last executing test programs: 4m18.694922058s ago: executing program 3 (id=984): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf81f3ffffff000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) 4m18.58757325s ago: executing program 3 (id=989): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0xd0ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 4m18.500079734s ago: executing program 3 (id=992): r0 = socket$inet(0x2, 0x3, 0x4) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4622, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x50}}, 0x40080c0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 4m18.386149315s ago: executing program 3 (id=995): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x4000064f) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 4m18.140284192s ago: executing program 3 (id=997): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000009000300060000000400040008000600", @ANYRES32=r2], 0x5c}, 0x1, 0xf000}, 0x0) r6 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fcffff1e74019e000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x10}, 0x94) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}, 0x24040) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) 4m17.886112219s ago: executing program 3 (id=1001): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x8000000000000001, 0x1) (async) lseek(r2, 0x8000000000000001, 0x1) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) (async) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0xe, 0x1}, 0xe, 0x0, &(0x7f0000000000)="ebf582e54750b481cd1f9e0673a9424640729c6654931aa3b84c2bfbe442c06038b9", 0x22, 0x5, 0x0, 0x33, 0x6, 0x5, &(0x7f0000000040)="db1c142d624b303d2ce452ac94ee362eeedbe93c461f38de4c6385b03167c907a6599c92f25a233fd454d622cd560bc27a602fbe99cca2246d22e92d46dda6dc57a9a40afb6385b999e9a080b60af9da7c15f3c00ab53cc0fd30cda52d41058ec0dc8e3d3e8ad17382066052f74ab2ba10ac7c3e51b21a8919", [{0xfffffff9, 0x800, 0x3ff}, {0xb7a8, 0x7, 0x3ff}, {0x4, 0x8001, 0x10}, {0x6, 0x6, 0x2}, {0x7ff, 0x11}, {0xc, 0x4}, {0x1, 0x0, 0x80000001}, {0x23, 0xf, 0x2e}, {0x80000001, 0x5b2738ac, 0x3ff}, {0xc, 0xfffffffb, 0x5}, {0x81, 0xfffffffb, 0xbe9}, {0x8, 0x6, 0x1}, {0x0, 0x6, 0xcc2}, {0x101, 0x4, 0x9}, {0x2, 0x1, 0x3}, {0x9a09, 0x8, 0x7}, {0x3, 0x4, 0xb}, {0x2d2, 0x4}, {0xf, 0x8, 0x7ff}, {0xd5, 0x18000, 0x96}, {0x2, 0x0, 0x4}, {0x43c, 0x5, 0xd}, {0x0, 0x6, 0x1}, {0x1d2, 0x4, 0x3}, {0x80, 0x10001, 0x3}, {0x7, 0x9, 0xbec}, {0xe, 0x100, 0x80}, {0xffff, 0x9, 0x6}, {0x9, 0x0, 0x6}, {0x1, 0xffff, 0x9}, {0x200, 0x0, 0x30000000}, {0x4, 0x6, 0xa}, {0x400, 0x5, 0x2}, {0x5, 0x443, 0x97}, {0xfffffffe, 0x1ff, 0x6}, {0x3, 0x1, 0x9}, {0x1800000, 0x3}, {0x3, 0x8, 0x800}, {0x1000, 0x200, 0x1636}, {0x3ff, 0x6, 0x2}, {0x80000000, 0x7, 0x1}, {0x5, 0x7ff, 0x688}, {0x8, 0x9, 0xfffffffd}, {0x7ff, 0x7, 0x8}, {0x7ff, 0x6, 0xfffffffc}, {0x6, 0x396, 0x6}, {0x9, 0x9, 0x7}, {0x100, 0x1, 0x6}, {0x6, 0x6, 0x3}, {0x2, 0x3, 0x8}, {0xfffffbff, 0xffffffff, 0x9}]}) 4m2.514471041s ago: executing program 32 (id=1001): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x8000000000000001, 0x1) (async) lseek(r2, 0x8000000000000001, 0x1) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) (async) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0xe, 0x1}, 0xe, 0x0, &(0x7f0000000000)="ebf582e54750b481cd1f9e0673a9424640729c6654931aa3b84c2bfbe442c06038b9", 0x22, 0x5, 0x0, 0x33, 0x6, 0x5, &(0x7f0000000040)="db1c142d624b303d2ce452ac94ee362eeedbe93c461f38de4c6385b03167c907a6599c92f25a233fd454d622cd560bc27a602fbe99cca2246d22e92d46dda6dc57a9a40afb6385b999e9a080b60af9da7c15f3c00ab53cc0fd30cda52d41058ec0dc8e3d3e8ad17382066052f74ab2ba10ac7c3e51b21a8919", [{0xfffffff9, 0x800, 0x3ff}, {0xb7a8, 0x7, 0x3ff}, {0x4, 0x8001, 0x10}, {0x6, 0x6, 0x2}, {0x7ff, 0x11}, {0xc, 0x4}, {0x1, 0x0, 0x80000001}, {0x23, 0xf, 0x2e}, {0x80000001, 0x5b2738ac, 0x3ff}, {0xc, 0xfffffffb, 0x5}, {0x81, 0xfffffffb, 0xbe9}, {0x8, 0x6, 0x1}, {0x0, 0x6, 0xcc2}, {0x101, 0x4, 0x9}, {0x2, 0x1, 0x3}, {0x9a09, 0x8, 0x7}, {0x3, 0x4, 0xb}, {0x2d2, 0x4}, {0xf, 0x8, 0x7ff}, {0xd5, 0x18000, 0x96}, {0x2, 0x0, 0x4}, {0x43c, 0x5, 0xd}, {0x0, 0x6, 0x1}, {0x1d2, 0x4, 0x3}, {0x80, 0x10001, 0x3}, {0x7, 0x9, 0xbec}, {0xe, 0x100, 0x80}, {0xffff, 0x9, 0x6}, {0x9, 0x0, 0x6}, {0x1, 0xffff, 0x9}, {0x200, 0x0, 0x30000000}, {0x4, 0x6, 0xa}, {0x400, 0x5, 0x2}, {0x5, 0x443, 0x97}, {0xfffffffe, 0x1ff, 0x6}, {0x3, 0x1, 0x9}, {0x1800000, 0x3}, {0x3, 0x8, 0x800}, {0x1000, 0x200, 0x1636}, {0x3ff, 0x6, 0x2}, {0x80000000, 0x7, 0x1}, {0x5, 0x7ff, 0x688}, {0x8, 0x9, 0xfffffffd}, {0x7ff, 0x7, 0x8}, {0x7ff, 0x6, 0xfffffffc}, {0x6, 0x396, 0x6}, {0x9, 0x9, 0x7}, {0x100, 0x1, 0x6}, {0x6, 0x6, 0x3}, {0x2, 0x3, 0x8}, {0xfffffbff, 0xffffffff, 0x9}]}) 1m48.417491251s ago: executing program 5 (id=2609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x2d79, &(0x7f0000000100)={0x0, 0xa9d9, 0x200, 0x1, 0x397}, &(0x7f0000000000)=0x0, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) poll(&(0x7f0000000300)=[{r5, 0x9014}], 0x1, 0x10000) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r6, 0x40085875) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xad0e92496858b465, &(0x7f0000000180)=0x70, 0x0, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010010000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000048000000060a050000000000000000000100000008000b4000000000200004801c000180090001007866726d000000000c00028008000240000000020900010073797a30"], 0xbc}, 0x1, 0x0, 0x0, 0xd9}, 0x0) 1m48.308806842s ago: executing program 5 (id=2613): bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x400c0c0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x10, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x4}, {0x1002, 0x2, 0xffffffff, 0x9e6d}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x7, 0x9, 0xf3a7}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x440}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x13, 0x800}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 1m47.627904272s ago: executing program 5 (id=2621): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e0001002abd7000fedbdb2500000000", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7fff, 0x7, 0xc8e, 0x6}, &(0x7f0000000080)=0x14) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x28000600) r3 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r3, 0x409, 0x3f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = io_uring_setup(0x5266, &(0x7f0000000000)={0x0, 0x1c38, 0x80, 0x1, 0x2e1}) close_range(r5, r5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r6, &(0x7f0000000200)=""/202, 0xca) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) 1m46.778611702s ago: executing program 5 (id=2635): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000200)='./control\x00', 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00048, &(0x7f0000000140), 0x1, 0x7c8, &(0x7f0000001a80)="$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") chdir(&(0x7f0000000180)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x37d1a000) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r2) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) getdents64(0xffffffffffffff9c, &(0x7f0000000000)=""/40, 0x28) r4 = getpgrp(0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000080), 0x20) read(r5, &(0x7f00000000c0)=""/66, 0x42) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r6, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="48000000002002002400128009000100626f6e640000000014000280050001000300000008000b00", @ANYRES32=0x0, @ANYBLOB="0a000100aaaaaaaaaa110000140012800c0001006d616376746170000400028091211b92df15796882de780a07be6262051614d7e94477904c43dd4564a1fae4a6ebbe6709b1aaa04c9b8036"], 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x44000) 1m46.305558708s ago: executing program 5 (id=2651): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) setrlimit(0x1, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000001ff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x56b802, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000024c0)=ANY=[@ANYBLOB="2c000002", @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf250d000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x2c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETVESABLANK(r7, 0x560e, &(0x7f0000000140)) unlink(0x0) statx(r7, 0x0, 0x4000, 0x20, &(0x7f00000003c0)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r8 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804802, &(0x7f0000000040)={[{@user_xattr}, {@dax_inode}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_continue}, {@noquota}, {@usrquota}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r8, 0x407, 0x100004) 1m46.129411914s ago: executing program 5 (id=2654): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) getdents64(r1, &(0x7f0000001000)=""/153, 0x99) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07020000000000c50000010000002c00048005000300010000000400030000000000050003000100000005000300010000000500030005e6000008000100030000000800020003"], 0x50}}, 0x800) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x1, 0xffffffffffffbbfe, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 1m46.128250533s ago: executing program 33 (id=2654): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) getdents64(r1, &(0x7f0000001000)=""/153, 0x99) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07020000000000c50000010000002c00048005000300010000000400030000000000050003000100000005000300010000000500030005e6000008000100030000000800020003"], 0x50}}, 0x800) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x1, 0xffffffffffffbbfe, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 44.125447838s ago: executing program 2 (id=2878): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6d", 0x8}) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="7900000ceb9800070000001700842ef307b70ea5a66d9c531d0a60f4b911df138064dd7fea4d0c0a4db8ad1f5afe28690577fe8a119b42ed43f7edb9df24a7b0f6fd212000"/79], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) gettid() ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000980)=[{{&(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xe5, 0x3, 0x2}]}}}], 0x18}}], 0x1, 0x8080) listen(r0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) accept4$unix(r0, 0x0, 0x0, 0x80800) 41.196947346s ago: executing program 2 (id=2889): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000005580)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/195, 0xc3}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001200)=""/74, 0x4a}, 0x1}, {{&(0x7f0000001280)=@alg, 0x80, &(0x7f0000001800)=[{&(0x7f0000001300)=""/134, 0x86}, {&(0x7f00000013c0)=""/198, 0xc6}, {&(0x7f00000014c0)=""/105, 0x69}, {&(0x7f0000001540)=""/9, 0x9}, {&(0x7f0000001580)=""/54, 0x36}, {&(0x7f00000015c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/182, 0xb6}, {&(0x7f00000016c0)=""/234, 0xea}, {&(0x7f00000017c0)=""/18, 0x12}], 0x9, &(0x7f00000018c0)=""/39, 0x27}, 0x5}, {{&(0x7f0000001900)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001980)=""/91, 0x5b}, {&(0x7f0000001a00)=""/26, 0x1a}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/99, 0x63}, {&(0x7f0000001b80)=""/249, 0xf9}, {&(0x7f0000001c80)=""/51, 0x33}], 0x6}, 0x10001}, {{&(0x7f0000001d40)=@qipcrtr, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/176, 0xb0}], 0x2, &(0x7f0000002ec0)=""/46, 0x2e}, 0x2}, {{&(0x7f0000002f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/78, 0x4e}], 0x1, &(0x7f0000003040)=""/4096, 0x1000}, 0x7fffffff}, {{&(0x7f0000004040)=@nfc_llcp, 0x80, &(0x7f00000054c0)=[{&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)}, {&(0x7f0000005100)=""/146, 0x92}, {&(0x7f00000051c0)=""/143, 0x8f}, {&(0x7f0000005280)=""/151, 0x97}, {&(0x7f0000005340)=""/216, 0xd8}, {&(0x7f0000005440)=""/91, 0x5b}], 0x7, &(0x7f0000005540)=""/10, 0xa}, 0xffffff98}], 0x6, 0x10000, &(0x7f0000005700)) 40.875294728s ago: executing program 2 (id=2898): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r1, @ANYBLOB="1400020000000000000000000000ffff"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r4, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="1400020000000000000000000000ffff00000000080008007002"], 0x34}}, 0x0) 40.647927215s ago: executing program 2 (id=2900): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x803, 0x2, 0x0, 0x0, 0x3a}, {0x0, 0x7ff, 0x913d, 0x0, 0x6, 0xa, 0x7a}, {0xfffffffffffffff7, 0x0, 0x0, 0x5}, 0xffffffff, 0x0, 0x1, 0x0, 0x4}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x3506, 0x0, 0x2, 0x4, 0x9, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="010007fdfffffffffffffff18c830c48e28800000000ffffffffffff0180c2000002bbbbbbbbbbbabbbbbbbbbbbb"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000f0000000400000002"], 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r6) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c", @ANYRES16=r7, @ANYBLOB="01062abd7000ffdbdf"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f0000000040), 0x0}, 0x20) shutdown(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}, 0x2}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/149, 0x95}], 0x1, &(0x7f0000000640)=""/79, 0x4f}, 0x4}], 0x4, 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) syz_open_procfs(r9, &(0x7f0000000040)='stack\x00') 40.384734339s ago: executing program 2 (id=2902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x4c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0xd}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x99}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x24041080) 39.54148506s ago: executing program 2 (id=2913): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000600090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES8=r0], 0xe4}}, 0x2404c800) 39.54130046s ago: executing program 34 (id=2913): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000600090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES8=r0], 0xe4}}, 0x2404c800) 34.705595229s ago: executing program 6 (id=2968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x4c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0xd}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x99}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x24041080) 34.561212826s ago: executing program 6 (id=2969): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100090c10000000000000000000", 0x58}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="190d080a281402e29648e0ef823f30c5dccedb72e4526574f7bd538ba11991bdefcb6767211eb000bb924cb81cebfd9fa043a8c4e26449809b37baa844f0ba4ddfb50fabccaac4c93cc908afda1727936825ec51ef7c014e06087eec282bc73719d2ec1b7e450b10318852c936220a290d7a44d86bbc8f8ea39b1cbbc68cea7625d00c23168bcb0438c8775f547d746d4004027840e58ad99767b1c50292ef97037788329468109c73e93af1243ea5ddd7b6f9d39fcb5633769a008aefb37c1de5ca86", @ANYRES16=r2, @ANYBLOB="f5af24bd7000000000000e000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100090c10000000000000000000", 0x58}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="190d080a281402e29648e0ef823f30c5dccedb72e4526574f7bd538ba11991bdefcb6767211eb000bb924cb81cebfd9fa043a8c4e26449809b37baa844f0ba4ddfb50fabccaac4c93cc908afda1727936825ec51ef7c014e06087eec282bc73719d2ec1b7e450b10318852c936220a290d7a44d86bbc8f8ea39b1cbbc68cea7625d00c23168bcb0438c8775f547d746d4004027840e58ad99767b1c50292ef97037788329468109c73e93af1243ea5ddd7b6f9d39fcb5633769a008aefb37c1de5ca86", @ANYRES16=r2, @ANYBLOB="f5af24bd7000000000000e000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) (async) 34.309428164s ago: executing program 6 (id=2972): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000003c80)={0x7, 0x80, 0x0, 0x2000}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888) syz_clone3(0x0, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000043c0)={'veth1_virt_wifi\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fdffffff0400d1000800000008000300", @ANYRES32=r9], 0x20}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) syz_read_part_table(0x40a9, &(0x7f00000002c0)="$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") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r6, 0x9, 0x1, 0xe1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000180), &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 33.3162593s ago: executing program 6 (id=2979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x210c1e, &(0x7f0000000080), 0x1, 0x51d, &(0x7f0000000200)="$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") r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mremap(&(0x7f00002f2000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00004a2000/0x3000)=nil) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0x0, &(0x7f0000000380)={0x3, 0x2, 0x1, 0x3}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, 0x0, 0x0, 0x8100000b, 0xfffffffffffffffd) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f80)='loginuid\x00') setsockopt$llc_int(r4, 0x10c, 0x9, &(0x7f0000000080)=0xe000, 0x4) io_uring_enter(r4, 0x4c73, 0xa673, 0x4, &(0x7f0000000040)={[0x9]}, 0x8) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000018c0)={@broadcast, @local, 0x0}, &(0x7f0000001900)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x88, 0x0, 0x0, 0x0, 0x8, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000040)=@id, 0x10) shutdown(r6, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@private0, 0x62, r5}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x24, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x7}}], 0x34}, 0x810) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f400090006", 0x5}], 0x1}, 0x0) 33.034205307s ago: executing program 6 (id=2986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x804) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000210029bd700000000000030000001400018011"], 0x28}}, 0x4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x385, &(0x7f00000006c0)="$eJzs3TFvW9UXAPATt02a/P+pMyAkQIirssBiJeELNEKthIgECjUqDEivxAErbhzZVpArBN1Y+RwVIxsS4gtkgJ2NLQtjh6oP2c9uk9SkioLzFPj9JPse+95j3/ue3tNdns7Bne/vbW9dikKKSkRUHkUsDaPCzKitDOPZOOxBvF298/vrH33y6ftr6+s3N1K6tXb7ndWU0rU3fv7q6x+u/9L738c/XvtpLvaXPjv4c/WP/Zf3Xzl4cvvLZjc1u2mn3UtZuttu97K7rUbabHa3ayl92Gpk3UZq7nQbnSP9W6327m4/ZTubiwu7nUa3m7Kdftpu9FOvnXqdfsq+yJo7qVarpcWF4EXqDzc2srUivnrCuBvnNSGmoNNZywbX8NxzPfWHpUwIAChVsf/v1rayXlRunH7/P/uP7v+vxPns/2emdDQvmsP7f/6tBvv/2dH1e5T9PwAAAAAAAAAAAAAAXASP8rya53l13Objh4RHn0ueHlP23Pk/9ip7fkzXoQf3rka0vtur79WLtuhf24pmtKIRy1GNx4PbwlgR33pv/eZyGlqKxXvfDvOv/xpRv3Q0fyWqsTQ5f6XIT0/zY9BeiYXD+atRjZcm569OzJ+Nt948lF+Lavz2ebSjFZvD21s+M3gf5H+zktK7H6wfy58bjgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgv6GWxl6Lou79Xj1iPvZG9ftrzwYsHa2PX+Q/ra+/HNV4PLk+//LE+vyX49XL5a4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMa6/fvbWavV6JxXMK75P/xmdhz8fdZMMfzBsa75ODp47kW/c8agcqqs+dEiJ3Q9yfN8WlO9er6n8izBlYg4YUw+OoBn/6//R8QJY+YiYvpLrpR/wE8dlHE3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHI9K/pd9kwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU7d/fztrtRqdKQZlrxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAi+SsAAP//ELEJxw==") 32.390828632s ago: executing program 6 (id=2997): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffb, r3, 0x8) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "e6bff385353800ff"}, 0x10}}, 0x2004c895) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0xf5) (async) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x64, 0x3b, 0x4, 0x3, 0x101, 0xffffffffffffffff], 0x2, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x20882) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000200)={0x80, 0x2b, 0xffffff80, 0x0, 0x9, 0x2}) 32.245994878s ago: executing program 35 (id=2997): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffb, r3, 0x8) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "e6bff385353800ff"}, 0x10}}, 0x2004c895) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0xf5) (async) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x64, 0x3b, 0x4, 0x3, 0x101, 0xffffffffffffffff], 0x2, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x20882) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000200)={0x80, 0x2b, 0xffffff80, 0x0, 0x9, 0x2}) 31.89556629s ago: executing program 0 (id=3004): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7ff9000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 31.727765099s ago: executing program 0 (id=3008): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0xd79f6255) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000300)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000240)={r5}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x7d, &(0x7f00000004c0)={r10, @in={{0x2, 0x1, @multicast1}}, 0x5, 0x400}, 0x90) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000180)={r10, @in6={{0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xa}}}, 0x84) sendmsg$nl_generic(r7, 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r12 = syz_open_pts(r11, 0x141601) ioctl$TCSETAW(r12, 0x5407, &(0x7f0000003f40)={0x9, 0xffff, 0x8a3, 0x807, 0xf, "5cac1e1af00ed0fb"}) fcntl$setstatus(r12, 0x4, 0x102800) r13 = socket(0x10, 0x3, 0x0) bind$rds(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_generic(r13, 0x0, 0x0) write(r12, &(0x7f0000000000)="d5", 0xfffffedf) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fc01000000001500000000000000000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 30.789155055s ago: executing program 0 (id=3013): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000067000000010000080500010007"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) 30.715459628s ago: executing program 0 (id=3014): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xc0463b18c99bb568, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000001c0)=[r4, r2, r0], 0x3) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x0, 0x2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = getpid() syz_pidfd_open(r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1fb, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x6, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r8, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r11, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 29.912588694s ago: executing program 0 (id=3025): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000406030000000000ff670000010000080500010007"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) 29.595778978s ago: executing program 0 (id=3032): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xfd, 0xc, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f00000005c0), 0x8}, 0x102802, 0x0, 0xfffffffd, 0x3, 0xffe, 0x265a, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x800, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000800000000000000090000007311a00000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xb7, 0x1f, &(0x7f0000000340)="a1e9cb960b4411ebfd66e45fa203fd3f763e650e0af0930e97c13a9c98b52e7fae78ae5476600cf949a925b2378eb120feccea1daefa274b3652460dcdcbc9151d90e3dd81e9d5d1ebaaee34ff4c50a19f0924e6d31e91dc380126ef886cc0ccf6923de11018c7ed1dc782fbc787430374a50c3a5cbe17efd279ae077be619034cdc81a9c8ebc69a6754f6bee5be98186e41f3cd65c18dd2a74a9eb0340a738e2a52e140568a56798121f68919123aa1e91561e0a806cf", &(0x7f0000000400)=""/31, 0xc6, 0x0, 0x81, 0x0, &(0x7f00000004c0)="57ff97607631859038d7478112a983e58784db93c0fbf576adf26b64feea091dee788a13c89da7c4d6125953f1c60915575b41061a445e3d9fc76bf8b96feeec55b75fad271d6693d8806c4726fc3b24384da055bb6a5b4b8d6f1ec45f46223575ecbd5071a6064d1f62868f72bafaaf0ca17d2e7e7e8fe4cf66161652751fe264", &(0x7f0000000580), 0x2, 0x0, 0x9}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000181100007e85180cf70f23dfd9359e2048892dd291dcd2abe1bd1125d0b555ef665323a6166a030d76fb46641378c33781ca0ab34aed880811d9ba1b7e538264b7fcb013cff9454dfff70208597800000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002180)=@newtfilter={0x76c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xffe0, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x73c, 0x2, [@TCA_FLOW_EMATCHES={0x730, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2b}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x7}, {{0x4}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xd9ff, 0x0, 0x1}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x800, 0x9, 0xffff}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}, @TCA_EMATCH_TREE_LIST={0x1e4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0x6eea}, {0xd52d, 0xe, 0x3, 0xfffffffb}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x1c2, 0x2, 0x6}, {0x3, 0x7, 0x1, "767bb68e093992"}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x1}, {0x80, 0xa, 0x1, "a339558249d9e815f6e8"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x400}, {0xc, 0x4, 0x1000, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x52}, {0x6000000, 0x9, 0x7, 0x6}}}, @TCF_EM_CONTAINER={0x104, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x9}, "997027c8ac6a8b498679228b94abc84650ee74584e4e4ee88cdbe788065f0a5ea09b5f4a6fac2293cc1ec1a9a7379318ffe1755994a5a7b8c46bdafd2fcacdd8731f5c6f9e9394982718e1503c7f1d45a486a40accdd82bf925b1dd2b61235dfaddced2a8ddf172a3cb05d872e942d91aed301055f86f42050e5522fd41fbd91ea7178fe0f312dfd4d6e8c9d8f010f94d27108a85c031f1f8fa4b3943c10128e0fc75e0122edf7f198c69d3039b8a2d5fbabdf60cc0edd9c72a2c8e4e43750feec284adc30e2ac5f986643d0c8b3832618b4763ae7587d1dff7f68ea4bd3e5722bfaec76bcd4f0806dea95ebf681225b9bf86e801f"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x1}, {0x0, 0x7fffffff, 0x6, 0x4, 0x6, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0xf9}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xdd, 0x1, 0x2}, {0x81, 0x0, 0xaa79, 0x1, 0x8, 0x1, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x8, 0x9}, {0x4, 0x4, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4d8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x8}, {0x5, 0xa, 0x0, "bb68c556bbcf2d6faba2"}}}, @TCF_EM_IPT={0x320, 0x3, 0x0, 0x0, {{0xe0d4, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_DATA={0xf7, 0x5, "5ca4351a9e37a3ad92c728e594abdc8ed28fe0dbd846c33ce491bdf344fb539f77330f10135e7e2f61de9e829c38f680e8f9aeea1e7534bb5bb05eed8d39325fad93b530923ba59a4aee6ee93fa5019af7705d5b2564e786ea74531e8ed43902bfac8e661613655d5793122559d42c621ac8a6d43836c5b3c3538b79f561738dbe363dbd63771410db62133d1b5ac45f95fecef2d7e6f1ad73bbe9dfe7cb5a77871be3f69855ccb269a275790a4f164530d980fe095afc99eb3b36a2a74dcab76fb27b8e3d844beee01c362f65f6a91532d0567b2677e196bee5e8184aa7887fbee0599c41378b0d909c78b955eea097ff101b"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7f}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x12}, @TCA_EM_IPT_MATCH_DATA={0x8c, 0x5, "89cd8fa414e984808c1a5cae41a6acd4f464004d83d4e03de6538de6c81c6c7b4532e8174046005d4002cba71c2f0a5d2c6bb757a8b570080a0fe60b5c4fb16185025cc7fabd8c46c5e0b3a39316c1929fb5a06635cb1c65ce686be06fb615d4f1b9152ae596d9f4110fbb85bb61a2e667fdca496a90d638fcc0b8f4073b9d7a75bca37466021ddf"}, @TCA_EM_IPT_MATCH_DATA={0x5b, 0x5, "1418b4292f6d7849dca290f6615e356d8b81f87d95f7b6882a4afecb4a576cea9fe26be1d007208c11712a3f22726d8497857ca99bcc3f89b4059afec8ccfa6b8c0f4cbc08520c1edf71bcce1e6d9528c916c3cc0dc577"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0xd, 0x5, "b90ed7ca2c1330b4bd"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0xfa, 0x5, "fd6d3abe45faee0ffad5e763e52d9f7febd8ad103b6ffda0ca2809ec9a36f8b581fd926a08f83e7d81535b2db08e85431c0b1395c9516702cf686970a09fa1fe6b8b4177eee805339524efe051382253b343846eee0855db993124291018b96de09fef80c97453211bf3c9683312ea91f8b533a67f171a22587ba8581d106a5b6d4baa38ced81f0f0692e25041c2e006d9f9f7b87d78ff3b14a3c097d7b1dc92b50eed9b849fe655d52809dce1fe7760e613fd4022d5a71fa424939a8173e4b7fd58b02ae70e9a8d85fee07da50ecafa93c69bec437301fa2fc33ceb06aacb345639518bc11fe37535b03af1c8a56de240216cffd562"}]}}, @TCF_EM_IPT={0x48, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x5e7c}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}, @TCF_EM_META={0x3c, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="b8", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0xc6, 0x2}, {0x7}}}]}}, @TCF_EM_META={0xa4, 0x2, 0x0, 0x0, {{0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xca07, 0x9, 0x2}, {0x101, 0x1, 0x1}}}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="bad10122a957", @TCF_META_TYPE_VAR="cf6cdbca", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='\x00\x00\x00\x00\x00\x00\x00\x00', @TCF_META_TYPE_VAR="b65d2019", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="bd6b7cb71de85b", @TCF_META_TYPE_VAR="b06abf0df2a1", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="2c549c", @TCF_META_TYPE_VAR="c4", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0x6}, {0x7, 0x5, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="737ff5b613fae7", @TCF_META_TYPE_VAR="c39774ef", @TCF_META_TYPE_VAR="bb"]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="d9a1e8573d6226c4", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="3fe5ca6a29563b"]}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x101}, {0x7, 0xa, 0x1, "d2de06684f066c5a0510"}}}, @TCF_EM_CONTAINER={0x54, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x1}, "8a75b80b9aec9d87c1da41e8b5338292aaa217793ddc24e911a0aede6d0f8729a03c8fc2d88a833788a684e19e4021cd73559127bfbb7f571f9c0b8afa55979b4cb59e20f4"}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x4d6, 0x4, 0xfff}}}]}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xcff}]}}]}, 0x76c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r3], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa9) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r12) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="9b0f2bbd7000ffdbd615b7b5fbc9f621d426d0df2501"], 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) 29.009020393s ago: executing program 36 (id=3032): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xfd, 0xc, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f00000005c0), 0x8}, 0x102802, 0x0, 0xfffffffd, 0x3, 0xffe, 0x265a, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x800, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000800000000000000090000007311a00000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xb7, 0x1f, &(0x7f0000000340)="a1e9cb960b4411ebfd66e45fa203fd3f763e650e0af0930e97c13a9c98b52e7fae78ae5476600cf949a925b2378eb120feccea1daefa274b3652460dcdcbc9151d90e3dd81e9d5d1ebaaee34ff4c50a19f0924e6d31e91dc380126ef886cc0ccf6923de11018c7ed1dc782fbc787430374a50c3a5cbe17efd279ae077be619034cdc81a9c8ebc69a6754f6bee5be98186e41f3cd65c18dd2a74a9eb0340a738e2a52e140568a56798121f68919123aa1e91561e0a806cf", &(0x7f0000000400)=""/31, 0xc6, 0x0, 0x81, 0x0, &(0x7f00000004c0)="57ff97607631859038d7478112a983e58784db93c0fbf576adf26b64feea091dee788a13c89da7c4d6125953f1c60915575b41061a445e3d9fc76bf8b96feeec55b75fad271d6693d8806c4726fc3b24384da055bb6a5b4b8d6f1ec45f46223575ecbd5071a6064d1f62868f72bafaaf0ca17d2e7e7e8fe4cf66161652751fe264", &(0x7f0000000580), 0x2, 0x0, 0x9}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000181100007e85180cf70f23dfd9359e2048892dd291dcd2abe1bd1125d0b555ef665323a6166a030d76fb46641378c33781ca0ab34aed880811d9ba1b7e538264b7fcb013cff9454dfff70208597800000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002180)=@newtfilter={0x76c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xffe0, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x73c, 0x2, [@TCA_FLOW_EMATCHES={0x730, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2b}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x7}, {{0x4}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xd9ff, 0x0, 0x1}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x800, 0x9, 0xffff}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}, @TCA_EMATCH_TREE_LIST={0x1e4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0x6eea}, {0xd52d, 0xe, 0x3, 0xfffffffb}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x1c2, 0x2, 0x6}, {0x3, 0x7, 0x1, "767bb68e093992"}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x1}, {0x80, 0xa, 0x1, "a339558249d9e815f6e8"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x400}, {0xc, 0x4, 0x1000, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x52}, {0x6000000, 0x9, 0x7, 0x6}}}, @TCF_EM_CONTAINER={0x104, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x9}, "997027c8ac6a8b498679228b94abc84650ee74584e4e4ee88cdbe788065f0a5ea09b5f4a6fac2293cc1ec1a9a7379318ffe1755994a5a7b8c46bdafd2fcacdd8731f5c6f9e9394982718e1503c7f1d45a486a40accdd82bf925b1dd2b61235dfaddced2a8ddf172a3cb05d872e942d91aed301055f86f42050e5522fd41fbd91ea7178fe0f312dfd4d6e8c9d8f010f94d27108a85c031f1f8fa4b3943c10128e0fc75e0122edf7f198c69d3039b8a2d5fbabdf60cc0edd9c72a2c8e4e43750feec284adc30e2ac5f986643d0c8b3832618b4763ae7587d1dff7f68ea4bd3e5722bfaec76bcd4f0806dea95ebf681225b9bf86e801f"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x1}, {0x0, 0x7fffffff, 0x6, 0x4, 0x6, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0xf9}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xdd, 0x1, 0x2}, {0x81, 0x0, 0xaa79, 0x1, 0x8, 0x1, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x8, 0x9}, {0x4, 0x4, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4d8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x2, 0x8}, {0x5, 0xa, 0x0, "bb68c556bbcf2d6faba2"}}}, @TCF_EM_IPT={0x320, 0x3, 0x0, 0x0, {{0xe0d4, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_DATA={0xf7, 0x5, "5ca4351a9e37a3ad92c728e594abdc8ed28fe0dbd846c33ce491bdf344fb539f77330f10135e7e2f61de9e829c38f680e8f9aeea1e7534bb5bb05eed8d39325fad93b530923ba59a4aee6ee93fa5019af7705d5b2564e786ea74531e8ed43902bfac8e661613655d5793122559d42c621ac8a6d43836c5b3c3538b79f561738dbe363dbd63771410db62133d1b5ac45f95fecef2d7e6f1ad73bbe9dfe7cb5a77871be3f69855ccb269a275790a4f164530d980fe095afc99eb3b36a2a74dcab76fb27b8e3d844beee01c362f65f6a91532d0567b2677e196bee5e8184aa7887fbee0599c41378b0d909c78b955eea097ff101b"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7f}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x12}, @TCA_EM_IPT_MATCH_DATA={0x8c, 0x5, "89cd8fa414e984808c1a5cae41a6acd4f464004d83d4e03de6538de6c81c6c7b4532e8174046005d4002cba71c2f0a5d2c6bb757a8b570080a0fe60b5c4fb16185025cc7fabd8c46c5e0b3a39316c1929fb5a06635cb1c65ce686be06fb615d4f1b9152ae596d9f4110fbb85bb61a2e667fdca496a90d638fcc0b8f4073b9d7a75bca37466021ddf"}, @TCA_EM_IPT_MATCH_DATA={0x5b, 0x5, "1418b4292f6d7849dca290f6615e356d8b81f87d95f7b6882a4afecb4a576cea9fe26be1d007208c11712a3f22726d8497857ca99bcc3f89b4059afec8ccfa6b8c0f4cbc08520c1edf71bcce1e6d9528c916c3cc0dc577"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0xd, 0x5, "b90ed7ca2c1330b4bd"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0xfa, 0x5, "fd6d3abe45faee0ffad5e763e52d9f7febd8ad103b6ffda0ca2809ec9a36f8b581fd926a08f83e7d81535b2db08e85431c0b1395c9516702cf686970a09fa1fe6b8b4177eee805339524efe051382253b343846eee0855db993124291018b96de09fef80c97453211bf3c9683312ea91f8b533a67f171a22587ba8581d106a5b6d4baa38ced81f0f0692e25041c2e006d9f9f7b87d78ff3b14a3c097d7b1dc92b50eed9b849fe655d52809dce1fe7760e613fd4022d5a71fa424939a8173e4b7fd58b02ae70e9a8d85fee07da50ecafa93c69bec437301fa2fc33ceb06aacb345639518bc11fe37535b03af1c8a56de240216cffd562"}]}}, @TCF_EM_IPT={0x48, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x5e7c}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}, @TCF_EM_META={0x3c, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x7}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="b8", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0xc6, 0x2}, {0x7}}}]}}, @TCF_EM_META={0xa4, 0x2, 0x0, 0x0, {{0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xca07, 0x9, 0x2}, {0x101, 0x1, 0x1}}}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="bad10122a957", @TCF_META_TYPE_VAR="cf6cdbca", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='\x00\x00\x00\x00\x00\x00\x00\x00', @TCF_META_TYPE_VAR="b65d2019", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="bd6b7cb71de85b", @TCF_META_TYPE_VAR="b06abf0df2a1", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="2c549c", @TCF_META_TYPE_VAR="c4", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0x6}, {0x7, 0x5, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="737ff5b613fae7", @TCF_META_TYPE_VAR="c39774ef", @TCF_META_TYPE_VAR="bb"]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="d9a1e8573d6226c4", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="3fe5ca6a29563b"]}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x101}, {0x7, 0xa, 0x1, "d2de06684f066c5a0510"}}}, @TCF_EM_CONTAINER={0x54, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x1}, "8a75b80b9aec9d87c1da41e8b5338292aaa217793ddc24e911a0aede6d0f8729a03c8fc2d88a833788a684e19e4021cd73559127bfbb7f571f9c0b8afa55979b4cb59e20f4"}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x4d6, 0x4, 0xfff}}}]}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xcff}]}}]}, 0x76c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r3], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa9) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r12) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="9b0f2bbd7000ffdbd615b7b5fbc9f621d426d0df2501"], 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) 3.545765209s ago: executing program 9 (id=3302): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000f3ff07080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) 3.392581652s ago: executing program 9 (id=3305): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfff3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 3.219984669s ago: executing program 9 (id=3310): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c00001c090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES8=r0], 0xe4}}, 0x2404c800) 3.188948068s ago: executing program 4 (id=3311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 1.704012005s ago: executing program 9 (id=3318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000022b25e78be7601000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xa, 0xffffffffffffffff, 0x4}, 0x38) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0x9da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000002346326a7cb00000000000000000605000400000000020900020073797a30f900000007000000050005000200000015000300686173683a69702c706f72752c6e655787ffbb580f3541a0e78b71b9a30762f5b0e7894544dafdbe2bf65dca2fd9fedc467595c5af3f188c6b8e5dad696666ec349cabd4c8aac694edfaf031d241fb74b803a9ffaf66a808647ae94ec6af39fb78a8d231c8"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid\x00') ioctl$NS_GET_PARENT(r9, 0x8004b706, 0x0) recvmsg(r8, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)={0xfc, 0x0, 0xa06, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x12, 0x3, "b433b1ef9c8d1f1b776261d29a6c"}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd3b2}]}, @TIPC_NLA_MEDIA={0x4}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x400ccc4) 1.63749228s ago: executing program 4 (id=3319): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000700)={0x0, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x8, [@multicast2, @loopback, @broadcast, @multicast1, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}, @local]}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x8000153}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000380), 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="318300000000002e226d73c622000000190000000c0001800800030003000000"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x20040814) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000700)={0x0, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x8, [@multicast2, @loopback, @broadcast, @multicast1, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}, @local]}, 0x30) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x8000153}, &(0x7f0000000100), &(0x7f0000000040)) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000080), 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000380), 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="318300000000002e226d73c622000000190000000c0001800800030003000000"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x20040814) (async) 1.445121039s ago: executing program 4 (id=3321): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40004, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 1.161562836s ago: executing program 4 (id=3323): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 870.834559ms ago: executing program 8 (id=3325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24041080) 870.528329ms ago: executing program 4 (id=3326): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/195, 0xc3}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001200)=""/74, 0x4a}, 0x1}, {{&(0x7f0000001280)=@alg, 0x80, &(0x7f0000001800)=[{&(0x7f0000001300)=""/134, 0x86}, {&(0x7f00000013c0)=""/198, 0xc6}, {&(0x7f00000014c0)=""/105, 0x69}, {&(0x7f0000001540)=""/9, 0x9}, {&(0x7f0000001580)=""/54, 0x36}, {&(0x7f00000015c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/182, 0xb6}, {&(0x7f00000016c0)=""/234, 0xea}, {&(0x7f00000017c0)=""/18, 0x12}], 0x9, &(0x7f00000018c0)=""/39, 0x27}, 0x5}, {{&(0x7f0000001900)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001980)=""/91, 0x5b}, {&(0x7f0000001a00)=""/26, 0x1a}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/99, 0x63}, {&(0x7f0000001b80)=""/249, 0xf9}, {&(0x7f0000001c80)=""/51, 0x33}], 0x6}, 0x10001}, {{&(0x7f0000001d40)=@qipcrtr, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/176, 0xb0}], 0x2, &(0x7f0000002ec0)=""/46, 0x2e}, 0x2}, {{&(0x7f0000002f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/78, 0x4e}], 0x1, &(0x7f0000003040)=""/4096, 0x1000}, 0x7fffffff}], 0x5, 0x10000, &(0x7f0000005700)) 767.941652ms ago: executing program 1 (id=3327): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r11, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r5, 0x8, 0x8020, 0x5, 0x8, {{0x28, 0x4, 0x3, 0x1d, 0xa0, 0x65, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0xb9, 0x3, 0x9, [{@multicast1}, {@private=0xa010102, 0xffffff9f}, {@multicast1, 0x5}, {@multicast1, 0xb}]}, @cipso={0x86, 0x13, 0x3, [{0x7, 0xd, "088cf198524c60b444fc5c"}]}, @generic={0x94, 0x10, "6837cb11cf7edf25c2c4f60732d2"}, @timestamp_addr={0x44, 0x44, 0x85, 0x1, 0x4, [{@empty, 0x9}, {@multicast2, 0x9}, {@remote, 0x80}, {@broadcast}, {@remote, 0x8cf}, {@private=0xa010101, 0xa}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x8}, {@private=0xa010100, 0x5}]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r11, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1505}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x88}}, 0x20008010) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0) 767.565491ms ago: executing program 7 (id=3328): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x800}, {@multicast2}]}]}}}}}}}, 0x0) 710.652281ms ago: executing program 1 (id=3329): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c00001d090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES8=r0], 0xe4}}, 0x2404c800) 708.2175ms ago: executing program 7 (id=3330): r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 655.95988ms ago: executing program 7 (id=3331): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f000000}, 0x94) 593.407898ms ago: executing program 8 (id=3332): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x1000000}, 0x94) 592.973777ms ago: executing program 7 (id=3333): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0xfffffffd}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="cb5839292030"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}]}, 0x40}, 0x1, 0x0, 0x0, 0x2aa9205af945660}, 0xc0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x280102, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x158, r4, 0x4, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5f3a}, {0x6, 0x11, 0x364}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff82ab}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x880e}, {0x6, 0x11, 0x800}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4044080}, 0x40000) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r3) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, r5, 0xa0c1162494f8794e, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa68}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x321e}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x36}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x1}, 0x8) (rerun: 64) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), r3) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r7, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x6008045}, 0x4004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x19}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) (async, rerun: 32) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000880)={'wg0\x00', {0x2, 0x4e21, @private=0xa010101}}) (async, rerun: 32) fsetxattr(r3, &(0x7f00000008c0)=@known='trusted.syz\x00', &(0x7f0000000900)='nl80211\x00', 0x8, 0x3) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/fscaps', 0x0, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x7, 0x8, 0x8, @remote, @loopback, 0x7, 0x1, 0x5, 0xb}}) sendmsg$nl_route(r9, &(0x7f00000011c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001180)={&(0x7f0000000a80)=@newlinkprop={0x6c4, 0x6c, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x20400, 0x4020}, [@IFLA_VFINFO_LIST={0x69c, 0x16, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x8000, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @broadcast}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffffc00, 0x2e5, 0x1, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x40, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x200}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x1}}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xa0, 0xcf6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x1c1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1000, 0x29}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1ff, 0x200000000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xb, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x3}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x3, 0x7}}, @IFLA_VF_VLAN={0x10, 0x2, {0xd, 0xe6a}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1ff, 0x8}}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x64, 0x7fffffff, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @remote}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x86, 0xfff}}, @IFLA_VF_RATE={0x10, 0x6, {0x7fff, 0x9, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffff5, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x10000}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8000, 0x2}}]}, {0x208, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x3}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x401, 0xaa3, 0x9, 0x8100}}, {0x14, 0x1, {0x1, 0x98c, 0x3, 0x88a8}}, {0x14, 0x1, {0x4, 0xffb, 0x8, 0x88a8}}, {0x14, 0x1, {0x9, 0xd4a, 0xfffffffc, 0x88a8}}, {0x14, 0x1, {0x8, 0xb8f, 0x7, 0x8100}}, {0x14, 0x1, {0x8, 0xbdf, 0x6, 0x8100}}, {0x14, 0x1, {0x10, 0x2bc, 0x0, 0x9445eafbe4dcf538}}, {0x14, 0x1, {0x3ff, 0x56b, 0x6, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7fff, 0x8}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6f1c, 0x4ea, 0x20, 0x88a8}}, {0x14, 0x1, {0x1ff, 0xcb9, 0x0, 0x88a8}}, {0x14, 0x1, {0x1, 0x153, 0x9, 0x8100}}, {0x14, 0x1, {0x20, 0x902, 0x4, 0x88a8}}, {0x14, 0x1, {0x874, 0xf96, 0x6, 0x8100}}, {0x14, 0x1, {0x3, 0x9c7, 0x3c}}, {0x14, 0x1, {0x86, 0x916, 0x2, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xa, 0xa3f, 0x1, 0x8100}}, {0x14, 0x1, {0x6, 0xb28, 0x0, 0x88a8}}, {0x14, 0x1, {0x2, 0xe77, 0x1ff, 0x88a8}}, {0x14, 0x1, {0xa00, 0x887, 0x45, 0x88a8}}, {0x14, 0x1, {0x1, 0x6bf, 0xffff, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @random="02b632e71111"}}, @IFLA_VF_MAC={0x28, 0x1, {0x4}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0xffff, 0x100, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x7}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xb61c, @broadcast}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1ff, 0xf2a}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x40, 0x3d}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0xba, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2c0000, 0xef4, 0x9, 0x88a8}}]}]}, {0xc4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0xb93, 0x9, 0x8100}}, {0x14, 0x1, {0x3, 0xe71, 0xa63, 0x8100}}, {0x14, 0x1, {0x2, 0x26, 0x9, 0x88a8}}, {0x14, 0x1, {0x5, 0xc9e, 0x2, 0x8100}}, {0x14, 0x1, {0xf, 0xa39, 0x2, 0x8100}}, {0x14, 0x1, {0xfff, 0x87d, 0x8, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x0, 0x25a5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x2}}]}, {0xf8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x937, 0xa58, 0xfffffffa, 0x88a8}}, {0x14, 0x1, {0x4, 0xd88, 0x4, 0x88a8}}, {0x14, 0x1, {0x80000000, 0xf34, 0x2, 0x88a8}}, {0x14, 0x1, {0x3, 0xafe}}, {0x14, 0x1, {0x9, 0x23f, 0x7fffffff, 0x8100}}, {0x14, 0x1, {0x10, 0x6ad, 0x1, 0x8100}}, {0x14, 0x1, {0x8000, 0xb90, 0x10001, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0xd938}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x13, 0xba08}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x8b1, 0x7fff, 0x88a8}}, {0x14, 0x1, {0x2, 0x3, 0x4e91, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xf4, 0xe}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4d5f46e4, 0x80}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xffff0ffd, 0x1d7, 0x6}}, {0x14, 0x1, {0x5, 0x255, 0x400, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0xf7f, 0x10001, 0x88a8}}]}]}]}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x6c4}, 0x1, 0x0, 0x0, 0x4000830}, 0x8880) (async) pipe2$9p(&(0x7f0000001200), 0x4800) (async) semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, &(0x7f0000001240)=""/182) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r8) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000001340)={0x0, 0x1c, 0x20, 0x1, 0x4}, &(0x7f0000001380)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000013c0)={r11, 0x5}, &(0x7f0000001400)=0x8) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000001440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x50, r12, 0xd0d0000) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f0000001480)) fsopen(&(0x7f00000014c0)='selinuxfs\x00', 0x0) setsockopt$IP_VS_SO_SET_DEL(r9, 0x0, 0x484, &(0x7f0000001500)={0x3a, @empty, 0x4e20, 0x0, 'wlc\x00', 0x2, 0x3, 0x46}, 0x2c) 577.635212ms ago: executing program 8 (id=3334): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff00001000180000000000000000f8ffffff000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 516.62936ms ago: executing program 8 (id=3335): socket(0x2d, 0x2, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) (async) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) 415.320672ms ago: executing program 7 (id=3336): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet(r0, 0x0, 0x80) pwritev(r0, 0x0, 0x0, 0x16, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000170a01"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) recvmmsg(r0, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}, 0x41}], 0x1, 0x2140, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) lremovexattr(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="747275737465442e75736572c8d41d5d66732e6d6574616461000000"]) 334.855073ms ago: executing program 8 (id=3337): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000001480000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 314.814486ms ago: executing program 1 (id=3338): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007"], 0x1c}, 0x1, 0x0, 0xff67, 0xc0}, 0x20000814) 189.46241ms ago: executing program 7 (id=3339): bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x301200a, 0x0) (async) unshare(0x26020480) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040600) (async, rerun: 64) r0 = syz_io_uring_setup(0x10ca, &(0x7f00000000c0)={0x0, 0xba82, 0x80, 0x2, 0x3c9}, &(0x7f0000000000), &(0x7f0000000140)) (rerun: 64) syz_io_uring_setup(0x1454, &(0x7f00000001c0)={0x0, 0x183e, 0x20, 0x3, 0x30e, 0x0, r0}, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1, 0x4}, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async, rerun: 64) openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) (async, rerun: 64) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) (rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 189.18303ms ago: executing program 1 (id=3340): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x800}, {@multicast2}]}]}}}}}}}, 0x0) 166.940912ms ago: executing program 1 (id=3341): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 134.727849ms ago: executing program 9 (id=3342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24041080) 61.568483ms ago: executing program 1 (id=3343): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$setlease(r1, 0x400, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x10b08, 0x0, 0x0, 0x3, 0x1000, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'vxcan1\x00', 0x8002}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0xcbf, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x8, 0x0, 0xd65}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000200)) 61.346853ms ago: executing program 8 (id=3344): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xffffffffffffffe3, 0x40002043, 0x0) set_mempolicy(0x6005, 0x0, 0x4) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x48, 0x7, 0x0, 0xfffffffd}, {0x5, 0xba, 0x2, 0xffff}]}, 0x10) socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x0, 0x5, 0x20, 0xffffffff}, {0x3, 0x4, 0xf8, 0x10}]}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c601008004f01700d1bd00"/46, 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x8081) unshare(0x6a040000) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0xa, r6, 0x1}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x1000002, r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0x7}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 26.66072ms ago: executing program 4 (id=3345): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$setlease(r1, 0x400, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x10b08, 0x0, 0x0, 0x3, 0x1000, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'vxcan1\x00', 0x8002}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0xcbf, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x8, 0x0, 0xd65}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r5, 0x3, &(0x7f0000000480)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x3, r4, 0x0, 0x0, 0x1}, 0x0, 0x0]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000200)) 0s ago: executing program 9 (id=3346): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'veth0_to_bond\x00', @random="f9eea800"}) write$tun(r3, &(0x7f0000000280)={@void, @val={0x1, 0x0, 0x27, 0x0, 0x1400}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x8, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xffffff07}, @generic={0x0, 0x8, "d588380003c1"}]}}}}}}, 0x4a) kernel console output (not intermixed with test programs): 4.052204][T12246] netlink_sendmsg+0x40c/0x6f0 [ 254.052246][T12246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.052366][T12246] ____sys_sendmsg+0x5af/0x600 [ 254.052407][T12246] ___sys_sendmsg+0x195/0x1e0 [ 254.052481][T12246] __x64_sys_sendmsg+0xd4/0x160 [ 254.052517][T12246] x64_sys_call+0x194c/0x3020 [ 254.052547][T12246] do_syscall_64+0x12c/0x370 [ 254.052628][T12246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.052652][T12246] RIP: 0033:0x7fb27c33c629 [ 254.052670][T12246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.052714][T12246] RSP: 002b:00007fb27ad8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.052737][T12246] RAX: ffffffffffffffda RBX: 00007fb27c5b5fa0 RCX: 00007fb27c33c629 [ 254.052753][T12246] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 254.052767][T12246] RBP: 00007fb27ad8f090 R08: 0000000000000000 R09: 0000000000000000 [ 254.052782][T12246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.052849][T12246] R13: 00007fb27c5b6038 R14: 00007fb27c5b5fa0 R15: 00007fffaed12488 [ 254.052877][T12246] [ 254.554490][ T55] team0 (unregistering): Port device team_slave_1 removed [ 254.594151][ T55] team0 (unregistering): Port device team_slave_0 removed [ 254.689010][T12232] Set syz1 is full, maxelem 65536 reached [ 254.774088][T12150] chnl_net:caif_netlink_parms(): no params data found [ 254.862727][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'. [ 254.896965][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'. [ 254.919303][T12150] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.926682][T12150] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.933939][T12150] bridge_slave_0: entered allmulticast mode [ 254.941739][T12150] bridge_slave_0: entered promiscuous mode [ 254.950484][T12150] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.959001][T12150] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.969007][T12150] bridge_slave_1: entered allmulticast mode [ 254.976724][T12150] bridge_slave_1: entered promiscuous mode [ 255.019072][T12150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.040277][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 255.040295][ T28] audit: type=1326 audit(2000000064.530:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.0.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95a1c629 code=0x7ffc0000 [ 255.077226][T12150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.146253][ T28] audit: type=1326 audit(2000000064.570:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.0.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95a1c629 code=0x7ffc0000 [ 255.196501][T12150] team0: Port device team_slave_0 added [ 255.212589][T12150] team0: Port device team_slave_1 added [ 255.236686][ T28] audit: type=1326 audit(2000000064.570:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.0.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95a1c629 code=0x7ffc0000 [ 255.280469][T12150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.306856][T12150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.335144][ T28] audit: type=1326 audit(2000000064.570:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.0.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95a1c629 code=0x7ffc0000 [ 255.368733][ T28] audit: type=1326 audit(2000000064.570:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.0.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6b95a1c629 code=0x7ffc0000 [ 255.394297][T12150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.408592][T12150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.416856][T12150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.445210][ T28] audit: type=1326 audit(2000000064.570:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.0.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95a1c629 code=0x7ffc0000 [ 255.483196][ T28] audit: type=1326 audit(2000000064.570:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.0.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95a1c629 code=0x7ffc0000 [ 255.510620][T12150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.542786][ T28] audit: type=1326 audit(2000000064.570:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.0.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95a1c629 code=0x7ffc0000 [ 255.582533][T12150] hsr_slave_0: entered promiscuous mode [ 255.601967][T12150] hsr_slave_1: entered promiscuous mode [ 255.609211][ T28] audit: type=1326 audit(2000000064.570:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.0.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b95a1c629 code=0x7ffc0000 [ 255.637764][T12150] debugfs: 'hsr0' already exists in 'hsr' [ 255.643694][T12150] Cannot create hsr debugfs directory [ 255.678553][ T28] audit: type=1326 audit(2000000064.570:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.0.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b95a1c629 code=0x7ffc0000 [ 256.066933][T12327] FAULT_INJECTION: forcing a failure. [ 256.066933][T12327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.130103][T12327] CPU: 0 UID: 0 PID: 12327 Comm: syz.2.2691 Tainted: G W syzkaller #0 PREEMPT(full) [ 256.130220][T12327] Tainted: [W]=WARN [ 256.130230][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.130245][T12327] Call Trace: [ 256.130252][T12327] [ 256.130261][T12327] __dump_stack+0x1d/0x30 [ 256.130296][T12327] dump_stack_lvl+0x95/0xd0 [ 256.130399][T12327] dump_stack+0x15/0x1b [ 256.130423][T12327] should_fail_ex+0x263/0x280 [ 256.130450][T12327] should_fail+0xb/0x20 [ 256.130497][T12327] should_fail_usercopy+0x1a/0x20 [ 256.130522][T12327] _copy_from_iter+0xcf/0xea0 [ 256.130546][T12327] ? __pfx___tsan_unaligned_write4+0x10/0x10 [ 256.130578][T12327] ? __alloc_skb+0x4f6/0x690 [ 256.130607][T12327] ? __alloc_skb+0x200/0x690 [ 256.130692][T12327] netlink_sendmsg+0x4ae/0x6f0 [ 256.130733][T12327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.130765][T12327] ____sys_sendmsg+0x5af/0x600 [ 256.130859][T12327] ___sys_sendmsg+0x195/0x1e0 [ 256.130912][T12327] __x64_sys_sendmsg+0xd4/0x160 [ 256.131015][T12327] x64_sys_call+0x194c/0x3020 [ 256.131051][T12327] do_syscall_64+0x12c/0x370 [ 256.131104][T12327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.131128][T12327] RIP: 0033:0x7f383048c629 [ 256.131147][T12327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.131171][T12327] RSP: 002b:00007f382eedf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.131196][T12327] RAX: ffffffffffffffda RBX: 00007f3830705fa0 RCX: 00007f383048c629 [ 256.131292][T12327] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 256.131309][T12327] RBP: 00007f382eedf090 R08: 0000000000000000 R09: 0000000000000000 [ 256.131326][T12327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.131354][T12327] R13: 00007f3830706038 R14: 00007f3830705fa0 R15: 00007fffe4d16698 [ 256.131378][T12327] [ 256.346489][T12285] Set syz1 is full, maxelem 65536 reached [ 256.488340][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2697'. [ 256.506803][T12150] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 256.513710][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 256.564017][T12150] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 256.606398][T12150] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 256.643955][T12150] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 256.861065][T12378] FAULT_INJECTION: forcing a failure. [ 256.861065][T12378] name failslab, interval 1, probability 0, space 0, times 0 [ 256.888305][T12150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.900131][T12378] CPU: 1 UID: 0 PID: 12378 Comm: syz.1.2704 Tainted: G W syzkaller #0 PREEMPT(full) [ 256.900172][T12378] Tainted: [W]=WARN [ 256.900178][T12378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.900193][T12378] Call Trace: [ 256.900200][T12378] [ 256.900209][T12378] __dump_stack+0x1d/0x30 [ 256.900257][T12378] dump_stack_lvl+0x95/0xd0 [ 256.900288][T12378] dump_stack+0x15/0x1b [ 256.900380][T12378] should_fail_ex+0x263/0x280 [ 256.900471][T12378] should_failslab+0x8c/0xb0 [ 256.900573][T12378] kmem_cache_alloc_noprof+0x66/0x400 [ 256.900602][T12378] ? skb_clone+0x151/0x1f0 [ 256.900641][T12378] skb_clone+0x151/0x1f0 [ 256.900677][T12378] __netlink_deliver_tap+0x2c9/0x500 [ 256.900837][T12378] netlink_unicast+0x66b/0x690 [ 256.900893][T12378] netlink_sendmsg+0x5c8/0x6f0 [ 256.900937][T12378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.900971][T12378] ____sys_sendmsg+0x5af/0x600 [ 256.901096][T12378] ___sys_sendmsg+0x195/0x1e0 [ 256.901149][T12378] __x64_sys_sendmsg+0xd4/0x160 [ 256.901193][T12378] x64_sys_call+0x194c/0x3020 [ 256.901338][T12378] do_syscall_64+0x12c/0x370 [ 256.901387][T12378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.901417][T12378] RIP: 0033:0x7f8f8155c629 [ 256.901440][T12378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.901514][T12378] RSP: 002b:00007f8f7ffb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.901539][T12378] RAX: ffffffffffffffda RBX: 00007f8f817d5fa0 RCX: 00007f8f8155c629 [ 256.901559][T12378] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 256.901577][T12378] RBP: 00007f8f7ffb7090 R08: 0000000000000000 R09: 0000000000000000 [ 256.901594][T12378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.901649][T12378] R13: 00007f8f817d6038 R14: 00007f8f817d5fa0 R15: 00007ffcbf22ae38 [ 256.901678][T12378] [ 257.103255][T12150] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.113788][T11869] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.121319][T11869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.196065][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.203288][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.312409][T12378] Set syz1 is full, maxelem 65536 reached [ 257.482254][T12150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.617568][T12150] veth0_vlan: entered promiscuous mode [ 257.627167][T12150] veth1_vlan: entered promiscuous mode [ 257.648476][T12150] veth0_macvtap: entered promiscuous mode [ 257.657186][T12150] veth1_macvtap: entered promiscuous mode [ 257.670065][T12150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.682804][T12150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.696286][T11875] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.706315][T11875] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.719261][T11875] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.729525][T11875] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.490798][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 302.548886][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2712'. [ 302.633118][T12523] loop2: detected capacity change from 0 to 512 [ 302.669112][T12523] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #12: comm syz.2.2717: corrupted in-inode xattr: bad e_name length [ 302.693196][T12529] loop6: detected capacity change from 0 to 256 [ 302.707358][T12523] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 302.707630][T12523] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2717: couldn't read orphan inode 12 (err -117) [ 302.716873][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 302.716893][ C0] EXT4-fs (loop2): initial error at time 2000000112: ext4_iget_extra_inode:5025: inode 12 [ 302.716922][ C0] EXT4-fs (loop2): last error at time 2000000112: ext4_iget_extra_inode:5025: inode 12 [ 302.761668][T12523] loop2: lost filesystem error report for type 5 error -117 [ 302.762294][T12523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.821306][T12513] Set syz1 is full, maxelem 65536 reached [ 302.846777][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 302.846795][ T28] audit: type=1400 audit(2000000112.340:2275): avc: denied { write } for pid=12522 comm="syz.2.2717" name="seq" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_exec_t:s0" [ 302.931453][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.219924][T12540] serio: Serial port ptm0 [ 303.390764][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2722'. [ 303.590883][ T28] audit: type=1400 audit(2000000113.080:2276): avc: denied { append } for pid=12545 comm="syz.1.2723" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 303.784455][ T28] audit: type=1400 audit(2000000113.270:2277): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 303.962622][T12577] 9p: Invalid gid '0x00000000ffffffff' [ 304.012587][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2734'. [ 304.457199][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2744'. [ 304.486224][ T28] audit: type=1326 audit(2000000113.980:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.6.2743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f9d21c629 code=0x0 [ 304.683498][T12616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2747'. [ 305.166311][T12638] FAULT_INJECTION: forcing a failure. [ 305.166311][T12638] name failslab, interval 1, probability 0, space 0, times 0 [ 305.179092][T12638] CPU: 0 UID: 0 PID: 12638 Comm: syz.4.2757 Tainted: G W syzkaller #0 PREEMPT(full) [ 305.179145][T12638] Tainted: [W]=WARN [ 305.179163][T12638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 305.179180][T12638] Call Trace: [ 305.179189][T12638] [ 305.179201][T12638] __dump_stack+0x1d/0x30 [ 305.179234][T12638] dump_stack_lvl+0x95/0xd0 [ 305.179264][T12638] dump_stack+0x15/0x1b [ 305.179301][T12638] should_fail_ex+0x263/0x280 [ 305.179330][T12638] should_failslab+0x8c/0xb0 [ 305.179357][T12638] __kmalloc_noprof+0xb8/0x4e0 [ 305.179385][T12638] ? hash_ipportip4_add+0x6e8/0x10a0 [ 305.179416][T12638] hash_ipportip4_add+0x6e8/0x10a0 [ 305.179520][T12638] ? hash_ipportip4_add+0x5e/0x10a0 [ 305.179560][T12638] hash_ipportip4_uadt+0x789/0x8b0 [ 305.179593][T12638] ? __pfx_hash_ipportip4_add+0x10/0x10 [ 305.179633][T12638] call_ad+0xdc/0x640 [ 305.179740][T12638] ? __nla_parse+0x40/0x60 [ 305.179772][T12638] ip_set_ad+0x5c0/0x690 [ 305.179891][T12638] ip_set_uadd+0x41/0x50 [ 305.179919][T12638] nfnetlink_rcv_msg+0x509/0x5d0 [ 305.180064][T12638] netlink_rcv_skb+0x123/0x220 [ 305.180100][T12638] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 305.180133][T12638] nfnetlink_rcv+0x167/0x1720 [ 305.180238][T12638] ? __kfree_skb+0x109/0x150 [ 305.180269][T12638] ? nlmon_xmit+0x4f/0x60 [ 305.180347][T12638] ? consume_skb+0x4b/0x160 [ 305.180377][T12638] ? nlmon_xmit+0x4f/0x60 [ 305.180433][T12638] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 305.180470][T12638] ? __dev_queue_xmit+0x1393/0x1f40 [ 305.180511][T12638] ? __dev_queue_xmit+0x148/0x1f40 [ 305.180547][T12638] ? ref_tracker_free+0x37d/0x3e0 [ 305.180602][T12638] ? __netlink_deliver_tap+0x4dc/0x500 [ 305.180645][T12638] netlink_unicast+0x5c0/0x690 [ 305.180744][T12638] netlink_sendmsg+0x5c8/0x6f0 [ 305.180788][T12638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.180867][T12638] ____sys_sendmsg+0x5af/0x600 [ 305.180910][T12638] ___sys_sendmsg+0x195/0x1e0 [ 305.181013][T12638] __x64_sys_sendmsg+0xd4/0x160 [ 305.181133][T12638] x64_sys_call+0x194c/0x3020 [ 305.181170][T12638] do_syscall_64+0x12c/0x370 [ 305.181218][T12638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.181286][T12638] RIP: 0033:0x7fb27c33c629 [ 305.181305][T12638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.181330][T12638] RSP: 002b:00007fb27ad8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.181428][T12638] RAX: ffffffffffffffda RBX: 00007fb27c5b5fa0 RCX: 00007fb27c33c629 [ 305.181447][T12638] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 305.181465][T12638] RBP: 00007fb27ad8f090 R08: 0000000000000000 R09: 0000000000000000 [ 305.181483][T12638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.181551][T12638] R13: 00007fb27c5b6038 R14: 00007fb27c5b5fa0 R15: 00007fffaed12488 [ 305.181574][T12638] [ 305.564377][ T28] audit: type=1400 audit(2000000115.040:2279): avc: denied { accept } for pid=12642 comm="syz.2.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 305.710930][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2762'. [ 305.821826][T12657] loop2: detected capacity change from 0 to 512 [ 305.902424][T12657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.967948][T12657] ext4 filesystem being mounted at /561/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.022818][T12657] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 306.052350][T12657] ext4: Unknown parameter 'syzkaller' [ 306.125550][T12683] FAULT_INJECTION: forcing a failure. [ 306.125550][T12683] name failslab, interval 1, probability 0, space 0, times 0 [ 306.138316][T12683] CPU: 0 UID: 0 PID: 12683 Comm: syz.4.2774 Tainted: G W syzkaller #0 PREEMPT(full) [ 306.138366][T12683] Tainted: [W]=WARN [ 306.138375][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.138392][T12683] Call Trace: [ 306.138401][T12683] [ 306.138477][T12683] __dump_stack+0x1d/0x30 [ 306.138506][T12683] dump_stack_lvl+0x95/0xd0 [ 306.138534][T12683] dump_stack+0x15/0x1b [ 306.138623][T12683] should_fail_ex+0x263/0x280 [ 306.138669][T12683] should_failslab+0x8c/0xb0 [ 306.138767][T12683] __kmalloc_noprof+0xb8/0x4e0 [ 306.138872][T12683] ? hash_ipportip4_add+0x6e8/0x10a0 [ 306.138957][T12683] hash_ipportip4_add+0x6e8/0x10a0 [ 306.138987][T12683] ? hash_ipportip4_add+0x5e/0x10a0 [ 306.139026][T12683] hash_ipportip4_uadt+0x789/0x8b0 [ 306.139129][T12683] ? __pfx_hash_ipportip4_add+0x10/0x10 [ 306.139168][T12683] call_ad+0xdc/0x640 [ 306.139266][T12683] ? __nla_parse+0x40/0x60 [ 306.139298][T12683] ip_set_ad+0x5c0/0x690 [ 306.139422][T12683] ip_set_uadd+0x41/0x50 [ 306.139452][T12683] nfnetlink_rcv_msg+0x509/0x5d0 [ 306.139502][T12683] netlink_rcv_skb+0x123/0x220 [ 306.139553][T12683] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 306.139592][T12683] nfnetlink_rcv+0x167/0x1720 [ 306.139656][T12683] ? __kfree_skb+0x109/0x150 [ 306.139688][T12683] ? nlmon_xmit+0x4f/0x60 [ 306.139728][T12683] ? consume_skb+0x4b/0x160 [ 306.139814][T12683] ? nlmon_xmit+0x4f/0x60 [ 306.139853][T12683] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 306.139951][T12683] ? __dev_queue_xmit+0x1393/0x1f40 [ 306.139984][T12683] ? __dev_queue_xmit+0x148/0x1f40 [ 306.140054][T12683] ? ref_tracker_free+0x37d/0x3e0 [ 306.140092][T12683] ? __netlink_deliver_tap+0x4dc/0x500 [ 306.140208][T12683] netlink_unicast+0x5c0/0x690 [ 306.140244][T12683] netlink_sendmsg+0x5c8/0x6f0 [ 306.140364][T12683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.140513][T12683] ____sys_sendmsg+0x5af/0x600 [ 306.140637][T12683] ___sys_sendmsg+0x195/0x1e0 [ 306.140699][T12683] __x64_sys_sendmsg+0xd4/0x160 [ 306.140796][T12683] x64_sys_call+0x194c/0x3020 [ 306.140890][T12683] do_syscall_64+0x12c/0x370 [ 306.140970][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.140999][T12683] RIP: 0033:0x7fb27c33c629 [ 306.141019][T12683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.141042][T12683] RSP: 002b:00007fb27ad8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.141088][T12683] RAX: ffffffffffffffda RBX: 00007fb27c5b5fa0 RCX: 00007fb27c33c629 [ 306.141101][T12683] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 306.141116][T12683] RBP: 00007fb27ad8f090 R08: 0000000000000000 R09: 0000000000000000 [ 306.141132][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.141225][T12683] R13: 00007fb27c5b6038 R14: 00007fb27c5b5fa0 R15: 00007fffaed12488 [ 306.141254][T12683] [ 306.498340][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.522822][T12692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.541303][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2778'. [ 307.011547][T12726] loop2: detected capacity change from 0 to 512 [ 307.089948][T12726] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 307.375798][T12740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2797'. [ 307.387786][T12740] vlan3: entered promiscuous mode [ 307.392927][T12740] dummy0: entered promiscuous mode [ 307.430587][T12740] veth4: entered allmulticast mode [ 307.579833][T11870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 307.649103][T12764] netlink: 'syz.4.2804': attribute type 1 has an invalid length. [ 307.653318][T11870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 307.694720][T12764] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.701331][T12769] tmpfs: Unknown parameter 'nsǤ… wno' [ 307.726361][T11870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 307.780855][T11870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 307.865650][T12782] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2808'. [ 307.882400][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'. [ 307.891548][T12782] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2808'. [ 307.892880][T12749] chnl_net:caif_netlink_parms(): no params data found [ 307.908815][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'. [ 307.924972][T12782] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2808'. [ 308.173681][ T28] audit: type=1400 audit(2000000117.660:2280): avc: denied { listen } for pid=12816 comm="syz.4.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 308.202082][T12817] loop4: detected capacity change from 0 to 2048 [ 308.262742][T11870] bond0 (unregistering): Released all slaves [ 308.271168][T11870] bond1 (unregistering): Released all slaves [ 308.280432][T11870] bond2 (unregistering): Released all slaves [ 308.289733][T12817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.355711][T11870] tipc: Left network mode [ 308.369372][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.506351][T11870] hsr_slave_0: left promiscuous mode [ 308.512375][T11870] hsr_slave_1: left promiscuous mode [ 308.614481][ T28] audit: type=1400 audit(2000000118.100:2281): avc: denied { setopt } for pid=12857 comm="syz.2.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 308.709357][T12749] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.720135][T12749] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.729486][T12749] bridge_slave_0: entered allmulticast mode [ 308.747585][T12749] bridge_slave_0: entered promiscuous mode [ 308.754346][T12844] bond2: option mode: unable to set because the bond device is up [ 308.792725][T12864] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 308.802841][T12864] gretap2: entered allmulticast mode [ 308.817689][T12749] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.843548][T12749] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.858775][T12749] bridge_slave_1: entered allmulticast mode [ 308.872989][T12749] bridge_slave_1: entered promiscuous mode [ 308.891824][T12749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.927276][T12749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.030797][T12749] team0: Port device team_slave_0 added [ 309.057676][T12749] team0: Port device team_slave_1 added [ 309.084210][T12887] loop2: detected capacity change from 0 to 1024 [ 309.108702][T12887] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 309.116936][T12887] System zones: 0-1, 3-36 [ 309.124160][T12887] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2831: bad orphan inode 134217728 [ 309.134895][T12887] loop2: lost filesystem error report for type 5 error -117 [ 309.135669][T12887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.157613][ T28] audit: type=1326 audit(2000000118.650:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12881 comm="syz.2.2831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f383048c629 code=0x0 [ 309.219576][T12749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.229445][T12749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.257545][T12749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.271191][T11870] IPVS: stop unused estimator thread 0... [ 309.290456][T12749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.306593][T12749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.336703][T12749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.358092][T12911] netlink: 'syz.1.2836': attribute type 1 has an invalid length. [ 309.411575][T12911] bond0: entered promiscuous mode [ 309.418045][T12911] bond0: entered allmulticast mode [ 309.426710][T12911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.474140][T12911] macvlan4: entered promiscuous mode [ 309.485651][T12911] macvlan4: entered allmulticast mode [ 309.495035][T12911] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 309.524106][T12749] hsr_slave_0: entered promiscuous mode [ 309.530511][T12749] hsr_slave_1: entered promiscuous mode [ 309.536942][T12749] debugfs: 'hsr0' already exists in 'hsr' [ 309.542852][T12749] Cannot create hsr debugfs directory [ 309.601655][T12927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2838'. [ 309.766174][T12935] 9p: Bad value for 'wfdno' [ 309.841849][T12936] loop4: detected capacity change from 0 to 2048 [ 310.340910][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.388045][T12524] Alternate GPT is invalid, using primary GPT. [ 310.405786][T12524] loop4: p1 p2 p3 [ 310.431276][T12936] Alternate GPT is invalid, using primary GPT. [ 310.466922][T12936] loop4: p1 p2 p3 [ 310.669040][T12960] loop2: detected capacity change from 0 to 128 [ 311.081245][ T28] audit: type=1400 audit(2000000120.560:2283): avc: denied { getopt } for pid=12974 comm="syz.2.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 311.107322][T12975] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=12975 comm=syz.2.2843 [ 311.242629][T12981] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=12981 comm=syz.2.2843 [ 311.271644][T12749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.283581][T12646] udevd[12646]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 311.298813][T12980] udevd[12980]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 311.313361][T12966] udevd[12966]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 311.331525][T12524] udevd[12524]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 311.343031][T12966] udevd[12966]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 311.356831][T12983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2846'. [ 311.380953][T12749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.438802][T12527] udevd[12527]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 311.482021][T12987] loop2: detected capacity change from 0 to 2048 [ 311.489028][T12749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.504013][T12749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 311.573896][T12999] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 311.614041][T12987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.668298][T13017] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 311.680226][T13019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2852'. [ 311.714043][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.819477][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2856'. [ 311.848963][T12749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.894108][T12749] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.935991][T11870] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.943138][T11870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.972134][T13048] delete_channel: no stack [ 311.981147][T11870] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.988378][T11870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.007216][ T28] audit: type=1400 audit(2000000121.500:2284): avc: denied { bind } for pid=13026 comm="syz.4.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 312.043154][T12749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.070267][ T28] audit: type=1400 audit(2000000121.500:2285): avc: denied { listen } for pid=13026 comm="syz.4.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 312.096390][T12749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.212403][T13045] loop2: detected capacity change from 0 to 1024 [ 312.256083][T13066] random: crng reseeded on system resumption [ 312.297585][ T28] audit: type=1400 audit(2000000121.750:2286): avc: denied { write } for pid=13065 comm="syz.1.2863" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 312.297627][ T28] audit: type=1400 audit(2000000121.750:2287): avc: denied { open } for pid=13065 comm="syz.1.2863" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 312.297749][ T28] audit: type=1400 audit(2000000121.750:2288): avc: denied { ioctl } for pid=13065 comm="syz.1.2863" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 312.356815][T13071] netlink: 'syz.6.2865': attribute type 10 has an invalid length. [ 312.356838][T13071] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.2865'. [ 312.358735][T13071] netlink: 'syz.6.2865': attribute type 21 has an invalid length. [ 312.612354][ T28] audit: type=1400 audit(2000000122.100:2289): avc: denied { create } for pid=13090 comm="syz.6.2868" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 312.723946][T12749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.821737][T13045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 312.867466][T13045] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.918844][T13107] __nla_validate_parse: 1 callbacks suppressed [ 312.918865][T13107] netlink: 1315 bytes leftover after parsing attributes in process `syz.1.2872'. [ 312.947853][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 313.026946][T12749] veth0_vlan: entered promiscuous mode [ 313.041392][T12749] veth1_vlan: entered promiscuous mode [ 313.060474][T13124] loop2: detected capacity change from 0 to 2048 [ 313.089553][T12749] veth0_macvtap: entered promiscuous mode [ 313.112375][T13124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.129467][T12749] veth1_macvtap: entered promiscuous mode [ 313.152115][T12749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.166035][T12749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.178909][T11868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.251837][T13131] loop6: detected capacity change from 0 to 4096 [ 313.286549][T11869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.317670][T13131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.443398][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 313.873841][T11869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.908906][T13131] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2876: corrupted inode contents [ 313.928826][T13131] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.2876: mark_inode_dirty error [ 313.949586][T11869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.025026][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.048186][T13131] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2876: corrupted inode contents [ 314.066716][T13131] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.2876: mark_inode_dirty error [ 314.107218][T13131] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2876: corrupted inode contents [ 314.128498][T13131] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.2876: mark_inode_dirty error [ 314.167718][T13163] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.2876'. [ 314.259639][T13131] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2876: corrupted inode contents [ 314.271277][ T35] infiniband syz1: ib_query_port failed (-19) [ 314.325718][T13131] EXT4-fs error (device loop6): ext4_truncate:4587: inode #15: comm syz.6.2876: mark_inode_dirty error [ 314.338858][T13131] EXT4-fs error (device loop6) in ext4_setattr:5983: Corrupt filesystem [ 314.363381][T13157] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.2876: corrupted inode contents [ 314.454986][T12150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.503161][T13171] delete_channel: no stack [ 316.676555][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2888'. [ 317.077446][T13204] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 317.128514][T13177] chnl_net:caif_netlink_parms(): no params data found [ 317.152853][T13211] loop6: detected capacity change from 0 to 2048 [ 317.167237][T11870] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.232096][T13211] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.300691][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2898'. [ 317.320762][T11870] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.527631][T13238] loop2: detected capacity change from 0 to 128 [ 317.566705][T13238] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.604905][T11870] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.617384][T13238] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.631753][T13177] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.639014][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.646326][T13177] bridge_slave_0: entered allmulticast mode [ 317.652937][T13177] bridge_slave_0: entered promiscuous mode [ 317.713355][T13177] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.734205][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 317.734240][ T28] audit: type=1400 audit(2000000127.220:2291): avc: denied { unlink } for pid=3316 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 317.787476][ T3316] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /584/file1/lost+found: directory fails checksum at offset 1024 [ 317.806163][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.813756][T13177] bridge_slave_1: entered allmulticast mode [ 317.822858][T13177] bridge_slave_1: entered promiscuous mode [ 317.827654][ T3316] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /584/file1/lost+found: directory fails checksum at offset 8192 [ 317.853869][T13177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.864940][T13177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.882012][T11870] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.893135][ T3316] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 317.908129][ T3316] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /584/file1/lost+found: directory fails checksum at offset 1024 [ 317.930272][T13177] team0: Port device team_slave_0 added [ 317.938921][ T3316] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /584/file1/lost+found: directory fails checksum at offset 8192 [ 317.955831][T13177] team0: Port device team_slave_1 added [ 317.970672][T12150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.983575][ T3316] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 317.999516][T13177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.007416][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.035006][ T3316] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /584/file1/lost+found: directory fails checksum at offset 1024 [ 318.053223][ T3316] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /584/file1/lost+found: directory fails checksum at offset 8192 [ 318.069534][T13177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.080745][ T3316] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 318.102382][T13177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.112535][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.139960][ T3316] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /584/file1/lost+found: directory fails checksum at offset 1024 [ 318.167440][T13177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.274538][T13177] hsr_slave_0: entered promiscuous mode [ 318.282783][T13177] hsr_slave_1: entered promiscuous mode [ 318.289317][T13177] debugfs: 'hsr0' already exists in 'hsr' [ 318.296579][T13177] Cannot create hsr debugfs directory [ 318.336995][T13253] bond2: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 318.422900][T13253] bond2 (unregistering): Released all slaves [ 318.429303][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2909'. [ 318.440306][ T5129] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.488304][ T5129] bond0: (slave syz_tun): Releasing backup interface [ 318.525700][T11870] bridge_slave_0: left allmulticast mode [ 318.531531][T11870] bridge_slave_0: left promiscuous mode [ 318.556927][T11870] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.575583][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2911'. [ 318.975590][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2915'. [ 318.991357][T11870] gretap0 (unregistering): left promiscuous mode [ 319.257609][T11870] bond0 (unregistering): left promiscuous mode [ 319.263842][T11870] bond_slave_0: left promiscuous mode [ 319.269415][T11870] bond_slave_1: left promiscuous mode [ 319.275407][T11870] bridge_slave_1: left promiscuous mode [ 319.283565][T11870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.293929][T11870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.305986][T11870] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 319.316692][T11870] bond0 (unregistering): Released all slaves [ 319.324892][T11870] bond1 (unregistering): Released all slaves [ 319.333918][T11870] bond2 (unregistering): Released all slaves [ 319.342894][T11870] bond3 (unregistering): Released all slaves [ 319.351748][T11870] bond4 (unregistering): Released all slaves [ 319.379528][T11870] tipc: Disabling bearer [ 319.385141][T11870] tipc: Left network mode [ 319.427531][T11870] hsr_slave_0: left promiscuous mode [ 319.433455][T11870] hsr_slave_1: left promiscuous mode [ 319.442076][T11870] veth1_macvtap: left promiscuous mode [ 319.447829][T11870] veth0_macvtap: left promiscuous mode [ 319.453516][T11870] veth1_vlan: left promiscuous mode [ 319.459175][T11870] veth0_vlan: left promiscuous mode [ 319.533631][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 319.600819][T11870] team0 (unregistering): Port device team_slave_1 removed [ 319.614137][T11870] team0 (unregistering): Port device team_slave_0 removed [ 319.690335][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'. [ 319.826800][ T28] audit: type=1326 audit(2000000129.320:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8155c629 code=0x7ffc0000 [ 319.917636][ T28] audit: type=1326 audit(2000000129.320:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8155c629 code=0x7ffc0000 [ 319.941462][ T28] audit: type=1326 audit(2000000129.320:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8155c629 code=0x7ffc0000 [ 319.965154][ T28] audit: type=1326 audit(2000000129.320:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f8155c629 code=0x7ffc0000 [ 319.988864][ T28] audit: type=1326 audit(2000000129.320:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8155c629 code=0x7ffc0000 [ 320.012645][ T28] audit: type=1326 audit(2000000129.340:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8155c629 code=0x7ffc0000 [ 320.041280][ T28] audit: type=1326 audit(2000000129.340:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8155c629 code=0x7ffc0000 [ 320.069735][ T28] audit: type=1326 audit(2000000129.340:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f8155c629 code=0x7ffc0000 [ 320.107309][T13277] chnl_net:caif_netlink_parms(): no params data found [ 320.130312][T13358] syzkaller1: entered promiscuous mode [ 320.135923][T13358] syzkaller1: entered allmulticast mode [ 320.145884][ T28] audit: type=1326 audit(2000000129.340:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13341 comm="syz.1.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8155c629 code=0x7ffc0000 [ 320.311879][T13277] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.319137][T13277] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.326672][T13277] bridge_slave_0: entered allmulticast mode [ 320.333428][T13277] bridge_slave_0: entered promiscuous mode [ 320.346477][T13277] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.353763][T13277] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.361168][T13277] bridge_slave_1: entered allmulticast mode [ 320.371811][T13277] bridge_slave_1: entered promiscuous mode [ 320.426261][T13277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.437757][T13342] Set syz1 is full, maxelem 65536 reached [ 320.450353][T13277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.467891][T13177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.494767][T13177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.537331][T13177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 320.568011][T13277] team0: Port device team_slave_0 added [ 320.579000][T13277] team0: Port device team_slave_1 added [ 320.605300][T13177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.636562][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2936'. [ 320.666774][T13277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.684085][T13277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.720099][T13277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.742141][T13277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.771481][T13277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.799988][T13277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.931552][T13177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.957935][T13277] hsr_slave_0: entered promiscuous mode [ 320.974890][T13277] hsr_slave_1: entered promiscuous mode [ 321.000623][T13277] debugfs: 'hsr0' already exists in 'hsr' [ 321.012242][T13277] Cannot create hsr debugfs directory [ 321.026790][T13177] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.045924][T11870] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.053052][T11870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.072006][T11870] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.079154][T11870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.250575][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2948'. [ 321.366670][T13277] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 321.386597][T13277] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 321.403796][T13277] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 321.453947][T13277] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 321.513496][T13177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.647835][T13277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.099553][T13277] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.110297][T11869] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.117821][T11869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.138277][T11869] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.145432][T11869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.412956][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2956'. [ 322.856013][T13277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.963153][T13514] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2961'. [ 323.021519][T13177] veth0_vlan: entered promiscuous mode [ 323.130512][T13177] veth1_vlan: entered promiscuous mode [ 323.159576][T13177] veth0_macvtap: entered promiscuous mode [ 323.167931][T13177] veth1_macvtap: entered promiscuous mode [ 323.181222][T13177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.196010][T13177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.209301][T11870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.279426][T11870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.305475][T11870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.354454][T11870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.449046][T13277] veth0_vlan: entered promiscuous mode [ 323.470955][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2968'. [ 323.485503][T13277] veth1_vlan: entered promiscuous mode [ 323.538303][T13277] veth0_macvtap: entered promiscuous mode [ 323.554894][T13277] veth1_macvtap: entered promiscuous mode [ 323.590739][T13277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.631612][T13277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.655315][T11868] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.685648][T11868] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.705369][T11868] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.786556][T11869] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.893282][T13559] loop6: detected capacity change from 0 to 2048 [ 323.930122][T13559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.044656][T13564] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 324.164543][T13569] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.254680][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2972'. [ 324.662973][T13569] block device autoloading is deprecated and will be removed. [ 324.828828][T12150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.845899][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2978'. [ 324.900346][T13593] loop6: detected capacity change from 0 to 512 [ 324.944941][T13593] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.010174][T13593] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.071120][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 325.071137][ T28] audit: type=1400 audit(2000000134.560:2422): avc: denied { shutdown } for pid=13592 comm="syz.6.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 325.137050][T12150] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 325.156193][T12150] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 325.294710][ T28] audit: type=1326 audit(2000000134.790:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa81dc629 code=0x7ffc0000 [ 325.366077][T13622] loop7: detected capacity change from 0 to 2048 [ 325.375094][T13623] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2988'. [ 325.390089][T12430] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.400286][ T28] audit: type=1326 audit(2000000134.810:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa81dc629 code=0x7ffc0000 [ 325.425664][ T28] audit: type=1326 audit(2000000134.810:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f6fa81dc629 code=0x7ffc0000 [ 325.454824][ T28] audit: type=1326 audit(2000000134.810:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa81dc629 code=0x7ffc0000 [ 325.479467][ T28] audit: type=1326 audit(2000000134.810:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa81dc629 code=0x7ffc0000 [ 325.503338][ T28] audit: type=1326 audit(2000000134.810:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6fa81dc629 code=0x7ffc0000 [ 325.527678][ T28] audit: type=1326 audit(2000000134.810:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6fa81dc392 code=0x7ffc0000 [ 325.563411][T13622] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.644697][ T28] audit: type=1326 audit(2000000134.810:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6fa81dc392 code=0x7ffc0000 [ 325.718527][ T28] audit: type=1326 audit(2000000134.810:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13614 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa81dc629 code=0x7ffc0000 [ 325.840760][T11870] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.856856][T13277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.944249][T11870] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.118307][T11870] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.196308][T11870] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.413090][T11870] bridge_slave_1: left allmulticast mode [ 326.419102][T11870] bridge_slave_1: left promiscuous mode [ 326.430474][T11870] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.442339][T11870] bridge_slave_0: left allmulticast mode [ 326.459760][T11870] bridge_slave_0: left promiscuous mode [ 326.465747][T13682] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 326.471926][T11870] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.666649][T11870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.676559][T11870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.678569][T11870] bond0 (unregistering): Released all slaves [ 326.770537][T11870] hsr_slave_0: left promiscuous mode [ 326.770880][T11870] hsr_slave_1: left promiscuous mode [ 326.771557][T11870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.771596][T11870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.773313][T11870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.773354][T11870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.801718][T11870] veth1_macvtap: left promiscuous mode [ 326.801743][T11870] veth0_macvtap: left promiscuous mode [ 326.801786][T11870] veth1_vlan: left promiscuous mode [ 326.801849][T11870] veth0_vlan: left promiscuous mode [ 326.809256][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3009'. [ 327.192558][T11870] team0 (unregistering): Port device team_slave_1 removed [ 327.203794][T11870] team0 (unregistering): Port device team_slave_0 removed [ 327.363250][T13657] chnl_net:caif_netlink_parms(): no params data found [ 327.437943][T13657] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.445168][T13657] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.452799][T13657] bridge_slave_0: entered allmulticast mode [ 327.460358][T13657] bridge_slave_0: entered promiscuous mode [ 327.471433][T13657] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.480103][T13657] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.487431][T13657] bridge_slave_1: entered allmulticast mode [ 327.494200][T13657] bridge_slave_1: entered promiscuous mode [ 327.519934][T13657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.530665][T13657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.557416][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3014'. [ 327.557928][T13657] team0: Port device team_slave_0 added [ 327.576853][T13724] loop4: detected capacity change from 0 to 2048 [ 327.594801][T13657] team0: Port device team_slave_1 added [ 327.633983][T13657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.657427][T13657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.694342][T13657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.718732][T13657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.725959][T13657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.772962][T13747] netlink: 'syz.4.3015': attribute type 6 has an invalid length. [ 327.787209][T13657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.896218][T13657] hsr_slave_0: entered promiscuous mode [ 327.919615][T13657] hsr_slave_1: entered promiscuous mode [ 327.932384][T13657] debugfs: 'hsr0' already exists in 'hsr' [ 327.942574][T13657] Cannot create hsr debugfs directory [ 328.204051][T13773] loop4: detected capacity change from 0 to 1024 [ 328.281526][T13657] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 328.302540][T13657] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 328.363714][T13657] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 328.394774][T13657] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 328.423433][T13773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 328.439332][T13773] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.571547][T13177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 328.750070][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 329.158293][T11870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.239195][T13657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.253109][T13657] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.263102][T11868] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.270307][T11868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.345280][T11870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.368461][T13839] netlink: 'syz.7.3035': attribute type 41 has an invalid length. [ 329.381489][T13833] delete_channel: no stack [ 329.417599][T11869] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.424750][T11869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.476790][T11870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.662099][T13870] FAULT_INJECTION: forcing a failure. [ 329.662099][T13870] name failslab, interval 1, probability 0, space 0, times 0 [ 329.824989][T13870] CPU: 0 UID: 0 PID: 13870 Comm: syz.1.3045 Tainted: G W syzkaller #0 PREEMPT(full) [ 329.825060][T13870] Tainted: [W]=WARN [ 329.825071][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.825085][T13870] Call Trace: [ 329.825091][T13870] [ 329.825099][T13870] __dump_stack+0x1d/0x30 [ 329.825155][T13870] dump_stack_lvl+0x95/0xd0 [ 329.825185][T13870] dump_stack+0x15/0x1b [ 329.825290][T13870] should_fail_ex+0x263/0x280 [ 329.825351][T13870] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 329.825386][T13870] should_failslab+0x8c/0xb0 [ 329.825411][T13870] __kmalloc_cache_noprof+0x5f/0x410 [ 329.825444][T13870] bpf_prog_alloc_no_stats+0xc4/0x390 [ 329.825540][T13870] bpf_prog_alloc+0x3c/0x150 [ 329.825564][T13870] bpf_prog_load+0x506/0x1140 [ 329.825598][T13870] ? security_bpf+0x2b/0x90 [ 329.825685][T13870] __sys_bpf+0x505/0x7e0 [ 329.825717][T13870] __x64_sys_bpf+0x41/0x50 [ 329.825754][T13870] x64_sys_call+0x10cb/0x3020 [ 329.825784][T13870] do_syscall_64+0x12c/0x370 [ 329.825854][T13870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.825881][T13870] RIP: 0033:0x7f8f8155c629 [ 329.825897][T13870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.825915][T13870] RSP: 002b:00007f8f7ffb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.826000][T13870] RAX: ffffffffffffffda RBX: 00007f8f817d5fa0 RCX: 00007f8f8155c629 [ 329.826015][T13870] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 329.826028][T13870] RBP: 00007f8f7ffb7090 R08: 0000000000000000 R09: 0000000000000000 [ 329.826040][T13870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.826054][T13870] R13: 00007f8f817d6038 R14: 00007f8f817d5fa0 R15: 00007ffcbf22ae38 [ 329.826075][T13870] [ 330.069573][T13657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.243240][T11870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.447466][T11870] bridge_slave_1: left allmulticast mode [ 330.481382][T11870] bridge_slave_1: left promiscuous mode [ 330.507315][T11870] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.525627][T11870] bridge_slave_0: left allmulticast mode [ 330.534544][T11870] bridge_slave_0: left promiscuous mode [ 330.540478][T11870] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.563515][T13911] program syz.4.3050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.584365][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 330.584386][ T28] audit: type=1400 audit(2000000140.070:2443): avc: denied { validate_trans } for pid=13908 comm="syz.4.3050" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 330.759856][T11870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.776591][T11870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.786815][T11870] bond0 (unregistering): Released all slaves [ 330.825055][T13829] chnl_net:caif_netlink_parms(): no params data found [ 330.904656][T11870] hsr_slave_0: left promiscuous mode [ 330.913635][T11870] hsr_slave_1: left promiscuous mode [ 330.924789][T11870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.932302][T11870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.948254][T11870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.974618][T11870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.986559][T11870] veth1_macvtap: left promiscuous mode [ 330.992241][T11870] veth0_macvtap: left promiscuous mode [ 330.998009][T11870] veth1_vlan: left promiscuous mode [ 331.010110][T13951] loop7: detected capacity change from 0 to 1024 [ 331.013750][T11870] veth0_vlan: left promiscuous mode [ 331.196886][T11870] team0 (unregistering): Port device team_slave_1 removed [ 331.215964][T11870] team0 (unregistering): Port device team_slave_0 removed [ 331.295199][T13657] veth0_vlan: entered promiscuous mode [ 331.330914][T13657] veth1_vlan: entered promiscuous mode [ 331.353244][T13829] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.360883][T13829] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.369172][T13829] bridge_slave_0: entered allmulticast mode [ 331.376061][T13829] bridge_slave_0: entered promiscuous mode [ 331.396512][T13657] veth0_macvtap: entered promiscuous mode [ 331.413480][T13829] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.431773][T13829] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.444702][T13829] bridge_slave_1: entered allmulticast mode [ 331.457743][T13829] bridge_slave_1: entered promiscuous mode [ 331.484122][T13657] veth1_macvtap: entered promiscuous mode [ 331.526817][T13829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.542110][T13657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.553318][T13657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.566438][T13829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.605767][T11869] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.628978][T11869] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.653651][T11869] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.681547][T11869] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.697813][T13829] team0: Port device team_slave_0 added [ 331.713590][T13829] team0: Port device team_slave_1 added [ 331.740825][T13829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.753792][T13829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.781486][T13829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.823050][T13829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.855475][T13829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.887703][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 331.954722][T13829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.065851][T13829] hsr_slave_0: entered promiscuous mode [ 332.082609][T13829] hsr_slave_1: entered promiscuous mode [ 332.097454][T13829] debugfs: 'hsr0' already exists in 'hsr' [ 332.115627][T13829] Cannot create hsr debugfs directory [ 332.194804][T14047] loop7: detected capacity change from 0 to 1024 [ 332.209500][T14047] EXT4-fs: test_dummy_encryption option not supported [ 332.374134][T13829] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 332.386566][T13829] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 332.401605][T13829] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 332.417800][T14066] FAULT_INJECTION: forcing a failure. [ 332.417800][T14066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.432163][T14066] CPU: 1 UID: 0 PID: 14066 Comm: syz.4.3081 Tainted: G W syzkaller #0 PREEMPT(full) [ 332.432313][T14066] Tainted: [W]=WARN [ 332.432323][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.432339][T14066] Call Trace: [ 332.432347][T14066] [ 332.432356][T14066] __dump_stack+0x1d/0x30 [ 332.432391][T14066] dump_stack_lvl+0x95/0xd0 [ 332.432428][T14066] dump_stack+0x15/0x1b [ 332.432496][T14066] should_fail_ex+0x263/0x280 [ 332.432525][T14066] should_fail+0xb/0x20 [ 332.432548][T14066] should_fail_usercopy+0x1a/0x20 [ 332.432576][T14066] strncpy_from_user+0x27/0x250 [ 332.432663][T14066] strncpy_from_bpfptr+0x43/0x50 [ 332.432699][T14066] bpf_prog_load+0x882/0x1140 [ 332.432788][T14066] ? security_bpf+0x2b/0x90 [ 332.432829][T14066] __sys_bpf+0x505/0x7e0 [ 332.432864][T14066] __x64_sys_bpf+0x41/0x50 [ 332.432965][T14066] x64_sys_call+0x10cb/0x3020 [ 332.433082][T14066] do_syscall_64+0x12c/0x370 [ 332.433128][T14066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.433211][T14066] RIP: 0033:0x7f60a276c629 [ 332.433232][T14066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.433251][T14066] RSP: 002b:00007f60a11c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.433270][T14066] RAX: ffffffffffffffda RBX: 00007f60a29e5fa0 RCX: 00007f60a276c629 [ 332.433329][T14066] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 332.433343][T14066] RBP: 00007f60a11c7090 R08: 0000000000000000 R09: 0000000000000000 [ 332.433355][T14066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.433367][T14066] R13: 00007f60a29e6038 R14: 00007f60a29e5fa0 R15: 00007ffdf0686ae8 [ 332.433389][T14066] [ 332.442234][T13829] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 332.620606][T14047] loop7: detected capacity change from 0 to 1024 [ 332.663019][T14047] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 332.677874][T14047] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 332.687316][T14072] netlink: 'syz.8.3083': attribute type 32 has an invalid length. [ 332.695492][T14047] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3077: Failed to acquire dquot type 0 [ 332.707178][T14047] loop7: lost filesystem error report for type 5 error -5 [ 332.708793][T14047] EXT4-fs (loop7): 1 truncate cleaned up [ 332.715988][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 332.716008][ C0] EXT4-fs (loop7): initial error at time 2000000142: ext4_acquire_dquot:7001 [ 332.716051][ C0] EXT4-fs (loop7): last error at time 2000000142: ext4_acquire_dquot:7001 [ 332.747297][T14047] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.795290][T14047] x_tables: duplicate underflow at hook 1 [ 332.811467][T14047] Invalid ELF header type: 3 != 1 [ 332.824502][ T28] audit: type=1400 audit(2000000142.300:2444): avc: denied { module_load } for pid=14046 comm="syz.7.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 332.907249][T13277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.958726][T14088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3089'. [ 332.981294][ T28] audit: type=1400 audit(2000000142.470:2445): avc: denied { execmod } for pid=14087 comm="syz.4.3089" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 333.107266][ T28] audit: type=1400 audit(2000000142.510:2446): avc: denied { execute } for pid=14087 comm="syz.4.3089" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 333.133768][ T28] audit: type=1400 audit(2000000142.570:2447): avc: denied { map } for pid=14095 comm="syz.1.3090" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 333.145455][T13829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.222160][T13829] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.252539][T13829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.274353][T13829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.299352][T14110] xt_hashlimit: size too large, truncated to 1048576 [ 333.331921][T11870] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.339057][T11870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.350261][ T28] audit: type=1326 audit(2000000142.810:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.7.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3fc9c629 code=0x7ffc0000 [ 333.399666][T11870] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.406826][T11870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.428527][ T28] audit: type=1326 audit(2000000142.810:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.7.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3fc9c629 code=0x7ffc0000 [ 333.521306][ T28] audit: type=1326 audit(2000000142.810:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.7.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3fc9c629 code=0x7ffc0000 [ 333.644512][T13829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.838371][T14146] team0: Device gtp0 is of different type [ 333.975199][T14147] loop7: detected capacity change from 0 to 512 [ 334.187344][T14147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.187533][T14147] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.195401][T14147] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #12: comm syz.7.3097: invalid size [ 334.196418][T14147] EXT4-fs (loop7): Remounting filesystem read-only [ 334.402067][T14161] loop8: detected capacity change from 0 to 512 [ 334.434031][T14161] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.3103: ea_inode with extended attributes [ 334.452499][T14161] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 334.453095][T14161] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.3103: error while reading EA inode 11 err=-117 [ 334.462430][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 334.462469][ C1] EXT4-fs (loop8): initial error at time 2000000143: ext4_xattr_inode_iget:441: inode 11 [ 334.462508][ C1] EXT4-fs (loop8): last error at time 2000000143: ext4_xattr_inode_iget:441: inode 11 [ 334.521506][T13829] veth0_vlan: entered promiscuous mode [ 334.527450][T14161] loop8: lost filesystem error report for type 5 error -117 [ 334.529225][T14161] EXT4-fs (loop8): 1 orphan inode deleted [ 334.558323][T14161] EXT4-fs (loop8): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.571339][T13829] veth1_vlan: entered promiscuous mode [ 334.585776][T13277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.595408][T11869] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 334.609485][T13829] veth0_macvtap: entered promiscuous mode [ 334.625990][T13829] veth1_macvtap: entered promiscuous mode [ 334.627805][T14168] loop4: detected capacity change from 0 to 1024 [ 334.637036][T14144] delete_channel: no stack [ 334.648998][T13829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.681023][T13829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.715287][T13657] EXT4-fs (loop8): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 334.734433][T11854] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.743339][T11854] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.767419][T11854] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.777093][T11854] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.786527][T14180] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 334.792905][T14168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 334.813563][T14168] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.852986][T14183] tmpfs: Bad value for 'mpol' [ 334.857760][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3106'. [ 334.945632][T13177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 335.014518][T14198] netlink: 'syz.9.3034': attribute type 29 has an invalid length. [ 335.023646][T14198] netlink: 'syz.9.3034': attribute type 29 has an invalid length. [ 335.518221][T14212] loop7: detected capacity change from 0 to 128 [ 335.591528][T11854] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.634419][T11854] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.709496][T14220] loop8: detected capacity change from 0 to 128 [ 335.727855][T11854] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.754682][T11854] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.783368][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 335.783419][ T28] audit: type=1400 audit(2000000145.270:2523): avc: denied { read } for pid=14219 comm="syz.8.3118" path="socket:[40907]" dev="sockfs" ino=40907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 335.869454][T14234] 9p: Bad value for 'wfdno' [ 335.918162][T11854] team0: Port device netdevsim1 removed [ 335.935444][T11854] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.954628][T11854] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.052319][T14252] serio: Serial port ptm0 [ 336.081981][ T28] audit: type=1400 audit(2000000145.570:2524): avc: denied { read write } for pid=14253 comm="syz.8.3128" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 336.102749][T14237] loop4: detected capacity change from 0 to 1024 [ 336.114160][ T28] audit: type=1400 audit(2000000145.570:2525): avc: denied { open } for pid=14253 comm="syz.8.3128" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 336.203996][ T28] audit: type=1400 audit(2000000145.570:2526): avc: denied { ioctl } for pid=14253 comm="syz.8.3128" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 336.234570][T11854] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.251019][T11854] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.273330][T14237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 336.297065][T14237] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.398594][T13177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 336.409299][T14272] netlink: 131740 bytes leftover after parsing attributes in process `syz.9.3130'. [ 336.423200][T11854] bridge_slave_1: left allmulticast mode [ 336.429349][T14272] netlink: zone id is out of range [ 336.441359][T14272] netlink: zone id is out of range [ 336.447196][T14272] netlink: zone id is out of range [ 336.450315][T11854] bridge_slave_1: left promiscuous mode [ 336.459527][T14272] netlink: del zone limit has 8 unknown bytes [ 336.467286][T11854] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.477317][T14274] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3129'. [ 336.477320][T14275] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3129'. [ 336.499138][T11854] bridge_slave_0: left allmulticast mode [ 336.505313][T11854] bridge_slave_0: left promiscuous mode [ 336.511073][T11854] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.686973][T14283] loop9: detected capacity change from 0 to 128 [ 336.895288][T11854] bond1 (unregistering): Released all slaves [ 336.914050][T11854] bond0 (unregistering): Released all slaves [ 336.977508][T14254] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.984772][T14254] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.006393][ T28] audit: type=1326 audit(2000000146.500:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.7.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3fc9c629 code=0x7ffc0000 [ 337.037926][ T28] audit: type=1326 audit(2000000146.500:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.7.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3fc9c629 code=0x7ffc0000 [ 337.062295][ T28] audit: type=1326 audit(2000000146.500:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.7.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3fc9c629 code=0x7ffc0000 [ 337.086860][ T28] audit: type=1326 audit(2000000146.500:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.7.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc3fc9c629 code=0x7ffc0000 [ 337.114734][ T28] audit: type=1326 audit(2000000146.500:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.7.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3fc9c629 code=0x7ffc0000 [ 337.140215][ T28] audit: type=1326 audit(2000000146.500:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14286 comm="syz.7.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3fc9c629 code=0x7ffc0000 [ 337.194640][T14254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.205757][T14254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.289568][T11854] tipc: Left network mode [ 337.303773][T11851] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.326723][T11851] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.388539][T14297] loop7: detected capacity change from 0 to 2048 [ 337.390601][T11851] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.434370][T14297] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.612099][T11854] hsr_slave_0: left promiscuous mode [ 337.618074][T11854] hsr_slave_1: left promiscuous mode [ 337.739342][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3137'. [ 338.148746][T11854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.171864][T14312] loop4: detected capacity change from 0 to 1024 [ 338.182562][T11854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.214482][T11854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.227243][T11854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.238769][T14312] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 338.258916][T11854] veth1_macvtap: left promiscuous mode [ 338.264668][T11854] veth0_macvtap: left promiscuous mode [ 338.270202][T11854] veth1_vlan: left promiscuous mode [ 338.275707][T14312] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 338.287685][T11854] veth0_vlan: left promiscuous mode [ 338.293390][T14312] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 338.311644][T14312] EXT4-fs (loop4): orphan cleanup on readonly fs [ 338.322998][T14312] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.3138: Freeing blocks not in datazone - block = 0, count = 4096 [ 338.336848][T14312] loop4: lost filesystem error report for type 5 error -117 [ 338.341109][T14312] EXT4-fs (loop4): Remounting filesystem read-only [ 338.348533][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 338.348550][ C1] EXT4-fs (loop4): initial error at time 2000000147: ext4_free_blocks:6724 [ 338.348574][ C1] EXT4-fs (loop4): last error at time 2000000147: ext4_free_blocks:6724 [ 338.370165][T14324] netlink: 182 bytes leftover after parsing attributes in process `syz.8.3149'. [ 338.370891][T14312] EXT4-fs (loop4): 1 orphan inode deleted [ 338.394401][T14312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.496476][T11854] team0 (unregistering): Port device team_slave_1 removed [ 338.505874][T13177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.527980][T11854] team0 (unregistering): Port device team_slave_0 removed [ 338.584609][T11851] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.653740][T14334] loop8: detected capacity change from 0 to 128 [ 338.667876][T14216] chnl_net:caif_netlink_parms(): no params data found [ 338.735304][T13277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.782550][T14334] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.807086][T14343] netlink: 'syz.9.3140': attribute type 1 has an invalid length. [ 338.844234][T14334] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 338.914991][T14334] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #2: comm syz.8.3151: No space for directory leaf checksum. Please run e2fsck -D. [ 339.004494][T14334] EXT4-fs error (device loop8): htree_dirblock_to_tree:1051: inode #2: comm syz.8.3151: Directory block failed checksum [ 339.008185][T14216] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.061745][T14216] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.085543][T14357] serio: Serial port ptm0 [ 339.090940][T14216] bridge_slave_0: entered allmulticast mode [ 339.109255][T14216] bridge_slave_0: entered promiscuous mode [ 339.118205][T14216] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.126078][T14216] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.133282][T14216] bridge_slave_1: entered allmulticast mode [ 339.163105][T13657] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.173458][T14216] bridge_slave_1: entered promiscuous mode [ 339.377929][T11854] IPVS: stop unused estimator thread 0... [ 339.412512][T14216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.433009][T14216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.472077][T14216] team0: Port device team_slave_0 added [ 339.487983][T14216] team0: Port device team_slave_1 added [ 339.606526][T14390] loop7: detected capacity change from 0 to 256 [ 339.616399][T14216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.623378][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.649888][T14216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.675620][T14390] FAT-fs (loop7): Directory bread(block 64) failed [ 339.682275][T14390] FAT-fs (loop7): Directory bread(block 65) failed [ 339.689144][T14390] FAT-fs (loop7): Directory bread(block 66) failed [ 339.695774][T14390] FAT-fs (loop7): Directory bread(block 67) failed [ 339.702470][T14390] FAT-fs (loop7): Directory bread(block 68) failed [ 339.709125][T14390] FAT-fs (loop7): Directory bread(block 69) failed [ 339.715765][T14390] FAT-fs (loop7): Directory bread(block 70) failed [ 339.722323][T14390] FAT-fs (loop7): Directory bread(block 71) failed [ 339.728994][T14390] FAT-fs (loop7): Directory bread(block 72) failed [ 339.735634][T14390] FAT-fs (loop7): Directory bread(block 73) failed [ 339.745864][T14216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.753738][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.780022][T14216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.790807][T14394] veth0: entered promiscuous mode [ 339.798996][T14391] veth0: left promiscuous mode [ 339.843703][T14216] hsr_slave_0: entered promiscuous mode [ 339.850176][T14216] hsr_slave_1: entered promiscuous mode [ 339.870007][T14216] debugfs: 'hsr0' already exists in 'hsr' [ 339.884376][T14216] Cannot create hsr debugfs directory [ 339.890098][T14399] loop4: detected capacity change from 0 to 512 [ 339.919704][T14399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.976184][T14399] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.131431][T13177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.223958][T14421] loop4: detected capacity change from 0 to 1024 [ 340.264784][T14421] EXT4-fs: Ignoring removed orlov option [ 340.298193][T14421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.490035][T14216] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 340.493174][T13177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.525491][T14216] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 340.558263][T14216] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 340.578201][T14216] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 340.719674][T14216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.772633][T14216] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.798583][T11852] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.805854][T11852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.826508][T11854] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.833700][T11854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.883364][T14478] loop4: detected capacity change from 0 to 1764 [ 340.989353][T14478] iso9660: Bad value for 'sbsector' [ 341.083474][T14216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.308343][T14216] veth0_vlan: entered promiscuous mode [ 341.340156][T14216] veth1_vlan: entered promiscuous mode [ 341.373309][T14216] veth0_macvtap: entered promiscuous mode [ 341.405948][T14509] loop8: detected capacity change from 0 to 2048 [ 341.412575][T14216] veth1_macvtap: entered promiscuous mode [ 341.433659][T14216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.454722][T14216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.464079][T14509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.476321][T11851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.503868][T11851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.530033][T11851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.664042][T11851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.697006][T14526] netlink: 'syz.4.3166': attribute type 1 has an invalid length. [ 341.857452][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3164'. [ 342.496756][T13657] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.592841][T14559] netlink: 'syz.8.3172': attribute type 1 has an invalid length. [ 342.626513][ T28] kauditd_printk_skb: 141 callbacks suppressed [ 342.626530][ T28] audit: type=1400 audit(2000000152.120:2674): avc: denied { create } for pid=14553 comm="syz.7.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 342.672933][T14559] bond1: entered promiscuous mode [ 342.680526][T14559] bond1: entered allmulticast mode [ 342.695504][T14554] loop7: detected capacity change from 0 to 128 [ 342.728654][T14569] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3172'. [ 342.737667][ T28] audit: type=1400 audit(2000000152.120:2675): avc: denied { ioctl } for pid=14553 comm="syz.7.3174" path="socket:[43236]" dev="sockfs" ino=43236 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 342.797069][T14559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.839376][T14566] erspan1: entered allmulticast mode [ 342.895395][T14566] bond1: (slave erspan1): making interface the new active one [ 342.918785][T14566] erspan1: entered promiscuous mode [ 342.937179][T14566] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 342.982748][T14569] bond1 (unregistering): (slave erspan1): Releasing active interface [ 343.015134][T14569] erspan1: left promiscuous mode [ 343.032469][T14569] bond1 (unregistering): Released all slaves [ 343.058787][T14582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.069633][T14582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.315448][T14600] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14600 comm=syz.8.3179 [ 343.351702][T14603] netlink: 'syz.4.3180': attribute type 3 has an invalid length. [ 343.415235][T14610] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 343.423825][T14610] tipc: Started in network mode [ 343.428790][T14610] tipc: Node identity de480369fa4, cluster identity 4711 [ 343.436082][T14610] tipc: Enabled bearer , priority 0 [ 343.454105][T14610] syzkaller0: entered promiscuous mode [ 343.484514][T14610] syzkaller0: entered allmulticast mode [ 343.540277][T14610] tipc: Resetting bearer [ 343.548796][T14609] tipc: Resetting bearer [ 343.588792][T14609] tipc: Disabling bearer [ 343.596785][T14617] serio: Serial port ptm0 [ 343.735725][T14650] loop9: detected capacity change from 0 to 1024 [ 343.749691][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3189'. [ 343.762539][T14650] EXT4-fs: Ignoring removed orlov option [ 343.787675][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3189'. [ 343.800371][T14650] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.819530][T14654] loop8: detected capacity change from 0 to 256 [ 343.823127][T14659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14659 comm=syz.8.3189 [ 343.842698][T14650] syzkaller0: entered promiscuous mode [ 343.848283][T14650] syzkaller0: entered allmulticast mode [ 343.870547][ T28] audit: type=1400 audit(2000000153.360:2676): avc: denied { lock } for pid=14653 comm="syz.8.3189" path="socket:[43330]" dev="sockfs" ino=43330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 343.903613][ T28] audit: type=1400 audit(2000000153.360:2677): avc: denied { create } for pid=14653 comm="syz.8.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 344.005154][T13829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.126441][T14681] netlink: 'syz.8.3194': attribute type 13 has an invalid length. [ 344.157035][T14683] loop9: detected capacity change from 0 to 512 [ 344.183109][T14683] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 344.216094][T14683] EXT4-fs (loop9): 1 truncate cleaned up [ 344.231823][T14683] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.239391][T14690] netlink: 'syz.1.3196': attribute type 7 has an invalid length. [ 344.276750][T13829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.288509][T14690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3196'. [ 344.340643][T14700] loop9: detected capacity change from 0 to 1764 [ 344.347531][T14700] iso9660: Unknown parameter 'unh' [ 344.354443][T14690] unsupported nlmsg_type 40 [ 344.365737][T14700] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3197'. [ 344.472576][T14714] netlink: 120 bytes leftover after parsing attributes in process `syz.7.3200'. [ 344.508597][T14721] loop9: detected capacity change from 0 to 164 [ 344.527349][ T28] audit: type=1400 audit(2000000154.020:2678): avc: denied { mounton } for pid=14720 comm="syz.9.3204" path="/16/file0" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 344.602310][T14729] tipc: Started in network mode [ 344.610359][ T28] audit: type=1400 audit(2000000154.100:2679): avc: denied { write } for pid=14728 comm="syz.4.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 344.654842][T14729] tipc: Node identity 000000000000ff000000000000000001, cluster identity 4711 [ 344.673482][ T28] audit: type=1400 audit(2000000154.160:2680): avc: denied { create } for pid=14740 comm="syz.9.3208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 344.676260][T14729] tipc: Enabling of bearer rejected, failed to enable media [ 344.744212][T14744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3209'. [ 344.758491][T14744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3209'. [ 344.778415][T14744] loop4: detected capacity change from 0 to 256 [ 344.989366][T14774] loop9: detected capacity change from 0 to 1024 [ 345.007544][T14777] serio: Serial port ptm1 [ 345.016950][T14774] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.125565][T14756] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3210'. [ 345.172153][T13829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.323530][ T28] audit: type=1400 audit(2000000154.810:2681): avc: denied { listen } for pid=14800 comm="syz.1.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.394371][ T28] audit: type=1400 audit(2000000154.880:2682): avc: denied { connect } for pid=14798 comm="syz.9.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 345.462582][T14799] netlink: 'syz.9.3218': attribute type 13 has an invalid length. [ 346.197241][T14799] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.204585][T14799] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.256156][T14821] FAULT_INJECTION: forcing a failure. [ 346.256156][T14821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.287065][T14821] CPU: 1 UID: 0 PID: 14821 Comm: syz.8.3224 Tainted: G W syzkaller #0 PREEMPT(full) [ 346.287099][T14821] Tainted: [W]=WARN [ 346.287105][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.287118][T14821] Call Trace: [ 346.287174][T14821] [ 346.287183][T14821] __dump_stack+0x1d/0x30 [ 346.287217][T14821] dump_stack_lvl+0x95/0xd0 [ 346.287293][T14821] dump_stack+0x15/0x1b [ 346.287317][T14821] should_fail_ex+0x263/0x280 [ 346.287339][T14821] should_fail+0xb/0x20 [ 346.287356][T14821] should_fail_usercopy+0x1a/0x20 [ 346.287385][T14821] _copy_to_user+0x20/0xa0 [ 346.287463][T14821] proc_connectinfo+0x93/0xe0 [ 346.287547][T14821] usbdev_ioctl+0xfd6/0x1750 [ 346.287576][T14821] ? __pfx_usbdev_ioctl+0x10/0x10 [ 346.287604][T14821] __se_sys_ioctl+0xce/0x140 [ 346.287660][T14821] __x64_sys_ioctl+0x43/0x50 [ 346.287700][T14821] x64_sys_call+0x1563/0x3020 [ 346.287735][T14821] do_syscall_64+0x12c/0x370 [ 346.287835][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.287863][T14821] RIP: 0033:0x7f11e1bcc629 [ 346.287883][T14821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.287906][T14821] RSP: 002b:00007f11e0627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.287926][T14821] RAX: ffffffffffffffda RBX: 00007f11e1e45fa0 RCX: 00007f11e1bcc629 [ 346.287958][T14821] RDX: 0000200000000200 RSI: 0000000040085511 RDI: 0000000000000003 [ 346.287971][T14821] RBP: 00007f11e0627090 R08: 0000000000000000 R09: 0000000000000000 [ 346.287983][T14821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.287995][T14821] R13: 00007f11e1e46038 R14: 00007f11e1e45fa0 R15: 00007ffdbe7564a8 [ 346.288016][T14821] [ 346.521201][T14799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.532968][T14799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.687204][T11851] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.714487][T11851] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.730489][T14825] loop7: detected capacity change from 0 to 1024 [ 346.739391][T11851] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.855229][T14838] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 346.861813][T14838] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 346.896020][T11851] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.914891][T14838] vhci_hcd vhci_hcd.0: Device attached [ 346.946513][T14840] vhci_hcd: connection closed [ 346.946977][T11852] vhci_hcd vhci_hcd.9: stop threads [ 346.949330][T14825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 346.951718][T11852] vhci_hcd vhci_hcd.9: release socket [ 346.951761][T11852] vhci_hcd vhci_hcd.9: disconnect device [ 347.005149][T14825] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.051006][T14853] loop8: detected capacity change from 0 to 256 [ 347.127990][T14853] FAT-fs (loop8): Directory bread(block 64) failed [ 347.135937][T13277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 347.162422][T14853] FAT-fs (loop8): Directory bread(block 65) failed [ 347.214835][T14853] FAT-fs (loop8): Directory bread(block 66) failed [ 347.237429][T14853] FAT-fs (loop8): Directory bread(block 67) failed [ 347.266631][T14853] FAT-fs (loop8): Directory bread(block 68) failed [ 347.290882][T14853] FAT-fs (loop8): Directory bread(block 69) failed [ 347.306808][T14853] FAT-fs (loop8): Directory bread(block 70) failed [ 347.369402][T14853] FAT-fs (loop8): Directory bread(block 71) failed [ 347.405314][T14853] FAT-fs (loop8): Directory bread(block 72) failed [ 347.441069][T14853] FAT-fs (loop8): Directory bread(block 73) failed [ 347.622068][T14884] loop7: detected capacity change from 0 to 1024 [ 347.665447][T14884] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.703134][ T28] audit: type=1400 audit(2000000157.190:2683): avc: denied { create } for pid=14883 comm="syz.7.3239" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 347.931582][T13277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.955186][T14894] loop4: detected capacity change from 0 to 128 [ 347.989996][T14894] EXT4-fs: test_dummy_encryption option not supported [ 348.033678][T14896] loop7: detected capacity change from 0 to 512 [ 348.071410][T14896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.092466][ T28] audit: type=1326 audit(2000000157.580:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.4.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a276c629 code=0x7ffc0000 [ 348.129497][ T28] audit: type=1326 audit(2000000157.580:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.4.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f60a276c629 code=0x7ffc0000 [ 348.148350][T14896] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 348.153551][ T28] audit: type=1326 audit(2000000157.580:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.4.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a276c629 code=0x7ffc0000 [ 348.209275][ T28] audit: type=1326 audit(2000000157.580:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.4.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60a276dec7 code=0x7ffc0000 [ 348.234723][ T28] audit: type=1326 audit(2000000157.580:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.4.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f60a272cece code=0x7ffc0000 [ 348.258442][ T28] audit: type=1326 audit(2000000157.580:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.4.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f60a272cece code=0x7ffc0000 [ 348.275006][T14900] loop4: detected capacity change from 0 to 2048 [ 348.282103][ T28] audit: type=1326 audit(2000000157.580:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.4.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f60a272cece code=0x7ffc0000 [ 348.332074][T14896] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.3241: corrupted inode contents [ 348.367101][ T28] audit: type=1326 audit(2000000157.580:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.4.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f60a272cece code=0x7ffc0000 [ 348.401537][T14900] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.3242: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2053(2053) [ 348.420579][T14896] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.3241: mark_inode_dirty error [ 348.424610][T14900] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 348.433033][ T28] audit: type=1326 audit(2000000157.580:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14893 comm="syz.4.3242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60a276c629 code=0x7ffc0000 [ 348.443219][T14900] EXT4-fs (loop4): Remounting filesystem read-only [ 348.465980][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 348.466003][ C1] EXT4-fs (loop4): initial error at time 2000000157: ext4_ext_check_inode:521: inode 2 [ 348.466034][ C1] EXT4-fs (loop4): last error at time 2000000157: ext4_ext_check_inode:521: inode 2 [ 348.502281][T14896] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.3241: corrupted inode contents [ 348.502339][T14900] EXT4-fs (loop4): get root inode failed [ 348.502353][T14900] EXT4-fs (loop4): mount failed [ 348.533719][T14896] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.3241: mark_inode_dirty error [ 348.731361][T14904] ip6tnl1: entered allmulticast mode [ 348.929497][T14921] FAULT_INJECTION: forcing a failure. [ 348.929497][T14921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.964982][T14921] CPU: 1 UID: 0 PID: 14921 Comm: syz.1.3250 Tainted: G W syzkaller #0 PREEMPT(full) [ 348.965058][T14921] Tainted: [W]=WARN [ 348.965067][T14921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.965119][T14921] Call Trace: [ 348.965128][T14921] [ 348.965145][T14921] __dump_stack+0x1d/0x30 [ 348.965181][T14921] dump_stack_lvl+0x95/0xd0 [ 348.965212][T14921] dump_stack+0x15/0x1b [ 348.965271][T14921] should_fail_ex+0x263/0x280 [ 348.965300][T14921] should_fail+0xb/0x20 [ 348.965323][T14921] should_fail_usercopy+0x1a/0x20 [ 348.965349][T14921] _copy_to_user+0x20/0xa0 [ 348.965411][T14921] simple_read_from_buffer+0xb5/0x130 [ 348.965439][T14921] proc_fail_nth_read+0x10e/0x150 [ 348.965603][T14921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.965639][T14921] vfs_read+0x1ab/0x7f0 [ 348.965700][T14921] ? __rcu_read_unlock+0x4e/0x70 [ 348.965728][T14921] ? __fget_files+0x184/0x1c0 [ 348.965759][T14921] ? mutex_lock+0x57/0x90 [ 348.965796][T14921] ksys_read+0xdc/0x1a0 [ 348.965889][T14921] __x64_sys_read+0x40/0x50 [ 348.965953][T14921] x64_sys_call+0x2886/0x3020 [ 348.965985][T14921] do_syscall_64+0x12c/0x370 [ 348.966109][T14921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.966167][T14921] RIP: 0033:0x7fe734eacece [ 348.966188][T14921] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.966207][T14921] RSP: 002b:00007fe733946fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.966354][T14921] RAX: ffffffffffffffda RBX: 00007fe7339476c0 RCX: 00007fe734eacece [ 348.966372][T14921] RDX: 000000000000000f RSI: 00007fe7339470a0 RDI: 0000000000000005 [ 348.966389][T14921] RBP: 00007fe733947090 R08: 0000000000000000 R09: 0000000000000000 [ 348.966406][T14921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.966427][T14921] R13: 00007fe735166038 R14: 00007fe735165fa0 R15: 00007fff4d0ee238 [ 348.966455][T14921] [ 349.297765][T14925] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3253'. [ 349.309987][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3252'. [ 349.319522][T14925] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3253'. [ 349.386160][T14923] loop4: detected capacity change from 0 to 1024 [ 349.449691][T14932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24320 sclass=netlink_route_socket pid=14932 comm=syz.9.3254 [ 349.504046][T14896] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #2: comm syz.7.3241: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 349.504046][T14896] [ 349.518915][T14923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 349.567654][T14923] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.616547][T13277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.654886][T13177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 349.786774][T14945] loop4: detected capacity change from 0 to 2048 [ 349.836357][T14945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.072737][T14959] tipc: Enabled bearer , priority 28 [ 350.203160][T14961] loop9: detected capacity change from 0 to 512 [ 350.238740][T14961] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 350.331598][T14961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23616 sclass=netlink_route_socket pid=14961 comm=syz.9.3265 [ 350.352950][T14961] bridge_slave_0: left allmulticast mode [ 350.361018][T14961] bridge_slave_0: left promiscuous mode [ 350.370876][T14961] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.402121][T14961] bridge_slave_1: left allmulticast mode [ 350.417209][T14961] bridge_slave_1: left promiscuous mode [ 350.430888][T14961] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.643501][T14961] bond0: (slave bond_slave_0): Releasing backup interface [ 350.729549][T14961] bond0: (slave bond_slave_1): Releasing backup interface [ 350.810072][T14961] team0: Port device team_slave_0 removed [ 350.849179][T14961] team0: Port device team_slave_1 removed [ 350.859830][T14961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.875246][T14961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.890165][T14961] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 350.907876][T14960] 9pnet_fd: p9_fd_create_tcp (14960): problem connecting socket to 127.0.0.1 [ 350.945849][T14953] xt_bpf: check failed: parse error [ 350.995621][T14978] netlink: 'syz.7.3268': attribute type 32 has an invalid length. [ 351.027026][T14848] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 351.221135][T13177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.380059][ T10] tipc: Node number set to 65281 [ 351.431781][T14986] loop9: detected capacity change from 0 to 1024 [ 351.519450][T14991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.579206][T14991] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 351.596948][T14986] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 351.635601][T14986] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.666244][T11854] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 351.784494][T13829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 351.993216][T11852] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 352.314942][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3276'. [ 352.369504][T15019] vlan2: entered promiscuous mode [ 352.379793][T15021] loop7: detected capacity change from 0 to 2048 [ 352.386689][T15019] bridge0: entered promiscuous mode [ 352.392962][T15023] loop4: detected capacity change from 0 to 512 [ 352.407744][T15023] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 352.432890][T15021] EXT4-fs: Ignoring removed nobh option [ 352.486344][T15021] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 352.587184][T15023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.635606][T11868] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 352.639783][T15023] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.677858][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3282'. [ 352.704559][T15023] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3283: corrupted xattr block 32: bad e_name length [ 352.748414][T15023] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 352.758070][T11868] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 352.776225][T15023] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3283: corrupted xattr block 32: bad e_name length [ 352.802297][T11868] team0: Port device geneve0 removed [ 352.833728][T13177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.900743][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3287'. [ 352.969677][T11868] bond0 (unregistering): Released all slaves [ 352.991487][T11868] bond1 (unregistering): Released all slaves [ 353.004426][T11868] bond2 (unregistering): (slave bond3): Releasing backup interface [ 353.021296][T11868] bond3 (unregistering): left promiscuous mode [ 353.055705][T11868] bond2 (unregistering): Released all slaves [ 353.075723][T11868] bond3 (unregistering): Released all slaves [ 353.093214][T11868] bond4 (unregistering): Released all slaves [ 353.107707][T11868] bond5 (unregistering): Released all slaves [ 353.118635][T11868] bond6 (unregistering): Released all slaves [ 353.132764][T11868] bond7 (unregistering): Released all slaves [ 353.142635][T11868] bond8 (unregistering): Released all slaves [ 354.966948][T11868] hsr_slave_0: left promiscuous mode [ 354.994613][T11868] hsr_slave_1: left promiscuous mode [ 355.151296][T15148] loop8: detected capacity change from 0 to 256 [ 355.194950][T15148] FAT-fs (loop8): Directory bread(block 64) failed [ 355.201598][T15148] FAT-fs (loop8): Directory bread(block 65) failed [ 355.208473][T15148] FAT-fs (loop8): Directory bread(block 66) failed [ 355.215159][T15148] FAT-fs (loop8): Directory bread(block 67) failed [ 355.221831][T15148] FAT-fs (loop8): Directory bread(block 68) failed [ 355.228583][T15148] FAT-fs (loop8): Directory bread(block 69) failed [ 355.235532][T15148] FAT-fs (loop8): Directory bread(block 70) failed [ 355.242203][T15148] FAT-fs (loop8): Directory bread(block 71) failed [ 355.248928][T15148] FAT-fs (loop8): Directory bread(block 72) failed [ 355.255617][T15148] FAT-fs (loop8): Directory bread(block 73) failed [ 355.285847][T15138] loop9: detected capacity change from 0 to 1024 [ 355.456786][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 355.456812][ T28] audit: type=1400 audit(2000000164.950:2829): avc: denied { getopt } for pid=15149 comm="syz.1.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 355.921459][T11868] team0 (unregistering): Port device dummy0 removed [ 355.937230][T15138] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 356.008850][ T28] audit: type=1400 audit(2000000165.060:2830): avc: denied { write } for pid=15159 comm="syz.7.3314" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 356.093281][T15138] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.352629][T11868] IPVS: stop unused estimator thread 0... [ 356.467725][T13829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 357.337426][T15213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15213 comm=syz.9.3318 [ 357.355568][T15219] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3325'. [ 357.381845][T15223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3327'. [ 357.423382][ T28] audit: type=1400 audit(2000000166.900:2831): avc: denied { ioctl } for pid=15220 comm="syz.1.3327" path="socket:[45069]" dev="sockfs" ino=45069 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 357.658196][ T28] audit: type=1400 audit(2000000167.150:2832): avc: denied { create } for pid=15249 comm="syz.8.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 357.685552][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3335'. [ 357.730298][T15253] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3336'. [ 357.748964][ T28] audit: type=1400 audit(2000000167.240:2833): avc: denied { read } for pid=15252 comm="syz.7.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 357.770277][T15253] loop7: detected capacity change from 0 to 1024 [ 357.815308][T15253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.952173][T13277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.087968][T15269] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3342'. [ 358.170577][T13679] ================================================================== [ 358.178722][T13679] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 358.185715][T13679] [ 358.188071][T13679] write to 0xffff8881050760ec of 4 bytes by task 12966 on cpu 0: [ 358.195816][T13679] shmem_mknod+0x143/0x170 [ 358.200274][T13679] shmem_create+0x34/0x50 [ 358.204646][T13679] path_openat+0xd75/0x2050 [ 358.209191][T13679] do_file_open+0x16c/0x290 [ 358.213769][T13679] do_sys_openat2+0x94/0x130 [ 358.218391][T13679] __x64_sys_openat+0xf2/0x120 [ 358.223193][T13679] x64_sys_call+0x1e39/0x3020 [ 358.227958][T13679] do_syscall_64+0x12c/0x370 [ 358.232599][T13679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.238557][T13679] [ 358.240901][T13679] read to 0xffff8881050760ec of 4 bytes by task 13679 on cpu 1: [ 358.248555][T13679] fill_mg_cmtime+0x5b/0x270 [ 358.253258][T13679] generic_fillattr+0x24a/0x340 [ 358.258133][T13679] shmem_getattr+0x181/0x200 [ 358.262768][T13679] vfs_getattr_nosec+0x146/0x1e0 [ 358.267731][T13679] vfs_getattr+0x48/0x60 [ 358.271994][T13679] vfs_statx_path+0x28/0x140 [ 358.276614][T13679] vfs_statx+0xc4/0x170 [ 358.280892][T13679] vfs_fstatat+0x118/0x170 [ 358.285330][T13679] __se_sys_newfstatat+0x55/0x3e0 [ 358.290391][T13679] __x64_sys_newfstatat+0x55/0x70 [ 358.295458][T13679] x64_sys_call+0x2c64/0x3020 [ 358.300170][T13679] do_syscall_64+0x12c/0x370 [ 358.304801][T13679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.310727][T13679] [ 358.313062][T13679] value changed: 0x2756d91f -> 0x2826bcda [ 358.318801][T13679] [ 358.321143][T13679] Reported by Kernel Concurrency Sanitizer on: [ 358.327321][T13679] CPU: 1 UID: 0 PID: 13679 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 358.337846][T13679] Tainted: [W]=WARN [ 358.341763][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.351921][T13679] ================================================================== [ 358.504163][T15280] serio: Serial port ptm1