][ T2392] ? __rcu_read_unlock+0x4e/0x70 [ 669.806103][ T2392] ? avc_has_perm_noaudit+0xab/0x130 [ 669.806140][ T2392] ? cred_has_capability+0x224/0x290 [ 669.806169][ T2392] ? selinux_capable+0x31/0x40 [ 669.806186][ T2392] ? security_capable+0x7b/0x90 [ 669.806248][ T2392] ? ns_capable+0x7c/0xb0 [ 669.806325][ T2392] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.806354][ T2392] rtnetlink_rcv_msg+0x64b/0x720 [ 669.806379][ T2392] ? avc_has_perm_noaudit+0xab/0x130 [ 669.806478][ T2392] netlink_rcv_skb+0x123/0x220 [ 669.806515][ T2392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.806684][ T2392] rtnetlink_rcv+0x1c/0x30 [ 669.806703][ T2392] netlink_unicast+0x5c0/0x690 [ 669.806733][ T2392] netlink_sendmsg+0x5c8/0x6f0 [ 669.806812][ T2392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.806830][ T2392] ____sys_sendmsg+0x5af/0x600 [ 669.806852][ T2392] ___sys_sendmsg+0x195/0x1e0 [ 669.806915][ T2392] __x64_sys_sendmsg+0xd4/0x160 [ 669.807015][ T2392] x64_sys_call+0x17ba/0x3000 [ 669.807040][ T2392] do_syscall_64+0xc0/0x2a0 [ 669.807141][ T2392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.807162][ T2392] RIP: 0033:0x7f17bd37aeb9 [ 669.807177][ T2392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.807216][ T2392] RSP: 002b:00007f17bbdcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.807287][ T2392] RAX: ffffffffffffffda RBX: 00007f17bd5f5fa0 RCX: 00007f17bd37aeb9 [ 669.807300][ T2392] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 669.807313][ T2392] RBP: 00007f17bbdcf090 R08: 0000000000000000 R09: 0000000000000000 [ 669.807325][ T2392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.807337][ T2392] R13: 00007f17bd5f6038 R14: 00007f17bd5f5fa0 R15: 00007ffd3b9c3358 [ 669.807357][ T2392] [ 670.140265][ T2392] debugfs: out of free dentries, can not create file 'netdev@ffff88818bc5c558' [ 670.155860][ T2392] 0{X: entered promiscuous mode [ 670.179842][ T2392] vlan2: entered promiscuous mode [ 670.259438][ T2395] loop8: detected capacity change from 0 to 512 [ 670.318583][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9356'. [ 670.337888][ T2395] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.9354: inode has both inline data and extents flags [ 670.364496][ T2395] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.9354: couldn't read orphan inode 15 (err -117) [ 670.386305][ T2395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.539662][ T302] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.678658][ T2420] netlink: 'syz.2.9361': attribute type 1 has an invalid length. [ 670.686541][ T2420] netlink: 'syz.2.9361': attribute type 3 has an invalid length. [ 670.695047][ T2420] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9361'. [ 670.782789][ T2426] loop4: detected capacity change from 0 to 8192 [ 670.791270][ T2430] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9359'. [ 670.800860][ T2430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.818827][ T2426] vfat: Unknown parameter '00000000000000000000000' [ 670.853999][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 670.854015][ T29] audit: type=1400 audit(1770636935.395:21186): avc: denied { watch watch_reads } for pid=2429 comm="syz.8.9359" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 670.902796][ T29] audit: type=1400 audit(1770636935.435:21187): avc: denied { map } for pid=2424 comm="syz.4.9362" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 670.927508][ T29] audit: type=1400 audit(1770636935.435:21188): avc: denied { execute } for pid=2424 comm="syz.4.9362" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 670.989547][ T2442] loop4: detected capacity change from 0 to 1024 [ 670.996694][ T2442] EXT4-fs: Ignoring removed orlov option [ 671.019635][ T2442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.088585][ T2455] loop3: detected capacity change from 0 to 512 [ 671.095383][ T2455] EXT4-fs: Ignoring removed oldalloc option [ 671.102690][ T2454] netlink: 'syz.2.9369': attribute type 323 has an invalid length. [ 671.113615][ T2455] EXT4-fs (loop3): 1 truncate cleaned up [ 671.123937][ T2455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.144876][ T2459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9372'. [ 671.155868][T30945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.180737][ T2461] loop4: detected capacity change from 0 to 512 [ 671.187990][ T2461] EXT4-fs: Ignoring removed oldalloc option [ 671.195698][ T2461] EXT4-fs (loop4): 1 truncate cleaned up [ 671.201916][ T2461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.260917][ T977] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.261864][T30945] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.289598][ T2459] hsr_slave_1 (unregistering): left promiscuous mode [ 671.464411][ T2486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9378'. [ 671.501147][ T29] audit: type=1400 audit(1770636936.045:21189): avc: denied { listen } for pid=2489 comm="syz.2.9380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 671.613315][ T29] audit: type=1326 audit(1770636936.155:21190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.8.9383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a59aeb9 code=0x7ffc0000 [ 671.670161][ T29] audit: type=1326 audit(1770636936.155:21191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.8.9383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a59aeb9 code=0x7ffc0000 [ 671.694604][ T29] audit: type=1326 audit(1770636936.155:21193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.8.9383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f609a59aeb9 code=0x7ffc0000 [ 671.708669][ T2505] loop8: detected capacity change from 0 to 512 [ 671.720403][ T29] audit: type=1326 audit(1770636936.155:21194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.8.9383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a59aeb9 code=0x7ffc0000 [ 671.729015][ T2505] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 671.748335][ T29] audit: type=1326 audit(1770636936.155:21195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.8.9383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a59aeb9 code=0x7ffc0000 [ 671.748369][ T29] audit: type=1326 audit(1770636936.155:21192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2499 comm="syz.8.9383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609a59aeb9 code=0x7ffc0000 [ 671.805604][ T2502] netlink: 169200 bytes leftover after parsing attributes in process `syz.4.9382'. [ 671.847551][ T2506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 671.887197][ T2506] EXT4-fs (loop8): unable to read superblock [ 672.017478][ T2518] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9389'. [ 672.035026][ T2515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.088615][T25885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.097913][ T2518] hsr_slave_1 (unregistering): left promiscuous mode [ 672.268839][ T2537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15690 sclass=netlink_route_socket pid=2537 comm=syz.8.9396 [ 672.348289][T12312] loop8: p1 < > p2 p3 < p5 p6 > p4 [ 672.353696][T12312] loop8: partition table partially beyond EOD, truncated [ 672.376717][T12312] loop8: p1 start 100663296 is beyond EOD, truncated [ 672.383601][T12312] loop8: p2 size 134217732 extends beyond EOD, truncated [ 672.393200][T12312] loop8: p4 size 14876672 extends beyond EOD, truncated [ 672.400170][ T2543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9398'. [ 672.410926][T12312] loop8: p5 size 134217732 extends beyond EOD, truncated [ 672.418872][T12312] loop8: p6 size 14876672 extends beyond EOD, truncated [ 672.436750][ T2543] lo speed is unknown, defaulting to 1000 [ 672.472310][ T2537] loop8: p1 < > p2 p3 < p5 p6 > p4 [ 672.478325][ T2537] loop8: partition table partially beyond EOD, truncated [ 672.509934][ T2537] loop8: p1 start 100663296 is beyond EOD, truncated [ 672.511901][ T2548] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 672.516751][ T2537] loop8: p2 size 134217732 extends beyond EOD, truncated [ 672.527625][ T2537] loop8: p4 size 14876672 extends beyond EOD, truncated [ 672.550717][ T2548] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.569097][ T2537] loop8: p5 size 134217732 extends beyond EOD, truncated [ 672.581967][ T2548] FAULT_INJECTION: forcing a failure. [ 672.581967][ T2548] name failslab, interval 1, probability 0, space 0, times 0 [ 672.588883][ T2537] loop8: p6 size 14876672 extends beyond EOD, truncated [ 672.596424][ T2548] CPU: 0 UID: 0 PID: 2548 Comm: syz.5.9399 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 672.596528][ T2548] Tainted: [W]=WARN [ 672.596602][ T2548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 672.596644][ T2548] Call Trace: [ 672.596673][ T2548] [ 672.596699][ T2548] __dump_stack+0x1d/0x30 [ 672.596782][ T2548] dump_stack_lvl+0x95/0xd0 [ 672.596935][ T2548] dump_stack+0x15/0x1b [ 672.597006][ T2548] should_fail_ex+0x263/0x280 [ 672.597268][ T2548] should_failslab+0x8c/0xb0 [ 672.597344][ T2548] kmem_cache_alloc_noprof+0x68/0x490 [ 672.597427][ T2548] ? prepare_creds+0x38/0x550 [ 672.597585][ T2548] prepare_creds+0x38/0x550 [ 672.597684][ T2548] prepare_exec_creds+0x14/0xe0 [ 672.597782][ T2548] bprm_execve+0x6f/0x9b0 [ 672.597927][ T2548] ? copy_string_kernel+0x377/0x3a0 [ 672.598051][ T2548] do_execveat_common+0x6cf/0x740 [ 672.598171][ T2548] __x64_sys_execve+0x5c/0x70 [ 672.598351][ T2548] x64_sys_call+0x271d/0x3000 [ 672.598482][ T2548] do_syscall_64+0xc0/0x2a0 [ 672.598586][ T2548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.598660][ T2548] RIP: 0033:0x7f17bd37aeb9 [ 672.598720][ T2548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.598789][ T2548] RSP: 002b:00007f17bbdcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 672.598860][ T2548] RAX: ffffffffffffffda RBX: 00007f17bd5f5fa0 RCX: 00007f17bd37aeb9 [ 672.598910][ T2548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 672.599056][ T2548] RBP: 00007f17bbdcf090 R08: 0000000000000000 R09: 0000000000000000 [ 672.599155][ T2548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 672.599267][ T2548] R13: 00007f17bd5f6038 R14: 00007f17bd5f5fa0 R15: 00007ffd3b9c3358 [ 672.599400][ T2548] [ 672.732372][ T2543] lo speed is unknown, defaulting to 1000 [ 672.803041][T25885] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 672.924122][ T2565] netlink: 'syz.4.9401': attribute type 10 has an invalid length. [ 672.932192][ T2565] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 673.091661][ T2569] __nla_validate_parse: 1 callbacks suppressed [ 673.091679][ T2569] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9405'. [ 673.142412][T31671] udevd[31671]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 673.142738][T30062] udevd[30062]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 673.164884][T32021] udevd[32021]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 673.177963][ T2577] netlink: 'syz.5.9406': attribute type 1 has an invalid length. [ 673.319465][ T2588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9411'. [ 673.454569][ T2598] netlink: 'syz.4.9415': attribute type 12 has an invalid length. [ 673.462616][ T2598] netlink: 'syz.4.9415': attribute type 29 has an invalid length. [ 673.471347][ T2598] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9415'. [ 673.593114][ T2604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 673.620873][ T2602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 673.629852][ T2591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.643617][ T2591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.717379][ T2604] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.769270][ T2602] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.769330][ T2593] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.9413: bg 0: block 112: padding at end of block bitmap is not set [ 673.819576][ T2593] EXT4-fs (loop8): Remounting filesystem read-only [ 673.836797][ T2593] EXT4-fs warning (device loop8): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.8.9413: cleanup dec ref error -28 [ 673.837764][ T2448] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 674.027430][ T2610] set_capacity_and_notify: 7 callbacks suppressed [ 674.027452][ T2610] loop5: detected capacity change from 0 to 1024 [ 674.044199][ T977] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 674.082494][ T2610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 674.101230][ T2610] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.269062][T25885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 674.376185][ T2614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.429682][ T2614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.466983][ T2621] loop5: detected capacity change from 0 to 1024 [ 674.488953][ T302] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 674.506638][ T2621] ext2: Unknown parameter 'appraise_type' [ 674.558394][ T2620] SELinux: policydb magic number 0x680 does not match expected magic number 0xf97cff8c [ 674.576899][ T2620] SELinux: failed to load policy [ 674.757621][ T2635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9426'. [ 674.782282][ T2637] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9427'. [ 674.791747][ T2637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9427'. [ 674.890544][ T1922] tipc: Disabling bearer [ 674.940546][ T2643] netlink: 'syz.4.9426': attribute type 10 has an invalid length. [ 675.047990][ T1922] bond0 (unregistering): left promiscuous mode [ 675.055472][ T1922] bond0 (unregistering): Released all slaves [ 675.066023][ T1922] bond1 (unregistering): Released all slaves [ 675.094183][ T1922] bond2 (unregistering): Released all slaves [ 675.106831][ T1922] bond3 (unregistering): Released all slaves [ 675.119420][ T1922] bond4 (unregistering): Released all slaves [ 675.136516][ T1922] bond5 (unregistering): Released all slaves [ 675.157966][ T2643] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 675.178851][ T2640] lo speed is unknown, defaulting to 1000 [ 675.185455][ T2654] lo speed is unknown, defaulting to 1000 [ 675.229200][ T1922] tipc: Left network mode [ 675.283548][ T2640] lo speed is unknown, defaulting to 1000 [ 675.342878][ T2654] lo speed is unknown, defaulting to 1000 [ 675.371724][ T2662] loop3: detected capacity change from 0 to 256 [ 675.381416][ T2662] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 675.567307][ T1922] batadv0: left promiscuous mode [ 675.647680][ T1922] hsr_slave_0: left promiscuous mode [ 675.662644][ T2678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9438'. [ 675.678251][ T2677] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9437'. [ 675.697418][ T1922] hsr_slave_1: left promiscuous mode [ 676.002996][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 676.003016][ T29] audit: type=1326 audit(1770636940.544:21252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.4.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 676.034621][ T29] audit: type=1326 audit(1770636940.544:21253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.4.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 676.058293][ T29] audit: type=1326 audit(1770636940.544:21254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.4.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 676.081734][ T29] audit: type=1326 audit(1770636940.544:21255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.4.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 676.105331][ T29] audit: type=1326 audit(1770636940.544:21256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.4.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 676.128852][ T29] audit: type=1326 audit(1770636940.544:21257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.4.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 676.152492][ T29] audit: type=1326 audit(1770636940.544:21258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.4.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 676.168858][ T2689] 9p: Could not find request transport: uni^ek}toر)&KpJws A4}(3ݒ [ 676.176171][ T29] audit: type=1326 audit(1770636940.544:21259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.4.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 676.209993][ T29] audit: type=1326 audit(1770636940.554:21260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2683 comm="syz.4.9439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0514daeb9 code=0x7ffc0000 [ 676.272746][ T2692] loop8: detected capacity change from 0 to 512 [ 676.296585][ T2692] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.309408][ T2692] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.404852][ T2697] 9p: Bad value for 'rfdno' [ 676.432193][ T302] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.462048][ T2699] serio: Serial port ttyS3 [ 676.503041][ T2704] netlink: 'syz.2.9446': attribute type 10 has an invalid length. [ 676.511057][ T2704] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9446'. [ 676.588326][ T2703] batadv_slave_1: entered promiscuous mode [ 676.594773][ T2713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9449'. [ 676.630069][ T2702] batadv_slave_1: left promiscuous mode [ 676.794484][ T2724] netlink: 'syz.4.9449': attribute type 10 has an invalid length. [ 676.802484][ T2724] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 676.833571][ T29] audit: type=1400 audit(1770636941.374:21261): avc: denied { ioctl } for pid=2727 comm="syz.2.9453" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x2408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 676.890399][ T1922] IPVS: stop unused estimator thread 0... [ 676.935326][ T2733] FAULT_INJECTION: forcing a failure. [ 676.935326][ T2733] name failslab, interval 1, probability 0, space 0, times 0 [ 676.948616][ T2733] CPU: 0 UID: 0 PID: 2733 Comm: syz.2.9455 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 676.948657][ T2733] Tainted: [W]=WARN [ 676.948663][ T2733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 676.948744][ T2733] Call Trace: [ 676.948751][ T2733] [ 676.948759][ T2733] __dump_stack+0x1d/0x30 [ 676.948782][ T2733] dump_stack_lvl+0x95/0xd0 [ 676.948865][ T2733] dump_stack+0x15/0x1b [ 676.948906][ T2733] should_fail_ex+0x263/0x280 [ 676.948936][ T2733] should_failslab+0x8c/0xb0 [ 676.948976][ T2733] __kmalloc_cache_noprof+0x64/0x4a0 [ 676.949002][ T2733] ? gen_new_estimator+0x117/0x400 [ 676.949027][ T2733] gen_new_estimator+0x117/0x400 [ 676.949138][ T2733] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 676.949248][ T2733] hfsc_change_class+0x11c6/0x1610 [ 676.949286][ T2733] tc_ctl_tclass+0x6f7/0xce0 [ 676.949387][ T2733] ? ns_capable+0x7c/0xb0 [ 676.949412][ T2733] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 676.949434][ T2733] rtnetlink_rcv_msg+0x6a7/0x720 [ 676.949456][ T2733] ? avc_has_perm_noaudit+0xab/0x130 [ 676.949545][ T2733] netlink_rcv_skb+0x123/0x220 [ 676.949574][ T2733] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 676.949667][ T2733] rtnetlink_rcv+0x1c/0x30 [ 676.949686][ T2733] netlink_unicast+0x5c0/0x690 [ 676.949718][ T2733] netlink_sendmsg+0x5c8/0x6f0 [ 676.949807][ T2733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.949901][ T2733] ____sys_sendmsg+0x5af/0x600 [ 676.949944][ T2733] ___sys_sendmsg+0x195/0x1e0 [ 676.950024][ T2733] __x64_sys_sendmsg+0xd4/0x160 [ 676.950047][ T2733] x64_sys_call+0x17ba/0x3000 [ 676.950070][ T2733] do_syscall_64+0xc0/0x2a0 [ 676.950173][ T2733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.950203][ T2733] RIP: 0033:0x7ff8d5feaeb9 [ 676.950224][ T2733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.950252][ T2733] RSP: 002b:00007ff8d4a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.950322][ T2733] RAX: ffffffffffffffda RBX: 00007ff8d6265fa0 RCX: 00007ff8d5feaeb9 [ 676.950335][ T2733] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 676.950347][ T2733] RBP: 00007ff8d4a47090 R08: 0000000000000000 R09: 0000000000000000 [ 676.950433][ T2733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.950445][ T2733] R13: 00007ff8d6266038 R14: 00007ff8d6265fa0 R15: 00007ffcd1d128a8 [ 676.950465][ T2733] [ 677.392893][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.403284][ T31] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.432075][ T2748] FAULT_INJECTION: forcing a failure. [ 677.432075][ T2748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.446081][ T2748] CPU: 0 UID: 0 PID: 2748 Comm: syz.8.9460 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 677.446111][ T2748] Tainted: [W]=WARN [ 677.446118][ T2748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 677.446130][ T2748] Call Trace: [ 677.446135][ T2748] [ 677.446143][ T2748] __dump_stack+0x1d/0x30 [ 677.446298][ T2748] dump_stack_lvl+0x95/0xd0 [ 677.446402][ T2748] dump_stack+0x15/0x1b [ 677.446421][ T2748] should_fail_ex+0x263/0x280 [ 677.446451][ T2748] should_fail+0xb/0x20 [ 677.446509][ T2748] should_fail_usercopy+0x1a/0x20 [ 677.446541][ T2748] _copy_from_user+0x1c/0xb0 [ 677.446561][ T2748] ___sys_sendmsg+0xc1/0x1e0 [ 677.446592][ T2748] __x64_sys_sendmsg+0xd4/0x160 [ 677.446670][ T2748] x64_sys_call+0x17ba/0x3000 [ 677.446694][ T2748] do_syscall_64+0xc0/0x2a0 [ 677.446722][ T2748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.446804][ T2748] RIP: 0033:0x7f609a59aeb9 [ 677.446818][ T2748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.446835][ T2748] RSP: 002b:00007f6098ff7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.446853][ T2748] RAX: ffffffffffffffda RBX: 00007f609a815fa0 RCX: 00007f609a59aeb9 [ 677.446902][ T2748] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 677.446915][ T2748] RBP: 00007f6098ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 677.446928][ T2748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.446941][ T2748] R13: 00007f609a816038 R14: 00007f609a815fa0 R15: 00007ffec6bec168 [ 677.447007][ T2748] [ 677.660253][ T2744] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.706555][ T31] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.798729][ T2764] 9p: Could not find request transport: uni^ek}toر)&KpJws A4}(3ݒ [ 677.812619][ T2762] loop4: detected capacity change from 0 to 128 [ 677.822962][ T2762] syz.4.9465: attempt to access beyond end of device [ 677.822962][ T2762] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 677.838563][ T2762] syz.4.9465: attempt to access beyond end of device [ 677.838563][ T2762] loop4: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 677.879001][ T2762] syz.4.9465: attempt to access beyond end of device [ 677.879001][ T2762] loop4: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 677.932689][ T2770] binfmt_misc: register: failed to install interpreter file ./file0 [ 677.954621][ T2770] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 677.968101][ T2770] pim6reg0: linktype set to 65534 [ 677.974352][ T2770] chnl_net:caif_netlink_parms(): no params data found [ 678.159419][ T2782] loop4: detected capacity change from 0 to 512 [ 678.426714][ T2796] : renamed from team_slave_1 [ 678.466436][ T2798] bridge0: entered promiscuous mode [ 678.619513][ T2814] serio: Serial port ptm0 [ 678.637794][ T2813] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 678.750751][ T2825] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 678.806066][ T2833] loop5: detected capacity change from 0 to 512 [ 678.813991][ T2831] __nla_validate_parse: 3 callbacks suppressed [ 678.814011][ T2831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9492'. [ 678.836140][ T2833] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 678.864269][ T2833] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 678.873520][ T2833] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 678.903559][ T2833] System zones: 0-2, 18-18, 34-34 [ 678.909723][ T2833] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.9493: bad orphan inode 15 [ 678.921104][ T2836] loop4: detected capacity change from 0 to 128 [ 678.929195][ T2836] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 678.957806][ T2833] ext4_test_bit(bit=14, block=18) = 1 [ 678.963446][ T2833] is_bad_inode(inode)=0 [ 678.967690][ T2833] NEXT_ORPHAN(inode)=2264924160 [ 678.972586][ T2833] max_ino=32 [ 678.975879][ T2833] i_nlink=0 [ 678.980720][ T2833] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.9493: corrupted inode contents [ 678.992960][ T2836] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 679.002560][ T2833] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.9493: mark_inode_dirty error [ 679.015447][ T2833] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.9493: corrupted inode contents [ 679.028270][ T2833] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.9493: mark_inode_dirty error [ 679.040632][ T2833] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.9493: mark inode dirty (error -117) [ 679.054208][ T2833] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 679.064371][ T2833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.096706][ T2833] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9493: bg 0: block 80: padding at end of block bitmap is not set [ 679.127132][ T2833] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 3: comm syz.5.9493: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0 [ 679.178596][ T2833] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 3: comm syz.5.9493: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0 [ 679.231458][ T2844] 9p: Could not find request transport: uni^ek}toر)&KpJws A4}(3ݒ [ 679.231632][ T2845] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 3: comm syz.5.9493: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0 [ 679.289068][ T2744] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.300270][ T2744] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.313973][T25885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.389191][ T2853] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 679.459741][ T2744] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.470275][ T2744] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.622672][ T2865] 9p: Bad value for 'wfdno' [ 679.649877][ T2744] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.660319][ T2744] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.681401][ T2869] loop8: detected capacity change from 0 to 512 [ 679.694151][ T2869] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.9504: bg 0: block 393: padding at end of block bitmap is not set [ 679.733999][ T2869] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 679.744185][ T2869] EXT4-fs (loop8): 2 truncates cleaned up [ 679.750626][ T2869] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.823772][ T1921] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.828735][ T302] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.832252][ T1921] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.855742][ T1921] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.864012][ T1921] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.876559][ T1921] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.884869][ T1921] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.884958][ T2988] ================================================================== [ 679.901207][ T2988] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 679.908259][ T2988] [ 679.910599][ T2988] write to 0xffffffff86aac4e0 of 88 bytes by task 1921 on cpu 0: [ 679.918331][ T2988] prb_reserve+0x6e6/0xae0 [ 679.922767][ T2988] vprintk_store+0x54a/0x910 [ 679.927378][ T2988] vprintk_emit+0x1a4/0x600 [ 679.931916][ T2988] dev_vprintk_emit+0x242/0x2a0 [ 679.936798][ T2988] dev_printk_emit+0x84/0xb0 [ 679.941426][ T2988] __netdev_printk+0x34b/0x370 [ 679.946227][ T2988] netdev_info+0xa6/0xd0 [ 679.950510][ T2988] nsim_udp_tunnel_set_port+0x135/0x150 [ 679.956091][ T2988] __udp_tunnel_nic_device_sync+0x575/0x9b0 [ 679.962036][ T2988] udp_tunnel_nic_device_sync_work+0x5d/0x580 [ 679.968133][ T2988] process_scheduled_works+0x4cd/0x9d0 [ 679.973616][ T2988] worker_thread+0x6bc/0x8b0 [ 679.978233][ T2988] kthread+0x488/0x510 [ 679.982339][ T2988] ret_from_fork+0x148/0x280 [ 679.987045][ T2988] ret_from_fork_asm+0x1a/0x30 [ 679.991839][ T2988] [ 679.994181][ T2988] read to 0xffffffff86aac4e0 of 8 bytes by task 2988 on cpu 1: [ 680.001746][ T2988] _prb_read_valid+0x383/0x950 [ 680.006540][ T2988] prb_read_valid+0x3c/0x60 [ 680.011073][ T2988] syslog_print+0x258/0x560 [ 680.015695][ T2988] do_syslog+0x52b/0x7f0 [ 680.019971][ T2988] __x64_sys_syslog+0x41/0x50 [ 680.024681][ T2988] x64_sys_call+0x27ce/0x3000 [ 680.029405][ T2988] do_syscall_64+0xc0/0x2a0 [ 680.033969][ T2988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.039890][ T2988] [ 680.042226][ T2988] value changed: 0x00000000000023a8 -> 0x00000000000043a8 [ 680.049346][ T2988] [ 680.051709][ T2988] Reported by Kernel Concurrency Sanitizer on: [ 680.057880][ T2988] CPU: 1 UID: 0 PID: 2988 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 680.068752][ T2988] Tainted: [W]=WARN [ 680.072596][ T2988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 680.082675][ T2988] ================================================================== [ 680.095724][ T1921] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.104886][ T1921] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0