last executing test programs: 1m4.369516932s ago: executing program 4 (id=2275): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=ANY=[@ANYBLOB="540100001a00330665bd7000fbdbffffffff14aa0000000000001000000000000000cca1fe8c0000000000000001004e2300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000002000000003200000000000000000000000000ffffe000000223030000000000000100000000000000070000000000000001040000000000000b00000000000000000400000000000006000000002000000000000000000000000000000000000000000000010000000000000000000000fffffffffffffffffbffffff0300000009ca000025bd70000235000002000400090000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020"], 0x154}, 0x1, 0x0, 0x0, 0x44000840}, 0x804) 1m4.103879688s ago: executing program 4 (id=2279): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="010000000300000064000000000000000000000000000000000000000000000f423f00000000000001000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}], 0x1}}], 0x2, 0x0) 1m3.911377863s ago: executing program 4 (id=2281): mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="8000f2040a001f0a38742faaaa1b00f605000500010000006af9d23874b1a697b6506e49a493ec022563fa6ca7a2d12ccd52c41197abf46efe375fafca0c4156d7858c8c8b26a9023edc4d5a15abf288537162a160bd3703cc17cebe0ffa470b129b88c48dbe531c280ce5a685527a6e43ea27ffba502aea2149b3079f956877c44c70df907fbaa6761dd27f71c7570805150572db5a1ace43e13b7877af0af16e8bbd42bc17aea06c582ca09566cea7f6ba03c8b008236e1938e96df66e709fefa82d6e173aae7bee4535796e02c2cec1c107abfaee"], 0x30}, 0x1, 0x1000000}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_config_ext={0x9, 0x7}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0}, 0x12a04, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c00028005000100000000000600034000000000080007400000000004"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c0001801400030000000000000080fe000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000040018000680140004"], 0xac}}, 0x0) 1m3.388304445s ago: executing program 4 (id=2288): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae708000000000004087"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r4, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x29, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) write(r2, &(0x7f0000000000)='7', 0x1) open_tree(r2, 0x0, 0x80800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x8, 0x0, 0x0}}, 0x10) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xdc) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000080)}, 0x10) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1m2.36212815s ago: executing program 4 (id=2295): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1m1.679680466s ago: executing program 4 (id=2303): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0xb) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x91, 0x99}}, @qdisc_kind_options=@q_blackhole={0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, r5, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='bbr', 0x3) io_setup(0x7, &(0x7f0000000000)=0x0) socket$pptp(0x18, 0x1, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_pgetevents(r6, 0x7, 0x0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000440)={&(0x7f0000000400)={[0x8d5]}, 0x8}) r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) io_submit(r6, 0x0, 0x0) unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x88880) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) write$binfmt_misc(r8, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 1m1.678122666s ago: executing program 32 (id=2303): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0xb) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x91, 0x99}}, @qdisc_kind_options=@q_blackhole={0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, r5, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='bbr', 0x3) io_setup(0x7, &(0x7f0000000000)=0x0) socket$pptp(0x18, 0x1, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_pgetevents(r6, 0x7, 0x0, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000440)={&(0x7f0000000400)={[0x8d5]}, 0x8}) r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) io_submit(r6, 0x0, 0x0) unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x88880) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) write$binfmt_misc(r8, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 59.787543482s ago: executing program 0 (id=2327): r0 = request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) r1 = request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x4}, 0x204, 0x8, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a500000000b0a010300000000000000000a0000040900020073797a310000000008000540000000380900010073797a31"], 0x984}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r5, 0x4bfa, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000140)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noquota}]}, 0x1, 0x7d2, &(0x7f0000002140)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r6}, 0x18) mkdir(&(0x7f0000000080)='./file1\x00', 0xa0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) sendfile(r7, r7, 0x0, 0xa) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='\x00', &(0x7f00000001c0)) 58.258665499s ago: executing program 0 (id=2341): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc00000013000101000000000000000064010102000000000000000000000000640101021000000000000000000000000100000d040000090a000000ffffff80", @ANYRES32=0x0, @ANYRES32], 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 57.565101616s ago: executing program 0 (id=2344): syz_read_part_table(0x104d, &(0x7f0000001080)="$eJzsz7EJAkEUBNDZU0RZLMOSLMIuzmoUAzswsSAzMVRWhdMCRA7eiz4zw8KGP1t+3NdFckvZJ6nHZ1J2m3fXnZPajnmLU1719OutviZdTtkmq6EaNn2Sy302SVskWR9++DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGI1HAAAA//9Y7AtD") unshare(0x20000400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xfffffffe, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x26020480) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000700b00000000000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001000000000000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x68, &(0x7f0000000200)}, 0x10) io_uring_setup(0x2f3f, &(0x7f00000003c0)={0x0, 0x5780, 0x40000, 0x2, 0x113}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000000206010800000000000000000300e6050500010006000004000005000a000000050004000000000009000200737b7a300000000010000300686173683a69702c6d616300"], 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x4800, &(0x7f0000000480)={[{}, {}, {@cpuset_v2_mode}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4008400) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c1000003d0007010000000005000000017c00000400fc80041001"], 0x101c}}, 0x4010) 57.028380258s ago: executing program 0 (id=2353): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@nodiscard}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@delalloc}, {@data_err_ignore}]}, 0x1, 0x571, &(0x7f0000000780)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000004c0)={0x8, 'erspan0\x00', {'pimreg\x00'}, 0x3}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8081, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_getanyicast={0x14, 0x3e, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000001000700000000000400030000000000100005000000000020"], 0x24, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) (async) write(r2, &(0x7f0000000000)='3', 0x4e) ioctl$KDFONTOP_COPY(r2, 0x4b72, 0x0) (async) ioctl$KDFONTOP_COPY(r2, 0x4b72, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x78) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (async) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x10, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3010052, &(0x7f00000002c0)={[{@nodelalloc}, {@prjquota}], [{@audit}]}, 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 55.889952976s ago: executing program 0 (id=2378): unshare(0x2c040480) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000001, 0x1c00000000000000}, 0x105103, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1830000001a1c000000000000300"/24], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 54.632460506s ago: executing program 0 (id=2405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x3}, 0x0, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='\b', 0x1}], 0x1}, 0x4048043) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000d0ff00000000000003000004851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000feffffff180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff000000008500000006000000950000000000000079ce7302037bf00c51ff77a4821584fbf8f654d28df9a19dc6d9b7e7e04cb580416a3cecbabac61175920ecd559774bc4a80acca751d97facbde8e762eeb83560d3f58b20531f79da62b799ff8ca6cee2c68"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0001070005000d0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008884}, 0x50) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0x4, 0x8f}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) (async) waitid(0x2, r5, 0x0, 0x4, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000c40)={0x0, 0xfc6, "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"}, &(0x7f0000001c80)=0xfce) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000001d00)) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x4, @empty, 0x3}}, 0x800, 0x6, 0xfffc, 0x0, 0xb23be0fbe66397b6, 0x9, 0x1b}, 0x9c) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtfilter={0xe38, 0x2c, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0xe, 0x1}, {0x1, 0x6}}, [@f_rsvp6={{0xa}, {0x934, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x80000000, 0x7, 0x1}, {0x3, 0x8, 0x1ff}, 0x32, 0x7, 0x4}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xc, 0xfff1}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0x7}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x9, 0x2}, {0x3, 0x96a, 0x4}, 0x6, 0x3, 0x8}}, @TCA_RSVP_POLICE={0x884, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0xffffffff, 0x8a2, 0xc8a6, {0x1, 0x1, 0x5, 0x1ff, 0x5, 0x21f}, {0xb2, 0x0, 0x5, 0x83c8, 0x3631, 0x3}, 0x7, 0x6, 0xfff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x3, 0x2b75, 0xffffffff, 0x7fffffff, 0xe, 0x7, 0x8, 0x1, 0x2, 0xe, 0x7ff, 0x7, 0x5, 0xe7ba, 0x10, 0x8, 0x9, 0x100, 0xfffffffd, 0xbd, 0x3, 0x4, 0x20000000, 0x7ff, 0x76, 0x6, 0x4, 0xffff01b2, 0x6, 0x9, 0x401, 0x4, 0x9, 0xf, 0x7, 0xffffffff, 0x90, 0x0, 0x5, 0x1, 0x7fffffff, 0x6, 0x6, 0xa, 0x7, 0xd, 0x8, 0x4, 0xffffff7f, 0x84, 0x5, 0x85, 0xa6b, 0x6, 0xaba, 0x8000, 0x0, 0xfffffffd, 0x2, 0x1ff, 0x0, 0x80, 0x67080b8c, 0x400, 0x0, 0x0, 0x2, 0x3, 0x6, 0x2, 0x8, 0x3, 0x5, 0x1000, 0x9, 0x5, 0x99, 0x3da, 0x7, 0x0, 0x1, 0x3, 0x9, 0x3, 0x6, 0x101, 0x6, 0xe, 0x2, 0x1, 0xe9d, 0x2, 0xd, 0x6, 0xc, 0x1, 0x9, 0xc, 0x0, 0x2, 0x2, 0x6, 0x8446, 0x8, 0x160, 0x1d2fe522, 0x2, 0x223e, 0x9, 0x1, 0xd, 0xa8d, 0x7, 0x0, 0x8, 0x4, 0x4, 0x6, 0xffffffff, 0x81, 0x80, 0x8, 0x401, 0x800, 0x3, 0x3ff, 0x3624, 0x55, 0x3, 0x8, 0xc, 0x1, 0xfffffff7, 0x9, 0x1, 0x294, 0x4, 0x6, 0x606, 0x1, 0x0, 0x0, 0x6, 0x7fff, 0xd, 0x8, 0x8, 0x5, 0x39d, 0x5, 0x6, 0x5, 0x401, 0x7, 0x7, 0x80000001, 0xfffff251, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6, 0x5, 0xc, 0x6, 0x8, 0x1, 0x0, 0x8, 0xee79, 0xa, 0x4, 0x3ff, 0xdc1a, 0x7, 0x9, 0x1, 0x0, 0x7, 0x9, 0x1, 0x6, 0x5, 0x4, 0x0, 0x3, 0x6, 0x2, 0x6, 0x0, 0x0, 0x2, 0x3, 0x5, 0xffffffff, 0x5, 0x800, 0x1, 0x3, 0x9, 0xe, 0x0, 0xa, 0xffff952b, 0xffffffff, 0x8, 0xffffffff, 0xc0000000, 0x100, 0x8, 0x10, 0x7, 0x9, 0x1, 0x5, 0x3c3, 0x6, 0x2a, 0x6, 0xfffffff7, 0x4, 0x9, 0x2, 0x7, 0x4, 0x5fb, 0x8, 0x8, 0x7, 0x6, 0x4, 0x85, 0x3, 0xc4, 0x4, 0x0, 0x5, 0x6, 0x3, 0x7, 0x46ec, 0x4, 0x3, 0x3, 0x8, 0x2230, 0x80000000, 0xffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x978f, 0xfffff80c, 0x0, 0x9, 0xfffffff9, 0x6, 0x7, 0x7, 0xff, 0x6, 0x1, 0x2, 0x1, 0x3, 0x1, 0x1, 0xc0, 0x7e, 0x2, 0x0, 0x327, 0x400, 0x8, 0xf6a, 0x3, 0x79b, 0x81a0, 0x2, 0x68, 0x29e, 0x9, 0xc, 0x1, 0xffffffff, 0x8, 0x6, 0xffffffff, 0x5, 0x5929, 0x6, 0x100, 0x800, 0xffff, 0x8a4, 0x8, 0x0, 0x5, 0x800, 0x7, 0xace9, 0x6, 0x0, 0x7f, 0x6, 0x2, 0x685a, 0x9, 0x7, 0x80000000, 0x5, 0xfffffffa, 0x0, 0x7, 0x3, 0x3, 0xfff, 0x1, 0x0, 0xbdb, 0x3, 0x1, 0x80000000, 0xd, 0x2, 0x3, 0xfffffff8, 0x8, 0x800, 0x6, 0xfffffffb, 0x8b, 0x9, 0x6, 0x2, 0xd, 0x4, 0x8, 0xcb09, 0xa3, 0x400, 0xfffffff9, 0x3, 0x8, 0x134, 0x1, 0x3, 0x2, 0xffff, 0x5, 0x5, 0x5, 0xe2, 0xfff, 0x3, 0x4, 0x4, 0x3, 0x7ce7a8f7, 0x1, 0x6, 0x8000, 0x3, 0x1, 0x7, 0xd03, 0x94, 0x0, 0x4, 0x10001, 0x401, 0x3, 0x7fe8, 0x0, 0x4, 0x2, 0x7ff, 0x1, 0xffff8001, 0xb, 0x8, 0x0, 0xb7d, 0x1, 0x400000, 0x8, 0xffffffff, 0x101, 0xac2a, 0x3, 0x6, 0x9, 0xfffffffa, 0x8, 0x81, 0x8001, 0x8, 0xf, 0x1, 0xca9, 0x49, 0x7fffffff, 0xfffffff8, 0x80000000, 0x7, 0x10000, 0x8, 0x7, 0xe, 0x8, 0x6f82, 0x80, 0x3ff, 0x8, 0x2, 0xfffffa6a, 0x1, 0x707, 0x400, 0x80000000, 0xfff, 0x1, 0xffffffff, 0x7e4, 0x5, 0x3, 0x5, 0x3, 0x8, 0x3, 0x4, 0x333f, 0xfffff311, 0xfffffffd, 0x2, 0x9, 0x5, 0x6, 0x7ff, 0x6, 0xfffffff8, 0x1, 0x0, 0x8bfe, 0x0, 0x6, 0x428, 0x4, 0x400, 0x2, 0x9, 0x6, 0x6226, 0x4, 0x9, 0x4, 0x80000001, 0xd, 0x101, 0x6, 0x4, 0x101, 0x4, 0xce2, 0x0, 0x8, 0xff, 0xfc000000, 0x0, 0x401, 0x1, 0x5, 0x80000001, 0x38, 0x8c, 0xa, 0x0, 0x9, 0x7ff, 0xde2, 0x9, 0x9a9f, 0x8, 0x1, 0x40, 0x1, 0xc8, 0x7, 0x384c, 0x5, 0x9e02, 0x0, 0x4, 0x3, 0x2, 0xc1, 0x0, 0x4, 0xf, 0x9, 0x8, 0x10, 0x5, 0xd279, 0x32, 0x8001, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4e9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0xfff2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x7, 0x6}, {0x1000, 0x8001, 0x3dd1d8f5}, 0x5c, 0x9}}, @TCA_RSVP_POLICE={0x18, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x962}]}]}}, @f_tcindex={{0xc}, {0x440, 0x2, [@TCA_TCINDEX_POLICE={0x42c, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x6, 0x2, 0x4, 0x9, 0x8770, 0x3, 0x101, 0x800, 0x7ff, 0x800, 0x40, 0xa, 0x800, 0x8001, 0x9, 0x3, 0x7fffffff, 0x136, 0x8, 0xffffffff, 0x5, 0x9, 0x3, 0x4, 0xef37, 0x4, 0x401, 0x3, 0xb1, 0x0, 0x7, 0x2, 0x4, 0x6, 0x9, 0x3, 0x7, 0x10001, 0x2, 0x4, 0x0, 0x8, 0x101, 0x9, 0x3, 0x7, 0x217, 0xfffffbff, 0xc0, 0x21, 0x0, 0x3, 0x3, 0x2, 0x5a79, 0x9, 0xf2, 0x4, 0x2, 0x7, 0xfffffffc, 0x100, 0x1, 0x2, 0x6, 0x2, 0x8, 0x4, 0x1, 0x2, 0x6, 0x2, 0x8, 0x4772a82d, 0x7, 0xcd9, 0x4, 0x5, 0x8001, 0x10000, 0x80000000, 0x3, 0x8, 0x3, 0xca1, 0x62, 0x401, 0x800, 0x9d1, 0xfffffffd, 0x8, 0x4, 0x2800000, 0x7, 0x3, 0x5, 0x181, 0x100, 0x1, 0x3, 0x5, 0x1, 0x8, 0xd, 0xfffffff2, 0x9900000, 0x9, 0x3, 0x80, 0xfffffff7, 0x3, 0x8, 0x3, 0x5, 0x5, 0x400, 0x5, 0x7fffffff, 0x2b, 0x7fffffff, 0x5, 0x4, 0x6, 0x6, 0x4, 0x9, 0x401, 0x9, 0x9, 0x7, 0x0, 0x7, 0x4, 0x0, 0x9f71, 0x12000, 0x2, 0x8, 0x7f, 0x5, 0x5, 0x9, 0x2, 0x101, 0x4, 0xa4, 0xf, 0x4, 0x2, 0x8, 0x9, 0x6, 0x200, 0x8, 0x0, 0x182, 0x6, 0xfffffffe, 0x7, 0x4fa25417, 0xff, 0x7, 0x9, 0x6, 0x8, 0x1d, 0x9, 0x3ee4, 0x1, 0x80000001, 0x4, 0x1, 0x8, 0x0, 0x1, 0x5, 0x1, 0xc, 0x5, 0xe232, 0x1, 0x1, 0x40, 0x401, 0x2800, 0x0, 0x6fa9, 0x81, 0xb1, 0x7fffffff, 0x2, 0x6, 0x7, 0x1, 0xfffffffa, 0x7, 0x7ff80000, 0x6, 0x8001, 0x7, 0x4, 0x2, 0x14, 0x80000001, 0x7, 0x6869, 0x1, 0x1, 0x7, 0x1, 0x100, 0x80, 0x7, 0x6, 0x4, 0xa10, 0x10, 0x3, 0x3, 0x2, 0x7, 0x6, 0x8, 0x6, 0x10, 0x8, 0x1000, 0x8, 0x9, 0x40, 0x6, 0x1, 0x5, 0x3065, 0xaec8, 0x8, 0x2008, 0x5, 0xfffffff9, 0x3, 0x7, 0x8, 0x5, 0x7, 0x6, 0x0, 0x8, 0x4b82, 0x400, 0x4f74, 0xf6ba, 0xe8, 0x1000, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff8001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xcd61}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x50c6}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}]}}, @f_rsvp={{0x9}, {0x44, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x5, 0x10001}, {0x8001, 0x3c, 0x4}, 0x1d, 0x9, 0xc}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x6, 0x5}, {0x5226, 0x5960, 0x9}, 0x84, 0xc, 0x1}}]}}, @f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf}}, @TCA_RSVP_DST={0x8, 0x2, @rand_addr=0x64010101}, @TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xc}}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}]}}]}, 0xe38}, 0x1, 0x0, 0x0, 0x4}, 0x44000) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x56, 0x0, 0x0, 0x5}, 0x28) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000080004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001"], 0xfc}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) (async, rerun: 64) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000440)=""/59) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000102, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) 54.49482293s ago: executing program 33 (id=2405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x3}, 0x0, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='\b', 0x1}], 0x1}, 0x4048043) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000d0ff00000000000003000004851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000feffffff180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff000000008500000006000000950000000000000079ce7302037bf00c51ff77a4821584fbf8f654d28df9a19dc6d9b7e7e04cb580416a3cecbabac61175920ecd559774bc4a80acca751d97facbde8e762eeb83560d3f58b20531f79da62b799ff8ca6cee2c68"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0001070005000d0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008884}, 0x50) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0x4, 0x8f}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) (async) waitid(0x2, r5, 0x0, 0x4, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000c40)={0x0, 0xfc6, "0740bcf0a101bd1459b253f22e01cc3a487dfb3bdcf046a427183f3216d73d3892a6375049837df7e34d85d5b4be26ff403204f4b74088062c7a9cc21a00ec52d4a83df2f63ef5aaa0c6cc0af0f106fc5d09c839b2b1f6736c9c5d79056cc60525699a4b6e8e59319c6a26907a9687165e72668d4cdeeac7be02663638a7cdce09316748b4e258980fe5e7afb9ba22332a65fe9e13a7a4bc0f3f951ce915d0f224245ee24491cbf02928366046faae17860eea86faedc959d8395b061a58f514a160f0a4d70151194c26a755b4037b808346d5739a80afd769233da51a2c08c25a64ffdc68772c0b7612017bbe05435582a1b51d6c103c5abc4761a7a3662fe8d21d7e32d5091fe557ddfde4857b7573691a7b5e120b31bf2580ff0adec09520c09bdcb6ce67a7e3b4bfb45bed6e216d9335f7bd67bdb55ca8130fd7fd2d221263d28f1223bcfda359363be9ef58c5d470273c6f139fe78ea46eae090d1f337b680a39d34e7c9f413ad99c3990f178718d79bedfa8227553113cdca6c5a4260abcca97e4a1cca573e40fec7cd2569dc20027303cb1ef1278b531b8aee97b969eea1aec68e636c4a192603bc292b1024999ab5027ddad9ba252484a6f17f71d08fd83fdd4bc6fb56e8d419c220550e08c6a8bd85beb381b2a56fae294aac1968d6543ba289f63f641b57ba25ebbfe0b4e132f318ee67f488d5c630ed0cc441293f588f6eb5b6942ce008045d3340613c903a08c1ccf004dcbcf58c346d89a47ea9f864a2db3caa77fcc247abcd26d8c0ff9d9e54b40c67239a5d7f2e82c86aa82d1478b84dadea76b7d399009439d4563c05a78c8b8a453be645a96594e8d0fcd152c17dd70d0b34141f760dc0ad95a7bf9644515c49520c65a790cb211cd290b17c4ca0863261a58a096129164eca3673dc1bf4e242ad2d2ed80d1077cbfa8716b3e19267aa69ab33f823ca89ff078f4a8b2549f1adca9313df0d9402f59b727b234f6bfb536df380c78d8c5069e0d7c7b63114ab2a7377370f377d4c9d31eeabed1d48d3d44d02b0f3ea99b4eccf4c0f263e1ced0431f05804a988b738bf1307271117620b27071b692c355ca7a5c99a1e00ff1d925c21b075c87602b2a1ab42af345631d21199af277ad784a541bcb3174fae4ad63a210a30aca94e9da30e674f9b64dc36cd2e84ba652b1ee6fdb2d238765f795163964b2dee1346f738617813f8d4dd2d78aaa9b613e1bd5c40078e7908b29e8a290d8c140023f9da0fa1a17d51a147c6c78d5860ed5fa21323bbd400e8131c61882c36baf6e0fbe86ff0739ccd3e20b21ce2c092869c15f42941899a7ad2dc662353e21ed8b4ac7d36be1fee186a21bba1ee40bda296932a7ca44a171139fe22b8af074e91e9e692da9ca471247b217581a1b825d704a2a66951f11ee0e857c50bd865dc8ec9317e56bdfdadfccc70494e4b166bc0d2b3d75d58adbc399ef23bb54c2ba0002db4ce783591c9fb5cb608e934f5ca47e8db00bb6853f024e309b394c7094d40b5839e0e2800eec9d9947a3a4588c45688592f5294315a5879dcd0cfa2e4c5a771ff50103d1b61a72c061d8e53ae4f8b2153a823d89b80d5b5c4d1fa259025fa717b51cae9fff32bd3ef48f225dfd3bfdd4ac29b0f4f4fc215bdaeea51dac79f70181ccb50c05cc935c0f6d8400fcfcb9b1ad03eabf62b1958b875ee032869f82b84e6f0fa945b0841efe79a3773682ca9623224e654544f74b373c80785d178c3b375bb2e1086b7976c5fc832b87867a828a0d94e68b06616bdcea2a089b5464ed0ad3d8015d2b15892c1603fc0899708b8390da13922e7fe6a4aec622a240fd3d84f49d88bfd1834e2603f4613a92c508795a63ffbd2eea677298020343d4784760cef6745713908c756c645cae3e705a242ea0d5e4f0ba6ddc67a925a324d0dc1183259cb5271ba74f3d7db0c00fb04199529aa4b2c60b4ce624f3ec966c58dd405537677cfd71797e67b995d1b0d7f16cd1e8df14f9166ba1979fc567c7cfe7aedd0f24edab4ae4c8acd7f0c4fe2ae5715df9d8946ac4287349d236dfdd312825331b6bfeefff676211087b93c5bb577c4fe7f739d0d96cc08f5264b838c167361e3d653b605873b7af1107873312ae6d7219f3f08a9c408f48c0efdbf59638098914cdb35fe96c8daa1634310515c42f9eeb71a80b59dbeb625525ea93e3385eef71d8f518d19aa0c392d1fdccaa2fe44e383efad3716579b1f3694b59302f352325ab1105e001c08db38560b41fa3aef6ed076365990cdd32f2c2249bd187408f0d7bb4b0b8be02c11910e1b14f0e52e60e015f4e163f63a4ff38b1c3ebfd291dacb74467916cda7973509014f908e9f6da766acb2e0db2cad74e69dc0811d24e51f7cbb1925e0f46f02b0bd04c62ddd82025ca754817f0c3db244b3c1d20e6742eb0f3062b25005883b62e91f36bab62bcd3795a4c4d87056a0bdb3bdd70742aefe729f70ecefce3ec50a0b60d6e91e71331625cbb33625ccdbd817e34937a237f1ec083e6acae1349bdec94a7443cf349767f48ea70ca6edd9dd3b3bd64333e4830222d2957558ed98ca7b429075aad54b71cec6308d7213bf0e98907e18b973040aa74493662fddd7bf0c5dbbb3cc909b1b17271bdeceb964edac5a1297687f74b3378efc622e12efa5c942755171aa39faa33965d6dc8e3bb50dfeed402ef6fced3e29c3d4258053aca76cb64578d1c6ae52ecf0404dd7db725095c5ad7df6b318afa58a3791727868cd9372c3f722335e7851f6fc5b96b9350dbac5ee60374d64ce61c97556e739c34fb7db7738019e176fe521149f4451a23866f33c1e2c938d1ead3cab4419a3cbbb22d49415c0a03e14063b0659ca854176f9dbc4ba10c00dcad4184e03a4d92bcac63a6f073fc138884ac59f6804a289b1ebdcc77575f47667eb04d81d3ea71638e0b3ab31b368101fc9aeae7a8f392c5691b60269713901775601bb8e829c224fb377453a48a20ca47b4d97f22edb87087fee5445196bd109bdfff68021fc754ef89d0c862f9a0568c54da287806188e3fcc864589f399b87bce3720009ae087fa0ed2233a2e69a1444816ee36c15093fba601887d382e6fc6308f92b862de6b44ad0b50c5e7ce97230735d66bd94b215e6178bc4dedd8e6a0442230dfc94d44a0e9fe45f504d4246225803c55a6255f1ff9a7d51f375e48076b2d8abd45d52f1c8f592a9b583404fff785958c8f0419c4c3ff989354d5b5739e73f655c8b32464d27b946cc6d67625c53247bb5e98cedacc491a1e23ef1ab3aaadb17a3778ba8e89682e332bd8a1b2cb3753ecdfc5ac40ff8064a2025f790fca96cdd3f89348d2d7ad4839c875ecd3a8c27786a6aa41588eb298d2c24ba4b1f462edc9dfda4d17cb3ad88dc81506fb0caa6d46a0f27b1254bc0f10931bcd80e4a9690204aecdb84726339a4010861c84a5595bf1836a8edc996a537bd8ddeb7baa14ccb1b2166fb7e2ca912feaa1e1831c7a28073ca30d6e239247101a4786e92917046635df48b3799360ed980c7dfdb2eb149a1a2c3274ecedb4c3d7b7c1a068d8428f719c2a845034f18a1c8d180c700b07756adf8c77663895cde22e5ca3709dbc121bdd50f10372bbc93c5bd4e3642c62e9188fd0c3b87e084212bc92bd1aa1bb5792944c913fca340099ed6dc4f3a1f6945afe29c24b4af86cfdc2757c7f78ee289a77da8a41dd6fa6e49fddc0303376280f03e68e234e543aa5222e5789fcc4186356a4fe7e2594e64acf500aeae237f17af80ae4439237d52e94b6498d7d57b70381864c07d745929417676bcb525c94c917e9196ebd472a5785e6373d8e821e157ea203303df573452091c4facd018522391454fc34614f408580e0ec1f9aef5b2c2cdd37868be767a79c6112a21e1df575accef90286f9a613dbb41db285f522153a0597261b1d641cffd88f9f9a92236d422b0cce6d20fae2bda79e286de5e0af8c97c72b20646406359279dc7707337a3fc9ad516094afdca0f71343f6af2db879cf08ae82dc6775e213f96f48e0b6b18df3665f019248a1599a4fb1e6ccc4778e82ede6a32d71fcbafb110b08f2425e3bda22d531445b573d50b686fb2a4c74d561228f142bb0cbe7609e445b5de73d23ee199d498300fe79fdbc6419afac0982731376be0f77e05fee9c7a5d1c63448106b1aadaa50ca4e2fe399f4af0dd9bef9661a786bd162a2ea9aec3352d606e0d549b03004017f714f4b2c3acdbd239054f2d8afc77553b922b4d32c08c6b6d81e9ed4819a7b5e88b45cb14a6cceaadbdd30293429680c298810e79a40860b1f1d46feba1f4fb5097a9ec5b504ca9922525f69dfd57c1db66da22c62faa89ed1db0290e3c3bacebf05faa7e43ade77c2eb85c0e3ff8a12cda52e228de10dc602d65bcbc725a9328154beb3bffba7ce135de2858ea1e1f60aec9a6572651ab50eef4bb82b3855bcda02b98ce1e24d092503f4cde9e6da0303ba27c196f14b91d378edf2bd227e8438802025a9cedf233cf63b94d9de3716dc26d9fb3f974aed6cccdbd0be3bbd2ec5ddf678aa3f7943ecfc2e32050be44e9641332afc75af3c32a12e4b6e22cdf4582b7a673dc9984056d8c7a2fe94b0f6801fed6eab527d4dd1d48e2645f2b0b0c841fa9a5e9c40ef1b988c133dbaebf1d54579828a970e4d3c62b9149bd9a1c67fad50f9098b98702b42112645ee7148c149276eee07286bde6215958ed3edd42bb53fabcb68ad7b6cb5536b5f6a3e2484c0202c89b3823944a27bae308e50b7ce1f705671d01261765c58cd8dad6769300a4ea86ce2228bf0d41ad9578e401dd084cf2133d070038e7b520dce7188c9160190710d5529e0f5cfd91ac734e4a40274ee673c99dcd33ec3f3c6208399cca5781724a3a539e802736c3bbdfe685ca08121e867fbeeb3c58b9b3603854b88ce76feb707de556d018f2981565ac1682391b992dda13cec9254ca2f9e193f7c7a520fc01d1c3d7a7f38629c4b3e9498966be63f09a6231565030bfa074d70c6bfb219a06c14d098ff86b339cd8e752a11c8df6e218870cd46928d31706d4c54b10a99845bdf8279457502412a476de2880c75523cab2ac8b0d13ab56cf427a6f6d0985ba4921f8589fb99d4f5cac8c6e8e1717a89586e5e1674dbafd7988a7a3fdef71a9707db217ebd5b02dcdd5260e3cedff3bd277b54de403dfabed3abf68b72b1321bec6f41ee811c45c1794037cf10a974bbdbdceccc7b80cd0a4147b24930a76c584a5fdfa98a8fcafbd9b62b11643bd7204b734d45f4f8faddaff473394ae6944d72b0eda31143c67e6942258b8803d09944d78a60f64d0368205dc5125b63409429331065705787520cad67fcaa77b99eec3f7a60aadd4c7a724570cf605715d644838fd230e3ca25c47c4694a63ac3dfe568bd852dc8b835a1dd1b6b44e3dbd3c0b4a36e74edeb644e6194702b71c75de41fd9520d1800d5eb4dfe02757b10b4b9e90cad3ef780b81db4fff8f16ae6f7e5813b1e161ec78fd1bc9e0c52640c0197a5aac0cf896779796efa2790d800963f7806739fe3a0f14e1623ba0b3dbe0ae59359c6e3d5bcce9cb7c7bbbb2e8caac967cc0731ec6bb00fadd507ef3d33383e15119f4819c14b5b0905d1c997194c6aabc63bf2481d685342e635600c98b942c7641150ce50791dbdc508086c2a64b"}, &(0x7f0000001c80)=0xfce) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000001d00)) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x4, @empty, 0x3}}, 0x800, 0x6, 0xfffc, 0x0, 0xb23be0fbe66397b6, 0x9, 0x1b}, 0x9c) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtfilter={0xe38, 0x2c, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0xe, 0x1}, {0x1, 0x6}}, [@f_rsvp6={{0xa}, {0x934, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x80000000, 0x7, 0x1}, {0x3, 0x8, 0x1ff}, 0x32, 0x7, 0x4}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xc, 0xfff1}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0x7}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x9, 0x2}, {0x3, 0x96a, 0x4}, 0x6, 0x3, 0x8}}, @TCA_RSVP_POLICE={0x884, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0xffffffff, 0x8a2, 0xc8a6, {0x1, 0x1, 0x5, 0x1ff, 0x5, 0x21f}, {0xb2, 0x0, 0x5, 0x83c8, 0x3631, 0x3}, 0x7, 0x6, 0xfff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x3, 0x2b75, 0xffffffff, 0x7fffffff, 0xe, 0x7, 0x8, 0x1, 0x2, 0xe, 0x7ff, 0x7, 0x5, 0xe7ba, 0x10, 0x8, 0x9, 0x100, 0xfffffffd, 0xbd, 0x3, 0x4, 0x20000000, 0x7ff, 0x76, 0x6, 0x4, 0xffff01b2, 0x6, 0x9, 0x401, 0x4, 0x9, 0xf, 0x7, 0xffffffff, 0x90, 0x0, 0x5, 0x1, 0x7fffffff, 0x6, 0x6, 0xa, 0x7, 0xd, 0x8, 0x4, 0xffffff7f, 0x84, 0x5, 0x85, 0xa6b, 0x6, 0xaba, 0x8000, 0x0, 0xfffffffd, 0x2, 0x1ff, 0x0, 0x80, 0x67080b8c, 0x400, 0x0, 0x0, 0x2, 0x3, 0x6, 0x2, 0x8, 0x3, 0x5, 0x1000, 0x9, 0x5, 0x99, 0x3da, 0x7, 0x0, 0x1, 0x3, 0x9, 0x3, 0x6, 0x101, 0x6, 0xe, 0x2, 0x1, 0xe9d, 0x2, 0xd, 0x6, 0xc, 0x1, 0x9, 0xc, 0x0, 0x2, 0x2, 0x6, 0x8446, 0x8, 0x160, 0x1d2fe522, 0x2, 0x223e, 0x9, 0x1, 0xd, 0xa8d, 0x7, 0x0, 0x8, 0x4, 0x4, 0x6, 0xffffffff, 0x81, 0x80, 0x8, 0x401, 0x800, 0x3, 0x3ff, 0x3624, 0x55, 0x3, 0x8, 0xc, 0x1, 0xfffffff7, 0x9, 0x1, 0x294, 0x4, 0x6, 0x606, 0x1, 0x0, 0x0, 0x6, 0x7fff, 0xd, 0x8, 0x8, 0x5, 0x39d, 0x5, 0x6, 0x5, 0x401, 0x7, 0x7, 0x80000001, 0xfffff251, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6, 0x5, 0xc, 0x6, 0x8, 0x1, 0x0, 0x8, 0xee79, 0xa, 0x4, 0x3ff, 0xdc1a, 0x7, 0x9, 0x1, 0x0, 0x7, 0x9, 0x1, 0x6, 0x5, 0x4, 0x0, 0x3, 0x6, 0x2, 0x6, 0x0, 0x0, 0x2, 0x3, 0x5, 0xffffffff, 0x5, 0x800, 0x1, 0x3, 0x9, 0xe, 0x0, 0xa, 0xffff952b, 0xffffffff, 0x8, 0xffffffff, 0xc0000000, 0x100, 0x8, 0x10, 0x7, 0x9, 0x1, 0x5, 0x3c3, 0x6, 0x2a, 0x6, 0xfffffff7, 0x4, 0x9, 0x2, 0x7, 0x4, 0x5fb, 0x8, 0x8, 0x7, 0x6, 0x4, 0x85, 0x3, 0xc4, 0x4, 0x0, 0x5, 0x6, 0x3, 0x7, 0x46ec, 0x4, 0x3, 0x3, 0x8, 0x2230, 0x80000000, 0xffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x978f, 0xfffff80c, 0x0, 0x9, 0xfffffff9, 0x6, 0x7, 0x7, 0xff, 0x6, 0x1, 0x2, 0x1, 0x3, 0x1, 0x1, 0xc0, 0x7e, 0x2, 0x0, 0x327, 0x400, 0x8, 0xf6a, 0x3, 0x79b, 0x81a0, 0x2, 0x68, 0x29e, 0x9, 0xc, 0x1, 0xffffffff, 0x8, 0x6, 0xffffffff, 0x5, 0x5929, 0x6, 0x100, 0x800, 0xffff, 0x8a4, 0x8, 0x0, 0x5, 0x800, 0x7, 0xace9, 0x6, 0x0, 0x7f, 0x6, 0x2, 0x685a, 0x9, 0x7, 0x80000000, 0x5, 0xfffffffa, 0x0, 0x7, 0x3, 0x3, 0xfff, 0x1, 0x0, 0xbdb, 0x3, 0x1, 0x80000000, 0xd, 0x2, 0x3, 0xfffffff8, 0x8, 0x800, 0x6, 0xfffffffb, 0x8b, 0x9, 0x6, 0x2, 0xd, 0x4, 0x8, 0xcb09, 0xa3, 0x400, 0xfffffff9, 0x3, 0x8, 0x134, 0x1, 0x3, 0x2, 0xffff, 0x5, 0x5, 0x5, 0xe2, 0xfff, 0x3, 0x4, 0x4, 0x3, 0x7ce7a8f7, 0x1, 0x6, 0x8000, 0x3, 0x1, 0x7, 0xd03, 0x94, 0x0, 0x4, 0x10001, 0x401, 0x3, 0x7fe8, 0x0, 0x4, 0x2, 0x7ff, 0x1, 0xffff8001, 0xb, 0x8, 0x0, 0xb7d, 0x1, 0x400000, 0x8, 0xffffffff, 0x101, 0xac2a, 0x3, 0x6, 0x9, 0xfffffffa, 0x8, 0x81, 0x8001, 0x8, 0xf, 0x1, 0xca9, 0x49, 0x7fffffff, 0xfffffff8, 0x80000000, 0x7, 0x10000, 0x8, 0x7, 0xe, 0x8, 0x6f82, 0x80, 0x3ff, 0x8, 0x2, 0xfffffa6a, 0x1, 0x707, 0x400, 0x80000000, 0xfff, 0x1, 0xffffffff, 0x7e4, 0x5, 0x3, 0x5, 0x3, 0x8, 0x3, 0x4, 0x333f, 0xfffff311, 0xfffffffd, 0x2, 0x9, 0x5, 0x6, 0x7ff, 0x6, 0xfffffff8, 0x1, 0x0, 0x8bfe, 0x0, 0x6, 0x428, 0x4, 0x400, 0x2, 0x9, 0x6, 0x6226, 0x4, 0x9, 0x4, 0x80000001, 0xd, 0x101, 0x6, 0x4, 0x101, 0x4, 0xce2, 0x0, 0x8, 0xff, 0xfc000000, 0x0, 0x401, 0x1, 0x5, 0x80000001, 0x38, 0x8c, 0xa, 0x0, 0x9, 0x7ff, 0xde2, 0x9, 0x9a9f, 0x8, 0x1, 0x40, 0x1, 0xc8, 0x7, 0x384c, 0x5, 0x9e02, 0x0, 0x4, 0x3, 0x2, 0xc1, 0x0, 0x4, 0xf, 0x9, 0x8, 0x10, 0x5, 0xd279, 0x32, 0x8001, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4e9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0xfff2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x7, 0x6}, {0x1000, 0x8001, 0x3dd1d8f5}, 0x5c, 0x9}}, @TCA_RSVP_POLICE={0x18, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x962}]}]}}, @f_tcindex={{0xc}, {0x440, 0x2, [@TCA_TCINDEX_POLICE={0x42c, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x6, 0x2, 0x4, 0x9, 0x8770, 0x3, 0x101, 0x800, 0x7ff, 0x800, 0x40, 0xa, 0x800, 0x8001, 0x9, 0x3, 0x7fffffff, 0x136, 0x8, 0xffffffff, 0x5, 0x9, 0x3, 0x4, 0xef37, 0x4, 0x401, 0x3, 0xb1, 0x0, 0x7, 0x2, 0x4, 0x6, 0x9, 0x3, 0x7, 0x10001, 0x2, 0x4, 0x0, 0x8, 0x101, 0x9, 0x3, 0x7, 0x217, 0xfffffbff, 0xc0, 0x21, 0x0, 0x3, 0x3, 0x2, 0x5a79, 0x9, 0xf2, 0x4, 0x2, 0x7, 0xfffffffc, 0x100, 0x1, 0x2, 0x6, 0x2, 0x8, 0x4, 0x1, 0x2, 0x6, 0x2, 0x8, 0x4772a82d, 0x7, 0xcd9, 0x4, 0x5, 0x8001, 0x10000, 0x80000000, 0x3, 0x8, 0x3, 0xca1, 0x62, 0x401, 0x800, 0x9d1, 0xfffffffd, 0x8, 0x4, 0x2800000, 0x7, 0x3, 0x5, 0x181, 0x100, 0x1, 0x3, 0x5, 0x1, 0x8, 0xd, 0xfffffff2, 0x9900000, 0x9, 0x3, 0x80, 0xfffffff7, 0x3, 0x8, 0x3, 0x5, 0x5, 0x400, 0x5, 0x7fffffff, 0x2b, 0x7fffffff, 0x5, 0x4, 0x6, 0x6, 0x4, 0x9, 0x401, 0x9, 0x9, 0x7, 0x0, 0x7, 0x4, 0x0, 0x9f71, 0x12000, 0x2, 0x8, 0x7f, 0x5, 0x5, 0x9, 0x2, 0x101, 0x4, 0xa4, 0xf, 0x4, 0x2, 0x8, 0x9, 0x6, 0x200, 0x8, 0x0, 0x182, 0x6, 0xfffffffe, 0x7, 0x4fa25417, 0xff, 0x7, 0x9, 0x6, 0x8, 0x1d, 0x9, 0x3ee4, 0x1, 0x80000001, 0x4, 0x1, 0x8, 0x0, 0x1, 0x5, 0x1, 0xc, 0x5, 0xe232, 0x1, 0x1, 0x40, 0x401, 0x2800, 0x0, 0x6fa9, 0x81, 0xb1, 0x7fffffff, 0x2, 0x6, 0x7, 0x1, 0xfffffffa, 0x7, 0x7ff80000, 0x6, 0x8001, 0x7, 0x4, 0x2, 0x14, 0x80000001, 0x7, 0x6869, 0x1, 0x1, 0x7, 0x1, 0x100, 0x80, 0x7, 0x6, 0x4, 0xa10, 0x10, 0x3, 0x3, 0x2, 0x7, 0x6, 0x8, 0x6, 0x10, 0x8, 0x1000, 0x8, 0x9, 0x40, 0x6, 0x1, 0x5, 0x3065, 0xaec8, 0x8, 0x2008, 0x5, 0xfffffff9, 0x3, 0x7, 0x8, 0x5, 0x7, 0x6, 0x0, 0x8, 0x4b82, 0x400, 0x4f74, 0xf6ba, 0xe8, 0x1000, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff8001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xcd61}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x50c6}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}]}}, @f_rsvp={{0x9}, {0x44, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x5, 0x10001}, {0x8001, 0x3c, 0x4}, 0x1d, 0x9, 0xc}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x6, 0x5}, {0x5226, 0x5960, 0x9}, 0x84, 0xc, 0x1}}]}}, @f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf}}, @TCA_RSVP_DST={0x8, 0x2, @rand_addr=0x64010101}, @TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xc}}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}]}}]}, 0xe38}, 0x1, 0x0, 0x0, 0x4}, 0x44000) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x56, 0x0, 0x0, 0x5}, 0x28) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000080004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001"], 0xfc}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) (async, rerun: 64) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000440)=""/59) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000102, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) 4.757451386s ago: executing program 6 (id=3031): socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x70060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0xecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) ptrace$cont(0x19, 0x0, 0xffffffffffffffff, 0x274b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000d40), 0x104ac1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket(0x11, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000002080108000000000000000001000003d2fec259335c0b44e4fe4219bfe997df535d61523f00ed70ecfef093210966"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc843) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0x7ff, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = fsmount(0xffffffffffffffff, 0x0, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002a40)={&(0x7f00000002c0), &(0x7f0000000500)=""/148, 0x0, &(0x7f00000029c0)="4a7a154b3b8ca69c16adeec43764cf53282c5616adca185a54cb", 0x7, r3}, 0x38) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a9040000002ee00000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 4.554454371s ago: executing program 6 (id=3035): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0x5, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0x42d4, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x400007f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x6}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0xffffffff, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4004, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x5, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x5, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0xffffffff, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x12f, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x6, 0x130, 0x0, 0x3, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {0x300}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 4.423829023s ago: executing program 6 (id=3036): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1600000000000000b40000007f"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cf9000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000790057ed0000000018000000190000000000000000000000950020000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x18}, 0x94) r3 = syz_io_uring_setup(0xd00, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r6 = msgget(0x2, 0x400) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001480)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000001580)=0xe8) stat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() getresgid(&(0x7f0000001680)=0x0, &(0x7f00000016c0), &(0x7f0000001700)) r11 = gettid() msgctl$IPC_SET(r6, 0x1, &(0x7f0000001740)={{0x1, r7, r8, r9, r10, 0x20, 0x3}, 0x0, 0x0, 0x3, 0x800, 0x4, 0x138, 0xfffffffffffffffd, 0x8, 0x8, 0x6, 0xffffffffffffffff, r11}) r12 = memfd_secret(0x0) ftruncate(r12, 0x51a9497) syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r12) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x1000) syz_io_uring_setup(0x656f, &(0x7f0000000080)={0x0, 0x8b37, 0x20, 0x200000, 0x51, 0x0, r3}, &(0x7f0000000100), &(0x7f0000001440)=0x0, &(0x7f00000013c0)) syz_io_uring_complete(r4, r13) preadv(r2, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/213, 0xd5}, {&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4, 0x200, 0x4) r14 = socket$inet6(0xa, 0x80002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) setsockopt$sock_linger(r14, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r14, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r14, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000008100000000ff80000000000014"], 0x30}}, 0x0) 4.323182926s ago: executing program 6 (id=3037): creat(0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x125d, &(0x7f0000001080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c0000000206010400000000000000000700000014000780080011400000000005001500810000000500010006000000050005000200000005000400030000000900020073797a30000000000d"], 0x5c}}, 0x20004000) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f00000002c0)) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbff, {0x1, 0x10, 0x8, 0x7, {0x4e24, 0x4e20, [0x3, 0x31, 0xffffff01, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0xde, 0x7fffffff]}, 0x10002, 0x6}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048090}, 0x40040) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r7, &(0x7f0000000a00)='1\x00', 0x2) syz_io_uring_setup(0x6909, &(0x7f0000000340)={0x0, 0xfffffffd, 0x2, 0x3, 0x247}, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000000)) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) 4.047677583s ago: executing program 6 (id=3038): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=ANY=[@ANYBLOB="540100001a00330665bd7000fbdbffffffff14aa0000000000001000000000000000cca1fe8c0000000000000001004e2300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000002000000003200000000000000000000000000ffffe000000223030000000000000100000000000000070000000000000001040000000000000b00000000000000000400000000000006000000000000200000000000000000000000000000000000000000010000000000000000000000fffffffffffffffffbffffff0300000009ca000025bd70000235000002000400090000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020"], 0x154}, 0x1, 0x0, 0x0, 0x44000840}, 0x804) 3.808449498s ago: executing program 6 (id=3040): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0xa84053c42c89434b, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000110000d2328bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.221427463s ago: executing program 3 (id=3045): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0xb8}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x9, 0xbe, 0x1, {0x22, 0xf2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x81, 0x4}}}}}]}}]}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x116078, 0x0, 0x0, 0x3, 0x6, 0x8001, 0xf}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x22105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x20004080) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x30, 0x1, 0x0, 0x3, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xd1ec429b5ab78f3e}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x4020005, 0x0, 0x0, 0x0, 0x0, 0x200000102ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) 2.92378671s ago: executing program 2 (id=3047): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000700ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000d80)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0xffffffffffffffce) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x8000003, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0x5ee, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f00000000c0)=@ethtool_eee={0x1, 0xfffff019, 0x4, 0xd, 0x5, 0x10001, 0x401, 0x9, [0x9, 0xfffffffd]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x40000c0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0x3}, 0x10c0e8, 0x0, 0x7, 0x4, 0x5, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3000003, 0x10, 0xffffffffffffffff, 0xfffff000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x1b8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_PAYLOAD={0xa0, 0xa, "f9e838ade358eb6a6ed2e32fd02841f0236e3d3408c3515d5c7329cf74fb34c211dd331a6c13435cb9c0ae1ca714c908783757b20b65c2cdb5cb8b25ee6789ac7a3708fd436dd28d80104f9e064d569349acec7b84242653044a2019d4704620c3bf61ff37c5d22f7ec0d5620a0fab8957c44d713db4777b1505fdeb98c33e15f7270cd36ca57cb8a6504b2211afd67960d54b8a31d20fead05c6ec8"}, @NFQA_EXP={0x2c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}, @NFQA_CT={0xb4, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x800}, @CTA_STATUS={0x8}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_PROTOINFO={0x64, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x60, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3b}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3ff}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xef}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xffffffffffff1d03}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x10}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x4}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x8}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r6 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x104) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r6, 0x0) read(r6, &(0x7f0000000080)=""/221, 0xdd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00200400020000002c0012800b00010067656e65766500001c00247ac68675e833a8000000000000000000000000000004000600"], 0x4c}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.787050133s ago: executing program 2 (id=3048): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x20000000000, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000400000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 2.692235245s ago: executing program 2 (id=3050): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a0104f4000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a010400000000000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 2.692014936s ago: executing program 2 (id=3051): socket$key(0xf, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x1fffffffffffffce, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b700000100000000850000000600000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000017000703000000feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000002000000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b500feff000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a0deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a4dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737371cdf8f681dd7a2685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52d9870cdfb950b139625fa88f5c9088fc9032a5ea07415029c74354f54e37427a4b26e559cd240b7950630d7d4da9cb8d256356bee8c827db43313e75da9c36d0f7bef4fcf23469d8c9104a917959c3bc791a54d1882f532d2597ff50d4a10fe3b80a3d67d3c3dca0dfe0e4eb039df7480542f841313ad2ec26fe7d03829f80c6f3e028d2f4495c3c523929b203048ac9ba20b012c005e36b93eb5a02768503c6c41f50d2a04999bba560f86c7c9a78e4b337983cbdb5d71be3090208a1f7eaa3edc840ea0da5f4cc01f3e87c7566176981a738bcd4dd8b8a137e7a15e57054ebf1d9ba227361be11a7d155054e154364041468e6268ea23e74eacbb5200e2d8f8919402ca20794a29dd986c6593d47b47d5cd70153908a77039a995a44e960ad037f4d2569751eea3ae70fc49f32c30d6be0594bfda189f0be84d1eaf70e0e90223a3c97ade9973e9219c5a2e1c68efe6adf744710eb0ad8e555be26855496bc6b5e13078380230728b1862f0d93397b88ebf5197b61d27b6c555502aed27d2f2b127aeeae41dd4324fad2e7a962"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth1\x00', 0x8001}) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000002c0)=""/154, &(0x7f0000000380)=0x9a) 2.551120839s ago: executing program 3 (id=3053): socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000d3b000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000b02000/0x3000)=nil, &(0x7f0000a46000/0x1000)=nil, &(0x7f0000bcd000/0x3000)=nil, 0x0}, 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x52, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) socket(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a00000002100010000000000feffff0000000000000000000000000001fe80000000020000000000000000001d4e210080000100000a00e080ff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000500300000011e000000200000000000000000000000000000000000000000000ffffac141443fe80000000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.466967941s ago: executing program 3 (id=3054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c00fff5090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) 2.462688241s ago: executing program 2 (id=3055): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000002885000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b7f122ab98d1db1b883e04000000", 0x0, 0xbfffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf8}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1}, 0xfe9e, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x57) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2b, 0xb, 0x53, 0x5, 0x0, 0x4, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x1}, 0x20, 0x10001, 0x8, 0x3, 0x5, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 2.369426453s ago: executing program 3 (id=3057): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a0000000000000080ffffff05000600000000000a0000000000000020010000000000000000fbff0000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x40) 2.239077866s ago: executing program 3 (id=3058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x80002, 0x0) pread64(r1, 0x0, 0x0, 0x5) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000680)={0x3, 0x0, 0x98, &(0x7f00000005c0)={0x9, 0x8000000000000000}}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x0, 0x1012) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0xb29b, 0x3, 0x1, 0x1}, 0x10) sendmsg$key(r6, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a0000000000000000000000006401010000000000000000000000002c003000006d0c066ead"], 0x38}}, 0x40408c0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x5, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 1.930417503s ago: executing program 1 (id=3059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2b0}, 0x1, 0x0, 0xfffffff5}, 0x4000) 1.712025599s ago: executing program 1 (id=3060): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0x459, 0x3, 0x0) 1.531328453s ago: executing program 1 (id=3061): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close(0x3) 1.129804503s ago: executing program 1 (id=3062): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000280)={[{@block_validity}, {}, {@norecovery}, {@dax_inode}, {@nobh}]}, 0x1, 0x75b, &(0x7f0000001240)="$eJzs3M9rHHUbAPBnpknTH+m7eeE9vLynFypWqN2kqdqTEPFcKPQPqGEzCSGTbMhuahMDbT14EAQVwR+96H/gRRG8lP4PiuBNwYOgNY0HwUNkNpvEbnfT1CadGj8fmOzz/c7uPM+THb7swM4G8I/1/+JPEjEYERcjotKeTyPicCs6EnF943l3V1dqa6srtSTW1y/dSYqXteY2j5W0H49H6yXx34i43R9x+vX78zaWlmfG8zxbaI+Hm7Pzw42l5TPTs+NT2VQ2Nzoycu7cC6PPPzeyZ72+9dqnP7/5xctffXR+9vcX7zw7kcRYq+/o6GMvbfxP+mOsY35uP5KVKCm7AAAAdqX4nH8oIvpan1IrcagVAQAAAAfJ+sA6AAAAcOAlUXYFAAAAwP7a/B7A3dWV2ub2OL9/8NNLETG0fW/x2lb+vtY9xBFHoj8ijq0l99yZkGy8DB7J9RsRcWusy/mftM+/hzSwHXbeue4e6SfPrWL9Geu2/qVb6090WX/6Nn874RFtrn9r961/2/kP9Vj/Lu4mwfWIgYVTX/fMfyPif33d8idb+ZMe+V/ZZY+fDX77Xa99659EnIru+f+ca4ffhxienM6z9t+uOU5+fu30Tv0f65U/2bn/+V32//3N0alea0mR/5mTO7//3fIX58Tb7TrSiHin/ViM3+3I8fTtkQ936n+iR/8Pev8/7nXQa/cOv3xj+YdeTwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu0ogYjCStbsVpWq1GHI+I/8SxNK83mqcn64tzE8W+iKHoTyen82wkIiob46QYn23F2+PRjvG5iPh3RLxXOdoaV2v1fKLs5gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhyPCIGI0mrEZFGxK+VNK1Wy64KAAAA2HNDZRcAAAAA7DvX/wAAAHDwPcz1/419rAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA40C5euFBs62urK7ViPHFlaXGmfuXMRNaYqc4u1qq1+sJ8dapen8qzaq0++6Dj5fX6/PmYW7w63MwazeHG0vLl2friXPPy9Oz4VHY5638sXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCwBltbklYjIm3FaVqtRpyIiKHoTyan82wkIv4VEd9U+geK8dmyiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDPNZaWZ8bzPFu4NzjR3t1l1wEJjrY7fFLqEQieqKDERQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNI0lpZnxvM8W2iUXQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADlSn9MIqLYTlWeGuzcezj5rdJ6jIhXb156/+p4s7lwtpj/ZWu++UF7frSM+gEAAIBOm9fp7ev4tOx6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv4/G0vLMeJ5nC/sYlN0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw1/wRAAD//4hJxgU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x346c02, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) ustat(0x7, &(0x7f0000000240)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x7ff, 0x0, 0xff, 0x0, 0x401, 0x510d}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) socket$netlink(0x10, 0x3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x10000054) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x1, 0x9, 0x5, 0xae, 0x36, "668787fe4150caf251a42dcbffe468fb06bc47", 0x7f, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x2010484, &(0x7f0000000000)=ANY=[@ANYBLOB='dots,umask=00000000p00000000000005,nodots,dos1xfloppy,\x00'], 0x1, 0x11ef, &(0x7f0000002440)="$eJzs201rY1UYB/Bn3kybsZ367gyIB90owsWZhQtxU6QDMgFlZirMCMItvdWQmJTcLBJxMS7cuPID+BEEN+4E9Qt042dwVwTRjSsjadKXhFpfaGPp/H4QzpP7P0meQ3IDJ+Ruv/HFR42NMtuIsfOjIe0WEfEgXv7+9d8+v3Pv/q3lWm3ldko3l+9efy2ltPj8d+998tULP3Qvv/vN4reV2Fp6f/uXGz9tnY+r23/c/bBepnqZWu1uytNau93N15pFWq+XjSyld5pFXhap3iqLzigfvlSzSBvN9uZmP+Wt9YXqZqcoy5S3+qlR9FO3nbqdV1L+QV5vpSzL0kI1+K8+HY+DwfB2KR6JwWAwmI9qXI5HYyEW40osxWPxeDwRT8ZT8XQ8E8/G1Z1Z/3PrAAAAAAAAAAAAAAAAAAAAcMb8Ppi+/v+K6/8BAAAAAAAAAAAAAAAAAABgxu7cu39ruVZbuZ3SXMTPD3qrvdXROMpvvlVbeTXtWNp/1K+93uqFvfz6KE+TeSWq4/zGoflcvPTiKB9mb75dm8qvxfrJLx8AAAAeClnaM9zfn4tzMbG/z7KJfGyYj6oDvw9M7d8vxrWLM14M/1rZ/7iRXxrfyZvNorNz5JiLyok98zEX8dnekefm96O1iDglHc6+qIw/Haeln5Msvrxw+FkwedKcilanirndd+mIOT9+/fdz/mLJnE0HvvqONj+jhgAAAAAAAAAAAPhHZvKnWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4kx04EAAAAAAQ5G89wQYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAoAAP//GhRaGw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) removexattr(&(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', &(0x7f0000000200)=@known='user.syz\x00') r5 = syz_pidfd_open(r4, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000009bab09c89a3194a9612d021050b33c98a18e56067a4533ff41855e40a3765135788f39c9c5e86093585d49e60e553a5d0266ebce1e26ef594eda96f85ce0", @ANYRES16=r8, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f000500000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r10, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0xff08) 1.003840596s ago: executing program 2 (id=3063): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0xb8}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x9, 0xbe, 0x1, {0x22, 0xf2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x81, 0x4}}}}}]}}]}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x116078, 0x0, 0x0, 0x3, 0x6, 0x8001, 0xf}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x22105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x20004080) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x30, 0x1, 0x0, 0x3, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xd1ec429b5ab78f3e}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x4020005, 0x0, 0x0, 0x0, 0x0, 0x200000102ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) 887.970948ms ago: executing program 5 (id=3064): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0x1, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x63}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff44}, 0x70) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0x1, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) (async) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x63}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff44}, 0x70) (async) 784.119691ms ago: executing program 5 (id=3065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000030000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461"], 0xc4}}, 0x40) 611.922995ms ago: executing program 5 (id=3066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="04010000100081020000000000000000fc0200000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000003c000000ffffffff00000000000000000300000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000a000000260000000000000014000e"], 0x104}}, 0x0) 513.846018ms ago: executing program 5 (id=3067): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"/336], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) accept(r1, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000340)={0x20, r4, 0x4, 0x9, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) r6 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x40000) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0x3}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x22, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x0, 0xc, 0x0, 0x2, 0xffffffffffffffc0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000700)='GPL\x00', 0x1e9bbf23, 0xcb, &(0x7f0000000740)=""/203, 0x41100, 0x43, '\x00', r2, 0x0, r6, 0x8, &(0x7f0000000840)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000880)=[{0x3, 0x1, 0xc, 0x9}, {0x2, 0x3, 0x81, 0xc}, {0x0, 0x5, 0x10, 0x6}, {0x2, 0x1, 0x6, 0x4}, {0x2, 0x5, 0xa, 0x2}, {0x3, 0x5, 0x8, 0x3}, {0x1, 0x1, 0x1, 0x4}, {0x1, 0x4, 0xc, 0xb}, {0x3, 0x1, 0xf, 0x8}], 0x10, 0x4}, 0x94) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2}}) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) bind$xdp(r9, &(0x7f00000003c0)={0x2c, 0x1f, r8, 0x1, 0xffffffff}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xa, 0xb}, {0xd, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0xc020}, 0x0) 505.761628ms ago: executing program 1 (id=3068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800f5ff0500050000000500050008"], 0x4a) 293.630613ms ago: executing program 5 (id=3069): r0 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/vs/conn_lfactor\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) (async) write(r1, &(0x7f0000000400)='1', 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000100)=0x21) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x115, 0x0, &(0x7f0000000180)="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", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x115, 0x0, &(0x7f0000000180)="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", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x121403) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) (async) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r4, 0x0, 0x0, 0x40845, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001500010000000000000000000a78"], 0x44}}, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001500010000000000000000000a78"], 0x44}}, 0x0) 169.246156ms ago: executing program 5 (id=3070): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0xfffffffffffff148}, 0x11c0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x100002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00012abd6000ff59ca252100f000"], 0x14}, 0x1, 0x0, 0x0, 0x20044483}, 0x889d) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) dup2(r4, r4) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r5, 0x2000000000000062, &(0x7f0000001880)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0xa, 0x0, r4, &(0x7f0000000300)="59a2bac7a326415356d4f5fdae3efca42b15ae259c4f8fe9b57bb6adc8299d08427cf19807123d0f36b9cd43486a8af7bc0e5118355be2e00ccf7412b2254647569a545d4a1388831ddfab3a5963c136018ced4723f353ee423c14ec5100dee096fac7bb786f5bd0b29695bfdf2ee2474857aba43648eed088b00203d4e0db007a4105153a87a809d13dfd", 0x0, 0x100000000, 0x0, 0x3}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000680)="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", 0x0, 0x0, 0x0, 0x3}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x5, 0x2, r3, &(0x7f00000016c0)="82259ad4db38638aff067d59cf79ff14901b6b2142bb300d12cf6462180939e0b531b2d0e375b1f208a84747c1f819cade7e74864627fa6998e9ad90ebf9ceff7b85b06019a528981228812dcdfb5f68860e33c5728245892244b030e7392f6027ae8fb36350f0565505ce836a28e2989124d9cf2bc846b2e3e35a79281655b2752bef683510df82e150d45a1ec2bbd65f4a0340c52cde579117b5ea003de7614b110ecdce91836e6730212d3a9a8df9e7ac2bef23c9ecacd3e2", 0x0, 0x1}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x5ab, 0xffffffffffffffff, &(0x7f00000017c0)="200d501638d505c71d0480098d7faf1c9ab4609924156f2c7f", 0x0, 0x0, 0x0, 0x1}]) listen(0xffffffffffffffff, 0xa) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf25350000000e0001006e657464657673695a0000000f0002006e658164657673696d3000000800730002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x4, 0x7fff0004}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="70000a8a", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000005c00088030000080080003000500000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222800008024000100"/106], 0x70}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8011) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) 119.264747ms ago: executing program 1 (id=3071): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x2000b}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@acl}, {@noblock_validity}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x9fe}}, {@inlinecrypt}, {@dioread_nolock}]}, 0x7, 0x60a, &(0x7f00000027c0)="$eJzs3c9rHGUfAPDvzCZ5kzTvm/bl5cUWpQEPLUjTpBarXqz1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrbbzW66ptmdNvP5wHTneWY2z/Pdp0/mmZk8OwGU1lT2TxqxM+L2ySRismXbRDQ2TuX73frl6qlsSaJWe/XnJJI8r7l/kr9uyxOjEfH1kYj/VtaWu3z5ypm5aq3hnYj9K2cv7F++fGXf0tm50wunF87NHnj24KGZ52YPzm5KnNvy16PHXnn8w3fffGbxm+q+JA7HieG356Mtjs0yFVNxOw+xNX93RBzKVjp8Lo+aLRBCqWXtNxQRwxHx/5iMSj3VMBlLHxRaOaCvapWIGlBSif4PJdUcBzTP7Xs7Dz7R51HJ4Nx8sXECtDb+oca1kRitnxuN30pazowa1za2b0L5WRl/Xd31abbEPdchfr/TOkObUE43q9ci4rFO8Sf1um2vR5rFn95Tj2Q1YiYiRvL6vfQAdUha1vtxHWY9G40/jYjD+WuWf2SD5U+1pQcdPwDldCMb/2QH8tUsdff4l409muOf6DD+mehw7NqIoo9/3cd/zeP9aP0aedo2DsvGLMc7/8jh9owf3j/6cbfyW8d/2ZKV3xwLDsLNaxG72uJ/Lws2H/9k8Scd2j/b5eTh3sp4+dufjnbbVnT8tesRezqe/9wdlWZr69yf3L+4VF2YafzbsYwvv3rj827lFx1/1v7jXeJvaf+0/X3ZZ3KhxzK+OH79bLdtEx3jX205O01/HEka55sj+XvemltZuTgbMZIca2SkLfkH1q9Lc5/mz8ji3/tk5/7f+v+//QMYa/7K7MGF187c6rZtI+3fcjP5dq3HOnSTxT9///Zf0/+zvI96LOO31y890W3bevGPPUhgAAAAAAAAUEJp/R5skk7fWU/T6enGfNn/xXhaPb+88tTi+Uvn5iP21v8ecjht3umebKSTLD2b/z1sM32gLf10ROyIiE8qY/X09Knz1fmigwcAAAAAAAAAAAAAAAAAAICHxLZ8/n/zOdW/Vhrz/4GS6OcD5oCHm/4P5VRp9v81j3gCysDxH8pL/4fy0v+hvPR/KC/9H8pL/4fy0v+hvPR/AAAAANiSduy+8X0SEavPj9WXzEi+zYwg2NqGi64AUJhK0RUACnPn1r/BPpROT+P/P/IvB+x/dYACJJ0y64OD2vqd/0bHdwIAAAAAAAAAAAAAfbBnZ/f5/+YGw9Zm2h+U1wPM//fVAfCI89X/UF7O8YH7zeIf7bbB/H8AAAAAAAAAAAAAGJiJ+pKk0/lc4IlI0+npiH9HxPYYThaXqgszEfGfiPiuMvyvLD1bdKUBAAAAAAAAAAAAAAAAAABgi1m+fOXMXLW6cLF15c81OVt7pfkU1PX2GY/779PDygvxD98VyeA/lrGIKLxR+rYy1JKTRKxmrfpQVOzicrTkDBXcBAX+UgIAAAAAAAAAAAAAAAAAgJJqmXvc2a7PBlwjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABi8u8//799K0TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+mvwMAAP//vitC1Q==") 0s ago: executing program 3 (id=3072): unshare(0x2c040480) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000001, 0x1c00000000000000}, 0x105103, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x9}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1830000001a1c000000000000300"/24], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) kernel console output (not intermixed with test programs): 45.586633][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.586666][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.605283][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.605327][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.651528][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 145.698075][T10374] infiniband syz1: set down [ 145.698106][T10374] infiniband syz1: added syz_tun [ 145.715391][T10383] loop5: detected capacity change from 0 to 512 [ 145.715748][T10383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.715884][T10383] EXT4-fs: Ignoring removed i_version option [ 145.742901][T10383] EXT4-fs (loop5): 1 orphan inode deleted [ 145.743340][T10383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.744721][T10374] RDS/IB: syz1: added [ 145.744844][T10374] smc: adding ib device syz1 with port count 1 [ 145.744885][T10374] smc: ib device syz1 port 1 has no pnetid [ 145.798496][ T9772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.903337][T10378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.910095][T10399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2462'. [ 146.063111][T10414] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 146.092850][T10414] loop2: detected capacity change from 0 to 512 [ 146.093505][T10414] EXT4-fs: Ignoring removed i_version option [ 146.093617][T10414] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.121662][T10414] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.2465: corrupted in-inode xattr: e_value size too large [ 146.121722][T10414] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.136685][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 146.136701][ C1] EXT4-fs (loop2): initial error at time 1700006735: ext4_iget_extra_inode:5210: inode 15 [ 146.136739][ C1] EXT4-fs (loop2): last error at time 1700006735: ext4_iget_extra_inode:5210: inode 15 [ 146.164838][T10414] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.2465: couldn't read orphan inode 15 (err -117) [ 146.164918][T10414] loop2: lost filesystem error report for type 5 error -117 [ 146.176382][T10414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.256132][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.315629][T10429] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2466'. [ 146.326985][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 146.360766][T10154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.440830][T10438] loop2: detected capacity change from 0 to 128 [ 146.457175][T10438] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.470665][T10438] ext4 filesystem being mounted at /523/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.499697][T10443] loop5: detected capacity change from 0 to 512 [ 146.500050][T10443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.500170][T10443] EXT4-fs: Ignoring removed i_version option [ 146.525103][T10443] EXT4-fs (loop5): 1 orphan inode deleted [ 146.596106][ T3434] tipc: Subscription rejected, illegal request [ 146.629589][T10438] netlink: 'syz.2.2468': attribute type 7 has an invalid length. [ 146.629741][T10438] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2468'. [ 146.650135][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2468'. [ 146.753432][T10457] loop3: detected capacity change from 0 to 512 [ 146.793343][T10457] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.813148][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2473'. [ 147.030136][T10470] EXT4-fs: Ignoring removed oldalloc option [ 147.075539][T10154] veth0_vlan: entered promiscuous mode [ 147.094045][T10154] veth1_vlan: entered promiscuous mode [ 147.112942][T10470] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 147.113092][T10470] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #11: comm syz.5.2475: corrupted inode contents [ 147.113153][T10470] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 147.127746][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 147.127763][ C0] EXT4-fs (loop5): initial error at time 1700006736: mb_free_blocks:2049: inode 11: block 64 [ 147.127792][ C0] EXT4-fs (loop5): last error at time 1700006736: ext4_do_update_inode:5801: inode 11 [ 147.175502][T10470] EXT4-fs error (device loop5): ext4_dirty_inode:6731: inode #11: comm syz.5.2475: mark_inode_dirty error [ 147.175602][T10470] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 147.197169][T10470] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2475: invalid indirect mapped block 1 (level 1) [ 147.197264][T10470] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 147.204324][T10470] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #11: comm syz.5.2475: corrupted inode contents [ 147.204431][T10470] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 147.224355][T10470] EXT4-fs error (device loop5) in ext4_orphan_del:304: Corrupt filesystem [ 147.224859][T10470] loop5: lost filesystem error report for type 5 error -117 [ 147.229347][T10470] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #11: comm syz.5.2475: corrupted inode contents [ 147.229418][T10470] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 147.236349][T10470] EXT4-fs error (device loop5): ext4_truncate:4721: inode #11: comm syz.5.2475: mark_inode_dirty error [ 147.236420][T10470] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 147.241248][T10470] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem [ 147.241328][T10470] loop5: lost filesystem error report for type 5 error -117 [ 147.242881][T10470] EXT4-fs (loop5): 1 truncate cleaned up [ 147.341593][T10154] veth0_macvtap: entered promiscuous mode [ 147.351656][T10374] syz.1.2455 (10374) used greatest stack depth: 10168 bytes left [ 147.351957][T10470] EXT4-fs error (device loop5): ext4_readdir:270: inode #2: block 13: comm syz.5.2475: path /36/file0: bad entry in directory: directory entry too close to block end - offset=1016, size=1024 [ 147.378497][T10154] veth1_macvtap: entered promiscuous mode [ 147.448717][T10154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.467702][T10154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.482987][T10489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.483195][T10489] EXT4-fs: Ignoring removed i_version option [ 147.502370][ T38] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.502533][ T38] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.502672][ T38] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.502780][ T38] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.540620][T10489] EXT4-fs (loop1): 1 orphan inode deleted [ 147.692406][T10495] pim6reg: entered allmulticast mode [ 147.768915][T10495] pim6reg: left allmulticast mode [ 148.051162][T10530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.051412][T10530] EXT4-fs: Ignoring removed i_version option [ 148.067940][T10530] EXT4-fs (loop1): 1 orphan inode deleted [ 148.131847][T10527] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #3: comm syz.5.2489: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 148.131925][T10527] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 148.150897][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 148.150934][ C1] EXT4-fs (loop5): initial error at time 1700006737: ext4_ext_check_inode:521: inode 3 [ 148.151024][ C1] EXT4-fs (loop5): last error at time 1700006737: ext4_ext_check_inode:521: inode 3 [ 148.171109][T10527] EXT4-fs error (device loop5): ext4_quota_enable:7263: comm syz.5.2489: Bad quota inode: 3, type: 0 [ 148.171198][T10527] loop5: lost filesystem error report for type 5 error -117 [ 148.183797][T10527] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 148.184160][T10527] EXT4-fs (loop5): mount failed [ 148.288545][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 148.288578][ T29] audit: type=1400 audit(1700006737.204:223402): avc: denied { write } for pid=10543 comm="syz.6.2491" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 148.344078][T10546] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.363536][ T29] audit: type=1400 audit(1700006737.274:223403): avc: denied { write } for pid=10545 comm="syz.1.2493" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.452896][ T29] audit: type=1326 audit(1700006737.354:223404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fbd4e159 code=0x7ffc0000 [ 148.452940][ T29] audit: type=1326 audit(1700006737.364:223405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fbd4e159 code=0x7ffc0000 [ 148.452977][ T29] audit: type=1326 audit(1700006737.364:223406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fbd4e159 code=0x7ffc0000 [ 148.453007][ T29] audit: type=1326 audit(1700006737.364:223407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fbd4e159 code=0x7ffc0000 [ 148.456741][ T29] audit: type=1326 audit(1700006737.364:223408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f80fbd4e159 code=0x7ffc0000 [ 148.458513][ T29] audit: type=1326 audit(1700006737.364:223409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fbd4e159 code=0x7ffc0000 [ 148.458701][ T29] audit: type=1326 audit(1700006737.364:223410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fbd4e159 code=0x7ffc0000 [ 148.458795][ T29] audit: type=1326 audit(1700006737.364:223411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10542 comm="syz.2.2494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80fbd4e159 code=0x7ffc0000 [ 148.644231][T10557] netlink: 'syz.3.2496': attribute type 10 has an invalid length. [ 149.378303][T10557] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.378474][T10557] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.474345][T10564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.519409][T10564] set_capacity_and_notify: 6 callbacks suppressed [ 149.519463][T10564] loop2: detected capacity change from 0 to 512 [ 149.543402][T10579] loop3: detected capacity change from 0 to 256 [ 149.559522][T10579] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.616978][T10583] loop5: detected capacity change from 0 to 1024 [ 149.642114][T10583] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 149.642472][T10583] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 149.887481][T10589] FAULT_INJECTION: forcing a failure. [ 149.887481][T10589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.887570][T10589] CPU: 0 UID: 0 PID: 10589 Comm: syz.1.2504 Not tainted syzkaller #0 PREEMPT(lazy) [ 149.887604][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.887649][T10589] Call Trace: [ 149.887656][T10589] [ 149.887666][T10589] __dump_stack+0x1d/0x30 [ 149.887771][T10589] dump_stack_lvl+0x95/0xd0 [ 149.887799][T10589] dump_stack+0x15/0x1b [ 149.887842][T10589] should_fail_ex+0x262/0x280 [ 149.887869][T10589] should_fail+0xb/0x20 [ 149.887893][T10589] should_fail_usercopy+0x1a/0x20 [ 149.888005][T10589] copy_folio_from_iter_atomic+0x24b/0x10a0 [ 149.888045][T10589] ? shmem_write_begin+0xfc/0x1f0 [ 149.888156][T10589] ? shmem_write_begin+0x135/0x1f0 [ 149.888198][T10589] generic_perform_write+0x2c4/0x490 [ 149.888238][T10589] shmem_file_write_iter+0xc5/0xf0 [ 149.888334][T10589] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 149.888378][T10589] vfs_write+0x57f/0x9a0 [ 149.888452][T10589] ksys_write+0xdc/0x1a0 [ 149.888627][T10589] __x64_sys_write+0x40/0x50 [ 149.888659][T10589] x64_sys_call+0x154e/0x2550 [ 149.888718][T10589] do_syscall_64+0x112/0x360 [ 149.888757][T10589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.888787][T10589] RIP: 0033:0x7f752a6ae98e [ 149.888943][T10589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.888994][T10589] RSP: 002b:00007f7529146da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.889072][T10589] RAX: ffffffffffffffda RBX: 00007f75291476c0 RCX: 00007f752a6ae98e [ 149.889124][T10589] RDX: 0000000000080000 RSI: 00007f7520d27000 RDI: 0000000000000005 [ 149.889229][T10589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.889241][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 149.889254][T10589] R13: 00007f7529146ee0 R14: 00007f7529146ea0 R15: 00007f7520d27000 [ 149.889354][T10589] [ 149.900129][T10589] loop1: detected capacity change from 0 to 1024 [ 149.901382][T10589] EXT4-fs: inline encryption not supported [ 149.902358][T10589] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.910698][T10589] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.2504: lblock 2 mapped to illegal pblock 2 (length 1) [ 149.910845][T10589] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 149.911228][T10589] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz.1.2504: Invalid inode table block 1 in block_group 0 [ 149.911376][T10589] loop1: lost filesystem error report for type 5 error -117 [ 149.911612][T10589] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 149.911673][T10589] loop1: lost filesystem error report for type 5 error -117 [ 149.911967][T10589] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.2504: mark_inode_dirty error [ 149.912112][T10589] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 149.912613][T10589] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.2504: Failed to acquire dquot type 0 [ 149.912684][T10589] loop1: lost filesystem error report for type 5 error -117 [ 149.912981][T10589] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 149.913042][T10589] loop1: lost filesystem error report for type 5 error -117 [ 149.913251][T10589] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.2504: mark_inode_dirty error [ 149.913346][T10589] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 149.913732][T10589] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 149.913767][T10589] EXT4-fs (loop1): 1 orphan inode deleted [ 149.918199][ T3434] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 149.918570][ T3434] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:7: Failed to release dquot type 0 [ 150.160514][ T3295] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 150.160548][ T3295] loop1: lost filesystem error report for type 5 error -117 [ 150.160624][ T3295] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 150.160713][ T3295] loop1: lost filesystem error report for type 5 error -117 [ 150.160775][ T3295] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 150.160918][ T3295] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 150.160946][ T3295] loop1: lost filesystem error report for type 5 error -117 [ 150.438923][T10603] loop5: detected capacity change from 0 to 1024 [ 150.446722][T10603] EXT4-fs: inline encryption not supported [ 150.458929][T10603] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.462759][T10603] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 150.462948][T10603] EXT4-fs (loop5): orphan cleanup on readonly fs [ 150.468547][T10603] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.2509: lblock 2 mapped to illegal pblock 2 (length 1) [ 150.469284][T10603] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.2509: Invalid inode table block 1 in block_group 0 [ 150.470974][T10603] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 150.474238][T10603] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.2509: mark_inode_dirty error [ 150.474514][T10603] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.2509: Failed to acquire dquot type 0 [ 150.474890][T10603] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 150.475956][ C0] EXT4-fs (loop5): error count since last fsck: 6 [ 150.476009][ C0] EXT4-fs (loop5): initial error at time 1700006739: ext4_map_blocks:790: inode 3: block 2 [ 150.476141][ C0] EXT4-fs (loop5): last error at time 1700006739: ext4_reserve_inode_write:6517 [ 150.478504][T10603] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.2509: mark_inode_dirty error [ 150.478837][T10603] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 150.478926][T10603] EXT4-fs (loop5): 1 orphan inode deleted [ 150.482019][ T355] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 150.484312][ T355] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 150.484674][T10603] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.2509: Invalid inode table block 1 in block_group 0 [ 150.746347][ T9772] EXT4-fs unmount: 18 callbacks suppressed [ 150.746607][ T9772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.943238][T10653] bond1: (slave bond_slave_1): Device is not our slave [ 150.943269][T10653] bond1: option active_slave: invalid value (bond_slave_1) [ 150.972501][T10653] bond1 (unregistering): Released all slaves [ 151.093957][T10670] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.2524:10670 [ 151.243849][T10686] loop3: detected capacity change from 0 to 512 [ 151.252666][T10686] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 151.397622][T10697] loop2: detected capacity change from 0 to 512 [ 151.399661][T10697] ext4: Unknown parameter 'dont_measure' [ 151.450163][T10696] ieee802154 phy0 wpan0: entered promiscuous mode [ 151.450709][T10696] netlink: 'syz.6.2530': attribute type 1 has an invalid length. [ 151.450751][T10696] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2530'. [ 151.472713][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'. [ 151.656138][T10717] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2536'. [ 151.725339][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2537'. [ 151.730642][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2537'. [ 151.862828][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2537'. [ 151.863106][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2537'. [ 151.926073][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2537'. [ 151.926353][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2537'. [ 152.077346][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2541'. [ 152.352857][T10768] ip_tables: iptables: counters copy to user failed while replacing table [ 152.414153][T10722] netlink: 'syz.5.2538': attribute type 12 has an invalid length. [ 152.639747][T10776] loop6: detected capacity change from 0 to 512 [ 152.640067][T10776] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.640404][T10776] EXT4-fs: Ignoring removed i_version option [ 152.662054][T10776] EXT4-fs (loop6): 1 orphan inode deleted [ 152.662984][T10776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.694333][T10782] loop5: detected capacity change from 0 to 256 [ 152.718193][T10154] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.828833][T10791] loop2: detected capacity change from 0 to 128 [ 152.869908][T10794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.870145][T10794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.891543][T10791] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.906735][T10791] ext4 filesystem being mounted at /541/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.944801][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.576413][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 153.576493][ T29] audit: type=1400 audit(1700006742.485:223433): avc: denied { bind } for pid=10813 comm="syz.6.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.025218][ T29] audit: type=1326 audit(1700006742.935:223434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.1.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752a6ee159 code=0x7ffc0000 [ 154.025396][ T29] audit: type=1326 audit(1700006742.935:223435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.1.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752a6ee159 code=0x7ffc0000 [ 154.026154][ T29] audit: type=1326 audit(1700006742.945:223436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.1.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f752a6aa5ac code=0x7ffc0000 [ 154.026843][ T29] audit: type=1326 audit(1700006742.945:223437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.1.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f752a6aa60e code=0x7ffc0000 [ 154.026918][ T29] audit: type=1326 audit(1700006742.945:223438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.1.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f752a6ee159 code=0x7ffc0000 [ 154.027106][ T29] audit: type=1326 audit(1700006742.945:223439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.1.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752a6ee159 code=0x7ffc0000 [ 154.027384][ T29] audit: type=1326 audit(1700006742.945:223440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.1.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752a6ee159 code=0x7ffc0000 [ 154.028050][ T29] audit: type=1326 audit(1700006742.945:223441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.1.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752a6ee159 code=0x7ffc0000 [ 154.028166][ T29] audit: type=1326 audit(1700006742.945:223442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10831 comm="syz.1.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752a6ee159 code=0x7ffc0000 [ 154.699932][T10862] Set syz1 is full, maxelem 6117 reached [ 154.936192][T10886] 9p: Bad value for 'wfdno' [ 155.293502][T10918] set_capacity_and_notify: 1 callbacks suppressed [ 155.293533][T10918] loop1: detected capacity change from 0 to 512 [ 155.318095][T10918] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 155.354423][T10927] sg_write: data in/out 402397/290 bytes for SCSI command 0x0-- guessing data in; [ 155.354423][T10927] program syz.2.2600 not setting count and/or reply_len properly [ 155.417606][T10921] loop5: detected capacity change from 0 to 128 [ 155.585133][T10922] loop3: detected capacity change from 0 to 512 [ 155.594945][T10922] ext4: Unknown parameter 'dont_measure' [ 155.820832][T10946] netlink: 'syz.1.2605': attribute type 7 has an invalid length. [ 156.179705][T10951] loop6: detected capacity change from 0 to 1024 [ 156.192000][T10951] EXT4-fs: Ignoring removed nobh option [ 156.192202][T10951] EXT4-fs: Ignoring removed bh option [ 156.192285][T10951] EXT4-fs: Ignoring removed nobh option [ 156.213618][T10951] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 156.228261][T10951] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.245597][T10951] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.353871][T10942] tun0: tun_chr_ioctl cmd 1074025677 [ 156.353954][T10942] tun0: linktype set to 776 [ 156.560766][T10971] wg2: entered promiscuous mode [ 156.560797][T10971] wg2: entered allmulticast mode [ 156.645999][T10971] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 156.646056][T10971] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 156.712128][T10977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=10977 comm=syz.1.2618 [ 156.713176][T10975] SELinux: security_context_str_to_sid (@”¤cRpÑÊú¼4­y6ż@ÛÔ©èp4•T»¾å»=IX>o”æ¨fýlÜn‹Ï®,B2?!{Ú”™Øi˵Pe(Ë(í%BØ´yKßMô°%´iž¸c‹ö§8) failed with errno=-22 [ 156.774393][T10975] __nla_validate_parse: 7 callbacks suppressed [ 156.774659][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2617'. [ 156.900965][T10983] loop5: detected capacity change from 0 to 512 [ 156.909349][T10983] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.2620: inode has both inline data and extents flags [ 156.909408][T10983] fserror_report: 5 callbacks suppressed [ 156.909447][T10983] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.910278][T10983] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2620: couldn't read orphan inode 15 (err -117) [ 156.910366][T10983] fserror_report: 6 callbacks suppressed [ 156.910396][T10983] loop5: lost filesystem error report for type 5 error -117 [ 156.911642][T10983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.046634][ T9772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.101123][T10977] loop1: detected capacity change from 0 to 1024 [ 157.133331][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2622'. [ 157.148042][T10977] EXT4-fs: Ignoring removed oldalloc option [ 157.148125][T10977] EXT4-fs: Ignoring removed oldalloc option [ 157.171337][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2612'. [ 157.171515][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2612'. [ 157.236756][T10977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.661611][T11029] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.5.2629:11029 [ 157.671661][T11032] rdma_rxe: rxe_newlink: failed to add syz_tun [ 157.691736][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.725827][T11032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.736311][T11018] loop2: detected capacity change from 0 to 512 [ 157.887674][T11037] loop1: detected capacity change from 0 to 512 [ 157.899889][T11037] EXT4-fs: Ignoring removed oldalloc option [ 157.933332][T11037] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 157.933661][T11037] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.2632: corrupted inode contents [ 157.933710][T11037] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.936280][T11037] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #11: comm syz.1.2632: mark_inode_dirty error [ 157.936424][T11037] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.950685][T11037] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2632: invalid indirect mapped block 1 (level 1) [ 157.950813][T11037] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.955053][ C0] EXT4-fs (loop1): error count since last fsck: 3 [ 157.955104][ C0] EXT4-fs (loop1): initial error at time 1700006746: mb_free_blocks:2049: inode 11: block 64 [ 157.955203][ C0] EXT4-fs (loop1): last error at time 1700006746: ext4_dirty_inode:6731: inode 11 [ 157.968794][T11037] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.2632: corrupted inode contents [ 157.972037][T11037] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.972756][T11037] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 157.972882][T11037] loop1: lost filesystem error report for type 5 error -117 [ 157.978181][T11037] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.2632: corrupted inode contents [ 157.978311][T11037] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.980695][T11037] EXT4-fs error (device loop1): ext4_truncate:4721: inode #11: comm syz.1.2632: mark_inode_dirty error [ 157.981100][T11037] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.991856][T11037] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 157.991966][T11037] loop1: lost filesystem error report for type 5 error -117 [ 157.998914][T11037] EXT4-fs (loop1): 1 truncate cleaned up [ 158.029108][T11037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.151473][T11037] EXT4-fs error (device loop1): ext4_readdir:270: inode #2: block 13: comm syz.1.2632: path /533/file0: bad entry in directory: directory entry too close to block end - offset=1016, size=1024 [ 158.203387][T11058] loop2: detected capacity change from 0 to 512 [ 158.203934][T11058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.204278][T11058] EXT4-fs: Ignoring removed i_version option [ 158.213920][T11058] EXT4-fs (loop2): 1 orphan inode deleted [ 158.214774][T11058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.304127][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.340962][T11052] team0 (unregistering): Port device team_slave_0 removed [ 158.360164][T11052] team0 (unregistering): Port device team_slave_1 removed [ 158.370630][T11071] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2640'. [ 158.434898][T11071] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2640'. [ 158.465997][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.642153][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 158.642208][ T29] audit: type=1400 audit(1700006747.556:223856): avc: denied { write } for pid=11078 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.702108][T11081] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.2643:11081 [ 158.800908][T11076] tmpfs: Bad value for 'mpol' [ 159.045277][T11102] loop2: detected capacity change from 0 to 128 [ 159.058016][T11104] netlink: 'syz.6.2649': attribute type 1 has an invalid length. [ 159.092517][T11102] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.095340][T11102] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.105758][ T29] audit: type=1400 audit(1700006748.006:223857): avc: denied { write } for pid=11100 comm="syz.2.2648" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.126746][T11110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2648'. [ 159.152905][T11102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2648'. [ 159.152950][T11102] netlink: 'syz.2.2648': attribute type 1 has an invalid length. [ 159.177586][T11110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2648'. [ 159.182166][T11110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2648'. [ 159.187473][ T29] audit: type=1400 audit(1700006748.096:223858): avc: denied { write } for pid=11086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.225834][T11116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.225972][T11116] EXT4-fs: Ignoring removed i_version option [ 159.238383][T11116] EXT4-fs (loop3): 1 orphan inode deleted [ 159.239365][T11116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.328845][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.375094][ T29] audit: type=1400 audit(1700006748.286:223859): avc: denied { write } for pid=11123 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.523167][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.609786][T11141] EXT4-fs: inline encryption not supported [ 159.614643][T11141] EXT4-fs (loop3): invalid first ino: 5 [ 159.877903][T11152] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.878031][T11152] EXT4-fs: Ignoring removed i_version option [ 159.894277][T11152] EXT4-fs (loop5): 1 orphan inode deleted [ 159.901355][T11152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.982874][ T9772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.084511][T11159] bridge_slave_0: left allmulticast mode [ 160.084544][T11159] bridge_slave_0: left promiscuous mode [ 160.084695][T11159] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.108353][T11159] bridge_slave_1: left allmulticast mode [ 160.108438][T11159] bridge_slave_1: left promiscuous mode [ 160.118301][T11143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 160.118773][T11159] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.123508][T11143] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.137670][ T29] audit: type=1400 audit(1700006749.036:223860): avc: denied { write } for pid=11140 comm="syz.2.2658" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.137755][ T29] audit: type=1400 audit(1700006749.036:223861): avc: denied { append } for pid=11140 comm="syz.2.2658" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 160.187499][T11159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.187561][T11159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.215452][T11159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.215534][T11159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.248843][T11159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 160.267121][ T29] audit: type=1400 audit(1700006749.186:223862): avc: denied { read } for pid=2967 comm="acpid" name="event#" dev="devtmpfs" ino=939 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 160.267180][ T29] audit: type=1400 audit(1700006749.186:223863): avc: denied { open } for pid=2967 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=939 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 160.269032][ T29] audit: type=1400 audit(1700006749.186:223864): avc: denied { ioctl } for pid=2967 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=939 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 160.366194][T11163] set_capacity_and_notify: 4 callbacks suppressed [ 160.366238][T11163] loop3: detected capacity change from 0 to 512 [ 160.395273][T11163] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 160.421950][T11163] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 160.422183][T11163] block device autoloading is deprecated and will be removed. [ 160.422617][T11163] EXT4-fs (loop3): couldn't read superblock of external journal [ 160.450808][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.499008][T11159] netlink: 'syz.3.2666': attribute type 10 has an invalid length. [ 160.703040][T11199] loop2: detected capacity change from 0 to 512 [ 160.718909][T11199] FAT-fs (loop2): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 160.731027][T11203] loop5: detected capacity change from 0 to 128 [ 160.732973][T11202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.737573][T11202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.757918][T11203] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 160.771073][T11203] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.784752][T11203] ext2 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.802414][ T29] audit: type=1400 audit(1700006749.716:223865): avc: denied { write } for pid=11200 comm="syz.5.2677" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.124808][ T9772] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.300014][T11224] nfs4: Unknown parameter 'init_itable' [ 161.306618][T11221] loop5: detected capacity change from 0 to 512 [ 161.316741][T11221] EXT4-fs: Invalid want_extra_isize 43 [ 161.537081][T11230] loop5: detected capacity change from 0 to 512 [ 161.537710][T11230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.538032][T11230] EXT4-fs: Ignoring removed i_version option [ 161.542238][T11230] EXT4-fs (loop5): 1 orphan inode deleted [ 161.543084][T11230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.593184][ T9772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.671547][T11235] loop2: detected capacity change from 0 to 512 [ 161.697407][T11235] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #2: block 8: comm syz.2.2686: lblock 0 mapped to illegal pblock 8 (length 1) [ 161.697461][T11235] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 161.712393][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 161.712458][ C1] EXT4-fs (loop2): initial error at time 1700006750: ext4_map_blocks:790: inode 2: block 8 [ 161.712540][ C1] EXT4-fs (loop2): last error at time 1700006750: ext4_map_blocks:790: inode 2: block 8 [ 161.754939][T11235] EXT4-fs (loop2): Remounting filesystem read-only [ 161.755009][T11235] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.2686: error -EUCLEAN reading directory block [ 161.755054][T11235] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 161.755089][T11235] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.2686: error -EUCLEAN reading directory block [ 161.755118][T11235] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 161.755713][T11235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.825336][T11239] __nla_validate_parse: 38 callbacks suppressed [ 161.825370][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2689'. [ 161.825510][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2689'. [ 161.891961][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2689'. [ 161.892172][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2689'. [ 161.901778][T11246] Invalid logical block size (4) [ 161.984455][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.999301][T11254] loop6: detected capacity change from 0 to 1024 [ 162.015973][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.016108][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.163889][T11268] loop2: detected capacity change from 0 to 512 [ 162.164544][T11268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.164915][T11268] EXT4-fs: Ignoring removed i_version option [ 162.188146][T11268] EXT4-fs (loop2): 1 orphan inode deleted [ 162.189476][T11268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.228960][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.310986][T11280] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 162.326787][T11280] loop2: detected capacity change from 0 to 512 [ 162.331118][T11280] EXT4-fs: Ignoring removed i_version option [ 162.331317][T11280] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.355519][T11280] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.2703: corrupted in-inode xattr: e_value size too large [ 162.355568][T11280] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.357080][T11280] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.2703: couldn't read orphan inode 15 (err -117) [ 162.357255][T11280] loop2: lost filesystem error report for type 5 error -117 [ 162.365601][T11280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.391697][T11248] loop5: detected capacity change from 0 to 512 [ 162.611103][T11290] syz1: rxe_newlink: already configured on syz_tun [ 162.630478][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.868092][T11300] netlink: 'syz.3.2712': attribute type 25 has an invalid length. [ 162.868121][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2712'. [ 162.888706][T11300] netlink: 'syz.3.2712': attribute type 25 has an invalid length. [ 162.888780][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2712'. [ 162.904578][T11190] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.906070][T11187] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.906108][T11187] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.906145][T11187] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.983450][T11304] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2714'. [ 163.017810][T11304] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2714'. [ 163.060141][T11290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.233439][T11317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.233579][T11317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.325324][T11324] netlink: 'syz.1.2722': attribute type 1 has an invalid length. [ 163.396907][T11329] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.2724: corrupted in-inode xattr: invalid ea_ino [ 163.396949][T11329] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.397316][T11329] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2724: couldn't read orphan inode 15 (err -117) [ 163.397429][T11329] loop1: lost filesystem error report for type 5 error -117 [ 163.398455][T11329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.459069][T11329] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2724'. [ 163.576074][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.688909][T11342] EXT4-fs: inline encryption not supported [ 163.706553][T11342] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.719067][T11342] EXT4-fs error (device loop6): __ext4_fill_super:5621: inode #2: comm syz.6.2729: iget: special inode unallocated [ 163.719176][T11342] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 163.731586][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 163.731619][ C0] EXT4-fs (loop6): initial error at time 1700006752: __ext4_fill_super:5621: inode 2 [ 163.731679][ C0] EXT4-fs (loop6): last error at time 1700006752: __ext4_fill_super:5621: inode 2 [ 163.758522][T11342] EXT4-fs (loop6): get root inode failed [ 163.758642][T11342] EXT4-fs (loop6): mount failed [ 163.957144][T11349] EXT4-fs (loop2): invalid journal inode [ 163.957196][T11349] EXT4-fs (loop2): can't get journal size [ 163.973641][T11349] EXT4-fs (loop2): 1 truncate cleaned up [ 163.980645][T11353] netlink: 392 bytes leftover after parsing attributes in process `syz.6.2732'. [ 163.998941][T11349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.146408][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 164.146437][ T29] audit: type=1400 audit(1700006753.066:223999): avc: denied { read } for pid=11361 comm="syz.6.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 164.238651][ T29] audit: type=1400 audit(1700006753.156:224000): avc: denied { bind } for pid=11365 comm="syz.3.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.506253][T11376] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 164.506307][T11376] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 164.506422][T11376] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 164.506525][T11376] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 164.622312][T11377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=11377 comm=syz.3.2739 [ 164.651992][ T29] audit: type=1400 audit(1700006753.566:224001): avc: denied { read } for pid=11375 comm="syz.3.2739" name="format" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 164.655366][T11388] netlink: 'syz.1.2744': attribute type 32 has an invalid length. [ 164.755825][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.778055][ T29] audit: type=1400 audit(1700006753.696:224002): avc: denied { mounton } for pid=11389 comm="syz.1.2745" path="/proc/1460/task" dev="proc" ino=29561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 164.952438][T11408] netlink: 'syz.5.2752': attribute type 1 has an invalid length. [ 165.035785][T11411] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 165.134492][ T29] audit: type=1400 audit(1700006754.056:224003): avc: denied { write } for pid=11423 comm="syz.3.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 165.216089][ T29] audit: type=1400 audit(1700006754.136:224004): avc: denied { accept } for pid=11427 comm="syz.5.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.296640][T11426] ext4: Unknown parameter 'dont_measure' [ 165.414260][ T29] audit: type=1400 audit(1700006754.307:224005): avc: denied { create } for pid=11433 comm="syz.5.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 166.018872][T11452] set_capacity_and_notify: 7 callbacks suppressed [ 166.018912][T11452] loop3: detected capacity change from 0 to 512 [ 167.533166][T11459] loop6: detected capacity change from 0 to 256 [ 168.191034][T11452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.191129][T11452] ext4 filesystem being mounted at /510/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.268564][T11466] __nla_validate_parse: 4 callbacks suppressed [ 168.268593][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2772'. [ 168.268621][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2772'. [ 168.354466][T11468] loop6: detected capacity change from 0 to 128 [ 168.434587][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.457247][T11468] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2773'. [ 168.457319][T11468] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2773'. [ 168.457335][T11468] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2773'. [ 168.583415][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2774'. [ 168.603881][ T29] audit: type=1400 audit(1700006757.457:224006): avc: denied { create } for pid=11460 comm="syz.5.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 168.711438][T11482] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2777'. [ 169.116805][T11501] loop6: detected capacity change from 0 to 512 [ 169.127304][T11500] loop5: detected capacity change from 0 to 164 [ 169.284476][T11500] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 169.512705][ T29] audit: type=1400 audit(1700006758.427:224007): avc: denied { bind } for pid=11499 comm="syz.5.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.710837][ T29] audit: type=1400 audit(1700006758.597:224008): avc: denied { node_bind } for pid=11499 comm="syz.5.2785" saddr=fe88::106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 169.752105][T11507] syz.5.2785 (11507) used greatest stack depth: 9720 bytes left [ 169.758138][T11514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.766291][T11514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.995469][ T29] audit: type=1400 audit(1700006758.917:224009): avc: denied { cmd } for pid=11522 comm="syz.2.2791" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=io_uring permissive=1 [ 170.081439][T11485] syz.3.2779 (11485) used greatest stack depth: 9168 bytes left [ 170.189761][T11536] loop2: detected capacity change from 0 to 1764 [ 170.190650][T11536] iso9660: Bad value for 'check' [ 170.259011][ T29] audit: type=1400 audit(1700006759.177:224010): avc: denied { cpu } for pid=11537 comm="syz.3.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 170.340616][T11543] loop5: detected capacity change from 0 to 512 [ 170.341102][T11543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.341383][T11543] EXT4-fs: Ignoring removed i_version option [ 170.366064][T11543] EXT4-fs (loop5): 1 orphan inode deleted [ 170.366759][T11543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.434898][ T29] audit: type=1400 audit(1700006759.357:224011): avc: denied { mount } for pid=11546 comm="syz.6.2800" name="/" dev="autofs" ino=31993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 170.465487][ T29] audit: type=1400 audit(1700006759.387:224012): avc: denied { mounton } for pid=11546 comm="syz.6.2800" path="/proc" dev="autofs" ino=31994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 170.557408][ T29] audit: type=1400 audit(1700006759.477:224013): avc: denied { accept } for pid=11530 comm="syz.1.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.558274][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'. [ 170.558902][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'. [ 171.720696][ T9772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.769430][ T29] audit: type=1400 audit(1700006760.687:224014): avc: denied { setopt } for pid=11550 comm="syz.5.2801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.836246][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2804'. [ 171.898771][T11567] loop6: detected capacity change from 0 to 764 [ 171.947153][T11575] loop3: detected capacity change from 0 to 512 [ 172.089123][T11579] loop5: detected capacity change from 0 to 512 [ 172.124603][T11579] FAT-fs (loop5): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 172.649344][ T29] audit: type=1400 audit(1700006761.567:224015): avc: denied { append } for pid=11586 comm="syz.1.2813" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.975881][T11594] loop1: detected capacity change from 0 to 256 [ 172.991638][T11594] vfat: Unknown parameter '00000000000000000000005ÿÿ' [ 173.076844][T11599] loop1: detected capacity change from 0 to 512 [ 173.109886][T11599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.110016][T11599] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.176894][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.397439][T11615] __nla_validate_parse: 1 callbacks suppressed [ 173.397461][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2825'. [ 173.397518][T11615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2825'. [ 173.437664][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2825'. [ 173.437750][T11615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2825'. [ 174.089500][T11637] FAULT_INJECTION: forcing a failure. [ 174.089500][T11637] name failslab, interval 1, probability 0, space 0, times 0 [ 174.089535][T11637] CPU: 0 UID: 0 PID: 11637 Comm: syz.5.2833 Not tainted syzkaller #0 PREEMPT(lazy) [ 174.089569][T11637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.089586][T11637] Call Trace: [ 174.089594][T11637] [ 174.089603][T11637] __dump_stack+0x1d/0x30 [ 174.089632][T11637] dump_stack_lvl+0x95/0xd0 [ 174.089726][T11637] dump_stack+0x15/0x1b [ 174.089754][T11637] should_fail_ex+0x262/0x280 [ 174.089783][T11637] ? __alloc_skb+0x2e0/0x6f0 [ 174.089818][T11637] should_failslab+0x8c/0xb0 [ 174.089948][T11637] kmem_cache_alloc_node_noprof+0x82/0x400 [ 174.089985][T11637] ? netlink_insert+0x684/0x900 [ 174.090055][T11637] ? __alloc_skb+0x2e0/0x6f0 [ 174.090081][T11637] __alloc_skb+0x2e0/0x6f0 [ 174.090109][T11637] ? __alloc_skb+0x209/0x6f0 [ 174.090198][T11637] netlink_alloc_large_skb+0xbf/0xf0 [ 174.090220][T11637] netlink_sendmsg+0x40c/0x6f0 [ 174.090260][T11637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.090294][T11637] ____sys_sendmsg+0x532/0x580 [ 174.090367][T11637] ___sys_sendmsg+0x195/0x1e0 [ 174.090517][T11637] __x64_sys_sendmsg+0xd4/0x160 [ 174.090696][T11637] x64_sys_call+0x22ab/0x2550 [ 174.090786][T11637] do_syscall_64+0x112/0x360 [ 174.090964][T11637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.091104][T11637] RIP: 0033:0x7f5bae7ae159 [ 174.091296][T11637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.091389][T11637] RSP: 002b:00007f5bad207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.091461][T11637] RAX: ffffffffffffffda RBX: 00007f5baea35fa0 RCX: 00007f5bae7ae159 [ 174.091513][T11637] RDX: 0000000004000800 RSI: 0000200000006040 RDI: 0000000000000003 [ 174.091563][T11637] RBP: 00007f5bad207090 R08: 0000000000000000 R09: 0000000000000000 [ 174.091605][T11637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.091648][T11637] R13: 00007f5baea36038 R14: 00007f5baea35fa0 R15: 00007ffc6f049888 [ 174.091742][T11637] [ 174.106602][T11638] netlink: 'syz.1.2832': attribute type 21 has an invalid length. [ 174.106705][T11638] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2832'. [ 174.106797][T11638] netlink: 'syz.1.2832': attribute type 5 has an invalid length. [ 174.106842][T11638] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2832'. [ 174.703569][T11677] loop5: detected capacity change from 0 to 512 [ 174.727123][T11677] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 174.800606][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2844'. [ 174.947408][T11646] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.947500][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.947705][T11646] bridge_slave_0: entered allmulticast mode [ 174.972349][T11646] bridge_slave_0: entered promiscuous mode [ 174.980533][T11646] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.980594][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.980824][T11646] bridge_slave_1: entered allmulticast mode [ 175.003573][T11646] bridge_slave_1: entered promiscuous mode [ 175.030495][T11646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.042267][T11646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.069325][T11646] team0: Port device team_slave_0 added [ 175.076615][T11646] team0: Port device team_slave_1 added [ 175.107791][T11646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.107821][T11646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.107953][T11646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.156133][T11646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.156158][T11646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.156248][T11646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.232849][T11689] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 175.249931][T11646] hsr_slave_0: entered promiscuous mode [ 175.250453][T11646] hsr_slave_1: entered promiscuous mode [ 175.250852][T11646] debugfs: 'hsr0' already exists in 'hsr' [ 175.250877][T11646] Cannot create hsr debugfs directory [ 175.384395][T11691] loop6: detected capacity change from 0 to 2048 [ 175.435448][T11691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.459488][T11691] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 175.489630][ T29] audit: type=1400 audit(1700006764.408:224016): avc: denied { setattr } for pid=11690 comm="syz.6.2847" name="" dev="pipefs" ino=27033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 175.491311][T11691] ext4: Unknown parameter ''' [ 175.553943][T10154] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.624535][T11646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.635267][T11646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.638790][T11646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.641271][T11710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11710 comm=syz.6.2854 [ 175.654792][T11646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.661944][T11646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.675877][T11646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.681865][T11646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.697298][T11646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.747486][ T29] audit: type=1400 audit(1700006764.668:224017): avc: denied { getattr } for pid=11711 comm="syz.3.2855" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.773626][T11646] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.773660][T11646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.773783][T11646] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.773945][T11646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.848641][T11646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.863039][T11646] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.915950][ T29] audit: type=1400 audit(1700006764.838:224018): avc: denied { read } for pid=11722 comm="syz.5.2858" dev="sockfs" ino=32423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.992136][ T29] audit: type=1400 audit(1700006764.908:224019): avc: denied { create } for pid=11722 comm="syz.5.2858" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.992563][ T29] audit: type=1400 audit(1700006764.908:224020): avc: denied { write } for pid=11722 comm="syz.5.2858" name="file0" dev="tmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.993155][ T29] audit: type=1400 audit(1700006764.908:224021): avc: denied { open } for pid=11722 comm="syz.5.2858" path="/109/file0" dev="tmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.994073][ T29] audit: type=1400 audit(1700006764.918:224022): avc: denied { ioctl } for pid=11722 comm="syz.5.2858" path="/109/file0" dev="tmpfs" ino=610 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.177682][ T29] audit: type=1400 audit(1700006765.098:224023): avc: denied { connect } for pid=11730 comm="syz.3.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.266104][T11739] loop1: detected capacity change from 0 to 1764 [ 176.450365][T11739] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 177.001919][ T29] audit: type=1400 audit(1700006765.908:224024): avc: denied { unlink } for pid=9772 comm="syz-executor" name="file0" dev="tmpfs" ino=610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 177.433492][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2863'. [ 177.613370][T11757] loop5: detected capacity change from 0 to 7 [ 177.714653][ T29] audit: type=1400 audit(1700006766.638:224025): avc: denied { accept } for pid=11755 comm="syz.5.2865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.736773][T11646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.809311][T11764] loop1: detected capacity change from 0 to 512 [ 177.868191][T11764] FAT-fs (loop1): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 178.304197][T11646] veth0_vlan: entered promiscuous mode [ 178.317534][T11646] veth1_vlan: entered promiscuous mode [ 178.364163][T11646] veth0_macvtap: entered promiscuous mode [ 178.388860][T11646] veth1_macvtap: entered promiscuous mode [ 178.398937][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 178.399015][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 178.428996][T11646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.447436][T11646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.517833][ T3768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.517899][ T3768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.517960][ T3768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.518170][ T3768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.614154][T11785] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2874'. [ 178.667197][T11785] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2874'. [ 178.690884][T11797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24080 sclass=netlink_route_socket pid=11797 comm=syz.2.2876 [ 178.712905][T11794] loop3: detected capacity change from 0 to 1024 [ 178.713236][T11794] EXT4-fs: Ignoring removed oldalloc option [ 178.713262][T11794] EXT4-fs: Ignoring removed oldalloc option [ 178.735363][T11794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.762685][T11797] syzkaller0: entered promiscuous mode [ 178.762730][T11797] syzkaller0: entered allmulticast mode [ 178.816869][T11788] random: crng reseeded on system resumption [ 178.870871][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.942452][T11813] loop3: detected capacity change from 0 to 512 [ 178.951425][T11813] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.970106][T11813] ext4: Unknown parameter 'SMC_PNETID' [ 178.989273][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2880'. [ 178.989294][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2880'. [ 179.063406][T11813] EXT4-fs error (device loop3): ext4_quota_enable:7256: comm syz.3.2879: Bad quota inum: 2, type: 1 [ 179.075006][T11813] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 179.120004][T11813] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #15: comm syz.3.2879: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0) [ 179.218639][T11813] bond3: option ad_user_port_key: invalid value (40960) [ 179.226365][T11813] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 179.254427][T11813] bond3 (unregistering): Released all slaves [ 179.359421][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.371054][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.489054][ T3306] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 179.954482][T11834] loop1: detected capacity change from 0 to 1024 [ 179.955026][T11834] EXT4-fs: inline encryption not supported [ 179.955060][T11834] EXT4-fs: Ignoring removed bh option [ 179.981822][T11834] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 180.003635][T11834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.167642][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'. [ 180.167737][T11846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2892'. [ 180.191826][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'. [ 180.191939][T11846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2892'. [ 180.211401][ T3768] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.211547][ T3768] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.211744][ T3768] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.211781][ T3768] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.258595][T11833] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 180.278255][T11844] syzkaller0: entered promiscuous mode [ 180.718128][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 180.718187][ T29] audit: type=1400 audit(1700006769.638:224029): avc: denied { read } for pid=2967 comm="acpid" name="event2" dev="devtmpfs" ino=1066 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.718219][ T29] audit: type=1400 audit(1700006769.638:224030): avc: denied { open } for pid=2967 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=1066 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.718299][ T29] audit: type=1400 audit(1700006769.638:224031): avc: denied { ioctl } for pid=2967 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=1066 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.822920][ T29] audit: type=1400 audit(1700006769.738:224032): avc: denied { mount } for pid=11841 comm="syz.3.2890" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 181.138545][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.294101][T11860] loop2: detected capacity change from 0 to 512 [ 181.294629][T11860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.294870][T11860] EXT4-fs: Ignoring removed i_version option [ 181.377170][T11860] EXT4-fs (loop2): 1 orphan inode deleted [ 181.378085][T11860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.484327][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'. [ 181.484422][T11866] netlink: 'syz.1.2896': attribute type 25 has an invalid length. [ 181.484441][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2896'. [ 181.552618][T11866] netlink: 'syz.1.2896': attribute type 25 has an invalid length. [ 181.581005][T11646] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.667818][T11876] netlink: 'syz.2.2904': attribute type 25 has an invalid length. [ 181.723083][T11876] netlink: 'syz.2.2904': attribute type 25 has an invalid length. [ 181.731204][T11874] loop3: detected capacity change from 0 to 512 [ 181.737505][T11874] ext4: Unknown parameter 'dont_measure' [ 181.819018][ T29] audit: type=1400 audit(1700006770.698:224033): avc: denied { read } for pid=11877 comm="syz.1.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 181.845728][T11880] loop1: detected capacity change from 0 to 512 [ 181.849639][T11880] ext4: Unknown parameter 'uid' [ 181.967977][T11880] loop1: detected capacity change from 0 to 128 [ 181.970454][T11880] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.994350][T11880] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.099950][T11884] SELinux: security_context_str_to_sid (@”¤cRpÑÊú¼4­y6ż@ÛÔ©èp4•T»¾å»=IX>o”æ¨fýlÜn‹Ï®,B2?!{Ú”™Øi˵Pe(Ë(í%BØ´yKßMô°%´iž¸c‹ö§8) failed with errno=-22 [ 182.159171][T11893] loop6: detected capacity change from 0 to 128 [ 182.180270][ T29] audit: type=1400 audit(1700006771.099:224034): avc: denied { append } for pid=11877 comm="syz.1.2905" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 182.326858][T11191] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.391029][T11906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.391288][T11906] EXT4-fs: Ignoring removed i_version option [ 182.592892][T11906] EXT4-fs (loop6): 1 orphan inode deleted [ 182.593444][T11906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.623174][T10154] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.653089][T11921] set_capacity_and_notify: 1 callbacks suppressed [ 182.653180][T11921] loop6: detected capacity change from 0 to 1024 [ 182.656277][T11921] EXT4-fs: Ignoring removed bh option [ 182.656351][T11921] ext4: Unknown parameter 'func' [ 182.712676][T11921] veth0: entered promiscuous mode [ 182.748033][T11927] loop5: detected capacity change from 0 to 512 [ 182.751765][T11925] SELinux: syz.3.2923 (11925) wrote to user. This is no longer supported. [ 182.784468][T11927] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 182.784635][T11927] EXT4-fs (loop5): orphan cleanup on readonly fs [ 182.799380][T11927] Quota error (device loop5): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 182.799453][T11927] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 182.828891][T11927] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 182.837698][T11927] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.2924: bg 0: block 15: invalid block bitmap [ 182.837737][T11927] loop5: lost filesystem error report for type 5 error -117 [ 182.850370][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 182.850393][ C0] EXT4-fs (loop5): initial error at time 1700006771: ext4_validate_block_bitmap:436 [ 182.850419][ C0] EXT4-fs (loop5): last error at time 1700006771: ext4_validate_block_bitmap:436 [ 182.857875][T11927] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 182.857899][T11927] loop5: lost filesystem error report for type 5 error -117 [ 182.863663][T11927] EXT4-fs warning (device loop5): ext4_evict_inode:196: inode #16: comm syz.5.2924: data will be lost [ 182.864252][T11927] EXT4-fs (loop5): 1 truncate cleaned up [ 182.884598][T11927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.964016][T11921] loop6: detected capacity change from 0 to 8192 [ 182.973327][T11921] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.010230][T11921] program syz.6.2922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.064379][ T9772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.095978][T11934] loop3: detected capacity change from 0 to 512 [ 183.159619][T11191] smc: removing ib device syz1 [ 183.169892][T11921] veth0: left promiscuous mode [ 183.198003][ T29] audit: type=1400 audit(1700006772.119:224035): avc: denied { name_bind } for pid=11935 comm="syz.5.2927" path="socket:[33864]" dev="sockfs" ino=33864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.226797][T11934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.226878][T11934] ext4 filesystem being mounted at /542/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.256301][ T29] audit: type=1400 audit(1700006772.179:224036): avc: denied { write } for pid=11933 comm="syz.3.2926" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.311881][T11953] random: crng reseeded on system resumption [ 183.313240][ T29] audit: type=1400 audit(1700006772.229:224037): avc: denied { read append } for pid=11944 comm="syz.6.2929" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 183.464784][T11962] loop5: detected capacity change from 0 to 512 [ 183.465276][T11962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.465544][T11962] EXT4-fs: Ignoring removed i_version option [ 183.480332][T11962] EXT4-fs (loop5): 1 orphan inode deleted [ 183.490906][T11962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.586213][ T9772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.935084][T11992] __nla_validate_parse: 10 callbacks suppressed [ 183.935123][T11992] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2937'. [ 183.941928][T11974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.942182][T11974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.975970][T11974] sd 0:0:1:0: PR command failed: 1026 [ 183.976234][T11974] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 183.976463][T11974] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 184.092078][T11186] bridge_slave_1: left promiscuous mode [ 184.092321][T11186] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.110533][T11186] bridge_slave_0: left allmulticast mode [ 184.110590][T11186] bridge_slave_0: left promiscuous mode [ 184.110781][T11186] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.135293][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.140541][T11186] dvmrp8: left allmulticast mode [ 184.241263][T11186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.262169][T11186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.272630][T11186] bond0 (unregistering): Released all slaves [ 184.283200][T11186] bond1 (unregistering): Released all slaves [ 184.321269][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2941'. [ 184.322461][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2941'. [ 184.363924][T11186] hsr_slave_0: left promiscuous mode [ 184.369604][T11186] hsr_slave_1: left promiscuous mode [ 184.370106][T11186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.383017][T11186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.447358][T12027] loop3: detected capacity change from 0 to 512 [ 184.447652][T12027] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.447825][T12027] EXT4-fs: Ignoring removed i_version option [ 184.472766][T12027] EXT4-fs (loop3): 1 orphan inode deleted [ 184.473356][T12027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.539878][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.598981][T12039] FAULT_INJECTION: forcing a failure. [ 184.598981][T12039] name failslab, interval 1, probability 0, space 0, times 0 [ 184.599027][T12039] CPU: 1 UID: 0 PID: 12039 Comm: syz.2.2948 Not tainted syzkaller #0 PREEMPT(lazy) [ 184.599060][T12039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.599110][T12039] Call Trace: [ 184.599152][T12039] [ 184.599264][T12039] __dump_stack+0x1d/0x30 [ 184.599414][T12039] dump_stack_lvl+0x95/0xd0 [ 184.599636][T12039] dump_stack+0x15/0x1b [ 184.599709][T12039] should_fail_ex+0x262/0x280 [ 184.599809][T12039] ? skb_clone+0x151/0x1f0 [ 184.599905][T12039] should_failslab+0x8c/0xb0 [ 184.600025][T12039] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 184.600118][T12039] ? skb_clone+0x151/0x1f0 [ 184.600294][T12039] skb_clone+0x151/0x1f0 [ 184.600526][T12039] __netlink_deliver_tap+0x2be/0x510 [ 184.600646][T12039] netlink_unicast+0x656/0x680 [ 184.600846][T12039] netlink_sendmsg+0x5be/0x6f0 [ 184.600941][T12039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.601046][T12039] ____sys_sendmsg+0x532/0x580 [ 184.601224][T12039] ___sys_sendmsg+0x195/0x1e0 [ 184.601373][T12039] __x64_sys_sendmsg+0xd4/0x160 [ 184.601558][T12039] x64_sys_call+0x22ab/0x2550 [ 184.601651][T12039] do_syscall_64+0x112/0x360 [ 184.601779][T12039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.601862][T12039] RIP: 0033:0x7efdb485e159 [ 184.601962][T12039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.602043][T12039] RSP: 002b:00007efdb32b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.602080][T12039] RAX: ffffffffffffffda RBX: 00007efdb4ae5fa0 RCX: 00007efdb485e159 [ 184.602119][T12039] RDX: 0000000004000800 RSI: 0000200000006040 RDI: 0000000000000003 [ 184.602169][T12039] RBP: 00007efdb32b7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.602233][T12039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.602315][T12039] R13: 00007efdb4ae6038 R14: 00007efdb4ae5fa0 R15: 00007ffc287fd068 [ 184.602379][T12039] [ 184.779053][T12037] loop6: detected capacity change from 0 to 512 [ 184.791378][T12037] EXT4-fs: Ignoring removed oldalloc option [ 184.819067][T12037] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 184.819139][T12037] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #11: comm syz.6.2949: corrupted inode contents [ 184.819221][T12037] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.823970][T12037] EXT4-fs error (device loop6): ext4_dirty_inode:6731: inode #11: comm syz.6.2949: mark_inode_dirty error [ 184.824013][T12037] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.832347][ C1] EXT4-fs (loop6): error count since last fsck: 3 [ 184.832411][ C1] EXT4-fs (loop6): initial error at time 1700006773: mb_free_blocks:2049: inode 11: block 64 [ 184.832538][ C1] EXT4-fs (loop6): last error at time 1700006773: ext4_dirty_inode:6731: inode 11 [ 184.840496][T12037] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2949: invalid indirect mapped block 1 (level 1) [ 184.840624][T12037] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.852683][T12037] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #11: comm syz.6.2949: corrupted inode contents [ 184.852785][T12037] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.862288][T12050] loop2: detected capacity change from 0 to 512 [ 184.862664][T12037] EXT4-fs error (device loop6) in ext4_orphan_del:304: Corrupt filesystem [ 184.862708][T12037] loop6: lost filesystem error report for type 5 error -117 [ 184.877485][T12037] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #11: comm syz.6.2949: corrupted inode contents [ 184.877669][T12037] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.928041][T12037] EXT4-fs error (device loop6): ext4_truncate:4721: inode #11: comm syz.6.2949: mark_inode_dirty error [ 184.928338][T12037] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.931527][T12037] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 184.934987][T12037] loop6: lost filesystem error report for type 5 error -117 [ 184.956699][T12037] EXT4-fs (loop6): 1 truncate cleaned up [ 184.964154][T11930] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.964240][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.964473][T11930] bridge_slave_0: entered allmulticast mode [ 184.968819][T11930] bridge_slave_0: entered promiscuous mode [ 184.984287][T11930] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.984315][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.984435][T11930] bridge_slave_1: entered allmulticast mode [ 184.985495][T11930] bridge_slave_1: entered promiscuous mode [ 184.993531][T12037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.113550][T12037] EXT4-fs error (device loop6): ext4_readdir:270: inode #2: block 13: comm syz.6.2949: path /97/file0: bad entry in directory: directory entry too close to block end - offset=1016, size=1024 [ 185.132963][T12054] loop5: detected capacity change from 0 to 512 [ 185.140315][T11930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.156258][T11930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.249892][T11930] team0: Port device team_slave_0 added [ 185.258546][T11930] team0: Port device team_slave_1 added [ 185.289402][T12059] loop5: detected capacity change from 0 to 1024 [ 185.297275][T12059] EXT4-fs: inline encryption not supported [ 185.299655][T12059] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 185.317985][T12059] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.2955: lblock 2 mapped to illegal pblock 2 (length 1) [ 185.318032][T12059] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 185.318279][T12059] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.2955: Invalid inode table block 1 in block_group 0 [ 185.318326][T12059] loop5: lost filesystem error report for type 5 error -117 [ 185.318602][T12059] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 185.318636][T12059] loop5: lost filesystem error report for type 5 error -117 [ 185.319525][T12059] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.2955: mark_inode_dirty error [ 185.319657][T12059] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 185.319986][T12059] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.2955: Failed to acquire dquot type 0 [ 185.320067][T12059] loop5: lost filesystem error report for type 5 error -117 [ 185.320399][T12059] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 185.320499][T12059] loop5: lost filesystem error report for type 5 error -117 [ 185.320783][T12059] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.2955: mark_inode_dirty error [ 185.320858][T12059] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 185.321184][T12059] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 185.321344][T12059] EXT4-fs (loop5): 1 orphan inode deleted [ 185.332952][T12059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.355727][T11190] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.356049][T11190] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:21: Failed to release dquot type 0 [ 185.404696][T11930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.404735][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.404813][T11930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.406979][T11930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.407015][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.407094][T11930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.418400][T10154] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.545024][ T9772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.545792][ T9772] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 185.545831][ T9772] loop5: lost filesystem error report for type 5 error -117 [ 185.546006][ T9772] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 185.546060][ T9772] loop5: lost filesystem error report for type 5 error -117 [ 185.546344][ T9772] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 185.546411][ T9772] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 185.546692][ T9772] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 185.556845][T12061] netlink: 'syz.2.2954': attribute type 2 has an invalid length. [ 185.605366][T11930] hsr_slave_0: entered promiscuous mode [ 185.613745][T11930] hsr_slave_1: entered promiscuous mode [ 185.620987][T11930] debugfs: 'hsr0' already exists in 'hsr' [ 185.621032][T11930] Cannot create hsr debugfs directory [ 185.725864][T12067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.726051][T12067] EXT4-fs: Ignoring removed i_version option [ 185.744775][T12067] EXT4-fs (loop5): 1 orphan inode deleted [ 185.745395][T12067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.798428][T12072] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 185.813111][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 185.813142][ C1] EXT4-fs (loop6): initial error at time 1700006774: ext4_mb_generate_buddy:1317 [ 185.813161][ C1] EXT4-fs (loop6): last error at time 1700006774: ext4_mb_generate_buddy:1317 [ 185.839171][T12072] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2958: attempt to clear invalid blocks 1024 len 1 [ 185.856341][T12072] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2958: invalid indirect mapped block 1819239214 (level 0) [ 185.874224][T12072] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2958: invalid indirect mapped block 33554432 (level 2) [ 185.885534][T11930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.893670][ T9772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.899962][T12072] EXT4-fs (loop6): 1 truncate cleaned up [ 185.901049][T12072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.935758][T11930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 185.938269][T11930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.953302][T11930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.957269][T11930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.969866][T11930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.974605][T11930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.987474][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 185.987493][ T29] audit: type=1400 audit(1700006774.909:224070): avc: denied { ioctl } for pid=12070 comm="syz.6.2958" path="/dev/usbmon2" dev="devtmpfs" ino=148 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 185.988978][T11930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.057627][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2958'. [ 186.078086][T12072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12072 comm=syz.6.2958 [ 186.128226][ T29] audit: type=1400 audit(1700006775.049:224071): avc: denied { read } for pid=12070 comm="syz.6.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.128264][ T29] audit: type=1400 audit(1700006775.049:224072): avc: denied { write } for pid=12070 comm="syz.6.2958" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.175515][T11930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.201920][T10154] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.202989][T11930] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.224666][T11190] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.224705][T11190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.246505][T11190] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.246553][T11190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.293937][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2964'. [ 186.303616][T12095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2964'. [ 186.323788][T12103] tmpfs: Bad value for 'mpol' [ 186.341028][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2966'. [ 186.341131][T12106] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2966'. [ 186.364825][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2966'. [ 186.364867][T12106] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2966'. [ 186.401873][T11190] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.402424][T11190] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.402468][T11190] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.402576][T11190] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.498086][T12110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.498184][T12110] EXT4-fs: Ignoring removed i_version option [ 186.503812][T12110] EXT4-fs (loop6): 1 orphan inode deleted [ 186.504777][T12110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.601629][ T29] audit: type=1400 audit(1700006775.519:224073): avc: denied { setopt } for pid=12111 comm="syz.5.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 186.685331][T10154] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.777604][ T29] audit: type=1400 audit(1700006775.699:224074): avc: denied { kexec_image_load } for pid=12111 comm="syz.5.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 186.813263][T12122] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 186.813352][T12122] EXT4-fs (loop3): mount failed [ 186.851496][T11930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.956235][T12136] netlink: 'syz.6.2973': attribute type 32 has an invalid length. [ 187.407183][ T29] audit: type=1400 audit(1700006776.329:224075): avc: denied { ioctl } for pid=12156 comm="syz.3.2978" path="socket:[35224]" dev="sockfs" ino=35224 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 188.102257][T11930] veth0_vlan: entered promiscuous mode [ 188.129133][T11930] veth1_vlan: entered promiscuous mode [ 188.153026][T11930] veth0_macvtap: entered promiscuous mode [ 188.164510][T11930] veth1_macvtap: entered promiscuous mode [ 188.186482][T11930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.200369][T11930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.233049][T11185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.233148][T11185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.233259][T11185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.233291][T11185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.298628][ T29] audit: type=1400 audit(1700006777.219:224076): avc: denied { write } for pid=11930 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 188.298667][ T29] audit: type=1400 audit(1700006777.219:224077): avc: denied { open } for pid=11930 comm="syz-executor" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 189.007105][T12178] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 189.100543][T12184] set_capacity_and_notify: 5 callbacks suppressed [ 189.100576][T12184] loop1: detected capacity change from 0 to 128 [ 189.121932][T12184] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.134314][T12184] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.170630][T11930] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.308734][T12192] FAULT_INJECTION: forcing a failure. [ 189.308734][T12192] name failslab, interval 1, probability 0, space 0, times 0 [ 189.308901][T12192] CPU: 0 UID: 0 PID: 12192 Comm: syz.6.2989 Not tainted syzkaller #0 PREEMPT(lazy) [ 189.308935][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.308953][T12192] Call Trace: [ 189.308960][T12192] [ 189.308969][T12192] __dump_stack+0x1d/0x30 [ 189.309074][T12192] dump_stack_lvl+0x95/0xd0 [ 189.309102][T12192] dump_stack+0x15/0x1b [ 189.309126][T12192] should_fail_ex+0x262/0x280 [ 189.309155][T12192] ? copy_net_ns+0x139/0x490 [ 189.309180][T12192] should_failslab+0x8c/0xb0 [ 189.309214][T12192] __kmalloc_cache_noprof+0x7a/0x400 [ 189.309245][T12192] ? copy_net_ns+0x139/0x490 [ 189.309275][T12192] copy_net_ns+0x139/0x490 [ 189.309305][T12192] create_new_namespaces+0x1f6/0x420 [ 189.309489][T12192] unshare_nsproxy_namespaces+0x115/0x150 [ 189.309537][T12192] ksys_unshare+0x42b/0x710 [ 189.309567][T12192] __x64_sys_unshare+0x1f/0x30 [ 189.309604][T12192] x64_sys_call+0x1e33/0x2550 [ 189.309640][T12192] do_syscall_64+0x112/0x360 [ 189.309752][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.309776][T12192] RIP: 0033:0x7fde008ce159 [ 189.309798][T12192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.309876][T12192] RSP: 002b:00007fddff327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 189.309897][T12192] RAX: ffffffffffffffda RBX: 00007fde00b55fa0 RCX: 00007fde008ce159 [ 189.309913][T12192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 189.309931][T12192] RBP: 00007fde00965024 R08: 0000000000000000 R09: 0000000000000000 [ 189.309949][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.309966][T12192] R13: 00007fde00b56038 R14: 00007fde00b55fa0 R15: 00007ffd514fd3e8 [ 189.310012][T12192] [ 189.351104][T12188] loop1: detected capacity change from 0 to 512 [ 189.359855][T12188] ext4: Unknown parameter 'dont_measure' [ 189.523903][T12194] loop3: detected capacity change from 0 to 512 [ 189.526587][T12194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.526969][T12194] EXT4-fs: Ignoring removed i_version option [ 189.543153][T12194] EXT4-fs (loop3): 1 orphan inode deleted [ 189.544152][T12194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.709770][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.010395][T12215] __nla_validate_parse: 8 callbacks suppressed [ 190.010422][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2999'. [ 190.035659][T12215] loop6: detected capacity change from 0 to 1024 [ 190.064651][T12215] EXT4-fs: test_dummy_encryption option not supported [ 190.243426][T12225] FAULT_INJECTION: forcing a failure. [ 190.243426][T12225] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 190.243456][T12225] CPU: 0 UID: 0 PID: 12225 Comm: syz.5.3004 Not tainted syzkaller #0 PREEMPT(lazy) [ 190.243502][T12225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.243524][T12225] Call Trace: [ 190.243532][T12225] [ 190.243540][T12225] __dump_stack+0x1d/0x30 [ 190.243568][T12225] dump_stack_lvl+0x95/0xd0 [ 190.243600][T12225] dump_stack+0x15/0x1b [ 190.243621][T12225] should_fail_ex+0x262/0x280 [ 190.243646][T12225] should_fail_alloc_page+0xf2/0x100 [ 190.243676][T12225] __alloc_frozen_pages_noprof+0x157/0x400 [ 190.243757][T12225] alloc_pages_mpol+0xaf/0x1d0 [ 190.243783][T12225] folio_alloc_mpol_noprof+0x39/0x80 [ 190.243879][T12225] shmem_get_folio_gfp+0x3ff/0xd90 [ 190.243921][T12225] shmem_write_begin+0xfc/0x1f0 [ 190.243958][T12225] generic_perform_write+0x186/0x490 [ 190.244050][T12225] shmem_file_write_iter+0xc5/0xf0 [ 190.244090][T12225] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 190.244133][T12225] vfs_write+0x57f/0x9a0 [ 190.244170][T12225] ksys_write+0xdc/0x1a0 [ 190.244218][T12225] __x64_sys_write+0x40/0x50 [ 190.244267][T12225] x64_sys_call+0x154e/0x2550 [ 190.244298][T12225] do_syscall_64+0x112/0x360 [ 190.244325][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.244360][T12225] RIP: 0033:0x7f5bae76e98e [ 190.244377][T12225] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 190.244400][T12225] RSP: 002b:00007f5bad206da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.244422][T12225] RAX: ffffffffffffffda RBX: 00007f5bad2076c0 RCX: 00007f5bae76e98e [ 190.244439][T12225] RDX: 0000000000080000 RSI: 00007f5ba4de7000 RDI: 0000000000000005 [ 190.244533][T12225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.244548][T12225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 190.244563][T12225] R13: 00007f5bad206ee0 R14: 00007f5bad206ea0 R15: 00007f5ba4de7000 [ 190.244587][T12225] [ 190.273131][T12227] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3005'. [ 190.314050][T12227] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3005'. [ 190.479333][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3006'. [ 190.479491][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3006'. [ 190.543101][T12234] loop3: detected capacity change from 0 to 512 [ 190.639693][T12238] loop1: detected capacity change from 0 to 128 [ 190.654970][T12238] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3010'. [ 190.655040][T12238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3010'. [ 190.655062][T12238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3010'. [ 190.688546][T12236] loop5: detected capacity change from 0 to 1024 [ 190.707279][T12236] EXT4-fs: inline encryption not supported [ 190.710654][T12236] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.728453][T12236] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.3009: lblock 2 mapped to illegal pblock 2 (length 1) [ 190.728521][T12236] fserror_report: 3 callbacks suppressed [ 190.728538][T12236] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 190.728742][T12236] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 190.728771][T12236] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.3009: Invalid inode table block 1 in block_group 0 [ 190.728795][T12236] fserror_report: 1 callbacks suppressed [ 190.728840][T12236] loop5: lost filesystem error report for type 5 error -117 [ 190.729248][T12236] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 190.729272][T12236] loop5: lost filesystem error report for type 5 error -117 [ 190.729513][T12236] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.3009: mark_inode_dirty error [ 190.729543][T12236] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 190.729863][T12236] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 190.729884][T12236] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.3009: Failed to acquire dquot type 0 [ 190.730000][T12236] loop5: lost filesystem error report for type 5 error -117 [ 190.730747][T12236] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 190.730800][T12236] loop5: lost filesystem error report for type 5 error -117 [ 190.735094][T12236] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.3009: mark_inode_dirty error [ 190.735202][T12236] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 190.736222][T12236] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 190.736348][T12236] EXT4-fs (loop5): 1 orphan inode deleted [ 190.737508][T12236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.758720][T11185] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 190.759298][T11185] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:17: Failed to release dquot type 0 [ 190.840033][T12241] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3011'. [ 191.008392][ T9772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.009089][ T9772] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 191.009157][ T9772] loop5: lost filesystem error report for type 5 error -117 [ 191.009473][ T9772] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 191.009490][ T9772] loop5: lost filesystem error report for type 5 error -117 [ 191.009814][ T9772] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 191.009886][ T9772] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 191.010449][ T9772] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 191.010564][ T9772] loop5: lost filesystem error report for type 5 error -117 [ 191.029736][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3014'. [ 191.207809][T12254] loop3: detected capacity change from 0 to 512 [ 191.470149][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 191.470237][ T29] audit: type=1400 audit(1700006780.390:224078): avc: denied { getopt } for pid=12264 comm="syz.6.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 191.627266][ T29] audit: type=1400 audit(1700006780.550:224079): avc: denied { module_load } for pid=12264 comm="syz.6.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 191.652424][T12267] loop5: detected capacity change from 0 to 764 [ 191.652821][ T29] audit: type=1400 audit(1700006780.580:224080): avc: denied { write } for pid=12264 comm="syz.6.3020" name="functions" dev="configfs" ino=25944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.652865][T12265] LUN: removable file: (no medium) [ 191.659481][T12265] LUN: removable file: (no medium) [ 191.659516][ T29] audit: type=1400 audit(1700006780.580:224081): avc: denied { write } for pid=12264 comm="syz.6.3020" name="mass_storage.0" dev="configfs" ino=34641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.855202][T12276] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=274 sclass=netlink_xfrm_socket pid=12276 comm=syz.5.3024 [ 192.059318][T11186] IPVS: starting estimator thread 0... [ 192.097623][ C0] Remote OS is not known: 127.0.0.1:56056 -> 127.0.0.1:20002 [ 192.097623][ C0] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=64 TOS=0x00 PREC=0x00 TTL=64 ID=3739 DF PROTO=TCP SPT=56056 DPT=20002 SEQ=1458570605 ACK=0 WINDOW=65495 RES=0x00 SYN URGP=0 OPT (0204FFD70402080A4B1B27AD000000000103030A1E040101) [ 192.098766][ C0] Remote OS is not known: 127.0.0.1:20002 -> 127.0.0.1:56056 [ 192.098766][ C0] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=72 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=20002 DPT=56056 SEQ=1996328104 ACK=1458570606 WINDOW=65483 RES=0x00 ACK SYN URGP=0 OPT (0204FFD70402080A7D10DD5F4B1B27AD0103030A1E0C010140520389711E6A11) [ 192.168013][T12291] IPVS: using max 2592 ests per chain, 129600 per kthread [ 192.350007][ T29] audit: type=1400 audit(1700006781.270:224082): avc: denied { sqpoll } for pid=12301 comm="syz.6.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 192.386648][T12296] infiniband syz1: set active [ 192.386668][T12296] infiniband syz1: added syz_tun [ 192.426115][T12296] RDS/IB: syz1: added [ 192.426145][T12296] smc: adding ib device syz1 with port count 1 [ 192.426211][T12296] smc: ib device syz1 port 1 has no pnetid [ 192.474128][ T29] audit: type=1400 audit(1700006781.400:224083): avc: denied { read } for pid=12305 comm="syz.6.3037" name="file0" dev="tmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 192.612445][T12307] cgroup: fork rejected by pids controller in /syz6 [ 192.685126][T12300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.825390][T12314] loop1: detected capacity change from 0 to 512 [ 192.842187][T12314] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.842773][T12314] ext4: Unknown parameter 'SMC_PNETID' [ 192.872545][T12314] EXT4-fs error (device loop1): ext4_quota_enable:7256: comm syz.1.3039: Bad quota inum: 2, type: 1 [ 192.883512][T12314] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 192.923065][T12314] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #15: comm syz.1.3039: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0) [ 192.947653][T11190] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.947690][T11190] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.045958][T12314] bond1: option ad_user_port_key: invalid value (40960) [ 193.046006][T12314] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 193.072699][T12314] bond1 (unregistering): Released all slaves [ 193.138923][T11190] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.138994][T11190] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.179834][T11930] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 193.196756][T11190] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.196829][T11190] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.234578][T12328] netlink: 'syz.1.3042': attribute type 8 has an invalid length. [ 193.247043][T11190] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.247147][T11190] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.290189][ T3768] netdevsim netdevsim6 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.290912][ T3768] netdevsim netdevsim6 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.333181][T11190] bridge_slave_1: left allmulticast mode [ 193.333308][T11190] bridge_slave_1: left promiscuous mode [ 193.333478][T11190] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.338417][T12329] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 193.338480][T12329] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.338572][T12329] vhci_hcd vhci_hcd.0: Device attached [ 193.344942][T11190] bridge_slave_0: left allmulticast mode [ 193.344966][T11190] bridge_slave_0: left promiscuous mode [ 193.345098][T11190] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.482977][T11190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.493708][T11190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.503334][T11190] bond0 (unregistering): Released all slaves [ 193.511044][ T3768] netdevsim netdevsim6 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.511095][ T3768] netdevsim netdevsim6 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.545308][T12342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.545408][T12342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.570777][ T11] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 193.616617][T11190] hsr_slave_0: left promiscuous mode [ 193.624976][T11190] hsr_slave_1: left promiscuous mode [ 193.625451][T11190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.625471][T11190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.647617][T11190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.647639][T11190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.668591][T11190] veth1_macvtap: left promiscuous mode [ 193.668625][T11190] veth0_macvtap: left promiscuous mode [ 193.668671][T11190] veth1_vlan: left promiscuous mode [ 193.668772][T11190] veth0_vlan: left promiscuous mode [ 193.753330][ T29] audit: type=1400 audit(1700006782.680:224084): avc: denied { write } for pid=12346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.789139][ T29] audit: type=1400 audit(1700006782.710:224085): avc: denied { write } for pid=12358 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.831191][T11190] team0 (unregistering): Port device team_slave_1 removed [ 193.838604][T11190] team0 (unregistering): Port device team_slave_0 removed [ 193.874911][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 193.884285][T12361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.067131][T12335] vhci_hcd: connection reset by peer [ 194.067486][ T3768] vhci_hcd vhci_hcd.1: stop threads [ 194.067513][ T3768] vhci_hcd vhci_hcd.1: release socket [ 194.067541][ T3768] vhci_hcd vhci_hcd.1: disconnect device [ 194.097391][T12319] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.097435][T12319] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.097499][T12319] bridge_slave_0: entered allmulticast mode [ 194.101198][T12319] bridge_slave_0: entered promiscuous mode [ 194.103706][T12319] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.103798][T12319] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.103936][T12319] bridge_slave_1: entered allmulticast mode [ 194.108225][T12319] bridge_slave_1: entered promiscuous mode [ 194.154542][ T29] audit: type=1400 audit(1700006783.080:224086): avc: denied { write } for pid=12369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.189581][T12319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.205984][T12319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.247290][ T29] audit: type=1400 audit(1700006783.170:224087): avc: denied { write } for pid=12400 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.273451][T12319] team0: Port device team_slave_0 added [ 194.276489][T12319] team0: Port device team_slave_1 added [ 194.349553][T12319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.349592][T12319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.349666][T12319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.359999][T12319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.360039][T12319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.360130][T12319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.399675][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 194.473907][T12319] hsr_slave_0: entered promiscuous mode [ 194.476674][T12319] hsr_slave_1: entered promiscuous mode [ 194.477426][T12319] debugfs: 'hsr0' already exists in 'hsr' [ 194.477464][T12319] Cannot create hsr debugfs directory [ 194.756375][T12412] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.918846][T12412] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.975538][T12412] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.052688][T12412] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.180031][T12319] netdevsim netdevsim6 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.277751][T12319] netdevsim netdevsim6 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.321042][ T355] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.354359][T12319] netdevsim netdevsim6 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.530405][ T355] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.563280][T12319] netdevsim netdevsim6 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.680543][T12438] loop1: detected capacity change from 0 to 2048 [ 195.682470][T12438] EXT4-fs: dax option not supported [ 195.728990][T12440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.729136][T12440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.827207][T11186] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.839111][T11186] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.998232][T12456] __nla_validate_parse: 8 callbacks suppressed [ 195.998260][T12456] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3065'. [ 195.998311][T12456] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3065'. [ 196.024277][T12447] loop1: detected capacity change from 0 to 8192 [ 196.024536][T12447] msdos: Bad value for 'umask' [ 196.160150][T12319] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.182723][T12319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.198833][T12319] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.213904][T12319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.226911][T12319] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.253547][T12319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.266202][T12319] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.283958][T12319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.437547][T12488] program syz.5.3069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.448989][T12491] program syz.5.3069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.462830][T12493] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3069'. [ 196.473020][T12491] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3069'. [ 196.497169][T12319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.510495][T12319] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.520561][T11186] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.520620][T11186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.543767][T11186] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.543809][T11186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.601764][T12319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.665671][T12498] loop1: detected capacity change from 0 to 1024 [ 196.674495][T12498] EXT4-fs: inline encryption not supported [ 196.688277][T12498] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 196.705509][T12498] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.3071: lblock 2 mapped to illegal pblock 2 (length 1) [ 196.705562][T12498] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 196.719885][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 196.719909][ C1] EXT4-fs (loop1): initial error at time 1700006785: ext4_map_blocks:790: inode 3: block 2 [ 196.719954][ C1] EXT4-fs (loop1): last error at time 1700006785: ext4_map_blocks:790: inode 3: block 2 [ 196.720103][T12498] __quota_error: 67 callbacks suppressed [ 196.720114][T12498] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 196.720225][T12498] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz.1.3071: Invalid inode table block 1 in block_group 0 [ 196.720252][T12498] loop1: lost filesystem error report for type 5 error -117 [ 196.720660][T12498] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 196.720764][T12498] loop1: lost filesystem error report for type 5 error -117 [ 196.729945][T12498] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.3071: mark_inode_dirty error [ 196.729971][T12498] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 196.730191][T12498] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 196.730215][T12498] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.3071: Failed to acquire dquot type 0 [ 196.730296][T12498] loop1: lost filesystem error report for type 5 error -117 [ 196.731129][T12498] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 196.731197][T12498] loop1: lost filesystem error report for type 5 error -117 [ 196.769069][T12501] ================================================================== [ 196.769099][T12501] BUG: KCSAN: data-race in alloc_pid / copy_process [ 196.769124][T12501] [ 196.769130][T12501] read-write to 0xffffffff86e5c328 of 4 bytes by task 11190 on cpu 1: [ 196.769147][T12501] alloc_pid+0x6da/0x960 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 196.769165][T12501] copy_process+0x11cb/0x2340 [ 196.769187][T12501] kernel_clone+0x1c0/0x5f0 [ 196.769211][T12501] user_mode_thread+0xab/0xe0 [ 196.769235][T12501] call_usermodehelper_exec_work+0x7a/0x160 [ 196.769270][T12501] process_scheduled_works+0x56a/0xa50 [ 196.769300][T12501] worker_thread+0x569/0x750 [ 196.769332][T12501] kthread+0x223/0x270 [ 196.769351][T12501] ret_from_fork+0x146/0x330 [ 196.769382][T12501] ret_from_fork_asm+0x1a/0x30 [ 196.769408][T12501] [ 196.769413][T12501] read to 0xffffffff86e5c328 of 4 bytes by task 12501 on cpu 0: [ 196.769429][T12501] copy_process+0x1acf/0x2340 [ 196.769451][T12501] kernel_clone+0x1c0/0x5f0 [ 196.769475][T12501] __x64_sys_clone+0x143/0x180 [ 196.769501][T12501] x64_sys_call+0x2479/0x2550 [ 196.769526][T12501] do_syscall_64+0x112/0x360 [ 196.769554][T12501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.769582][T12501] [ 196.769586][T12501] value changed: 0x80000123 -> 0x80000124 [ 196.769598][T12501] [ 196.769602][T12501] Reported by Kernel Concurrency Sanitizer on: [ 196.769613][T12501] CPU: 0 UID: 0 PID: 12501 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(lazy) [ 196.769639][T12501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.769652][T12501] ================================================================== [ 196.772485][T12498] EXT4-fs error (device loop1): ext4_evict_inode:269: inode #11: comm syz.1.3071: mark_inode_dirty error [ 196.772609][T12498] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 196.792858][T12498] EXT4-fs warning (device loop1): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 196.792940][T12498] EXT4-fs (loop1): 1 orphan inode deleted [ 196.793535][T12498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.811890][T11188] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 196.812196][T11188] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 196.812316][T11188] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:20: Failed to release dquot type 0 [ 196.946984][ T29] audit: type=1400 audit(1700006785.860:224155): avc: denied { write } for pid=3280 comm="syz-executor" path="pipe:[2702]" dev="pipefs" ino=2702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 196.947015][ T29] audit: type=1400 audit(1700006785.870:224156): avc: denied { write } for pid=12482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.971085][ T29] audit: type=1400 audit(1700006785.890:224157): avc: denied { recv } for pid=12482 comm="dhcpcd-run-hook" saddr=10.128.0.163 src=34064 daddr=10.128.0.240 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 197.242715][ T29] audit: type=1400 audit(1700006786.170:224158): avc: denied { write } for pid=12512 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.302843][ T29] audit: type=1400 audit(1700006786.220:224159): avc: denied { mount } for pid=12509 comm="syz.5.3073" name="/" dev="rpc_pipefs" ino=36373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 197.374269][T11190] smc: removing ib device syz1 [ 197.386880][T10763] syz1: Port: 1 Link DOWN [ 197.442265][ T29] audit: type=1400 audit(1700006786.370:224160): avc: denied { write } for pid=12514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.468800][ T3768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.468856][ T3768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.521538][T11930] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.523127][ T29] audit: type=1400 audit(1700006786.450:224161): avc: denied { write } for pid=12525 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.554275][T11930] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 197.554310][T11930] loop1: lost filesystem error report for type 5 error -117 [ 197.554570][T11930] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 197.554603][T11930] loop1: lost filesystem error report for type 5 error -117 [ 197.554955][T11930] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 197.555031][T11930] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 197.555319][T11930] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 197.555362][T11930] loop1: lost filesystem error report for type 5 error -117 [ 197.626654][ T3768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.626765][ T3768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.674921][ T3768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.674961][ T3768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.763849][ T3768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.763899][ T3768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.856156][T11185] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.874951][ T3768] bridge_slave_1: left allmulticast mode [ 197.875080][ T3768] bridge_slave_1: left promiscuous mode [ 197.875506][ T3768] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.887052][ T3768] bridge_slave_0: left allmulticast mode [ 197.887095][ T3768] bridge_slave_0: left promiscuous mode [ 197.887457][ T3768] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.952890][ T3768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.962815][ T3768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.964959][ T3768] bond0 (unregistering): Released all slaves [ 197.990331][T11186] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.990547][T11186] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.007579][T11186] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.020361][ T3768] hsr_slave_0: left promiscuous mode [ 198.026007][ T3768] hsr_slave_1: left promiscuous mode [ 198.026572][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.026592][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.047136][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.047157][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.065184][ T3768] veth1_macvtap: left promiscuous mode [ 198.065285][ T3768] veth0_macvtap: left promiscuous mode [ 198.065377][ T3768] veth1_vlan: left promiscuous mode [ 198.065414][ T3768] veth0_vlan: left promiscuous mode [ 198.153294][ T3768] team0 (unregistering): Port device team_slave_1 removed [ 198.161852][ T3768] team0 (unregistering): Port device team_slave_0 removed [ 198.194487][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 198.299128][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 198.400037][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 198.501725][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 198.600220][ T11] usb 3-1: enqueue for inactive port 0 [ 198.600284][ T11] usb 3-1: enqueue for inactive port 0 [ 198.670187][ T11] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 198.945592][ T355] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.970591][ T3768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.970627][ T3768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.983287][T11188] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.983390][T11188] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.983597][T11188] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.031715][ T3768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.031766][ T3768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.092880][ T3768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.092936][ T3768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.138731][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 199.153201][ T3768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.153290][ T3768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.209021][T11188] netdevsim netdevsim3 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.238179][ T3768] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.250105][ T355] netdevsim netdevsim3 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.250228][ T355] netdevsim netdevsim3 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.250275][ T355] netdevsim netdevsim3 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.293635][ T3768] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.311427][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 199.344029][ T3768] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.393641][ T3768] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.433422][T11188] netdevsim netdevsim1 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.449084][T11188] netdevsim netdevsim1 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.449994][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 199.464530][ T3768] bridge_slave_1: left allmulticast mode [ 199.464563][ T3768] bridge_slave_1: left promiscuous mode [ 199.464785][ T3768] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.476269][ T3768] bridge_slave_0: left allmulticast mode [ 199.476322][ T3768] bridge_slave_0: left promiscuous mode [ 199.476765][ T3768] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.503281][ T3768] bridge_slave_1: left allmulticast mode [ 199.503375][ T3768] bridge_slave_1: left promiscuous mode [ 199.503682][ T3768] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.514931][ T3768] bridge_slave_0: left allmulticast mode [ 199.514988][ T3768] bridge_slave_0: left promiscuous mode [ 199.515264][ T3768] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.604368][ T3768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.614462][ T3768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.623732][ T3768] bond0 (unregistering): Released all slaves [ 199.648357][ T3768] bond0 (unregistering): Released all slaves [ 199.654017][ T3768] bond1 (unregistering): Released all slaves [ 199.659085][ T3768] bond2 (unregistering): Released all slaves [ 199.683722][ T3768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.693561][ T3768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.703068][ T3768] bond0 (unregistering): Released all slaves [ 199.730056][T11185] netdevsim netdevsim1 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.731402][T11185] netdevsim netdevsim1 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.759722][ T3768] hsr_slave_0: left promiscuous mode [ 199.765978][ T3768] hsr_slave_1: left promiscuous mode [ 199.766617][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.779725][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.787747][ T3768] hsr_slave_0: left promiscuous mode [ 199.793698][ T3768] hsr_slave_1: left promiscuous mode [ 199.801414][ T3768] hsr_slave_0: left promiscuous mode [ 199.807122][ T3768] hsr_slave_1: left promiscuous mode [ 199.807540][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.807637][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.827845][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.827887][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.849308][ T3768] veth1_macvtap: left promiscuous mode [ 199.849345][ T3768] veth0_macvtap: left promiscuous mode [ 199.860923][ T3768] veth1_macvtap: left promiscuous mode [ 199.860987][ T3768] veth0_macvtap: left promiscuous mode [ 199.861044][ T3768] veth1_vlan: left promiscuous mode [ 199.861113][ T3768] veth0_vlan: left promiscuous mode [ 199.974831][ T3768] team0 (unregistering): Port device team_slave_1 removed [ 199.982329][ T3768] team0 (unregistering): Port device team_slave_0 removed [ 200.078665][ T3768] team0 (unregistering): Port device team_slave_1 removed [ 200.087022][ T3768] team0 (unregistering): Port device team_slave_0 removed [ 200.118433][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 200.248797][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 200.357103][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 200.464468][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20 [ 200.605185][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 200.711404][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21 [ 200.792145][ T3768] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.828440][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22 [ 200.841831][ T3768] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.881557][ T3768] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.911592][ T3768] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.976948][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23 [ 200.979970][T11188] netdevsim netdevsim5 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.996173][ T3768] bridge_slave_1: left allmulticast mode [ 200.996212][ T3768] bridge_slave_1: left promiscuous mode [ 200.996466][ T3768] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.007959][ T3768] bridge_slave_0: left allmulticast mode [ 201.008035][ T3768] bridge_slave_0: left promiscuous mode [ 201.008181][ T3768] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.072571][ T3768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.082800][ T3768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.092851][ T3768] bond0 (unregistering): Released all slaves [ 201.109898][T11186] netdevsim netdevsim5 eth26: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.110027][T11186] netdevsim netdevsim5 eth28: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.110080][T11186] netdevsim netdevsim5 eth27: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.144293][ T3768] hsr_slave_0: left promiscuous mode [ 201.150389][ T3768] hsr_slave_1: left promiscuous mode [ 201.150939][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.151022][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.172394][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.172419][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.190934][ T3768] veth1_macvtap: left promiscuous mode [ 201.190988][ T3768] veth0_macvtap: left promiscuous mode [ 201.191055][ T3768] veth1_vlan: left promiscuous mode [ 201.191189][ T3768] veth0_vlan: left promiscuous mode [ 201.300071][ T3021] 8021q: adding VLAN 0 to HW filter on device eth24 [ 201.405977][ T3021] 8021q: adding VLAN 0 to HW filter on device eth26 [ 201.463272][ T3768] IPVS: stop unused estimator thread 0... [ 201.517783][ T3021] 8021q: adding VLAN 0 to HW filter on device eth25 [ 201.623410][ T3021] 8021q: adding VLAN 0 to HW filter on device eth27 [ 201.725271][ T3021] 8021q: adding VLAN 0 to HW filter on device eth28