last executing test programs: 5m35.808030443s ago: executing program 32 (id=242): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x27, 0x80805, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x165) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x4}, {0x60, 0x8}, {0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x10000000}]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6], 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYBLOB="4000000000000000000000e87e0000", @ANYRES32, @ANYBLOB='\x00'/28], 0x1) 4m48.691526837s ago: executing program 5 (id=600): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) syz_io_uring_setup(0x56a7, &(0x7f0000000100)={0x0, 0x95b9, 0x80, 0x0, 0x118, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x373}) r2 = msgget$private(0x0, 0x193) close_range(r1, 0xffffffffffffffff, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)=0x1) stat(0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2) r3 = io_uring_setup(0x295f, &(0x7f0000000000)={0x0, 0x10f, 0x4, 0x0, 0x351}) r4 = io_uring_setup(0x38a5, &(0x7f0000000080)={0x0, 0x72f0, 0x8000, 0x1, 0x2b8, 0x0, r3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000009, 0xa0010, r4, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 4m45.530818845s ago: executing program 5 (id=627): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8010) 4m44.884109843s ago: executing program 5 (id=634): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf250000", @ANYRES32=0x0, @ANYBLOB="14140000216b000030001280"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m44.843726789s ago: executing program 5 (id=635): r0 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=0x0000000000000007,check=relaxed,unhide,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',unhide,,'], 0x1, 0x562, &(0x7f0000000140)="$eJzs3d9u0+YbwPHH/fOjCr+xaUwIVQVeyiYVqQQngaCII895kxocO7Id1B6hiqaoIoWJMmnt0ThBm7RdBKc72w3sEnYnaHcwJttJm7b5Q0ubdOz7icCu/fh9n9eN/MhNbAsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDDLptmzhDX8RrLqj+7HPi1Aes77d3cNxnQr4gR/5OZGbmcLrr81d7qS/F/8zKX/jQnM/FkRnbOX/ri/sWpic72AxIaia3tnWerrVbz5VE2mjy9fEatqj0n9J2aVdXKCX1VKhbN20uVUFUcV4crYaRryg60FfmBWrBvqlypVFA6u+I3vGrZcnVn4b1bedMsqgfZuraC0PduP8iG9pLjuo5XTWLi1XHMvfiN+NCJVKStmlLrG61mQSl1flCScVBu2EjioPywoLyZz+dy+XyueLd0955pTh1aYB4g7Yj3RvpONqfG/6bFeJ3k4Rv4KBPt+i+uOOJJQ5ZF9XzZUpZAfKn1Wd/Wqf/f3Na7ffyvR7/d9b9T5S/vrZ6VpP5fTX+62q/+98lldK8t2ZYdeSar0pKWNOXl2DMa7asqWjxxJBRfHKmJlSxR7SVKSlKUopjyWJakIqEoqYgjrmgJZUVCiUQn7yhbAtFiSSS+BKJkQWy5KUpyUpKSFESJlqysiC8N8aQqZbGSVtZlI9nvhZ7Z7UqDcgMGsttSfkDQUer/ubjam4c3of7/153wERw4vved+t/f9OiyAQAAAAAAp8FI/vpuJKf5V5K5iuNqc9xpAQAAAACAE5R88j8XT5KP+a+Iwfk/AAAAAACfGiO5xs4QkYxcS+c6V0LxRwAAAAAAAD4Ryef/V+NJJp67Jgbn/wAAAAAAfGp+GnqP/bB+zvjjLwmCaeN1fflrY9OK46zNyXS7yYMtRpVZ40LSyN+/p0um2k3aes5o3/1y9yaY79qT9X55/D9ZahjGMRK4mPZc7CQgv8j1NOb6Wjpd66xJR5upOK7O2r57PyeWdWEi0svR9883fpBk+D97tQuGrG+0mtknL1prSS6v41Zeb7ZvoHjoPooDcnmV3G8hueai556fTi7ESPs1fkz7NbvHP5FuPnGEPt/IfBozn0mnmf3jn4n7zGX7jT6TZpE7MPKed48cmMWNNObGwo100iOLfN8s4u42Ws18dxbH2hcfkEVh2L4odLKY3uv+KFkAwLisD6lCxuHCf4yjXN/q3unlRKr7G1lIYxZmkwPr1GyPI7o57IhufmRd/2364DOQ+tXYuN9fD1TVt/EGb/v2G7p5I96Fk682v5NLW9s7tzY2V582nzaf5/OFonnHNO/mZToZRntC7QEA9DD8GTtDI4w7Q86qv9z9SkFWnsgLacmaLCZXGyTfOOhutfp5u9VM19cQFoecte7F5mRxyFldputBLx8eWxjBbwIAgNGZ712Hj1T/F4ecd++v5YPPjrtrOQAAOB06eHe/PVt/nCuVcla0pFXg2w9V4JSrWjlepAN7yfKqWtUDP/Jt341nHjllHaqwUa/7QaQqfqDqfugsJ09+V+1Hv4e6ZnmRY4d1V1uhVrbvRZYdqbIT2qre+NZ1wiUdxBt3njFoW5Hjeyr0G4Gts0qFWncFOmXtRU7FiWc9VQ+cmhWsqEe+26hpVdahHTj1yE8a3O3L8Sp+ULMi5zPJjnE/AwBwlmxt7zxbbbWaL09xZtxjBAAA+1GlAQAAAAAAAAAAAAAAAAAAAAA4+0Zx/d/4Z/5MnyIgZyWff+HMzIcGd27lcAZyXm1NiMhp9yUz4xypcVotj/OoBGAU/gkAAP//bdFFag==") setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f0000000300)={[{@nombcache}, {@nodioread_nolock}, {@delalloc}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x8}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@usrquota}, {@bh}]}, 0x21, 0x5c7, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000100)=0xc, 0x4) ptrace$getsig(0x4202, r1, 0x1, &(0x7f00000002c0)) r9 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) read$char_usb(r9, &(0x7f0000000180)=""/54, 0x36) 4m44.619347147s ago: executing program 5 (id=637): socket$kcm(0x11, 0x3, 0x0) (async) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000a18150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000a18150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080)=r2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836", 0x27}, {0x0}], 0x2}, 0x24000008) socket$can_bcm(0x1d, 0x2, 0x2) 4m43.433723104s ago: executing program 5 (id=642): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00', 0xff000000}, 0x18) 4m43.269122322s ago: executing program 33 (id=642): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00', 0xff000000}, 0x18) 4m23.74735759s ago: executing program 1 (id=761): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="ab1a", 0x2}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x6) write(r5, &(0x7f0000003300)="ac", 0x1) write(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x8, &(0x7f0000000100)=[{0x6, 0x80, 0x4, 0x7fff0000}, {0x5, 0x7, 0x80, 0xf10}, {0xffe2, 0x6, 0x4, 0x4}, {0x7, 0x2, 0xf9, 0x3a2d}, {0x2, 0x0, 0x40, 0xe03}, {0xffff, 0xf8, 0x51, 0x5}, {0x0, 0x0, 0x5e, 0x3}, {0x6, 0x5, 0x2, 0xdd}]}) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x82) unlinkat(r7, &(0x7f0000000140)='./file0\x00', 0x200) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0x8e) r10 = openat$cgroup_subtree(r9, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="7f708000ebeb"], 0x6) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r11, &(0x7f0000000000)=0x922, 0x12) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)={'pimreg\x00', 0x1000}) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) 4m23.587480887s ago: executing program 6 (id=765): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000380)={'syz_tun\x00', @ifru_addrs=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x4}}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xb, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x74, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xdd7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) ioctl$sock_netdev_private(r3, 0x89fb, &(0x7f0000000000)="12ccfd9b6da851f4c8419c7ca03e7cf18d9679ff2b2bee40ddcea3853df660e09035ca67deda4d7c683cecd0f09890d5ff746476") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x6, 0x5, 0x0, 0xa}, &(0x7f00000001c0)=0x10) 4m22.916326899s ago: executing program 1 (id=768): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100410003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m22.703504974s ago: executing program 6 (id=772): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) write$P9_RLERRORu(r0, &(0x7f0000000100)={0xd, 0x7, 0x2, {{}, 0xccae}}, 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) fchown(r1, r2, 0xee01) (async) fchmodat(r1, &(0x7f0000000300)='.\x00', 0xffffff51) (async) setuid(0xee01) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x428fb191040cdbe) 4m22.683659467s ago: executing program 6 (id=774): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) (fail_nth: 1) 4m22.179489151s ago: executing program 6 (id=777): timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0xf5, 0x3) 4m22.07283144s ago: executing program 6 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000840101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) 4m21.571993423s ago: executing program 6 (id=779): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x9, &(0x7f0000000180)=[{0x7ff, 0x9, 0x4, 0x7}, {0xfff3, 0x3f, 0xa2, 0x80000001}, {0x0, 0x7, 0x5c, 0x42}, {0x8, 0xfb, 0xf8, 0x1e180}, {0x3, 0xc, 0x4, 0x6}, {0xf7, 0x3, 0x8, 0x4e}, {0x2, 0x5, 0x1, 0x2}, {0x9, 0x5a, 0x5, 0x7}, {0xa, 0xf8, 0x9, 0x5}]}) (async) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), 0x0, 0x0) (async) syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) 4m21.488855627s ago: executing program 34 (id=779): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x9, &(0x7f0000000180)=[{0x7ff, 0x9, 0x4, 0x7}, {0xfff3, 0x3f, 0xa2, 0x80000001}, {0x0, 0x7, 0x5c, 0x42}, {0x8, 0xfb, 0xf8, 0x1e180}, {0x3, 0xc, 0x4, 0x6}, {0xf7, 0x3, 0x8, 0x4e}, {0x2, 0x5, 0x1, 0x2}, {0x9, 0x5a, 0x5, 0x7}, {0xa, 0xf8, 0x9, 0x5}]}) (async) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), 0x0, 0x0) (async) syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) 4m20.979327342s ago: executing program 1 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x27) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0xf82, &(0x7f0000000200)={0x0, 0x80000002, 0x400, 0x3, 0x380}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x1a, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYRES8=r5, @ANYRES16=r10, @ANYRES32=r4], 0x44}}, 0x2000800) r11 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r2, r11, 0x0, 0x8000fffffffe) 4m20.002947325s ago: executing program 1 (id=792): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvmmsg(r0, &(0x7f0000007200)=[{{&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/168, 0xa8}], 0x1, &(0x7f00000004c0)=""/22, 0x16}, 0x100}, {{&(0x7f0000000500)=@can, 0x80, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/129, 0x81}], 0x2, &(0x7f0000002280)=""/92, 0x5c}, 0x7}, {{&(0x7f0000002300)=@generic, 0x80, &(0x7f0000003640)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/239, 0xef}, {&(0x7f0000003480)=""/164, 0xa4}, {&(0x7f0000003540)=""/243, 0xf3}], 0x4}, 0x8}, {{&(0x7f0000003680)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000004740)=[{&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/56, 0x38}], 0x2, &(0x7f0000004780)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f0000006b00)=[{&(0x7f0000005780)=""/9, 0x9}, {&(0x7f00000057c0)=""/14, 0xe}, {&(0x7f0000005800)=""/171, 0xab}, {&(0x7f00000058c0)=""/68, 0x44}, {&(0x7f0000005940)=""/27, 0x1b}, {&(0x7f0000005980)=""/90, 0x5a}, {&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/216, 0xd8}], 0x8, &(0x7f0000006b80)=""/22, 0x16}, 0x800}, {{&(0x7f0000006bc0)=@caif=@dgm, 0x80, &(0x7f0000007080)=[{&(0x7f0000006c40)=""/30, 0x1e}, {&(0x7f0000006c80)=""/231, 0xe7}, {&(0x7f0000006d80)=""/157, 0x9d}, {&(0x7f0000006e40)=""/77, 0x4d}, {&(0x7f0000006ec0)=""/190, 0xbe}, {&(0x7f0000006f80)=""/212, 0xd4}], 0x6, &(0x7f0000007100)=""/220, 0xdc}, 0x5}], 0x6, 0x41, &(0x7f0000007380)={0x0, 0x3938700}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0/../file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000000000000000711207000000000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) 4m19.909637071s ago: executing program 1 (id=793): quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x82d7) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9a}, 'vcan0\x00'}}, 0x1e) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000200)='=U\\', 0x3}], 0x2, &(0x7f0000000280)=ANY=[], 0xc8}, 0x0) 4m19.536161843s ago: executing program 1 (id=795): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000100), 0x1, &(0x7f0000000300)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0xa) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0x0, 0x3) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, 0x0}}], 0x1, 0x5c) sendmmsg(0xffffffffffffffff, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="170a1d", 0x3}], 0x1}}], 0x1, 0x24008004) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffe, 0x10}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000001380)="a8a4", 0x2}], 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r3, 0x5409, 0x400) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000007110b2000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 4m19.235291403s ago: executing program 35 (id=795): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000100), 0x1, &(0x7f0000000300)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0xa) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0x0, 0x3) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, 0x0}}], 0x1, 0x5c) sendmmsg(0xffffffffffffffff, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="170a1d", 0x3}], 0x1}}], 0x1, 0x24008004) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffe, 0x10}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000001380)="a8a4", 0x2}], 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r3, 0x5409, 0x400) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000007110b2000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 2m44.774121139s ago: executing program 7 (id=1908): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000057a60f000000000000da71bf5ae726fd9d4df83913e1525c0457ac6a5a8a61236c527f2181a8486ca1002f777146c9ec861028ff5c92c6b45a963abd387b38ae"], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'bind'}}}]}) r1 = syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000003880)=ANY=[@ANYBLOB="20000000000000000b01000000000004"], 0x1b0}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x1, 0x135a, 0x0, 0x0, 0x0) 2m44.091892033s ago: executing program 7 (id=1912): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2m43.395425249s ago: executing program 7 (id=1919): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x0, r2}, 0x10) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 2m43.279877528s ago: executing program 7 (id=1923): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[], 0x0, 0x30e, &(0x7f0000000f00)="$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") r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x31, &(0x7f0000000180)={0x9, 0x7f, 0x8}) r2 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f00000000c0), 0x0, 0x0, 0x2) fgetxattr(r2, &(0x7f0000000140)=@known='trusted.overlay.upper\x00', 0x0, 0xffffffffffffff85) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 2m43.15284112s ago: executing program 7 (id=1926): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91104b000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r4, 0xfffefffe) listen(r4, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711816000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xedf}, 0x50) 2m42.989647327s ago: executing program 7 (id=1929): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) recvfrom$inet6(r0, &(0x7f00000002c0)=""/79, 0x4f, 0x30060, 0x0, 0x0) 2m42.91166286s ago: executing program 36 (id=1929): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) recvfrom$inet6(r0, &(0x7f00000002c0)=""/79, 0x4f, 0x30060, 0x0, 0x0) 11.603524654s ago: executing program 9 (id=3330): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000030000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 11.593896375s ago: executing program 9 (id=3331): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2a1}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0xc}, {0xffff, 0x4}, {0xc, 0x4}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "0000080000020008000000000800"}}}]}, 0x48}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) 11.537277465s ago: executing program 9 (id=3332): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$netlink(0x10, 0x3, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x44}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000300)=@raw=[@alu={0x7, 0x1, 0x8, 0x4, 0x5, 0x80, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000380)='GPL\x00', 0x10, 0xdb, &(0x7f0000000440)=""/219, 0x40f00, 0x38, '\x00', r2, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2aa7c, 0xffffffffffffffff, 0x6, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x2, 0x2, 0xb, 0xb}, {0x4, 0x3, 0x1, 0xb}, {0x3, 0x2, 0xd, 0x8}, {0x4, 0x3, 0xe, 0x1}, {0x2, 0x2, 0xb, 0x5}, {0x2, 0x5, 0x10, 0x5}], 0x10, 0xbb}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) write$cgroup_devices(r7, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={r5, r6, 0x4, r7}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44080, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 11.431581542s ago: executing program 9 (id=3335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x454, &(0x7f0000000400)="$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") r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r1, &(0x7f0000000080)='$', 0x1, 0x4000, 0x0, 0x0, r3}]) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x48, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 10.482982151s ago: executing program 9 (id=3344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000088000000050a0102000000000000000001002000"], 0x124}, 0x1, 0x0, 0x0, 0xd4}, 0x800) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1004210}, 0xc, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000a0a01040000000000000000050000080900010073797a31000000000800f540000000029cfd0c400010080934001180000001006374000000000280000003000100000000000440000000080000014000000016000004400000000300000440000000120000024000000007"], 0x64}, 0x1, 0x0, 0x0, 0xc04c841}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) rename(0x0, &(0x7f00000001c0)='./file1\x00') uname(&(0x7f0000000040)=""/114) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = semget$private(0x0, 0x2, 0x480) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$SEM_STAT_ANY(r4, 0x2, 0x14, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = epoll_create1(0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)={0x7000000e}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) preadv(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f00000000c0)=""/79, 0x4f}], 0x2, 0xe, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) 10.441467838s ago: executing program 9 (id=3345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r2, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x4f, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x804c011}, 0x4000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x7) listen(0xffffffffffffffff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) recvmsg(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) 10.381896947s ago: executing program 37 (id=3345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r2, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x4f, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x804c011}, 0x4000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x7) listen(0xffffffffffffffff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) recvmsg(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) 10.319138278s ago: executing program 2 (id=3349): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394", 0xf}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) pwritev2(r1, 0x0, 0x0, 0x9c00, 0x0, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2000, @fd=r0, 0xfffffffffffff217, 0x0, 0x0, 0xe, 0x1, {0x3}}) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000ffff00000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 10.259483638s ago: executing program 2 (id=3350): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40503, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1, @perf_config_ext={0x10000, 0x3}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000480)=@ethtool_channels={0x3d, 0x0, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x600}}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf6e, 0x3, &(0x7f00000001c0)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x680, 0xc8, 0x0, 0x0, 0x0, 0xfffffff7, 0x10, 0x0, 0x0, 0x0, 0x9000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x6c000000}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10040) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x400c010) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9033}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x6a}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 10.152570196s ago: executing program 2 (id=3351): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0xc}, {0xffff, 0x4}, {0xc, 0x4}}}, 0x24}}, 0x0) r0 = syz_open_dev$evdev(0x0, 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) 9.359294778s ago: executing program 2 (id=3359): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xd, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_LINK_SELECT(r8, 0x116, 0x7f, &(0x7f0000000040)=0x8, 0x4) connect$caif(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000c001000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x158) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000002c0), 0x3, 0x566, &(0x7f00000015c0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 3.959048759s ago: executing program 0 (id=3378): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000080)={0x2, 0x5e21, @multicast2}, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x10, 0x89, 0xffffffff}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (fail_nth: 1) 3.772214391s ago: executing program 0 (id=3380): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x5, 0xffffffffffffffff, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r2, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setpriority(0x0, 0x0, 0x8) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0x2}, {0x4, 0xe}}}, 0x24}}, 0x0) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) close(r8) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r11, r3, 0x0, 0x558410e9) 3.041158562s ago: executing program 3 (id=3385): socket$vsock_stream(0x28, 0x1, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10102}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x8}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.854030634s ago: executing program 3 (id=3386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4040) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001000)=ANY=[@ANYBLOB="b8020000130a0103"], 0x2b8}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) r1 = socket(0x200000000000011, 0x2, 0x3c644) socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000003}, [@ldst={0x1, 0x3, 0x3, 0x9, 0xa, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0xb7, &(0x7f0000000080)=""/183}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000007c0500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r3, 0x0, 0x1ba8847c99}, 0x38) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000080)="92add32b7f3be4fe20fadb790e1a8307b2c96a4f47c4ed6c70b18daa8290513cf18f58247ef9c2104a4907599b2d4eb26e95c803c076830d3896bd194d6bbb013ff2b4181d4487cb913cc43d70ffd690479a7e2a7cdc1e92dfd5b40ed7d518ccfeca7ef4eb2178de2d79cfba738ee3cd6eae95cf097281464d33f0b9fb0ede19d2", 0x81}, {&(0x7f0000000140)="d5bf2ca0319fc71b426d1e7665da6eb5af06cdffbee93eca3b6f5eea5a4fed7b2d6d94cacb6a426e8310ba489c6474ce309c559dca83a7c667414e", 0x3b}, {&(0x7f0000000180)="9b38dcdafce09422eb30c9619a0bf0f651e60d38f083c664dcf3cf22d69c55e8c4a44d65e5aa9de7ea2555fb1cc16beb8457147863", 0x35}, {&(0x7f0000000300)="0eb330d675fe08f074144d23eb0c84780f52b490b509af4992765439556dc66b263e61f984db0f6eae481bf590cf8b2d5c46f35bde45fb6db6dc4504496beeb5d000170929a3a5d4e534ae487edf2ddf973db449d8bfb5a99b5f00da9d671c2c40c52ed749ecff04c58f4646997358d7138b270648384fe9eb9e806c9890fb2f6acfdc35b71eefae16b23766c1936ada5ec0fe531e90be690bf166eb898a73c92ef670174f21a0049f6befb79faac4d7f12a87906b957ff1c4d564d6d215de6d0d010842e890e810e6cb7d17d55f2f4357cd901203a01098e58cce2dcc790e19de3ce98099d8a1a136b47e2d576f84de0bbcd8c149414d65102b14b6553b2110dc0279254bc5741db26fd50335114336c861422adce6e914628d8ed6c9a053edacb20f9e7395cbd4d7091928814d0f6959116e41dc05d2d4582fbd0f76c25d5ebc7eaebd99ac33567f5e8b4df8918d8a1cafcec17217e1a2e2efed91a7045c90690a3880cb6a6c88d51b9be4d8be62f7a54fe0b2dffcb669540d5433b20924e682961c78423ac8a80d6a98427de3d9028906fc2ae825b3b8b2d729bb73f92928f3ab2cb9555d8373812935edb71ac637079ff546a796bc1f2e1c480d497f7f79e6c800a05c6960fde6aff6dcb5008eae278190ec10573f7ddff03dfe5d22921ffd52db6e2cd5d4c3d4bb4cfbcefe18d63420a907f6feb21057e6bb4b2c1658c2a8472c37aba4913ae03e99a88121a5637f6013336ee82ae8ece20b2ba1ff94ebfc2fa2908b9b1b844d3f688ab65ec33f1e7614a9aa648b1dbbe54209ab47b2ec5d293444de32ed9679a595a3ba13a947831279cb7e0497b7ae94d6efaa961d9b3e4d8543c07a0856b72f12d99d2b7d6ce31e9aee897bb4ffff2954f1519f2989350748658dee6a64b26f02e4023e36802d75f1fabe3da87e84526fe2ad6b98aa03a00f26ce8dfa98ed601fa89ba1d9c065a7f504790a071ed38103d355d34607fd35763e33a69b82af7462e181a25693040dce49d8ac524b9c661c8f6db12ff97d04b7470a000655301757fe91c7fcf1e0fba6fafeea3edfb43aa6d58541c746cca538f9299702527b469d5bf5f0ed4aed30d798cd2b96551045156bbe608eb36588a3fbc456f811b36af9e18bd143ecb88d41a5319b3401111c6d3403c577a17b07f7ae814c05c2d1391299782f25bda835eb7e862b97fec28d5cebdfdb248649fc37c591f322492784970b00edcce5fc8077612aaa8e6be34505dc79f119291ef2bd0d83554f8c091852d63e6009839ba348256a5fc3c394707f78a7609df2ffdb338aa7f19427dd10a068743bf6b55ad162813db02fdc87daf1c6adf83242ca9d27c16fe593dc396e65dc91b8caec56dde7553ae910ef8f04a815eaa689d92920861183a05460b634a9997246b4b8ff7a2e9f6dbeb8b82c5ad3caf8baefef9d0cb4fb58825dc008ea285ef04b79cee5c2ecdf8fe6b7306ec454e7da756ad412edd033022d287c040722ca6b4d0eb634f575b45303d4d801f16856031ef1403f94fc6e7b055f08bc5d173c321c9cacc2250fedac345c5da88d853fb0d1f2ce04d56c97221766783d5c36de0c843fa4e65d2fa5adbbdb0f2b33b0390b95d9c9159e1003fd462edcaa4bd0bc3b3c3038a0339c67710f720b714c22fd1df04d66accfe8265758f63c692a13398c50a7200579a7b18e3ea943bbb4ff4aff91d63402e01523fb4606e70c9ab38ff22a641561658bb13c23e592068e5fb77cba4200f39f427544a54ec35f91e9ab542127b64f1a1a444f2c1fd9b2251657050bf1b7590ea0fd2c6757a5184c026f6cd17b559792112d065fa031420cbd7e31375377045b001f862a6866a5d0a5d58931086ee1e137a9e05478c4e221968f7b9b468cbaeb3d7fb4595905f059effa1eff0fd13ce58ffa58bae4144263329c7ef9626951fa1e3985af86d8a345e87b309e1bdfffdc6d39c2b86d76bd52c8f43e9b38a52d8a58f3fca6cc8f7925143b0a4e8191565744419f314740f8187fd481b2deac4097e11db377d1444583e69b2d43aef59c974d6f52ee57b9cac515f214b1d6f11c3c3f39a5b188d0c753bf0038cb77d2b47a423fcd8ab1e92d11772d800c5383081e730f068cafeeab58649e18853edda33cc4add50768e233de0a900bf114269282a4c236e353fcea538e8a92fbc04b89bc90dead5c44df800a12af689f1446f3bf548013993cda9fa8e94e37fc23a954ecb13b09971af76a4ee6907c120a328e67f2bb4a34b42ff98cba09d630544607e98aaa3e6d128660c424e7b40defaddef0e1e87db67bedfe6bc223e8f7c8482b3dd9ae1f3ce0f49df72cc2f09a722ecdd0106f67ea34727de01c33414d516c9ba23eacf7d17fce80e17b1859fb8fc12652c5bf46fe39049d0f54b2f01e5fa0d250848e5210d47ad1cac3966c2012b3cb092e6f86b966941501a422775456bc4e4ce1ecf480c0b404778ccb9511958d71c57d3f85fc675b34fdceb26ab144f3b7a485e41f7897203ace56828f65eceaad8c631b05cc44d10c471896e0b31119a039343300e0260eb0ea9e8d1c6830c32c9fe08c24b4435179339904dacdb475ab7f7090a4f82c4269ff5f660979fc16499761f5e0585a798954f93ab2a3c8594ca9ac41e7690e67540fe3c014c7e7ad55a7e6b71295122bd2633490b930638740ef1ee7481ee7bdfabbeaf35a3b6ecca42b5d60d988a386c543cdb6f4f908530f0479f0c4dfae1793147098cf88d90c58d822f20650d76f2870dc991869cccba7b54d1e7a2b127c68d0acd2ac5387b09af1890a3ed8e978bfb945f3348800118f3843f028f43024e6def6e2bdaff98347a740de92c11039d918b3961917a3ebe4b5061c71cd3c5f73b4d24f65485e858b99c2395cf0bddda4206984c63e5b8882fafbb50a5c850e97223a2c48b6a52d55df72d9e589b1ee6170ead658933be43d6edfae17d59d7062f1611a102d51bd931e8e771c53e7d89bce9d77eb4757a0520d4436fd483a8e5893e4052bc6c95adcf16be3253a66f8bbe39a75bbd513716ae586941357749335e4139c2fcd7656469470318184f98765e40921f07de5c3b8556767f7f4800ed4abd349c8fe2b97bb02c0c324790fa7a34e1d46c823cee0f5e382605f18d637344c5890a70716abbc889ecad5f51910e72af395c9749bb2ee74a0a9461ecc8670ec7c368da6b6cde1a0a8aadb5d66ad04031238300f1c9426855437b01290911b54300d91a9d8ca3eaa754d1baad2da6fc866c26ec4e930d50f27144a316a8ea867b7d6a4d9f12692b16a826f70f09b103c44b2809e73f47a37cc675aa53db566ee3b7fe8ee20acaabbae64aa7e31d26e30a3cbcb552108611903adf0b47422a6f1512dddd832042cb5294a02411a47d5702ac4b93ddf6a9410256cc34c4917e25970b7ddeb983f104a71ab4857a8eec7cfe9ed69e44222d5b724142aadc76287c44a139aec942e5b194b47bf526e0962cee685ed915878406744a72d33e164b7870e320eb0d12388dc9a95f67244a99b68dc11c10a8f579bda70e6e8bdb313cbd11e4dd038403fde4bd57931e9a492c93ea2713096f9c6d25b906c8a8a75fac2749ce1c0091c756c49775a888781b801f7ee48765e747f7f8cc9f0792d273aaa1c9a1216f57583225e1a65ec33a92a48ed5aeb5fa4eb815fd5a293769f94d679061f02627922ba9bba165f296ade16ce198455968bda0562b1d71f32e7dda586408008142adaaca12353609ead9218431076176b3861b4ff286b33a68850b269109d737b5e6b354a06ea0af5753aab88cc2fc94b18d0d5aeeff88881e6c80bdf28eafa1bbaa1d640642f416812856231253c365bf18de63ca0504990fae0c69d46d3124cb7ec356aac4b69e2932b9c4752fcca0722213b090f71aeec6a057a8dae040cde3761d5eb0c0cf26ae24518f7d5f30ecbb6fcf99545b2cd6eb2f7793d9d876b6f5b2db5c9921eb5e699321848dfbb65048fea1158efaad7735fbfb604598896508d0a31081d579ee6923e0f649eb16487b1a763f8c2086084b9ba1917c524e8911672cc21077f7df0dd4c99da8b3e4f127e0e493feff1c671b9fbfa6bff2616ff6e5518b0d8fff3ca04c24d6dec03eeccfd5bb0bcc9389d91093b3a7ffae61af15c5ff3656aaadaa3962360eeaec21d12ee52e56d166e44b0332aa099c44c18b76bc57b905c54a306b2b8363c83f4b6503dc303f044121ff6dc352c548252190e8df6ba9c65ea528aab42b636c80b8c4f2c2180468f190eb62bab0df5b709dab59f6232867ababa069559cc49779c6ef12159368d1021379f3144ccdd41e98efb5fe45712e08d721fdcbc5a47242375fdc8d46e1d0e3a4ce8c7fde99f5611c915d6b273eef384a049b7085a1ee16b49a1dfe4a50b7804405b99a60ae182ec819dc8f186aecd3c3a4a294c8457ba36547e8bdd4428b274090765d70f0e766dfe582ef47a92b74a794df372fdf159489d7573eed5a579c87820f13e6c6908ff19e441817d0fd62f24d13a338427dae546bfdcdebec807fd2179386d9d660db0249734a9ee9f837597af8f49f9b91d1ae3a49171282c687c868be4583e77bd8b08e02bea642643a4b0cc88f5793cca9abd527042f5e2079990dadb5dabc6d33b86ebba616b87309a0f84f0d734da258054f3867510217e033ba0cea139f53471b82993f89a9abc528949259476f11a78447f884521f7622a1d6c00a259a01b36702ce9fe3e1b68781ce01363443c9c2019ec3711bb8260a1710b4f31950923ee498002b5d0b1186b6e22a0b19ee0d491b73799c186cc619aaaec42a38921df26a6b0ac40a6d747675aa2397e1feec9db728d43404c693d8fbdd80da9775679ef992b7fa4f6f3fc17ae0b5f01a30b1a6c87cb8ca5793f1737b3de8b544b494cc2775c31a9ffc64885edfec6d14729a55cc2a3a57ee9dd914ae651ab89b4f9e0341952faaa21002b5b468b4d32c62b7bac58063bdba62e5fe136b908c2757323e58b1ab163a85f8de13c27fe3c4b5989f14e753da0cf82f5754a42ae9070f8273e37c0b801066d76220aee5805ddbce9eac2f5ec96e8dfaddb48667f52e8f9433486d27643e286e2b5b4c8aeb7d922aba8859c4d6a44ce34772e488b2159fb4676d6b84e6997363d1aa807651c7b0da691df6bda3842e0d24f0ba0676d8ee0c9628c171cf0d36759d3ba86a89ceaae4554236e841a5db4129350219f231e760093f14840b62e3feeddd974e068c759c2c290790f24b06ff73c7247b169e226f79c0a4fbc1253477b5181dd2a10ab057fa041023976d1b23a518c53d5d5dfbe96a3b5f0972011a0280a97d9c4a87a0e417da98d40cf4f9ac9a37c38c9ba9ccf2b94909a87b8ea7d5d83b271ed8cea4f596aa468f86f2cb05dae5b75949ba2590aae89821f2b3f52f88d25da8ba84a8e120ae2c932e02e6fe9fcaeef47977d9a48f2caeddf51bd2c845da8d15cf88fb3940186f6156b26e920728f90265a7dad5e329340feb9f1746843fb1e1fbffc7f7c9b695d2e5f8b163a78ba76a89e11af7f5eba736375d3ff325c993134dd5ea9580ee2155d3de836917740ba28023d06e4b5800c6cc336c62c2e736485e45fba97197f2959fc388ee160e828a57672eb470b43932ee0d6c8da665e13f94f49b6b7aed4a31042deb4e2253dc480b4328a2b2550ed43e04d181a95f3c6d1f5c4a99a0831f830e48a4e30e5e3a5833bfff3fedaa8283136c34bb178aedc396dc5b73bb2601c3f01f801b411623ec538d63612d1c6d511f735", 0x1000}, {&(0x7f0000001300)="ac2147dcc547b6cc512f000809d09ddeded06340a12ac22b5cdc7353e159ca3088fb220ec2f847a0f806c8857f1c0dba17b194d16cb2981f1b385abdcbb3cb5c9a8ecc72b4079eaca8d0", 0x4a}, {&(0x7f0000001380)="e7eab386aaae8fb823bdb45c225f34cd01394567137c855bfb994153a7094c5580da7bc318831dd6a2dddee158593fc4caeb463fee710124e8ae6951", 0x3c}, {&(0x7f00000013c0)="916a3d5a77ff86dfe0a6306ed2ce92f13375a889674d452084187d27771ecc71c0a817e507c580882f131944c6f194e4a938889dabe5606b6277df4e94d507a19560ab6ab793e9f06cc43c8b5072ae5f23782b0959c40d4b95c1b68f53b84de2a6bb8824c060451b93bd5346021c2f9349735336ef8d4e703e55d753d3004be2aa70c5c29e82f7279b5beb6bbde95012a931db34b8a279dd4fe3a76bb89dacc2eeaafc476952", 0xa6}, {&(0x7f0000001480)="2b043e7f20c51c3d8813a8876d286126d22f2a6fcbbeb5282fc7fc20203474108d1252f91eca2e9f7d8e028da3b7fee735afaaf920a3ed642f33f8c778d9de834d1f1012d06aa364d5f6c47f28e43d7bd66649efaf831b42aa50876825f9ae387996bf825e5c419acb002d1e086eee63000fec57d00376389bda939f70f305b1163ca3df318722fb5a232e7d1b3bafc857d4e89d71462d5f5b01983e67c28e1fcf3c7849aa03ddbcb4aa6ee6ee05d91432ff3b7f36ddcdf922829823ab8022e7", 0xc0}], 0x8}, 0x40000) write$cgroup_int(r4, &(0x7f0000000040)=0xfe8e, 0x12) flock(0xffffffffffffffff, 0xc1e1f43b3548bff0) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, 0x0) 2.662278186s ago: executing program 0 (id=3387): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x40004) add_key(&(0x7f0000000c80)='user\x00', &(0x7f0000000cc0)={'syz', 0x1}, &(0x7f0000000d00)="b5a44d6f", 0x4, r2) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x10005) getsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) 2.385323812s ago: executing program 8 (id=3389): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x121001) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000000)="b6000000bb8c", 0x0, 0x0, 0x1c, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='mounts\x00') r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r5, 0x1, &(0x7f00000001c0)={0x0}) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x7, 0xd}, 0x0, 0x0, 0x78, 0x7, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r6, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, r6}) setpgid(r5, r6) readv(r4, &(0x7f0000001440), 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000080095000000000000000000000000000000000000d18646802d8e10294812d43c7e0a2cd35ba22940ed2b21747c8f48811ed4cb6b82b49d94efc3b23f37a75093f27e4992c6f9f398bb095c3139010cd0b18cfa752886119191954f3fc782a18f4b13d0dc23e523afbff8000d2d"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.384834122s ago: executing program 0 (id=3390): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x27, 0x80805, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x165) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x4}, {0x60, 0x8}, {0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x10000000}]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYBLOB="4000000000000000000000e87e0000", @ANYRES32, @ANYBLOB='\x00'/28], 0x1) 2.33605847s ago: executing program 3 (id=3391): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x27, 0x80805, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x165) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x4}, {0x60, 0x8}, {0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x10000000}]}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f00000000c0)=0x1) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYBLOB="4000000000000000000000e87e0000", @ANYRES32, @ANYBLOB='\x00'/28], 0x1) 2.300136666s ago: executing program 8 (id=3392): socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async, rerun: 32) open(0x0, 0x8000, 0x91) (rerun: 32) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x608c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7f, @empty, 0xa09b}, {0xa, 0x4ea5, 0x200009, @mcast1, 0x1}, 0xffffffffffffffff, 0x400}}, 0x48) (async, rerun: 32) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000000000000000000a6c000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000000800014000000008080003400000000108000240000000000900010073797a30000000000900020073797a32000000000500074098000000140000001100010000000000000000000a00000a"], 0x94}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}}, 0x20}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x50031, &(0x7f0000000000)={[], [{@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}]}, 0x1, 0x45c, &(0x7f00000004c0)="$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") (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async, rerun: 64) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2042, 0x0) (async, rerun: 32) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0) 2.15614574s ago: executing program 8 (id=3393): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 2.131946704s ago: executing program 8 (id=3394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd28, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, r2, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) 2.090663731s ago: executing program 8 (id=3395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000088000000050a0102000000000000000001002000"], 0x124}, 0x1, 0x0, 0x0, 0xd4}, 0x800) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1004210}, 0xc, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000a0a01040000000000000000050000080900010073797a31000000000800f540000000029cfd0c400010080934001180000001006374000000000280000003000100000000000440000000080000014000000016000004400000000300000440000000120000024000000007"], 0x64}, 0x1, 0x0, 0x0, 0xc04c841}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) rename(0x0, &(0x7f00000001c0)='./file1\x00') uname(&(0x7f0000000040)=""/114) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = semget$private(0x0, 0x2, 0x480) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$SEM_STAT_ANY(r4, 0x2, 0x14, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = epoll_create1(0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)={0x7000000e}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) preadv(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f00000000c0)=""/79, 0x4f}], 0x2, 0xe, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) 1.804476149s ago: executing program 8 (id=3397): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x80842, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x56d92c8a, 0x0, 0xfffffffffffffffc, 0x10000, 0x10}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001680)="6978a6e7", 0x4}], 0x1, &(0x7f00000017c0)=[{0x10, 0x119, 0x8001}, {0x10, 0x1, 0x2}], 0x20}, 0x4008880) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) dup3(r5, r2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="14020000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c0004800500030080ff000008000200010000000400088008000100ffffffff04000c8004000b801c000b80080009004caadf0908000a00ee65000008000a0060640000a8000c801c000b"], 0x214}, 0x1, 0x0, 0x0, 0x4000000}, 0x48084) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x14d, &(0x7f0000002240)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0xffffffffffffffff}, 0x94) 1.707302755s ago: executing program 4 (id=3398): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001080), 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f00000010c0)=0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendto$inet6(r1, &(0x7f0000002380)="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", 0x1000, 0x814, &(0x7f0000003380)={0xa, 0x4e20, 0x6, @private0, 0x400}, 0x1c) 1.61838988s ago: executing program 4 (id=3399): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xab, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102324, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0xffffffffffffffff, 0xfffffffffffffdff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x80c002, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x517, &(0x7f0000000140)="$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") r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x80084, 0x3, 0xe, 0x8e, "0060730000efa489040401000000000000f600"}) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) lchown(&(0x7f0000000ac0)='./file1\x00', 0x0, 0xffffffffffffffff) 1.523864136s ago: executing program 0 (id=3400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10008040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETFILTER(r1, 0x801054db, 0x0) clock_settime(0x0, &(0x7f00000001c0)={0x7f, 0x2f000000}) 1.392892068s ago: executing program 2 (id=3359): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xd, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_LINK_SELECT(r8, 0x116, 0x7f, &(0x7f0000000040)=0x8, 0x4) connect$caif(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000c001000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x158) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000002c0), 0x3, 0x566, &(0x7f00000015c0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 1.371673451s ago: executing program 3 (id=3401): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1.210258798s ago: executing program 3 (id=3402): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_emit_ethernet(0x47, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00111100fe8000000000000000000000000000bbfe80000000000000000000001e0000aa00004e22001190780300000070e185af"], 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x2721, &(0x7f0000009b40)=""/102390, &(0x7f0000000640)=0x18ff6) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a01040000000000000000000000300004802c0001800a00010071756575650000001c0002800600024099eb000006000140008500000600034000000000090002007301003200000000140000001100010000000000000000000100000a737d11ad79d1e7a564d08bf7cc3fc0fb7da47ea045944e936b06a7af48022186899fa8a00d2dc90edf4bf324417a1c7e3de5d4a1e6ff7f4bc255a20385157c9ab1d401b93e7411ba97a778940a0a8edd454919d1de884e232a4a21f106c08e4ba5233d938a92875ec2ee4656a8ad52ef5836cc8c2e67e2"], 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000080)={0x0, 0x5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7401000016000104fdfffffffeffffffe0000002000000000000000000000000fe80000000000000000000000000000f000400004e2000000000802000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000102000000033000000fc0100000000000000000000000000000400000000000000feffffffffffffff0500000000000000000000000000000003000000000000000000000000000000000000000000000002000000000000000400000000000000000000000000000000000000000000000200000000000000000000100000000003000000feffffff000000000000fdffffff05001900330000002c001300ffffffff000000000000000000000000e000000100000000000000000000000000000000020000004800010078786861736836342d67656e6572696300"/300], 0x174}}, 0x0) mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1.19910055s ago: executing program 4 (id=3403): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2005, 0x2, @perf_config_ext={0x2, 0x722}, 0x106200, 0x10004, 0x20da, 0x7, 0x7, 0x10020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x84, 0x30, 0x1, 0xe501, 0x600, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 767.558782ms ago: executing program 0 (id=3404): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8003}, 0x4000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) pwritev(r2, 0x0, 0x0, 0x0, 0x1ff) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) splice(r1, 0x0, r1, 0x0, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x3ded09ad073f4b47) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f00000028c0)={&(0x7f0000000740)=@abs, 0x6e, 0x0}, 0x20) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000040), 0x4) writev(r6, &(0x7f00000017c0)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 502.992626ms ago: executing program 4 (id=3406): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbb00020a63cdec5908060001080006040001aaaaaaaaaa14ac921469b1de8106b81cac"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968508", 0xd, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 436.995378ms ago: executing program 4 (id=3407): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1, 0x0, 0x0, 0x3000000}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) 367.059659ms ago: executing program 2 (id=3408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000088000000050a0102000000000000000001002000"], 0x124}, 0x1, 0x0, 0x0, 0xd4}, 0x800) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1004210}, 0xc, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000a0a01040000000000000000050000080900010073797a31000000000800f540000000029cfd0c400010080934001180000001006374000000000280000003000100000000000440000000080000014000000016000004400000000300000440000000120000024000000007"], 0x64}, 0x1, 0x0, 0x0, 0xc04c841}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) rename(0x0, &(0x7f00000001c0)='./file1\x00') uname(&(0x7f0000000040)=""/114) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = semget$private(0x0, 0x2, 0x480) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$SEM_STAT_ANY(r4, 0x2, 0x14, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = epoll_create1(0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)={0x7000000e}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) preadv(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f00000000c0)=""/79, 0x4f}], 0x2, 0xe, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) 159.128614ms ago: executing program 4 (id=3409): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f8b221", 0x9}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x44001, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002a40)={0x420, 0x3f4, 0x8, 0x70bd2a, 0x25dfdbfb, {0x10, 0x0, 0x27, [0x5, 0x0, 0x72, 0x9, 0x2, 0x6, 0x800, 0x2, 0xffff, 0x3, 0x8, 0x1, 0x7, 0x0, 0x8bb8, 0x2b4d, 0x3, 0xfffffffe, 0x3, 0x6, 0x5, 0x7, 0xffff5c3c, 0x33b1, 0x1, 0xff, 0x5, 0xfffffff9, 0x3, 0x8, 0x7fff, 0x9, 0x8000, 0x9, 0x1ab2, 0x6, 0x5, 0x0, 0x400, 0x321, 0x2, 0x7, 0x1, 0x80, 0x4b0c, 0x1, 0xe, 0x2768, 0xe74, 0x8, 0x8, 0x0, 0x7ff, 0x1, 0x10001, 0x1, 0x0, 0x1, 0xac, 0x8, 0x101, 0x5, 0x1b4f3626, 0x1000], [0x8, 0x10000, 0x6, 0x6, 0x1, 0xc, 0x7, 0x4, 0x8, 0x2, 0x2, 0x9, 0x6, 0x3, 0x3, 0x2, 0xb, 0xa00, 0x4, 0x4, 0x8, 0xe0000000, 0x5a7c, 0xffffffff, 0x0, 0x4, 0x4, 0x100, 0x4, 0x6, 0x93, 0x1, 0x5c77, 0x0, 0x0, 0x4, 0x5, 0xd, 0x10000, 0xffffffff, 0x2, 0x6, 0x0, 0x9, 0x100, 0x7745, 0x7f8, 0x9, 0x4, 0x68, 0x1, 0x635, 0x80000000, 0x9, 0x5, 0x4b5, 0x5, 0x0, 0x5, 0x9, 0x10000, 0x3, 0x8, 0x3], [0x6, 0x8, 0xb364, 0x2, 0x6, 0x7e4d6edf, 0x3, 0xe0, 0xc, 0xf6, 0x0, 0x6, 0x7fffffff, 0x3, 0x88e6, 0x4, 0x4, 0x4, 0x2, 0x8001, 0x8fd24c3f, 0x1, 0x872, 0x9, 0xffff, 0x7f, 0xb5b, 0x6, 0x4, 0x9, 0x81, 0x84, 0x80, 0x0, 0x3, 0x30000000, 0x0, 0x3, 0x7, 0x3, 0x4, 0x0, 0x0, 0x5, 0x2, 0x6, 0xa, 0xc5, 0x8000, 0xffffffff, 0x0, 0x400, 0xa, 0xe81, 0x9, 0x10001, 0x9, 0x3, 0x800, 0x6, 0x0, 0x6732, 0x2, 0x7], [0x5, 0x4, 0x9, 0x0, 0x6, 0xa, 0x400, 0x64aadf1f, 0x401, 0x701, 0x80000001, 0x7, 0x3, 0x5, 0xcc11, 0x1, 0xa1f, 0x400, 0x3, 0xffff, 0xe, 0xfff, 0xffff, 0x6, 0x5, 0x9dac, 0xffffffff, 0x1f15, 0x6fc, 0x6, 0x10001, 0xfffffffd, 0x1000, 0x5, 0x5, 0xf399, 0x400, 0x5, 0x8, 0x7fff, 0x7fffffff, 0x8000, 0x3ff, 0x80000001, 0x80, 0xffffffff, 0x6, 0x9890, 0x100, 0x7, 0x4, 0x7fff, 0xd69, 0x9, 0xfffffff8, 0xd, 0x8001, 0x9, 0x8, 0x7fff8, 0x7fffffff, 0x38d7, 0x9, 0x5]}}, 0x420}, 0x1, 0x0, 0x0, 0x20000000}, 0x44040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r3}, 0x38) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) 0s ago: executing program 3 (id=3410): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53c590deb708ce8227364ab5ff433ca6a3f65f90"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1002, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd, 0xc0000001}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}]}, 0x70}, 0x1, 0x7}, 0x0) r3 = fsmount(r1, 0x0, 0x2) close(0x3) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000001c0)=r6, 0x4) move_mount(r4, 0x0, r4, &(0x7f00000000c0)='./file0\x00', 0x22) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9360, 0x0) kernel console output (not intermixed with test programs): syzkaller #0 PREEMPT(full) [ 357.308928][T13185] Tainted: [W]=WARN [ 357.308938][T13185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.309024][T13185] Call Trace: [ 357.309033][T13185] [ 357.309044][T13185] __dump_stack+0x1d/0x30 [ 357.309076][T13185] dump_stack_lvl+0x95/0xd0 [ 357.309107][T13185] dump_stack+0x15/0x1b [ 357.309131][T13185] should_fail_ex+0x263/0x280 [ 357.309210][T13185] should_fail+0xb/0x20 [ 357.309231][T13185] should_fail_usercopy+0x1a/0x20 [ 357.309293][T13185] _copy_to_user+0x20/0xa0 [ 357.309330][T13185] simple_read_from_buffer+0xb5/0x130 [ 357.309365][T13185] proc_fail_nth_read+0x10e/0x150 [ 357.309448][T13185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.309524][T13185] vfs_read+0x1ab/0x7f0 [ 357.309617][T13185] ? kmem_cache_free+0xca/0x380 [ 357.309641][T13185] ? fdget+0xbc/0x110 [ 357.309701][T13185] ? do_mq_notify+0x7f2/0x8d0 [ 357.309735][T13185] ? putname+0x7c/0xc0 [ 357.309827][T13185] ksys_read+0xdc/0x1a0 [ 357.309854][T13185] __x64_sys_read+0x40/0x50 [ 357.309887][T13185] x64_sys_call+0x2886/0x3020 [ 357.309922][T13185] do_syscall_64+0x12c/0x3b0 [ 357.309998][T13185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.310022][T13185] RIP: 0033:0x7fc94abcd04e [ 357.310041][T13185] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 357.310145][T13185] RSP: 002b:00007fc94965efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.310170][T13185] RAX: ffffffffffffffda RBX: 00007fc94965f6c0 RCX: 00007fc94abcd04e [ 357.310189][T13185] RDX: 000000000000000f RSI: 00007fc94965f0a0 RDI: 0000000000000004 [ 357.310206][T13185] RBP: 00007fc94965f090 R08: 0000000000000000 R09: 0000000000000000 [ 357.310251][T13185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.310264][T13185] R13: 00007fc94ae86038 R14: 00007fc94ae85fa0 R15: 00007fffb94bb3c8 [ 357.310286][T13185] [ 357.554292][T13176] loop9: detected capacity change from 0 to 512 [ 357.572590][T13176] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 357.688899][T13176] EXT4-fs (loop9): 1 truncate cleaned up [ 357.696471][T13176] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.788042][T13194] netlink: 'syz.2.2825': attribute type 39 has an invalid length. [ 357.820728][T13194] syz_tun (unregistering): left allmulticast mode [ 357.977180][T13194] bond0: (slave syz_tun): Releasing backup interface [ 358.019134][T13199] netlink: 676 bytes leftover after parsing attributes in process `syz.8.2826'. [ 358.132689][T13203] loop2: detected capacity change from 0 to 512 [ 358.155078][T13203] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.190895][T13203] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2828: bad orphan inode 131083 [ 358.204445][T10132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.215800][T13203] loop2: lost filesystem error report for type 5 error -117 [ 358.216543][T13203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.240022][T13203] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.335354][ T28] audit: type=1400 audit(1776358853.181:2717): avc: denied { write } for pid=13200 comm="syz.0.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 358.429917][ T28] audit: type=1400 audit(1776358853.286:2718): avc: denied { ioctl } for pid=13212 comm="syz.3.2831" path="socket:[40152]" dev="sockfs" ino=40152 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 358.486434][T13230] loop9: detected capacity change from 0 to 512 [ 358.497507][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2836'. [ 358.525973][T13230] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 358.535993][T13230] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 358.544915][T13230] EXT4-fs (loop9): 1 truncate cleaned up [ 358.554341][T13230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.595327][T13230] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 358.630675][T10132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.691470][T13246] loop9: detected capacity change from 0 to 512 [ 358.746389][T13246] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.764722][T13246] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.798290][T13246] xfrm0 speed is unknown, defaulting to 1000 [ 358.846606][T13260] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2838'. [ 358.879624][T13246] lo speed is unknown, defaulting to 1000 [ 358.930882][ T28] audit: type=1400 audit(1776358853.810:2719): avc: denied { read } for pid=13245 comm="syz.9.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 359.258016][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2841'. [ 359.607967][T10132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.052487][ T28] audit: type=1326 audit(1776358854.997:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syz.3.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab08c819 code=0x7ffc0000 [ 361.093179][ T28] audit: type=1326 audit(1776358855.899:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syz.3.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab08c819 code=0x7ffc0000 [ 361.159014][ T28] audit: type=1326 audit(1776358855.899:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syz.3.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab08c819 code=0x7ffc0000 [ 361.202242][T13303] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 361.208795][ T28] audit: type=1326 audit(1776358855.899:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syz.3.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab08c819 code=0x7ffc0000 [ 361.233741][ T28] audit: type=1326 audit(1776358855.899:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syz.3.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fc8ab08c819 code=0x7ffc0000 [ 361.293933][ T28] audit: type=1326 audit(1776358855.899:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syz.3.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab08c819 code=0x7ffc0000 [ 361.329376][ T28] audit: type=1326 audit(1776358855.899:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syz.3.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab08c819 code=0x7ffc0000 [ 361.355345][ T28] audit: type=1326 audit(1776358855.899:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syz.3.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab08c819 code=0x7ffc0000 [ 361.380426][ T28] audit: type=1326 audit(1776358855.899:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syz.3.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8ab08c819 code=0x7ffc0000 [ 361.404611][ T28] audit: type=1326 audit(1776358855.899:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syz.3.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab08c819 code=0x7ffc0000 [ 361.417546][T13308] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 361.428679][ T28] audit: type=1326 audit(1776358855.899:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13290 comm="syz.3.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ab08c819 code=0x7ffc0000 [ 361.463282][T13308] bond3: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 361.474237][T13308] bond3: (slave vxcan1): making interface the new active one [ 361.482194][T13308] bond3: (slave vxcan1): Enslaving as an active interface with an up link [ 361.509247][T13303] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 361.521642][T13303] bond3: (slave vxcan3): Enslaving as a backup interface with an up link [ 361.557873][T13316] loop9: detected capacity change from 0 to 256 [ 361.583777][T13312] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2851'. [ 361.592890][T13316] veth0_virt_wifi: entered allmulticast mode [ 361.631938][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2852'. [ 361.659808][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2852'. [ 361.743424][T13325] loop9: detected capacity change from 0 to 512 [ 361.777443][T13325] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.806711][T13325] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.915993][T13334] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 361.930836][T13337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2857'. [ 362.023035][T13339] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2859'. [ 362.144615][T13347] loop3: detected capacity change from 0 to 512 [ 362.164439][T13347] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 362.201311][T13347] EXT4-fs (loop3): 1 truncate cleaned up [ 362.254481][T13347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.502015][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2864'. [ 362.685919][T10132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.731492][T13367] loop9: detected capacity change from 0 to 512 [ 362.755270][T13367] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 362.778457][T13367] EXT4-fs (loop9): orphan cleanup on readonly fs [ 362.790375][T13367] EXT4-fs warning (device loop9): ext4_enable_quotas:7263: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 362.806214][T13367] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 362.823972][T13367] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 362.840428][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 362.846908][ C1] EXT4-fs (loop9): initial error at time 1776359113: ext4_mb_generate_buddy:1317 [ 362.856103][ C1] EXT4-fs (loop9): last error at time 1776359113: ext4_mb_generate_buddy:1317 [ 362.865793][T13367] EXT4-fs error (device loop9): ext4_do_update_inode:5604: inode #12: comm syz.9.2867: corrupted inode contents [ 362.889085][T13367] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 362.889486][T13367] EXT4-fs error (device loop9): ext4_dirty_inode:6497: inode #12: comm syz.9.2867: mark_inode_dirty error [ 362.900315][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.915275][T13367] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 362.922750][T13367] EXT4-fs error (device loop9): ext4_do_update_inode:5604: inode #12: comm syz.9.2867: corrupted inode contents [ 362.944281][T13367] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 362.944795][T13367] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.2867: mark_inode_dirty error [ 362.965710][T13367] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 362.966236][T13367] EXT4-fs error (device loop9): ext4_do_update_inode:5604: inode #12: comm syz.9.2867: corrupted inode contents [ 362.987788][T13367] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 362.993532][T13367] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 363.043853][T13367] loop9: lost filesystem error report for type 5 error -117 [ 363.044102][T13367] EXT4-fs error (device loop9): ext4_do_update_inode:5604: inode #12: comm syz.9.2867: corrupted inode contents [ 363.095763][T13367] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 363.095925][T13367] EXT4-fs error (device loop9): ext4_truncate:4604: inode #12: comm syz.9.2867: mark_inode_dirty error [ 363.116592][T13367] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 363.159664][T13367] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 363.178330][T13367] loop9: lost filesystem error report for type 5 error -117 [ 363.183906][T13367] EXT4-fs (loop9): 1 truncate cleaned up [ 363.199423][T13367] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 363.215759][T13388] netlink: 'syz.8.2874': attribute type 21 has an invalid length. [ 363.223844][T13388] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2874'. [ 363.233026][T13388] netlink: 'syz.8.2874': attribute type 1 has an invalid length. [ 363.281803][T13367] netlink: 'syz.9.2867': attribute type 12 has an invalid length. [ 363.295275][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2877'. [ 363.527563][T10132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.662990][T13407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2884'. [ 365.781531][T13418] lo speed is unknown, defaulting to 1000 [ 365.816160][T13418] lo speed is unknown, defaulting to 1000 [ 365.828762][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2889'. [ 365.842479][T13423] smc: removing ib device syz1 [ 365.847821][T13418] lo speed is unknown, defaulting to 1000 [ 365.903777][T13418] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 366.000753][T13418] lo speed is unknown, defaulting to 1000 [ 366.042257][T13418] lo speed is unknown, defaulting to 1000 [ 366.048507][T13418] lo speed is unknown, defaulting to 1000 [ 366.059477][T13418] lo speed is unknown, defaulting to 1000 [ 366.084830][T13427] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 366.109278][T13433] loop3: detected capacity change from 0 to 512 [ 366.116264][T13433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 366.129771][T13433] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2892: invalid indirect mapped block 256 (level 2) [ 366.143281][T13433] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 366.144047][T13433] EXT4-fs (loop3): 2 truncates cleaned up [ 366.153211][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 366.153230][ C1] EXT4-fs (loop3): initial error at time 1776359117: ext4_free_branches:1023: inode 11 [ 366.153278][ C1] EXT4-fs (loop3): last error at time 1776359117: ext4_free_branches:1023: inode 11 [ 366.206408][T13433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.234405][T13418] lo speed is unknown, defaulting to 1000 [ 366.266786][T13418] lo speed is unknown, defaulting to 1000 [ 366.343672][T13418] lo speed is unknown, defaulting to 1000 [ 366.357793][T13440] netlink: 468 bytes leftover after parsing attributes in process `syz.9.2894'. [ 366.397658][T13440] loop9: detected capacity change from 0 to 512 [ 366.424783][T13440] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.438893][T13440] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.479604][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 366.479652][ T28] audit: type=1400 audit(1776359117.737:2837): avc: denied { setopt } for pid=13439 comm="syz.9.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 366.509752][T13440] EXT4-fs error (device loop9): ext4_get_first_dir_block:3538: inode #12: comm syz.9.2894: directory missing '.' [ 366.522419][T13440] EXT4-fs (loop9): Remounting filesystem read-only [ 366.529136][ T28] audit: type=1400 audit(1776359117.769:2838): avc: denied { reparent } for pid=13439 comm="syz.9.2894" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 366.552169][ T28] audit: type=1400 audit(1776359117.769:2839): avc: denied { add_name } for pid=13439 comm="syz.9.2894" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 366.843932][T13445] netlink: 'syz.8.2895': attribute type 21 has an invalid length. [ 366.852026][T13445] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2895'. [ 366.861221][T13445] netlink: 'syz.8.2895': attribute type 1 has an invalid length. [ 366.904809][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.084991][ T28] audit: type=1400 audit(1776359118.367:2840): avc: denied { getopt } for pid=13454 comm="syz.3.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 367.154403][T10132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.554379][T13481] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 368.981649][T13482] loop2: detected capacity change from 0 to 164 [ 370.433032][T13482] rock: directory entry would overflow storage [ 370.433071][T13482] rock: sig=0x66, size=4, remaining=3 [ 370.565315][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2911'. [ 370.666369][T13499] 9p: Bad value for 'rfdno' [ 370.677174][T13499] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 370.711509][T13503] loop3: detected capacity change from 0 to 128 [ 370.718816][T13503] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 370.740271][T13503] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 370.864215][T13511] netlink: 'syz.0.2917': attribute type 39 has an invalid length. [ 370.892962][ T28] audit: type=1326 audit(1776359122.367:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13496 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94ac0c819 code=0x7ffc0000 [ 370.918006][ T28] audit: type=1326 audit(1776359122.367:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13496 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc94ac0c819 code=0x7ffc0000 [ 370.952547][ T28] audit: type=1326 audit(1776359122.367:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13496 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94ac0c819 code=0x7ffc0000 [ 370.984767][ T28] audit: type=1326 audit(1776359122.367:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13496 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc94ac0c819 code=0x7ffc0000 [ 371.004885][T13497] batman_adv: batadv0: Adding interface: dummy0 [ 371.008858][ T28] audit: type=1326 audit(1776359122.367:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13496 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94ac0c819 code=0x7ffc0000 [ 371.008911][ T28] audit: type=1326 audit(1776359122.398:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13496 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94ac0c819 code=0x7ffc0000 [ 371.069217][T13497] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.108393][T13497] batman_adv: batadv0: Interface activated: dummy0 [ 371.123237][T13512] batadv0: mtu less than device minimum [ 371.132628][T13512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.143666][T13512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.154677][T13512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.165660][T13512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.176783][T13512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.187861][T13512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.198817][T13512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.209947][T13512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.220795][T13512] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.246756][T13516] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2919'. [ 371.258769][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 371.258787][ T28] audit: type=1326 audit(1776359122.745:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13496 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94ac0c819 code=0x7ffc0000 [ 371.289074][ T28] audit: type=1326 audit(1776359122.745:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13496 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94ac0c819 code=0x7ffc0000 [ 371.370035][T13530] 9p: Could not find request transport: <Šôs[_*#¢V/8C~ í7˜@1·ù$›Óks‡ãÅd‹Ù‹|À4 êÍ/û¿ó/–Î1Ÿ\ÎV@…0^ Þì—JŸOg$ìŒ;²;’éˆàaÖk|E [ 371.446498][ T3394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 371.476098][ T3394] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.553062][ T28] audit: type=1400 audit(1776359123.060:2853): avc: denied { mount } for pid=13541 comm="syz.9.2927" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 371.605563][T13544] loop2: detected capacity change from 0 to 128 [ 371.628444][T13544] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 371.657246][ T28] audit: type=1326 audit(1776359123.165:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.8.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 371.714579][T13544] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 371.728355][ T28] audit: type=1326 audit(1776359123.165:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.8.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 371.784135][ T28] audit: type=1326 audit(1776359123.165:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.8.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 371.831907][T13551] syzkaller0: entered allmulticast mode [ 371.844018][T13551] syzkaller0: entered promiscuous mode [ 371.850966][ T28] audit: type=1326 audit(1776359123.165:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.8.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 371.876096][ T28] audit: type=1326 audit(1776359123.165:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.8.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 371.913386][T13551] syzkaller0 (unregistering): left allmulticast mode [ 371.921537][T13551] syzkaller0 (unregistering): left promiscuous mode [ 371.930403][ T28] audit: type=1326 audit(1776359123.165:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.8.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 371.956609][ T28] audit: type=1326 audit(1776359123.165:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.8.2929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 372.012383][T13556] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2932'. [ 372.075171][T13559] FAULT_INJECTION: forcing a failure. [ 372.075171][T13559] name failslab, interval 1, probability 0, space 0, times 0 [ 372.088179][T13559] CPU: 1 UID: 0 PID: 13559 Comm: syz.0.2933 Tainted: G W syzkaller #0 PREEMPT(full) [ 372.088215][T13559] Tainted: [W]=WARN [ 372.088224][T13559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 372.088246][T13559] Call Trace: [ 372.088253][T13559] [ 372.088260][T13559] __dump_stack+0x1d/0x30 [ 372.088294][T13559] dump_stack_lvl+0x95/0xd0 [ 372.088331][T13559] dump_stack+0x15/0x1b [ 372.088355][T13559] should_fail_ex+0x263/0x280 [ 372.088388][T13559] should_failslab+0x8c/0xb0 [ 372.088465][T13559] __kmalloc_noprof+0xb8/0x4d0 [ 372.088498][T13559] ? bpf_test_init+0x86/0x130 [ 372.088547][T13559] bpf_test_init+0x86/0x130 [ 372.088573][T13559] bpf_prog_test_run_xdp+0x306/0xa10 [ 372.088661][T13559] ? __rcu_read_unlock+0x4e/0x70 [ 372.088690][T13559] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 372.088727][T13559] bpf_prog_test_run+0x204/0x340 [ 372.088843][T13559] __sys_bpf+0x52e/0x7e0 [ 372.088906][T13559] __x64_sys_bpf+0x41/0x50 [ 372.088928][T13559] x64_sys_call+0x10cb/0x3020 [ 372.089005][T13559] do_syscall_64+0x12c/0x3b0 [ 372.089085][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.089107][T13559] RIP: 0033:0x7fdfe6e3c819 [ 372.089126][T13559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.089149][T13559] RSP: 002b:00007fdfe5897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.089174][T13559] RAX: ffffffffffffffda RBX: 00007fdfe70b5fa0 RCX: 00007fdfe6e3c819 [ 372.089190][T13559] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 372.089225][T13559] RBP: 00007fdfe5897090 R08: 0000000000000000 R09: 0000000000000000 [ 372.089244][T13559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.089257][T13559] R13: 00007fdfe70b6038 R14: 00007fdfe70b5fa0 R15: 00007ffe7fccf7b8 [ 372.089277][T13559] [ 372.365510][ T7559] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 372.374585][ T7559] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 372.399466][ T7559] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 372.433248][T13570] loop9: detected capacity change from 0 to 764 [ 372.439726][ T7557] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 372.533650][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2943'. [ 372.556921][T13583] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2939'. [ 372.714682][ T7563] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.754439][T13595] netlink: 'syz.8.2944': attribute type 21 has an invalid length. [ 372.765341][T13595] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2944'. [ 372.765377][T13595] netlink: 'syz.8.2944': attribute type 1 has an invalid length. [ 372.767241][T13583] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 372.808129][ T7563] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.817387][T13594] loop3: detected capacity change from 0 to 8192 [ 372.862491][ T7563] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.916827][ T7563] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.947746][T13586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2940'. [ 372.982226][T13613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2950'. [ 372.991564][T13613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2950'. [ 373.076730][T13613] netlink: 'syz.0.2950': attribute type 10 has an invalid length. [ 373.086892][ T7563] vlan2: left allmulticast mode [ 373.094341][ T7563] geneve0: left allmulticast mode [ 373.099622][ T7563] vlan2: left promiscuous mode [ 373.104532][ T7563] geneve0: left promiscuous mode [ 373.109962][ T7563] bridge0: port 3(vlan2) entered disabled state [ 373.117157][ T7563] bridge_slave_1: left allmulticast mode [ 373.128297][ T7563] bridge_slave_1: left promiscuous mode [ 373.135545][ T7563] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.147974][ T7563] bridge_slave_0: left allmulticast mode [ 373.153931][ T7563] bridge_slave_0: left promiscuous mode [ 373.160318][ T7563] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.331123][ T7563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.341636][ T7563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.351725][ T7563] bond0 (unregistering): Released all slaves [ 373.363083][T13613] bond0: (slave bond_slave_0): Releasing backup interface [ 373.391890][T13620] lo speed is unknown, defaulting to 1000 [ 373.414045][ T3040] 8021q: adding VLAN 0 to HW filter on device eth13 [ 373.476049][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'. [ 373.487659][T13620] lo speed is unknown, defaulting to 1000 [ 373.578824][T13653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2958'. [ 373.626200][ T7563] hsr_slave_0: left promiscuous mode [ 373.644681][ T7563] hsr_slave_1: left promiscuous mode [ 373.645291][T13664] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2955'. [ 373.661828][ T7557] Bluetooth: hci0: Frame reassembly failed (-84) [ 373.664308][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.688943][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.697684][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.705879][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.717248][ T7563] veth1_macvtap: left promiscuous mode [ 373.723096][ T7563] veth0_macvtap: left promiscuous mode [ 373.794545][ T7563] team0 (unregistering): Port device team_slave_1 removed [ 373.804950][ T7563] team0 (unregistering): Port device team_slave_0 removed [ 373.856335][ T3040] 8021q: adding VLAN 0 to HW filter on device eth14 [ 374.077240][ T3040] 8021q: adding VLAN 0 to HW filter on device eth15 [ 374.974240][ T7563] IPVS: stop unused estimator thread 0... [ 375.024558][T13724] loop9: detected capacity change from 0 to 2048 [ 375.086801][T13745] FAULT_INJECTION: forcing a failure. [ 375.086801][T13745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.101336][T13745] CPU: 0 UID: 0 PID: 13745 Comm: syz.0.2977 Tainted: G W syzkaller #0 PREEMPT(full) [ 375.101442][T13745] Tainted: [W]=WARN [ 375.101494][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 375.101509][T13745] Call Trace: [ 375.101517][T13745] [ 375.101526][T13745] __dump_stack+0x1d/0x30 [ 375.101556][T13745] dump_stack_lvl+0x95/0xd0 [ 375.101581][T13745] dump_stack+0x15/0x1b [ 375.101642][T13745] should_fail_ex+0x263/0x280 [ 375.101675][T13745] should_fail+0xb/0x20 [ 375.101703][T13745] should_fail_usercopy+0x1a/0x20 [ 375.101736][T13745] _copy_from_user+0x1c/0xb0 [ 375.101876][T13745] ___sys_sendmsg+0xc1/0x1e0 [ 375.101902][T13745] ? path_openat+0x1b01/0x2050 [ 375.101952][T13745] __sys_sendmmsg+0x185/0x320 [ 375.101996][T13745] __x64_sys_sendmmsg+0x57/0x70 [ 375.102093][T13745] x64_sys_call+0x27aa/0x3020 [ 375.102121][T13745] do_syscall_64+0x12c/0x3b0 [ 375.102225][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.102246][T13745] RIP: 0033:0x7fdfe6e3c819 [ 375.102285][T13745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.102364][T13745] RSP: 002b:00007fdfe5897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 375.102401][T13745] RAX: ffffffffffffffda RBX: 00007fdfe70b5fa0 RCX: 00007fdfe6e3c819 [ 375.102414][T13745] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 375.102429][T13745] RBP: 00007fdfe5897090 R08: 0000000000000000 R09: 0000000000000000 [ 375.102452][T13745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.102465][T13745] R13: 00007fdfe70b6038 R14: 00007fdfe70b5fa0 R15: 00007ffe7fccf7b8 [ 375.102484][T13745] [ 375.293901][T13724] loop9: p2 < > p4 [ 375.298403][T13724] loop9: p4 size 262144 extends beyond EOD, truncated [ 375.332993][ T3040] 8021q: adding VLAN 0 to HW filter on device eth16 [ 375.484810][T13769] netlink: 'syz.0.2984': attribute type 39 has an invalid length. [ 375.567028][ T3706] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 376.289851][T13770] Process accounting resumed [ 376.507656][T13794] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 376.543959][ T28] kauditd_printk_skb: 394 callbacks suppressed [ 376.543977][ T28] audit: type=1400 audit(1776359128.298:3255): avc: denied { ioctl } for pid=13807 comm="syz.3.2996" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=42021 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 376.581609][T13804] rdma_rxe: rxe_newlink: failed to add lo [ 376.595619][T13811] netlink: 'syz.3.2997': attribute type 39 has an invalid length. [ 376.604169][T13811] syz_tun (unregistering): left allmulticast mode [ 376.704510][T13813] loop2: detected capacity change from 0 to 1024 [ 376.743475][T13813] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 376.768274][T13813] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 376.812958][T13813] EXT4-fs error (device loop2): ext4_get_journal_inode:5890: comm syz.2.2998: inode #1: comm syz.2.2998: iget: illegal inode # [ 376.825815][T13823] ip6tnl1: entered allmulticast mode [ 376.852967][T13813] loop2: lost filesystem error report for type 5 error -117 [ 376.854812][T13813] EXT4-fs (loop2): no journal found [ 376.862477][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 376.862703][ C0] EXT4-fs (loop2): initial error at time 1776359128: ext4_get_journal_inode:5890 [ 376.862878][ C0] EXT4-fs (loop2): last error at time 1776359128: ext4_get_journal_inode:5890 [ 376.912216][T13813] EXT4-fs (loop2): can't get journal size [ 376.938439][T13813] EXT4-fs (loop2): failed to initialize system zone (-22) [ 376.948610][T13813] EXT4-fs (loop2): mount failed [ 377.000155][T13832] loop9: detected capacity change from 0 to 512 [ 377.007193][T13832] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 377.027825][T13832] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 377.036907][T13832] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 548) [ 377.045144][T13832] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 548) [ 377.062232][ T28] audit: type=1400 audit(1776359128.844:3256): avc: denied { accept } for pid=13831 comm="syz.9.3004" path="socket:[42049]" dev="sockfs" ino=42049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 377.231890][T13834] lo speed is unknown, defaulting to 1000 [ 377.294660][T13834] lo speed is unknown, defaulting to 1000 [ 378.001544][T13841] __nla_validate_parse: 10 callbacks suppressed [ 378.001565][T13841] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.3006'. [ 378.081589][T13851] loop3: detected capacity change from 0 to 512 [ 378.090575][T13851] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3011: bg 0: block 5: invalid block bitmap [ 378.103118][T13851] loop3: lost filesystem error report for type 5 error -117 [ 378.103590][T13851] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 378.110976][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 378.110994][ C0] EXT4-fs (loop3): initial error at time 1776359129: ext4_validate_block_bitmap:432 [ 378.111014][ C0] EXT4-fs (loop3): last error at time 1776359129: ext4_validate_block_bitmap:432 [ 378.145169][T13851] loop3: lost filesystem error report for type 5 error -117 [ 378.153072][T13856] FAULT_INJECTION: forcing a failure. [ 378.153072][T13856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.165310][T13851] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3011: invalid indirect mapped block 3 (level 2) [ 378.186936][T13851] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 378.187405][T13851] EXT4-fs (loop3): 1 orphan inode deleted [ 378.202586][T13851] EXT4-fs (loop3): 1 truncate cleaned up [ 378.208799][T13851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.233933][T13856] CPU: 1 UID: 0 PID: 13856 Comm: syz.2.3012 Tainted: G W syzkaller #0 PREEMPT(full) [ 378.233968][T13856] Tainted: [W]=WARN [ 378.233975][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 378.233989][T13856] Call Trace: [ 378.234049][T13856] [ 378.234060][T13856] __dump_stack+0x1d/0x30 [ 378.234096][T13856] dump_stack_lvl+0x95/0xd0 [ 378.234130][T13856] dump_stack+0x15/0x1b [ 378.234236][T13856] should_fail_ex+0x263/0x280 [ 378.234271][T13856] should_fail+0xb/0x20 [ 378.234302][T13856] should_fail_usercopy+0x1a/0x20 [ 378.234331][T13856] _copy_from_user+0x1c/0xb0 [ 378.234426][T13856] get_timespec64+0x4c/0x100 [ 378.234478][T13856] __se_sys_clock_nanosleep+0x10b/0x260 [ 378.234515][T13856] __x64_sys_clock_nanosleep+0x55/0x70 [ 378.234565][T13856] x64_sys_call+0x146e/0x3020 [ 378.234608][T13856] do_syscall_64+0x12c/0x3b0 [ 378.234638][T13856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.234663][T13856] RIP: 0033:0x7fc94ac0c819 [ 378.234679][T13856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.234697][T13856] RSP: 002b:00007fc94965f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 378.234748][T13856] RAX: ffffffffffffffda RBX: 00007fc94ae85fa0 RCX: 00007fc94ac0c819 [ 378.234765][T13856] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 378.234778][T13856] RBP: 00007fc94965f090 R08: 0000000000000000 R09: 0000000000000000 [ 378.234791][T13856] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000001 [ 378.234804][T13856] R13: 00007fc94ae86038 R14: 00007fc94ae85fa0 R15: 00007fffb94bb3c8 [ 378.234840][T13856] [ 378.443584][T13854] loop9: detected capacity change from 0 to 2048 [ 378.563383][T13854] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.599739][T13865] netlink: 'syz.8.3014': attribute type 21 has an invalid length. [ 378.607724][T13865] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3014'. [ 378.616850][T13865] netlink: 'syz.8.3014': attribute type 1 has an invalid length. [ 378.632481][T10132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.651775][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.812559][T13884] netlink: 184 bytes leftover after parsing attributes in process `syz.9.3016'. [ 379.870350][T13880] netlink: 'syz.0.3020': attribute type 4 has an invalid length. [ 379.897825][ T3566] lo speed is unknown, defaulting to 1000 [ 379.919053][T13880] netlink: 'syz.0.3020': attribute type 4 has an invalid length. [ 379.933854][ T3566] syz2: Port: 1 Link DOWN [ 379.943658][T13876] lo speed is unknown, defaulting to 1000 [ 379.956118][T12280] lo speed is unknown, defaulting to 1000 [ 379.962149][T12280] syz2: Port: 1 Link ACTIVE [ 380.436597][T13880] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.443966][T13880] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.563292][T13880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.596067][T13880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.686866][T12280] lo speed is unknown, defaulting to 1000 [ 380.695533][T13893] bridge0: entered allmulticast mode [ 380.714434][T12280] syz2: Port: 1 Link DOWN [ 380.766024][T13894] vlan2: left allmulticast mode [ 380.791595][T13894] geneve0: left allmulticast mode [ 380.804213][T13894] vlan2: left promiscuous mode [ 380.809416][T13894] geneve0: left promiscuous mode [ 380.818607][T13894] bridge0: port 3(vlan2) entered disabled state [ 380.828763][T13902] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 380.885063][ T7563] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.898776][T13876] lo speed is unknown, defaulting to 1000 [ 380.912920][ T7563] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.923723][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3029'. [ 380.959754][ T7563] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.986036][ T7563] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.014190][ T28] audit: type=1400 audit(1776359132.991:3257): avc: denied { write } for pid=13919 comm="syz.0.3033" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 381.239465][T13923] netlink: 676 bytes leftover after parsing attributes in process `syz.8.3032'. [ 381.589620][T13930] lo speed is unknown, defaulting to 1000 [ 381.909062][T13930] lo speed is unknown, defaulting to 1000 [ 382.071831][T13939] loop2: detected capacity change from 0 to 512 [ 382.083491][T13939] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 382.120480][T13941] loop9: detected capacity change from 0 to 512 [ 382.150724][T13936] syzkaller0: entered promiscuous mode [ 382.164554][T13941] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 382.184870][T13936] syzkaller0: entered allmulticast mode [ 382.205812][T13941] EXT4-fs (loop9): orphan cleanup on readonly fs [ 382.228247][T13941] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.3036: bad orphan inode 15 [ 382.241415][T13941] loop9: lost filesystem error report for type 5 error -117 [ 382.245912][T13941] ext4_test_bit(bit=14, block=18) = 1 [ 382.256334][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 382.256366][ C1] EXT4-fs (loop9): initial error at time 1776359134: ext4_orphan_get:1423 [ 382.256417][ C1] EXT4-fs (loop9): last error at time 1776359134: ext4_orphan_get:1423 [ 382.294294][T13941] is_bad_inode(inode)=0 [ 382.301112][T13941] NEXT_ORPHAN(inode)=1023 [ 382.306983][T13941] max_ino=32 [ 382.311849][T13941] i_nlink=0 [ 382.322321][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3035'. [ 382.354519][T13941] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2970: inode #15: comm syz.9.3036: corrupted xattr block 19: e_value size too large [ 382.374657][T13941] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 382.377732][T13941] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117) [ 382.472246][T13941] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 382.530598][T13955] netlink: 'syz.8.3037': attribute type 10 has an invalid length. [ 382.869337][T13959] loop2: detected capacity change from 0 to 512 [ 382.986461][T13959] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 382.987495][T13941] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 3: comm syz.9.3036: path /186/éq‰Y’3aK: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=4096, size=4096 fake=0 [ 383.010383][T13959] EXT4-fs (loop2): orphan cleanup on readonly fs [ 383.060002][T13959] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3039: bad orphan inode 15 [ 383.072394][T13959] loop2: lost filesystem error report for type 5 error -117 [ 383.080885][T13959] ext4_test_bit(bit=14, block=18) = 1 [ 383.081185][T10132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 383.090849][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 383.091371][ C1] EXT4-fs (loop2): initial error at time 1776359135: ext4_orphan_get:1423 [ 383.091469][ C1] EXT4-fs (loop2): last error at time 1776359135: ext4_orphan_get:1423 [ 383.144956][T13959] is_bad_inode(inode)=0 [ 383.152795][T13959] NEXT_ORPHAN(inode)=1023 [ 383.158443][T13959] max_ino=32 [ 383.170846][T13959] i_nlink=0 [ 383.186584][T13959] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2970: inode #15: comm syz.2.3039: corrupted xattr block 19: e_value size too large [ 383.203732][T13959] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 383.206364][T13959] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 383.249075][T13959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 383.368820][T13959] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.3039: path /557/éq‰Y’3aK: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=4096, size=4096 fake=0 [ 383.418708][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 383.470616][T13977] loop9: detected capacity change from 0 to 1024 [ 383.481935][T13977] EXT4-fs: Ignoring removed i_version option [ 383.497542][T13977] EXT4-fs: Ignoring removed bh option [ 383.517529][T13977] EXT4-fs (loop9): stripe (228) is not aligned with cluster size (16), stripe is disabled [ 383.541469][T13977] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.557643][T13982] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3044'. [ 383.588861][T13982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.669107][T13982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.738426][T13982] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 383.769934][T13982] team0: left promiscuous mode [ 383.784127][T13982] team_slave_1: left promiscuous mode [ 383.803508][T13982] bond0 (unregistering): Released all slaves [ 384.064190][T13975] loop2: detected capacity change from 0 to 8192 [ 384.149020][T14001] bridge_slave_0: default FDB implementation only supports local addresses [ 384.288630][T10132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.496058][ T28] audit: type=1400 audit(1776359136.654:3258): avc: denied { create } for pid=14007 comm="syz.9.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 384.714691][T14014] netlink: 676 bytes leftover after parsing attributes in process `syz.3.3054'. [ 384.796567][T14019] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 384.946270][T14025] loop9: detected capacity change from 0 to 512 [ 384.960871][T14025] EXT4-fs: Invalid want_extra_isize 2711 [ 385.023572][T14024] loop2: detected capacity change from 0 to 512 [ 385.198811][T14024] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 385.307469][T14024] EXT4-fs (loop2): mount failed [ 385.625354][T14055] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 385.625354][T14055] Please contact the netfilter-devel mailing list or update your nftables rules. [ 385.651590][T14053] netlink: 'syz.9.3064': attribute type 39 has an invalid length. [ 385.831716][T14073] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3067'. [ 386.042004][ T28] audit: type=1400 audit(1776359138.271:3259): avc: denied { setopt } for pid=14087 comm="syz.9.3070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 386.170446][T14095] loop9: detected capacity change from 0 to 256 [ 386.208406][T14095] FAT-fs (loop9): Directory bread(block 64) failed [ 386.219237][T14095] FAT-fs (loop9): Directory bread(block 65) failed [ 386.239375][T14095] FAT-fs (loop9): Directory bread(block 66) failed [ 386.250119][T14095] FAT-fs (loop9): Directory bread(block 67) failed [ 386.262306][T14095] FAT-fs (loop9): Directory bread(block 68) failed [ 386.273505][T14095] FAT-fs (loop9): Directory bread(block 69) failed [ 386.286899][T14095] FAT-fs (loop9): Directory bread(block 70) failed [ 386.299482][T14095] FAT-fs (loop9): Directory bread(block 71) failed [ 386.312109][T14095] FAT-fs (loop9): Directory bread(block 72) failed [ 386.323489][T14095] FAT-fs (loop9): Directory bread(block 73) failed [ 386.563589][T14115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.580720][T14115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.150137][ T28] audit: type=1326 audit(1776359139.436:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14123 comm="syz.8.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 387.265191][ T28] audit: type=1326 audit(1776359139.468:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14123 comm="syz.8.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 387.369774][ T28] audit: type=1326 audit(1776359139.468:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14123 comm="syz.8.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 387.393714][ T28] audit: type=1326 audit(1776359139.468:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14123 comm="syz.8.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 387.426522][ T28] audit: type=1326 audit(1776359139.468:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14123 comm="syz.8.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 387.478008][T14132] netlink: 'syz.9.3080': attribute type 39 has an invalid length. [ 387.490349][ T28] audit: type=1326 audit(1776359139.468:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14123 comm="syz.8.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 387.560661][ T28] audit: type=1326 audit(1776359139.468:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14123 comm="syz.8.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 387.631339][ T28] audit: type=1326 audit(1776359139.468:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14123 comm="syz.8.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905085c819 code=0x7ffc0000 [ 387.661966][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3081'. [ 387.708436][T14152] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 387.731462][T14152] vhci_hcd vhci_hcd.4: default hub control req: 4018 v0005 i0001 l0 [ 388.896962][T14192] netlink: 'syz.2.3093': attribute type 39 has an invalid length. [ 389.161022][T14206] netlink: 676 bytes leftover after parsing attributes in process `syz.2.3095'. [ 389.288088][T14193] lo speed is unknown, defaulting to 1000 [ 389.311420][T14206] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 389.423934][T14193] lo speed is unknown, defaulting to 1000 [ 389.654479][T14193] chnl_net:caif_netlink_parms(): no params data found [ 389.832128][T14193] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.869043][T14193] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.879696][T14193] bridge_slave_0: entered allmulticast mode [ 389.904094][T14193] bridge_slave_0: entered promiscuous mode [ 389.941440][T14193] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.969892][T14193] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.986596][T14193] bridge_slave_1: entered allmulticast mode [ 390.000251][T14193] bridge_slave_1: entered promiscuous mode [ 390.046514][T14193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.064975][T14193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.130677][T14193] team0: Port device team_slave_0 added [ 390.143585][T14193] team0: Port device team_slave_1 added [ 390.170924][T14193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.178040][T14193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.236749][T14193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.274095][T14193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.281833][T14193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.402516][T14193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.633845][T14193] hsr_slave_0: entered promiscuous mode [ 390.672741][T14193] hsr_slave_1: entered promiscuous mode [ 390.795498][T14256] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3110'. [ 390.844728][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 390.844746][ T28] audit: type=1400 audit(1776359143.310:3358): avc: denied { connect } for pid=14253 comm="syz.8.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 390.874890][T14256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.886470][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3113'. [ 390.910363][T14268] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3115'. [ 390.935856][T14268] loop9: detected capacity change from 0 to 512 [ 390.953595][T14268] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 390.994771][T14268] EXT4-fs (loop9): 1 truncate cleaned up [ 391.008309][T14268] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.788983][T14293] 8021q: VLANs not supported on ipvlan1 [ 391.839290][T10132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.879998][ T28] audit: type=1326 audit(1776359144.391:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 391.904057][T14302] loop9: detected capacity change from 0 to 1024 [ 391.911508][ T28] audit: type=1326 audit(1776359144.391:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 391.955415][T14302] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 391.971262][ T28] audit: type=1326 audit(1776359144.391:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 391.982466][T14302] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.995020][ T28] audit: type=1326 audit(1776359144.391:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 392.012123][T14293] io-wq is not configured for unbound workers [ 392.031028][ T28] audit: type=1326 audit(1776359144.391:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 392.060815][ T28] audit: type=1326 audit(1776359144.391:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 392.084582][ T28] audit: type=1326 audit(1776359144.391:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 392.108577][ T28] audit: type=1326 audit(1776359144.391:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 392.143415][ T28] audit: type=1326 audit(1776359144.391:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 392.355667][T14312] xt_hashlimit: max too large, truncated to 1048576 [ 392.368131][T14312] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 392.379054][T14312] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 392.695193][T14314] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3126'. [ 392.732273][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3126'. [ 392.743778][T14314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.769580][T10132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.802121][T14316] loop9: detected capacity change from 0 to 164 [ 392.809177][T14316] iso9660: Unknown parameter ' p4 [ 396.770445][T14367] loop3: p4 size 262144 extends beyond EOD, truncated [ 396.788609][T14392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14392 comm=syz.9.3142 [ 397.185059][T14382] lo speed is unknown, defaulting to 1000 [ 397.925277][T14402] netlink: 676 bytes leftover after parsing attributes in process `syz.8.3146'. [ 398.210553][T14418] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3152'. [ 398.284877][T14419] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3150'. [ 398.713478][T14421] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.720743][T14421] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.080483][T14424] loop3: detected capacity change from 0 to 4096 [ 399.108864][T14431] netlink: 'syz.8.3155': attribute type 4 has an invalid length. [ 399.188694][T14424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.714742][T14421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.743463][T14421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.827237][T14438] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 399.838158][T14441] usb usb8: usbfs: process 14441 (syz.0.3157) did not claim interface 0 before use [ 399.850080][T14438] bond0 (unregistering): Released all slaves [ 399.862570][ T7554] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.880013][T14193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.903297][ T7554] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.926024][ T7554] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.956415][ T7554] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.002150][T14454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.022747][T14454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.145719][T14467] loop3: detected capacity change from 0 to 512 [ 400.188423][T14467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.202550][T14467] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.232292][T14465] lo speed is unknown, defaulting to 1000 [ 400.293223][T14465] lo speed is unknown, defaulting to 1000 [ 400.422090][T14480] netlink: 'syz.9.3168': attribute type 39 has an invalid length. [ 400.531430][T14193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.543226][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3169'. [ 400.595134][T14482] dummy0: entered promiscuous mode [ 400.608426][T14486] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3170'. [ 400.632615][T14482] macsec1: entered promiscuous mode [ 400.653172][ T28] audit: type=1400 audit(1776359153.609:3823): avc: denied { cmd } for pid=14490 comm="syz.2.3173" path="socket:[43864]" dev="sockfs" ino=43864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 400.677922][T14482] macsec1: entered allmulticast mode [ 400.689840][T14482] dummy0: entered allmulticast mode [ 400.697144][T14482] dummy0: left allmulticast mode [ 400.702252][T14482] dummy0: left promiscuous mode [ 400.719531][T14486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14486 comm=syz.3.3170 [ 400.736133][T14486] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3170'. [ 400.815078][T14504] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3177'. [ 400.852440][T14509] netlink: 'syz.0.3179': attribute type 39 has an invalid length. [ 400.901289][T14504] loop2: detected capacity change from 0 to 2048 [ 400.975406][T14504] EXT4-fs error (device loop2): __ext4_fill_super:5590: inode #2: comm syz.2.3177: inode has both inline data and extents flags [ 400.975434][T14504] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 400.975634][T14504] EXT4-fs (loop2): get root inode failed [ 400.975653][T14504] EXT4-fs (loop2): mount failed [ 400.989158][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 400.989186][ C1] EXT4-fs (loop2): initial error at time 1776359153: __ext4_fill_super:5590: inode 2 [ 400.989228][ C1] EXT4-fs (loop2): last error at time 1776359153: __ext4_fill_super:5590: inode 2 [ 401.048320][T14522] netlink: 676 bytes leftover after parsing attributes in process `syz.8.3182'. [ 401.094613][ T28] audit: type=1400 audit(1776359154.071:3824): avc: denied { execute } for pid=14526 comm="syz.2.3184" path="/selinux/avc/cache_threshold" dev="selinuxfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 401.112790][T14527] netlink: 'syz.2.3184': attribute type 10 has an invalid length. [ 401.112833][T14527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3184'. [ 401.112852][T14527] batadv0: entered promiscuous mode [ 401.112865][T14527] batadv0: entered allmulticast mode [ 401.113017][T14527] bridge0: port 4(batadv0) entered blocking state [ 401.113051][T14527] bridge0: port 4(batadv0) entered disabled state [ 401.114208][T14527] net_ratelimit: 10 callbacks suppressed [ 401.114224][T14527] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 401.132364][T14530] loop3: detected capacity change from 0 to 2048 [ 401.151926][ T7569] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 401.151946][ T7569] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 401.174543][T14530] loop3: p2 < > p4 [ 401.280227][T14530] loop3: p4 size 262144 extends beyond EOD, truncated [ 401.583526][T14562] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3195'. [ 402.094314][T14571] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3199'. [ 402.164987][T14573] netlink: 676 bytes leftover after parsing attributes in process `syz.2.3198'. [ 402.199391][T14574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14574 comm=syz.9.3199 [ 402.302037][T14572] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 402.423162][T14579] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 402.914753][T14595] netlink: 'syz.0.3205': attribute type 39 has an invalid length. [ 402.952440][T14597] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3207'. [ 403.019111][T14603] netlink: 'syz.9.3209': attribute type 4 has an invalid length. [ 403.313008][T14626] delete_channel: no stack [ 404.055424][T14638] loop2: detected capacity change from 0 to 1756 [ 404.177878][T14650] loop3: detected capacity change from 0 to 1024 [ 404.204548][T14650] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 404.355245][T14659] loop9: detected capacity change from 0 to 2048 [ 404.461333][T14658] veth3: entered promiscuous mode [ 404.476277][T14662] loop3: detected capacity change from 0 to 512 [ 404.506234][T14658] veth3: entered allmulticast mode [ 404.665667][T14662] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 404.734033][T14662] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 404.807242][T14662] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3228: Corrupt directory, running e2fsck is recommended [ 404.945213][T14662] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 404.998569][T14662] EXT4-fs error (device loop3): ext4_iget_extra_inode:5042: inode #15: comm syz.3.3228: corrupted in-inode xattr: invalid ea_ino [ 405.058368][T14662] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.059345][T14662] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3228: couldn't read orphan inode 15 (err -117) [ 405.068586][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 405.068610][ C1] EXT4-fs (loop3): initial error at time 1776359158: ext4_iget_extra_inode:5042: inode 15 [ 405.068642][ C1] EXT4-fs (loop3): last error at time 1776359158: ext4_iget_extra_inode:5042: inode 15 [ 405.109498][T14675] FAULT_INJECTION: forcing a failure. [ 405.109498][T14675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.146297][T14675] CPU: 1 UID: 0 PID: 14675 Comm: syz.0.3231 Tainted: G W syzkaller #0 PREEMPT(full) [ 405.146337][T14675] Tainted: [W]=WARN [ 405.146347][T14675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 405.146439][T14675] Call Trace: [ 405.146448][T14675] [ 405.146459][T14675] __dump_stack+0x1d/0x30 [ 405.146488][T14675] dump_stack_lvl+0x95/0xd0 [ 405.146519][T14675] dump_stack+0x15/0x1b [ 405.146551][T14675] should_fail_ex+0x263/0x280 [ 405.146591][T14675] should_fail+0xb/0x20 [ 405.146684][T14675] should_fail_usercopy+0x1a/0x20 [ 405.146711][T14675] _copy_from_user+0x1c/0xb0 [ 405.146772][T14675] ___sys_sendmsg+0xc1/0x1e0 [ 405.146883][T14675] ? path_openat+0x1b01/0x2050 [ 405.146933][T14675] __sys_sendmmsg+0x185/0x320 [ 405.146969][T14675] __x64_sys_sendmmsg+0x57/0x70 [ 405.146993][T14675] x64_sys_call+0x27aa/0x3020 [ 405.147089][T14675] do_syscall_64+0x12c/0x3b0 [ 405.147117][T14675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.147145][T14675] RIP: 0033:0x7fdfe6e3c819 [ 405.147166][T14675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.147228][T14675] RSP: 002b:00007fdfe5876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 405.147247][T14675] RAX: ffffffffffffffda RBX: 00007fdfe70b6090 RCX: 00007fdfe6e3c819 [ 405.147264][T14675] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 405.147282][T14675] RBP: 00007fdfe5876090 R08: 0000000000000000 R09: 0000000000000000 [ 405.147298][T14675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.147311][T14675] R13: 00007fdfe70b6128 R14: 00007fdfe70b6090 R15: 00007ffe7fccf7b8 [ 405.147332][T14675] [ 405.435561][T14659] loop9: p2 < > p4 [ 405.445099][T14659] loop9: p4 size 262144 extends beyond EOD, truncated [ 405.524886][T14662] loop3: lost filesystem error report for type 5 error -117 [ 405.536394][T14662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.801167][T14662] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 405.877605][ T7559] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.914925][T14662] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 405.946178][ T7559] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 405.977232][T14662] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3228: Corrupt directory, running e2fsck is recommended [ 406.052253][ T7559] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.068889][T14679] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 406.100738][ T7559] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 406.139536][T14679] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 406.178580][T14679] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3228: Corrupt directory, running e2fsck is recommended [ 406.194604][ T7559] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.228105][ T7559] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 406.327993][ T7559] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.376380][T14193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.396456][ T7559] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 406.518715][T14703] __nla_validate_parse: 4 callbacks suppressed [ 406.518735][T14703] netlink: 378 bytes leftover after parsing attributes in process `syz.3.3237'. [ 406.588909][T14677] lo speed is unknown, defaulting to 1000 [ 406.737366][ T7559] bridge0: port 4(batadv0) entered disabled state [ 406.747703][ T7559] vlan2: left allmulticast mode [ 406.752739][ T7559] geneve0: left allmulticast mode [ 406.758645][ T7559] vlan2: left promiscuous mode [ 406.841238][T14717] netlink: 'syz.0.3243': attribute type 21 has an invalid length. [ 406.849949][ T7559] geneve0: left promiscuous mode [ 406.855226][ T7559] bridge0: port 3(vlan2) entered disabled state [ 406.958828][ T7559] bridge_slave_1: left allmulticast mode [ 406.978866][ T7559] bridge_slave_1: left promiscuous mode [ 407.011360][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.061523][ T7559] bridge_slave_0: left allmulticast mode [ 407.080493][ T7559] bridge_slave_0: left promiscuous mode [ 407.087559][ T7555] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 407.117918][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.374989][ T7559] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 407.498576][ T7559] bond1 (unregistering): (slave bond2): Releasing backup interface [ 407.506747][ T7559] bond2 (unregistering): left promiscuous mode [ 407.513518][ T7559] bond1 (unregistering): Released all slaves [ 407.523439][ T7559] bond2 (unregistering): Released all slaves [ 407.536116][ T7559] bond3 (unregistering): (slave vxcan1): Releasing backup interface [ 407.546623][ T7559] bond3 (unregistering): (slave vxcan3): Releasing backup interface [ 407.555571][ T7559] bond3 (unregistering): Released all slaves [ 407.564118][T14677] lo speed is unknown, defaulting to 1000 [ 407.564192][T14717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3243'. [ 407.579092][T14717] netlink: 'syz.0.3243': attribute type 1 has an invalid length. [ 407.620830][ T7563] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 407.643126][T14724] syz_tun: entered allmulticast mode [ 407.654483][T14727] geneve2: entered allmulticast mode [ 407.660600][ T7559] IPVS: stopping backup sync thread 9448 ... [ 407.686555][T14722] syz_tun: left allmulticast mode [ 407.697530][ T28] audit: type=1400 audit(1776359161.010:3825): avc: denied { audit_read } for pid=14732 comm="syz.8.3248" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 407.754620][ T7559] hsr_slave_0: left promiscuous mode [ 407.764353][ T7559] hsr_slave_1: left promiscuous mode [ 407.770514][ T7559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.779036][ T7559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.790993][ T7559] batman_adv: batadv0: Interface deactivated: dummy0 [ 407.797976][ T7559] batman_adv: batadv0: Removing interface: dummy0 [ 407.874212][T14749] loop3: detected capacity change from 0 to 1024 [ 407.906742][ T7559] team0 (unregistering): Port device team_slave_1 removed [ 407.920757][T14749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.968446][T14677] chnl_net:caif_netlink_parms(): no params data found [ 408.024785][ T3040] 8021q: adding VLAN 0 to HW filter on device eth18 [ 408.036166][T14193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.080394][T14677] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.088412][T14677] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.095977][T14677] bridge_slave_0: entered allmulticast mode [ 408.112336][T14677] bridge_slave_0: entered promiscuous mode [ 408.128485][T14677] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.138246][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3254'. [ 408.153999][T14677] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.166842][T14677] bridge_slave_1: entered allmulticast mode [ 408.176080][T14677] bridge_slave_1: entered promiscuous mode [ 408.211828][T14677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.237652][T14677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.261508][T14677] team0: Port device team_slave_0 added [ 408.269334][T14677] team0: Port device team_slave_1 added [ 408.306983][ T7559] IPVS: stop unused estimator thread 0... [ 408.307330][T14677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.334795][T14677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.377593][T14677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.389591][T14677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.421716][T14677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.482976][T14677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.523595][T14677] hsr_slave_0: entered promiscuous mode [ 408.531917][T14677] hsr_slave_1: entered promiscuous mode [ 408.538023][T14677] debugfs: 'hsr0' already exists in 'hsr' [ 408.543796][T14677] Cannot create hsr debugfs directory [ 409.128988][T14798] SET target dimension over the limit! [ 409.246389][T14803] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3260'. [ 409.371502][T14803] loop3: detected capacity change from 0 to 512 [ 409.430806][T14803] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 409.649252][T14803] EXT4-fs (loop3): 1 truncate cleaned up [ 409.740799][T14677] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 409.758315][T14803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.790411][T14677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.837004][T14677] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 409.917983][T14677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.928305][T14820] loop9: detected capacity change from 0 to 1024 [ 409.952687][T14820] EXT4-fs: dax option not supported [ 410.035504][T14677] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 410.056362][T14677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.200115][T14677] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 410.209368][T14677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.534541][T14677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.561481][T14677] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.581992][T14677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.593669][T14193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.967986][T14677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.019634][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.026779][ T7555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.051745][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.058906][ T7555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.196691][T14856] bridge0: port 3(vlan2) entered blocking state [ 412.253329][T14856] bridge0: port 3(vlan2) entered disabled state [ 412.323371][T14856] vlan2: entered allmulticast mode [ 412.395489][T14856] geneve0: entered allmulticast mode [ 412.491326][T14856] vlan2: entered promiscuous mode [ 412.564478][T14856] geneve0: entered promiscuous mode [ 414.056645][ T28] audit: type=1326 audit(1776359167.687:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.9.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa3ffc819 code=0x7ffc0000 [ 414.245857][T14677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.259367][ T28] audit: type=1326 audit(1776359167.687:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.9.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f2fa3ffc819 code=0x7ffc0000 [ 414.308524][ T28] audit: type=1326 audit(1776359167.687:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.9.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa3ffc819 code=0x7ffc0000 [ 414.341053][T14889] netlink: 676 bytes leftover after parsing attributes in process `syz.3.3273'. [ 414.350451][ T28] audit: type=1326 audit(1776359167.708:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.9.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2fa3ffc819 code=0x7ffc0000 [ 414.374148][ T28] audit: type=1326 audit(1776359167.708:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.9.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa3ffc819 code=0x7ffc0000 [ 414.398129][ T28] audit: type=1326 audit(1776359167.708:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.9.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fa3ffc819 code=0x7ffc0000 [ 414.421929][ T28] audit: type=1326 audit(1776359167.708:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.9.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa3ffc819 code=0x7ffc0000 [ 414.493403][ T28] audit: type=1326 audit(1776359167.708:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.9.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2fa3ffc819 code=0x7ffc0000 [ 414.576631][ T28] audit: type=1326 audit(1776359167.708:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.9.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa3ffc819 code=0x7ffc0000 [ 414.643808][ T28] audit: type=1326 audit(1776359167.708:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14877 comm="syz.9.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2fa3ffc819 code=0x7ffc0000 [ 414.968585][T14931] program syz.0.3277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.979926][T14889] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 415.070118][T14934] program syz.0.3277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.107256][T14677] veth0_vlan: entered promiscuous mode [ 415.128812][T14677] veth1_vlan: entered promiscuous mode [ 415.175100][T14677] veth0_macvtap: entered promiscuous mode [ 415.182775][T14677] veth1_macvtap: entered promiscuous mode [ 415.197098][T14677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.210494][T14677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.225126][ T7557] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.235271][ T7557] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.290760][ T7557] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.322850][ T7557] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.557861][T14966] loop2: detected capacity change from 0 to 512 [ 415.575981][T14966] EXT4-fs: Ignoring removed nobh option [ 415.615878][T14966] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #3: comm syz.2.3287: corrupted inode contents [ 415.642713][T14966] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 415.642980][T14966] EXT4-fs error (device loop2): ext4_dirty_inode:6497: inode #3: comm syz.2.3287: mark_inode_dirty error [ 415.652117][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 415.652171][ C1] EXT4-fs (loop2): initial error at time 1776359169: ext4_do_update_inode:5604: inode 3 [ 415.652215][ C1] EXT4-fs (loop2): last error at time 1776359169: ext4_do_update_inode:5604: inode 3 [ 415.689899][T14966] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 415.694631][T14966] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #3: comm syz.2.3287: corrupted inode contents [ 415.715648][T14966] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 415.717261][T14966] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.3287: mark_inode_dirty error [ 415.737929][T14966] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 415.739587][T14966] EXT4-fs error (device loop2): ext4_acquire_dquot:7028: comm syz.2.3287: Failed to acquire dquot type 0 [ 415.749124][T14967] lo speed is unknown, defaulting to 1000 [ 415.765868][T14966] loop2: lost filesystem error report for type 5 error -117 [ 415.771742][T14966] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #16: comm syz.2.3287: corrupted inode contents [ 415.801679][T14966] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 415.802346][T14966] EXT4-fs error (device loop2): ext4_dirty_inode:6497: inode #16: comm syz.2.3287: mark_inode_dirty error [ 415.850908][T14966] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 415.851779][T14966] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #16: comm syz.2.3287: corrupted inode contents [ 415.898315][T14966] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 415.898627][T14966] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.3287: mark_inode_dirty error [ 415.946287][T14975] sit0: entered promiscuous mode [ 415.954515][T14966] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 415.955642][T14966] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #16: comm syz.2.3287: corrupted inode contents [ 416.041106][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3285'. [ 416.058499][T14975] netlink: 'syz.9.3288': attribute type 1 has an invalid length. [ 416.083160][T14975] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3288'. [ 416.130686][T14966] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 416.132098][T14967] lo speed is unknown, defaulting to 1000 [ 416.135129][T14966] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 416.160552][T14982] netlink: 676 bytes leftover after parsing attributes in process `syz.0.3289'. [ 416.169688][T14966] loop2: lost filesystem error report for type 5 error -117 [ 416.170717][T14966] EXT4-fs error (device loop2): ext4_do_update_inode:5604: inode #16: comm syz.2.3287: corrupted inode contents [ 416.203420][T14966] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 416.203734][T14966] EXT4-fs error (device loop2): ext4_truncate:4604: inode #16: comm syz.2.3287: mark_inode_dirty error [ 416.225754][T14966] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 416.237835][T14966] loop2: lost filesystem error report for type 5 error -117 [ 416.238428][T14966] EXT4-fs (loop2): 1 truncate cleaned up [ 416.270211][T14966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.283157][T14966] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.307569][T14982] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 416.320990][T14986] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14986 comm=syz.8.3291 [ 416.394202][T14991] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3292'. [ 416.421268][T14984] loop9: detected capacity change from 0 to 512 [ 416.541001][T14984] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 416.573007][T14984] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 416.585911][T14984] System zones: 1-12 [ 416.596998][T14984] EXT4-fs (loop9): 1 truncate cleaned up [ 416.612093][T14984] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.687686][T14677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.846242][T15005] loop3: detected capacity change from 0 to 128 [ 416.855330][T15005] FAT-fs (loop3): bogus logical sector size 759 [ 416.866169][T15005] FAT-fs (loop3): Can't find a valid FAT filesystem [ 417.061579][T10132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.146571][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3303'. [ 417.155841][T15025] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3303'. [ 417.576511][T15048] lo speed is unknown, defaulting to 1000 [ 417.621758][T15048] lo speed is unknown, defaulting to 1000 [ 417.715092][T15053] netlink: 676 bytes leftover after parsing attributes in process `syz.8.3314'. [ 417.881926][T15067] netlink: 136 bytes leftover after parsing attributes in process `syz.8.3319'. [ 417.994475][T15073] bridge0: port 3(vlan2) entered blocking state [ 418.013445][T15073] bridge0: port 3(vlan2) entered disabled state [ 418.032485][T15073] vlan2: entered allmulticast mode [ 418.041558][T15073] geneve0: entered allmulticast mode [ 418.051833][T15073] vlan2: entered promiscuous mode [ 418.057112][T15073] geneve0: entered promiscuous mode [ 418.582654][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3329'. [ 418.704892][T15098] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 418.723836][T15098] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 418.817371][T15107] loop9: detected capacity change from 0 to 512 [ 418.841473][T15107] EXT4-fs: inline encryption not supported [ 418.860959][T15107] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 418.898042][T15107] EXT4-fs (loop9): 1 truncate cleaned up [ 418.914246][T15107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.932553][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 418.932567][ T28] audit: type=1400 audit(1776359172.799:3854): avc: denied { mounton } for pid=15106 comm="syz.9.3335" path="/265/file0/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 419.023170][T15109] loop3: detected capacity change from 0 to 512 [ 419.052909][T15107] loop9: detected capacity change from 512 to 0 [ 419.072571][T15118] EXT4-fs error (device loop9): ext4_get_inode_loc:4937: inode #18: block 9: comm syz.9.3335: unable to read itable block [ 419.092364][ T28] audit: type=1400 audit(1776359172.967:3855): avc: denied { associate } for pid=15108 comm="syz.3.3336" name="net_prio.prioidx" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 419.107347][T15124] netlink: 'syz.8.3338': attribute type 13 has an invalid length. [ 419.132203][T15124] netlink: 'syz.8.3338': attribute type 12 has an invalid length. [ 419.140758][T15118] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 419.166355][T15118] EXT4-fs (loop9): I/O error while writing superblock [ 419.187184][T15118] EXT4-fs error (device loop9): ext4_get_inode_loc:4937: inode #18: block 9: comm syz.9.3335: unable to read itable block [ 419.215144][T15127] loop3: detected capacity change from 0 to 164 [ 419.225262][T15118] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 419.235765][T15127] iso9660: Unknown parameter '' [ 419.246761][T15118] EXT4-fs (loop9): I/O error while writing superblock [ 419.270485][T15118] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6293: IO failure [ 419.303366][T15118] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 419.332972][T15118] EXT4-fs (loop9): I/O error while writing superblock [ 419.354533][T15118] EXT4-fs error (device loop9): ext4_dirty_inode:6497: inode #18: comm syz.9.3335: mark_inode_dirty error [ 419.378199][T15118] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 419.393021][T15118] EXT4-fs (loop9): I/O error while writing superblock [ 419.401181][T15118] EXT4-fs error (device loop9): ext4_get_inode_loc:4937: inode #18: block 9: comm syz.9.3335: unable to read itable block [ 419.436747][T15118] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 419.456262][T15118] EXT4-fs (loop9): I/O error while writing superblock [ 419.466068][T15118] EXT4-fs error (device loop9): ext4_get_max_inline_size:121: inode #18: comm syz.9.3335: can't get inode location 18 [ 419.478999][T15118] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 419.487442][T15118] EXT4-fs (loop9): I/O error while writing superblock [ 419.494604][T15118] EXT4-fs error (device loop9): ext4_get_inode_loc:4937: inode #18: block 9: comm syz.9.3335: unable to read itable block [ 419.507692][T15118] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 419.518705][T15118] EXT4-fs (loop9): I/O error while writing superblock [ 419.525577][T15118] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6293: IO failure [ 419.534925][T15118] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 419.543375][T15118] EXT4-fs (loop9): I/O error while writing superblock [ 419.550637][T15118] EXT4-fs error (device loop9): ext4_dirty_inode:6497: inode #18: comm syz.9.3335: mark_inode_dirty error [ 419.562398][T15118] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 419.570902][T15118] EXT4-fs (loop9): I/O error while writing superblock [ 419.578130][T15118] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.3335: Error while async write back metadata [ 419.591106][T15138] netlink: 676 bytes leftover after parsing attributes in process `syz.2.3342'. [ 419.602393][T15118] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 419.707466][T15136] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 419.737618][T10132] EXT4-fs warning (device loop9): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 419.785866][ T7569] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.854399][ T7569] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.919067][ T7569] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.971051][ T7569] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.083286][ T7569] vlan2: left allmulticast mode [ 420.095617][ T7569] geneve0: left allmulticast mode [ 420.106019][ T7569] vlan2: left promiscuous mode [ 420.116960][ T7569] geneve0: left promiscuous mode [ 420.127723][ T7569] bridge0: port 3(vlan2) entered disabled state [ 420.142343][ T7569] bridge_slave_1: left allmulticast mode [ 420.154455][ T7569] bridge_slave_1: left promiscuous mode [ 420.165998][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.174101][ T7569] bridge_slave_0: left allmulticast mode [ 420.179841][ T7569] bridge_slave_0: left promiscuous mode [ 420.186746][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.284461][T15164] FAULT_INJECTION: forcing a failure. [ 420.284461][T15164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.298847][T15164] CPU: 0 UID: 0 PID: 15164 Comm: syz.0.3354 Tainted: G W syzkaller #0 PREEMPT(full) [ 420.298958][T15164] Tainted: [W]=WARN [ 420.298971][T15164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 420.298988][T15164] Call Trace: [ 420.298996][T15164] [ 420.299005][T15164] __dump_stack+0x1d/0x30 [ 420.299047][T15164] dump_stack_lvl+0x95/0xd0 [ 420.299117][T15164] dump_stack+0x15/0x1b [ 420.299146][T15164] should_fail_ex+0x263/0x280 [ 420.299177][T15164] should_fail+0xb/0x20 [ 420.299275][T15164] should_fail_usercopy+0x1a/0x20 [ 420.299363][T15164] _copy_from_iter+0xcf/0xea0 [ 420.299398][T15164] ? __alloc_skb+0x4f6/0x690 [ 420.299426][T15164] ? __alloc_skb+0x200/0x690 [ 420.299473][T15164] netlink_sendmsg+0x4ae/0x6f0 [ 420.299515][T15164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.299553][T15164] ____sys_sendmsg+0x563/0x5b0 [ 420.299589][T15164] ___sys_sendmsg+0x195/0x1e0 [ 420.299722][T15164] __x64_sys_sendmsg+0xd4/0x160 [ 420.299760][T15164] x64_sys_call+0x194c/0x3020 [ 420.299793][T15164] do_syscall_64+0x12c/0x3b0 [ 420.299854][T15164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.299876][T15164] RIP: 0033:0x7fdfe6e3c819 [ 420.299923][T15164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.299948][T15164] RSP: 002b:00007fdfe5897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.299973][T15164] RAX: ffffffffffffffda RBX: 00007fdfe70b5fa0 RCX: 00007fdfe6e3c819 [ 420.299992][T15164] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 420.300059][T15164] RBP: 00007fdfe5897090 R08: 0000000000000000 R09: 0000000000000000 [ 420.300075][T15164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.300160][T15164] R13: 00007fdfe70b6038 R14: 00007fdfe70b5fa0 R15: 00007ffe7fccf7b8 [ 420.300181][T15164] [ 420.497073][T15166] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000 [ 420.505713][ T7569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.523269][ T7569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.534545][ T7569] bond0 (unregistering): Released all slaves [ 420.556773][T15178] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3356'. [ 420.614984][T15178] loop3: detected capacity change from 0 to 512 [ 420.628570][T15147] lo speed is unknown, defaulting to 1000 [ 420.699840][T15183] netlink: 676 bytes leftover after parsing attributes in process `syz.0.3357'. [ 420.740471][T15178] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 420.753706][ T7569] hsr_slave_0: left promiscuous mode [ 420.773648][ T7569] hsr_slave_1: left promiscuous mode [ 420.789384][ T7569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.805726][ T7569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.813573][T15178] EXT4-fs (loop3): 1 truncate cleaned up [ 420.823162][ T7569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.843130][T15178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.872229][T15181] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 420.952425][ T7569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.976297][ T7569] veth1_macvtap: left promiscuous mode [ 420.994950][ T7569] veth0_macvtap: left promiscuous mode [ 421.000648][ T7569] veth1_vlan: left promiscuous mode [ 421.010350][ T7569] veth0_vlan: left promiscuous mode [ 421.270354][T15208] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000 [ 421.531711][ T7569] team0 (unregistering): Port device team_slave_1 removed [ 421.546385][ T7569] team0 (unregistering): Port device team_slave_0 removed [ 421.647623][T15147] lo speed is unknown, defaulting to 1000 [ 421.705196][ T3040] 8021q: adding VLAN 0 to HW filter on device eth17 [ 421.759708][T14193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.912713][T15147] chnl_net:caif_netlink_parms(): no params data found [ 423.627599][T15147] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.664239][T15147] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.689052][T15147] bridge_slave_0: entered allmulticast mode [ 423.717117][T15147] bridge_slave_0: entered promiscuous mode [ 423.745823][T15147] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.753420][ T7569] IPVS: stop unused estimator thread 0... [ 423.792377][T15147] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.855477][T15147] bridge_slave_1: entered allmulticast mode [ 423.862381][T15147] bridge_slave_1: entered promiscuous mode [ 423.897817][T15147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.909668][T15200] lo speed is unknown, defaulting to 1000 [ 423.916039][T15147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.925827][T15241] loop3: detected capacity change from 0 to 512 [ 424.052861][T15259] netlink: 676 bytes leftover after parsing attributes in process `syz.8.3369'. [ 424.073836][ T7569] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.086681][T15241] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 424.108327][ T3040] 8021q: adding VLAN 0 to HW filter on device eth18 [ 424.128135][T15200] lo speed is unknown, defaulting to 1000 [ 424.137211][T15147] team0: Port device team_slave_0 added [ 424.149376][ T7569] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.175084][T15147] team0: Port device team_slave_1 added [ 424.198113][T15241] EXT4-fs (loop3): 1 truncate cleaned up [ 424.210194][T15241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.231786][ T7569] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.299225][T15147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.322488][T15147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.367041][T15147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.388771][ T7569] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.410489][T15269] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 424.417097][T15269] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 424.463725][T15269] vhci_hcd vhci_hcd.0: Device attached [ 424.585379][T15147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.599062][T15147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.625563][T15147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.719368][ T3040] 8021q: adding VLAN 0 to HW filter on device eth19 [ 424.857393][T15270] vhci_hcd: connection closed [ 424.964272][T15147] hsr_slave_0: entered promiscuous mode [ 425.029791][T15147] hsr_slave_1: entered promiscuous mode [ 425.067322][T15147] debugfs: 'hsr0' already exists in 'hsr' [ 425.100553][T15147] Cannot create hsr debugfs directory [ 425.195485][ T36] vhci_hcd vhci_hcd.3: stop threads [ 425.200915][ T36] vhci_hcd vhci_hcd.3: release socket [ 425.206419][ T3566] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 425.214283][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 425.248296][ T7569] vlan2: left allmulticast mode [ 425.260358][ T7569] geneve0: left allmulticast mode [ 425.265644][ T7569] vlan2: left promiscuous mode [ 425.272392][ T7569] geneve0: left promiscuous mode [ 425.278339][ T7569] bridge0: port 3(vlan2) entered disabled state [ 425.287706][ T7569] bridge_slave_1: left allmulticast mode [ 425.293635][ T7569] bridge_slave_1: left promiscuous mode [ 425.308865][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.321221][ T7569] bridge_slave_0: left allmulticast mode [ 425.329727][ T7569] bridge_slave_0: left promiscuous mode [ 425.335435][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.366404][T14193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.521836][ T7569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.532212][ T7569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.542422][ T7569] bond0 (unregistering): Released all slaves [ 425.550482][ T3040] 8021q: adding VLAN 0 to HW filter on device eth20 [ 425.574660][T15200] chnl_net:caif_netlink_parms(): no params data found [ 425.688751][ T7569] hsr_slave_0: left promiscuous mode [ 425.695764][ T7569] hsr_slave_1: left promiscuous mode [ 425.702292][ T7569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.710064][ T7569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.718230][ T7569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.725910][ T7569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.737541][ T7569] veth1_macvtap: left promiscuous mode [ 425.743366][ T7569] veth0_macvtap: left promiscuous mode [ 425.749203][ T7569] veth1_vlan: left promiscuous mode [ 425.754697][ T7569] veth0_vlan: left promiscuous mode [ 425.762796][T15325] netlink: 'syz.8.3376': attribute type 2 has an invalid length. [ 425.848898][ T7569] team0 (unregistering): Port device team_slave_1 removed [ 425.859912][ T7569] team0 (unregistering): Port device team_slave_0 removed [ 425.943757][T15200] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.951232][T15200] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.958872][T15200] bridge_slave_0: entered allmulticast mode [ 425.965557][T15200] bridge_slave_0: entered promiscuous mode [ 425.981140][T15200] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.988749][T15200] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.996365][T15200] bridge_slave_1: entered allmulticast mode [ 426.006430][T15200] bridge_slave_1: entered promiscuous mode [ 426.052244][T15200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.077093][T15200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.107795][T15200] team0: Port device team_slave_0 added [ 426.115815][T15200] team0: Port device team_slave_1 added [ 426.155218][T15200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.163301][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.190630][T15200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.221731][T15200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.230455][T15200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.271862][T15200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.283110][T15343] FAULT_INJECTION: forcing a failure. [ 426.283110][T15343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.302715][T15345] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3379'. [ 426.312118][T15343] CPU: 1 UID: 0 PID: 15343 Comm: syz.0.3378 Tainted: G W syzkaller #0 PREEMPT(full) [ 426.312157][T15343] Tainted: [W]=WARN [ 426.312166][T15343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 426.312226][T15343] Call Trace: [ 426.312234][T15343] [ 426.312244][T15343] __dump_stack+0x1d/0x30 [ 426.312297][T15343] dump_stack_lvl+0x95/0xd0 [ 426.312329][T15343] dump_stack+0x15/0x1b [ 426.312358][T15343] should_fail_ex+0x263/0x280 [ 426.312443][T15343] should_fail+0xb/0x20 [ 426.312473][T15343] should_fail_usercopy+0x1a/0x20 [ 426.312508][T15343] _copy_to_user+0x20/0xa0 [ 426.312545][T15343] simple_read_from_buffer+0xb5/0x130 [ 426.312664][T15343] proc_fail_nth_read+0x10e/0x150 [ 426.312699][T15343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.312733][T15343] vfs_read+0x1ab/0x7f0 [ 426.312911][T15343] ? __rcu_read_unlock+0x4e/0x70 [ 426.312942][T15343] ? __fget_files+0x184/0x1c0 [ 426.312965][T15343] ? mutex_lock+0x57/0x90 [ 426.313005][T15343] ksys_read+0xdc/0x1a0 [ 426.313040][T15343] __x64_sys_read+0x40/0x50 [ 426.313133][T15343] x64_sys_call+0x2886/0x3020 [ 426.313249][T15343] do_syscall_64+0x12c/0x3b0 [ 426.313280][T15343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.313346][T15343] RIP: 0033:0x7fdfe6dfd04e [ 426.313368][T15343] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 426.313401][T15343] RSP: 002b:00007fdfe5896fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.313430][T15343] RAX: ffffffffffffffda RBX: 00007fdfe58976c0 RCX: 00007fdfe6dfd04e [ 426.313509][T15343] RDX: 000000000000000f RSI: 00007fdfe58970a0 RDI: 0000000000000004 [ 426.313526][T15343] RBP: 00007fdfe5897090 R08: 0000000000000000 R09: 0000000000000000 [ 426.313540][T15343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.313552][T15343] R13: 00007fdfe70b6038 R14: 00007fdfe70b5fa0 R15: 00007ffe7fccf7b8 [ 426.313573][T15343] [ 426.401188][T15346] loop3: detected capacity change from 0 to 512 [ 426.643014][T15346] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 426.668750][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3380'. [ 426.690825][T15346] EXT4-fs (loop3): 1 truncate cleaned up [ 426.703712][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3380'. [ 426.706292][T15346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.728635][ T3040] 8021q: adding VLAN 0 to HW filter on device eth21 [ 426.783323][T15200] hsr_slave_0: entered promiscuous mode [ 426.799097][T15200] hsr_slave_1: entered promiscuous mode [ 426.810170][T15200] debugfs: 'hsr0' already exists in 'hsr' [ 426.821344][T15200] Cannot create hsr debugfs directory [ 426.864603][T15147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 426.875402][T15147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.889679][T15147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 426.903518][T15147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.926223][T15147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 426.937407][T15147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.955967][T15147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 426.965658][T15147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.002354][ T3040] 8021q: adding VLAN 0 to HW filter on device eth22 [ 427.047850][T15147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.064074][T15147] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.077452][ T7563] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.084665][ T7563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.101196][ T7569] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.108336][ T7569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.179166][T14193] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.229328][T15147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.268274][T15200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 427.278727][T15200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.287213][T15200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 427.305067][T15200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.314726][T15200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 427.324978][T15200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.333715][T15200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 427.345940][T15200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.436968][T15432] netlink: 676 bytes leftover after parsing attributes in process `syz.3.3386'. [ 427.559451][T15200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.575199][T15442] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 427.608403][ T28] audit: type=1326 audit(1776359181.901:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.0.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 427.620808][T15200] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.666932][ T28] audit: type=1326 audit(1776359181.901:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.0.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 427.702522][ T7569] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.709721][ T7569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.740814][ T28] audit: type=1326 audit(1776359181.901:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.0.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 427.756745][ T7569] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.771535][ T7569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.778145][ T28] audit: type=1326 audit(1776359181.901:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.0.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 427.810355][ T28] audit: type=1326 audit(1776359181.901:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.0.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 427.834787][ T28] audit: type=1326 audit(1776359181.911:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.0.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 427.904782][T15460] bridge0: port 3(vlan3) entered blocking state [ 427.912821][T15460] bridge0: port 3(vlan3) entered disabled state [ 427.919310][ T28] audit: type=1326 audit(1776359181.911:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.0.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 427.944118][T15460] vlan3: entered allmulticast mode [ 427.949580][T15460] geneve0: entered allmulticast mode [ 427.958944][T15460] vlan3: entered promiscuous mode [ 427.964137][T15460] geneve0: entered promiscuous mode [ 427.969583][ T28] audit: type=1326 audit(1776359181.911:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.0.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 428.007116][ T28] audit: type=1326 audit(1776359181.911:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.0.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 428.039574][ T28] audit: type=1326 audit(1776359181.911:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15445 comm="syz.0.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfe6e3c819 code=0x7ffc0000 [ 428.071551][T15147] veth0_vlan: entered promiscuous mode [ 428.081257][T15147] veth1_vlan: entered promiscuous mode [ 428.137509][T15147] veth0_macvtap: entered promiscuous mode [ 428.154330][T15147] veth1_macvtap: entered promiscuous mode [ 428.162253][T15489] netlink: 116 bytes leftover after parsing attributes in process `syz.8.3395'. [ 428.178039][T15147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.197150][T15147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.217915][ T7559] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.231699][ T7559] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.252628][ T7559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.270377][ T7559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.303777][T15200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.488948][T15200] veth0_vlan: entered promiscuous mode [ 428.505527][T15524] loop4: detected capacity change from 0 to 4096 [ 428.519730][T15200] veth1_vlan: entered promiscuous mode [ 428.531468][T15524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.568292][T15200] veth0_macvtap: entered promiscuous mode [ 428.576219][T15200] veth1_macvtap: entered promiscuous mode [ 428.588705][T15200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.603039][T15147] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.604967][T15200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.634250][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.652887][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.716041][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.726445][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3397'. [ 428.743150][T15535] loop4: detected capacity change from 0 to 4096 [ 428.764032][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.786819][T15535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.805544][T15539] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 428.835088][T15535] EXT4-fs error (device loop4): ext4_do_update_inode:5604: inode #15: comm syz.4.3399: corrupted inode contents [ 428.855731][T15535] EXT4-fs error (device loop4): ext4_dirty_inode:6497: inode #15: comm syz.4.3399: mark_inode_dirty error [ 428.867526][T15535] EXT4-fs error (device loop4): ext4_do_update_inode:5604: inode #15: comm syz.4.3399: corrupted inode contents [ 428.882825][T15535] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.3399: mark_inode_dirty error [ 428.934891][T15535] EXT4-fs error (device loop4): ext4_do_update_inode:5604: inode #15: comm syz.4.3399: corrupted inode contents [ 428.949434][T15535] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.3399: mark_inode_dirty error [ 428.970748][T15535] EXT4-fs error (device loop4): ext4_do_update_inode:5604: inode #15: comm syz.4.3399: corrupted inode contents [ 428.983420][T15535] EXT4-fs error (device loop4): ext4_truncate:4604: inode #15: comm syz.4.3399: mark_inode_dirty error [ 429.000318][T15535] EXT4-fs error (device loop4) in ext4_setattr:6030: Corrupt filesystem [ 429.061322][T15147] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.074510][T15557] loop3: detected capacity change from 0 to 512 [ 429.285441][T15561] loop2: detected capacity change from 0 to 1024 [ 429.369411][T15561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.589658][T15557] FAT-fs (loop3): Directory bread(block 199916) failed [ 429.615750][T15557] FAT-fs (loop3): Directory bread(block 199917) failed [ 429.648689][T15557] FAT-fs (loop3): Directory bread(block 199918) failed [ 429.662856][T15557] FAT-fs (loop3): Directory bread(block 199919) failed [ 429.673747][T15557] FAT-fs (loop3): Directory bread(block 199920) failed [ 429.705546][T15557] FAT-fs (loop3): Directory bread(block 199921) failed [ 429.730761][T15557] FAT-fs (loop3): Directory bread(block 199922) failed [ 429.760748][T15557] FAT-fs (loop3): Directory bread(block 199923) failed [ 429.817407][T15580] lo speed is unknown, defaulting to 1000 [ 429.863665][T15200] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.880854][T15557] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3402'. [ 429.925895][T15592] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3408'. [ 429.945216][T15580] lo speed is unknown, defaulting to 1000 [ 430.006187][T15592] loop2: detected capacity change from 0 to 512 [ 430.043860][ T3566] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 430.084604][T15592] /dev/loop2: Can't open blockdev [ 430.235680][T15582] lo speed is unknown, defaulting to 1000 [ 430.256674][ T6374] ================================================================== [ 430.264829][ T6374] BUG: KCSAN: data-race in touch_atime / touch_atime [ 430.271542][ T6374] [ 430.273884][ T6374] write to 0xffff888107914ff8 of 4 bytes by task 3305 on cpu 0: [ 430.281530][ T6374] touch_atime+0x1d7/0x330 [ 430.285973][ T6374] do_readlinkat+0x137/0x2f0 [ 430.290595][ T6374] __x64_sys_readlink+0x47/0x60 [ 430.295471][ T6374] x64_sys_call+0x2b51/0x3020 [ 430.300192][ T6374] do_syscall_64+0x12c/0x3b0 [ 430.304816][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.310733][ T6374] [ 430.313074][ T6374] read to 0xffff888107914ff8 of 4 bytes by task 6374 on cpu 1: [ 430.320633][ T6374] touch_atime+0x16c/0x330 [ 430.325096][ T6374] do_readlinkat+0x137/0x2f0 [ 430.329737][ T6374] __x64_sys_readlink+0x47/0x60 [ 430.334610][ T6374] x64_sys_call+0x2b51/0x3020 [ 430.339321][ T6374] do_syscall_64+0x12c/0x3b0 [ 430.343970][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.349888][ T6374] [ 430.352228][ T6374] value changed: 0x2779e7c0 -> 0x295a7731 [ 430.357972][ T6374] [ 430.360311][ T6374] Reported by Kernel Concurrency Sanitizer on: [ 430.366481][ T6374] CPU: 1 UID: 0 PID: 6374 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 430.376922][ T6374] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 430.380748][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 430.390832][ T6374] ================================================================== [ 430.530119][ T7569] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 430.675736][ T7569] bond1 (unregistering): Released all slaves [ 430.694015][ T7569] bond2 (unregistering): Released all slaves [ 430.713217][ T7569] bond0 (unregistering): Released all slaves [ 430.725327][ T7569] bond3 (unregistering): Released all slaves [ 430.737839][T15582] lo speed is unknown, defaulting to 1000 [ 430.765251][ T7569] IPVS: stopping backup sync thread 9508 ... [ 430.842627][ T7569] hsr_slave_0: left promiscuous mode [ 430.856655][ T7569] hsr_slave_1: left promiscuous mode [ 430.883799][ T7569] pim6reg (unregistering): left allmulticast mode [ 431.249709][ T7569] IPVS: stop unused estimator thread 0... [ 431.306438][ T7569] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.371233][ T7569] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.419378][ T7569] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.476334][ T7569] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.544283][ T7569] bridge_slave_1: left allmulticast mode [ 431.550269][ T7569] bridge_slave_1: left promiscuous mode [ 431.556033][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.564303][ T7569] bridge_slave_0: left allmulticast mode [ 431.570127][ T7569] bridge_slave_0: left promiscuous mode [ 431.575871][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.684782][ T7569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.695315][ T7569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.705194][ T7569] bond0 (unregistering): Released all slaves [ 431.721576][ T3040] 8021q: adding VLAN 0 to HW filter on device eth13 [ 431.828494][ T7569] hsr_slave_0: left promiscuous mode [ 431.834395][ T7569] hsr_slave_1: left promiscuous mode [ 431.840316][ T7569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.848969][ T7569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.857047][ T7569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.865394][ T7569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.876255][ T7569] veth1_macvtap: left promiscuous mode [ 431.881814][ T7569] veth0_macvtap: left promiscuous mode [ 431.887526][ T7569] veth1_vlan: left promiscuous mode [ 431.892845][ T7569] veth0_vlan: left promiscuous mode [ 431.966532][ T7569] team0 (unregistering): Port device team_slave_1 removed [ 431.976630][ T7569] team0 (unregistering): Port device team_slave_0 removed [ 432.013880][ T3040] 8021q: adding VLAN 0 to HW filter on device eth15 [ 432.126834][ T3040] 8021q: adding VLAN 0 to HW filter on device eth14 [ 432.239053][ T3040] 8021q: adding VLAN 0 to HW filter on device eth16 [ 432.324425][ T7569] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.362814][ T3040] 8021q: adding VLAN 0 to HW filter on device eth21 [ 432.373771][ T7569] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.419563][ T7569] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.477197][ T7569] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.504688][ T3040] 8021q: adding VLAN 0 to HW filter on device eth22 [ 432.535712][ T7569] bridge_slave_1: left allmulticast mode [ 432.541562][ T7569] bridge_slave_1: left promiscuous mode [ 432.547324][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.555623][ T7569] bridge_slave_0: left allmulticast mode [ 432.561547][ T7569] bridge_slave_0: left promiscuous mode [ 432.567321][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.675827][ T7569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.686315][ T7569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.696020][ T7569] bond0 (unregistering): Released all slaves [ 432.704055][ T3040] 8021q: adding VLAN 0 to HW filter on device eth23 [ 432.767141][ T7569] hsr_slave_0: left promiscuous mode [ 432.773121][ T7569] hsr_slave_1: left promiscuous mode [ 432.780006][ T7569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.787968][ T7569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.795811][ T7569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.805353][ T7569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.817249][ T7569] veth1_macvtap: left promiscuous mode [ 432.822819][ T7569] veth0_macvtap: left promiscuous mode [ 432.829062][ T7569] veth1_vlan: left promiscuous mode [ 432.834390][ T7569] veth0_vlan: left promiscuous mode [ 432.911839][ T7569] team0 (unregistering): Port device team_slave_1 removed [ 432.922026][ T7569] team0 (unregistering): Port device team_slave_0 removed [ 432.958013][ T3040] 8021q: adding VLAN 0 to HW filter on device eth24 [ 433.079310][ T3040] 8021q: adding VLAN 0 to HW filter on device eth25 [ 433.190142][ T3040] 8021q: adding VLAN 0 to HW filter on device eth26 [ 433.302418][ T3040] 8021q: adding VLAN 0 to HW filter on device eth27 [ 433.412230][ T3040] 8021q: adding VLAN 0 to HW filter on device eth28