last executing test programs: 5m57.833701017s ago: executing program 32 (id=65): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 5m48.404615785s ago: executing program 33 (id=189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="dffdc9f716868befb9a600000001", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 5) 5m45.287796496s ago: executing program 34 (id=238): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100), 0x0, 0x540f, 0x0, 0x2000) 5m12.35228399s ago: executing program 35 (id=841): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pipe(0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) 5m3.336673384s ago: executing program 36 (id=950): r0 = syz_clone3(&(0x7f0000001880)={0x1008c0600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fa, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) open(0x0, 0x64042, 0x1e9) r4 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) truncate(&(0x7f0000000440)='./file0\x00', 0x7) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x1f215}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x8100, 0x0, 0x40811}, 0x2800804c) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0x18000000000002a0, 0x37, 0x0, &(0x7f0000000240)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01679fa5680155e0adbcacfefbaeb0e05b0cb581f4abd3", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x1, 0x86) 4m52.647978735s ago: executing program 37 (id=1106): r0 = socket(0x2, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xcc, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x88, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x52, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x114}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8000000120001002dbd7000fedbdf2520010000000000000000000000000000000004d40200ff0028001a00ac1414aa000000000000000000000000e00000010000000000000000000000000a00060508001e0000080000300017000500000025bd70002cbd700026bd700029bd70000e00000005000000f91c000007000000e20d00000900000014000e000a0101010000000000000000000000000a00100000000000000000001ff50c12da7a291ac73a4bb5a1cead"], 0xa8}}, 0xc800) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x40000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x8, 0x80010, r1, 0xc7b2000) capget(&(0x7f0000feaff9)={0x20080522}, &(0x7f0000000000)) mq_open(&(0x7f0000000040)='&\x00', 0x40, 0x80, &(0x7f0000000100)={0x269c5f9f, 0x8, 0x4, 0x3}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) capset(&(0x7f0000000340)={0x19980330, r3}, &(0x7f0000000380)={0x8, 0x6, 0x50e, 0x400, 0x100, 0x90000000}) wait4(r3, &(0x7f00000003c0), 0x1, &(0x7f0000000400)) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}, {0x0}], 0x2, 0x0, 0x0, 0x4c880}, 0x48800) 4m25.309814204s ago: executing program 38 (id=1514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x1000, 0x50ffff, 0xffffff88, 0x3}) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002a00)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) 3m23.445868328s ago: executing program 39 (id=2677): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10003, 0x3, 0x1, 0x8, 0x20005, 0xb900, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000979000/0x9000)=nil, 0x9000, 0x3, 0x94053, r1, 0x3000) perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x1800000000000000}, 0x102cc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa000000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3m5.221889297s ago: executing program 40 (id=3005): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x41, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x30d080, 0x10, 0x1}, 0x0, 0x18, 0x0, 0x12345}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x1e75, 0x82ffff, 0xe, 0x0, 0xe) gettid() r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r5}, 0x0) io_setup(0x9, &(0x7f0000000240)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x1d0, 0x110, 0x110, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0x2a0, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [], 0x0, 0x2}}}]}, @common=@SET={0x60}}, {{@ip={@remote, @multicast1, 0xff, 0xff, 'ipvlan0\x00', 'ipvlan1\x00', {}, {}, 0x21, 0x3, 0x51}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 3m1.9017803s ago: executing program 3 (id=3069): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4603fc0040ff7f00000000000002003e00edfffbff94020000000000004000000000000000dd0100000000000010000000000038000100000002000000030000000300000004000000000000000900000000000000c801000000000000e6"], 0xe8) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) r0 = syz_io_uring_setup(0x1a0, &(0x7f0000000380)={0x0, 0x60d0, 0x1, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) 3m1.804605616s ago: executing program 3 (id=3072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000880)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x50}}, 0x0) 3m1.521438092s ago: executing program 3 (id=3079): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x60}}]}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}}, 0x0) 3m1.449122897s ago: executing program 41 (id=3079): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x60}}]}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}}, 0x0) 3m0.328948472s ago: executing program 42 (id=3096): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x800, 0x0, 0x800001, 0x6, 0xd4, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xf7f8000000000001, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() 1m40.653245441s ago: executing program 43 (id=4440): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) close(r0) 1m37.453623617s ago: executing program 44 (id=4771): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x6) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000180)='!\x00', &(0x7f00000001c0)='./file0\x00', r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000180)=""/183, 0xb7, 0x7f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYRES32=r4, @ANYBLOB="0100000014000100fe88000000000000000000000000010114000100fe8000000000000000000000000000bb0800020007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000110}, 0x4040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="25873c79e9ff000000001600000004000180e1bc89c8a8b2a38910b80eade3330900f8bf2438e1475fcb20927689ae32fec4fd7ad95d91b14bc909f722aabe8acaff74413221f282927a34a0e5b51f780fda580a05e00a52ce3511150f9d939482c482fd094a6ee1a9fd038bc092bbe52508c94b25e5052038e1cac7ad6c43cf0feb0cada8e872a4504fcc2d20af8ee97805f2b5f487e41987b0226f268c90347020b62370ceea285998b99958fd49d324fe227c81b25e5392ef497d378cf4c1923f319ac39fae55dd6390c2476d5026ff72c20affe36630a537b70bf7e9f32d2b60e1755d43b85e11e717bd8481f4793171930b7a8d812bccee61547dd6f176dbcfd1eb6288e8a2a97b67553a9bd4a9ad0d19c8f4e3baf9ea2ace711d69d19671739be1c334", @ANYRESDEC=r2, @ANYRES8=r6], 0x18}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m27.803865488s ago: executing program 0 (id=4912): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x40, 0x980) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0xc, 0x1, 0x7fff, 0x9, 0x1, 0xffffffffffffffff}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xa4f2, 0x100, 0x7f, 0x4, 0xb, r1}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x80000001, 0x4) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000000180)) r4 = socket(0x20, 0x6, 0x7fff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000200)) r6 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x2, 0x10, 0x4, 0x5, 0x0, 0x6, 0xa0004, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000240), 0xf}, 0x14081, 0x6, 0x8, 0x3, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, r2, 0xb, 0xffffffffffffffff, 0x2) fcntl$setpipe(r0, 0x407, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'tunl0\x00', 0x0, 0x8, 0x7800, 0xdf8, 0x8, {{0xe, 0x4, 0x0, 0x3d, 0x38, 0x66, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, {[@timestamp={0x44, 0x10, 0x36, 0x0, 0x5, [0x0, 0xda, 0x1eaf]}, @end, @noop, @lsrr={0x83, 0x7, 0x32, [@dev={0xac, 0x14, 0x14, 0x1d}]}, @timestamp={0x44, 0x8, 0x39, 0x0, 0x8, [0x6]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f80)={'tunl0\x00', &(0x7f0000000ec0)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x7, 0xfffffc01, {{0x25, 0x4, 0x1, 0x2e, 0x94, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast1, @private=0xa010102, {[@timestamp={0x44, 0x8, 0x52, 0x0, 0xb, [0x5]}, @timestamp_prespec={0x44, 0x1c, 0xca, 0x3, 0x5, [{@remote, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x4}]}, @cipso={0x86, 0x4c, 0x3, [{0x6, 0x12, "c508070eb488ee7685ce13ee9a6fc89f"}, {0x6, 0xc, "07a79a00f4afdfb894fd"}, {0x7, 0x7, "20c4fee370"}, {0x0, 0xd, "d3cd16c77b5bde1fd7eb12"}, {0x6, 0x8, "3ea615177ad1"}, {0x2, 0xa, "5db85c1e6e69f229"}, {0x2, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x3d, 0x1, 0x6, [{@private=0xa010102, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmmsg$inet(r4, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="fe0e74806c19aac172ed63f2b30e85f590c85325b459566d3acdca3b669fefa04608b60003fc4d8d79cc4860a2181164e36383e396d30d8da2d91c9d80a6563b069365ca102b2f00cc3fafd19c03e653db50095b187481f5bb01391f39b1d08a46c3c5805a37bf285757190e7288c797f1fa14a3261ca56c7fe07c2d711165426313fda9d3cacd521c0d84b7be8b0040cf2ebf1c241766588a491b2c1f7d12ba80735f4663028e73f10deefee5c3663a7f77f06fa2473c6c", 0xb8}, {&(0x7f00000003c0)="effedfe7b713dc0d6e8d8dc04a327d844639fb60bc9f40ef66c7b45998e2cfe582fcb24e73929014080caedaeec3abf7e0", 0x31}], 0x2, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}], 0x20}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000500)="53fca7f1c38c817102be29afe5bf804a6c4dc9229d899620b1bc8d5508a9cb04bc3d9f06b1eb93780088e8ea74a484a7d1373f09383ba9acc5d856df3571b87ae6ca3106377b63ac1664a6df4642d08122cfc56a5b914560849a6b4e5ec3fe5031db910b1ec0bb86d8485eb25297703f182535bfb944193a125693ca3d8a0ad924c2fe9fc60c3cc8b0a577a19be55c50a4bc46cae29f83f4583f1c9a4d67e1a05265a1df03c43a25891046d33e901c10cdd099fda686c64c2c0e2ad2f1a6d244417fc20fb494a147e1630a0d6e0ad3a4068b63c14997fdb22e1945fecef346f88546477ee937a5", 0xe7}, {&(0x7f0000000600)="0650b37683eef656c639664708107826c390ed19847b24a325e4ed654e287badd663980805d7d11a9d3bdd50693b0aeb96352e6a6dd18bff2271c2a95e2654183ce617a01a9cf9981cc165d77466302c110ba273b3f9", 0x56}, {&(0x7f0000000680)="eacbab290c9f79e6dcd4c5390ca09a24887472482de87d04957f8d4b878226cc12f7d45e8ec026b37db341278234c8af9e99c09ad72459eeb4ee582ad50a285064c08583c80caf5a791d19db14343c36", 0x50}, {&(0x7f0000000700)="0d75e8ea57472ce2a822d1fef305f23af69d02cbc8e4323e61f5447882464c83a5b652fa21ab16a1a31ab9a19a674fc3934a03eb992a13c0d49261669728683eddbc7301e11cc8ee7d33eb698ef1353aa5ebb014ddab394e6a3668288d84eaaab3d65bb335ee07c753915c83e3868498c58d56b122234d8c5a74e1ec577f7cd035", 0x81}, {&(0x7f00000007c0)="6025d62b991ae0ddc87829a0fc611b4fe6fb9e895d746f1806ddab3beed2c4963a835c7335757830f2f2a5dc937f29db532ce8aa2346ce99cc915ffd2576e3943c7b88d9ac8d09478ce814f5e44bec122ce95500d7b8d54b48699b8ef50f4a4e7cbb267f45e3bfd3cf608a2c389b600d43635973fffc0d", 0x77}, {&(0x7f0000000840)="a0693249a1638e90ebd693c1df66426dfbf82e23da8fca9d8afd63cbf296694e96389b7a386e1926a7318e93d1d584a00707097efeb0ad734386e1bc3fee6053ab68fda6a197b5d7b51e9af8545f065d35a5078e61eaa37d01253f21ef31337090b92efe2bcdaf2a131aefbc9c0907914924d03ce6a186737e24d72161f681890c4be5f29b818413", 0x88}], 0x6, &(0x7f0000000980)}}, {{&(0x7f00000009c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000a00)="a9cf9fa6439f120f27532a7a604eb5eee481e3bab796f01550a7a328cbe7eefadf612ccb3e6a593aaeec0ba6ec6c41", 0x2f}, {&(0x7f0000000a40)="47eaf37eb9f6ae25a023baf7d4848eb17ea7a68369387e30ee3682475b54c3d262b8f7bc0b", 0x25}, {&(0x7f0000000a80)="49288734935c411b3f7bdc943438fe9269c77118e6d60d6c273a5e34fc34ca75d1c2883f635625e2335c04eeb6e0432616a0de244a2ad585e5f1bea96023f5c65ca1ececcc68cfb3c25b80741e61a2de2dd7ec659bcc6e5cece4905320d92f310a55fb11d3f09132cf358ae09bde421af078b832cf5faa471020e33625ab865631c9f4b2e168740f33351f4f5414eeda2337084d9d15223f90c2fb5dd04c9f95e9de35ac98d49eb132028bcd644bf1da8b1879d14c", 0xb5}, {&(0x7f0000000b40)="ba093434d44cb513043f570c8704591bea0b473b819ac92602565dbaefb54e70beb0afc4eff2003b43bdc810b9cea0e107344273fb892be1cf1784dfce001ea8915c701ead0934df4c3e1d7ee6e4b137427bbed5674702cc79e0630a900791b693706ece3a10cb7ebc441b9e0191f9543bc106ef94f959405966ff04c73c02b2ec7be8ec02abc48e1228cdc87a4a028e5a313a2845ef190410aa1da8134baeb272952ae1ff4a9a3d3f3a1b50bf0ecb6a6a371619f38a0c79d36de48bfcaa8353123577f7db940c66f57f4356bcccc27539a78932cd5e46008f9fe21b", 0xdc}, {&(0x7f0000000c40)="07e109babf575b1d6cd9d3e47c9124f7df7f7f234f09394a463780940c62b66e97059208e9020952803c76bbf6d372fbcecceb3ca5c58e7bb33fd2ee821fa2f316b8f313d984a56b060da4ddd138148c6fd1b43139d03ad7f2d7c442dbdad89f3cd6ab304e8719a14279849c520f77cfbe4fd5fb822ed55d5f5aad8dd26dcb6695f1f912afebb8eea5f445c851057068be82d1dac709e8fdd724a8b15ce46eb6413e2f40c0e6421ffa64135ed38855ee815a92fe512581dcb3c59570291c3d1c644652ed453c3fa4632d97dfb1045467ee2e4f2a5e1afddd0304b0530126cc7bf3a4c86c134dbe00dd3c5bad48e1218db7b016232ed8", 0xf6}], 0x5, &(0x7f0000000fc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x5e, 0x0, 0x4, [0x1000, 0x6, 0x3]}, @rr={0x7, 0x7, 0xe6, [@dev={0xac, 0x14, 0x14, 0x40}]}, @cipso={0x86, 0x17, 0x1, [{0x5, 0x2}, {0x5, 0xf, "efb02162504be5ac7c3484cfea"}]}, @rr={0x7, 0x13, 0x66, [@dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x17, 0x76, [@multicast1, @rand_addr=0x64010100, @private=0xa010100, @multicast1, @rand_addr=0x64010100]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x744}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @private=0xa010101}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@cipso={0x86, 0xa, 0xffffffffffffffff, [{0x6, 0x4, "a217"}]}, @end, @noop, @noop, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010102, @local}}}], 0x150}}], 0x3, 0x20044046) r11 = syz_open_dev$loop(&(0x7f0000001200), 0x5, 0x101000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001240)={r11, 0xc, {0x0, 0x0, 0x0, 0xe, 0x10001, 0x0, 0x4, 0x11, 0x4, "9b065b792ef35de5bfbbb96c89fc1d83285729f9e44d8483186b9015bd4dfc1cc044898984a14f165799fb0c9b3da8771986ad14770805e2e0ea8e382c0273ca", "35942eeeec0be0d90c37677b05e5e8d3f761df970e76ce23a72524e76cddf22e71aefb569908cbf4b386270f66b84272ac963eff0bfc232f0d23df0b0e14a518", "ebcef24e4a9b09ddc28ddb9232214a43941e5e0048d25cda559b78b9c778f2f3", [0x6, 0x80000001]}}) ioctl$BLKGETSIZE(r11, 0x1260, &(0x7f0000001380)) fcntl$getown(r6, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000013c0)={{{@in6=@mcast1, @in=@loopback}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f00000014c0)=0xe8) sendmmsg$inet(r4, &(0x7f0000001940)=[{{&(0x7f0000001500)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001540)="c90096de00d7adf13dc044a4b0240ace29bde695f938e2afc0eab2239c7a3d64044c9022018840e095377d55", 0x2c}, {&(0x7f0000001580)}, {&(0x7f00000015c0)="6ce6b21e3d6a6a26ec67647b95a7043106a1b7e5725937f5fabf69c882bc368ef47f589c97107ecf05886596079317df20cb58f73da5a616f3f4d058ec370c4854a91b807f9ee69a0bf1d20ec5b7dd62333441b96e8e13afcdd6bfe4e15d84e8e01565ff3811bef0fd7dd734e51d9e858d9d036ab699086bc5eb", 0x7a}, {&(0x7f0000001640)="484d5d6cef0643bfd8b6484d1d91d5b27579f778da8b0e812eae2fb4f212051ea1dcfffb7428dbca9d760d7dc052bb1753cdb7b59659f8cf216ab421e9a6c8635cc71a97304558963e3e45edd538401fff155c603362e651133f93d74d8dbc26fe9d765223db647d66044499232ce1d9ba36", 0x72}, {&(0x7f00000016c0)="f5c71c7179b32eabdf79c1c16de38fe6971595c6b0e900e97b7c5605515791f1555048fc69c7a5920d44d7d89da037611ae5", 0x32}, {&(0x7f0000001700)="f6b1b32bf2c49f405ee51d783de91b94963a959e23e403b0d723aa54dd998dbbfdb0ee016b9594af26ce02be92888580c685992afe1138825440b869d5e7", 0x3e}, {&(0x7f0000001740)="8fa6e2f64c5c6369d1b30dc6dfcf1f34be2025fd59cc897b77bb0fb2650d", 0x1e}], 0x7}}, {{&(0x7f0000001800)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001900)=[{&(0x7f0000001840)="be838d9c916e97016cfda17eff8e1ce3e02fb8912e95721e5ebcd50dc693af966cee45717c0f4cec246b845752e3d4d2cab55a687ed1afa5ed63e64ea6888000d280ed5f1aa9fd75cfd2b2b73a7a58c4d42c0a287b776b0deee23db418d2dd657abf3dd4d1b85839a26690fb4cf27ad6c0ff309852f18e4b16afe694ba0ab4a646853257b4586cce9210f7f25e9cdb70a0d9347e3738c8d71690839a62d836c0ed5d26f3df565aecaa0546b9d710db87e95041fa25", 0xb5}], 0x1}}], 0x2, 0x4004) sendmsg$nl_xfrm(r4, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)=@newae={0xac, 0x1e, 0x0, 0x70bd2a, 0x25dfdbfb, {{@in=@local, 0x4d5, 0xa, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, [@user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x2}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x200}, @lifetime_val={0x24, 0x9, {0x10, 0x7, 0xfff, 0x6}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @mark={0xc, 0x15, {0x35075a}}]}, 0xac}, 0x1, 0x0, 0x0, 0xc0}, 0x40) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001b40)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x534, 0x6, 0xab, 0x0, 0x1a, 0xed2, 0x5}, &(0x7f0000001c00)=0x9c) ioctl$BLKCLOSEZONE(r11, 0x40101287, &(0x7f0000001c40)={0x8, 0xda}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c80), 0x200, 0x0) ioctl$TUNSETVNETBE(r12, 0x400454de, &(0x7f0000001cc0)=0x1) r13 = syz_io_uring_setup(0x4338, &(0x7f0000001d00)={0x0, 0xeff7, 0x20000, 0x3, 0x3c7}, &(0x7f0000001d80), &(0x7f0000001dc0)) io_uring_register$IORING_REGISTER_MEM_REGION(r13, 0x22, &(0x7f0000001ec0)={&(0x7f0000001e80)={&(0x7f0000001e00)="516c10a12e2f9530f97907668a3682299829c57e8733e623792a5a665514c375a0c559092691b66a562078a3f1e37ab6abe528aeda5d76e7208cf84414328c4f753071", 0x43, 0x0, 0x3, 0x30000}, 0x1}, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000001f00), 0x600, 0x0) 1m27.777373609s ago: executing program 0 (id=4915): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x40000}]}}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa01, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7, 0xb}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x400000000000124, 0x4000804) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x4100) renameat2(r2, &(0x7f00000002c0)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800ffffffff030000000000000000000700fffc0c000780050003000000000005000100ec000000050005000200000005000400000000000900020073797a310000000014000100000000000000702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x4008894}, 0x20004890) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000010000000f000000080003007f55ee88c89b771d901be12bdf6c74effef8cf05b448c6e8738e88ddff52bd393cbfd73691c7315b50e03b4f9d0ba94ea28e5fe732e0", @ANYRES32=r6, @ANYBLOB="05003300020000000800340003000000"], 0x2c}}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r2, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) 1m27.681814005s ago: executing program 0 (id=4916): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r1, 0x13, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0}, 0x40) r3 = memfd_secret(0x80000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=r3, r1, 0x20, 0x30, 0x0, @void, @void, @void, @value, r2}, 0x20) 1m27.620271018s ago: executing program 0 (id=4918): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@volatile={0x8}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000000500)=""/4096, 0x35, 0x1000, 0x1, 0x2, 0x10000}, 0x28) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r3, &(0x7f00000008c0)=[{&(0x7f0000000440)="35cfac4fd948", 0x6}, {&(0x7f0000000180)="e862601f", 0x4}], 0x2, 0x2000, 0xfffffff8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x10, 0xffffffff, 0x9, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0xfe01}, 0x8, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x4, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffffffffffff, 0x10000) ioctl$USBDEVFS_REAPURBNDELAY(r8, 0x4008550d, &(0x7f0000000000)) r9 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xc69f, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd, 0x9, 0x0, 0x8, 0x4, 0x0, {0x0, r12}}) io_uring_enter(r9, 0x3498, 0x969, 0xffff0000000000a1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000280)={0x0, 'rose0\x00', {0x2}, 0x7ff}) 1m26.677859244s ago: executing program 0 (id=4935): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x380470a, &(0x7f0000000340)={[{@quota}, {@bsdgroups}, {@lazytime}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@errors_remount}, {@oldalloc}, {@nombcache}]}, 0x0, 0x488, &(0x7f0000000d80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000840)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc_tr={0x11, {@llc={0x4e, 0x2, "cd", "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"}}}}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200047f9, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) recvmsg(r6, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x24) write$binfmt_elf64(r7, &(0x7f0000000500)=ANY=[], 0x540) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000240)={0x17c04, r5, 0x7, 0x100000005, 0x9, 0x1e}) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x10) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x40) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000000)=@req3={0x200, 0x0, 0xe4, 0x6, 0x860, 0x2, 0xdfa0}, 0x1c) 1m25.795075295s ago: executing program 0 (id=4961): syz_open_dev$MSR(&(0x7f0000000740), 0x33, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) statfs(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000780)=""/171) readv(r0, &(0x7f0000000000), 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x29, 0xf4, 0x9, 0x3, 0x66, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x40, 0x9ccb, 0x8}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x4, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@exit]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r5, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) bind(r8, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x4, 0x2, 0x3, 0x3, {0xa, 0x4e24, 0xe, @remote, 0x1}}}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001300010027bd7000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="1085000048800100000000000000001c0030542d000b00fdffffff0000005eddc37a3b0a4c0c42fa1806000000001000003e133f1cd84c9487a2491571b2f5cf1a64e89402aa49defd47a1426d4e4c2721bc182ea49cb4acd2d6597835cd52fcab9a60928a77c2116be6d4b61f92b8e4f94d2cc408cf5522d3a964d5b14e14ebe231c715c67566b308990845c5bb210736099d6ecb2e8ff965942169350e427acd48d899a67244fd94d4ca27c1bb"], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r11) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) file_getattr(r12, &(0x7f0000000140)='./file1\x00', &(0x7f0000001980), 0x18, 0x100) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1m23.260107602s ago: executing program 45 (id=4994): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x14) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x3, 0x9}) 1m22.677822496s ago: executing program 9 (id=4997): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x7, 0x4}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0xc53}, &(0x7f0000000040)) creat(&(0x7f0000000240)='./bus\x00', 0xc2) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79ae, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_SYMLINKAT={0x26, 0x12, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1}) unshare(0x20040600) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1m22.421210661s ago: executing program 9 (id=4999): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000010a05d2"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x14) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000000)={0x3, 0x9}) 1m21.316326145s ago: executing program 9 (id=5003): capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) bpf$PROG_LOAD(0xffff8000, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1m21.298971556s ago: executing program 9 (id=5005): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2a2283, 0x60) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x62, @private=0xa010100, 0x4e22, 0x3, 'wrr\x00', 0xc, 0x9, 0x3e}, 0x2c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002380)={{{@in=@local, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000002480)=0xe8) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x3, 0x100002cf}, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 1m21.183896383s ago: executing program 9 (id=5007): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[], 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x1, 0x0, 0x1, 0xf6d, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100) openat(0xffffffffffffff9c, 0x0, 0xc0, 0xccee9c1c9e8aeada) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) pipe2(&(0x7f0000000580), 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000001c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 1m20.816400414s ago: executing program 9 (id=5011): socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r2, 0x0) sendmsg$unix(r0, 0x0, 0x80) 1m20.816193334s ago: executing program 46 (id=5011): socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r2, 0x0) sendmsg$unix(r0, 0x0, 0x80) 1m16.22753324s ago: executing program 3 (id=5012): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2a2283, 0x60) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x62, @private=0xa010100, 0x4e22, 0x3, 'wrr\x00', 0xc, 0x9, 0x3e}, 0x2c) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x3, 0x100002cf}, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 1m16.111304077s ago: executing program 3 (id=5036): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 1m14.304457672s ago: executing program 3 (id=5063): r0 = socket$qrtr(0x2a, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8918, 0x0) 1m14.283163083s ago: executing program 47 (id=5063): r0 = socket$qrtr(0x2a, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8918, 0x0) 1m9.712622819s ago: executing program 48 (id=4961): syz_open_dev$MSR(&(0x7f0000000740), 0x33, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) statfs(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000780)=""/171) readv(r0, &(0x7f0000000000), 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x29, 0xf4, 0x9, 0x3, 0x66, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x40, 0x9ccb, 0x8}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x4, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@exit]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r5, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) bind(r8, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x4, 0x2, 0x3, 0x3, {0xa, 0x4e24, 0xe, @remote, 0x1}}}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001300010027bd7000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="1085000048800100000000000000001c0030542d000b00fdffffff0000005eddc37a3b0a4c0c42fa1806000000001000003e133f1cd84c9487a2491571b2f5cf1a64e89402aa49defd47a1426d4e4c2721bc182ea49cb4acd2d6597835cd52fcab9a60928a77c2116be6d4b61f92b8e4f94d2cc408cf5522d3a964d5b14e14ebe231c715c67566b308990845c5bb210736099d6ecb2e8ff965942169350e427acd48d899a67244fd94d4ca27c1bb"], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r11) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) file_getattr(r12, &(0x7f0000000140)='./file1\x00', &(0x7f0000001980), 0x18, 0x100) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 57.118086481s ago: executing program 4 (id=5298): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x20000080) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300021c00000000000000000000001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae391638305000000f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac6000000000000000030006000000000002004e20ac141400000000000000000002000100000000000000060000000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x0) 57.052515745s ago: executing program 4 (id=5301): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xbfff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x45}, 0x20008000) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_emit_ethernet(0xffffffffffffff4f, &(0x7f0000000a00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @tipc={{0x2b, 0x4, 0x2, 0x3a, 0x1d0, 0x64, 0x0, 0xfe, 0x6, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xd4, 0x3, 0x5, [{@rand_addr=0x64010100, 0x101}, {@broadcast, 0xa7fb}, {@local}, {@broadcast, 0x9}, {@multicast1, 0x80000000}]}, @timestamp_addr={0x44, 0x4c, 0x67, 0x1, 0x4, [{@local}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0x2}, {@rand_addr=0x64010102, 0xa6}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xc}, {@empty, 0x4}, {@broadcast, 0x6}, {@loopback, 0x9}]}, @generic={0x88, 0xa, "2d609968e0214cfb"}, @timestamp={0x44, 0x10, 0xc0, 0x0, 0x4, [0x6, 0x7, 0x80000001]}]}}, @name_distributor={{0x124, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x101, 0x0, 0x1, 0xe, 0x6b, 0x1, 0x4e20, 0x4e22, 0x4, 0x0, 0x0, 0x0, 0x1}, [{0x73, 0x400, 0x2, 0x7, 0x5, 0x4, 0x4, 0x3}, {0x97e, 0x100, 0x2, 0x9, 0x3217, 0x1, 0x5, 0x6}, {0x40, 0xffffffb8, 0x8, 0x8000, 0xfffffffd, 0x1d9, 0x9, 0x5}, {0x2, 0xfff, 0x6, 0x6, 0x7fffffff, 0x8, 0x0, 0x5}, {0x2, 0x1, 0xb80c, 0x6f99, 0x3, 0x8, 0x8, 0x8000}, {0x9, 0x5, 0x7, 0x5, 0xa, 0x1000, 0xf, 0x1}, {0x7, 0x9, 0xb53b, 0x401, 0xfff, 0xd, 0x5}, {0x7, 0x5, 0x3, 0x7, 0x1, 0xd, 0x5, 0x1}, {0x4, 0x100, 0x6, 0x6f2, 0x4, 0x1}]}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x16, 0xffff}, &(0x7f00000001c0)=0xc) keyctl$search(0xa, r2, &(0x7f0000002c80)='keyring\x00', &(0x7f0000002cc0)={'syz', 0x1}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000001ff0)={0x1d, r8}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e23, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, &(0x7f0000000340)=0x84) sendmsg$can_raw(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000104e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(r0, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x520, 0x0, 0x380, 0x0, 0x380, 0x380, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private, 0x21}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2a}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xae}}, 0x0, 0x3, 0xfffd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendto$inet(r0, 0x0, 0x0, 0x20000884, 0x0, 0x0) 56.744190453s ago: executing program 4 (id=5305): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@noauto_da_alloc}, {@errors_remount}]}, 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x442, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="580000000002010400000000000000000a00000504517a4247dec8a109f63b800c00028005000100000000002c00018014000300ff01000000000000000ddfbd48d9bbaac5f0f80000000000000114000400fe8800000000"], 0x58}}, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) stat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(r1, r2, 0x0) 56.508786856s ago: executing program 4 (id=5309): socket(0x1, 0x803, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_acct\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xd, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x8f, &(0x7f0000000300)=ANY=[@ANYBLOB="120110015a292e08100c0000a7950102030109027d0002a20000000904"], 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 55.476221166s ago: executing program 4 (id=5327): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 55.172669694s ago: executing program 4 (id=5334): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x1, 0x0, 0x1, 0xf6d, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 55.141884536s ago: executing program 49 (id=5334): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x1, 0x0, 0x1, 0xf6d, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 17.128531154s ago: executing program 7 (id=6002): socket$kcm(0x11, 0x0, 0x0) 17.089012417s ago: executing program 7 (id=6003): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x12, &(0x7f0000000340)={0x221a, &(0x7f0000000200)}) (async) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) flock(r1, 0x0) (async) r2 = socket(0xa, 0x3, 0x3a) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000000)="47a703", 0x0, 0x0, 0x0, 0x6, r5}, 0x38) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x8) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x3, 0x1, 0xffff, 0x400e0a, 0x7f, "203c5e0000ff00", 0x8, 0x5}) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xff) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000008000000000000006e040000b934010408000000851000000500000018240000", @ANYRES32, @ANYBLOB="00000000ffbfffff9831c405b2be00"/28], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1, 0x1, 0x8}, 0x2c) (async, rerun: 64) pselect6(0x40, &(0x7f0000000200)={0x0, 0x6, 0x9, 0x8, 0x8, 0x800, 0xfffffffffffffff8, 0x5}, &(0x7f0000000280)={0x1, 0x0, 0xffffffff, 0x3, 0x7f, 0xd86, 0x8, 0x6}, &(0x7f00000002c0)={0x1, 0x8, 0x3, 0x913, 0x6, 0x81, 0xff, 0x3}, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0xc091]}, 0x8}) (async, rerun: 64) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TUNSETIFINDEX(r10, 0x400454da, &(0x7f0000000300)) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000480)={{0x3c, @broadcast, 0x4e21, 0x803, 'lblc\x00', 0x20, 0x81, 0x1000031}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x4e25, 0x1, 0x1cb, 0xa, 0x12d58}}, 0x44) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r11, 0x25, 0x0, @val=@iter={0x0}}, 0x40) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="e50000000000"], 0x34}}, 0x0) (async, rerun: 64) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) 17.047021059s ago: executing program 7 (id=6005): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_acct\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}}) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xd, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 16.926745066s ago: executing program 7 (id=6009): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xb0, 0xa, 0x148, 0xb0, 0x60, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x2d}, 0x0, 0x70, 0xb0, 0x0, {0x200003ae, 0x7f00}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x9, "e7cfa59b06be2a27f6394deea4fe91c3d706f80e3439be1ee22cbc653caf"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x10001}], 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x6, 0x0, 0xc, 0x1, 0x1], 0x1}, {0x4, [0x2, 0x1, 0x4, 0x2, 0x2]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0x8}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@delalloc}, {@grpquota}, {@nouid32}, {@nouid32}, {@data_writeback}]}, 0x2, 0x55d, &(0x7f0000000e80)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743c, 0xf0ff1f00000000) 15.920080365s ago: executing program 7 (id=6023): openat$vcsu(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x44, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 12.774377997s ago: executing program 7 (id=6087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={r1, r3, 0x25, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[], 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 12.717217961s ago: executing program 50 (id=6087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={r1, r3, 0x25, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[], 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 3.78295032s ago: executing program 6 (id=6216): r0 = syz_io_uring_setup(0x201d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x800007}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) fchown(0xffffffffffffffff, 0x0, 0xee01) r1 = socket$inet(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x240088a4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 3.645646978s ago: executing program 6 (id=6218): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x6, 0x0, &(0x7f0000000000)="250853f271a7", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000380)='./file1\x00', 0x57ea9df0b2bcddff, &(0x7f0000000440)=ANY=[], 0x1, 0x2bc, &(0x7f00000000c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x9b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0xe, &(0x7f00000022c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51818462b4003a000001828c75416cf99116e3a902d8", 0x38}], 0x2}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="21bbb9bbbb"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x60241, 0x0) 3.302384298s ago: executing program 6 (id=6227): pipe2(0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000001c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.148206327s ago: executing program 8 (id=6228): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0x9da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000280)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) 3.09131545s ago: executing program 1 (id=6231): r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x600, 0x200080d5}}], 0x1, 0x40000a0) 2.846258924s ago: executing program 2 (id=6232): r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x80}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x200000) 2.821106666s ago: executing program 8 (id=6233): prctl$PR_SET_SECUREBITS(0x1c, 0x15) socket$key(0xf, 0x3, 0x2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) perf_event_open(0x0, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a42, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x9, {{0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}}, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x88364, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10320, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x24, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 2.76020142s ago: executing program 1 (id=6235): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="9dadd774a21849ded40f5159cf475c1b00000000000000000000000080000000000b58", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_io_uring_setup(0x17f7, &(0x7f0000010400)={0x0, 0x86de, 0x1, 0x1, 0x171, 0x0, r0}, &(0x7f0000010080), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x2000000, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000003c0)='M', 0x1}], 0x2, 0x0, 0x0, 0x4000400}, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x27, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r6) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) sendmsg$inet6(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000280)="e42c7f", 0x3}], 0x1}, 0x40) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) r7 = dup(r5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000100)="d53b", 0x2}], 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) 2.7591982s ago: executing program 1 (id=6237): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.710765202s ago: executing program 1 (id=6239): socket(0x1, 0x803, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_acct\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xd, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x8f, &(0x7f0000000300)=ANY=[@ANYBLOB="120110015a292e08100c0000a7950102030109027d0002a20000000904"], 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.328357355s ago: executing program 6 (id=6242): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6c01000010001307fcfffffffedbdf25e000000200000000000000000000000020010000000000000000000000000002000000004e1d0002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r1 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) mmap(&(0x7f00005e7000/0x2000)=nil, 0x2000, 0x8, 0x110, r0, 0x1d06f000) syz_emit_ethernet(0x1e, &(0x7f0000000c80)=ANY=[@ANYBLOB="7270c57bf3360180c200000e88a84c0081000000001100aa7bbbc74b0a00"], 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@x25, 0x80, 0x0}, 0x4000) write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[], 0x13) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000008c0)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000280)=""/138, 0x8a}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf250a80800000000100"], 0x24}}, 0x20000050) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x80400) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x292, @empty, 0x9}, 0x1c) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x100, 0x204200) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x26f, 0xd, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x77b9, &(0x7f0000000900)={0x0, 0x12bd, 0x1000, 0x2, 0x114}, &(0x7f0000000980), &(0x7f00000009c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r6, 0x8000000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$BLKFRASET(r5, 0x1264, &(0x7f0000000140)=0x3) 2.103134618s ago: executing program 5 (id=6248): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="9dadd774a21849ded40f5159cf475c1b00000000000000000000000080000000000b58", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_io_uring_setup(0x17f7, &(0x7f0000010400)={0x0, 0x86de, 0x1, 0x1, 0x171, 0x0, r0}, &(0x7f0000010080), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x2000000, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000003c0)='M', 0x1}], 0x2, 0x0, 0x0, 0x4000400}, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x27, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r6) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) sendmsg$inet6(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000280)="e42c7f", 0x3}], 0x1}, 0x40) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) r7 = dup(r5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000100)="d53b", 0x2}], 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) 2.101820568s ago: executing program 6 (id=6249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="478e"], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="003addf9df11029b00000000000700b7080010000000007b8af8000000bfa2000000005f812e9ce91bc7f0ffffb703000008000000850000005900000095e3ffffff0000000002007b5afa0eb09378f31ceccde6fcc5224ca2dcfd5d5af49c36f60977908847b8bd5d6f34496d0bf5ecbb3c40499e5c918c5bed834dc2b013f9a8dd9f5bb204f6d53251a73ad57ed84d7c8999cd3d87e2a6f013f22827f3fe43e3d3cc79f725b66b2dcd2aa6085ce039974cbc817d7d0d6fc4d6b8146e5245d56272c7036418f37f56d15a1fe4c0e715"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77be49c01255790a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="e152b9bc2705fe8c26b8bfe8a1a41679a202dfee15d9db38f506bfe53e4329a01639de231060f8f07c963e95951bcb50d6882fe5a9f3f01673ab07eae30d63a785859f2295fe4f02feefb205a6f7d918d35f87535a8a9fb62c57b618dbe17f0b7eccbcfba32f332e6068", @ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4c02, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000400000001000000090000003c0003800800030004000000140002006272696467655f736c6176655f310000080001000100000014000600ff010000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) socket$packet(0x11, 0x3, 0x300) 2.068036379s ago: executing program 5 (id=6250): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000001380)={0xf97cff8c, 0x8, 'SE Linux', "20d04460e1c492fd5aeec064de5f8469"}, 0x20) (fail_nth: 1) 2.001816714s ago: executing program 8 (id=6251): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x6, 0x0, &(0x7f0000000000)="250853f271a7", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000380)='./file1\x00', 0x57ea9df0b2bcddff, &(0x7f0000000440)=ANY=[], 0x1, 0x2bc, &(0x7f00000000c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51818462b4003a000001828c75416cf99116e3a902d8", 0x38}], 0x2}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="21bbb9bbbb"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x60241, 0x0) 1.847936132s ago: executing program 1 (id=6252): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x18000}, 0x102004, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x10001, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4000000000004004}, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) close(r1) write$selinux_load(r1, &(0x7f0000001380)={0xf97cff8c, 0x8, 'SE Linux', "20d04460e1c492fd5aeec064de5f8469"}, 0x20) 1.813553624s ago: executing program 2 (id=6253): pipe2(0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000001c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.240916238s ago: executing program 5 (id=6254): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.239730328s ago: executing program 6 (id=6255): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) unshare(0x22020600) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_gettime(r2, &(0x7f0000000380)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x2e, &(0x7f0000000140)=0xfb78, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0xe8, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r7) signalfd4(r5, &(0x7f0000000140)={[0xfffffffffffffffb]}, 0x8, 0x80000) vmsplice(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)="16334282c68e254eafeb23b410358173b2750ea362e8806188afd9db75e930332bf1419cae6be5a2a7c48e80596e4992fa08e8ae24f4dd121c2041e502dcc9", 0x3f}, {&(0x7f0000000100)="2aece0ea75e24cc0492cc07c220603a493352c14cda0e7b257ab62e8dda1da8d01182d5fd4e070ffb0ce8e1ffb210322109b8fd77b9f737e28ea2df0d5eb28979216b138af353d4143329d80f28c31c77757c8dd52632a1d0d47c8aee01eef0fc30f9d8ffd51f733d8aa77c28b78c108b08667e7f604bbeab0ddd357aedb416e14bec5f86d09e71dd1f6c8e09550b12e0e5167c52dd5d6c4a895c2dd0e9a163d966449fabb9370d2c8384d9d002873c2f8bf5996b05758a140668a79792fad5cb662823248f4927ab8866b7f4f7a09f86b1d7b9f51a5eb8497b0d25b06edd2e547cf0de56580f4f046", 0xe9}, {&(0x7f0000000200)="e191ba0edbb9ddfdfb053875a576057fc40c9d019030a5653741e3d14ab85b5ae4f2a864fd067239b2877c955daab460402ea8a12c9e787552faca262e381dd6409f06db58c4d7ce653c597abc8ac9c20a4268b4e25f4cf303c670a19e4fbae137517a016d07fb64f8bb43890fc48d82f717182223e0109bc0d880f32a5641258aed8c152398fb244b4affc02c77d9b66f793cdeffe1e27bfd8297bd7f103e444f6d861ab127610a1b4d51e60ce87fd92141016290f4adb91b80e9a81d2cf5285877770973941f9ffa3fae914ec83c7892431c10333c96935ccd951b2a6334baea1a55a31d37fa5bd764ef9f6c2f3ef90cfc61294cd717ebe56af6259b", 0xfd}, {&(0x7f0000000300)}, {&(0x7f0000000540)="86a12b834aca3ba4ed4ef27147447c8db6cf41ae89fbbbac584ff5dd60d214ebcd3698bb78cd3ca88ad89e8d3f1ec6647a8e2e50f8cf05bb4aae8eba96d4d7729c4c798fb85e1a7001c0a8080014307804199419aaaa7972212dc759cc83697265530979b959d200f7efe5dbd64647863b1810231df1f273833bc58ac7f0534bcd969b248d9818b846f9bdbae2962c896962e32f6865bf82c196350fd44abd2a707bb39d44c1bb2e9fba5e4ada03520c8a01e1954608932aee95e4f49b6f05664127ca764ce1dba3f490086262e63d74e70b501bc9e724a6d8eb865175ec7acbcaf00fe0a104e0c37a6c0055042bc1aa81a65e0195bd1ef205db81086c8b6beaf23169e26087a4f8c3dada376b3081de319ce84ad1c547d706ceb911bc637f", 0x11f}], 0x5, 0x1) 1.177376781s ago: executing program 5 (id=6256): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x22, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x4, 0x4, 0x7, 0x2}, {0x9bd2, 0x7f, 0x4, 0x5}]}) write(r4, &(0x7f0000000fc0)="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", 0x1000) ioctl$TCXONC(r3, 0x540a, 0x2) 1.176205512s ago: executing program 8 (id=6257): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[], 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100) openat(0xffffffffffffff9c, 0x0, 0xc0, 0xccee9c1c9e8aeada) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000001c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 748.309196ms ago: executing program 5 (id=6258): r0 = inotify_init() r1 = syz_open_dev$loop(&(0x7f0000000000), 0xe, 0x48200) ioctl$BLKFRAGET(r1, 0x1265, &(0x7f00000000c0)) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x40) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) read$msr(r3, &(0x7f0000000180)=""/43, 0x7b) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000100)) 644.603922ms ago: executing program 2 (id=6259): r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x80}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000040)={0x5}, 0x0) sendto$inet6(r1, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xa9}]}]}, 0x58}}, 0x40040c2) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 642.855182ms ago: executing program 5 (id=6260): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6c01000010001307fcfffffffedbdf25e000000200000000000000000000000020010000000000000000000000000002000000004e1d0002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") r1 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) mmap(&(0x7f00005e7000/0x2000)=nil, 0x2000, 0x8, 0x110, r0, 0x1d06f000) syz_emit_ethernet(0x1e, &(0x7f0000000c80)=ANY=[@ANYBLOB="7270c57bf3360180c200000e88a84c0081000000001100aa7bbbc74b0a00"], 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@x25, 0x80, 0x0}, 0x4000) write$P9_RVERSION(r2, &(0x7f00000000c0)=ANY=[], 0x13) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000008c0)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000280)=""/138, 0x8a}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf250a80800000000100"], 0x24}}, 0x20000050) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x80400) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x292, @empty, 0x9}, 0x1c) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x100, 0x204200) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x26f, 0xd, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x77b9, &(0x7f0000000900)={0x0, 0x12bd, 0x1000, 0x2, 0x114}, &(0x7f0000000980), &(0x7f00000009c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r6, 0x8000000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$BLKFRASET(r5, 0x1264, &(0x7f0000000140)=0x3) 481.927522ms ago: executing program 8 (id=6261): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 420.952576ms ago: executing program 2 (id=6262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (fail_nth: 8) 117.899943ms ago: executing program 8 (id=6263): socket(0x1, 0x803, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_acct\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xd, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x8f, &(0x7f0000000300)=ANY=[@ANYBLOB="120110015a292e08100c0000a7950102030109027d0002a20000000904"], 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 117.082123ms ago: executing program 2 (id=6264): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0xf, 0x0, 0x8, 0x0, 0x1, 0x99060, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7}, 0x6000, 0x2, 0xc37d, 0x6, 0x29, 0xc, 0xbc5a, 0x0, 0x0, 0x0, 0x8c}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9, 0x4, 0x4, 0x4, 0x0, 0x4, 0xd0200, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4be, 0x6, @perf_bp={&(0x7f00000001c0), 0x1}, 0x102000, 0x8, 0x9, 0x5, 0x8, 0x2, 0x7, 0x0, 0xa9, 0x0, 0x6}, r0, 0x10, r1, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x80, '\x00', r4, r5, 0x5, 0x3, 0x5}, 0x50) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f00000004c0)={'netpci0\x00', 0x6}) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000640)='-@)f\x00', 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x16, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@alu={0x4, 0x1, 0x1, 0x3, 0x9, 0x20, 0x4}, @jmp={0x5, 0x1, 0x6, 0x8, 0x0, 0x2, 0x10}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @generic={0x9, 0x7, 0x9, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x2, 0x7, 0xd, 0x400}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[{0x3, 0x3, 0x2, 0x3}, {0x0, 0x4, 0x9, 0x1}, {0x5, 0x3, 0xc, 0xc}, {0x5, 0x2, 0x3, 0xc}, {0x5, 0x5, 0xa}], 0x10, 0x2}, 0x94) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1c0, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_MODES={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdd}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_MODES={0xc0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9e6}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0xad, 0x4, "732926bae0bd0b62902d1265530d46ca4eef7c89595a73cad30c279b4c61216ea867be7289b4c556f3757e7e4fb1b6d2ca8ee67f24d35410c9c0720faac8b4c28432f05731bc711a7d45c2c690b8e1cfb19e4d117329f3c77d397b11b2fee83a62f8e42f5e989b6aaf6b1c08589da64a452d7c32e82da895b8aae77d6b6686f04f77efd6e8885b324407ea6afbf5f65e708c1e00ae9c23c75f6ea84937bf7f9495d2b26e6f860da3c6"}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x24000050}, 0x20048841) 60.943347ms ago: executing program 2 (id=6265): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x25a5, 0x4) close_range(r0, 0xffffffffffffffff, 0x1000000) 0s ago: executing program 1 (id=6266): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004080}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) write$bt_hci(r2, 0x0, 0xb) sendto$inet6(r2, &(0x7f0000000300)="41d99dafb53623ed2704dae9b8088e4fc3d623c530d5bdb5420ee94014b99cd90667956a6f558a41013688aa7f000dcc8af552f0245ae036b3e4b108356b3859c4aff9dc62e26502981f581ec80ee56c34fa8ee2afab1cddcb7a225e6b68f967936517f1349f08bb966f047ac15cf1f0271ce6ba9e676551fee6e3d10184078fb20e6e11b033b6c2bda5c0db8111a1348c0473814e2ae2d43816a88e4dfb6ee746960e9b168adb08ead26a3070d2312f733a05edaa23c44f26c95ec11b5e4eadfe1f6c70a87fceb526026a732342c17b6e50593bc542519820a64496108ee6fb3c2fa7237aeee9f040a63dfde8b7566c61", 0xf1, 0x40000, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) kernel console output (not intermixed with test programs): omiscuous mode [ 366.576533][T23853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.598653][T23853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.644201][T23853] team0: Port device team_slave_0 added [ 366.668397][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5664'. [ 366.678765][T23853] team0: Port device team_slave_1 added [ 366.684410][ T28] kauditd_printk_skb: 6961 callbacks suppressed [ 366.684429][ T28] audit: type=1326 audit(2000000023.609:138434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23880 comm="syz.2.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb517d5d97 code=0x7ffc0000 [ 366.714877][ T28] audit: type=1326 audit(2000000023.618:138435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23880 comm="syz.2.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb5177d399 code=0x7ffc0000 [ 366.738607][ T28] audit: type=1326 audit(2000000023.618:138436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23880 comm="syz.2.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb517d5d97 code=0x7ffc0000 [ 366.762326][ T28] audit: type=1326 audit(2000000023.618:138437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23880 comm="syz.2.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb5177d399 code=0x7ffc0000 [ 366.786279][ T28] audit: type=1326 audit(2000000023.618:138438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23880 comm="syz.2.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb517d5d97 code=0x7ffc0000 [ 366.810212][ T28] audit: type=1326 audit(2000000023.618:138439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23880 comm="syz.2.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb5177d399 code=0x7ffc0000 [ 366.834137][ T28] audit: type=1326 audit(2000000023.618:138440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23880 comm="syz.2.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb517d5d97 code=0x7ffc0000 [ 366.857771][ T28] audit: type=1326 audit(2000000023.618:138441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23880 comm="syz.2.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb5177d399 code=0x7ffc0000 [ 366.881736][ T28] audit: type=1326 audit(2000000023.618:138442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23880 comm="syz.2.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb517d5d97 code=0x7ffc0000 [ 366.905632][ T28] audit: type=1326 audit(2000000023.618:138443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23880 comm="syz.2.5661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb5177d399 code=0x7ffc0000 [ 366.962574][T23853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.969721][T23853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.995678][T23853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.048954][T23853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.056259][T23853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.082400][T23853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.156747][T23853] hsr_slave_0: entered promiscuous mode [ 367.173760][T23853] hsr_slave_1: entered promiscuous mode [ 367.189432][T23853] debugfs: 'hsr0' already exists in 'hsr' [ 367.195282][T23853] Cannot create hsr debugfs directory [ 367.242424][T23914] loop1: detected capacity change from 0 to 128 [ 367.278856][T23914] loop1: detected capacity change from 0 to 128 [ 367.396261][T23925] netlink: 'syz.8.5672': attribute type 13 has an invalid length. [ 367.400707][T23929] syz.1.5668: attempt to access beyond end of device [ 367.400707][T23929] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 367.447989][T23925] gretap0: refused to change device tx_queue_len [ 367.462069][T23925] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 367.500875][T23929] syz.1.5668: attempt to access beyond end of device [ 367.500875][T23929] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 367.588122][T23944] xt_CONNSECMARK: invalid mode: 4 [ 367.601235][T23929] syz.1.5668: attempt to access beyond end of device [ 367.601235][T23929] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 367.672215][T23929] syz.1.5668: attempt to access beyond end of device [ 367.672215][T23929] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 367.696568][T23929] syz.1.5668: attempt to access beyond end of device [ 367.696568][T23929] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 367.731202][T23929] syz.1.5668: attempt to access beyond end of device [ 367.731202][T23929] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 367.753984][T23929] syz.1.5668: attempt to access beyond end of device [ 367.753984][T23929] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 367.800273][T23853] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 367.864588][T23929] syz.1.5668: attempt to access beyond end of device [ 367.864588][T23929] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 367.898478][T23853] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 367.931094][T23853] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 367.986518][T23853] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.102587][T23853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.141446][T23853] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.169354][T18159] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.176628][T18159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.211838][T18159] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.219035][T18159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.457485][T23853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.830030][T23853] veth0_vlan: entered promiscuous mode [ 368.844321][T23853] veth1_vlan: entered promiscuous mode [ 368.881235][T23853] veth0_macvtap: entered promiscuous mode [ 368.901082][T23853] veth1_macvtap: entered promiscuous mode [ 368.925403][T23853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.935595][T23853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.963578][T18160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.007702][T18160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.044985][T18159] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.054177][T18158] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.174034][T24082] loop5: detected capacity change from 0 to 1024 [ 369.202891][T24086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5699'. [ 369.219178][T24082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.355797][T23853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.439245][T24097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.511008][T24097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.535897][T24121] loop7: detected capacity change from 0 to 4096 [ 369.542807][T24121] EXT4-fs: Ignoring removed mblk_io_submit option [ 369.582765][T24121] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.674120][T22574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.760158][ T9] IPVS: starting estimator thread 0... [ 369.821774][T24149] FAULT_INJECTION: forcing a failure. [ 369.821774][T24149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.835063][T24149] CPU: 1 UID: 0 PID: 24149 Comm: syz.7.5709 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 369.835103][T24149] Tainted: [W]=WARN [ 369.835112][T24149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 369.835127][T24149] Call Trace: [ 369.835211][T24149] [ 369.835223][T24149] __dump_stack+0x1d/0x30 [ 369.835256][T24149] dump_stack_lvl+0x95/0xd0 [ 369.835316][T24149] dump_stack+0x15/0x1b [ 369.835337][T24149] should_fail_ex+0x263/0x280 [ 369.835378][T24149] ? __pfx_ucma_set_option+0x10/0x10 [ 369.835408][T24149] should_fail+0xb/0x20 [ 369.835473][T24149] should_fail_usercopy+0x1a/0x20 [ 369.835565][T24149] _copy_from_user+0x1c/0xb0 [ 369.835599][T24149] ucma_set_option+0x54/0x950 [ 369.835625][T24149] ? terminate_walk+0x1e6/0x210 [ 369.835659][T24149] ? path_openat+0x1ab2/0x2050 [ 369.835737][T24149] ? path_openat+0x1b01/0x2050 [ 369.835836][T24149] ? _parse_integer_limit+0x170/0x190 [ 369.835885][T24149] ? iovec_from_user+0x179/0x200 [ 369.835919][T24149] ? avc_policy_seqno+0x15/0x30 [ 369.835952][T24149] ? selinux_file_permission+0x1f2/0x690 [ 369.836121][T24149] ? should_fail_ex+0xd9/0x280 [ 369.836166][T24149] ? __pfx_ucma_set_option+0x10/0x10 [ 369.836242][T24149] ucma_write+0x1c9/0x260 [ 369.836270][T24149] vfs_writev+0x42b/0x900 [ 369.836376][T24149] ? __pfx_ucma_write+0x10/0x10 [ 369.836411][T24149] do_writev+0xe9/0x210 [ 369.836444][T24149] __x64_sys_writev+0x45/0x50 [ 369.836471][T24149] x64_sys_call+0x1ba5/0x3000 [ 369.836503][T24149] do_syscall_64+0xc0/0x2a0 [ 369.836549][T24149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.836578][T24149] RIP: 0033:0x7f80b455bf79 [ 369.836655][T24149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.836680][T24149] RSP: 002b:00007f80b2fb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 369.836705][T24149] RAX: ffffffffffffffda RBX: 00007f80b47d5fa0 RCX: 00007f80b455bf79 [ 369.836724][T24149] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 369.836740][T24149] RBP: 00007f80b2fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 369.836785][T24149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.836800][T24149] R13: 00007f80b47d6038 R14: 00007f80b47d5fa0 R15: 00007fff0b34d748 [ 369.836863][T24149] [ 370.088438][T24145] IPVS: using max 2064 ests per chain, 103200 per kthread [ 370.212013][T24162] netlink: 'syz.7.5712': attribute type 16 has an invalid length. [ 370.220441][T24162] netlink: 'syz.7.5712': attribute type 17 has an invalid length. [ 370.279700][T24162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.337508][T24171] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5714'. [ 370.346782][T24171] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 370.562800][T24187] netlink: 'syz.5.5721': attribute type 3 has an invalid length. [ 370.570711][T24187] netlink: 'syz.5.5721': attribute type 1 has an invalid length. [ 370.578522][T24187] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.5721'. [ 370.662552][T24195] loop1: detected capacity change from 0 to 4096 [ 370.675705][T24195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 370.709018][T24195] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 370.735828][T24195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.745945][T24195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.755355][T24187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5721'. [ 370.844221][T24204] FAULT_INJECTION: forcing a failure. [ 370.844221][T24204] name failslab, interval 1, probability 0, space 0, times 0 [ 370.856960][T24204] CPU: 1 UID: 0 PID: 24204 Comm: syz.7.5727 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 370.857001][T24204] Tainted: [W]=WARN [ 370.857015][T24204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 370.857070][T24204] Call Trace: [ 370.857078][T24204] [ 370.857087][T24204] __dump_stack+0x1d/0x30 [ 370.857119][T24204] dump_stack_lvl+0x95/0xd0 [ 370.857145][T24204] dump_stack+0x15/0x1b [ 370.857164][T24204] should_fail_ex+0x263/0x280 [ 370.857270][T24204] should_failslab+0x8c/0xb0 [ 370.857367][T24204] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 370.857392][T24204] ? __alloc_skb+0x2f0/0x4b0 [ 370.857412][T24204] __alloc_skb+0x2f0/0x4b0 [ 370.857433][T24204] ? __alloc_skb+0x219/0x4b0 [ 370.857452][T24204] netlink_dump+0x10d/0x8a0 [ 370.857472][T24204] ? should_fail_ex+0xd9/0x280 [ 370.857573][T24204] ? should_failslab+0x8c/0xb0 [ 370.857673][T24204] __netlink_dump_start+0x43e/0x520 [ 370.857704][T24204] nf_tables_getset+0x483/0x710 [ 370.857808][T24204] ? __pfx_nf_tables_dump_sets_start+0x10/0x10 [ 370.857873][T24204] ? __pfx_nf_tables_dump_sets+0x10/0x10 [ 370.857992][T24204] ? __pfx_nf_tables_dump_sets_done+0x10/0x10 [ 370.858186][T24204] ? __pfx_nf_tables_getset+0x10/0x10 [ 370.858214][T24204] nfnetlink_rcv_msg+0x406/0x5d0 [ 370.858279][T24204] netlink_rcv_skb+0x123/0x220 [ 370.858378][T24204] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 370.858504][T24204] nfnetlink_rcv+0x167/0x1720 [ 370.858544][T24204] ? __kfree_skb+0x109/0x150 [ 370.858563][T24204] ? nlmon_xmit+0x4f/0x60 [ 370.858587][T24204] ? consume_skb+0x49/0x140 [ 370.858693][T24204] ? nlmon_xmit+0x4f/0x60 [ 370.858719][T24204] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 370.858752][T24204] ? __dev_queue_xmit+0x139a/0x1f20 [ 370.858780][T24204] ? __dev_queue_xmit+0x148/0x1f20 [ 370.858868][T24204] ? ref_tracker_free+0x37d/0x3e0 [ 370.858991][T24204] ? __netlink_deliver_tap+0x4dc/0x500 [ 370.859035][T24204] netlink_unicast+0x5c0/0x690 [ 370.859064][T24204] netlink_sendmsg+0x5c8/0x6f0 [ 370.859098][T24204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.859208][T24204] ____sys_sendmsg+0x5af/0x600 [ 370.859247][T24204] ___sys_sendmsg+0x195/0x1e0 [ 370.859288][T24204] __x64_sys_sendmsg+0xd4/0x160 [ 370.859322][T24204] x64_sys_call+0x17ba/0x3000 [ 370.859380][T24204] do_syscall_64+0xc0/0x2a0 [ 370.859437][T24204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.859464][T24204] RIP: 0033:0x7f80b455bf79 [ 370.859481][T24204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.859499][T24204] RSP: 002b:00007f80b2fb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.859522][T24204] RAX: ffffffffffffffda RBX: 00007f80b47d5fa0 RCX: 00007f80b455bf79 [ 370.859593][T24204] RDX: 0000000000040000 RSI: 0000200000000400 RDI: 0000000000000003 [ 370.859606][T24204] RBP: 00007f80b2fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 370.859620][T24204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.859636][T24204] R13: 00007f80b47d6038 R14: 00007f80b47d5fa0 R15: 00007fff0b34d748 [ 370.859663][T24204] [ 371.304965][T24208] loop7: detected capacity change from 0 to 4096 [ 371.334915][T24208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 371.350024][T24208] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 371.407362][T22574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.428119][T21246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.487019][T24216] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5731'. [ 371.529466][T24216] loop7: detected capacity change from 0 to 128 [ 371.959614][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5743'. [ 371.968618][T24245] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5743'. [ 371.977596][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5743'. [ 371.996089][T24243] loop1: detected capacity change from 0 to 4096 [ 372.016262][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5743'. [ 372.025339][T24245] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5743'. [ 372.034444][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5743'. [ 372.044487][T18158] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.053343][T18158] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.071155][T24243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.106511][T18158] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.137766][T24243] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 372.157532][T18158] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.176345][ T28] kauditd_printk_skb: 7631 callbacks suppressed [ 372.176359][ T28] audit: type=1326 audit(2000000028.754:146075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24249 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb517d5d97 code=0x7ffc0000 [ 372.220497][T21246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.231354][ T28] audit: type=1326 audit(2000000028.791:146076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24249 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb5177d399 code=0x7ffc0000 [ 372.247995][T24252] loop7: detected capacity change from 0 to 4096 [ 372.255338][ T28] audit: type=1326 audit(2000000028.791:146077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24249 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb517d5d97 code=0x7ffc0000 [ 372.285355][ T28] audit: type=1326 audit(2000000028.791:146078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24249 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb5177d399 code=0x7ffc0000 [ 372.309107][ T28] audit: type=1326 audit(2000000028.791:146079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24249 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb517d5d97 code=0x7ffc0000 [ 372.332826][ T28] audit: type=1326 audit(2000000028.791:146080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24249 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb5177d399 code=0x7ffc0000 [ 372.356595][ T28] audit: type=1326 audit(2000000028.791:146081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24249 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb517d5d97 code=0x7ffc0000 [ 372.380389][ T28] audit: type=1326 audit(2000000028.791:146082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24249 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb5177d399 code=0x7ffc0000 [ 372.404079][ T28] audit: type=1326 audit(2000000028.791:146083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24249 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb517d5d97 code=0x7ffc0000 [ 372.427823][ T28] audit: type=1326 audit(2000000028.791:146084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24249 comm="syz.2.5744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb5177d399 code=0x7ffc0000 [ 372.488829][T24252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.514066][T24252] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz.7.5746: invalid fast symlink length 131109 [ 372.629140][T22574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.784388][T24279] FAULT_INJECTION: forcing a failure. [ 372.784388][T24279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.797650][T24279] CPU: 0 UID: 0 PID: 24279 Comm: syz.7.5756 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 372.797691][T24279] Tainted: [W]=WARN [ 372.797698][T24279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 372.797711][T24279] Call Trace: [ 372.797719][T24279] [ 372.797778][T24279] __dump_stack+0x1d/0x30 [ 372.797817][T24279] dump_stack_lvl+0x95/0xd0 [ 372.797892][T24279] dump_stack+0x15/0x1b [ 372.797912][T24279] should_fail_ex+0x263/0x280 [ 372.797954][T24279] ? __pfx_blkdev_ioctl+0x10/0x10 [ 372.797995][T24279] should_fail+0xb/0x20 [ 372.798086][T24279] should_fail_usercopy+0x1a/0x20 [ 372.798107][T24279] _copy_from_user+0x1c/0xb0 [ 372.798132][T24279] blkpg_do_ioctl+0x6c/0x320 [ 372.798183][T24279] ? __pfx_blkdev_ioctl+0x10/0x10 [ 372.798223][T24279] blkdev_ioctl+0x453/0x460 [ 372.798276][T24279] ? __pfx_blkdev_ioctl+0x10/0x10 [ 372.798314][T24279] __se_sys_ioctl+0xce/0x140 [ 372.798415][T24279] __x64_sys_ioctl+0x43/0x50 [ 372.798453][T24279] x64_sys_call+0x14b0/0x3000 [ 372.798543][T24279] do_syscall_64+0xc0/0x2a0 [ 372.798640][T24279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.798669][T24279] RIP: 0033:0x7f80b455bf79 [ 372.798690][T24279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.798725][T24279] RSP: 002b:00007f80b2fb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.798746][T24279] RAX: ffffffffffffffda RBX: 00007f80b47d5fa0 RCX: 00007f80b455bf79 [ 372.798761][T24279] RDX: 0000200000000140 RSI: 0000000000001269 RDI: 0000000000000003 [ 372.798775][T24279] RBP: 00007f80b2fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 372.798797][T24279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.798813][T24279] R13: 00007f80b47d6038 R14: 00007f80b47d5fa0 R15: 00007fff0b34d748 [ 372.798909][T24279] [ 373.021906][T24281] loop1: detected capacity change from 0 to 256 [ 373.048429][T24281] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000003) [ 373.060615][T24281] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000003) [ 373.090808][T24281] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.098117][T24281] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.156561][T24293] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(14) [ 373.163267][T24293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.170864][T24293] vhci_hcd vhci_hcd.0: Device attached [ 373.181344][T24292] netlink: 'syz.2.5763': attribute type 16 has an invalid length. [ 373.189308][T24292] netlink: 'syz.2.5763': attribute type 17 has an invalid length. [ 373.205558][T24293] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(16) [ 373.212236][T24293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.219936][T24293] vhci_hcd vhci_hcd.0: Device attached [ 373.239488][T24302] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 373.273590][T24303] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(19) [ 373.280261][T24303] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 373.288065][T24303] vhci_hcd vhci_hcd.0: Device attached [ 373.326390][T24293] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(18) [ 373.333092][T24293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.340704][T24293] vhci_hcd vhci_hcd.0: Device attached [ 373.364173][T24292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.382002][T24303] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(23) [ 373.388678][T24303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.396311][T24303] vhci_hcd vhci_hcd.0: Device attached [ 373.412585][T24293] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(22) [ 373.419249][T24293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.426965][T24293] vhci_hcd vhci_hcd.0: Device attached [ 373.432571][T20343] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 373.454743][T24293] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 373.483595][T24293] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 373.498931][T24318] loop1: detected capacity change from 0 to 4096 [ 373.509701][T24293] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 373.525013][T24316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.544201][T24318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 373.559564][T24294] vhci_hcd: connection reset by peer [ 373.560437][T24310] vhci_hcd: connection closed [ 373.565178][T24297] vhci_hcd: connection closed [ 373.570259][T24317] vhci_hcd: connection closed [ 373.575330][T18156] vhci_hcd vhci_hcd.7: stop threads [ 373.576099][T24305] vhci_hcd: connection closed [ 373.580074][T18156] vhci_hcd vhci_hcd.7: release socket [ 373.580098][T18156] vhci_hcd vhci_hcd.7: disconnect device [ 373.585558][T24313] vhci_hcd: connection closed [ 373.595263][T24316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.616363][T18156] vhci_hcd vhci_hcd.7: stop threads [ 373.621772][T18156] vhci_hcd vhci_hcd.7: release socket [ 373.627308][T18156] vhci_hcd vhci_hcd.7: disconnect device [ 373.636650][T24309] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 373.653827][T18156] vhci_hcd vhci_hcd.7: stop threads [ 373.659266][T18156] vhci_hcd vhci_hcd.7: release socket [ 373.664891][T18156] vhci_hcd vhci_hcd.7: disconnect device [ 373.692240][T18156] vhci_hcd vhci_hcd.7: stop threads [ 373.697514][T18156] vhci_hcd vhci_hcd.7: release socket [ 373.703021][T18156] vhci_hcd vhci_hcd.7: disconnect device [ 373.740375][T21246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.762069][T18156] vhci_hcd vhci_hcd.7: stop threads [ 373.767498][T18156] vhci_hcd vhci_hcd.7: release socket [ 373.773017][T18156] vhci_hcd vhci_hcd.7: disconnect device [ 373.777917][T24330] FAULT_INJECTION: forcing a failure. [ 373.777917][T24330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 373.791540][T18156] vhci_hcd vhci_hcd.7: stop threads [ 373.792046][T24330] CPU: 1 UID: 0 PID: 24330 Comm: syz.2.5771 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 373.792187][T24330] Tainted: [W]=WARN [ 373.792209][T24330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 373.792284][T24330] Call Trace: [ 373.792305][T24330] [ 373.792328][T24330] __dump_stack+0x1d/0x30 [ 373.792413][T24330] dump_stack_lvl+0x95/0xd0 [ 373.792489][T24330] dump_stack+0x15/0x1b [ 373.792540][T24330] should_fail_ex+0x263/0x280 [ 373.792649][T24330] should_fail_alloc_page+0xf2/0x100 [ 373.792734][T24330] __alloc_frozen_pages_noprof+0x108/0x350 [ 373.792852][T24330] alloc_pages_mpol+0xb3/0x260 [ 373.792954][T24330] alloc_pages_noprof+0x8f/0x130 [ 373.793093][T24330] pte_alloc_one+0x1e/0xd0 [ 373.793233][T24330] __pte_alloc+0x32/0x2c0 [ 373.793323][T24330] handle_mm_fault+0x2057/0x3030 [ 373.793453][T24330] ? __rcu_read_unlock+0x4e/0x70 [ 373.793616][T24330] ? check_vma_flags+0x26d/0x330 [ 373.793688][T24330] __get_user_pages+0x1023/0x1ea0 [ 373.793820][T24330] get_user_pages_remote+0x1d5/0x6b0 [ 373.793996][T24330] __access_remote_vm+0x15c/0x580 [ 373.794222][T24330] access_remote_vm+0x32/0x40 [ 373.794409][T24330] generic_ptrace_pokedata+0x134/0x170 [ 373.794537][T24330] ptrace_request+0x7b3/0x1a90 [ 373.794634][T24330] ? get_pid_task+0x96/0xd0 [ 373.794729][T24330] ? task_rq_lock+0x47/0xd0 [ 373.794930][T24330] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 373.795018][T24330] ? wait_task_inactive+0x1c0/0x2d0 [ 373.795103][T24330] arch_ptrace+0x289/0x3f0 [ 373.795209][T24330] __se_sys_ptrace+0xf3/0x2c0 [ 373.795308][T24330] __x64_sys_ptrace+0x55/0x70 [ 373.795446][T24330] x64_sys_call+0x2ee5/0x3000 [ 373.795532][T24330] do_syscall_64+0xc0/0x2a0 [ 373.795640][T24330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.795794][T24330] RIP: 0033:0x7fbb517dbf79 [ 373.795848][T24330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.795904][T24330] RSP: 002b:00007fbb50237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 373.795981][T24330] RAX: ffffffffffffffda RBX: 00007fbb51a55fa0 RCX: 00007fbb517dbf79 [ 373.796087][T24330] RDX: 00002000000011c0 RSI: 00000000000003e4 RDI: 0000000000000004 [ 373.796130][T24330] RBP: 00007fbb50237090 R08: 0000000000000000 R09: 0000000000000000 [ 373.796191][T24330] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 373.796241][T24330] R13: 00007fbb51a56038 R14: 00007fbb51a55fa0 R15: 00007ffc43f55e68 [ 373.796314][T24330] [ 374.050467][T18156] vhci_hcd vhci_hcd.7: release socket [ 374.056270][T18156] vhci_hcd vhci_hcd.7: disconnect device [ 374.153271][T24345] loop7: detected capacity change from 0 to 128 [ 374.163012][T24345] loop7: detected capacity change from 0 to 128 [ 374.253472][T24350] syz.7.5778: attempt to access beyond end of device [ 374.253472][T24350] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 374.330729][T24350] syz.7.5778: attempt to access beyond end of device [ 374.330729][T24350] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 374.403383][T24355] FAULT_INJECTION: forcing a failure. [ 374.403383][T24355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.407513][T24350] syz.7.5778: attempt to access beyond end of device [ 374.407513][T24350] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 374.416914][T24355] CPU: 1 UID: 0 PID: 24355 Comm: syz.1.5781 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 374.417076][T24355] Tainted: [W]=WARN [ 374.417106][T24355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 374.417173][T24355] Call Trace: [ 374.417194][T24355] [ 374.417225][T24355] __dump_stack+0x1d/0x30 [ 374.417301][T24355] dump_stack_lvl+0x95/0xd0 [ 374.417374][T24355] dump_stack+0x15/0x1b [ 374.417438][T24355] should_fail_ex+0x263/0x280 [ 374.417606][T24355] should_fail+0xb/0x20 [ 374.417712][T24355] should_fail_usercopy+0x1a/0x20 [ 374.417786][T24355] _copy_from_user+0x1c/0xb0 [ 374.417862][T24355] kstrtouint_from_user+0x69/0xf0 [ 374.417982][T24355] proc_fail_nth_write+0x50/0x160 [ 374.418164][T24355] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 374.418258][T24355] vfs_write+0x269/0x9f0 [ 374.418289][T24355] ? __rcu_read_unlock+0x4e/0x70 [ 374.418319][T24355] ? __fget_files+0x184/0x1c0 [ 374.418380][T24355] ? mutex_lock+0x57/0x90 [ 374.418467][T24355] ksys_write+0xdc/0x1a0 [ 374.418561][T24355] __x64_sys_write+0x40/0x50 [ 374.418624][T24355] x64_sys_call+0x2847/0x3000 [ 374.418710][T24355] do_syscall_64+0xc0/0x2a0 [ 374.418879][T24355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.418988][T24355] RIP: 0033:0x7fdded9ac84e [ 374.419040][T24355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 374.419102][T24355] RSP: 002b:00007fddec446fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 374.419165][T24355] RAX: ffffffffffffffda RBX: 00007fddec4476c0 RCX: 00007fdded9ac84e [ 374.419218][T24355] RDX: 0000000000000001 RSI: 00007fddec4470a0 RDI: 0000000000000004 [ 374.419261][T24355] RBP: 00007fddec447090 R08: 0000000000000000 R09: 0000000000000000 [ 374.419304][T24355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.419352][T24355] R13: 00007fddedc66038 R14: 00007fddedc65fa0 R15: 00007ffd67cf7b48 [ 374.419426][T24355] [ 374.450646][T24356] xt_CONNSECMARK: invalid mode: 4 [ 374.785174][T24371] loop1: detected capacity change from 0 to 128 [ 374.794663][T24370] netlink: 'syz.2.5787': attribute type 27 has an invalid length. [ 374.907480][T24385] vfat: Bad value for 'uid' [ 374.912308][T24385] vfat: Bad value for 'uid' [ 374.987420][T24388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 375.030114][T24381] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 375.092975][T21246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.252732][T24410] xt_CONNSECMARK: invalid mode: 4 [ 375.413865][T24410] loop7: p1 p2 p3 [ 375.421580][T24410] loop7: p1 start 51379968 is beyond EOD, truncated [ 375.466992][T24410] loop7: p3 size 100663552 extends beyond EOD, truncated [ 375.504039][T24425] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 375.758626][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 375.781124][T24436] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.781899][T24442] vfat: Bad value for 'uid' [ 375.792835][T24442] vfat: Bad value for 'uid' [ 375.797465][T24436] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.936996][T24448] EXT4-fs warning (device loop5): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 375.968095][T24448] EXT4-fs (loop5): mount failed [ 376.098549][T24455] __nla_validate_parse: 4 callbacks suppressed [ 376.098566][T24455] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5821'. [ 376.117366][T24455] program syz.8.5821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.400062][T24475] xt_CONNSECMARK: invalid mode: 4 [ 376.517871][T24477] set_capacity_and_notify: 7 callbacks suppressed [ 376.517915][T24477] loop1: detected capacity change from 0 to 4096 [ 376.553229][T24477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.588363][T24477] netlink: 'syz.1.5829': attribute type 2 has an invalid length. [ 376.655662][T21246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.773824][T24480] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.797655][T24480] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.936538][T24494] FAULT_INJECTION: forcing a failure. [ 376.936538][T24494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.949691][T24494] CPU: 1 UID: 0 PID: 24494 Comm: syz.7.5837 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 376.949823][T24494] Tainted: [W]=WARN [ 376.949832][T24494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 376.949850][T24494] Call Trace: [ 376.949921][T24494] [ 376.949932][T24494] __dump_stack+0x1d/0x30 [ 376.949961][T24494] dump_stack_lvl+0x95/0xd0 [ 376.949989][T24494] dump_stack+0x15/0x1b [ 376.950073][T24494] should_fail_ex+0x263/0x280 [ 376.950111][T24494] should_fail+0xb/0x20 [ 376.950219][T24494] should_fail_usercopy+0x1a/0x20 [ 376.950243][T24494] strncpy_from_user+0x27/0x250 [ 376.950355][T24494] __se_sys_memfd_create+0x20f/0x3b0 [ 376.950398][T24494] __x64_sys_memfd_create+0x31/0x40 [ 376.950464][T24494] x64_sys_call+0x28cb/0x3000 [ 376.950566][T24494] do_syscall_64+0xc0/0x2a0 [ 376.950678][T24494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.950706][T24494] RIP: 0033:0x7f80b455bf79 [ 376.950727][T24494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.950757][T24494] RSP: 002b:00007f80b2fb6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 376.950810][T24494] RAX: ffffffffffffffda RBX: 0000000000000274 RCX: 00007f80b455bf79 [ 376.950829][T24494] RDX: 00007f80b2fb6ee0 RSI: 0000000000000000 RDI: 00007f80b45f29dd [ 376.950847][T24494] RBP: 00002000000005c0 R08: 00000000ffffffff R09: 0000000000000000 [ 376.950865][T24494] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000000c0 [ 376.950943][T24494] R13: 00007f80b2fb6ee0 R14: 00007f80b2fb6ea0 R15: 00002000000001c0 [ 376.950972][T24494] [ 377.155202][T24497] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5836'. [ 377.168895][T24497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5836'. [ 377.208406][T24507] lo speed is unknown, defaulting to 1000 [ 377.360746][T24525] loop7: detected capacity change from 0 to 128 [ 377.462816][T24530] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.466222][T24533] netlink: 'syz.5.5849': attribute type 16 has an invalid length. [ 377.478440][T24530] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.485634][T24533] netlink: 'syz.5.5849': attribute type 17 has an invalid length. [ 377.598893][T24533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.620795][ T28] kauditd_printk_skb: 6524 callbacks suppressed [ 377.620815][ T28] audit: type=1400 audit(2000000033.852:152608): avc: denied { accept } for pid=24544 comm="syz.2.5855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 377.632735][T24545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5855'. [ 377.678143][T24547] netlink: 'syz.2.5856': attribute type 3 has an invalid length. [ 377.686116][T24547] netlink: 'syz.2.5856': attribute type 1 has an invalid length. [ 377.694096][T24547] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.5856'. [ 377.866532][T24565] dvmrp0: entered allmulticast mode [ 377.934399][T24571] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5867'. [ 377.999795][T24573] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.010650][T24573] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.016315][T24577] netlink: 'syz.2.5868': attribute type 16 has an invalid length. [ 378.025841][T24577] netlink: 'syz.2.5868': attribute type 17 has an invalid length. [ 378.190951][T24583] loop1: detected capacity change from 0 to 512 [ 378.205803][T24583] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 378.238014][T24577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.258716][T24583] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.5872: iget: bad i_size value: 12154757448730 [ 378.271510][T24583] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 378.271994][T24583] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.5872: couldn't read orphan inode 13 (err -117) [ 378.293450][T24583] loop1: lost filesystem error report for type 5 error -117 [ 378.299640][T24583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.321468][T24583] FAULT_INJECTION: forcing a failure. [ 378.321468][T24583] name failslab, interval 1, probability 0, space 0, times 0 [ 378.334680][T24583] CPU: 1 UID: 0 PID: 24583 Comm: syz.1.5872 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 378.334717][T24583] Tainted: [W]=WARN [ 378.334726][T24583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 378.334742][T24583] Call Trace: [ 378.334750][T24583] [ 378.334760][T24583] __dump_stack+0x1d/0x30 [ 378.334793][T24583] dump_stack_lvl+0x95/0xd0 [ 378.334868][T24583] dump_stack+0x15/0x1b [ 378.334923][T24583] should_fail_ex+0x263/0x280 [ 378.334967][T24583] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 378.334998][T24583] should_failslab+0x8c/0xb0 [ 378.335050][T24583] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 378.335155][T24583] ? ext4_alloc_inode+0x38/0x320 [ 378.335185][T24583] ? ext4_search_dir+0x1cb/0x250 [ 378.335215][T24583] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 378.335253][T24583] ext4_alloc_inode+0x38/0x320 [ 378.335279][T24583] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 378.335345][T24583] alloc_inode+0x40/0x170 [ 378.335394][T24583] new_inode+0x1d/0xe0 [ 378.335427][T24583] __ext4_new_inode+0x15e/0x2330 [ 378.335458][T24583] ? __dquot_initialize+0x146/0x7c0 [ 378.335520][T24583] ? _raw_spin_unlock+0x9/0x30 [ 378.335555][T24583] ext4_create+0x16e/0x2f0 [ 378.335591][T24583] ? __pfx_ext4_create+0x10/0x10 [ 378.335635][T24583] path_openat+0xd75/0x2050 [ 378.335692][T24583] do_file_open+0x16c/0x290 [ 378.335801][T24583] do_sys_openat2+0x94/0x130 [ 378.335831][T24583] __x64_sys_openat+0xf2/0x120 [ 378.335892][T24583] x64_sys_call+0x2b07/0x3000 [ 378.335997][T24583] do_syscall_64+0xc0/0x2a0 [ 378.336110][T24583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.336137][T24583] RIP: 0033:0x7fdded9ebf79 [ 378.336153][T24583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.336171][T24583] RSP: 002b:00007fddec447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 378.336197][T24583] RAX: ffffffffffffffda RBX: 00007fddedc65fa0 RCX: 00007fdded9ebf79 [ 378.336215][T24583] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 378.336252][T24583] RBP: 00007fddec447090 R08: 0000000000000000 R09: 0000000000000000 [ 378.336269][T24583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.336351][T24583] R13: 00007fddedc66038 R14: 00007fddedc65fa0 R15: 00007ffd67cf7b48 [ 378.336381][T24583] [ 378.627600][T24592] 9p: Bad value for 'rfdno' [ 378.682499][T21246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.765066][T24600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5879'. [ 378.776357][T24600] loop1: detected capacity change from 0 to 128 [ 378.845684][T20343] usb 15-1: enqueue for inactive port 0 [ 378.851364][T20343] usb 15-1: enqueue for inactive port 0 [ 378.876811][T24611] loop7: detected capacity change from 0 to 128 [ 378.885738][T24611] loop7: detected capacity change from 0 to 128 [ 378.901182][T24613] loop5: detected capacity change from 0 to 128 [ 378.923914][T24613] loop5: detected capacity change from 0 to 128 [ 378.953420][T20343] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 378.966616][T24618] syz.7.5882: attempt to access beyond end of device [ 378.966616][T24618] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 378.984106][T24618] syz.7.5882: attempt to access beyond end of device [ 378.984106][T24618] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 378.998027][T24618] syz.7.5882: attempt to access beyond end of device [ 378.998027][T24618] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 379.022447][T24623] syz.5.5884: attempt to access beyond end of device [ 379.022447][T24623] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 379.046762][T24618] syz.7.5882: attempt to access beyond end of device [ 379.046762][T24618] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 379.047496][T24623] syz.5.5884: attempt to access beyond end of device [ 379.047496][T24623] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 379.095712][T24630] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 379.107763][T24629] xt_CONNSECMARK: invalid mode: 4 [ 379.118809][ T28] audit: type=1326 audit(2000000035.245:152609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdded9ebf79 code=0x7ffc0000 [ 379.142985][ T28] audit: type=1326 audit(2000000035.245:152610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdded9ebf79 code=0x7ffc0000 [ 379.166811][ T28] audit: type=1326 audit(2000000035.245:152611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdded9ebf79 code=0x7ffc0000 [ 379.193467][T24618] syz.7.5882: attempt to access beyond end of device [ 379.193467][T24618] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 379.228767][ T28] audit: type=1326 audit(2000000035.330:152612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdded9ebf79 code=0x7ffc0000 [ 379.236218][T24631] xt_CONNSECMARK: invalid mode: 4 [ 379.252596][ T28] audit: type=1326 audit(2000000035.330:152613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdded9ebf79 code=0x7ffc0000 [ 379.281351][ T28] audit: type=1326 audit(2000000035.330:152614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdded9ebf79 code=0x7ffc0000 [ 379.305262][ T28] audit: type=1326 audit(2000000035.348:152615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fdded9ebf79 code=0x7ffc0000 [ 379.329164][ T28] audit: type=1326 audit(2000000035.348:152616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdded9ebf79 code=0x7ffc0000 [ 379.352894][ T28] audit: type=1326 audit(2000000035.348:152617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.1.5885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdded9ebf79 code=0x7ffc0000 [ 379.398328][T24635] FAULT_INJECTION: forcing a failure. [ 379.398328][T24635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.411699][T24635] CPU: 0 UID: 0 PID: 24635 Comm: syz.8.5886 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 379.411785][T24635] Tainted: [W]=WARN [ 379.411792][T24635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 379.411805][T24635] Call Trace: [ 379.411812][T24635] [ 379.411821][T24635] __dump_stack+0x1d/0x30 [ 379.411852][T24635] dump_stack_lvl+0x95/0xd0 [ 379.411907][T24635] dump_stack+0x15/0x1b [ 379.411964][T24635] should_fail_ex+0x263/0x280 [ 379.412008][T24635] should_fail+0xb/0x20 [ 379.412103][T24635] should_fail_usercopy+0x1a/0x20 [ 379.412130][T24635] _copy_from_user+0x1c/0xb0 [ 379.412162][T24635] ___sys_sendmsg+0xc1/0x1e0 [ 379.412229][T24635] __x64_sys_sendmsg+0xd4/0x160 [ 379.412262][T24635] x64_sys_call+0x17ba/0x3000 [ 379.412287][T24635] do_syscall_64+0xc0/0x2a0 [ 379.412369][T24635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.412404][T24635] RIP: 0033:0x7f3b59c6bf79 [ 379.412424][T24635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.412443][T24635] RSP: 002b:00007f3b586c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.412506][T24635] RAX: ffffffffffffffda RBX: 00007f3b59ee5fa0 RCX: 00007f3b59c6bf79 [ 379.412533][T24635] RDX: 0000000000000010 RSI: 0000200000007240 RDI: 0000000000000003 [ 379.412550][T24635] RBP: 00007f3b586c7090 R08: 0000000000000000 R09: 0000000000000000 [ 379.412566][T24635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.412583][T24635] R13: 00007f3b59ee6038 R14: 00007f3b59ee5fa0 R15: 00007fff4be49918 [ 379.412654][T24635] [ 379.626233][T24637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5887'. [ 379.639799][T24639] 9p: Bad value for 'rfdno' [ 379.668214][T24637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24637 comm=syz.1.5887 [ 379.688542][T24637] netlink: 'syz.1.5887': attribute type 1 has an invalid length. [ 379.836130][T24654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5895'. [ 379.881913][T24656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.890534][T24656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.905986][T24656] sctp: [Deprecated]: syz.8.5896 (pid 24656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.905986][T24656] Use struct sctp_sack_info instead [ 379.999591][T24665] loop5: detected capacity change from 0 to 128 [ 380.019693][T24667] netlink: 'syz.7.5898': attribute type 16 has an invalid length. [ 380.027879][T24667] netlink: 'syz.7.5898': attribute type 17 has an invalid length. [ 380.041727][T24665] loop5: detected capacity change from 0 to 128 [ 380.122588][T24675] bio_check_eod: 62 callbacks suppressed [ 380.122603][T24675] syz.5.5900: attempt to access beyond end of device [ 380.122603][T24675] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 380.147036][T24667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.222691][T24675] syz.5.5900: attempt to access beyond end of device [ 380.222691][T24675] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 380.290759][T24679] xt_CONNSECMARK: invalid mode: 4 [ 380.297709][T24675] syz.5.5900: attempt to access beyond end of device [ 380.297709][T24675] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 380.351137][T24684] FAULT_INJECTION: forcing a failure. [ 380.351137][T24684] name failslab, interval 1, probability 0, space 0, times 0 [ 380.363892][T24684] CPU: 0 UID: 0 PID: 24684 Comm: syz.7.5905 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 380.363930][T24684] Tainted: [W]=WARN [ 380.363994][T24684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 380.364012][T24684] Call Trace: [ 380.364020][T24684] [ 380.364029][T24684] __dump_stack+0x1d/0x30 [ 380.364211][T24684] dump_stack_lvl+0x95/0xd0 [ 380.364241][T24684] dump_stack+0x15/0x1b [ 380.364283][T24684] should_fail_ex+0x263/0x280 [ 380.364322][T24684] ? __pfx_proc_self_get_link+0x10/0x10 [ 380.364360][T24684] should_failslab+0x8c/0xb0 [ 380.364388][T24684] __kmalloc_cache_noprof+0x64/0x4a0 [ 380.364503][T24684] ? proc_self_get_link+0x96/0x110 [ 380.364536][T24684] ? __pfx_proc_self_get_link+0x10/0x10 [ 380.364564][T24684] proc_self_get_link+0x96/0x110 [ 380.364677][T24684] pick_link+0x514/0x8e0 [ 380.364758][T24684] step_into_slowpath+0x36a/0x4c0 [ 380.364850][T24684] link_path_walk+0x974/0xe30 [ 380.364895][T24684] path_openat+0x1c6/0x2050 [ 380.365067][T24684] ? _parse_integer_limit+0x170/0x190 [ 380.365138][T24684] ? kstrtouint+0x76/0xc0 [ 380.365180][T24684] do_file_open+0x16c/0x290 [ 380.365293][T24684] do_sys_openat2+0x94/0x130 [ 380.365331][T24684] __x64_sys_openat+0xf2/0x120 [ 380.365369][T24684] x64_sys_call+0x2b07/0x3000 [ 380.365418][T24684] do_syscall_64+0xc0/0x2a0 [ 380.365591][T24684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.365621][T24684] RIP: 0033:0x7f80b451c84e [ 380.365638][T24684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.365657][T24684] RSP: 002b:00007f80b2fb6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.365683][T24684] RAX: ffffffffffffffda RBX: 00007f80b2fb76c0 RCX: 00007f80b451c84e [ 380.365697][T24684] RDX: 0000000000000002 RSI: 00007f80b2fb6f90 RDI: ffffffffffffff9c [ 380.365742][T24684] RBP: 00007f80b2fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 380.365759][T24684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.365775][T24684] R13: 00007f80b47d6038 R14: 00007f80b47d5fa0 R15: 00007fff0b34d748 [ 380.365803][T24684] [ 380.586643][T24675] syz.5.5900: attempt to access beyond end of device [ 380.586643][T24675] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 380.796016][T24697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5910'. [ 381.089172][T24709] netlink: 'syz.5.5915': attribute type 16 has an invalid length. [ 381.097075][T24709] netlink: 'syz.5.5915': attribute type 17 has an invalid length. [ 381.151555][T24709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.199538][T24717] binfmt_misc: register: failed to install interpreter file ./file2 [ 381.210606][T24715] 9p: Bad value for 'wfdno' [ 381.236671][T24717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.245620][T24717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.382003][T24734] msdos: Unknown parameter '@' [ 381.482801][T24740] netlink: 'syz.7.5929': attribute type 21 has an invalid length. [ 381.509185][T24743] tipc: Started in network mode [ 381.514220][T24743] tipc: Node identity 405d, cluster identity 4711 [ 381.520897][T24743] tipc: Enabling of bearer rejected, failed to enable media [ 381.844830][T24760] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 382.177987][T24797] set_capacity_and_notify: 3 callbacks suppressed [ 382.178008][T24797] loop5: detected capacity change from 0 to 4096 [ 382.196322][T24797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 382.219890][T24797] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 382.237012][T24797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.245295][T24802] 9p: Bad value for 'wfdno' [ 382.247450][T24797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.292489][T24802] loop1: detected capacity change from 0 to 4096 [ 382.303674][T24802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 382.320671][T24802] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 382.351992][T21246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.570202][T24821] __nla_validate_parse: 1 callbacks suppressed [ 382.570222][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5957'. [ 382.605000][T24821] loop1: detected capacity change from 0 to 1764 [ 382.614295][T24821] iso9660: Unknown parameter '0000000000000000000000000000000000000000ÿÿÿÿ±' [ 382.643653][T24821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5957'. [ 382.657879][T24826] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5959'. [ 382.720630][T24833] loop1: detected capacity change from 0 to 128 [ 382.728459][T24833] msdos: Unknown parameter '0177777777777777777777701777777777777777777777' [ 382.850779][T23853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.905296][T24840] loop5: detected capacity change from 0 to 128 [ 382.949805][T24846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24846 comm=syz.8.5968 [ 382.965776][T24840] loop5: detected capacity change from 0 to 128 [ 382.972534][T24848] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5968'. [ 382.985341][T24846] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5968'. [ 383.018650][T24846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.055976][T24852] syz.5.5964: attempt to access beyond end of device [ 383.055976][T24852] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 383.071567][T24846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.091024][T24846] bond0 (unregistering): Released all slaves [ 383.124322][T24852] syz.5.5964: attempt to access beyond end of device [ 383.124322][T24852] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 383.162019][T24852] syz.5.5964: attempt to access beyond end of device [ 383.162019][T24852] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 383.184666][T24852] syz.5.5964: attempt to access beyond end of device [ 383.184666][T24852] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 383.229425][T24852] syz.5.5964: attempt to access beyond end of device [ 383.229425][T24852] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 383.263269][T24852] syz.5.5964: attempt to access beyond end of device [ 383.263269][T24852] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 383.278574][T24865] xt_CONNSECMARK: invalid mode: 4 [ 383.303459][T24862] loop1: detected capacity change from 0 to 4096 [ 383.327472][T24862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.366013][T24862] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 383.376977][T24862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.385540][T24862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.472399][T24878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5981'. [ 383.485295][T24880] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5982'. [ 383.495499][T24881] FAULT_INJECTION: forcing a failure. [ 383.495499][T24881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 383.508886][T24881] CPU: 1 UID: 0 PID: 24881 Comm: syz.5.5980 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 383.508921][T24881] Tainted: [W]=WARN [ 383.508931][T24881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 383.509020][T24881] Call Trace: [ 383.509028][T24881] [ 383.509038][T24881] __dump_stack+0x1d/0x30 [ 383.509066][T24881] dump_stack_lvl+0x95/0xd0 [ 383.509107][T24881] dump_stack+0x15/0x1b [ 383.509131][T24881] should_fail_ex+0x263/0x280 [ 383.509269][T24881] should_fail_alloc_page+0xf2/0x100 [ 383.509301][T24881] __alloc_frozen_pages_noprof+0x108/0x350 [ 383.509335][T24881] alloc_pages_mpol+0xb3/0x260 [ 383.509367][T24881] alloc_pages_noprof+0x8f/0x130 [ 383.509442][T24881] __pud_alloc+0x47/0x4a0 [ 383.509524][T24881] handle_mm_fault+0x1d62/0x3030 [ 383.509558][T24881] ? mt_find+0x291/0x3b0 [ 383.509607][T24881] ? lock_mm_and_find_vma+0x88/0x400 [ 383.509632][T24881] do_user_addr_fault+0x3fd/0x1050 [ 383.509692][T24881] exc_page_fault+0x62/0xa0 [ 383.509723][T24881] asm_exc_page_fault+0x26/0x30 [ 383.509743][T24881] RIP: 0010:__put_user_4+0xd/0x20 [ 383.509826][T24881] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 9c 01 00 90 90 90 90 90 90 90 90 90 90 [ 383.509916][T24881] RSP: 0018:ffffc900035efb78 EFLAGS: 00050206 [ 383.509934][T24881] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000000 [ 383.509963][T24881] RDX: 000000000000020c RSI: 0000000000000000 RDI: ffffc900035efb80 [ 383.510054][T24881] RBP: 000000000000541b R08: 0001c900035efb83 R09: 0000000000000000 [ 383.510071][T24881] R10: 0001c900035efb24 R11: 0001c900035efb27 R12: ffffffff86edb208 [ 383.510143][T24881] R13: ffffffff85e3c808 R14: ffff888103b82ec0 R15: 0000000000000000 [ 383.510166][T24881] sk_ioctl+0x261/0x3c0 [ 383.510197][T24881] ? terminate_walk+0x1e6/0x210 [ 383.510240][T24881] ? path_openat+0x1ab2/0x2050 [ 383.510298][T24881] inet_ioctl+0x32b/0x3a0 [ 383.510329][T24881] sock_do_ioctl+0x73/0x230 [ 383.510360][T24881] sock_ioctl+0x41b/0x610 [ 383.510389][T24881] ? avc_has_perm+0x101/0x190 [ 383.510498][T24881] ? __pfx_sock_ioctl+0x10/0x10 [ 383.510574][T24881] do_vfs_ioctl+0xa82/0xe70 [ 383.510592][T24881] ? selinux_file_ioctl+0xc20/0xcb0 [ 383.510620][T24881] ? __rcu_read_unlock+0x4e/0x70 [ 383.510655][T24881] __se_sys_ioctl+0x82/0x140 [ 383.510729][T24881] __x64_sys_ioctl+0x43/0x50 [ 383.510906][T24881] x64_sys_call+0x14b0/0x3000 [ 383.510933][T24881] do_syscall_64+0xc0/0x2a0 [ 383.510969][T24881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.510992][T24881] RIP: 0033:0x7fda109fbf79 [ 383.511081][T24881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.511101][T24881] RSP: 002b:00007fda0f44f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.511120][T24881] RAX: ffffffffffffffda RBX: 00007fda10c75fa0 RCX: 00007fda109fbf79 [ 383.511150][T24881] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 383.511164][T24881] RBP: 00007fda0f44f090 R08: 0000000000000000 R09: 0000000000000000 [ 383.511177][T24881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.511190][T24881] R13: 00007fda10c76038 R14: 00007fda10c75fa0 R15: 00007fff5d64e7d8 [ 383.511211][T24881] [ 383.870540][T24890] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 383.895636][ T28] kauditd_printk_skb: 3934 callbacks suppressed [ 383.895653][ T28] audit: type=1400 audit(2000000039.717:156552): avc: denied { map } for pid=24886 comm="syz.7.5985" path="socket:[77306]" dev="sockfs" ino=77306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 383.932404][ T28] audit: type=1400 audit(2000000039.717:156553): avc: denied { read accept } for pid=24886 comm="syz.7.5985" path="socket:[77306]" dev="sockfs" ino=77306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 384.001739][T24905] 9p: Bad value for 'wfdno' [ 384.028085][T24905] loop7: detected capacity change from 0 to 4096 [ 384.054356][T24909] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5994'. [ 384.058104][T24905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.079104][T24905] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 384.104186][T24911] netlink: 'syz.2.5993': attribute type 16 has an invalid length. [ 384.112171][T24911] netlink: 'syz.2.5993': attribute type 17 has an invalid length. [ 384.120856][T22574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.131219][T24912] netlink: 'syz.8.5994': attribute type 10 has an invalid length. [ 384.192272][T24914] loop7: detected capacity change from 0 to 128 [ 384.203879][T24911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.223605][T24912] team0: Port device dummy0 added [ 384.248968][T24914] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.261612][T24914] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 384.302402][T22574] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.322598][T21246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.394474][T24927] FAULT_INJECTION: forcing a failure. [ 384.394474][T24927] name failslab, interval 1, probability 0, space 0, times 0 [ 384.407309][T24927] CPU: 0 UID: 0 PID: 24927 Comm: syz.7.5998 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 384.407360][T24927] Tainted: [W]=WARN [ 384.407368][T24927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 384.407387][T24927] Call Trace: [ 384.407395][T24927] [ 384.407403][T24927] __dump_stack+0x1d/0x30 [ 384.407435][T24927] dump_stack_lvl+0x95/0xd0 [ 384.407457][T24927] dump_stack+0x15/0x1b [ 384.407550][T24927] should_fail_ex+0x263/0x280 [ 384.407595][T24927] should_failslab+0x8c/0xb0 [ 384.407624][T24927] kmem_cache_alloc_noprof+0x68/0x490 [ 384.407652][T24927] ? skb_clone+0x151/0x1f0 [ 384.407715][T24927] skb_clone+0x151/0x1f0 [ 384.407744][T24927] __netlink_deliver_tap+0x2c9/0x500 [ 384.407780][T24927] netlink_dump+0x836/0x8a0 [ 384.407816][T24927] netlink_recvmsg+0x420/0x550 [ 384.407900][T24927] ? __pfx_netlink_recvmsg+0x10/0x10 [ 384.407945][T24927] sock_recvmsg+0x139/0x160 [ 384.407992][T24927] ____sys_recvmsg+0xf5/0x280 [ 384.408024][T24927] ___sys_recvmsg+0x11f/0x3b0 [ 384.408096][T24927] do_recvmmsg+0x1ef/0x560 [ 384.408191][T24927] ? fput+0x8f/0xc0 [ 384.408224][T24927] __x64_sys_recvmmsg+0xe5/0x170 [ 384.408254][T24927] x64_sys_call+0x2b75/0x3000 [ 384.408322][T24927] do_syscall_64+0xc0/0x2a0 [ 384.408360][T24927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.408409][T24927] RIP: 0033:0x7f80b455bf79 [ 384.408430][T24927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.408507][T24927] RSP: 002b:00007f80b2fb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 384.408532][T24927] RAX: ffffffffffffffda RBX: 00007f80b47d5fa0 RCX: 00007f80b455bf79 [ 384.408550][T24927] RDX: 0000000000000001 RSI: 0000200000008880 RDI: 0000000000000003 [ 384.408566][T24927] RBP: 00007f80b2fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 384.408581][T24927] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 384.408708][T24927] R13: 00007f80b47d6038 R14: 00007f80b47d5fa0 R15: 00007fff0b34d748 [ 384.408736][T24927] [ 384.711097][T24943] 9p: Bad value for 'wfdno' [ 384.742636][T24943] loop7: detected capacity change from 0 to 4096 [ 384.778210][T24943] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.793590][T24943] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 384.816882][T24951] netlink: 'syz.1.6007': attribute type 16 has an invalid length. [ 384.837830][T22574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.911765][T24953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6010'. [ 384.946781][T24951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.974489][T24956] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.6009'. [ 385.129384][ T28] audit: type=1400 audit(2000000040.755:156554): avc: denied { write } for pid=24957 comm="syz.5.6011" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 385.154710][T24956] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 385.162960][T24956] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e854e018, mo2=0003] [ 385.207840][T24956] System zones: 0-1, 15-15, 18-18, 34-34 [ 385.229804][T24956] EXT4-fs (loop7): orphan cleanup on readonly fs [ 385.254469][T24956] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 385.281965][T24956] EXT4-fs warning (device loop7): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 385.316109][T24956] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 385.324539][T24956] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #16: comm syz.7.6009: iget: bad extended attribute block 1 [ 385.337205][T24956] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.339947][T24956] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.6009: couldn't read orphan inode 16 (err -117) [ 385.361358][T24956] loop7: lost filesystem error report for type 5 error -117 [ 385.384966][T24956] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 385.408201][T24973] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 385.440775][T24956] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 385.448846][T24956] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e854e018, mo2=0003] [ 385.584744][T24992] validate_nla: 1 callbacks suppressed [ 385.584766][T24992] netlink: 'syz.2.6020': attribute type 16 has an invalid length. [ 385.598383][T24992] netlink: 'syz.2.6020': attribute type 17 has an invalid length. [ 385.617325][ T28] audit: type=1326 audit(2000000041.325:156555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24984 comm="syz.8.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b59c65d97 code=0x7ffc0000 [ 385.652009][ T28] audit: type=1326 audit(2000000041.325:156556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24984 comm="syz.8.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b59c0d399 code=0x7ffc0000 [ 385.675817][ T28] audit: type=1326 audit(2000000041.325:156557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24984 comm="syz.8.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b59c65d97 code=0x7ffc0000 [ 385.699540][ T28] audit: type=1326 audit(2000000041.325:156558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24984 comm="syz.8.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b59c0d399 code=0x7ffc0000 [ 385.723155][ T28] audit: type=1326 audit(2000000041.325:156559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24984 comm="syz.8.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b59c65d97 code=0x7ffc0000 [ 385.746811][ T28] audit: type=1326 audit(2000000041.325:156560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24984 comm="syz.8.6018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b59c0d399 code=0x7ffc0000 [ 385.833293][T24992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.985375][T25003] bio_check_eod: 46 callbacks suppressed [ 385.985394][T25003] syz.1.6024: attempt to access beyond end of device [ 385.985394][T25003] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 386.063321][T25010] FAULT_INJECTION: forcing a failure. [ 386.063321][T25010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.071388][T25003] syz.1.6024: attempt to access beyond end of device [ 386.071388][T25003] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 386.076719][T25010] CPU: 0 UID: 0 PID: 25010 Comm: syz.5.6028 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 386.076786][T25010] Tainted: [W]=WARN [ 386.076892][T25010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 386.076942][T25010] Call Trace: [ 386.076971][T25010] [ 386.076995][T25010] __dump_stack+0x1d/0x30 [ 386.077088][T25010] dump_stack_lvl+0x95/0xd0 [ 386.077179][T25010] dump_stack+0x15/0x1b [ 386.077244][T25010] should_fail_ex+0x263/0x280 [ 386.077358][T25010] should_fail+0xb/0x20 [ 386.077484][T25010] should_fail_usercopy+0x1a/0x20 [ 386.077549][T25010] _copy_to_user+0x20/0xa0 [ 386.077633][T25010] simple_read_from_buffer+0xb5/0x130 [ 386.077707][T25010] proc_fail_nth_read+0x10e/0x150 [ 386.077929][T25010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.078095][T25010] vfs_read+0x1ab/0x7f0 [ 386.078199][T25010] ? __rcu_read_unlock+0x4e/0x70 [ 386.078293][T25010] ? __fget_files+0x184/0x1c0 [ 386.078393][T25010] ? mutex_lock+0x57/0x90 [ 386.078574][T25010] ksys_read+0xdc/0x1a0 [ 386.078729][T25010] __x64_sys_read+0x40/0x50 [ 386.078827][T25010] x64_sys_call+0x2889/0x3000 [ 386.078927][T25010] do_syscall_64+0xc0/0x2a0 [ 386.079050][T25010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.079123][T25010] RIP: 0033:0x7fda109bc84e [ 386.079175][T25010] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 386.079286][T25010] RSP: 002b:00007fda0f44efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 386.079349][T25010] RAX: ffffffffffffffda RBX: 00007fda0f44f6c0 RCX: 00007fda109bc84e [ 386.079399][T25010] RDX: 000000000000000f RSI: 00007fda0f44f0a0 RDI: 0000000000000004 [ 386.079505][T25010] RBP: 00007fda0f44f090 R08: 0000000000000000 R09: 0000000000000000 [ 386.079547][T25010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.079590][T25010] R13: 00007fda10c76038 R14: 00007fda10c75fa0 R15: 00007fff5d64e7d8 [ 386.079662][T25010] [ 386.392216][T25003] syz.1.6024: attempt to access beyond end of device [ 386.392216][T25003] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 386.512654][T25022] 9p: Bad value for 'wfdno' [ 386.533516][T25026] FAULT_INJECTION: forcing a failure. [ 386.533516][T25026] name failslab, interval 1, probability 0, space 0, times 0 [ 386.546258][T25026] CPU: 0 UID: 0 PID: 25026 Comm: syz.5.6036 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 386.546300][T25026] Tainted: [W]=WARN [ 386.546310][T25026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 386.546326][T25026] Call Trace: [ 386.546335][T25026] [ 386.546405][T25026] __dump_stack+0x1d/0x30 [ 386.546438][T25026] dump_stack_lvl+0x95/0xd0 [ 386.546465][T25026] dump_stack+0x15/0x1b [ 386.546504][T25026] should_fail_ex+0x263/0x280 [ 386.546550][T25026] should_failslab+0x8c/0xb0 [ 386.546573][T25026] kmem_cache_alloc_noprof+0x68/0x490 [ 386.546638][T25026] ? skb_clone+0x151/0x1f0 [ 386.546699][T25026] skb_clone+0x151/0x1f0 [ 386.546724][T25026] __netlink_deliver_tap+0x2c9/0x500 [ 386.546808][T25026] netlink_dump+0x836/0x8a0 [ 386.546846][T25026] netlink_recvmsg+0x420/0x550 [ 386.546874][T25026] ? __pfx_netlink_recvmsg+0x10/0x10 [ 386.546897][T25026] sock_recvmsg+0x139/0x160 [ 386.547057][T25026] ____sys_recvmsg+0xf5/0x280 [ 386.547100][T25026] ___sys_recvmsg+0x11f/0x3b0 [ 386.547143][T25026] do_recvmmsg+0x1ef/0x560 [ 386.547180][T25026] ? fput+0x8f/0xc0 [ 386.547235][T25026] __x64_sys_recvmmsg+0xe5/0x170 [ 386.547314][T25026] x64_sys_call+0x2b75/0x3000 [ 386.547342][T25026] do_syscall_64+0xc0/0x2a0 [ 386.547459][T25026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.547482][T25026] RIP: 0033:0x7fda109fbf79 [ 386.547631][T25026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.547655][T25026] RSP: 002b:00007fda0f44f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 386.547681][T25026] RAX: ffffffffffffffda RBX: 00007fda10c75fa0 RCX: 00007fda109fbf79 [ 386.547698][T25026] RDX: 0000000000000001 RSI: 0000200000008880 RDI: 0000000000000003 [ 386.547712][T25026] RBP: 00007fda0f44f090 R08: 0000000000000000 R09: 0000000000000000 [ 386.547725][T25026] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 386.547737][T25026] R13: 00007fda10c76038 R14: 00007fda10c75fa0 R15: 00007fff5d64e7d8 [ 386.547837][T25026] [ 386.898301][T25040] 9p: Bad value for 'wfdno' [ 387.203490][T25072] syz.1.6049: attempt to access beyond end of device [ 387.203490][T25072] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 387.228925][T25074] netlink: 'syz.2.6056': attribute type 33 has an invalid length. [ 387.240112][T25072] syz.1.6049: attempt to access beyond end of device [ 387.240112][T25072] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 387.300451][T25075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.331613][T25072] syz.1.6049: attempt to access beyond end of device [ 387.331613][T25072] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 387.376091][T25082] 9p: Bad value for 'wfdno' [ 387.397293][T25072] syz.1.6049: attempt to access beyond end of device [ 387.397293][T25072] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 387.420646][T25075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.467706][T25072] syz.1.6049: attempt to access beyond end of device [ 387.467706][T25072] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 387.481423][T25072] syz.1.6049: attempt to access beyond end of device [ 387.481423][T25072] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 387.485445][T25075] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 387.497352][T25072] syz.1.6049: attempt to access beyond end of device [ 387.497352][T25072] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 387.613279][T25092] netlink: 'syz.1.6062': attribute type 4 has an invalid length. [ 387.678040][T25092] .`: renamed from bond0 (while UP) [ 387.878724][T25108] netlink: 'syz.1.6067': attribute type 16 has an invalid length. [ 387.886701][T25108] netlink: 'syz.1.6067': attribute type 17 has an invalid length. [ 387.944936][T25104] __nla_validate_parse: 15 callbacks suppressed [ 387.944963][T25104] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6068'. [ 387.960393][T25104] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6068'. [ 387.967383][T25108] 8021q: adding VLAN 0 to HW filter on device .` [ 387.969963][T25104] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6068'. [ 388.001286][T25108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.058506][T23853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.309013][T10398] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.361703][T10398] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.480242][T10398] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.551644][T10398] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.610182][T25139] random: crng reseeded on system resumption [ 388.660695][T10398] bridge_slave_1: left allmulticast mode [ 388.666498][T10398] bridge_slave_1: left promiscuous mode [ 388.672622][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.702320][T10398] bridge_slave_0: left allmulticast mode [ 388.708483][T10398] bridge_slave_0: left promiscuous mode [ 388.714416][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.740247][T25145] random: crng reseeded on system resumption [ 388.874916][T10398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.893965][T10398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.904790][T10398] bond0 (unregistering): Released all slaves [ 388.942459][T22574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.973828][T10398] IPVS: stopping master sync thread 23651 ... [ 389.121943][T25165] netlink: 'syz.2.6088': attribute type 2 has an invalid length. [ 389.213680][T25165] netlink: 'syz.2.6088': attribute type 2 has an invalid length. [ 389.221863][T25176] set_capacity_and_notify: 6 callbacks suppressed [ 389.221881][T25176] loop1: detected capacity change from 0 to 256 [ 389.288380][ T28] kauditd_printk_skb: 2506 callbacks suppressed [ 389.288401][ T28] audit: type=1400 audit(2000000044.758:159067): avc: denied { map } for pid=25175 comm="syz.1.6091" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 389.510933][T10398] hsr_slave_0: left promiscuous mode [ 389.539234][T10398] hsr_slave_1: left promiscuous mode [ 389.559034][T10398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.566623][T10398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.585080][T10398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.592692][T10398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.610358][T10398] veth1_macvtap: left promiscuous mode [ 389.692188][T10398] veth0_macvtap: left promiscuous mode [ 389.704160][T10398] veth1_vlan: left promiscuous mode [ 389.710036][T10398] veth0_vlan: left promiscuous mode [ 389.770515][ T28] audit: type=1326 audit(2000000045.217:159068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.5.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda109fbf79 code=0x7ffc0000 [ 389.798520][ T28] audit: type=1326 audit(2000000045.245:159069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.5.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda109fbf79 code=0x7ffc0000 [ 389.822490][ T28] audit: type=1326 audit(2000000045.245:159070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.5.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda109fbf79 code=0x7ffc0000 [ 389.846316][ T28] audit: type=1326 audit(2000000045.245:159071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.5.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda109fbf79 code=0x7ffc0000 [ 389.870159][ T28] audit: type=1326 audit(2000000045.245:159072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.5.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda109fbf79 code=0x7ffc0000 [ 389.894129][ T28] audit: type=1326 audit(2000000045.245:159073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.5.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda109fbf79 code=0x7ffc0000 [ 389.918276][ T28] audit: type=1326 audit(2000000045.245:159074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.5.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda109fbf79 code=0x7ffc0000 [ 389.942708][ T28] audit: type=1326 audit(2000000045.245:159075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.5.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda109fbf79 code=0x7ffc0000 [ 389.966592][ T28] audit: type=1326 audit(2000000045.245:159076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25217 comm="syz.5.6101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fda109fbf79 code=0x7ffc0000 [ 390.052665][T10398] team0 (unregistering): Port device team_slave_1 removed [ 390.064659][T10398] team0 (unregistering): Port device team_slave_0 removed [ 390.135282][T25170] lo speed is unknown, defaulting to 1000 [ 390.177733][T25239] 9p: Bad value for 'wfdno' [ 390.270303][T25239] loop5: detected capacity change from 0 to 4096 [ 390.299023][T25239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 390.341966][T10398] IPVS: stop unused estimator thread 0... [ 390.403925][T25239] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 390.459466][T25264] loop1: detected capacity change from 0 to 128 [ 390.468449][T23853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.491179][T25264] loop1: detected capacity change from 0 to 128 [ 390.516036][T25170] chnl_net:caif_netlink_parms(): no params data found [ 390.623453][T25170] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.630761][T25170] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.638414][T25170] bridge_slave_0: entered allmulticast mode [ 390.645349][T25170] bridge_slave_0: entered promiscuous mode [ 390.652728][T25170] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.659913][T25170] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.667753][T25170] bridge_slave_1: entered allmulticast mode [ 390.674787][T25170] bridge_slave_1: entered promiscuous mode [ 390.694984][T25170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.706336][T25170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.775950][T25170] team0: Port device team_slave_0 added [ 390.808235][T25170] team0: Port device team_slave_1 added [ 390.851810][T25170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.858866][T25170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.885110][T25170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.951155][T25170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.958228][T25170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.984479][T25170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.015907][T25295] binfmt_misc: register: failed to install interpreter file ./file2 [ 391.024958][T25295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.034737][T25295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.073281][T25289] netlink: 'syz.8.6116': attribute type 16 has an invalid length. [ 391.081374][T25289] netlink: 'syz.8.6116': attribute type 17 has an invalid length. [ 391.101917][T25302] loop1: detected capacity change from 0 to 256 [ 391.187554][T25289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.231931][T25170] hsr_slave_0: entered promiscuous mode [ 391.240346][T25170] hsr_slave_1: entered promiscuous mode [ 391.247113][T25170] debugfs: 'hsr0' already exists in 'hsr' [ 391.252914][T25170] Cannot create hsr debugfs directory [ 391.279178][T25309] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6120'. [ 391.309934][T25314] 9p: Bad value for 'rfdno' [ 391.793914][T25170] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 391.834788][T25170] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 391.868695][T25170] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 391.899004][T25170] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 392.048008][T25170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.059926][T25170] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.080380][T18149] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.087500][T18149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.123442][T18156] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.130647][T18156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.315011][T25170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.661703][T25170] veth0_vlan: entered promiscuous mode [ 392.680587][T25170] veth1_vlan: entered promiscuous mode [ 392.742860][T25170] veth0_macvtap: entered promiscuous mode [ 392.762788][T25419] 9p: Bad value for 'rfdno' [ 392.771429][T25170] veth1_macvtap: entered promiscuous mode [ 392.819553][T25419] loop1: detected capacity change from 0 to 4096 [ 392.826316][T25170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.844510][T25170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.860689][T25419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 392.884063][T18159] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.893777][T25419] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 392.926301][T10398] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.948314][T10398] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.962994][T18159] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.001152][T25435] FAULT_INJECTION: forcing a failure. [ 393.001152][T25435] name failslab, interval 1, probability 0, space 0, times 0 [ 393.014043][T25435] CPU: 1 UID: 0 PID: 25435 Comm: syz.6.6089 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 393.014076][T25435] Tainted: [W]=WARN [ 393.014083][T25435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 393.014099][T25435] Call Trace: [ 393.014108][T25435] [ 393.014147][T25435] __dump_stack+0x1d/0x30 [ 393.014175][T25435] dump_stack_lvl+0x95/0xd0 [ 393.014205][T25435] dump_stack+0x15/0x1b [ 393.014229][T25435] should_fail_ex+0x263/0x280 [ 393.014271][T25435] should_failslab+0x8c/0xb0 [ 393.014368][T25435] __kmalloc_cache_noprof+0x64/0x4a0 [ 393.014400][T25435] ? v9fs_init_fs_context+0x34/0x220 [ 393.014476][T25435] v9fs_init_fs_context+0x34/0x220 [ 393.014500][T25435] alloc_fs_context+0x4a6/0x580 [ 393.014564][T25435] fs_context_for_mount+0x22/0x30 [ 393.014588][T25435] do_new_mount+0xe7/0x8d0 [ 393.014608][T25435] ? security_capable+0x7b/0x90 [ 393.014649][T25435] path_mount+0x4d0/0xbc0 [ 393.014755][T25435] __se_sys_mount+0x28c/0x2e0 [ 393.014905][T25435] ? fput+0x8f/0xc0 [ 393.014941][T25435] __x64_sys_mount+0x67/0x80 [ 393.014999][T25435] x64_sys_call+0x2cca/0x3000 [ 393.015049][T25435] do_syscall_64+0xc0/0x2a0 [ 393.015094][T25435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.015161][T25435] RIP: 0033:0x7fc9fd67bf79 [ 393.015182][T25435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.015205][T25435] RSP: 002b:00007fc9fc0d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 393.015229][T25435] RAX: ffffffffffffffda RBX: 00007fc9fd8f5fa0 RCX: 00007fc9fd67bf79 [ 393.015312][T25435] RDX: 0000200000000300 RSI: 0000200000000040 RDI: 0000000000000000 [ 393.015330][T25435] RBP: 00007fc9fc0d7090 R08: 00002000000004c0 R09: 0000000000000000 [ 393.015345][T25435] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000001 [ 393.015360][T25435] R13: 00007fc9fd8f6038 R14: 00007fc9fd8f5fa0 R15: 00007ffcfd15c1d8 [ 393.015388][T25435] [ 393.224622][T21246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.729144][T25481] 9p: Bad value for 'rfdno' [ 393.804974][T25484] loop5: detected capacity change from 0 to 4096 [ 393.838324][T25484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 393.886206][T25484] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 393.905903][T25499] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 393.908197][T25484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.923034][T25484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.012870][T25499] sctp: [Deprecated]: syz.6.6149 (pid 25499) Use of int in max_burst socket option. [ 394.012870][T25499] Use struct sctp_assoc_value instead [ 394.127454][T25523] loop1: detected capacity change from 0 to 128 [ 394.580874][T23853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.762898][T25595] FAULT_INJECTION: forcing a failure. [ 394.762898][T25595] name failslab, interval 1, probability 0, space 0, times 0 [ 394.775629][T25595] CPU: 0 UID: 0 PID: 25595 Comm: syz.5.6158 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 394.775668][T25595] Tainted: [W]=WARN [ 394.775707][T25595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 394.775721][T25595] Call Trace: [ 394.775728][T25595] [ 394.775737][T25595] __dump_stack+0x1d/0x30 [ 394.775767][T25595] dump_stack_lvl+0x95/0xd0 [ 394.775804][T25595] dump_stack+0x15/0x1b [ 394.775827][T25595] should_fail_ex+0x263/0x280 [ 394.775932][T25595] ? __pfx_proc_self_get_link+0x10/0x10 [ 394.776066][T25595] should_failslab+0x8c/0xb0 [ 394.776095][T25595] __kmalloc_cache_noprof+0x64/0x4a0 [ 394.776124][T25595] ? proc_self_get_link+0x96/0x110 [ 394.776205][T25595] ? __pfx_proc_self_get_link+0x10/0x10 [ 394.776261][T25595] proc_self_get_link+0x96/0x110 [ 394.776340][T25595] pick_link+0x514/0x8e0 [ 394.776374][T25595] step_into_slowpath+0x36a/0x4c0 [ 394.776410][T25595] link_path_walk+0x974/0xe30 [ 394.776471][T25595] path_openat+0x1c6/0x2050 [ 394.776505][T25595] ? _parse_integer_limit+0x170/0x190 [ 394.776609][T25595] ? kstrtouint+0x76/0xc0 [ 394.776705][T25595] do_file_open+0x16c/0x290 [ 394.776797][T25595] do_sys_openat2+0x94/0x130 [ 394.776835][T25595] __x64_sys_openat+0xf2/0x120 [ 394.776864][T25595] x64_sys_call+0x2b07/0x3000 [ 394.776892][T25595] do_syscall_64+0xc0/0x2a0 [ 394.776942][T25595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.776972][T25595] RIP: 0033:0x7fda109bc84e [ 394.776991][T25595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 394.777097][T25595] RSP: 002b:00007fda0f44eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 394.777123][T25595] RAX: ffffffffffffffda RBX: 00007fda0f44f6c0 RCX: 00007fda109bc84e [ 394.777141][T25595] RDX: 0000000000000002 RSI: 00007fda0f44ef90 RDI: ffffffffffffff9c [ 394.777158][T25595] RBP: 00007fda0f44f090 R08: 0000000000000000 R09: 0000000000000000 [ 394.777173][T25595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.777235][T25595] R13: 00007fda10c76038 R14: 00007fda10c75fa0 R15: 00007fff5d64e7d8 [ 394.777294][T25595] [ 395.042756][ T28] kauditd_printk_skb: 2737 callbacks suppressed [ 395.042775][ T28] audit: type=1326 audit(2000000050.146:161814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd67bf79 code=0x7ffc0000 [ 395.085082][ T28] audit: type=1326 audit(2000000050.146:161815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd67bf79 code=0x7ffc0000 [ 395.109414][ T28] audit: type=1326 audit(2000000050.146:161816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd67bf79 code=0x7ffc0000 [ 395.133249][ T28] audit: type=1326 audit(2000000050.146:161817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd67bf79 code=0x7ffc0000 [ 395.157224][ T28] audit: type=1326 audit(2000000050.146:161818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9fd67bf79 code=0x7ffc0000 [ 395.181657][ T28] audit: type=1326 audit(2000000050.146:161819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd67bf79 code=0x7ffc0000 [ 395.205772][ T28] audit: type=1326 audit(2000000050.146:161820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd67bf79 code=0x7ffc0000 [ 395.230156][ T28] audit: type=1326 audit(2000000050.146:161821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd67bf79 code=0x7ffc0000 [ 395.253880][ T28] audit: type=1326 audit(2000000050.146:161822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd67bf79 code=0x7ffc0000 [ 395.277862][ T28] audit: type=1326 audit(2000000050.146:161823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25603 comm="syz.6.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9fd67bf79 code=0x7ffc0000 [ 395.320403][T25610] loop5: detected capacity change from 0 to 512 [ 395.339973][T25610] EXT4-fs warning (device loop5): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 395.376234][T25610] EXT4-fs (loop5): mount failed [ 395.388565][T25625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61667 sclass=netlink_route_socket pid=25625 comm=syz.2.6167 [ 395.411102][T25625] netlink: 'syz.2.6167': attribute type 6 has an invalid length. [ 395.416876][T25628] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 395.506476][T25627] loop1: detected capacity change from 0 to 4096 [ 395.543917][T25627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 395.693109][T25618] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 395.703893][T25618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.719261][T25618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.079207][T25658] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6177'. [ 396.088316][T25658] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6177'. [ 396.162783][T25664] loop6: detected capacity change from 0 to 512 [ 396.196440][T25664] EXT4-fs: Ignoring removed bh option [ 396.207080][T25664] EXT4-fs: Ignoring removed mblk_io_submit option [ 396.213601][T25664] ext4: Unknown parameter 'fsmagic' [ 396.242477][T25664] loop6: detected capacity change from 0 to 764 [ 396.362645][T21246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.398896][T25677] netlink: 216 bytes leftover after parsing attributes in process `syz.8.6185'. [ 396.753610][T25697] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6190'. [ 396.769833][T25699] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6191'. [ 396.794507][T25696] loop1: detected capacity change from 0 to 4096 [ 396.822764][T25696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 396.860665][T25696] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 396.900326][T21246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.990255][T25710] syzkaller0: entered promiscuous mode [ 396.995818][T25710] syzkaller0: entered allmulticast mode [ 397.022654][T25718] bond0: (slave bond_slave_1): Releasing backup interface [ 397.038595][T25726] loop6: detected capacity change from 0 to 128 [ 397.131783][T25730] loop5: detected capacity change from 0 to 512 [ 397.252118][T25730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.332509][T25730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6205'. [ 397.363307][T25730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6205'. [ 397.372312][T25730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6205'. [ 397.416171][T23853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.611003][T25743] loop5: detected capacity change from 0 to 4096 [ 397.638688][T25743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.667169][T25743] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 397.679241][T25750] FAULT_INJECTION: forcing a failure. [ 397.679241][T25750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.692458][T25750] CPU: 1 UID: 0 PID: 25750 Comm: syz.8.6211 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 397.692522][T25750] Tainted: [W]=WARN [ 397.692531][T25750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 397.692549][T25750] Call Trace: [ 397.692557][T25750] [ 397.692567][T25750] __dump_stack+0x1d/0x30 [ 397.692601][T25750] dump_stack_lvl+0x95/0xd0 [ 397.692696][T25750] dump_stack+0x15/0x1b [ 397.692723][T25750] should_fail_ex+0x263/0x280 [ 397.692767][T25750] should_fail+0xb/0x20 [ 397.692845][T25750] should_fail_usercopy+0x1a/0x20 [ 397.692871][T25750] _copy_from_user+0x1c/0xb0 [ 397.692912][T25750] ___sys_sendmsg+0xc1/0x1e0 [ 397.692961][T25750] __x64_sys_sendmsg+0xd4/0x160 [ 397.692996][T25750] x64_sys_call+0x17ba/0x3000 [ 397.693070][T25750] do_syscall_64+0xc0/0x2a0 [ 397.693137][T25750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.693168][T25750] RIP: 0033:0x7f3b59c6bf79 [ 397.693228][T25750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.693259][T25750] RSP: 002b:00007f3b586c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.693286][T25750] RAX: ffffffffffffffda RBX: 00007f3b59ee5fa0 RCX: 00007f3b59c6bf79 [ 397.693304][T25750] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 397.693322][T25750] RBP: 00007f3b586c7090 R08: 0000000000000000 R09: 0000000000000000 [ 397.693337][T25750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.693353][T25750] R13: 00007f3b59ee6038 R14: 00007f3b59ee5fa0 R15: 00007fff4be49918 [ 397.693376][T25750] [ 397.937064][T25756] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6214'. [ 397.948433][T25756] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6214'. [ 397.986782][T23853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.108919][T25768] loop6: detected capacity change from 0 to 128 [ 398.145252][T25768] loop6: detected capacity change from 0 to 128 [ 398.156285][T25767] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 398.244831][T25781] bio_check_eod: 153 callbacks suppressed [ 398.244848][T25781] syz.6.6218: attempt to access beyond end of device [ 398.244848][T25781] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 398.266652][T25782] netlink: 'syz.2.6222': attribute type 16 has an invalid length. [ 398.274731][T25782] netlink: 'syz.2.6222': attribute type 17 has an invalid length. [ 398.290206][T25781] syz.6.6218: attempt to access beyond end of device [ 398.290206][T25781] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 398.312793][T25781] syz.6.6218: attempt to access beyond end of device [ 398.312793][T25781] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 398.326831][T25781] syz.6.6218: attempt to access beyond end of device [ 398.326831][T25781] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 398.340491][T25781] syz.6.6218: attempt to access beyond end of device [ 398.340491][T25781] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 398.354548][T25781] syz.6.6218: attempt to access beyond end of device [ 398.354548][T25781] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 398.368484][T25781] syz.6.6218: attempt to access beyond end of device [ 398.368484][T25781] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 398.382202][T25781] syz.6.6218: attempt to access beyond end of device [ 398.382202][T25781] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 398.389771][T25780] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 398.395882][T25781] syz.6.6218: attempt to access beyond end of device [ 398.395882][T25781] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 398.418789][T25781] syz.6.6218: attempt to access beyond end of device [ 398.418789][T25781] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 398.529888][T25791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.575957][T25782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.595610][T25791] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 398.619088][T23853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.702085][T25803] FAULT_INJECTION: forcing a failure. [ 398.702085][T25803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.715541][T25803] CPU: 1 UID: 0 PID: 25803 Comm: syz.5.6229 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 398.715583][T25803] Tainted: [W]=WARN [ 398.715594][T25803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 398.715607][T25803] Call Trace: [ 398.715614][T25803] [ 398.715621][T25803] __dump_stack+0x1d/0x30 [ 398.715646][T25803] dump_stack_lvl+0x95/0xd0 [ 398.715727][T25803] dump_stack+0x15/0x1b [ 398.715829][T25803] should_fail_ex+0x263/0x280 [ 398.715866][T25803] should_fail+0xb/0x20 [ 398.715921][T25803] should_fail_usercopy+0x1a/0x20 [ 398.715955][T25803] _copy_to_user+0x20/0xa0 [ 398.715983][T25803] bpf_verifier_vlog+0x36e/0x5a0 [ 398.716013][T25803] __btf_verifier_log+0x7f/0xb0 [ 398.716053][T25803] ? should_fail_ex+0xd9/0x280 [ 398.716084][T25803] ? btf_parse_hdr+0x1e6/0x3c0 [ 398.716172][T25803] btf_parse_hdr+0x1f9/0x3c0 [ 398.716199][T25803] btf_new_fd+0x246/0x7b0 [ 398.716228][T25803] ? ns_capable+0x7c/0xb0 [ 398.716262][T25803] bpf_btf_load+0x112/0x130 [ 398.716301][T25803] __sys_bpf+0x357/0x7b0 [ 398.716334][T25803] __x64_sys_bpf+0x41/0x50 [ 398.716355][T25803] x64_sys_call+0x28e1/0x3000 [ 398.716406][T25803] do_syscall_64+0xc0/0x2a0 [ 398.716503][T25803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.716555][T25803] RIP: 0033:0x7fda109fbf79 [ 398.716575][T25803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.716643][T25803] RSP: 002b:00007fda0f44f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.716668][T25803] RAX: ffffffffffffffda RBX: 00007fda10c75fa0 RCX: 00007fda109fbf79 [ 398.716756][T25803] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 398.716774][T25803] RBP: 00007fda0f44f090 R08: 0000000000000000 R09: 0000000000000000 [ 398.716791][T25803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.716807][T25803] R13: 00007fda10c76038 R14: 00007fda10c75fa0 R15: 00007fff5d64e7d8 [ 398.716834][T25803] [ 398.979522][T25812] 9p: Bad value for 'wfdno' [ 399.113772][T25821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.127802][T25821] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 399.138356][T25821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.150905][T25821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.215568][T25825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.231983][T25825] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 399.253501][T23853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.366324][T25828] netlink: 'syz.5.6241': attribute type 16 has an invalid length. [ 399.374389][T25828] netlink: 'syz.5.6241': attribute type 17 has an invalid length. [ 399.408647][T25828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.469942][T25830] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 399.478398][T25830] EXT4-fs (loop6): orphan cleanup on readonly fs [ 399.486668][T25830] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.6242: corrupted inode contents [ 399.498695][T25830] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 399.499448][T25830] EXT4-fs (loop6): Remounting filesystem read-only [ 399.516066][T25830] EXT4-fs (loop6): 1 truncate cleaned up [ 399.524320][T18159] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 399.535039][T18159] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 399.546281][T18159] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 399.557210][T25830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.612084][T25840] SELinux: policydb version 1615122464 does not match my version range 15-35 [ 399.621171][T25840] SELinux: failed to load policy [ 399.666310][T25170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.669630][T25845] 9p: Bad value for 'wfdno' [ 399.710196][T25849] FAULT_INJECTION: forcing a failure. [ 399.710196][T25849] name failslab, interval 1, probability 0, space 0, times 0 [ 399.723061][T25849] CPU: 0 UID: 0 PID: 25849 Comm: syz.5.6250 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 399.723142][T25849] Tainted: [W]=WARN [ 399.723149][T25849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 399.723160][T25849] Call Trace: [ 399.723167][T25849] [ 399.723174][T25849] __dump_stack+0x1d/0x30 [ 399.723197][T25849] dump_stack_lvl+0x95/0xd0 [ 399.723217][T25849] dump_stack+0x15/0x1b [ 399.723315][T25849] should_fail_ex+0x263/0x280 [ 399.723348][T25849] should_failslab+0x8c/0xb0 [ 399.723428][T25849] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 399.723451][T25849] ? __get_vm_area_node+0x106/0x1d0 [ 399.723478][T25849] __get_vm_area_node+0x106/0x1d0 [ 399.723501][T25849] __vmalloc_node_range_noprof+0x291/0x12b0 [ 399.723524][T25849] ? sel_write_load+0x156/0x380 [ 399.723630][T25849] ? __rcu_read_unlock+0x4e/0x70 [ 399.723655][T25849] ? avc_has_perm_noaudit+0xab/0x130 [ 399.723685][T25849] ? sel_write_load+0x156/0x380 [ 399.723774][T25849] vmalloc_noprof+0x82/0xb0 [ 399.723834][T25849] ? sel_write_load+0x156/0x380 [ 399.723861][T25849] sel_write_load+0x156/0x380 [ 399.723906][T25849] ? __pfx_sel_write_load+0x10/0x10 [ 399.724017][T25849] vfs_write+0x269/0x9f0 [ 399.724050][T25849] ? __rcu_read_unlock+0x4e/0x70 [ 399.724075][T25849] ? __fget_files+0x184/0x1c0 [ 399.724146][T25849] ? mutex_lock+0x57/0x90 [ 399.724170][T25849] ksys_write+0xdc/0x1a0 [ 399.724188][T25849] __x64_sys_write+0x40/0x50 [ 399.724203][T25849] x64_sys_call+0x2847/0x3000 [ 399.724225][T25849] do_syscall_64+0xc0/0x2a0 [ 399.724317][T25849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.724366][T25849] RIP: 0033:0x7fda109fbf79 [ 399.724380][T25849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.724455][T25849] RSP: 002b:00007fda0f44f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 399.724473][T25849] RAX: ffffffffffffffda RBX: 00007fda10c75fa0 RCX: 00007fda109fbf79 [ 399.724485][T25849] RDX: 0000000000000020 RSI: 0000200000001380 RDI: 0000000000000003 [ 399.724496][T25849] RBP: 00007fda0f44f090 R08: 0000000000000000 R09: 0000000000000000 [ 399.724581][T25849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.724592][T25849] R13: 00007fda10c76038 R14: 00007fda10c75fa0 R15: 00007fff5d64e7d8 [ 399.724612][T25849] [ 399.724620][T25849] syz.5.6250: vmalloc error: size 32, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 399.974233][T25849] CPU: 0 UID: 0 PID: 25849 Comm: syz.5.6250 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 399.974289][T25849] Tainted: [W]=WARN [ 399.974296][T25849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 399.974309][T25849] Call Trace: [ 399.974317][T25849] [ 399.974327][T25849] __dump_stack+0x1d/0x30 [ 399.974369][T25849] dump_stack_lvl+0x95/0xd0 [ 399.974397][T25849] dump_stack+0x15/0x1b [ 399.974449][T25849] warn_alloc+0x145/0x1c0 [ 399.974483][T25849] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 399.974524][T25849] ? __rcu_read_unlock+0x4e/0x70 [ 399.974557][T25849] ? avc_has_perm_noaudit+0xab/0x130 [ 399.974673][T25849] ? sel_write_load+0x156/0x380 [ 399.974784][T25849] vmalloc_noprof+0x82/0xb0 [ 399.974809][T25849] ? sel_write_load+0x156/0x380 [ 399.974861][T25849] sel_write_load+0x156/0x380 [ 399.974894][T25849] ? __pfx_sel_write_load+0x10/0x10 [ 399.974930][T25849] vfs_write+0x269/0x9f0 [ 399.974994][T25849] ? __rcu_read_unlock+0x4e/0x70 [ 399.975067][T25849] ? __fget_files+0x184/0x1c0 [ 399.975174][T25849] ? mutex_lock+0x57/0x90 [ 399.975211][T25849] ksys_write+0xdc/0x1a0 [ 399.975233][T25849] __x64_sys_write+0x40/0x50 [ 399.975302][T25849] x64_sys_call+0x2847/0x3000 [ 399.975334][T25849] do_syscall_64+0xc0/0x2a0 [ 399.975379][T25849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.975407][T25849] RIP: 0033:0x7fda109fbf79 [ 399.975428][T25849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.975451][T25849] RSP: 002b:00007fda0f44f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 399.975477][T25849] RAX: ffffffffffffffda RBX: 00007fda10c75fa0 RCX: 00007fda109fbf79 [ 399.975536][T25849] RDX: 0000000000000020 RSI: 0000200000001380 RDI: 0000000000000003 [ 399.975550][T25849] RBP: 00007fda0f44f090 R08: 0000000000000000 R09: 0000000000000000 [ 399.975566][T25849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.975582][T25849] R13: 00007fda10c76038 R14: 00007fda10c75fa0 R15: 00007fff5d64e7d8 [ 399.975643][T25849] [ 399.975652][T25849] Mem-Info: [ 400.188225][T25849] active_anon:13953 inactive_anon:4 isolated_anon:0 [ 400.188225][T25849] active_file:12407 inactive_file:20017 isolated_file:0 [ 400.188225][T25849] unevictable:0 dirty:150 writeback:3 [ 400.188225][T25849] slab_reclaimable:4270 slab_unreclaimable:29838 [ 400.188225][T25849] mapped:30802 shmem:4248 pagetables:1825 [ 400.188225][T25849] sec_pagetables:0 bounce:0 [ 400.188225][T25849] kernel_misc_reclaimable:0 [ 400.188225][T25849] free:1819966 free_pcp:11630 free_cma:0 [ 400.233493][T25849] Node 0 active_anon:57552kB inactive_anon:16kB active_file:49628kB inactive_file:80068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124252kB dirty:600kB writeback:12kB shmem:18848kB kernel_stack:6272kB pagetables:7300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 400.261158][T25849] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.290891][T25849] lowmem_reserve[]: 0 2879 7858 7858 [ 400.296336][T25849] Node 0 DMA32 free:2944832kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948360kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 400.327870][T25849] lowmem_reserve[]: 0 0 4978 4978 [ 400.333074][T25849] Node 0 Normal free:4311900kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61380kB inactive_anon:16kB active_file:49628kB inactive_file:80068kB unevictable:0kB writepending:612kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:45184kB local_pcp:16908kB free_cma:0kB [ 400.366308][T25849] lowmem_reserve[]: 0 0 0 0 [ 400.371095][T25849] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 400.383962][T25849] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944832kB [ 400.400180][T25849] Node 0 Normal: 801*4kB (UME) 1920*8kB (UME) 1623*16kB (UME) 890*32kB (UME) 718*64kB (UM) 359*128kB (UME) 207*256kB (UM) 208*512kB (UM) 146*1024kB (UM) 114*2048kB (UME) 880*4096kB (UM) = 4311860kB [ 400.419907][T25849] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 400.429298][T25849] 38974 total pagecache pages [ 400.433984][T25849] 5 pages in swap cache [ 400.438165][T25849] Free swap = 124976kB [ 400.442380][T25849] Total swap = 124996kB [ 400.446570][T25849] 2097051 pages RAM [ 400.450432][T25849] 0 pages HighMem/MovableOnly [ 400.455123][T25849] 81561 pages reserved [ 400.459769][T21246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.622158][T25862] __quota_error: 5419 callbacks suppressed [ 400.622214][T25862] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 400.639477][T25861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.662192][T25861] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.6256: Allocating blocks 209-513 which overlap fs metadata [ 400.676201][T25862] EXT4-fs warning (device loop6): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 400.694524][T25860] EXT4-fs (loop5): pa ffff888107e21700: logic 48, phys. 177, len 21 [ 400.703041][T25860] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 19 [ 400.715140][T25862] EXT4-fs (loop6): mount failed [ 400.757982][ T28] audit: type=1326 audit(2000000055.487:167236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.6.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9fd675d97 code=0x7ffc0000 [ 400.781703][ T28] audit: type=1326 audit(2000000055.487:167237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.6.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc9fd61d399 code=0x7ffc0000 [ 400.805474][ T28] audit: type=1326 audit(2000000055.487:167238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.6.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9fd675d97 code=0x7ffc0000 [ 400.829799][ T28] audit: type=1326 audit(2000000055.487:167239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.6.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc9fd61d399 code=0x7ffc0000 [ 400.853906][ T28] audit: type=1326 audit(2000000055.487:167240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.6.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9fd675d97 code=0x7ffc0000 [ 400.877855][ T28] audit: type=1326 audit(2000000055.487:167241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.6.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc9fd61d399 code=0x7ffc0000 [ 400.901579][ T28] audit: type=1326 audit(2000000055.487:167242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.6.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9fd675d97 code=0x7ffc0000 [ 400.925222][ T28] audit: type=1326 audit(2000000055.487:167243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.6.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc9fd61d399 code=0x7ffc0000 [ 400.948935][ T28] audit: type=1326 audit(2000000055.487:167244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25858 comm="syz.6.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9fd675d97 code=0x7ffc0000 [ 400.975207][T23853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.997514][T25874] set_capacity_and_notify: 8 callbacks suppressed [ 400.997588][T25874] loop5: detected capacity change from 0 to 256 [ 401.034189][T25874] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 401.073435][T25874] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 401.086322][T25874] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 401.179277][T25880] loop5: detected capacity change from 0 to 512 [ 401.244852][T25880] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 401.269870][T25880] EXT4-fs (loop5): orphan cleanup on readonly fs [ 401.293169][T25880] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.6260: corrupted inode contents [ 401.305114][T25880] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 401.318738][T25887] FAULT_INJECTION: forcing a failure. [ 401.318738][T25887] name failslab, interval 1, probability 0, space 0, times 0 [ 401.340965][T25887] CPU: 1 UID: 0 PID: 25887 Comm: syz.2.6262 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 401.341006][T25887] Tainted: [W]=WARN [ 401.341016][T25887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 401.341033][T25887] Call Trace: [ 401.341041][T25887] [ 401.341051][T25887] __dump_stack+0x1d/0x30 [ 401.341101][T25887] dump_stack_lvl+0x95/0xd0 [ 401.341125][T25887] dump_stack+0x15/0x1b [ 401.341209][T25887] should_fail_ex+0x263/0x280 [ 401.341280][T25887] should_failslab+0x8c/0xb0 [ 401.341304][T25887] kmem_cache_alloc_noprof+0x68/0x490 [ 401.341327][T25887] ? skb_clone+0x151/0x1f0 [ 401.341416][T25887] skb_clone+0x151/0x1f0 [ 401.341443][T25887] __netlink_deliver_tap+0x2c9/0x500 [ 401.341467][T25887] ? netlink_attachskb+0x2e2/0x660 [ 401.341588][T25887] netlink_sendskb+0x126/0x150 [ 401.341776][T25887] netlink_unicast+0x2a2/0x690 [ 401.341822][T25887] netlink_ack+0x4c8/0x500 [ 401.341853][T25887] netlink_rcv_skb+0x192/0x220 [ 401.341881][T25887] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 401.341931][T25887] nfnetlink_rcv+0x167/0x1720 [ 401.341999][T25887] ? __kfree_skb+0x109/0x150 [ 401.342023][T25887] ? nlmon_xmit+0x4f/0x60 [ 401.342051][T25887] ? consume_skb+0x49/0x140 [ 401.342077][T25887] ? nlmon_xmit+0x4f/0x60 [ 401.342104][T25887] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 401.342192][T25887] ? __dev_queue_xmit+0x139a/0x1f20 [ 401.342222][T25887] ? __dev_queue_xmit+0x148/0x1f20 [ 401.342253][T25887] ? ref_tracker_free+0x37d/0x3e0 [ 401.342296][T25887] ? __netlink_deliver_tap+0x4dc/0x500 [ 401.342356][T25887] netlink_unicast+0x5c0/0x690 [ 401.342385][T25887] netlink_sendmsg+0x5c8/0x6f0 [ 401.342420][T25887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.342466][T25887] ____sys_sendmsg+0x5af/0x600 [ 401.342523][T25887] ___sys_sendmsg+0x195/0x1e0 [ 401.342573][T25887] __x64_sys_sendmsg+0xd4/0x160 [ 401.342625][T25887] x64_sys_call+0x17ba/0x3000 [ 401.342652][T25887] do_syscall_64+0xc0/0x2a0 [ 401.342697][T25887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.342731][T25887] RIP: 0033:0x7fbb517dbf79 [ 401.342753][T25887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.342773][T25887] RSP: 002b:00007fbb50237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.342793][T25887] RAX: ffffffffffffffda RBX: 00007fbb51a55fa0 RCX: 00007fbb517dbf79 [ 401.342806][T25887] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 401.342819][T25887] RBP: 00007fbb50237090 R08: 0000000000000000 R09: 0000000000000000 [ 401.342834][T25887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.342928][T25887] R13: 00007fbb51a56038 R14: 00007fbb51a55fa0 R15: 00007ffc43f55e68 [ 401.342957][T25887] [ 401.633410][T25880] EXT4-fs (loop5): Remounting filesystem read-only [ 401.640138][T25880] EXT4-fs (loop5): 1 truncate cleaned up [ 401.645904][T18160] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 401.656748][T18160] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 401.667497][T18160] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 401.724453][T25891] binfmt_misc: register: failed to install interpreter file ./file2 [ 401.734863][T25880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.736064][T25891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.762017][ T2999] ================================================================== [ 401.770161][ T2999] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 401.771321][T25891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.778280][ T2999] [ 401.778291][ T2999] write to 0xffff888107ddb7b0 of 8 bytes by task 3299 on cpu 1: [ 401.796058][ T2999] dentry_unlink_inode+0x65/0x260 [ 401.801147][ T2999] d_delete+0xc8/0xe0 [ 401.805173][ T2999] d_delete_notify+0x32/0x100 [ 401.809880][ T2999] vfs_unlink+0x289/0x490 [ 401.814257][ T2999] filename_unlinkat+0x1e2/0x410 [ 401.819238][ T2999] __se_sys_unlink+0x2b/0xe0 [ 401.823875][ T2999] __x64_sys_unlink+0x1f/0x30 [ 401.828584][ T2999] x64_sys_call+0x2f48/0x3000 [ 401.833412][ T2999] do_syscall_64+0xc0/0x2a0 [ 401.837960][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.843882][ T2999] [ 401.846222][ T2999] read to 0xffff888107ddb7b0 of 8 bytes by task 2999 on cpu 0: [ 401.853782][ T2999] step_into_slowpath+0x12c/0x4c0 [ 401.859028][ T2999] path_lookupat+0x330/0x500 [ 401.863649][ T2999] filename_lookup+0x190/0x390 [ 401.868452][ T2999] do_readlinkat+0x74/0x2f0 [ 401.872989][ T2999] __x64_sys_readlink+0x47/0x60 [ 401.877884][ T2999] x64_sys_call+0x2af1/0x3000 [ 401.882689][ T2999] do_syscall_64+0xc0/0x2a0 [ 401.887324][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.893257][ T2999] [ 401.895621][ T2999] value changed: 0xffff88810b1fcf08 -> 0x0000000000000000 [ 401.902861][ T2999] [ 401.905215][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 401.911392][ T2999] CPU: 0 UID: 0 PID: 2999 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 401.922275][ T2999] Tainted: [W]=WARN [ 401.926096][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 401.936186][ T2999] ================================================================== [ 402.015431][T23853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.