last executing test programs: 4m49.653342769s ago: executing program 32 (id=132): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 4m39.198752617s ago: executing program 33 (id=173): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x455}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x949}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3076}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000004) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 3m21.358463336s ago: executing program 1 (id=537): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000080)={[{@oldalloc}, {@noblock_validity}, {@delalloc}]}, 0x86, 0x48e, &(0x7f00000008c0)="$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") r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x298}, 0xc054) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c7f02b73921f89607b241bf2a33b42e42975d9d3b882245af92ed7ffd6c1633db7f3b9c386dbb198c956c4c809215f81276797b0aa87c1fdb945ea69b4f3ac23c04859289201280d9724d2e68848de5ad8e0839b10ad7b83195676e8270863fd2828eab3a0c10321d984b3da2b0949251b9ce09097d2645f5763663f84c4cfae640596db0f054f2e82d6111c061137c86482b374339c6a527e05b6", 0x9b, 0x4040004, &(0x7f00000001c0)={0xa, 0x4e22, 0x32, @local, 0x600000}, 0x1c) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000440)={0x8, {{0xa, 0x4e23, 0x1, @private0, 0x2}}, {{0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, 0x108) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 3m21.19932003s ago: executing program 1 (id=539): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs(0x0, &(0x7f0000000bc0)='pagemap\x00') openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x149a82, 0x20) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000340)={[{@mblk_io_submit}, {@grpjquota}, {@init_itable}]}, 0x8, 0x4ca, &(0x7f0000000f00)="$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") r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) read(r5, &(0x7f0000000240)=""/97, 0x61) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) 3m19.82992772s ago: executing program 1 (id=552): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r0, 0x3, &(0x7f0000000080)={0x2, 0x10000006}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000000000000000100df"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xe9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x82}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8894}, 0x24000000) setresuid(0xee01, 0x0, 0x0) setuid(0x0) 3m19.81846851s ago: executing program 1 (id=553): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$kcm(0x11, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0xfffffffd, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prlimit64(r2, 0xb, &(0x7f0000000140)={0x2, 0x6}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd2a, 0x0, {0x7}}, 0x1c}}, 0x4100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r4], 0x28}}, 0x816) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000001c0)={0x0, 0xfb, 0x6d, 0x2, 0x3, "71caa692fa84ae16c05cf20cb7a3160e", "c2380b3e269b417d70f3a499049b38960157e0f71fbbdfc283633d6418bbdb95c202f602f3e2f6e76f1d55903bd125e3e2e3c1999a92ede9a7d3721645b314ac818d68912876074a370bf29bc6683d319c5eabfa4a2d8d68"}, 0x6d, 0x6) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 3m19.165881184s ago: executing program 1 (id=563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001880)=@nat={'nat\x00', 0x670, 0x5, 0x6b0, 0x0, 0x490, 0xfeffffff, 0x368, 0x490, 0x618, 0x618, 0xffffffff, 0x618, 0x618, 0x5, 0x0, {[{{@uncond, 0x0, 0x308, 0x368, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', {0x6}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x4, 0x5, 0x4, 0x5, 0x4], 0x6, 0x2}, {0x1, [0x5, 0x5, 0x3, 0x5, 0x1, 0x4], 0x3}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x5, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x710) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32=r6, @ANYRES8=r6], 0x48) r8 = fsmount(r5, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r7, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000ec0)=r8}, 0x20) fchdir(r8) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r9, 0x4000, r8}, 0x18) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) read(r10, &(0x7f0000000400)=""/198, 0xc6) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r11, r12, 0x26, 0x0, @val=@tcx={@void, @value=r11}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$TIPC_SRC_DROPPABLE(r15, 0x10f, 0x80, &(0x7f0000000100)=0xfffffffe, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r13, r11, 0x4}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r0, r11}) 3m18.698549045s ago: executing program 1 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x288, 0x5802, 0x294, 0x288, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x52020000, {}, [@common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) (async) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x48000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf25190000001400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x4000080) 3m18.671821565s ago: executing program 34 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x288, 0x5802, 0x294, 0x288, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x52020000, {}, [@common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) (async) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x48000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf25190000001400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x4000080) 2m48.344342156s ago: executing program 6 (id=781): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x17e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0) ioctl$BLKPG(r0, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) 2m48.090487692s ago: executing program 6 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe2000/0x12000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc89e, 0xc04a, 0x1, 0x800000bf}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x900) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000dac5a7d67a998104d0285e1c16bd096fa6801f18238d618ee3c444df66b97a908ca9088f982a0125fbcb95e507a38fdb04adffe551cb3b864ed908190fead586b4ef1ab7a39ac0176aca226d5f13dbad1accfbdc111d812e779f205c8e64255dfda5a9b7f939c60e9301284be965d7797e2945ba73009540d6990d9214373d730a98d6cfc0e5bc6f4b819d5862656aa147590c0492eeb590f74d1dde6ae018b6b88c6f17", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x8000) 2m48.082749292s ago: executing program 6 (id=786): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8, 0x0, 0x0}}, 0x10) 2m47.985979244s ago: executing program 6 (id=791): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$kcm(0x11, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0xfffffffd, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prlimit64(r2, 0xb, &(0x7f0000000140)={0x2, 0x6}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd2a, 0x0, {0x7}}, 0x1c}}, 0x4100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r4], 0x28}}, 0x816) 2m47.322441679s ago: executing program 6 (id=798): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000bc0)={[{@nodelalloc}, {@dioread_lock}, {@bsdgroups}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc}}, {@resgid}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@user_xattr}]}, 0x1, 0x578, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x28, 0x20, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x10007}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 2m46.414396198s ago: executing program 6 (id=802): r0 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open$dir(&(0x7f0000000280)='./file0\x00', 0x8000, 0x0) sendmmsg$inet(r1, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0xa5) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x12}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800410004000000000000009aaa000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000001000000b7040000010000008500000015000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r6, &(0x7f00000000c0)=0xa7, 0x12) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x34, 0x32, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff9}]}, 0x34}}, 0x0) 2m45.916326909s ago: executing program 35 (id=802): r0 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open$dir(&(0x7f0000000280)='./file0\x00', 0x8000, 0x0) sendmmsg$inet(r1, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0xa5) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x12}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800410004000000000000009aaa000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000001000000b7040000010000008500000015000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r6, &(0x7f00000000c0)=0xa7, 0x12) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x34, 0x32, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff9}]}, 0x34}}, 0x0) 2m39.45005915s ago: executing program 8 (id=849): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x6) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r6 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_usb_disconnect(0xffffffffffffffff) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00q'], 0x0) 2m38.248712537s ago: executing program 8 (id=870): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff00ff80000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432"], 0x23c}}, 0x4080) 2m38.08121651s ago: executing program 8 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000200d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2m37.878689395s ago: executing program 8 (id=878): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$kcm(0x11, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0xfffffffd, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prlimit64(r2, 0xb, &(0x7f0000000140)={0x2, 0x6}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd2a, 0x0, {0x7}}, 0x1c}}, 0x4100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r4], 0x28}}, 0x816) 2m37.531756172s ago: executing program 8 (id=884): socket(0x2b, 0x1, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000030000000000aa00000000000000000000ffff7f000001000107944e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = socket$rxrpc(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x40}, {0xffffffffffffffff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) connect$inet6(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x1e, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x200000) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmctl$IPC_INFO(r4, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2m35.373691339s ago: executing program 8 (id=906): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$kcm(0x11, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0xfffffffd, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prlimit64(r2, 0xb, &(0x7f0000000140)={0x2, 0x6}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd2a, 0x0, {0x7}}, 0x1c}}, 0x4100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r4], 0x28}}, 0x816) 2m35.33984267s ago: executing program 36 (id=906): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$kcm(0x11, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0xfffffffd, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prlimit64(r2, 0xb, &(0x7f0000000140)={0x2, 0x6}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd2a, 0x0, {0x7}}, 0x1c}}, 0x4100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r4], 0x28}}, 0x816) 2m14.316201009s ago: executing program 9 (id=1067): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x80100) getpid() socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="f000000026000100feffffff00010000ac1e0101000000000000000000000000fc0100000000000000000a0000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000000000000020001002000000000000000"], 0xf0}}, 0x20000844) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0, {0x8a0}}, './file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0xffe, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x4}, 0x0) 2m13.571955925s ago: executing program 9 (id=1073): unshare(0x4a000200) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000540)=@buf) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x387, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64) writev(0xffffffffffffffff, 0x0, 0x0) (async) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) setfsgid(0xee01) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='*#)$\x00') 2m13.439243698s ago: executing program 9 (id=1076): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0xfffffffffffff148}, 0x0, 0x35, 0x6, 0x3, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff91, 0xfffffffffffffff8}, 0x126a0, 0x1000, 0x0, 0x0, 0xff, 0x2, 0x1, 0x0, 0x40000, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000500)='\t!=&\x00\xaeH\xfc\xf7\xf7\xd4\x1c\x94\xcb\r^\xd6<\xda9\xdc\xac(\x8cj\x13hk\xfc\xa8\v#)\xddk\x93\x12\xbfh\x95\xb9\xb7-:\xebr\xf2%\xaf\x8fH\x89MO\xf7\xbe\x1b\xd7\xd7S\b\x00\x00\x00\x00\x00\x00') 2m13.084117386s ago: executing program 9 (id=1083): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) socket$netlink(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x200000, 0xfffffffffffffff8, 0x0, 0x1, 0x51, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xe, 0x715, 0x8000000000000000, 0x2, 0x80000000000002, 0x800, 0x20000}, 0x0, 0x0) write$selinux_access(r2, &(0x7f0000000080)={'system_u:object_r:newrole_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x52f}, 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0xb0000000}) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000210029bd700000000000030000001400018011"], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1403"}}}}}, 0x0) 2m11.451202461s ago: executing program 9 (id=1093): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x17e) ioctl$BLKPG(r0, 0x1274, 0x0) 2m10.950460532s ago: executing program 9 (id=1095): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x18}}], 0x40001b6, 0xf5) 2m10.950243192s ago: executing program 37 (id=1095): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x18}}], 0x40001b6, 0xf5) 2m10.309296126s ago: executing program 2 (id=1099): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000003080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x27}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5574, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) 2m10.210056799s ago: executing program 2 (id=1101): socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x80100) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="f000000026000100feffffff00010000ac1e0101000000000000000000000000fc0100000000000000000a0000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000000000000020001002000000000000000"], 0xf0}}, 0x20000844) 2m10.12747394s ago: executing program 2 (id=1103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [0x0, 0x0, 0x40000], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 2m9.186348651s ago: executing program 2 (id=1104): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x21c5d4, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120c, &(0x7f0000003680)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8bd810, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000fcffffff8500000023000000180100002720642500000000002020207b1af8ff000000001b02ddd30000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0xa4, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbffffc, 0x1, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100382, 0x100200000004, 0x0, 0x9, 0x12, 0x4, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xc, r0, 0x5, &(0x7f0000001280)=""/110) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TCSBRK(r1, 0x5409, 0xffffffff) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x4, 0x4, 0x568, 0xffffffff, 0x220, 0x220, 0x220, 0xfeffffff, 0xffffffff, 0x498, 0x498, 0x498, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@ipv6header={{0x28}, {0x4c, 0x53, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], 'dvmrp1\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b", 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfffd}}}, {{@uncond, 0x0, 0x230, 0x278, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffffff, 0xff000000, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv4=@remote, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x2e, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ah={{0x30}, {[0x4d2, 0x4d5], 0x0, 0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x45}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf20) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(r5, &(0x7f0000000240)={[0x3]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000100), 0x4) 2m7.200580654s ago: executing program 2 (id=1109): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x80100) getpid() socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="f000000026000100feffffff00010000ac1e0101000000000000000000000000fc0100000000000000000a0000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000000000000020001002000000000000000"], 0xf0}}, 0x20000844) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x2000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0xffe, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x4}, 0x0) 2m5.961889531s ago: executing program 2 (id=1117): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs(0x0, &(0x7f0000000bc0)='pagemap\x00') openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x20) write$cgroup_int(r0, &(0x7f0000000480)=0xfe8e, 0x12) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000340)={[{@mblk_io_submit}, {@grpjquota}, {@init_itable}]}, 0x8, 0x4ca, &(0x7f0000000f00)="$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") r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) read(r6, &(0x7f0000000240)=""/97, 0x61) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) 2m5.921739422s ago: executing program 38 (id=1117): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs(0x0, &(0x7f0000000bc0)='pagemap\x00') openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x20) write$cgroup_int(r0, &(0x7f0000000480)=0xfe8e, 0x12) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000340)={[{@mblk_io_submit}, {@grpjquota}, {@init_itable}]}, 0x8, 0x4ca, &(0x7f0000000f00)="$eJzs3c1vG2UaAPDHdpMmaXb7satV25W2lbpS90ON86FVk+5e9rTLoRKiEheQSkjcUOLEUeyUJuohhVsPHBAIJMSBO38BF3qiQkKc4Y44oCIoQQIkJKMZ222+HExJYzXz+0lTz7wzk2feWs+rd96Z8QSQWaeTf3IRgxHxSUQcbixu3OB042Pt3o2pZMpFvX7p61y6XbLc2rS136GIWI2Ivoh46n8Rz+e2xq0ur8xOlsulxeZysTa3UKwur5y7Ojc5U5opzY+Mn5+YGB8eG53YtbreevXFWxfff6L3ve9fuXvntQ8/SA5rsLlufT12U6PqPXF0XdmBiPjPowjWBYVmffq7fSA8lOT7+0NEnEnz/3AU0m8TyIJ6vV7/qX6w3erVOrBv5dM+cC4/FBGN+Xx+aKjRh/9jDOTLlWrtn1cqS/PTjb7ykejJX7laLg03zxWORE8uWR5J5x8sj25aHotI+8CvF/rT5aGpSnl6b5s6YJNDm/L/u0Ij/4GMcMoP2SX/IbvkP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZNKTFy8mU731/Pv0teWl2cq1c9Ol6uzQ3NLU0FRlcWFoplKZSZ/Zmfulv1euVBZG/hVL14u1UrVWrC6vXJ6rLM3XLqfP9V8u9exJrYBOHD11+7NcRKxe6I8LvY2y5kfIVdjf6vVcdPsZZKA7Ct1ugICuMfQH2eUcH9j8E72b+wV97XZceDBeCDxe8t0+AKBrzp54cP0vmcL1P8gM4/+QXcb/Ibv08YFtXtG3wU7j/8Djyfg/ZNdgm/d//W7du7uGI+L3EfFpoedg611fwH6Q/zLX7P+fPfzXwc1re3M/pJcIeiPipbcvvXl9slZbHEnKv7lfXnurWT66bse2JwxAt7TytJXHAEB2rd27MdWa9jLuV/9t3ISwNf6B5thkX3qNcmAtt+Fehdwu3buwerNxDXRr/FzzfeeNE5mBtcKW+Mean8l0vDl+ciB9b/qvi5/s/DDxT6yL/5d18U/+5v8VyIbbSfszvF3+5dOcjvv5t7H9Gdyleyfat3/5++1foU37d6rDGC+88/IXbePfjDi5bfxWvL401ub4ybGd7TD+3Wef/lO7dfV3G39nu/gtyVyxNrdQrC6vnEt/R26mND8yfn5iYnx4bHSimI5RF1sj1Vv9+/jHd3aq/0Cb+DvVPyn7e4f1//HPHz1zeof4fzuz/fd/bIf4/RHxjw7jfzv6+XPt1iXxp9vUP79D/KRsrMP41Tf+f7DDTQGAPVBdXpmdLJdLi2bMZHump1vRb3a/7tvMdLtlAh616nJyap4kfbePBAAAAAAAAAAAAOjUXtxO3O06AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsBz8HAAD//2Xh09M=") r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) read(r6, &(0x7f0000000240)=""/97, 0x61) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) 7.76573338s ago: executing program 0 (id=2072): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000bc0)={[{@nodelalloc}, {@dioread_lock}, {@bsdgroups}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc}}, {@resgid}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@user_xattr}]}, 0x1, 0x578, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x28, 0x20, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x10007}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 5.322760504s ago: executing program 0 (id=2079): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r5, 0x2000000) pread64(r5, &(0x7f0000000480)=""/84, 0x54, 0x800000048e) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd37}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) 5.234656826s ago: executing program 5 (id=2082): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500007800000000000190780a010102ac1414aa050090780100000047000000000000000011000064010100ffffffff440ce6010a0101014e210002003cbc01e0000001000000000000000000000000ac1414000000000000000000000000080000000000000000ac1e00010000000000000000fffffffc"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c000000200025a72bbd7000fedbdf250a002004ff00800102000100080006000000000014000200000000000000000000000000000000011400110074"], 0x4c}, 0x1, 0x0, 0x0, 0x845}, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r6, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004cfe050000000000000477fbac141416ac14141694079f03b1800007150510e0845013f2325f003909050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff3e}, 0x2c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) 5.090231369s ago: executing program 0 (id=2084): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000140)="d09add", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004) (fail_nth: 4) 4.963438322s ago: executing program 0 (id=2086): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@bridge_dellink={0x24, 0x13, 0x1, 0x70bd25, 0x0, {0x7, 0x0, 0x0, r1, 0x180, 0x41009}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000090}, 0x84) 4.735647437s ago: executing program 0 (id=2088): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e21, @multicast1}}}, 0x88) syz_emit_ethernet(0x6, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="4f463273e41a", @val={@val={0x88a8, 0x5, 0x0, 0x1}, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x63, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x800002}}}}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, 0x0, 0x2, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc048}, 0xc51) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r2, 0x26, 0x0) write$cgroup_type(r3, 0x0, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/snmp6\x00') read$eventfd(r6, &(0x7f0000000380), 0x8) r7 = msgget$private(0x0, 0x1f3) msgrcv(r7, 0x0, 0x0, 0xfffffffffffffff9, 0x0) getgroups(0x0, 0x0) msgctl$IPC_SET(r7, 0x1, &(0x7f0000002640)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x158, 0x100}, 0x0, 0x0, 0x9, 0x100, 0x6df2, 0x6fc2, 0x101, 0xff, 0x67f, 0x7}) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4044054}, 0x40) 4.026509272s ago: executing program 3 (id=2089): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}, 0x4000}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x24044004) 3.961503594s ago: executing program 3 (id=2090): socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x0, 0x0, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002"], 0x58}}, 0x20008000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='timerslack_ns\x00') setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r2, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000c40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003}, 0x38) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040026bd7000fcdbdf253000000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000a000000110000000600360034000000060036000c00000006003600070000000600360003000000062036003e000000060036001d000000"], 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x54) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) 3.824015327s ago: executing program 3 (id=2093): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000006c0)='wg1\x00', 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r7, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff1100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=@delqdisc={0x17c, 0x25, 0x10, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {0xffe0, 0xf}, {0x5, 0x7}}, [@TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x5, 0x94e, 0x6, 0x2, 0x0, 0xb19f, 0x4}}, {0xc, 0x2, [0xfffe, 0x6f, 0x8, 0x5cf5]}}, {{0x1c, 0x1, {0x6, 0x9, 0x9, 0x631, 0x2, 0x6, 0x2, 0x5}}, {0xe, 0x2, [0xd, 0xc1a9, 0xfff, 0x2, 0xdbd]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x8000, 0x2, 0x3, 0x9, 0x2}}, {0x8, 0x2, [0x80, 0x4]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x8, 0x5}}, {0xe, 0x2, [0x3, 0x9, 0x1, 0x11b, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}]}}, @TCA_STAB={0x94, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x1, 0x6, 0x1, 0x2, 0x4, 0x0, 0x3}}, {0xa, 0x2, [0x400, 0x1000, 0x9]}}, {{0x1c, 0x1, {0xf0, 0x49, 0x2, 0x1, 0x3, 0x5, 0x6, 0x9}}, {0x16, 0x2, [0x9, 0x6, 0x8001, 0x9, 0x1, 0x9, 0x4, 0x4, 0x0]}}, {{0x1c, 0x1, {0x6, 0x6, 0x401, 0x786, 0x0, 0x6, 0x8b, 0x9}}, {0x16, 0x2, [0x2, 0x40, 0x40, 0x0, 0x7fff, 0x7a, 0x8, 0x6, 0x1]}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) socket(0x2, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4044000) r9 = io_uring_setup(0x1c77, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) preadv(r8, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/87, 0x57}, {0x0}], 0x2, 0x5, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r3, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r10) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000800)={0x5, 0x70000000, 0x4, 0xfffffc7c, 0x6, 0x0, [{0x1ff, 0x5, 0xfffffffffffffff9, '\x00', 0x600}, {0x4, 0x7, 0x5, '\x00', 0x404}, {0x1, 0x3, 0x0, '\x00', 0x2805}, {0x1, 0x9, 0xffffffffffffff7c, '\x00', 0x4}, {0x5, 0x6, 0x100000001, '\x00', 0x180}, {0x8001, 0xf, 0x3f6c, '\x00', 0x2988}]}) 3.754359408s ago: executing program 7 (id=2094): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0xfffffc11, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbce}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x2, 0x8}, 0x10c0e9, 0x2, 0xfffffffc, 0x8, 0xa, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r4, 0x400455c8, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000c80)=ANY=[], 0x0) r5 = fsmount(r2, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8000000}, &(0x7f00000001c0)=0x8) capget(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000300)={0x7, 0x9, 0x9, 0x4003fc, 0xff9a, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000001400)=ANY=[@ANYBLOB="18000700080000000000000000000000180100002020782500000000001c20207b1af8ff00000100007f5b7992fcf0dca1974d8fa3986fbcf8ffffffb702001008000000b70300000000000085000000620000950000"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) 3.290176508s ago: executing program 5 (id=2096): socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x4, @val=@tcx}, 0x1c) (fail_nth: 12) 2.2977515s ago: executing program 4 (id=2098): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, 0x0, 0xc080) r4 = socket$netlink(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = accept4$unix(r5, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002580)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000002680)=0xe8) fstat(r0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_clone3(&(0x7f00000038c0)={0x18ba04a00, &(0x7f0000002740), &(0x7f0000002780), &(0x7f00000027c0), {0x1a}, &(0x7f0000002800)=""/89, 0x59, &(0x7f0000002880)=""/4096, &(0x7f0000003880)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000003940)='./file0\x00', &(0x7f0000003980)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmsg$unix(r7, &(0x7f0000003a80)={&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)}, {&(0x7f0000002380)="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", 0xff}, {&(0x7f0000002480)="4606121e44dd859771b9e89b05224be1297fba69396d8867f5158de0596d228b81026a1352c1d2229d898c58556dc09f9f53408a025b2d4c0bae5361f84d217bf64cf3dabd48d06141de965d965c9d9ca881867aa182e2ff1f03fe5a8fce88af0764ceba9d646302d3f3a9b385de476d5b34637fb88f429ee175f0e4849eec3eec5211a71b1afbdf004c6f43e962fd344d4036cb718208092672bc6dc0fe4b4221a227943e71dddef3", 0xa9}], 0x4, &(0x7f0000003a00)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, 0xffffffffffffffff}}}], 0x58, 0x4000045}, 0x8805) r13 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x3, 0xc}, 0x102, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, r6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r13, 0x2401, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x2400, 0x6) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r14, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r15, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000056c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005680)={&(0x7f0000003ac0)={0x1b58, r15, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x9, 0x35}}}}, [@NL80211_ATTR_IE={0x18e, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x4}, 0xf8, 0x5, @device_a, 0x1000, 0xffffffff}}, @channel_switch={0x25, 0x3, {0x0, 0xa1, 0x7}}, @preq={0x82, 0x72, {{0x1, 0x1, 0x1}, 0x5, 0x4, 0x9, @device_a, 0xd, @void, 0x0, 0x9, 0x8, [{{}, @device_a, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @device_a, 0x7fffffff}, {{0x0, 0x0, 0x1}, @broadcast, 0x476}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{}, @device_a, 0x7}, {{}, @device_b, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}]}}, @perr={0x84, 0xcf, {0x40, 0xd, [{{}, @device_b, 0xc, @void, 0x2e}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x2a}, {{}, @broadcast, 0x1, @void, 0x3d}, {{}, @device_a, 0x1b24, @void, 0x2}, {{}, @broadcast, 0xffffffff, @void, 0x28}, {{}, @device_a, 0x0, @void, 0x1}, {{0x0, 0x1}, @broadcast, 0x8a8, @value=@broadcast, 0x4}, {{}, @broadcast, 0x60a, @void, 0x17}, {{}, @broadcast, 0x1, @void, 0x2f}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x6}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x7}, {{0x0, 0x1}, @device_b, 0xbdf1, @value=@broadcast, 0xe}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x1b}]}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @prep={0x83, 0x1f, {{}, 0x80, 0x81, @device_a, 0x2, @void, 0x3, 0xd47, @broadcast, 0x80000001}}, @channel_switch={0x25, 0x3, {0x0, 0x8, 0x10}}]}, @NL80211_ATTR_IE={0x4d, 0x2a, [@peer_mgmt={0x75, 0x18, {0x0, 0x8001, @val=0x5, @val=0x13, @val="0b1558712699372213e924a3fe6fa0f7"}}, @random={0xf9, 0x2d, "a5773ad253abac92ebd0f8d3619312578acddc57250b936801b339bbe04ea286817c76b6d6c7a57ac7c6581dd2"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x32, 0xfc, "87784636134f23cfd382e3e0d69d37b5a2df14d9ee9b4d8996adda727d4dbc593541fea8221a71830f32d03c743d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "001bc2eaa61a82f560"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_REALM={0x58, 0xfa, "508420c20cf3446cd03dae493aba73f9d7dd160958a6fd346b3549c649070ca2e3a768df454849f0ca92eb77440711ac9a99887235f26d66eaabd4f9c19463781aac486100068559ce30ae7c32a7ae9e7b1ea774"}, @NL80211_ATTR_FILS_ERP_RRK={0xc0, 0xfc, "630c0c989c641bdbfabe67af9f294908e5fe8dd4115ce63be6bad08c58cb0b8ccbee1f80b5b7064087a791a4b5aff63976a73a847a0e7497ec99f3ba8aee98f09d83f34c695527cf8899c380f3a6153c35e4eae27b933337805749f387a3e9336dc12124d6c1553942f4b423da97bfcf997582acabeee32caadacb33788755bfe22dd89d7ab657934e1488bbc52a4ea6eaf8e3fe5083d1009e566f375b0e7c33b5f792f52d80fdf9a08e7cce6109de3697d3376ceb32694ab4a1bb04"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb0, 0xfc, "f3fad912a910eaed54357b89d66459c8a34106f951d9f1252320a94e528ee6dfc19797d718a4aa8f11457b847d39647a1cdf8ff8fa21d40e33772dfabf271017bece75518eb9c9f6db34a444fe84763e6127d51bd2d45fda6140121d0e6c0165a87e63f986e11c4dd85cf38ac5a3e26caec88ec2e694066407198cebb54249a759fe9d2dc04dd341f115df6ac7f6f8d4045ad1b8795cdcab46e8a20eb8e0aa14991b1286b260c851d2922245"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "3dec22be4564ace4edc1"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0xe5, 0xfa, "f0a449a19b34a8d646af3e9f819fbaac1d073f86b586049fae5a50a0cd3edbbb58f3ccfbca9ff2f1bf36b366be1247137b0b11146ab5ea5767fe7a02c54ff94f9cc8c257332d7b92b7844e147b406ba2f828877747d2a84e30b9cf7b8aa51c426c03a42eb22efca5b9f54b4cd5a91a686544ecca0b9ddf13b4e951ed535177dc27921622fc380ca10b1cb145277618ae491c51620cb953ef4381eb488bd0e970cccbb69c46242160f12b49c9c8c116fa3587dac97e947ef8b3b78b883ca77b0f43a4d5e5e8941f893ba8c82362d3b4d7ef1eb0c4469cf97c1f9c8d2c973101e43d"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "4379d514c2368fd341f0d062c1"}, @NL80211_ATTR_FILS_ERP_RRK={0x98, 0xfc, "062a7699bce7956a622adfd2405a4f2481e47eb7bf30ec95e780c6f905eefcd89eb9d427cf06dc0909d6bbd77bdc85c873a422bb86df8bea113ad6902d29e4e8977f685e6b38204fa78f7d6b5abe4ccf62246fae5cbf5306101421a569dacb30ce9fb07582f0408e57d81fb3e0791b3daf8bb996bb29e5bb41a16fb2d645058b83b1dda1214a74c5ce88f0f0526e0f173481bd5e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "8395737da5c7913023"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x67, 0xfc, "4579ab859c2dafe77945c5ba40981e1fdf689766c1790b324cbdf44530e5ed4e6f39481f41b11a2d1a7cea52b9f1114f970279502200def4d883482fac2a5fdb83eb4bf7da3fc61ed9538b2cf1a65210b1400c558593d78a219c3efd5866ffb4faef5d"}, @NL80211_ATTR_FILS_ERP_REALM={0x54, 0xfa, "911a8333f6f8afdc79dae4428ad5961c3487fdc44670147878e8d5571f354b5b83a59a6c8ca4ffb7488d10e35dc017f8ec65b8ce4d4ee1fe650dbf5e169445423af0431513f8fe5b88aee75bd1e4085b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "a6c693f787790481465a196a"}, @NL80211_ATTR_FILS_ERP_RRK={0x88, 0xfc, "ad3260a5653d0418d2962de8b336b42ab026efee6b54335e10841e862053492844a175aad2a9efbd106a8958abfec1f67a698e0a5b354c38c3d39f38fb40167376503f9178fcbd235f2d1f8485e92a7d48ab1aabcbf9869d34d16cc2fb0f4ba845e92b5d625f549195989bd542745b51566994a4ec267fa96cb8fb77e1fb22a70cace806"}, @NL80211_ATTR_FILS_ERP_RRK={0x89, 0xfc, "6179801c8f45be04083d1e60c7c8174e40fc3ce49d8e0fe76be470041c2446f17251a7bdf578725603de18012e4e366b3a166c1d4725b4c8821362af206f46db2a40ce95d01a092f57e058e3acfe16db518a35e44b618fed929e71e469c41e6ffad544e593420974e060bfe1e1fa24bea28bbe9112af9c4ecf03568949baff3b266a8ceea2"}, @NL80211_ATTR_FILS_ERP_RRK={0xd2, 0xfc, "4a259b973bf59820d3865cb92e914aadb724968380337a4574595a3c6546df849ed9bd5cc1e00b49eb8d19cf991c6f837773fbc47c695b61e0fb5715e50215d77e8741d53dcf41cff9aef805399c6c19da10bb1ff23068d8f6d859666b6dc0d1e0051c22c5bc224f674676afa6f44e667fcd10dba1100ddb2775cd2da9d998ee03d4ac55ab1e7f98608426ab807e146f6b1dbb0d48332d4bab1de6ae509985128b81067600e384a13fc06fc99557e1d2f184767de2969af2ef09921c8f0848313c03ac9b38827c517fd6dc6f8fc2"}, @NL80211_ATTR_FILS_ERP_RRK={0x4}], @NL80211_ATTR_IE={0x2ab, 0x2a, [@mesh_chsw={0x76, 0x6, {0xf7, 0xff, 0x3f, 0x8}}, @challenge={0x10, 0x1, 0x65}, @random_vendor={0xdd, 0xbb, "fa85f36e054fb10def546bc8cb6a44362f16a2e283a6c6378a54668843791e38931c1844268ff0f115d999942b78a0fc084198362be8df09c33819799515efb12010571221f0c9d28c66a929cc135565a989768a6852db965ad80226827784235f1ff52807c14c39213f3d7851bb221e1cfadb153f6ac19d1587ac1e6721115ec0e03eb05084b2b790e47ada0b4df19bec1e6c3b5294ab2734d97530a368c2ddcdd1c52b490df609528c7a0b2f3d965363d0d9aefbe5661c169f11"}, @gcr_ga={0xbd, 0x6, @device_b}, @perr={0x84, 0x14d, {0x0, 0x13, [{{0x0, 0x1}, @device_b, 0x3, @value, 0x15}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x2d}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x40}, {{0x0, 0x1}, @device_b, 0xfff, @value=@device_b, 0x21}, {{}, @broadcast, 0xc, @void, 0x3a}, {{}, @broadcast, 0x94, @void, 0x2c}, {{0x0, 0x1}, @broadcast, 0x64, @value=@device_b, 0x37}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x2c}, {{0x0, 0x1}, @device_a, 0x1ff, @value, 0x3d}, {{0x0, 0x1}, @device_b, 0x9, @value=@device_b, 0x1b}, {{}, @broadcast, 0xa, @void, 0x31}, {{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x25}, {{0x0, 0x1}, @broadcast, 0x7f, @value, 0x2f}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x33}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x32}, {{}, @device_b, 0xfffffffd, @void, 0x1a}, {{0x0, 0x1}, @device_b, 0xd6d, @value, 0x2b}, {{}, @device_a, 0x1, @void, 0x16}]}}, @dsss={0x3, 0x1, 0xd}, @measure_req={0x26, 0x83, {0x4, 0x0, 0x7, "7dfc61eac8f3f86e790a517cd7efd32232d11787ee456f30222542dde5a91ab829d93d8f577efaf2e471c70fd0aa1fea02cb951e1114658f91fcf5d2d6cec5affbbc56369d305fc21dbdf3b96ca379e607b71451fccd5705cf3b846c1e9ffe9a841425361ae99152f1d3265c8ad5ee6877c5ff982b2d83c177dad72e75f3915d"}}]}]}, 0x1b58}, 0x1, 0x0, 0x0, 0x4008}, 0x4) 873.619851ms ago: executing program 7 (id=2099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff77, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000050) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x4008010) 576.204417ms ago: executing program 5 (id=2100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ff7f0e3f2617d1f52ab5a1db8511", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r3 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f00000000c0)={0x1, 0x2, 0x5, 0xfffffffffffffff3, 0x8001, 0x4}) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x200, 0x20000) ioctl$BLKFRAGET(r5, 0x1265, &(0x7f0000000180)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x6a3cb5ed292c2c6e, 0x1}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000000700)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="671723d7c6012ce2151a33aa3f5cf511da7c08203ab54e4c2f8dde5c1c512fe3ade48326c314d3649c04a027", 0x2c}], 0x1}, 0x20008b88) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) bind$tipc(r7, &(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r9, @ANYRES32, @ANYRES64=r3], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20004084) 575.961068ms ago: executing program 3 (id=2101): socket(0x2b, 0x1, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000050000000000aa00000000000000000000ffff7f000001000107944e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = socket$rxrpc(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x40}, {0xffffffffffffffff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) connect$inet6(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x8}}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x1e, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x200000) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmctl$IPC_INFO(r4, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 575.269777ms ago: executing program 7 (id=2102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ff7f0e3f2617d1f52ab5a1db8511", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) (fail_nth: 2) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r3 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, &(0x7f00000000c0)={0x1, 0x2, 0x5, 0xfffffffffffffff3, 0x8001, 0x4}) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x200, 0x20000) ioctl$BLKFRAGET(r5, 0x1265, &(0x7f0000000180)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x6a3cb5ed292c2c6e, 0x1}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000000700)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="671723d7c6012ce2151a33aa3f5cf511da7c08203ab54e4c2f8dde5c1c512fe3ade48326c314d3649c04a027", 0x2c}], 0x1}, 0x20008b88) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) bind$tipc(r7, &(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r9, @ANYRES32, @ANYRES64=r3], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20004084) 558.321348ms ago: executing program 4 (id=2103): socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x0, 0x0, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002"], 0x58}}, 0x20008000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='timerslack_ns\x00') setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r2, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000c40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003}, 0x38) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040026bd7000fcdbdf253000000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000a000000110000000600360034000000060036000c00000006003600070000000600360003000000062036003e000000060036001d000000"], 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x54) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) 507.497719ms ago: executing program 7 (id=2104): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0x3}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x84) 507.067139ms ago: executing program 0 (id=2105): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000bc0)={[{@nodelalloc}, {@dioread_lock}, {@bsdgroups}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc}}, {@resgid}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@user_xattr}]}, 0x1, 0x578, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x28, 0x20, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x10007}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 455.84802ms ago: executing program 7 (id=2106): recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) 455.65102ms ago: executing program 3 (id=2107): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000280)={0x40, 0x400, 0x9, 0x5, 0xe, "709a2ce8165db2542a9f6ec5a59dfea0abcd57"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffe, &(0x7f00000008c0)={[{@usrquota}, {@auto_da_alloc}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@errors_remount}]}, 0x7, 0x605, &(0x7f00000001c0)="$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") 438.041531ms ago: executing program 7 (id=2108): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x4000000, &(0x7f0000001140)) 345.271652ms ago: executing program 4 (id=2109): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x4000400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x2c}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x810, r3, 0xcfde000) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000100)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r4, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 252.665304ms ago: executing program 5 (id=2110): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40000) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffc, 0x0, 0x6b, @scatter={0x0, 0xf7ff, 0x0}, 0x0, 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 252.311514ms ago: executing program 3 (id=2111): timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x77359400}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) timer_gettime(r0, 0x0) r2 = fsmount(r1, 0x0, 0x80) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYRESOCT=0x0], 0x2f0}, 0x1, 0x0, 0x0, 0x200400e4}, 0x20000000) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40002, 0x21) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x1400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, 0x0, 0x2005c840) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a64000000060a0b0400000000000000000200000038000480340001800b0001006e756d67656e000000034000000000080001400000001408000240fffffffc0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a30e39a105e25cd59f44d9779d4c2de46b86a2012df2f86b700"], 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) 192.639276ms ago: executing program 5 (id=2112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff77, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000050) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x4008010) 191.268746ms ago: executing program 4 (id=2113): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x2, 0x1, 0x3, 0x1, 0x0, 0x40, 0xfffffffffffffff0}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) 127.537097ms ago: executing program 5 (id=2114): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x4000400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x2c}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x810, r3, 0xcfde000) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000100)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r4, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 82.411468ms ago: executing program 4 (id=2115): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x1000000, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) 0s ago: executing program 4 (id=2116): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0x3}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000090}, 0x84) kernel console output (not intermixed with test programs): _percpu+0x49/0x680 [ 281.560167][T13375] should_failslab+0x8c/0xb0 [ 281.560189][T13375] __kmalloc_cache_node_noprof+0x81/0x3e0 [ 281.560289][T13375] ? page_pool_create_percpu+0x49/0x680 [ 281.560342][T13375] page_pool_create_percpu+0x49/0x680 [ 281.560449][T13375] page_pool_create+0x1a/0x30 [ 281.560481][T13375] __veth_napi_enable_range+0xfb/0x4b0 [ 281.560519][T13375] veth_enable_xdp+0x1f1/0x310 [ 281.560542][T13375] ? kmem_cache_alloc_noprof+0x198/0x3c0 [ 281.560568][T13375] ? security_file_alloc+0x32/0xf0 [ 281.560656][T13375] veth_xdp+0x3ed/0x670 [ 281.560682][T13375] dev_xdp_install+0x393/0x4e0 [ 281.560706][T13375] ? __pfx_veth_xdp+0x10/0x10 [ 281.560734][T13375] ? __pfx_veth_xdp+0x10/0x10 [ 281.560775][T13375] dev_xdp_attach+0x8f4/0xb60 [ 281.560810][T13375] bpf_xdp_link_attach+0x375/0x590 [ 281.560871][T13375] link_create+0x4d4/0x6b0 [ 281.560974][T13375] __sys_bpf+0x5a2/0xc30 [ 281.561008][T13375] ? vfs_write+0x770/0x990 [ 281.561031][T13375] __x64_sys_bpf+0x69/0x80 [ 281.561062][T13375] x64_sys_call+0x10cb/0x3020 [ 281.561107][T13375] do_syscall_64+0x136/0x3c0 [ 281.561142][T13375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.561163][T13375] RIP: 0033:0x7f4b0033de59 [ 281.561178][T13375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.561257][T13375] RSP: 002b:00007f4afed97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.561277][T13375] RAX: ffffffffffffffda RBX: 00007f4b005c5fa0 RCX: 00007f4b0033de59 [ 281.561290][T13375] RDX: 000000000000001c RSI: 0000200000000800 RDI: 000000000000001c [ 281.561304][T13375] RBP: 00007f4afed97090 R08: 0000000000000000 R09: 0000000000000000 [ 281.561320][T13375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.561336][T13375] R13: 00007f4b005c6038 R14: 00007f4b005c5fa0 R15: 00007fffd7172e78 [ 281.561392][T13375] [ 281.592282][T13371] loop5: detected capacity change from 0 to 512 [ 281.645399][T13352] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 281.941345][T13371] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 281.957478][T13352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.039203][T13388] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 282.129567][T13371] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 282.237803][T13352] __nla_validate_parse: 9 callbacks suppressed [ 282.237827][T13352] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1452'. [ 282.253434][ T28] audit: type=1400 audit(1783178657.808:8574): avc: denied { write } for pid=13351 comm="syz.3.1452" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.285272][T13371] EXT4-fs (loop5): mount failed [ 282.356562][T13388] xt_ecn: cannot match TCP bits for non-tcp packets [ 282.377648][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.100554][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 283.217171][T13419] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1465'. [ 283.292955][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 283.493292][T13429] xt_hashlimit: size too large, truncated to 1048576 [ 283.585698][T13434] loop0: detected capacity change from 0 to 512 [ 283.732050][T13434] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 283.763458][T13434] EXT4-fs (loop0): 1 truncate cleaned up [ 283.769576][T13434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.798301][ T28] audit: type=1400 audit(1783178659.446:8575): avc: denied { write } for pid=13433 comm="syz.0.1471" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.837267][T13434] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1471'. [ 283.976722][T13447] loop4: detected capacity change from 0 to 1024 [ 284.001907][T13447] EXT4-fs: Ignoring removed oldalloc option [ 284.012145][T13447] EXT4-fs: Ignoring removed oldalloc option [ 284.152520][T13465] tipc: Started in network mode [ 284.157428][T13465] tipc: Node identity ac14140f, cluster identity 4711 [ 284.164357][T13465] tipc: New replicast peer: 255.255.255.255 [ 284.170425][T13465] tipc: Enabled bearer , priority 10 [ 284.203857][T13447] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 284.261899][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'. [ 284.282454][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.340035][T13447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.445988][ T28] audit: type=1400 audit(1783178660.129:8576): avc: denied { write } for pid=13446 comm="syz.4.1472" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.480434][T13477] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1477'. [ 284.493312][T13479] loop3: detected capacity change from 0 to 1024 [ 284.502338][T13447] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1472'. [ 284.511013][T13479] EXT4-fs: Ignoring removed bh option [ 284.527523][T13479] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 284.550468][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1479'. [ 284.550746][T13479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.573295][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'. [ 284.602652][T13494] loop0: detected capacity change from 0 to 1024 [ 284.610856][T13494] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 284.622532][ T28] audit: type=1400 audit(1783178660.307:8577): avc: denied { write } for pid=13473 comm="syz.3.1478" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.645614][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.679435][T13502] loop4: detected capacity change from 0 to 256 [ 284.718039][T13494] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1482: Invalid block bitmap block 0 in block_group 0 [ 284.751933][T13494] loop0: lost filesystem error report for type 5 error -117 [ 284.752847][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 284.768580][T13494] Quota error (device loop0): write_blk: dquota write failed [ 284.772200][ C1] EXT4-fs (loop0): initial error at time 1783178660: ext4_read_block_bitmap_nowait:483 [ 284.785219][T13494] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 284.790707][ C1] EXT4-fs (loop0): last error at time 1783178660: ext4_read_block_bitmap_nowait:483 [ 284.800502][T13494] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1482: Failed to acquire dquot type 0 [ 284.800531][T13494] loop0: lost filesystem error report for type 5 error -117 [ 284.800659][T13494] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.1482: Freeing blocks not in datazone - block = 0, count = 4096 [ 284.800762][T13494] loop0: lost filesystem error report for type 5 error -117 [ 284.800866][T13494] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.1482: Invalid inode bitmap blk 0 in block_group 0 [ 284.800894][T13494] loop0: lost filesystem error report for type 5 error -117 [ 284.800972][T13494] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 284.800992][T13494] loop0: lost filesystem error report for type 5 error -117 [ 284.801070][T13494] EXT4-fs (loop0): 1 orphan inode deleted [ 284.801573][T13494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.811793][ C1] [ 284.828741][ T4948] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 285.008996][ T4948] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:25: Failed to release dquot type 0 [ 285.025684][T13502] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 285.088794][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.091674][T13525] loop5: detected capacity change from 0 to 256 [ 285.127843][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.183148][T13537] loop3: detected capacity change from 0 to 512 [ 285.191392][T13537] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1489: iget: bad i_size value: 38620345925642 [ 285.204021][T13537] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 285.204232][T13537] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1489: couldn't read orphan inode 15 (err -117) [ 285.225133][T13537] loop3: lost filesystem error report for type 5 error -117 [ 285.225719][T13537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.245978][T13502] xt_ecn: cannot match TCP bits for non-tcp packets [ 285.276448][ T23] tipc: Node number set to 2886997007 [ 285.430301][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.288612][T13614] loop0: detected capacity change from 0 to 512 [ 288.293337][T13621] __nla_validate_parse: 3 callbacks suppressed [ 288.293354][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 288.310426][T13620] loop5: detected capacity change from 0 to 1024 [ 288.333837][T13620] EXT4-fs: Ignoring removed bh option [ 288.340693][T13620] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 288.371928][T13614] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1501: iget: bad i_size value: 38620345925642 [ 288.410082][T13620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.429798][T13614] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 288.430665][T13614] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1501: couldn't read orphan inode 15 (err -117) [ 288.440248][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 288.440316][ C0] EXT4-fs (loop0): initial error at time 1783178664: ext4_orphan_get:1399: inode 15 [ 288.440534][ C0] EXT4-fs (loop0): last error at time 1783178664: ext4_orphan_get:1399: inode 15 [ 288.470157][T13632] loop3: detected capacity change from 0 to 1024 [ 288.490301][T13632] EXT4-fs: Ignoring removed oldalloc option [ 288.491735][ T28] audit: type=1400 audit(1783178664.360:8578): avc: denied { write } for pid=13617 comm="syz.5.1502" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.496934][T13632] EXT4-fs: Ignoring removed oldalloc option [ 288.524081][T13614] loop0: lost filesystem error report for type 5 error -117 [ 288.528925][T13632] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 288.532028][T13639] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1506'. [ 288.555970][T13614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.649099][T13632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.680717][ T28] audit: type=1400 audit(1783178664.549:8579): avc: denied { write } for pid=13629 comm="syz.3.1505" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.682856][T13632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1505'. [ 288.745480][ T28] audit: type=1400 audit(1783178664.549:8580): avc: denied { watch watch_reads } for pid=13645 comm="syz.4.1508" path="/59/file1" dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 288.781875][ T28] audit: type=1400 audit(1783178664.685:8581): avc: denied { setattr } for pid=13651 comm="syz.4.1510" name="SCTPv6" dev="sockfs" ino=26125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 288.785215][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.814305][ T28] audit: type=1400 audit(1783178664.685:8582): avc: denied { append } for pid=13651 comm="syz.4.1510" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 288.838091][ T28] audit: type=1400 audit(1783178664.685:8583): avc: denied { ioctl } for pid=13651 comm="syz.4.1510" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 288.945971][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.959224][T13657] batman_adv: batadv0: Adding interface: macvtap1 [ 288.965737][T13657] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.991381][T13657] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 289.187151][ T4138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.210976][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1515'. [ 289.291398][T13679] FAULT_INJECTION: forcing a failure. [ 289.291398][T13679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.337238][T13679] CPU: 0 UID: 0 PID: 13679 Comm: syz.3.1518 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 289.337278][T13679] Tainted: [W]=WARN [ 289.337286][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 289.337301][T13679] Call Trace: [ 289.337309][T13679] [ 289.337319][T13679] __dump_stack+0x1d/0x30 [ 289.337344][T13679] dump_stack_lvl+0x95/0xd0 [ 289.337425][T13679] dump_stack+0x15/0x1b [ 289.337508][T13679] should_fail_ex+0x25e/0x270 [ 289.337538][T13679] should_fail+0xb/0x20 [ 289.337568][T13679] should_fail_usercopy+0x1a/0x20 [ 289.337604][T13679] strncpy_from_user+0x27/0x250 [ 289.337632][T13679] __se_sys_memfd_create+0x20f/0x3b0 [ 289.337711][T13679] __x64_sys_memfd_create+0x31/0x40 [ 289.337764][T13679] x64_sys_call+0x1f22/0x3020 [ 289.337793][T13679] do_syscall_64+0x136/0x3c0 [ 289.337913][T13679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.337939][T13679] RIP: 0033:0x7fcb06b2de59 [ 289.337958][T13679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.337977][T13679] RSP: 002b:00007fcb05586e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 289.338001][T13679] RAX: ffffffffffffffda RBX: 0000000000000214 RCX: 00007fcb06b2de59 [ 289.338037][T13679] RDX: 00007fcb05586ee0 RSI: 0000000000000000 RDI: 00007fcb06bc404f [ 289.338053][T13679] RBP: 0000200000000840 R08: 00000000ffffffff R09: 0000000000000000 [ 289.338142][T13679] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000140 [ 289.338155][T13679] R13: 00007fcb05586ee0 R14: 00007fcb05586ea0 R15: 0000200000000d40 [ 289.338173][T13679] [ 289.615730][T13683] loop3: detected capacity change from 0 to 512 [ 289.739932][T13683] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1520: iget: bad i_size value: 38620345925642 [ 289.773207][T13690] syzkaller0: entered promiscuous mode [ 289.778897][T13683] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 289.779580][T13683] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1520: couldn't read orphan inode 15 (err -117) [ 289.788990][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 289.789028][ C0] EXT4-fs (loop3): initial error at time 1783178665: ext4_orphan_get:1399: inode 15 [ 289.789161][ C0] EXT4-fs (loop3): last error at time 1783178665: ext4_orphan_get:1399: inode 15 [ 289.828853][T13690] syzkaller0: entered allmulticast mode [ 289.839060][T13683] loop3: lost filesystem error report for type 5 error -117 [ 289.861985][T13683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.043159][T13706] loop5: detected capacity change from 0 to 128 [ 290.058363][T13706] msdos: Bad value for 'gid' [ 290.081167][T13706] msdos: Bad value for 'gid' [ 290.176921][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.379055][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1529'. [ 290.409841][ T28] audit: type=1400 audit(1783178666.386:8584): avc: denied { getopt } for pid=13738 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 290.648471][T13760] loop4: detected capacity change from 0 to 512 [ 290.660479][T13760] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1537: iget: bad i_size value: 38620345925642 [ 290.673426][T13760] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 290.673666][T13760] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1537: couldn't read orphan inode 15 (err -117) [ 290.695111][T13760] loop4: lost filesystem error report for type 5 error -117 [ 290.696256][T13760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.744092][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.774342][T13781] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 290.780887][T13781] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 290.788642][T13781] vhci_hcd vhci_hcd.0: Device attached [ 290.935535][T13785] vhci_hcd: connection closed [ 290.935829][ T4926] vhci_hcd vhci_hcd.3: stop threads [ 290.937369][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1549'. [ 290.945956][ T4926] vhci_hcd vhci_hcd.3: release socket [ 290.945984][ T4926] vhci_hcd vhci_hcd.3: disconnect device [ 291.902351][ T3398] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 292.180854][T13804] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 292.993056][T13808] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1551'. [ 293.023879][ T28] audit: type=1400 audit(1783178669.137:8585): avc: denied { setopt } for pid=13820 comm="syz.4.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 293.105705][T13813] xt_ecn: cannot match TCP bits for non-tcp packets [ 293.469942][ T28] audit: type=1326 audit(1783178669.431:8586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.7.1551" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b74a2de59 code=0x7ffc0000 [ 293.591517][ T28] audit: type=1326 audit(1783178669.431:8587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.7.1551" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b74a2de59 code=0x7ffc0000 [ 293.617628][ T28] audit: type=1326 audit(1783178669.442:8588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.7.1551" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b74a2de59 code=0x7ffc0000 [ 293.644738][ T28] audit: type=1326 audit(1783178669.442:8589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.7.1551" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b74a2de59 code=0x7ffc0000 [ 293.670724][ T28] audit: type=1326 audit(1783178669.442:8590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.7.1551" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b74a2de59 code=0x7ffc0000 [ 293.696559][T13837] loop4: detected capacity change from 0 to 512 [ 293.712171][T13837] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 293.739017][ T28] audit: type=1326 audit(1783178669.442:8591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.7.1551" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8b74a2de59 code=0x7ffc0000 [ 293.764957][ T28] audit: type=1326 audit(1783178669.662:8592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.7.1551" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b749ee68e code=0x7ffc0000 [ 293.790607][ T28] audit: type=1326 audit(1783178669.673:8593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.7.1551" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b749ee68e code=0x7ffc0000 [ 293.802247][T13837] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.1555: corrupted xattr entries [ 293.816491][ T28] audit: type=1326 audit(1783178669.673:8594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.7.1551" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b749ee68e code=0x7ffc0000 [ 293.853433][ T28] audit: type=1326 audit(1783178669.673:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.7.1551" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b749ee68e code=0x7ffc0000 [ 293.876352][T13837] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 293.885609][T13837] EXT4-fs (loop4): Remounting filesystem read-only [ 293.894913][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 293.894936][ C0] EXT4-fs (loop4): initial error at time 1783178670: xattr_find_entry:337: inode 15 [ 293.895006][ C0] EXT4-fs (loop4): last error at time 1783178670: xattr_find_entry:337: inode 15 [ 293.931901][T13851] xt_l2tp: missing protocol rule (udp|l2tpip) [ 293.944139][T13836] loop0: detected capacity change from 0 to 512 [ 293.988701][T13837] EXT4-fs (loop4): 1 truncate cleaned up [ 293.994913][T13836] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1556: iget: bad i_size value: 38620345925642 [ 294.001644][T13837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.007986][T13836] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.030313][T13836] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1556: couldn't read orphan inode 15 (err -117) [ 294.039699][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 294.039753][ C1] EXT4-fs (loop0): initial error at time 1783178670: ext4_orphan_get:1399: inode 15 [ 294.039839][ C1] EXT4-fs (loop0): last error at time 1783178670: ext4_orphan_get:1399: inode 15 [ 294.096727][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.129357][T13836] loop0: lost filesystem error report for type 5 error -117 [ 294.133033][T13836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.150871][T13861] syzkaller0: entered promiscuous mode [ 294.158687][T13861] syzkaller0: entered allmulticast mode [ 294.298161][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.348947][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1564'. [ 294.410849][T13879] loop3: detected capacity change from 0 to 512 [ 294.447725][T13879] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1563: corrupted in-inode xattr: invalid ea_ino [ 294.461069][T13879] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.474449][T13879] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1563: couldn't read orphan inode 15 (err -117) [ 294.495401][T13879] loop3: lost filesystem error report for type 5 error -117 [ 294.504252][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 294.518018][ C1] EXT4-fs (loop3): initial error at time 1783178670: ext4_iget_extra_inode:5180: inode 15 [ 294.518874][T13877] loop5: detected capacity change from 0 to 512 [ 294.527984][ C1] EXT4-fs (loop3): last error at time 1783178670: ext4_orphan_get:1404 [ 294.549411][T13879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.562273][T13888] loop0: detected capacity change from 0 to 512 [ 294.564102][T13888] EXT4-fs: Ignoring removed nobh option [ 294.623329][T13877] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 294.626032][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.640308][T13877] EXT4-fs (loop5): mount failed [ 294.650902][T13888] EXT4-fs (loop0): orphan cleanup on readonly fs [ 294.683141][T13888] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1562: EA inode hash validation failed [ 294.695707][T13888] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 294.708877][T13888] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.1562: corrupted inode contents [ 294.720716][T13888] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.721910][T13888] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm syz.0.1562: mark_inode_dirty error [ 294.742705][T13888] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.742934][T13888] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.1562: corrupted inode contents [ 294.764028][T13888] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.765640][T13888] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.1562: mark_inode_dirty error [ 294.788723][ C1] EXT4-fs (loop0): error count since last fsck: 3 [ 294.789515][ C1] EXT4-fs (loop0): initial error at time 1783178670: ext4_do_update_inode:5742: inode 15 [ 294.790438][ C1] EXT4-fs (loop0): last error at time 1783178670: ext4_do_update_inode:5742: inode 15 [ 294.823938][T13917] xt_TPROXY: Can be used only with -p tcp or -p udp [ 294.827063][T13888] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.833951][T13888] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.1562: mark inode dirty (error -117) [ 294.855938][T13888] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 294.856280][T13888] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 294.874923][T13888] EXT4-fs (loop0): 1 orphan inode deleted [ 294.881588][T13888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 294.970650][T13888] vlan0: entered promiscuous mode [ 294.989290][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.002821][T13924] FAULT_INJECTION: forcing a failure. [ 295.002821][T13924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.016107][T13924] CPU: 0 UID: 0 PID: 13924 Comm: syz.5.1570 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 295.016147][T13924] Tainted: [W]=WARN [ 295.016155][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 295.016170][T13924] Call Trace: [ 295.016178][T13924] [ 295.016187][T13924] __dump_stack+0x1d/0x30 [ 295.016215][T13924] dump_stack_lvl+0x95/0xd0 [ 295.016377][T13924] dump_stack+0x15/0x1b [ 295.016399][T13924] should_fail_ex+0x25e/0x270 [ 295.016432][T13924] should_fail+0xb/0x20 [ 295.016502][T13924] should_fail_usercopy+0x1a/0x20 [ 295.016537][T13924] _copy_from_iter+0xcc/0xe70 [ 295.016575][T13924] ? __alloc_skb+0x511/0x6f0 [ 295.016712][T13924] ? __alloc_skb+0x205/0x6f0 [ 295.016742][T13924] netlink_sendmsg+0x4a4/0x6f0 [ 295.016771][T13924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.016845][T13924] ____sys_sendmsg+0x532/0x580 [ 295.016920][T13924] ___sys_sendmsg+0x195/0x1e0 [ 295.017023][T13924] __x64_sys_sendmsg+0xd4/0x160 [ 295.017060][T13924] x64_sys_call+0x194c/0x3020 [ 295.017123][T13924] do_syscall_64+0x136/0x3c0 [ 295.017162][T13924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.017187][T13924] RIP: 0033:0x7f077b3dde59 [ 295.017206][T13924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.017235][T13924] RSP: 002b:00007f0779e37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.017259][T13924] RAX: ffffffffffffffda RBX: 00007f077b665fa0 RCX: 00007f077b3dde59 [ 295.017279][T13924] RDX: 0000000020048410 RSI: 0000200000001280 RDI: 0000000000000004 [ 295.017295][T13924] RBP: 00007f0779e37090 R08: 0000000000000000 R09: 0000000000000000 [ 295.017310][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.017325][T13924] R13: 00007f077b666038 R14: 00007f077b665fa0 R15: 00007ffe77af3a78 [ 295.017347][T13924] [ 295.266351][T13927] loop5: detected capacity change from 0 to 512 [ 295.294266][T13927] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1572: iget: bad i_size value: 38620345925642 [ 295.308060][T13927] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 295.308658][T13927] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1572: couldn't read orphan inode 15 (err -117) [ 295.318096][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 295.318146][ C1] EXT4-fs (loop5): initial error at time 1783178671: ext4_orphan_get:1399: inode 15 [ 295.318249][ C1] EXT4-fs (loop5): last error at time 1783178671: ext4_orphan_get:1399: inode 15 [ 295.381606][T13927] loop5: lost filesystem error report for type 5 error -117 [ 295.387697][T13927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.430050][ T4138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.577567][T13937] xt_ecn: cannot match TCP bits for non-tcp packets [ 295.680869][T13962] loop3: detected capacity change from 0 to 512 [ 295.736030][T13962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 295.772003][T13962] ext4 filesystem being mounted at /351/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.797071][T13969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1574'. [ 295.814199][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 295.856197][T13974] loop3: detected capacity change from 0 to 1024 [ 295.882188][T13974] EXT4-fs: Ignoring removed bh option [ 295.904744][T13974] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 295.929402][T13974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.004877][T13981] loop0: detected capacity change from 0 to 256 [ 296.040468][T13981] loop0: detected capacity change from 0 to 512 [ 296.175351][T13981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.201528][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.211140][T13981] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.309924][T14003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1581'. [ 296.481514][T14006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1585'. [ 296.525505][T14001] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1583: iget: bad i_size value: 38620345925642 [ 296.538200][T14001] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 296.564311][T14001] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1583: couldn't read orphan inode 15 (err -117) [ 296.567530][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 296.582679][T14001] loop5: lost filesystem error report for type 5 error -117 [ 296.585505][ C1] EXT4-fs (loop5): initial error at time 1783178672: ext4_orphan_get:1399: inode 15 [ 296.585558][ C1] EXT4-fs (loop5): last error at time 1783178672: ext4_orphan_get:1399: inode 15 [ 296.634018][T14001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.730090][T14047] netlink: 160 bytes leftover after parsing attributes in process `syz.7.1589'. [ 296.754900][ T4138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.797206][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.813046][T14060] tipc: Enabling of bearer rejected, failed to enable media [ 296.956204][T14060] tipc: Failed to remove unknown binding: 66,0,0/0:3993776489/3993776490 [ 297.003126][T14060] tipc: Failed to remove unknown binding: 66,0,0/0:3993776489/3993776490 [ 297.028855][T14072] EXT4-fs: Ignoring removed bh option [ 297.042273][T14072] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 297.070888][T14072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.419538][T14088] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1596'. [ 297.507158][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.565608][T14098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.629051][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.644977][T14105] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1601'. [ 297.661528][T14094] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1598: iget: bad i_size value: 38620345925642 [ 297.696626][T14094] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 297.699149][T14094] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1598: couldn't read orphan inode 15 (err -117) [ 297.708694][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 297.708732][ C0] EXT4-fs (loop4): initial error at time 1783178674: ext4_orphan_get:1399: inode 15 [ 297.708865][ C0] EXT4-fs (loop4): last error at time 1783178674: ext4_orphan_get:1399: inode 15 [ 297.775295][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'. [ 297.871603][T14094] loop4: lost filesystem error report for type 5 error -117 [ 298.022867][T14094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.124676][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.317868][T14149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1609'. [ 298.331681][T14151] EXT4-fs: Ignoring removed bh option [ 298.363592][T14151] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 298.364530][T14160] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1613'. [ 298.393206][T14151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.407666][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 298.407683][ T28] audit: type=1400 audit(1783178674.796:8645): avc: denied { write } for pid=14150 comm="syz.4.1610" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 298.472854][ T28] audit: type=1400 audit(1783178674.849:8646): avc: denied { mounton } for pid=14163 comm="syz.3.1614" path="/358/file0" dev="tmpfs" ino=1948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 298.498476][T14167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.511201][T14167] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.556756][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.636255][T14206] set_capacity_and_notify: 8 callbacks suppressed [ 298.636279][T14206] loop5: detected capacity change from 0 to 512 [ 298.696249][T14206] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1618: iget: bad i_size value: 38620345925642 [ 298.712227][T14206] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 298.713222][T14206] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1618: couldn't read orphan inode 15 (err -117) [ 298.734927][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 298.735023][ C0] EXT4-fs (loop5): initial error at time 1783178675: ext4_orphan_get:1399: inode 15 [ 298.735138][ C0] EXT4-fs (loop5): last error at time 1783178675: ext4_orphan_get:1399: inode 15 [ 298.761227][T14206] loop5: lost filesystem error report for type 5 error -117 [ 298.764590][T14206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.771665][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.820740][ T4138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.393439][T14249] loop4: detected capacity change from 0 to 512 [ 299.447531][T14251] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1623'. [ 299.477834][ T28] audit: type=1400 audit(1783178675.909:8647): avc: denied { listen } for pid=14247 comm="syz.4.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 299.538858][T14261] netlink: 160 bytes leftover after parsing attributes in process `syz.7.1626'. [ 299.788063][T14282] loop5: detected capacity change from 0 to 1024 [ 299.796290][T14282] EXT4-fs: Ignoring removed bh option [ 299.809322][T14282] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 299.821842][T14282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.836905][ T28] audit: type=1400 audit(1783178676.287:8648): avc: denied { write } for pid=14281 comm="syz.5.1620" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.330228][T14292] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1634'. [ 300.368252][T14293] netlink: 'syz.0.1633': attribute type 1 has an invalid length. [ 300.376033][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1633'. [ 300.497412][T14293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.585956][T14293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.753730][T14293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.854319][T14320] loop3: detected capacity change from 0 to 1024 [ 300.863167][T14320] EXT4-fs: Ignoring removed bh option [ 300.864016][T14293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.879532][T14320] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 300.900039][ T28] audit: type=1400 audit(1783178677.410:8649): avc: denied { write } for pid=14318 comm="syz.3.1641" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.004056][T14336] loop5: detected capacity change from 0 to 1024 [ 301.013165][T14336] EXT4-fs: Ignoring removed oldalloc option [ 301.022051][T14336] EXT4-fs: Ignoring removed oldalloc option [ 301.038496][T14340] atomic_op ffff88811c49a528 conn xmit_atomic 0000000000000000 [ 301.053487][ T4926] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.075589][T14336] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 301.080041][ T4926] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.094334][ T4942] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.110594][ T4942] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.148841][ T28] audit: type=1400 audit(1783178677.673:8650): avc: denied { write } for pid=14334 comm="syz.5.1644" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.184127][T14336] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1644'. [ 301.237367][T14371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1652'. [ 301.247178][T14371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1652'. [ 301.286265][T14375] bridge_slave_0: left allmulticast mode [ 301.292179][T14375] bridge_slave_0: left promiscuous mode [ 301.298258][T14375] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.309662][T14375] bridge_slave_1: left allmulticast mode [ 301.315447][T14375] bridge_slave_1: left promiscuous mode [ 301.321546][T14375] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.356799][T14380] loop4: detected capacity change from 0 to 512 [ 301.378596][T14380] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 301.400872][T14386] netlink: 'syz.5.1651': attribute type 10 has an invalid length. [ 301.411520][T14380] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 301.421820][T14380] block device autoloading is deprecated and will be removed. [ 301.429722][T14375] bond0: (slave bond_slave_0): Releasing backup interface [ 301.437437][T14380] EXT4-fs (loop4): couldn't read superblock of external journal [ 301.462358][T14375] team0: Port device team_slave_0 removed [ 301.481966][T14375] team0: Port device team_slave_1 removed [ 301.492641][T14375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.500528][T14375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.509011][T14375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.516776][T14375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.526060][T14375] net_ratelimit: 199 callbacks suppressed [ 301.526073][T14375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 301.550008][T14386] syz_tun: entered promiscuous mode [ 301.561255][T14386] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 301.607449][ T28] audit: type=1326 audit(1783178678.156:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.5.1654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f077b3dde59 code=0x0 [ 301.665382][T14399] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1656'. [ 301.683401][T14397] loop4: detected capacity change from 0 to 1024 [ 301.699129][T14397] EXT4-fs: Ignoring removed bh option [ 301.710250][T14397] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 301.743816][ T28] audit: type=1400 audit(1783178678.292:8652): avc: denied { write } for pid=14395 comm="syz.4.1655" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.766575][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1654'. [ 301.799005][T14416] loop3: detected capacity change from 0 to 1024 [ 301.805758][T14416] EXT4-fs: Ignoring removed oldalloc option [ 301.811668][T14416] EXT4-fs: Ignoring removed oldalloc option [ 301.822659][T14416] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 301.874268][T14432] netlink: 160 bytes leftover after parsing attributes in process `syz.7.1666'. [ 301.920350][ T28] audit: type=1400 audit(1783178678.460:8653): avc: denied { write } for pid=14415 comm="syz.3.1661" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.038969][T14457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43516 sclass=netlink_route_socket pid=14457 comm=syz.3.1672 [ 302.052450][T14457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=14457 comm=syz.3.1672 [ 302.065376][T14457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=14457 comm=syz.3.1672 [ 302.108786][T14465] loop3: detected capacity change from 0 to 1024 [ 302.116590][T14465] EXT4-fs: Ignoring removed bh option [ 302.123721][T14465] EXT4-fs (loop3): stripe (15) is not aligned with cluster size (16), stripe is disabled [ 302.225782][T14482] loop3: detected capacity change from 0 to 1024 [ 302.234482][T14482] EXT4-fs: Ignoring removed bh option [ 302.244051][T14482] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 302.263509][ T28] audit: type=1400 audit(1783178678.838:8654): avc: denied { write } for pid=14480 comm="syz.3.1678" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.465534][T14519] FAULT_INJECTION: forcing a failure. [ 302.465534][T14519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.478739][T14519] CPU: 1 UID: 0 PID: 14519 Comm: syz.5.1686 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 302.478771][T14519] Tainted: [W]=WARN [ 302.478777][T14519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.478791][T14519] Call Trace: [ 302.478799][T14519] [ 302.478808][T14519] __dump_stack+0x1d/0x30 [ 302.478835][T14519] dump_stack_lvl+0x95/0xd0 [ 302.478876][T14519] dump_stack+0x15/0x1b [ 302.478889][T14519] should_fail_ex+0x25e/0x270 [ 302.478985][T14519] should_fail+0xb/0x20 [ 302.479015][T14519] should_fail_usercopy+0x1a/0x20 [ 302.479034][T14519] _copy_from_iter+0xcc/0xe70 [ 302.479054][T14519] ? __rcu_read_unlock+0x4e/0x70 [ 302.479116][T14519] ? xa_load+0xb1/0xe0 [ 302.479135][T14519] ? __account_obj_stock+0x43d/0x720 [ 302.479221][T14519] ping_common_sendmsg+0x9f/0x230 [ 302.479236][T14519] ping_v6_sendmsg+0xd9/0xc20 [ 302.479251][T14519] ? avc_has_perm+0x101/0x190 [ 302.479265][T14519] ? _raw_spin_lock_bh+0x56/0xb0 [ 302.479414][T14519] ? _raw_spin_unlock_bh+0x18/0x20 [ 302.479427][T14519] ? release_sock+0x10c/0x180 [ 302.479443][T14519] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 302.479526][T14519] inet_sendmsg+0xc5/0xd0 [ 302.479541][T14519] ? __pfx_inet_sendmsg+0x10/0x10 [ 302.479556][T14519] ____sys_sendmsg+0x4e8/0x580 [ 302.479586][T14519] ___sys_sendmsg+0x195/0x1e0 [ 302.479605][T14519] ? terminate_walk+0x1d5/0x200 [ 302.479628][T14519] __sys_sendmmsg+0x185/0x320 [ 302.479650][T14519] __x64_sys_sendmmsg+0x57/0x70 [ 302.479717][T14519] x64_sys_call+0x27aa/0x3020 [ 302.479806][T14519] do_syscall_64+0x136/0x3c0 [ 302.479842][T14519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.479860][T14519] RIP: 0033:0x7f077b3dde59 [ 302.479879][T14519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.479968][T14519] RSP: 002b:00007f0779e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.480030][T14519] RAX: ffffffffffffffda RBX: 00007f077b665fa0 RCX: 00007f077b3dde59 [ 302.480047][T14519] RDX: 0000000000000001 RSI: 00002000000038c0 RDI: 0000000000000003 [ 302.480060][T14519] RBP: 00007f0779e37090 R08: 0000000000000000 R09: 0000000000000000 [ 302.480068][T14519] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.480076][T14519] R13: 00007f077b666038 R14: 00007f077b665fa0 R15: 00007ffe77af3a78 [ 302.480088][T14519] [ 302.792712][T14530] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14530 comm=syz.3.1690 [ 302.826471][T14542] EXT4-fs: Ignoring removed bh option [ 302.837730][T14542] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 303.942141][T14564] FAULT_INJECTION: forcing a failure. [ 303.942141][T14564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.971035][T14564] CPU: 1 UID: 0 PID: 14564 Comm: syz.5.1695 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 303.971196][T14564] Tainted: [W]=WARN [ 303.971202][T14564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.971216][T14564] Call Trace: [ 303.971222][T14564] [ 303.971229][T14564] __dump_stack+0x1d/0x30 [ 303.971264][T14564] dump_stack_lvl+0x95/0xd0 [ 303.971288][T14564] dump_stack+0x15/0x1b [ 303.971352][T14564] should_fail_ex+0x25e/0x270 [ 303.971387][T14564] should_fail+0xb/0x20 [ 303.971417][T14564] should_fail_usercopy+0x1a/0x20 [ 303.971448][T14564] _copy_from_iter+0xcc/0xe70 [ 303.971489][T14564] ? __alloc_skb+0x511/0x6f0 [ 303.971515][T14564] ? __alloc_skb+0x205/0x6f0 [ 303.971541][T14564] netlink_sendmsg+0x4a4/0x6f0 [ 303.971608][T14564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.971635][T14564] ____sys_sendmsg+0x532/0x580 [ 303.971673][T14564] ___sys_sendmsg+0x195/0x1e0 [ 303.971713][T14564] __x64_sys_sendmsg+0xd4/0x160 [ 303.971763][T14564] x64_sys_call+0x194c/0x3020 [ 303.971787][T14564] do_syscall_64+0x136/0x3c0 [ 303.971820][T14564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.971899][T14564] RIP: 0033:0x7f077b3dde59 [ 303.971917][T14564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.971939][T14564] RSP: 002b:00007f0779e16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.971958][T14564] RAX: ffffffffffffffda RBX: 00007f077b666090 RCX: 00007f077b3dde59 [ 303.971973][T14564] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 303.972048][T14564] RBP: 00007f0779e16090 R08: 0000000000000000 R09: 0000000000000000 [ 303.972064][T14564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.972111][T14564] R13: 00007f077b666128 R14: 00007f077b666090 R15: 00007ffe77af3a78 [ 303.972134][T14564] [ 304.982506][T14576] set_capacity_and_notify: 1 callbacks suppressed [ 305.276021][T14576] loop4: detected capacity change from 0 to 512 [ 305.283743][T14576] EXT4-fs (loop4): blocks per group (8192) and clusters per group (255) inconsistent [ 305.542590][T14586] __nla_validate_parse: 5 callbacks suppressed [ 305.542609][T14586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1702'. [ 305.677195][T14610] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 305.697961][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 305.697978][ T28] audit: type=1400 audit(1783178682.440:8657): avc: denied { relabelto } for pid=14609 comm="syz.5.1706" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 305.771328][ T28] audit: type=1400 audit(1783178682.440:8658): avc: denied { associate } for pid=14609 comm="syz.5.1706" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1784 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 305.900574][ T28] audit: type=1400 audit(1783178682.524:8659): avc: denied { read } for pid=14609 comm="syz.5.1706" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 305.958003][ T28] audit: type=1400 audit(1783178682.524:8660): avc: denied { open } for pid=14609 comm="syz.5.1706" path="/327/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 306.010018][ T28] audit: type=1400 audit(1783178682.608:8661): avc: denied { unlink } for pid=4138 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 307.323605][T14644] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1713'. [ 307.343361][T14645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1715'. [ 307.355068][T14631] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 308.223318][T14632] xt_ecn: cannot match TCP bits for non-tcp packets [ 308.335260][ T28] audit: type=1400 audit(1783178685.201:8662): avc: denied { write } for pid=14659 comm="syz.7.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 308.372888][ T28] audit: type=1400 audit(1783178685.201:8663): avc: denied { read } for pid=14659 comm="syz.7.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 308.449539][T14671] loop5: detected capacity change from 0 to 1024 [ 308.457904][T14671] EXT4-fs: Ignoring removed bh option [ 308.488151][T14671] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 308.560266][T14693] loop3: detected capacity change from 0 to 256 [ 308.603008][T14671] EXT4-fs mount: 15 callbacks suppressed [ 308.603098][T14671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.659559][ T28] audit: type=1400 audit(1783178685.526:8664): avc: denied { write } for pid=14669 comm="syz.5.1718" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 308.947903][T14709] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 309.207015][T14709] xt_ecn: cannot match TCP bits for non-tcp packets [ 309.220315][ T4138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.505992][T14733] netlink: 'syz.4.1728': attribute type 63 has an invalid length. [ 311.919563][T14726] loop5: detected capacity change from 0 to 512 [ 311.986769][T14726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.000264][T14727] bond4: option primary: mode dependency failed, not supported in mode broadcast(3) [ 312.009946][T14726] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.026207][T14727] bond4 (unregistering): Released all slaves [ 312.083847][T14813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1729'. [ 312.207686][ T28] audit: type=1400 audit(1783178689.285:8665): avc: denied { mount } for pid=14842 comm="syz.4.1730" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 312.648595][T14869] loop4: detected capacity change from 0 to 1024 [ 312.694123][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1738'. [ 312.703916][T14869] EXT4-fs: Ignoring removed bh option [ 312.808759][ T4138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.855922][T14869] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 313.757504][T14869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.828361][ T28] audit: type=1400 audit(1783178691.028:8666): avc: denied { write } for pid=14868 comm="syz.4.1737" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.406738][T14949] netlink: 'syz.3.1745': attribute type 361 has an invalid length. [ 315.510729][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1751'. [ 315.557139][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.692004][T14977] loop4: detected capacity change from 0 to 512 [ 315.708709][T14977] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 315.718226][T14977] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 315.730286][T14977] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 315.740430][T14977] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 315.749663][T14977] System zones: 0-2, 18-18, 34-35 [ 315.833992][T14994] SELinux: security_context_str_to_sid (}oæ‹bö–?3bæñlæÊGœ;oÔÌñúÍxo‹Ùÿ¤digUü) failed with errno=-22 [ 315.846431][T14977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.865143][ T28] audit: type=1400 audit(1783178693.117:8667): avc: denied { listen } for pid=14990 comm="syz.0.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.019348][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.436448][T15009] xt_hashlimit: size too large, truncated to 1048576 [ 316.461822][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1763'. [ 316.527309][T15016] loop5: detected capacity change from 0 to 1024 [ 316.552187][T15016] EXT4-fs: Ignoring removed bh option [ 316.572047][T15016] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 316.613457][T15016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.643486][ T28] audit: type=1400 audit(1783178693.936:8668): avc: denied { write } for pid=15015 comm="syz.5.1764" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.759971][ T28] audit: type=1400 audit(1783178694.052:8669): avc: denied { ioctl } for pid=15027 comm="syz.0.1765" path="socket:[29331]" dev="sockfs" ino=29331 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 316.854307][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 317.447343][ T4138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.571991][T15044] FAULT_INJECTION: forcing a failure. [ 317.571991][T15044] name failslab, interval 1, probability 0, space 0, times 0 [ 317.645161][T15044] CPU: 1 UID: 0 PID: 15044 Comm: syz.3.1770 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 317.645196][T15044] Tainted: [W]=WARN [ 317.645203][T15044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.645216][T15044] Call Trace: [ 317.645223][T15044] [ 317.645268][T15044] __dump_stack+0x1d/0x30 [ 317.645295][T15044] dump_stack_lvl+0x95/0xd0 [ 317.645331][T15044] dump_stack+0x15/0x1b [ 317.645352][T15044] should_fail_ex+0x25e/0x270 [ 317.645383][T15044] should_failslab+0x8c/0xb0 [ 317.645525][T15044] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 317.645628][T15044] ? __alloc_skb+0x2db/0x6f0 [ 317.645653][T15044] ? __alloc_skb+0x2db/0x6f0 [ 317.645679][T15044] __alloc_skb+0x2db/0x6f0 [ 317.645707][T15044] ? __alloc_skb+0x205/0x6f0 [ 317.645803][T15044] alloc_skb_with_frags+0x7e/0x3d0 [ 317.645907][T15044] ? avc_has_perm_noaudit+0xa3/0x120 [ 317.645937][T15044] sock_alloc_send_pskb+0x44d/0x500 [ 317.646073][T15044] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 317.646105][T15044] hci_sock_sendmsg+0x129/0x910 [ 317.646134][T15044] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 317.646225][T15044] sock_write_iter+0x2c5/0x2f0 [ 317.646274][T15044] aio_write+0x2fe/0x430 [ 317.646380][T15044] io_submit_one+0xba3/0x1350 [ 317.646440][T15044] __se_sys_io_submit+0xfb/0x280 [ 317.646475][T15044] __x64_sys_io_submit+0x43/0x50 [ 317.646545][T15044] x64_sys_call+0x19d5/0x3020 [ 317.646588][T15044] do_syscall_64+0x136/0x3c0 [ 317.646626][T15044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.646656][T15044] RIP: 0033:0x7fcb06b2de59 [ 317.646747][T15044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.646766][T15044] RSP: 002b:00007fcb05587028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 317.646851][T15044] RAX: ffffffffffffffda RBX: 00007fcb06db5fa0 RCX: 00007fcb06b2de59 [ 317.646867][T15044] RDX: 0000200000001240 RSI: 0000000000000001 RDI: 00007fcb05556000 [ 317.646884][T15044] RBP: 00007fcb05587090 R08: 0000000000000000 R09: 0000000000000000 [ 317.646900][T15044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.646954][T15044] R13: 00007fcb06db6038 R14: 00007fcb06db5fa0 R15: 00007ffd05fcd2c8 [ 317.646972][T15044] [ 318.015199][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1774'. [ 318.742731][T15081] loop4: detected capacity change from 0 to 512 [ 318.758727][T15085] loop0: detected capacity change from 0 to 1024 [ 318.808436][T15085] EXT4-fs: Ignoring removed bh option [ 318.826427][T15081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.847144][T15089] syz_tun: entered allmulticast mode [ 318.860802][T15085] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 318.875837][T15088] syz_tun: left allmulticast mode [ 318.918388][T15081] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.937325][T15085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.096152][ T28] audit: type=1400 audit(1783178696.383:8670): avc: denied { write } for pid=15083 comm="syz.0.1780" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.120900][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1783'. [ 319.152907][ T28] audit: type=1400 audit(1783178696.509:8671): avc: denied { create } for pid=15097 comm="syz.7.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 319.371303][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.453939][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1787'. [ 319.475530][T15110] syzkaller0: entered promiscuous mode [ 319.481830][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.498400][T15110] syzkaller0: entered allmulticast mode [ 319.605050][ T28] audit: type=1400 audit(1783178697.054:8672): avc: denied { getopt } for pid=15119 comm="syz.7.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 319.685576][ T28] audit: type=1400 audit(1783178697.107:8673): avc: denied { setattr } for pid=15119 comm="syz.7.1789" name="KCM" dev="sockfs" ino=29533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 319.820023][T15153] xt_hashlimit: size too large, truncated to 1048576 [ 319.965299][T15160] loop3: detected capacity change from 0 to 1024 [ 319.982788][T15160] EXT4-fs: Ignoring removed bh option [ 320.008138][T15160] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 320.032471][T15160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.047587][ T28] audit: type=1400 audit(1783178697.516:8674): avc: denied { write } for pid=15159 comm="syz.3.1797" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.199450][T15169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15169 comm=syz.4.1798 [ 320.202387][T15168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15168 comm=syz.4.1798 [ 320.248621][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.277917][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'. [ 320.345299][T15190] Invalid argument reading file caps for ./file0 [ 320.388070][T15200] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1806'. [ 320.496880][T15210] loop3: detected capacity change from 0 to 512 [ 320.512678][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1810'. [ 320.513135][T15210] EXT4-fs (loop3): 1 truncate cleaned up [ 320.528319][T15210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.543315][ T28] audit: type=1400 audit(1783178698.031:8675): avc: denied { write } for pid=15206 comm="syz.3.1808" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.566532][ T28] audit: type=1400 audit(1783178698.031:8676): avc: denied { write } for pid=15206 comm="syz.3.1808" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.923565][T15226] loop0: detected capacity change from 0 to 128 [ 322.131028][T15263] loop4: detected capacity change from 0 to 1024 [ 322.146125][T15263] EXT4-fs: Ignoring removed bh option [ 322.164497][T15263] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 322.201045][T15263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.241721][T15268] xt_hashlimit: size too large, truncated to 1048576 [ 322.254658][ T28] audit: type=1400 audit(1783178699.826:8677): avc: denied { write } for pid=15261 comm="syz.4.1820" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 322.381184][ T28] audit: type=1400 audit(1783178699.963:8678): avc: denied { write } for pid=15279 comm="syz.0.1824" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 322.759968][T15293] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1827'. [ 322.930801][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.942927][T15310] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1829'. [ 323.080939][T15092] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 323.132930][T15323] loop4: detected capacity change from 0 to 256 [ 323.142217][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1832'. [ 323.439647][T15339] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 323.715016][T15339] xt_ecn: cannot match TCP bits for non-tcp packets [ 325.025639][ T4926] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 325.040648][ T4926] EXT4-fs (loop3): This should not happen!! Data will be lost [ 325.040648][ T4926] [ 325.050358][ T4926] EXT4-fs (loop3): Total free blocks count 0 [ 325.056949][ T4926] EXT4-fs (loop3): Free/Dirty block details [ 325.063495][ T4926] EXT4-fs (loop3): free_blocks=0 [ 325.069257][ T4926] EXT4-fs (loop3): dirty_blocks=2 [ 325.074496][ T4926] EXT4-fs (loop3): Block reservation details [ 325.080513][ T4926] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 325.091987][ T3305] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 325.113109][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.122810][T15357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15357 comm=syz.4.1835 [ 325.137819][T15357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1835'. [ 325.147716][T15357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1835'. [ 325.200099][T15366] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1834'. [ 325.201016][T15363] xt_hashlimit: size too large, truncated to 1048576 [ 325.315126][T15373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1838'. [ 325.396644][T15391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1840'. [ 325.990678][T15326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.095921][T15432] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1847'. [ 326.136781][ T8449] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 326.145820][ T8449] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 326.174726][T15441] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1850'. [ 326.184473][T15448] xt_hashlimit: size too large, truncated to 1048576 [ 326.397140][T15466] loop5: detected capacity change from 0 to 256 [ 326.562352][ T28] audit: type=1326 audit(1783178704.236:8679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0033de59 code=0x7ffc0000 [ 326.623307][ T28] audit: type=1326 audit(1783178704.236:8680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0033de59 code=0x7ffc0000 [ 326.815704][ T28] audit: type=1326 audit(1783178704.236:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0033de59 code=0x7ffc0000 [ 326.893422][T15493] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15493 comm=syz.3.1862 [ 326.992326][ T28] audit: type=1326 audit(1783178704.246:8682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b0033de59 code=0x7ffc0000 [ 327.194962][ T28] audit: type=1326 audit(1783178704.246:8683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0033de59 code=0x7ffc0000 [ 327.287531][ T28] audit: type=1326 audit(1783178704.246:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0033de59 code=0x7ffc0000 [ 327.380122][ T28] audit: type=1326 audit(1783178704.246:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0033de59 code=0x7ffc0000 [ 327.466767][ T28] audit: type=1326 audit(1783178704.246:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0033de59 code=0x7ffc0000 [ 327.554673][ T28] audit: type=1326 audit(1783178704.246:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0033de59 code=0x7ffc0000 [ 327.879974][ T28] audit: type=1326 audit(1783178704.246:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1856" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4b0033de59 code=0x7ffc0000 [ 328.017437][T15524] __nla_validate_parse: 5 callbacks suppressed [ 328.017578][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1870'. [ 328.153817][T15528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1872'. [ 328.289028][T15528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1872'. [ 329.831752][T15557] loop3: detected capacity change from 0 to 4096 [ 330.558978][T15557] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 330.865479][T15557] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1877'. [ 331.851369][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1881'. [ 332.569906][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'. [ 332.724976][T15621] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1890'. [ 332.755223][T15640] xt_cgroup: invalid path, errno=-2 [ 332.810708][T15651] loop3: detected capacity change from 0 to 512 [ 332.839644][T15651] ext4: Unknown parameter 'measure' [ 332.973700][T15625] loop0: detected capacity change from 0 to 164 [ 333.112754][T15625] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 333.258443][T15682] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 334.005569][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1898'. [ 334.188700][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1901'. [ 335.030066][ T28] kauditd_printk_skb: 201 callbacks suppressed [ 335.030083][ T28] audit: type=1400 audit(1783178713.244:8890): avc: denied { create } for pid=15704 comm="syz.4.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 335.107358][T15717] xt_connbytes: Forcing CT accounting to be enabled [ 335.253715][T15727] loop5: detected capacity change from 0 to 512 [ 335.253996][T15727] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 336.484958][T15765] netlink: 'syz.7.1917': attribute type 21 has an invalid length. [ 336.499331][T15765] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1917'. [ 336.508538][T15765] netlink: 'syz.7.1917': attribute type 4 has an invalid length. [ 336.516594][T15765] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1917'. [ 337.109994][T15762] xt_hashlimit: max too large, truncated to 1048576 [ 337.116656][T15762] ipt_REJECT: TCP_RESET invalid for non-tcp [ 337.200786][T15773] loop3: detected capacity change from 0 to 512 [ 337.332309][T15773] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 337.443061][T15773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 337.451121][T15773] EXT4-fs (loop3): orphan cleanup on readonly fs [ 337.460789][T15773] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.1919: iget: bad i_size value: 12154761577498 [ 337.473485][T15773] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 337.473657][T15773] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1919: couldn't read orphan inode 13 (err -117) [ 337.494689][T15773] loop3: lost filesystem error report for type 5 error -117 [ 337.495227][T15773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 337.540959][T15773] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1919: dx entry: limit 65535 != root limit 120 [ 337.599808][T15773] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1919: Corrupt directory, running e2fsck is recommended [ 337.684045][ T28] audit: type=1400 audit(1783178716.027:8891): avc: denied { listen } for pid=15789 comm="syz.4.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.714625][T15791] loop4: detected capacity change from 0 to 128 [ 337.724878][T15773] netlink: 'syz.3.1919': attribute type 21 has an invalid length. [ 337.739493][T15791] vfat: Unknown parameter '/dev/ptmx' [ 337.755572][ T28] audit: type=1400 audit(1783178716.047:8892): avc: denied { accept } for pid=15789 comm="syz.4.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.788692][T15773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1919'. [ 337.802927][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 337.908176][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.949756][ T28] audit: type=1400 audit(1783178716.310:8893): avc: denied { relabelfrom } for pid=15810 comm="syz.0.1928" name="" dev="pipefs" ino=30499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 338.015121][T15814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1929'. [ 338.049115][T15818] loop0: detected capacity change from 0 to 1024 [ 338.079927][T15818] EXT4-fs: Ignoring removed bh option [ 338.102311][T15818] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 338.140249][T15818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.169867][ T28] audit: type=1400 audit(1783178716.541:8894): avc: denied { write } for pid=15817 comm="syz.0.1930" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 338.266103][T15829] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 338.319192][T15829] loop3: detected capacity change from 0 to 512 [ 338.361046][T15829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.377188][ T28] audit: type=1400 audit(1783178716.730:8895): avc: denied { write } for pid=15828 comm="syz.3.1927" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 338.409158][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.450640][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.508586][T15876] loop4: detected capacity change from 0 to 2048 [ 338.570391][T15876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.587951][ T28] audit: type=1400 audit(1783178716.982:8896): avc: denied { write } for pid=15874 comm="syz.4.1936" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 338.612592][ T28] audit: type=1400 audit(1783178717.003:8897): avc: denied { write } for pid=15874 comm="syz.4.1936" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 338.644632][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1939'. [ 338.680034][T15892] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15892 comm=syz.5.1939 [ 338.696133][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.735138][T15919] loop0: detected capacity change from 0 to 128 [ 338.764458][T15924] loop3: detected capacity change from 0 to 512 [ 338.775167][T15919] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.797823][T15919] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 338.808463][T15933] loop4: detected capacity change from 0 to 1024 [ 338.859231][T15924] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1943: bg 0: block 127: padding at end of block bitmap is not set [ 338.877004][T15933] EXT4-fs: Ignoring removed bh option [ 338.899790][T15924] loop3: lost filesystem error report for type 5 error -117 [ 338.918466][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 338.932203][ C0] EXT4-fs (loop3): initial error at time 1783178717: ext4_validate_block_bitmap:441 [ 338.941603][ C0] EXT4-fs (loop3): last error at time 1783178717: ext4_validate_block_bitmap:441 [ 338.959341][T15924] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 338.973406][T15933] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 339.008630][T15924] EXT4-fs error (device loop3): ext4_free_inode:356: comm syz.3.1943: bit already cleared for inode 11 [ 339.025668][T15933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.057690][ T28] audit: type=1400 audit(1783178717.360:8898): avc: denied { setopt } for pid=15918 comm="syz.0.1942" lport=40164 faddr=::ffff:172.30.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 339.110329][T15924] loop3: lost filesystem error report for type 5 error -117 [ 339.110668][T15924] EXT4-fs (loop3): 1 orphan inode deleted [ 339.226095][T15924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.260729][ T28] audit: type=1400 audit(1783178717.549:8899): avc: denied { write } for pid=15932 comm="syz.4.1940" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.826885][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.436867][T10212] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.734864][ T28] audit: type=1400 audit(1783178720.279:8900): avc: denied { accept } for pid=15971 comm="syz.0.1950" path="socket:[30638]" dev="sockfs" ino=30638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 341.762628][ T3412] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 341.772232][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.784819][ T28] audit: type=1326 audit(1783178720.331:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.5.1947" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b3dde59 code=0x7ffc0000 [ 341.842257][ T28] audit: type=1326 audit(1783178720.331:8902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.5.1947" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b3dde59 code=0x7ffc0000 [ 341.854629][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1952'. [ 341.899014][T15987] loop4: detected capacity change from 0 to 256 [ 341.914691][T15987] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 341.941749][ T28] audit: type=1326 audit(1783178720.331:8903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.5.1947" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b3dde59 code=0x7ffc0000 [ 342.000687][ T28] audit: type=1326 audit(1783178720.331:8904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.5.1947" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f077b3dde59 code=0x7ffc0000 [ 342.008709][ T361] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.078895][ T28] audit: type=1326 audit(1783178720.331:8905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.5.1947" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b3dde59 code=0x7ffc0000 [ 342.104543][ T28] audit: type=1326 audit(1783178720.331:8906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.5.1947" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b3dde59 code=0x7ffc0000 [ 342.130281][ T28] audit: type=1326 audit(1783178720.331:8907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.5.1947" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f077b3dde59 code=0x7ffc0000 [ 342.156125][ T28] audit: type=1326 audit(1783178720.331:8908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.5.1947" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f077b3dde59 code=0x7ffc0000 [ 342.194206][ T28] audit: type=1326 audit(1783178720.394:8909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.5.1947" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f077b3ddbc2 code=0x7ffc0000 [ 342.227103][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 342.382954][ T3412] IPVS: starting estimator thread 0... [ 342.441096][T16026] loop5: detected capacity change from 0 to 512 [ 342.467850][T15985] netlink: 'syz.7.1953': attribute type 30 has an invalid length. [ 342.475842][T16023] IPVS: using max 2112 ests per chain, 105600 per kthread [ 342.529273][T16026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.550697][T16026] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.646925][ T4138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.658600][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1963'. [ 342.678800][T16038] loop0: detected capacity change from 0 to 512 [ 342.710877][T16047] netlink: 'syz.5.1964': attribute type 29 has an invalid length. [ 342.748435][T16038] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1961: bg 0: block 393: padding at end of block bitmap is not set [ 342.783513][T16038] loop0: lost filesystem error report for type 5 error -117 [ 342.784607][T16038] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 342.792343][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 342.792417][ C1] EXT4-fs (loop0): initial error at time 1783178721: ext4_validate_block_bitmap:441 [ 342.792502][ C1] EXT4-fs (loop0): last error at time 1783178721: ext4_validate_block_bitmap:441 [ 342.831451][T16038] loop0: lost filesystem error report for type 5 error -117 [ 342.932042][T16038] EXT4-fs (loop0): 2 truncates cleaned up [ 342.950138][T16038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.968616][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1967'. [ 343.092794][T16064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=16064 comm=syz.7.1967 [ 343.457660][T16031] loop4: detected capacity change from 0 to 128 [ 343.480896][ T4920] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 343.944769][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.953895][ T3550] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 344.025831][T16088] random: crng reseeded on system resumption [ 344.100444][T16091] loop3: detected capacity change from 0 to 256 [ 344.187517][T16101] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1973'. [ 344.207181][T16088] loop4: detected capacity change from 0 to 128 [ 344.265086][T16099] loop0: detected capacity change from 0 to 512 [ 344.315241][T16091] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1970'. [ 344.496920][T16088] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.565546][T16088] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.582105][T16099] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1971: bg 0: block 393: padding at end of block bitmap is not set [ 344.627252][T16124] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 344.641462][T16099] loop0: lost filesystem error report for type 5 error -117 [ 344.642718][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 344.656456][ C1] EXT4-fs (loop0): initial error at time 1783178723: ext4_validate_block_bitmap:441 [ 344.665862][ C1] EXT4-fs (loop0): last error at time 1783178723: ext4_validate_block_bitmap:441 [ 344.716297][T16099] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 344.725757][T16099] loop0: lost filesystem error report for type 5 error -117 [ 344.726865][T16099] EXT4-fs (loop0): 2 truncates cleaned up [ 344.996458][T16099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.102328][T10803] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.469897][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.837959][T16194] loop5: detected capacity change from 0 to 1024 [ 345.862666][T16194] EXT4-fs: Ignoring removed bh option [ 345.919828][T16194] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 345.974394][T16194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.988706][T16201] loop0: detected capacity change from 0 to 4096 [ 346.165980][T16201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.266215][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.529347][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 346.529373][ T28] audit: type=1400 audit(1783178725.276:8979): avc: denied { setopt } for pid=16213 comm="syz.0.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 346.896921][ T4138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.952135][T16227] xt_hashlimit: size too large, truncated to 1048576 [ 347.039220][T16241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1996'. [ 347.056388][ T28] audit: type=1400 audit(1783178725.875:8980): avc: denied { getopt } for pid=16234 comm="syz.5.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 347.066252][T16241] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1996'. [ 347.132077][T16248] bond1: option mode: unable to set because the bond device is up [ 347.152628][T16248] macvlan3: entered allmulticast mode [ 347.170053][T16248] bond0: entered allmulticast mode [ 347.175258][T16248] syz_tun: entered allmulticast mode [ 347.182626][T16248] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 347.196862][T16248] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 347.207395][ T361] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 347.311045][ T4950] bond1: (slave macvlan3): link status up again after 0 ms [ 347.329248][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 347.342155][ T4950] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 347.492198][ T361] bond1: (slave macvlan3): failed to get link speed/duplex [ 347.518326][T16278] loop0: detected capacity change from 0 to 256 [ 348.536159][ T3485] bond1: (slave macvlan3): failed to get link speed/duplex [ 348.555474][T16285] netlink: 1788 bytes leftover after parsing attributes in process `syz.4.2007'. [ 348.662552][ T3485] bond1: (slave macvlan3): failed to get link speed/duplex [ 348.768241][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 348.890815][ T3485] bond1: (slave macvlan3): failed to get link speed/duplex [ 348.999859][T16293] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 349.010643][ T3485] bond1: (slave macvlan3): failed to get link speed/duplex [ 349.128812][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 349.195326][T16299] bond1: option mode: unable to set because the bond device has slaves [ 349.233583][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 349.284254][T16305] mmap: syz.5.2012 (16305): VmData 29114368 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 349.305615][T16303] loop4: detected capacity change from 0 to 256 [ 349.307039][T16289] xt_ecn: cannot match TCP bits for non-tcp packets [ 349.338662][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 349.363191][T16305] macvlan4: entered allmulticast mode [ 349.370888][T16305] batman_adv: batadv0: Adding interface: macvlan4 [ 349.389355][T16305] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.426892][T16313] loop4: detected capacity change from 0 to 512 [ 349.431703][T16305] batman_adv: batadv0: Interface activated: macvlan4 [ 349.462500][T16313] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.2011: corrupted xattr block 95: invalid header [ 349.507931][T16313] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 349.509638][T16313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2011: bg 0: block 7: invalid block bitmap [ 349.509794][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 349.509809][ C0] EXT4-fs (loop4): initial error at time 1783178728: ext4_expand_extra_isize_ea:2810: inode 11 [ 349.509846][ C0] EXT4-fs (loop4): last error at time 1783178728: ext4_expand_extra_isize_ea:2810: inode 11 [ 349.689065][T16313] loop4: lost filesystem error report for type 5 error -117 [ 349.730207][T16313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 349.730246][ T3485] bond1: (slave macvlan3): failed to get link speed/duplex [ 349.780620][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2014'. [ 349.788091][T16313] loop4: lost filesystem error report for type 5 error -117 [ 349.793676][T16313] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.2011: corrupted xattr block 95: invalid header [ 349.819648][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2014'. [ 349.835039][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 349.842285][T16313] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 349.849604][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2014'. [ 349.849762][T16313] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 349.858789][ T3485] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.877042][T16313] EXT4-fs (loop4): 1 orphan inode deleted [ 349.886893][ T3485] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.900358][T16334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2015'. [ 349.901135][ T3485] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.915741][T16313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.933779][ T3485] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.041001][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2018'. [ 350.129271][T16352] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2019'. [ 350.175899][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.243055][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 350.320930][T16380] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 350.451950][T16390] loop3: detected capacity change from 0 to 512 [ 350.458369][T16392] loop5: detected capacity change from 0 to 1024 [ 350.499365][T16390] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 350.521429][T16392] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 350.552216][T16409] loop4: detected capacity change from 0 to 128 [ 350.583796][T16409] vfat: Bad value for 'shortname' [ 350.600639][T16392] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.2029: lblock 1 mapped to illegal pblock 1 (length 1) [ 350.672020][T16392] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 350.672260][T16392] Quota error (device loop5): write_blk: dquota write failed [ 350.690810][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 350.697266][ C0] EXT4-fs (loop5): initial error at time 1783178729: ext4_map_blocks:833: inode 3: block 1 [ 350.707309][ C0] EXT4-fs (loop5): last error at time 1783178729: ext4_map_blocks:833: inode 3: block 1 [ 350.760459][T16392] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 350.779564][T16392] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.2029: Failed to acquire dquot type 0 [ 350.812757][T16392] loop5: lost filesystem error report for type 5 error -117 [ 350.812893][T16392] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.2029: Freeing blocks not in datazone - block = 0, count = 4096 [ 350.852752][ T28] audit: type=1400 audit(1783178729.854:8981): avc: denied { write } for pid=16399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.892936][T16392] loop5: lost filesystem error report for type 5 error -117 [ 350.893151][T16392] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.2029: Invalid inode bitmap blk 0 in block_group 0 [ 350.913372][T16425] loop4: detected capacity change from 0 to 512 [ 350.914521][T16392] loop5: lost filesystem error report for type 5 error -117 [ 350.928148][T16392] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 350.944094][T16392] loop5: lost filesystem error report for type 5 error -117 [ 350.944254][T16392] EXT4-fs (loop5): 1 orphan inode deleted [ 350.962314][ T361] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 350.987106][ T361] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 350.987203][ T361] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 350.996176][ T28] audit: type=1400 audit(1783178729.864:8982): avc: denied { write } for pid=16439 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.012453][T16392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.054334][ T361] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 0 [ 351.088483][T16449] loop3: detected capacity change from 0 to 256 [ 351.092709][T16392] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.2029: Invalid inode table block 17179869185 in block_group 0 [ 351.121514][T16392] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 351.141343][T16425] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 351.170032][T16425] EXT4-fs (loop4): orphan cleanup on readonly fs [ 351.189735][ T28] audit: type=1400 audit(1783178730.211:8983): avc: denied { write } for pid=16459 comm="syz.5.2029" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.212967][T16425] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 351.243274][ T28] audit: type=1400 audit(1783178730.211:8984): avc: denied { write } for pid=16391 comm="syz.5.2029" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.265709][T16425] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 351.283331][T16425] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 351.290433][T16457] netlink: 'syz.5.2029': attribute type 13 has an invalid length. [ 351.312458][T16425] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #16: comm syz.4.2032: inode has both inline data and extents flags [ 351.357757][ T28] audit: type=1400 audit(1783178730.379:8985): avc: denied { write } for pid=16458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.386290][T16425] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 351.387041][T16425] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2032: couldn't read orphan inode 16 (err -117) [ 351.396404][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 351.396442][ C0] EXT4-fs (loop4): initial error at time 1783178730: ext4_orphan_get:1399: inode 16 [ 351.396583][ C0] EXT4-fs (loop4): last error at time 1783178730: ext4_orphan_get:1399: inode 16 [ 351.417415][ T28] audit: type=1400 audit(1783178730.442:8986): avc: denied { write } for pid=16391 comm="syz.5.2029" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.487094][T16425] loop4: lost filesystem error report for type 5 error -117 [ 351.492808][T16425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.500166][ T28] audit: type=1400 audit(1783178730.494:8987): avc: denied { write } for pid=16481 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.543097][T16488] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.2032: iget: bad i_size value: 360287970189639690 [ 351.632885][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.815859][ T4138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.845985][ T28] audit: type=1400 audit(1783178730.904:8988): avc: denied { load_policy } for pid=16493 comm="syz.4.2036" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 352.018034][T16500] xt_ecn: cannot match TCP bits for non-tcp packets [ 352.308644][T16501] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 352.350426][T16501] SELinux: failed to load policy [ 352.481359][T16514] __nla_validate_parse: 3 callbacks suppressed [ 352.494345][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2039'. [ 352.533507][T16520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2041'. [ 352.569293][T16523] loop4: detected capacity change from 0 to 128 [ 352.622105][T16487] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 352.639938][T16523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 352.681565][T16523] System zones: 1-3, 19-19, 35-36 [ 352.698117][T16523] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 352.751051][T16534] loop5: detected capacity change from 0 to 1024 [ 352.763455][T16534] EXT4-fs: Ignoring removed orlov option [ 352.796264][T16523] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 352.871582][T16534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.894935][T16547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2044'. [ 352.919970][ T28] audit: type=1400 audit(1783178732.017:8989): avc: denied { write } for pid=16522 comm="syz.4.2042" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.974585][T10803] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.029264][ T28] audit: type=1400 audit(1783178732.069:8990): avc: denied { write } for pid=16533 comm="syz.5.2037" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 353.051160][ T28] audit: type=1400 audit(1783178732.122:8991): avc: denied { bind } for pid=16533 comm="syz.5.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 353.060781][ T4138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.137785][ T28] audit: type=1400 audit(1783178732.248:8992): avc: denied { bind } for pid=16563 comm="syz.4.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 353.186655][T16540] xt_hashlimit: max too large, truncated to 1048576 [ 353.195558][T16578] bridge0: port 3(vlan2) entered blocking state [ 353.208568][T16578] bridge0: port 3(vlan2) entered disabled state [ 353.216446][T16578] vlan2: entered allmulticast mode [ 353.236230][T16578] geneve0: entered allmulticast mode [ 353.242220][T16578] vlan2: entered promiscuous mode [ 353.256061][T16578] geneve0: entered promiscuous mode [ 353.324127][T16593] loop4: detected capacity change from 0 to 512 [ 353.332710][T16561] net_ratelimit: 24 callbacks suppressed [ 353.332734][T16561] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.362638][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 353.456521][T16593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.470278][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 353.474665][T16593] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 1320803145 (only 1 groups) [ 353.492080][T16593] tipc: Started in network mode [ 353.497002][T16593] tipc: Node identity ac14140f, cluster identity 4711 [ 353.503883][T16593] tipc: New replicast peer: 255.255.255.255 [ 353.509942][T16593] tipc: Enabled bearer , priority 10 [ 353.518434][T16618] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2058'. [ 353.567726][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.574959][T16625] xt_hashlimit: size too large, truncated to 1048576 [ 353.582028][T16630] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 353.595103][ T28] audit: type=1400 audit(1783178732.710:8993): avc: denied { getopt } for pid=16628 comm="syz.3.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 353.637411][ T361] bond1: (slave macvlan3): failed to get link speed/duplex [ 353.654815][T16638] syzkaller0: entered promiscuous mode [ 353.663284][T16638] syzkaller0: entered allmulticast mode [ 353.671122][T16638] tipc: Enabled bearer , priority 0 [ 353.683024][T16636] tipc: Resetting bearer [ 353.697252][T16636] tipc: Disabling bearer [ 353.725538][T16651] FAULT_INJECTION: forcing a failure. [ 353.725538][T16651] name failslab, interval 1, probability 0, space 0, times 0 [ 353.738302][T16651] CPU: 1 UID: 0 PID: 16651 Comm: syz.3.2065 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 353.738338][T16651] Tainted: [W]=WARN [ 353.738344][T16651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.738356][T16651] Call Trace: [ 353.738364][T16651] [ 353.738371][T16651] __dump_stack+0x1d/0x30 [ 353.738418][T16651] dump_stack_lvl+0x95/0xd0 [ 353.738441][T16651] dump_stack+0x15/0x1b [ 353.738460][T16651] should_fail_ex+0x25e/0x270 [ 353.738487][T16651] should_failslab+0x8c/0xb0 [ 353.738589][T16651] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 353.738622][T16651] ? ethnl_default_set_doit+0x5e5/0x940 [ 353.738655][T16651] ? ethnl_default_set_doit+0x5e5/0x940 [ 353.738730][T16651] kmemdup_noprof+0x2b/0x70 [ 353.738759][T16651] ethnl_default_set_doit+0x5e5/0x940 [ 353.738786][T16651] genl_family_rcv_msg_doit+0x187/0x1f0 [ 353.738818][T16651] genl_rcv_msg+0x42f/0x470 [ 353.738879][T16651] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 353.738915][T16651] netlink_rcv_skb+0x11e/0x220 [ 353.738982][T16651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.739017][T16651] genl_rcv+0x28/0x40 [ 353.739052][T16651] netlink_unicast+0x5a7/0x680 [ 353.739085][T16651] netlink_sendmsg+0x5be/0x6f0 [ 353.739108][T16651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.739247][T16651] ____sys_sendmsg+0x532/0x580 [ 353.739276][T16651] ___sys_sendmsg+0x195/0x1e0 [ 353.739317][T16651] __x64_sys_sendmsg+0xd4/0x160 [ 353.739348][T16651] x64_sys_call+0x194c/0x3020 [ 353.739508][T16651] do_syscall_64+0x136/0x3c0 [ 353.739543][T16651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.739564][T16651] RIP: 0033:0x7fcb06b2de59 [ 353.739579][T16651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.739650][T16651] RSP: 002b:00007fcb05587028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.739669][T16651] RAX: ffffffffffffffda RBX: 00007fcb06db5fa0 RCX: 00007fcb06b2de59 [ 353.739684][T16651] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 353.739697][T16651] RBP: 00007fcb05587090 R08: 0000000000000000 R09: 0000000000000000 [ 353.739709][T16651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.739721][T16651] R13: 00007fcb06db6038 R14: 00007fcb06db5fa0 R15: 00007ffd05fcd2c8 [ 353.739814][T16651] [ 353.975984][ T361] bond1: (slave macvlan3): failed to get link speed/duplex [ 354.101699][ T361] bond1: (slave macvlan3): failed to get link speed/duplex [ 354.109610][T16664] netlink: 'syz.5.2069': attribute type 14 has an invalid length. [ 354.169737][T16664] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2069'. [ 354.234130][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 354.997134][ T3398] tipc: Node number set to 2886997007 [ 355.064183][T16679] loop0: detected capacity change from 0 to 1024 [ 355.071130][T16679] EXT4-fs: Ignoring removed bh option [ 355.196011][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 355.300917][T16679] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 356.186593][T16685] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2073'. [ 356.200790][T16679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.159914][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 357.173866][ T28] audit: type=1400 audit(1783178735.492:8994): avc: denied { write } for pid=16678 comm="syz.0.2072" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.284311][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 357.518927][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.528173][T16724] loop4: detected capacity change from 0 to 512 [ 357.558663][T16724] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 357.573848][T16734] loop3: detected capacity change from 0 to 1024 [ 357.612639][T16734] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 357.626342][T16734] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 357.636216][T16734] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 357.678863][T16734] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #3: comm syz.3.2081: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 357.679596][ T28] audit: type=1400 audit(1783178736.951:8995): avc: denied { mount } for pid=16740 comm="syz.0.2079" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 357.698628][T16724] EXT4-fs (loop4): 1 truncate cleaned up [ 357.725977][T16755] FAULT_INJECTION: forcing a failure. [ 357.725977][T16755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.743778][T16734] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 357.744300][T16724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.753390][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 357.753442][ C0] EXT4-fs (loop3): initial error at time 1783178737: ext4_ext_check_inode:521: inode 3 [ 357.753474][ C0] EXT4-fs (loop3): last error at time 1783178737: ext4_ext_check_inode:521: inode 3 [ 357.763927][T16755] CPU: 1 UID: 0 PID: 16755 Comm: syz.0.2084 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 357.763963][T16755] Tainted: [W]=WARN [ 357.763979][T16755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.764063][T16755] Call Trace: [ 357.764070][T16755] [ 357.764078][T16755] __dump_stack+0x1d/0x30 [ 357.764104][T16755] dump_stack_lvl+0x95/0xd0 [ 357.764126][T16755] dump_stack+0x15/0x1b [ 357.764147][T16755] should_fail_ex+0x25e/0x270 [ 357.764198][T16755] should_fail+0xb/0x20 [ 357.764275][T16755] should_fail_usercopy+0x1a/0x20 [ 357.764307][T16755] _copy_from_iter+0x318/0xe70 [ 357.764358][T16755] ? kmem_cache_alloc_noprof+0x198/0x3c0 [ 357.764383][T16755] ? security_inode_alloc+0x37/0x100 [ 357.764408][T16755] ? __rcu_read_unlock+0x4e/0x70 [ 357.764498][T16755] ? avc_has_perm_noaudit+0xa3/0x120 [ 357.764524][T16755] ping_v4_sendmsg+0x142/0xf40 [ 357.764550][T16755] ? avc_has_perm_noaudit+0xa3/0x120 [ 357.764582][T16755] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 357.764662][T16755] inet_sendmsg+0xc5/0xd0 [ 357.764687][T16755] ? __pfx_inet_sendmsg+0x10/0x10 [ 357.764715][T16755] ____sys_sendmsg+0x4e8/0x580 [ 357.764778][T16755] ___sys_sendmsg+0x195/0x1e0 [ 357.764874][T16755] __x64_sys_sendmsg+0xd4/0x160 [ 357.764908][T16755] x64_sys_call+0x194c/0x3020 [ 357.764935][T16755] do_syscall_64+0x136/0x3c0 [ 357.764990][T16755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.765015][T16755] RIP: 0033:0x7f4b0033de59 [ 357.765050][T16755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.765073][T16755] RSP: 002b:00007f4afed97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.765095][T16755] RAX: ffffffffffffffda RBX: 00007f4b005c5fa0 RCX: 00007f4b0033de59 [ 357.765127][T16755] RDX: 0000000020008004 RSI: 0000200000000080 RDI: 0000000000000003 [ 357.765142][T16755] RBP: 00007f4afed97090 R08: 0000000000000000 R09: 0000000000000000 [ 357.765156][T16755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.765169][T16755] R13: 00007f4b005c6038 R14: 00007f4b005c5fa0 R15: 00007fffd7172e78 [ 357.765252][T16755] [ 357.769895][T16734] EXT4-fs (loop3): no journal found [ 357.789641][ T28] audit: type=1400 audit(1783178737.140:8996): avc: denied { write } for pid=16723 comm="syz.4.2078" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.791195][T16734] EXT4-fs (loop3): can't get journal size [ 358.052749][T10803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.245319][T16764] macvtap1: entered promiscuous mode [ 358.252404][T16764] macvtap1: entered allmulticast mode [ 358.267531][T16764] dummy0: entered allmulticast mode [ 358.276357][T16764] dummy0: entered promiscuous mode [ 358.314438][T16764] team0: Device macvtap1 failed to register rx_handler [ 358.327133][T16764] dummy0: left allmulticast mode [ 358.549763][ T3543] dummy0: left promiscuous mode [ 358.567908][ T30] net_ratelimit: 4 callbacks suppressed [ 358.567922][ T30] bond1: (slave macvlan3): failed to get link speed/duplex [ 358.587028][T16764] syz.5.2082 (16764) used greatest stack depth: 9024 bytes left [ 358.635867][T16734] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #3: comm syz.3.2081: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 358.664769][T16734] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 358.664933][T16734] EXT4-fs (loop3): failed to initialize system zone (-117) [ 358.700751][T16734] EXT4-fs (loop3): mount failed [ 358.710563][ T30] bond1: (slave macvlan3): failed to get link speed/duplex [ 358.816034][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 358.903808][T16787] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2090'. [ 358.940101][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 359.053559][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 359.209438][ T28] audit: type=1400 audit(1783178738.631:8997): avc: denied { ioctl } for pid=16796 comm="syz.3.2093" path="socket:[32569]" dev="sockfs" ino=32569 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 360.591335][T16932] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2098'. [ 361.877281][T16834] FAULT_INJECTION: forcing a failure. [ 361.877281][T16834] name failslab, interval 1, probability 0, space 0, times 0 [ 361.890251][T16834] CPU: 0 UID: 0 PID: 16834 Comm: syz.5.2096 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 361.890290][T16834] Tainted: [W]=WARN [ 361.890297][T16834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.890312][T16834] Call Trace: [ 361.890319][T16834] [ 361.890328][T16834] __dump_stack+0x1d/0x30 [ 361.890394][T16834] dump_stack_lvl+0x95/0xd0 [ 361.890417][T16834] dump_stack+0x15/0x1b [ 361.890440][T16834] should_fail_ex+0x25e/0x270 [ 361.890472][T16834] should_failslab+0x8c/0xb0 [ 361.890531][T16834] __kvmalloc_node_noprof+0x15b/0x590 [ 361.890562][T16834] ? page_pool_create_percpu+0x213/0x680 [ 361.890593][T16834] ? page_pool_create_percpu+0x213/0x680 [ 361.890666][T16834] page_pool_create_percpu+0x213/0x680 [ 361.890701][T16834] page_pool_create+0x1a/0x30 [ 361.890731][T16834] __veth_napi_enable_range+0xfb/0x4b0 [ 361.890814][T16834] veth_enable_xdp+0x1f1/0x310 [ 361.890841][T16834] ? kmem_cache_alloc_noprof+0x198/0x3c0 [ 361.890884][T16834] ? security_file_alloc+0x32/0xf0 [ 361.890988][T16834] veth_xdp+0x3ed/0x670 [ 361.891017][T16834] dev_xdp_install+0x393/0x4e0 [ 361.891093][T16834] ? __pfx_veth_xdp+0x10/0x10 [ 361.891163][T16834] ? __pfx_veth_xdp+0x10/0x10 [ 361.891253][T16834] dev_xdp_attach+0x8f4/0xb60 [ 361.891287][T16834] bpf_xdp_link_attach+0x375/0x590 [ 361.891330][T16834] link_create+0x4d4/0x6b0 [ 361.891357][T16834] __sys_bpf+0x5a2/0xc30 [ 361.891478][T16834] __x64_sys_bpf+0x69/0x80 [ 361.891511][T16834] x64_sys_call+0x10cb/0x3020 [ 361.891540][T16834] do_syscall_64+0x136/0x3c0 [ 361.891571][T16834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.891650][T16834] RIP: 0033:0x7f077b3dde59 [ 361.891797][T16834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.891877][T16834] RSP: 002b:00007f0779e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.891901][T16834] RAX: ffffffffffffffda RBX: 00007f077b665fa0 RCX: 00007f077b3dde59 [ 361.891918][T16834] RDX: 000000000000001c RSI: 0000200000000800 RDI: 000000000000001c [ 361.891949][T16834] RBP: 00007f0779e37090 R08: 0000000000000000 R09: 0000000000000000 [ 361.891971][T16834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.891985][T16834] R13: 00007f077b666038 R14: 00007f077b665fa0 R15: 00007ffe77af3a78 [ 361.892009][T16834] [ 361.902036][T16800] syz.7.2094 (16800) used greatest stack depth: 8320 bytes left [ 361.922528][T16834] page_pool_create_percpu() gave up with errno -12 [ 362.140017][T16932] gretap0: entered promiscuous mode [ 362.160020][T16934] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 362.161054][ T28] audit: type=1400 audit(1783178741.729:8998): avc: denied { firmware_load } for pid=16929 comm="syz.4.2098" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 362.178164][T16939] bond3: entered allmulticast mode [ 362.199959][T16934] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 362.202947][T16939] 8021q: adding VLAN 0 to HW filter on device bond3 [ 362.238638][ T361] bond1: (slave macvlan3): failed to get link speed/duplex [ 362.279566][T16984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2103'. [ 362.305239][T16989] loop0: detected capacity change from 0 to 1024 [ 362.312458][T16989] EXT4-fs: Ignoring removed bh option [ 362.320018][T16989] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 362.392432][T16995] loop3: detected capacity change from 0 to 1024 [ 362.491860][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 362.503823][T16989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.525704][ T28] audit: type=1400 audit(1783178742.106:8999): avc: denied { write } for pid=16987 comm="syz.0.2105" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.631354][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 362.664088][T17022] bond1: option mode: unable to set because the bond device has slaves [ 362.730169][ T361] bond1: (slave macvlan3): failed to get link speed/duplex [ 362.746257][T17023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17023 comm=syz.3.2111 [ 362.773925][T17023] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2111'. [ 362.793081][T17023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2111'. [ 362.866872][ T361] bond1: (slave macvlan3): failed to get link speed/duplex [ 362.922425][T17023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.931275][ T361] ================================================================== [ 362.939357][ T361] BUG: KCSAN: data-race in alloc_pid / copy_process [ 362.945941][ T361] [ 362.948247][ T361] read-write to 0xffffffff86c5c268 of 4 bytes by task 4920 on cpu 0: [ 362.956294][ T361] alloc_pid+0x6bb/0x930 [ 362.960532][ T361] copy_process+0x11aa/0x2310 [ 362.965197][ T361] kernel_clone+0x1c0/0x5f0 [ 362.969684][ T361] user_mode_thread+0x9c/0xd0 [ 362.974351][ T361] call_usermodehelper_exec_work+0x41/0x160 [ 362.980236][ T361] process_scheduled_works+0x4d4/0x9a0 [ 362.985684][ T361] worker_thread+0x569/0x750 [ 362.990262][ T361] kthread+0x221/0x270 [ 362.994313][ T361] ret_from_fork+0x146/0x330 [ 362.998927][ T361] ret_from_fork_asm+0x1a/0x30 [ 363.003682][ T361] [ 363.005989][ T361] read to 0xffffffff86c5c268 of 4 bytes by task 361 on cpu 1: [ 363.013425][ T361] copy_process+0x1aae/0x2310 [ 363.018088][ T361] kernel_clone+0x1c0/0x5f0 [ 363.022576][ T361] user_mode_thread+0x9c/0xd0 [ 363.027237][ T361] call_usermodehelper_exec_work+0x41/0x160 [ 363.033121][ T361] process_scheduled_works+0x4d4/0x9a0 [ 363.038569][ T361] worker_thread+0x569/0x750 [ 363.043151][ T361] kthread+0x221/0x270 [ 363.047201][ T361] ret_from_fork+0x146/0x330 [ 363.051783][ T361] ret_from_fork_asm+0x1a/0x30 [ 363.056533][ T361] [ 363.058834][ T361] value changed: 0x8000014b -> 0x8000014c [ 363.064529][ T361] [ 363.066836][ T361] Reported by Kernel Concurrency Sanitizer on: [ 363.072970][ T361] CPU: 1 UID: 0 PID: 361 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 363.083892][ T361] Tainted: [W]=WARN [ 363.087675][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 363.097717][ T361] Workqueue: events_unbound call_usermodehelper_exec_work [ 363.104824][ T361] ================================================================== [ 363.134220][T17023] team0: Failed to send port change of device bond1 via netlink (err -105) [ 363.142917][T17023] team0: Failed to send options change via netlink (err -105) [ 363.152453][T17023] team0: Port device bond1 added [ 363.180121][T10212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.349637][ T30] net_ratelimit: 1 callbacks suppressed [ 363.349654][ T30] bond1: (slave macvlan3): failed to get link speed/duplex [ 363.463573][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 363.568349][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 363.673682][ T30] bond1: (slave macvlan3): failed to get link speed/duplex [ 363.777606][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 363.883014][ T30] bond1: (slave macvlan3): failed to get link speed/duplex [ 363.987149][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 364.092544][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 364.206191][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 364.311522][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 367.873319][ T23] page_pool_release_retry() stalled pool shutdown: id 113, 1 inflight 60 sec [ 368.168451][ T4920] net_ratelimit: 35 callbacks suppressed [ 368.168464][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 368.282701][ T361] bond1: (slave macvlan3): failed to get link speed/duplex [ 368.387480][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 368.492296][ T361] bond1: (slave macvlan3): failed to get link speed/duplex [ 368.597060][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 368.711314][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 368.825599][ T4950] bond1: (slave macvlan3): failed to get link speed/duplex [ 368.930367][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 369.044680][ T4920] bond1: (slave macvlan3): failed to get link speed/duplex [ 369.159236][ T361] bond1: (slave macvlan3): failed to get link speed/duplex