last executing test programs: 2m10.915326564s ago: executing program 32 (id=395): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0xc}, 0x8) io_uring_setup(0x10005de1, &(0x7f0000000000)={0x0, 0x6cb2, 0x20, 0x1, 0x5e}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 1m53.016504294s ago: executing program 4 (id=694): syz_emit_ethernet(0xa56, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0xa20, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xc8, "fca06311b404bf722cf06364ee49d1d33a69558cc4936aebf2f1a80d6cdb1d0cc17701e6152374fdc4bb7a24209117725839d0ee30d0041ab3b6cf4f16ab09546170b32b4ab35c624c848255416456abe7162b45ec1e8b42d7bba878ec610a8a03778931b49f53519887ee05795451ac3c3ca2d222e1a6fea611cd9f08adbb777e0cd67de188d27c0ee5e8bd2c76cff7ff14a4e249588ab5acd79044c61daf71fb88560d7fb1237c98a0707d84197b5b0605962c7a08f76b5a6f8ca28404a7a23f69aebcbb7ce8a992b52aee42756ba453856d6d187af7f62d4efbea4d1afccd1137e7f445233158ead8173baf8df610197656743854ffd52fa1aab3c5977422aca53d8ce83529638a997d9a9cca7402d939c39dec79ed274a586b69d798fb8649bb92dd78ed08c6518afcb196511b3e111826d4f1ef8e92d1e1c033160160a0dedea1baaed7eaa86adb4cb6c509116d66c5bde183defc33a4f907084ad89b92fea3cf60cce9aefceaa8a251fa5dc57ea1e648bf0a7a5b943f73291001790ccb1397d1b3e526ef30cbcc3204678063ffb9c4c07978b880a44e75a3be56f2029912631a1bc9d2e4f72127292dee3a98b1ebc03941a46475e8cacb75afa0e7d159bf83d925d1ea1849623eb3bc52acbf3f1be85c56ad2ae1c600b0e1124eaad8c21ba91878f9ceb9454352b0fe93856bb52bde7e08d14e5ac49e20e5af020c61de8fa2ca182bb1aa8049747e067011a553ce3bf7bd82c14cb4c90404c9b0451b590966c424918e0d582573c12a1c65aea5987350df5995fd38343be3a227f03f905a3c36102bbca9ccafb331e5f674b773e8f833919afbc0f8250da29a53dc260e0dcad772e542502924075ef5511cacd6fc533093f337d5a1ed93b50f2c186a86f6a2cd5ee37e77204fb99749a219ec6405e3860283ea41a2e69a1c48af70d4c56f6df00a2dd51acd29d1cae523ac9eeaaf3ea806395515bbb2c9a0168ff8c59c2975f2eee1f7b60e6fb9d0ef04f2940d956155fb0777e8be5a30debb690e243d4cf2663ddf7fa6f0ace86d0d881da1d8d7c08c62d08483661cd496771c42f7663d82ebfdb9f4caf2650f9d69c87e6867e426ce4521231d04efd516020b17b4e4bd7df8b33a6a6bdf6af4f2463f1ce96ede77d4dc9f89843ba7205e0e451933c0dc806896028beee7104b7792301e005806b0b06f652b91d96d5966f67d6a97631825851bc6c45f4a91a2a83e65c7df0048d167c4ecd3699b828f71358e4ca3f6918f30a981fcfe262bea444c6148577c9f1c76bf4d7111490110edae4b02b9cb43a79e34d96e93ac7d3351e151c1de3a8b2d4e73e92a08bec730d915bebe3f9c8d7f9e75f0e851ff63551b9b73547766827135fc683d8bf68199cad26910bea7a466153b22f6a7b48b8c34453ccc0ddd010d6cdff56023f5654fa6c3008bb7b33bf1db5634b47ca58e460285b1b4f4e32777c38f622fdd95bedabf3d5199d727ebbd4b9f2f396c7f43a29269afca56cfcd19d3a5dd1b316b8f4b0640f118df0518f6efceaa58cec88d581ff294b0cf5e9e5b8839e45d508c07f5fa7a9f91fd90fad1c9dc2110abda4eec60d60822be669f10e307dd1379284e956c59838020e8660cf5f852f92b8e0f43b98e9b3df23c69e16e8a3e7e3432620e8d6c3ca0d9b1b8d62da27bf73ec0fc32f6e3230375a2c4773838309966b8ba20cda4be78cfeb05629f34b539532cc625252b326b953cf0bd1292adc5893f93196548b3dedb6d0850cf187be05ddbaf19e36ceb5575c38b2b68992564988e4fa7d5e4b610917d4af1179ab4102d4dc73035ca709e7566f2e4f815ab4a702f6e2f5c917d77511d591965a587193e4d4e8ec9c330e5a76c8940b9521718f7c6af215efb77d308a3c23357b325840cdd53fc598e5e93f1b6c5a558c0522dbfeb9d23cf3b348c170ce18a58422eaf4fb59ba55fc3f808f9e1b6c817ea003e159ab064ee6beebc067be398c31d7248f2e31d41dcab766deffe603be89481d734d3af6e51ffa8cefdcfbcd27871162c66447edaa1bd8b3df8e061694592cd0cd1ac1a6329734ebb678ec84993fefd90e3f85a625e326b9d7817bd6c268b071fd5d5bb385bb478d56126cb2166948eabecb529d766c6900a5a7a897f0f1d898d295eeb9dc72e6fa521b86b2a604208b91016c1a08927a5944b1daa996500c4bccff47da146f389b03b02e6905ae8fdfc49d4848acad0e5f4ddd48f8e16cee2120fbfe6196133d4ee8d"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7fff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c800) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000000)=0x20067, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r2, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x2000c064) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x6, 0x8) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x1, 0x84, &(0x7f0000000140)="965c448706aa96fc36ca0d3425d9b6ca301b879b82f4b387ebea858547e3d7928658c263df7f975e9492664c9c66e1ecb086697e98c69ccb005bebe42967c98f7ef84528c6354fcb2082f6291a67bb9e79bf61143bb10f9f75f0b8b8c869ecf66b4ccd6060f8dea6e865a2d681afcbf9cfd9f942477324b44fb4163fd6b878d1271f7875", 0x9, 0x1, 0x1, 0xd, 0x6, 0x0, 0x3, 'syz1\x00'}) 1m52.811003777s ago: executing program 4 (id=697): pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x4) 1m52.800560757s ago: executing program 4 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000180001000000000000000000020080000000200000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000b40)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@dax}, {@data_journal}, {@journal_ioprio}], [{@subj_role={'subj_role', 0x3d, 'acl'}}]}, 0x0, 0x4a4, &(0x7f00000004c0)="$eJzs28trXNUfAPDvvXn2mfz6q4/WqtUiBMWkSat24UZREKko6KIuYzItodNGmgj2gY0irgQp6Fpciv4F4kYEUVeCK8GVKykUzaatq5E7c2+SmWTSJplkaufzgUnOmXtm7vnOuefec8+ZCaBjHcz+JBE7I+L3iBioZesKVCq1cjfmL03cnL80kUSl8vpfSbXc9flLE0XR4nU78sxQGpF+mOQ7qTdz/sLp8XK5dC7Pj8ye6cuT46dKp0pnx44dO3pk9Jmnx55qSZxZXNf3vzd9YN9Lb155ZeLElbd++jqr7858+9I41ui3kSYbDmaB/12patz22Dp3dqfatSSddLexIqxJV0RkzdVT7f8D0RWLjTcQL37Q1soBmyq7NvU13zxXAe5iSbS7BkB7FBf67fNdE9k98PL74IHNHH603bXnajdAWdw38kdtS3ekeZmehvvbVjoYESfm/vk8e8TG5iEAAG7LxxOfHe+NiIs3v3o5G3ssjvbS7nur//+o/t2djwQHI+J/EbEnIv4fEXsj4p6IyMreFxH3b7A+y8c/6dUNvuWqsvHfs/naVv34rxj9xWBXnttVjb8nOTlVLh3OP5Oh6OnL8qOr7OO7F379pNm2peO/7JHtvxgL5vW42t0wQTc5PjteHZS2wLX3I/Z3J8ny+JOFlYAkIvZFxP61vfXuIjH1+JcHmhW6dfyraME6U+WLLLy5rP3noiH+QlJbn3x7ZOb8hSenzjSuT470R7l0eKQ4Kpb7+ZePXmu2/1r8/Xlu5fi3bTzMpq6Vav+XtP+SrQt9YHG9dqa1+1/n8Z/2Jm9U15l78+feHZ+dPTca0Zscr+brnh9bfG2RL8pnx//QoZX7/578NVn7PxAR2UH8YEQ8FBEP53V/JCIejYhDq8T44/O3jj/SdRz/LZDFP7ni+W/h+B9M6tp/7Ymu0z9802z/t9f+R6upofyZ6vmvQdKQX6k63RF9jRXc6OcHAAAA/wVp9TvwSTq8kE7T4eHad/j3xva0PD0z+8TJ6XfOTta+Kz8YPWkx0zWQz4eWp8ql0WQuf8fa/OhYPldczJceyeeNP+3aVs0PT0yXJ9scO3S6HU36f+bPrnbXDthk9ctLxQLwWG9bKgNsscZ19LQ+e/nVcDKAu5Xfa0PnukX/T7eqHsDWc/2HzrVS/7/ckLcWAHcn13/oXPo/dKj0+xWf/nbLKwK0g+s/dKSN/K5/ExP9d0Y12pPY6kaJNRWOIpG2/YNqVaI/7ohqrD9xMe/NrXznNp+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWuTfAAAA//+W89zK") timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xc, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xb, 0x17f158c2}, 0x0, 0x91, 0x1b, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000e27f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000ff0000000000000000000000000000c40000000000000000b9"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2029, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0xb0, 0xffffffffffffffff, 'id0\x00'}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f00000003c0)={0x80, 0xa, 0x1, 0x3, 0x0, 0x7, 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES16=r9, @ANYRESOCT=r9], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r5, @ANYBLOB="7f0e00102820007e94fbb484b744", @ANYRES32=0x0, @ANYBLOB="18d80568c69acec947dfbb143b50a35cad0f90d4d213eb823211ffed4d38bfa6256ec6b21188995405b1cfea8d2bb407e143238b864faa231ef06707cd73e0790ec76456ac342054b85b53c5520b920501589e09f97282f9cee0738d8b8a73e74ee4d306c9422ba1dab2d3fe88fd5c2cd3d33bb016d4561000000000", @ANYRES64=0x0], 0x20) pipe(&(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$perf(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x100010, r6, 0xffffffff) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r11) 1m51.966856965s ago: executing program 4 (id=712): fsopen(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x22600) 1m51.966499745s ago: executing program 4 (id=713): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x9, 0x901}, 0x8) 1m51.406292938s ago: executing program 4 (id=714): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1, @perf_config_ext={0x182, 0x6}, 0x602d, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) (async) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x7168, 0x1000, 0x2, 0x45}, &(0x7f0000000040), &(0x7f00000002c0)) (async) r3 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x7168, 0x1000, 0x2, 0x45}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4054, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x200, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r9 = getpid() syz_pidfd_open(r9, 0x0) (async) r10 = syz_pidfd_open(r9, 0x0) process_madvise(r10, 0x0, 0x0, 0x10, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) write$P9_RVERSION(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) io_setup(0x6, &(0x7f00000000c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) (async) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) io_submit(r13, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r14, &(0x7f0000000100)='9', 0x20000101}]) (async) io_submit(r13, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r14, &(0x7f0000000100)='9', 0x20000101}]) r15 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x202400, 0xaa, 0x2}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r15, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10) 1m49.81962274s ago: executing program 33 (id=751): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) close(r0) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="0500000093c21faf16da39de706f64680058", 0x12}]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, 0x0) 1m39.211918986s ago: executing program 2 (id=883): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301010000000020000000020000010800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020301010000000000000000020080010800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x88c4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000303050000000000000021000a0000010c"], 0x20}, 0x1, 0x1000000, 0x0, 0x20000004}, 0x404) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000480)={'filter\x00', 0x2, [{}, {}]}, 0x48) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r4, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 1m39.115151792s ago: executing program 2 (id=884): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000002180), &(0x7f0000000300)=0x30) syz_emit_ethernet(0x1f, &(0x7f0000000180)={@random="5d950784f28b", @random="623d87a2a1de", @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "e3", "0541e4", 0x6, "2477ddd2d0ec4bdc01"}}}}}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_setup(0x239f, &(0x7f0000000380)=0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r4 = eventfd2(0x5, 0x1) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r4, &(0x7f0000000080)="e2", 0x1, 0x5, 0x0, 0x1, r4}]) sendmsg$inet6(r1, &(0x7f0000003100)={&(0x7f0000000080)={0xa, 0x4e1d, 0x74, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="8000e859667fbc13", 0x8}], 0x1}, 0x8050) 1m38.97057484s ago: executing program 2 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000300)}, 0x10) (fail_nth: 4) 1m38.818518949s ago: executing program 2 (id=891): r0 = add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000180)={0x7ff, 0x7fff, 0x1, 0x7}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)=ANY=[@ANYBLOB="01", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) flock(0xffffffffffffffff, 0x1780f9c373410de4) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e23, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x18, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x40c0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 1m38.423745332s ago: executing program 2 (id=902): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac141415000000000000000000000000ea000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c0000000000"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc0100"/52], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 1m38.147931708s ago: executing program 2 (id=905): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x65580000) 1m38.131733409s ago: executing program 34 (id=905): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x65580000) 1m36.107686457s ago: executing program 35 (id=714): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1, @perf_config_ext={0x182, 0x6}, 0x602d, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) (async) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x7168, 0x1000, 0x2, 0x45}, &(0x7f0000000040), &(0x7f00000002c0)) (async) r3 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x7168, 0x1000, 0x2, 0x45}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4054, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x200, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r9 = getpid() syz_pidfd_open(r9, 0x0) (async) r10 = syz_pidfd_open(r9, 0x0) process_madvise(r10, 0x0, 0x0, 0x10, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) write$P9_RVERSION(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) io_setup(0x6, &(0x7f00000000c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) (async) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) io_submit(r13, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r14, &(0x7f0000000100)='9', 0x20000101}]) (async) io_submit(r13, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r14, &(0x7f0000000100)='9', 0x20000101}]) r15 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x202400, 0xaa, 0x2}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r15, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10) 1m17.325835578s ago: executing program 6 (id=1317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000308010100000000000000000200000006000240808e00001400048008000840ff7557e6121e0c42d40000050500030006000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) listen(r1, 0x7f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b030000000000000000260000001f0001"], 0x34}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004090) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10, 0xb39}, 0x40, 0x200, 0x1000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmmsg(r8, &(0x7f0000002bc0)=[{{0x0, 0x19, 0x0}, 0xd}], 0x1, 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYBLOB="d6ac2f142ca3ad824126c2a56469a2552ffc2b8631b8065432e9f3789d77dd9a7358ff3922b4aed208459685d4a4426ea426595324c124428158187b722457794c2dde70d4bc2e6e18bec269a37c8ad41a7e3cf9775bab5dbd87e8980687a1464c7c04b06dd99bdff07fc8640e7161ae2c66d732255716b10417", @ANYRES64=r11], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x8}, 0x808, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m16.445900258s ago: executing program 6 (id=1342): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0xd89, 0x3ffb, 0xd, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@data_err_ignore}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101d42, 0x13) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000ac0)=@assoc_value={0x0}, &(0x7f0000000b00)=0x20) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x3, 0x9, 0x6}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000b40)=r6, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="14000000100001000000000000000000000000e614000000060a0b04000000000000000002000000030000001100010000000000000000000000000a"], 0x3c}}, 0x4080) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000005c0)) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60e}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24000000) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 1m15.725207571s ago: executing program 6 (id=1359): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4139, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x8c7751b1d4986a52}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x20000) 1m15.603000648s ago: executing program 6 (id=1363): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x81, 0x214, &(0x7f0000000840)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ftruncate(r1, 0x7fff) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) copy_file_range(r0, &(0x7f0000000040)=0xffffffffffff9186, r2, &(0x7f0000000100)=0xffffffff, 0x6, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x3bb5]}, 0x8) 1m15.304127635s ago: executing program 6 (id=1371): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}], 0x1, 0x4008040) 1m14.621403375s ago: executing program 8 (id=1390): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0xd89, 0x3ffb, 0xd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@data_err_ignore}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101d42, 0x13) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000ac0)=@assoc_value={0x0}, &(0x7f0000000b00)=0x20) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={r5, 0x3, 0x9, 0x6}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000b40)=r5, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="14000000100001000000000000000000000000e614000000060a0b04000000000000000002000000030000001100010000000000000000000000000a"], 0x3c}}, 0x4080) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60e}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24000000) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 1m14.327881422s ago: executing program 6 (id=1395): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a"], 0x100}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m14.327813422s ago: executing program 36 (id=1395): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a"], 0x100}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m13.746196455s ago: executing program 8 (id=1403): socket(0x80000000000000a, 0x2, 0x0) r0 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000340), 0x1) r1 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 1m13.541871418s ago: executing program 8 (id=1409): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x891a, &(0x7f0000000040)={0x1}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000001440)={'team_slave_1\x00', 0x0}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x10001, 0xffffffffffffffff}) eventfd2(0x9, 0x100000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xfe33) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003700)=""/4063, 0xfdf}, {&(0x7f0000000780)=""/4137, 0x1029}], 0x2}, 0x120) 1m13.523281699s ago: executing program 8 (id=1412): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x81, 0x214, &(0x7f0000000840)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ftruncate(r1, 0x7fff) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) copy_file_range(r0, &(0x7f0000000040)=0xffffffffffff9186, r2, &(0x7f0000000100)=0xffffffff, 0x6, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x3bb5]}, 0x8) 1m13.192980148s ago: executing program 8 (id=1414): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r0 = syz_io_uring_setup(0x760a, &(0x7f0000000040)={0x0, 0x1f36, 0x400, 0x3, 0x220}, &(0x7f0000010080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], &(0x7f00000005c0), 0x2}, 0x20) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/address_bits', 0x0, 0x1) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000680)=""/230, 0xe6}], 0x1, 0x0, 0x4) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 1m12.051969734s ago: executing program 8 (id=1422): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4139, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x8c7751b1d4986a52}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000007000000040000000000000e0300000000000000000000000000000d04000000000000000000000400000000040000000000000f03000000006100302e"], 0x0, 0x53}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0x4, 0xfffffffffffffffe, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, r3, 0x26, 0x0, @val=@netkit}, 0x1c) close(r3) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) close(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x700, 0x700, 0x9, 0x2, {{0x35, 0x4, 0x2, 0x0, 0xd4, 0x65, 0x0, 0x5, 0x625510d27fabf32a, 0x0, @multicast1, @empty, {[@end, @generic={0x82, 0xb, "f63332102ab91f2e1b"}, @ssrr={0x89, 0x1f, 0x2c, [@loopback, @private=0xa010102, @loopback, @multicast2, @local, @loopback, @private=0xa010102]}, @timestamp_prespec={0x44, 0x4, 0xd8, 0x3, 0xf}, @rr={0x7, 0xf, 0xb1, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0xd5, 0x1, 0xf, [{@private=0xa010100, 0x9}, {@local, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@broadcast, 0x1}, {@loopback, 0x10000}]}, @generic={0x44, 0xc, "b671d5f6c4190823cd09"}, @rr={0x7, 0x1b, 0x38, [@remote, @loopback, @private=0xa010101, @local, @remote, @local]}, @timestamp_prespec={0x44, 0x24, 0x41, 0x3, 0x6, [{@empty, 0xd}, {@empty, 0x80000001}, {@rand_addr=0x64010101, 0xb8d}, {@private=0xa010100, 0x9}]}, @noop]}}}}}) 1m12.043632654s ago: executing program 37 (id=1422): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4139, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x8c7751b1d4986a52}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000007000000040000000000000e0300000000000000000000000000000d04000000000000000000000400000000040000000000000f03000000006100302e"], 0x0, 0x53}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0x4, 0xfffffffffffffffe, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, r3, 0x26, 0x0, @val=@netkit}, 0x1c) close(r3) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) close(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x700, 0x700, 0x9, 0x2, {{0x35, 0x4, 0x2, 0x0, 0xd4, 0x65, 0x0, 0x5, 0x625510d27fabf32a, 0x0, @multicast1, @empty, {[@end, @generic={0x82, 0xb, "f63332102ab91f2e1b"}, @ssrr={0x89, 0x1f, 0x2c, [@loopback, @private=0xa010102, @loopback, @multicast2, @local, @loopback, @private=0xa010102]}, @timestamp_prespec={0x44, 0x4, 0xd8, 0x3, 0xf}, @rr={0x7, 0xf, 0xb1, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0xd5, 0x1, 0xf, [{@private=0xa010100, 0x9}, {@local, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@broadcast, 0x1}, {@loopback, 0x10000}]}, @generic={0x44, 0xc, "b671d5f6c4190823cd09"}, @rr={0x7, 0x1b, 0x38, [@remote, @loopback, @private=0xa010101, @local, @remote, @local]}, @timestamp_prespec={0x44, 0x24, 0x41, 0x3, 0x6, [{@empty, 0xd}, {@empty, 0x80000001}, {@rand_addr=0x64010101, 0xb8d}, {@private=0xa010100, 0x9}]}, @noop]}}}}}) 21.32912604s ago: executing program 5 (id=2315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r0}, 0x38) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4d0fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001240)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x8041, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x80, 0x0, 0x2, 0x205, 0x0, "00094a0400000000001e00"}) r5 = syz_open_pts(r4, 0x80) r6 = dup3(r5, r4, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r8, @ANYBLOB="576127bd70000000b5e07e"], 0xc4}, 0x1, 0x0, 0x0, 0x4044094}, 0x4000054) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1e8ef}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r0, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0xffe4, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r11}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 20.415297924s ago: executing program 5 (id=2329): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) fcntl$getownex(r0, 0x10, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80890a, &(0x7f0000000200)={[{@debug}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x5, 0x7b5, &(0x7f0000000540)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000480)={0x47, 0xffbf, 0x4, 0x9}) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) 20.016728107s ago: executing program 5 (id=2335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001800080000400000000090bfbf28f5e35b026d1400001c140040fe001701002000004dd3b35ec49937c99fc24db21938cdc6f4d423df77860b872a3e0300000000000000122350cbb2b1c2d849aa2a42a147b58360b6f09096010b6d5c4cfe260802d4055ab6321f355112d6852ec600044e84085049896fe7fe587606cf8a82d8beac9ae4a64b3c3384d890a69fd53c578765ec0d4900888cd8428e8321c40eee25923a96c32a7ffb642f2d19475315459640703d590e5adf3290d61a82f607af0bbeffe161046eead762d068283083dcacdb82e829c3181d7fa7ba77699757f72b92ef7e7504589b1ee0f310408c7e6338d1239790f4b5234a770a760492c040851e305b8d9566a7908a37f5037f97aa0a53d1ba9adec6e44e428a"], 0x1c}}, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) file_getattr(0xffffffffffffffff, &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002140), 0x18, 0x1000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x80002, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x7, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000200)={0x2, 0x8, 0x2, 0x8}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0xffffffffffff6c1e, 0x0) shutdown(r1, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0xe, @loopback, 0x10006}}, 0x0, 0x0, 0xb, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1a64d957e93efafd27ad06a6f589bb643f167cf0fcd370b2f1aa93f6ded3c5032c96ead0cdc68474d402ab72e482db7ec1e0a5748900"}, 0xd8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1c, 0x4000006, @private2, 0x6}, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000a40)={0x8, 0x206, 0x1, 0x401, 0x0}, &(0x7f0000000a80)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000dc0)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000e00)=0x2c) sendmmsg$inet_sctp(r2, &(0x7f0000000ec0)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000003c0)="0c9c4334239b339ccff5d1e6df9280ed33f7943e8f66f7403d5e12364cff9d5c32b255827aa0a1beb13aee9405aaccfe93072e2ffbd4b7078811b9bb3157ee2e17dec772c67966eec6be0deb0685a08e461716c3707223afc9717f502420006c10af24bf0a68026a2b4781c012bcc829559a27f97e213b344cc5a0797ac8fc2853d2a941467f06886e4575e48e5ebf7edbe7fef453d639ab70279ad5b3177e6bcb108cf04f3ab60b6093cd7941e9fdb0bd40670c8c62c9173cd32e96bb23a81775", 0xc1}, {&(0x7f00000004c0)="abacbbcbe24efadd7c9822b1001dfef6c8f504d95cc43a3678c7e6d8a564247ea91b67c2391ae1c607123a2f13203a7839d5c4f3c67e26c71cc55fd72a8344b1d9cb89e872438acbd85c7769f9d63c0929f7bf1314555196101d506e616f548fb1f4781a900911c4f82449488775549d18fe0158ae42d0ef9f730618fdb90f3004012e6d39a7460ace07dd1cf418e215f6cfc9b0788e55bd7362fc6d87c627724615647461f948eda69ce24d1f2ae8f20f8bc4f348e72d9ba6a37b87514a7d83fbec3589cb13d7bec9ad5155973ad102b84d4e910b4603227e72040abb0f6bd785f9760ee8c8ae00c1c1607ef458e9ce7ed35c7b1a4fb85fb4d7ac282f", 0xfd}, {&(0x7f00000005c0)="39a6a91c2d826a6e06f97cb7715586dad3c52eb1d2915ab9dc5df9271feaf461c7311d345c397116b960f1aaf1c3e3cc382184fe1a314573b685873f88af3f1b6c491651712ab7f7ebb355548c4ecebbbb4fd01ca9b2c8a9fc33e90cd0a166c6411efa3eaabf5fa567cbb72e3545be9719270ccd56bb5d6fab19d11c85d4f56bf79e36d7d6b536d98a942ab7ab920e510053428faa31", 0x96}, {&(0x7f0000000680)="9ec9eab8384c05b1296c98a54a74344ff44f30651c04b6d93d56a1d3732f94ec43f915ff75ac6293b14a752d367b334572a20f8f7f7a7957b2f3bd9a84cf0816b7db69335fac977c1f3c154f19320aa71e014b21d1d3dc49a8a9407f6719d320c12e712d1917f437813d87c29b0fcb1c7c0101c357b223b874daf5e2cdfbe4370321d08a1b96cd59d94e9cf74876e8179cdcd50e1edf483800dc8e5bf70e252e38ccbdba7eb33307ef2ce491e7aa865db335457fefbbcb7d35615325a0", 0xbd}, {&(0x7f0000000740)="94cacba7d74b7967771bb26aa39045411ee4ea2acf972fbb46f756", 0x1b}, {&(0x7f0000000780)="d76c4ea35d925ac467b280ea45e737816482e649e53dc04c2e41bc91fd56fc7c539fea6c553bf043e71c8a3bb4d235fca4a03408c2c0f44276fc703d80eef6e085519f63b19fbaabb5aa5158e7abe43828b9358b808b5412c4609409f9b7fe251ba64c8b9fc89fb07e7a86202d65e08f9d10f4d3d0811674a36746cfb4a4a5d6a56da48c8911494419f2ad1c0b39c855bf6f030f4d9c160b2780fb74866ff037b56f9804524c40dbad0fedfda508ba8cc4928958b90b5b1e4f1aa86b5ae3fb6af45b1ba797e57af56442af0ec4560af8cfe78fb6c015a44d3106636a47344a475f5e09db65fe2486f47127528ed5900fc76c984b3c20", 0xf6}, {&(0x7f0000000880)="3f9628ee44c55c6ca23b4504d41e315f60d97a548f74fbaf375ef895207626", 0x1f}], 0x7, &(0x7f0000000940)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xd95f}}], 0x38, 0x4000000}, {&(0x7f0000000980)=@in6={0xa, 0x4e20, 0xd6b, @mcast2, 0x8}, 0x1c, &(0x7f0000000a00)=[{&(0x7f00000009c0)="4d9b485009cd98f65d51c5ddb61fafa20854e4428b52105581c00a63976cdfaeedd8b0b0d0043631d6f1b0d1bc15ca5f31244d3bd9de8b09cd1c26cdd3df75", 0x3f}], 0x1, &(0x7f0000000ac0)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0xe, 0x7d, 0x2, r4}}], 0x20}, {&(0x7f0000000b00)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000b40)="d17546ca8e68d557b7fb0bf88d322036baae74087f115322b467695f3d68d64c9e9a29e7041bb313d3a92decb51b10ec21b408eb1f4fa4c14f4859eed9ab34a3e88110fcd1c0e6d0ef831476539f1188f7e02116bc746ba8fc5676", 0x5b}, {&(0x7f0000000bc0)="b2cd35240896f46660f3bbc50346c8fc07e7246dd6ca8c708fd1a2b001c6f494c2dc2b41779a1c253f2675be0e3a0d71e7005bd5c582449c9f804b4419960a54cd6bdf9e2ac5fd6e74ab50cbaa6f", 0x4e}, {&(0x7f0000000c40)="d4b79116778ee9a463d50cd833e2c327a0e207cac9b3b06f33824533b97f301079ba75d3974f3f74a38d5b5ae13d0b626049bb73b6a0e67812add248ec2af72856822e4d1ca0639dfae555187f28ca5a1d1afa84fbe0b357df975d572c67f225efe89607d023477330760715b364e8161ba0af0a90af16f6ce1819a9186e02bee0446e81b89ec531576005af9157fc505a33811311c7844dc94844b980416781c4b3afeda8470de114810ec2aa9f41e3d6e564835d5cc0498ada5bb65044e1de27c8e55c678f8987d719b84e3ac4cd7334925c57e0ef5e040cac5b285ad5f8bcd0d193476cd915c949d275f6fbe0f2d882e054ad4fc41d01c63b", 0xfa}, {&(0x7f0000000d40)="46f1931a0727ee34939665d2fd16a861", 0x10}], 0x4, &(0x7f0000000e40)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x80000000}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndinfo={0x20, 0x84, 0x2, {0xb5ac, 0x8, 0x80, 0x1, r5}}], 0x68, 0x20000000}], 0x3, 0x80) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x1}, 0x1c) 19.895230834s ago: executing program 5 (id=2337): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000180)=ANY=[], 0x1, 0x22d, &(0x7f0000000680)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) r3 = pidfd_getfd(r1, r2, 0x0) setns(r3, 0x64000080) sendmmsg$sock(r0, &(0x7f0000002140)=[{{&(0x7f0000000000)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="6ab985a22db9b4709edb95c8de9bd1b351853cf0eac05927a8ae4f7e7190d34e", 0x20}, {&(0x7f0000000100)="ad58ae", 0x3}, {&(0x7f0000000180)="91929351c46684c58562fb0c83963dbb96ce347e47335140523f92a8c78ab2eddcb3d755710584f21dd284b31a1c4fde2e649e1ab5b45409cfc643fbc0188308fe1505b0ad2ffdda37e01c1a5baddbb5a4a5b5c1f5a2b7233c82d5d1cc80593a8a7e40be85703f16a172a44383e8d3caf703e62992c9a7c0eb69d5124abc001170e54e6b89f3ddb352976085", 0x8c}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000380)="04bb053efb920319a89047f53b2704eec0c5076f1b4df7270b96bdc5e1d042ad4c71c9581180ce29cfed6775706a6ab1c6e92caed98bfd9bf6670aa39751cd461336a64c329ef50f3bcea51563f308c5a0cbc72c1f", 0x55}, {&(0x7f0000000400)="556d1952df18b0fb942ec385366a6c60aeee4a67e6d7b9a83f9c25e3f326b3c90bfc56d30ccb7cca05f7d56a95921bad96926acd64fe3b382909290e140d1def68c0b5b76eb42a49ecfed2a111898985520fe2c268b74acd147aab0ff70a83a5768ff97874a845c093fa4323d698a4b66783656a1559b186fc99fadec7aae54bc54bb0096501f94a79fe847ec1502c3d5e20770fc6b8928e5328908e5dfcd821244f", 0xa2}, {&(0x7f0000000240)="2a93122af288a64684dc391bba8e9b3fb88768c022224f40398382bf41451c9aee8064cc2191bbade59bf462d734e16136b97ec3196a86d17b0fab3ff4c5", 0x3e}], 0x7, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0xe}}], 0x18}}, {{&(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x2, 0x1, 0x4}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000600)="3237f4db2ab98f3ca4bbe9a845f5f57a9732f328c4f107b577210e9328f1354bce28e9fcc43f56481795d15438a5769a83e5b2752ff09caefc5e79dcbaee037d9f22fe8d71908b3ac855e5b9123025462dc8a648aeec5b840f3a3b188897813e87de711c4d345cf6206a", 0x6a}, {&(0x7f00000018c0)="5b2491bcce32e405de4a0e469b53fb93643807efa523f3c3ab7604ed0ef93c6d6a084c904b7f9022884073e27292d9cf79b2ae04582ce0f2f7807564e34493136fad8a042b67b31710cf95df0b1a1c6e4dbc37264b1d35f9c78619a24e35f1aadf78d2c2951c3b426c79023868ec823a12c9c13ac46833aab40b7c4bf19d733bba9c5aa0f2ce9b549eed4a13274ac04db62e9d42339125d73ec501fa31237977d5aa15c414fd2fb4d1ee87445d8db32d091ae390288d628fc6aa23be95f1c4d8462900", 0xc3}, {&(0x7f00000019c0)="5f77aaaa7a9e049862cce359c7e066f2420aa85eb19ba4abda4f6ded43b58f0482183fb506f68ab287e5278a737a4816657b9fac05d45e311ef9d63b5844971adf09596bb4c7de3e3d220a5ac27a310f3d44e23b00164b723600e3369aeceb42f86b4ee991f570d0f5a6d4131036ded29af3159154f2a6eaec15d95e18a552ba4a20926d09", 0x85}], 0x3, &(0x7f0000001ac0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}, @mark={{0x14, 0x1, 0x24, 0x39}}, @timestamping={{0x14, 0x1, 0x25, 0xb}}], 0x48}}, {{&(0x7f0000001b40)=@l2={0x1f, 0xe71, @any, 0x4, 0x1}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001bc0)="c6432b1851dba90bc47311af36ba24c94b3bcfccd6732c65e4922d8b467a7eee003ecd11e71929cbf5dc3d5e9ad9bb87f319fba6335995542f30de95fd65152e4eb983871b0a6a409bfd2c9d9c827b4d75e65ebf12dea225164c769dab0afad64193ecce966f94f9ed73a17e675358985c1ea2e9d81f7ba96b2e3ca77c59c2df33f77cdaa222a56d71db5783552326e3f25a0f2e210a812e93df1e5fa1834a993277e398a4dea82ca73e2ee090385f90282d2403", 0xb4}, {&(0x7f0000001c80)="ea78b489f788b1e7da2ae325cb1a40d9dc2680864e99a08f2dbe72839717e6f6166e077f7c888d74c5be63d680dcc210507a4084ac7f282d4e73ed56628c59690d89613215f0666c9eb9f691652a2b01e6be24e5cf9f02d6188d96bddec75633d6ebb76b92259b9d685d5eab7c57da9f9318fca2fc202586980a6f8c8a490e654600eea4c4783c28f0789ef87478f6efb190719c589835ce02b189cc4c4856cfd27345b13819e87319c0b0a0fb1ab3d170c06aea63e8be3245978f491b", 0xbd}, {&(0x7f0000001d40)="251ec4b2667f62847c12d3f34cff9c3378d81f002a2fc1b75092600097be324a32d000a202a713b918a7caa1382e77f1078d0b8ac9da3f87e2fbff5a3c6084449b6fb2e78c922cdc0b6b779a11471565c16d91f43efd7e3c99620f0ab03f9588f041a12032546dffc04bb748bff05c7d11f57860ea314f6cb303e06d314256f41f8dbe22c0ad9674a08473d18dfd7944ac06f4af1ca7e5d63d935fcaa4766009d380b1", 0xa3}, {&(0x7f0000001e00)="91a8c004a26f1bf66ca8ed200c49d89caad83de4b9a9b1be7570da3a7b6d848e1b9ce08b", 0x24}, {&(0x7f0000001e40)="4d33a302cda0da1d231cb9b117d57c932ae024f10f1f9dbcbb1eea9546dca21d27f261934685f4e8f33db1bf54907d776e4718b602eef631dd66ad338365a1313594a498015c234c403ae978950e7927a595f162a8b7b5fd9044ef060a15e71ca22972e52ffd9e3e8422602efe068ab317d09c075303a835d4d416c976e8cdf1acf47d310e10304fe0eac438290d617330c3bfd0f0aa387097c05e6f91deeaacd2e403facb982576567b50f11a5be669c9718a11f014d8026e7be99e2ae679110feb839c5ebc9eb3f80d279ccea8773163bb64bc608fec38ce8fc00021b92be5e54f3c2f540700d318b3bf6732883a8701ed8317f5a0", 0xf6}, {&(0x7f0000001f40)="117096a0bb398573cec5ea1abf27ecadbc6910cee196814fb7412d64ffb6ca8490ba72a7a93ba6be2cc6e215f5ee3dbf9236772b03ba69735bc84d4ab1171a8391a50f1eff0cd5520edb31b2a5ea175764ffb8a210efea409adba487a5209b88692b62178e82", 0x66}, {&(0x7f0000001fc0)="4782d4440f4e335f47a08fd662307271fce52ae135b727f73c21df9f02a467e9415d723e6790f40619ae58c00439c94f1a9cf5c077b0b16566d70b1d59610f643b97f0f0d467314e10f0d09276a9df1c17d3fb6d9acc891093f8bbbb9314e0bb78181d7addb242f65ee59d8522d9965386f24e454830e0d418921468babe47c97dd24e54cde9b70a2922102b6a6a7b6e3f7ed17539", 0x95}], 0x7, &(0x7f0000002100)}}], 0x3, 0x4000001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 19.491863458s ago: executing program 5 (id=2340): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x43, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32], 0x21, 0x23d, &(0x7f0000000a40)="$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") r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000001c80)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x57, 0x7ff, 0x7, @rand_addr=' \x01\x00', @mcast2, 0x0, 0x8, 0x2189, 0x6}}) sendmmsg$inet(r0, &(0x7f0000004880)=[{{&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="51a36ed8ecca6d7a1276d2", 0xb}, {&(0x7f0000000180)="e7fa6c47b22a95560b8a51024a95", 0xe}], 0x2, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x30}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000500)="d909c3b5b6e1a09ebcf79090040cc2a38e973524c010adcf2625d435c8850b0ae9c7abd3d1f47a39620c5bbcf75ccb6a0e09135371166efe449d972380139cae93a8d115", 0x44}, {&(0x7f0000000580)="fc6da4f8d9e289e9273b2b03b4f19b89f10291924ed9fc7689a08715344accfab5ed953e6b99b6213be9b7dec4cb340076ce9e0c42bfbde0bdb1eca8c5a3cf35348b65b8eee3b1dc54d10d26c3998be1ee26658038b4f6f2c4e7a08257b5ce54ef9b1f265c3f1dc179947bfa1da4b643f9f99bd4bafc", 0x76}, {&(0x7f0000000600)="7c6c82823e9f38bdd323ee458ecc7f8128daf95292e87afda4ac8aff97840f6e167db20a9acd3c88611ada52ed8f6347d71a95ebad5d9481f932621b0b230e0ff106cf62f2edead03dc69b89a183ec179bd6676578f3b76718dfbdc44e3a0b9a1a6f59898c8c3bab3c7a60a24b964786577397a0cd0a8a88ce41a425047ec1210b4329112cfc8e1b757d660c380ce3488e", 0x91}, {&(0x7f0000000800)="4892604cb4d3d42b7b37653d5088a12e96ae69e38cb7e50596fc889f00f597f2df3c4fb3dbc15ffc261210aa62a8f7e834a40db11c7b980aa7b8aba5db9d1920645cf83ea1dc62b6a36e730d4d92f4bb7e954b8a43f18140e59e2b726e8d1a938e8f7a28f4d77bebb8582006cff15a555c4b0f95cf5fbc8e607c2c6281b1050385c85104cefdc720a74811559d986d853b105af4d79d34dc910778b306da6cabe7f2ff53789f2c7bdffb9473a3070a499192c76a8a39ac8ab7890149273581ab785266939b21b6ade4ab3888f7773debbb83445bd5f1cc8831c94c826c56fb687187", 0xe2}, {&(0x7f00000006c0)="6710b7add6e749d1edb25ccb89afb11d0bbaa7d02c5fa85f07311b7011cae2787c5a08bee251bc5151ca7cc3e8311c444564d9373edbf3d485ad623e447e8f0961edae8ba2077167abc869e75975b1bf367d5658f27c1eb375fc69ffa2", 0x5d}, {&(0x7f0000000900)="b49e181d44673f4eacb2490fda5965e39ab545408d95af395046e55607864d1bd5405a3c5c27ccf983c16560884468be324215a2da930abdadb525895cc2de33dba27b4c4139de4f2a77a9d3bafcdd", 0x4f}, {&(0x7f0000000c80)="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", 0x1000}], 0x7, &(0x7f0000001e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0xd3, 0x1, 0x4, [{@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x41}, {@empty, 0xffffffe9}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x30}, {@rand_addr=0x64010100, 0x8}, {@loopback, 0x1056}]}, @cipso={0x86, 0x2b, 0x3, [{0x7, 0x3, '/'}, {0x1, 0x2}, {0x2, 0x2}, {0x2, 0xe, "f809dbd992fb1c5449bb0662"}, {0x0, 0x8, "f5629720d569"}, {0x2, 0x8, "8c8af4c5632d"}]}, @timestamp_addr={0x44, 0x34, 0x7c, 0x1, 0x0, [{@empty, 0x101}, {@broadcast, 0x3400000}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x1}, {@loopback, 0x1}, {@rand_addr=0x64010102}]}, @generic={0x7, 0x3, "d8"}]}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010100}}}], 0x150}}, {{&(0x7f0000001f80)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000021c0)=[{0x0}, {&(0x7f00000020c0)="6bfcbf811ddcd878a2017421bd512c06c83852e9cc58a930c402a7c4a4368cb3d64527d3fe70097124da8a02ee16f78ddf02eac77534614344ac168a3313629ca99c55f97021d1ac964c4ef9aaeb7d1fb3c15aa700d65e6655157bef1d6538bc40529474cf27fc7c2bc5ccb4c7b258e0ac469f630822ea66e39cf21e59314391fd4c2cb0dd14c080af944ca796b55e3893918ca1aff590daa250769771a4243622cf9ea0c8529e56a951f3db133f39664b593bbd0c12257188009b6409b1223bf2f97e25a01b51c34708abd5ef88ae44442b65c099be59", 0xd7}], 0x2, &(0x7f0000002200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffff634}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5146}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xce}}, @ip_retopts={{0x64, 0x0, 0x7, {[@rr={0x7, 0x13, 0xf2, [@rand_addr=0x64010100, @broadcast, @loopback, @private=0xa010102]}, @timestamp_prespec={0x44, 0x24, 0xc8, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x3}, {@multicast1, 0xffff}, {@rand_addr=0x64010101, 0xb}, {@rand_addr=0x64010102, 0xfffffffe}]}, @end, @timestamp_addr={0x44, 0x14, 0x71, 0x1, 0x8, [{@empty, 0x1}, {@private=0xa010101, 0x8}]}, @ra={0x94, 0x4}, @end]}}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000002340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="240000000000000000e00000017f000001a9410002000000000000000200"/42], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=ANY=[], 0x80}}, {{0x0, 0x0, 0x0}}], 0x6, 0x20048840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f0000002340)={0x1, 0x2, 0x4, 0xfffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) 18.736022721s ago: executing program 5 (id=2350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) unshare(0x60980) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x97ffffff, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 18.735818101s ago: executing program 38 (id=2350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) unshare(0x60980) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x97ffffff, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.983092084s ago: executing program 1 (id=2713): syz_open_procfs$namespace(0x0, 0x0) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0x7800}, 0x0, 0x40000000, 0x7, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) (async) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) (async) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2a6, &(0x7f0000000600)="$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") (async) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) (async) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) getsockname$packet(r2, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001100)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd701004000000050000000000010005000000080009000200000008000b1500000000080c00a89f000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x2040) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nolazytime}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") inotify_init1(0x0) (async) r7 = getpid() unshare(0x22020600) (async) r8 = syz_pidfd_open(r7, 0x0) pidfd_getfd(r8, 0xffffffffffffffff, 0x0) 1.939785607s ago: executing program 1 (id=2714): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x7, 0x0, 0xfffffffc}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000003c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@user_xattr}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x3e5a}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.783936156s ago: executing program 1 (id=2715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b01fffe4ec6"}) 1.476010254s ago: executing program 7 (id=2722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x24000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 1.475424434s ago: executing program 3 (id=2723): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xef, 0x2b1, &(0x7f0000000100)="$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") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000008000000080009000200000008000b00"], 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 1.413459808s ago: executing program 7 (id=2725): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x1, r2, 0x6}, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) writev(r0, &(0x7f0000000100), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "0200", "ec094ea7c597058c35040000000009000000000000000000bd47a3ad00", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000002) 1.412876438s ago: executing program 3 (id=2726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x2a, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x100, 0x0, 0x100000}}, 0x40) 1.36348173s ago: executing program 3 (id=2728): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000001, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) openat(0xffffffffffffff9c, 0x0, 0x20d42, 0x4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, 0x0, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) (fail_nth: 3) 1.089753876s ago: executing program 0 (id=2730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc8001}, 0x810) 1.057433728s ago: executing program 9 (id=2731): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xdffd, 0x7, @remote, 0x4}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1.056985838s ago: executing program 0 (id=2732): socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x21710, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x100040, 0x10000, 0x9, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r3, 0xb3}, 0x8) unshare(0x26000400) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="cd2c2dbd7000fedbdf25"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x40800) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000200)={0x4, [0x6, 0x100, 0x0, 0x8000]}, &(0x7f0000000500)=0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000580)=ANY=[@ANYRESDEC=r7], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff03318944268cb89914f00800", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000004c0)={r2, 0x0, &(0x7f0000000080)}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, 0x0, &(0x7f0000000240)) socket$kcm(0x2, 0x2, 0x2) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000033"], 0xfdef) setns(r6, 0x24020000) r11 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x24020000) 1.056632828s ago: executing program 9 (id=2733): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x8d8, &(0x7f0000000080), 0x3, 0x42f, &(0x7f0000000940)="$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") fallocate(0xffffffffffffffff, 0x3, 0x6, 0xa4f) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r2 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r3, 0xffffffffffffffff, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5500000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf66e08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5742d75c1b21770e7460e8ae6848fa45a1721c2db", 0xd8}], 0x1}, 0x20000080) sendfile(r2, r2, 0x0, 0x1000000201005) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r6, r6, 0x0, 0x800000009) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 963.819264ms ago: executing program 0 (id=2734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x800, 0x0, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xb, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 963.073794ms ago: executing program 3 (id=2735): r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x38, 0x35, 0x63, 0x66, 0x31, 0x35, 0x1cdd9d07513c7455, 0x65, 0x61, 0x61, 0x62, 0x31, 0x65, 0x32, 0x39]}, &(0x7f0000000100)={0x0, "54069c5f70f517c6bede2bbcc967139448118ffff033fb1bebd910bb9f71ed1103926b9988ac8a27f7ad9213bee8a323a96f2138ff8850e9d28bffa59d8bd9e3", 0x2}, 0x48, 0xfffffffffffffffa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001200ffffff7f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) r2 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="9bd75dd4addf02077a253e93a94e3e7638ed2a3d6a180ca28fa4bfbbf1a6c354f4c2239e97ac05de602b9b7a8b6365967f9b1d08b3e1d6d4dc74e474b9f279b53cfb9be4d1bad82015e396b1639869ebcf7a28f0d126dc8e1e37494771f9255a45a7c9af767ad078cd70076a2d111a61f5cfc7f8096f98f59baaea59a1bc6a1dd01fa0caf6b634fa8cbbb529668fe5be409bf7dbbcb3b8b403616b13aba5700d4350cddb046cd880a256783296aab376214d498b3b93caa7c58d66256a14d815436c298fca0d4aedc816e268aef77c280cace3ced598f78b8e315d6cf6feb6c759cc90be7c9a5ef69940c3", 0xeb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001a0001002bbd70000000000080"], 0x1c}}, 0x4000090) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000005c0)={@rand_addr=0x64010102, @multicast2, 0x0, "5dc59fd23e860f69e059184ac2e0b8b293f4dffa28d71828a5367064ad4a5117", 0x0, 0x80000001, 0xfff, 0xffffffff}, 0x3c) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x8, 0x5, 0x7, 0x68, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000080), 0x1000000) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000400)=[{&(0x7f0000000180)="17e333c71a20e6d652fba36490e0a63441809dce0151166a5c6ff01ac247a91aa9e8699274079b95b7202f927d71a371581860072be853adc3abd8f4e4fdfa134552", 0x42}, {&(0x7f0000000200)="4de86bb0ad3de01979b8f557381e3215d6f44dad1a90826f1b9dff74d78fac2aa1c211a9be31897c43dd150a8e5cc1e0ff9801416dfc18a03c058a4c234e654912bf688a63f1ad6e8d45deb696237d4b2c1d03a047a42de444cb7e1637477a78188f2ab33d300aeb742ae2f0", 0x6c}, {&(0x7f0000000280)="4c65436c6142dd399cd584dace2c904654d651b7c2341f9796e068711c904e05cce6e4f906fa2e7db08554a1585ab93e2fb658f251efb44e4ceb6d8ee2c593f26c06ad54c6", 0x45}, {&(0x7f0000000300)="4014747ea22cbad7103fd27dbd26900f86e3a67e677c7d12bebf897ee414d9fcb29ec09be6d12dacb2940bc6d2562609ac3808e2dc2847d5f62a2a6c2f8c31fe4e5b41f33d24c78275cd4ba158ccfca95b799d4633c7ca9d59c4a5e0184e28d45d2d29930ed76fbb2ce6716c14521638f93ccf4a2d183e6e85b8916b0c014c36211b0e0d090cad2cefbe65e3f11965f0cd029d1558e10fdb2341332097b7de12d53b0634d7cca0f1647ee2a4eb17efdbfb404f5536d838ba7426d13a64315426dd6da9e89eaf14429d3e053e9af2", 0xce}], 0x4, r2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 936.872105ms ago: executing program 0 (id=2736): syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000691000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = msgget$private(0x0, 0x480) msgsnd(r2, &(0x7f0000000040)=ANY=[], 0x401, 0x0) msgsnd(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000004"], 0x42, 0x0) (async) msgsnd(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000004"], 0x42, 0x0) msgsnd(r2, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x401, 0x0) msgrcv(r2, &(0x7f0000000080)={0x0, ""/211}, 0xdb, 0x3, 0x3800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r3 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200)={0x2}, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200)={0x2}, 0x1) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 845.569501ms ago: executing program 7 (id=2737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r0}, 0x38) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4d0fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x8041, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x80, 0x0, 0x2, 0x205, 0x0, "00094a0400000000001e00"}) r5 = syz_open_pts(r4, 0x80) r6 = dup3(r5, r4, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r8, @ANYBLOB="576127bd70000000b5e07e"], 0xc4}, 0x1, 0x0, 0x0, 0x4044094}, 0x4000054) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1e8ef}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r0, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0xffe4, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r11}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 808.203182ms ago: executing program 0 (id=2738): r0 = fsopen(&(0x7f0000000080)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/tcp6\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/1295], 0x50f) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) mknodat$null(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0x103) 763.949575ms ago: executing program 1 (id=2739): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001200bd"], 0x14}}, 0x0) r1 = syz_clone(0x40000200, &(0x7f0000000300)="663185bddcb4a2323f202767d1e3cd1517e93db2e4e7e958cfac953cdf04000000459f1de34c7908cf6ebf860842a3158a0ef641047310d9166ff98230e7901b02a7453e4add30fac120e2758b72c2a70c44a1e238e4e741124fd1ebb32fba78489b9accfa543dbaef885c6d0754fb622dabe2607870cac437af4aaa17d464d6502ebde17bee94b78f1858de415180dd0a78331305375280934aca5f166fbb8c35b3d7f7839618438ad31caed2bc45734b48291f6f4614b7b38bc92672879b682fb50f", 0xc3, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="682122d3d76b41ffc8abfbfff1ff35a4b00203368381ead79ef8c90600000060099a12f3a29ec0a94b21ab1a343d9aba59d38a27adc69b5a42cdfbf96d764a36ae6f05126aec491562022cebe62b6b3a95e09dd2ef22db518f7b25f0d01fd38883dbd9d58edf23fba0e919b106fb90bd3f9b154628029178688a8d42d66f891fd3c2375200"/143) r2 = syz_open_procfs(r1, &(0x7f0000000200)='attr/current\x00') r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x2c, r6, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40006) r7 = socket(0x2, 0x80805, 0x0) bind$unix(r7, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) creat(&(0x7f00000002c0)='./file0\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 734.092787ms ago: executing program 0 (id=2740): ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000300)=0x1) syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20003214, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='dots,nfs,dots,nfs=stale_rw,uid=', @ANYRESHEX=0x0, @ANYRESDEC], 0x1, 0x159, &(0x7f0000000840)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) rename(&(0x7f0000000080)='./file0\x00', 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x3e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0xfffffffffffffffd, 0xbb) 694.637599ms ago: executing program 9 (id=2741): socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x20040010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000380)=ANY=[@ANYBLOB='grpquota,sma#kf,uid<', @ANYRESDEC=0xee00, @ANYBLOB="2c736d61636b66736465663d2f646576146275732f7573622f3030232f303023002c00"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x4e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x10, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', r1, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x80, 0x91d, 0xf, 0x0, 0x6, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x177f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000300)={{0x0, @rand_addr=0x64010100, 0x4e23, 0x3, 'sed\x00', 0x28, 0x350840, 0x9}, {@multicast2, 0x4e21, 0x10002, 0x8, 0x5, 0x47d}}, 0x44) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 462.877993ms ago: executing program 1 (id=2742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc8001}, 0x810) 441.340294ms ago: executing program 7 (id=2743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000a00)="13977602000000", 0x7}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00f3ff", @ANYRES16=r2, @ANYBLOB="100029bd7000fedbdf2514000000c7fc0280080001000000000008000100080000000400040004000400080002000700000024000380080002003000000008000100fdffffff08000100050000000800020001800000"], 0x5c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4048888) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r3, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)='J', 0x101d0}], 0x1}, 0x2000c8c0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 335.8483ms ago: executing program 7 (id=2744): r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345, {0x0, r3}}) uname(0xfffffffffffffffc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82c, 0x0, 0x0, 0x4}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r4, 0x4b48, &(0x7f0000000040)) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='c 122'], 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x0, 0x50008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48105}, 0x0) 335.38069ms ago: executing program 1 (id=2745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0904000000000000000002000000300004802c0001800b0001006e756d67656e00001c000280080001400000000808000240ffffffff08000340000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000280)=ANY=[@ANYBLOB="01000900aaaa01aaaaaa2e7e05680500000000000000aaaaaaaaaa986c64771b8d000180c2000000aaaaaaaa8f5700004e05faffbbbb18a09c50"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x306}, &(0x7f0000000080), &(0x7f0000002800)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/72, 0x48}, {&(0x7f0000000500)=""/29, 0x1d}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = io_uring_setup(0x3a50, &(0x7f0000000140)={0x0, 0xf05c, 0x8, 0x1, 0x19c, 0x0, r3}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) dup2(r5, r4) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={r6, r7+60000000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "2ae4792bee03a38c", "63da6f3f53aa6dafec4054ef9bfe8530", "85dc2dc1", "416654fa9177237b"}, 0x28) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000f00000000000000005000400000000000900020073797a30000000000500010007000000050005000a010000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 185.249299ms ago: executing program 9 (id=2746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x800, 0x0, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xb, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 132.072012ms ago: executing program 9 (id=2747): syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffff01ffffffffff001c20000000041182b4389078ac1414bcac14140fce6d8d50000808bb2dda1556615e5d1562fb73d1811f90780000000000000000"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) execveat$binfmt(r3, r4, &(0x7f0000000200), &(0x7f0000000480)={[&(0x7f0000000240)='\x00', &(0x7f0000000280)='*$\x00', &(0x7f00000002c0)='bridge_slave_0\x00', &(0x7f0000000380)='$,/\x00', &(0x7f00000003c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000400)='^\'\x00', &(0x7f0000000440)='pimreg1\x00']}, 0x400) r5 = io_uring_setup(0x4fb7, &(0x7f0000000100)={0x0, 0xe2e9, 0x4080, 0x0, 0x278}) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xd398, 0x1f480, 0x1, 0x399, 0x0, r5}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="100a06000408010014001a80100004800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001a0001000000fbdbdf250a8080"], 0x44}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pimreg1\x00'}) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x7fff, 0x20) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffff01ffffffffff001c20000000041182b4389078ac1414bcac14140fce6d8d50000808bb2dda1556615e5d1562fb73d1811f90780000000000000000"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') (async) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) (async) execveat$binfmt(r3, r4, &(0x7f0000000200), &(0x7f0000000480)={[&(0x7f0000000240)='\x00', &(0x7f0000000280)='*$\x00', &(0x7f00000002c0)='bridge_slave_0\x00', &(0x7f0000000380)='$,/\x00', &(0x7f00000003c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000400)='^\'\x00', &(0x7f0000000440)='pimreg1\x00']}, 0x400) (async) io_uring_setup(0x4fb7, &(0x7f0000000100)={0x0, 0xe2e9, 0x4080, 0x0, 0x278}) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xd398, 0x1f480, 0x1, 0x399, 0x0, r5}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="100a06000408010014001a80100004800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001a0001000000fbdbdf250a8080"], 0x44}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pimreg1\x00'}) (async) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x7fff, 0x20) (async) 71.968775ms ago: executing program 7 (id=2748): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x25) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)={0x54, r1, 0x101, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x51}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xb}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) 71.073455ms ago: executing program 3 (id=2749): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000540)={0x284090500, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x2a}, &(0x7f0000000240)=""/206, 0xce, &(0x7f0000000440)=""/231, &(0x7f0000000180)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r2, 0x2f, 0x0, @void}, 0x10) 46.050127ms ago: executing program 3 (id=2750): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@nodots}, {@fat=@dos1xfloppy}, {@fat=@usefree}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@fat=@flush}, {@fat=@nfs_nostale_ro}, {@dots}, {@nodots}]}, 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x439, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, 0x69801}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r4}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48b5}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="11eb0300fc0b", 0x6, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x4, 0x6, @multicast}, 0x14) 0s ago: executing program 9 (id=2751): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x8d8, &(0x7f0000000080), 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") fallocate(0xffffffffffffffff, 0x3, 0x6, 0xa4f) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r2 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r3, 0xffffffffffffffff, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5500000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf66e08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5742d75c1b21770e7460e8ae6848fa45a1721c2db", 0xd8}], 0x1}, 0x20000080) sendfile(r2, r2, 0x0, 0x1000000201005) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r6, r6, 0x0, 0x800000009) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 6][T14070] bridge0: entered allmulticast mode [ 139.869439][T14070] bridge_slave_1: left allmulticast mode [ 139.875157][T14070] bridge_slave_1: left promiscuous mode [ 139.880895][T14070] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.897921][T14070] bridge_slave_0: left allmulticast mode [ 139.903646][T14070] bridge_slave_0: left promiscuous mode [ 139.909351][T14070] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.973645][T14077] loop5: detected capacity change from 0 to 512 [ 140.110932][T14081] loop7: detected capacity change from 0 to 7 [ 140.124046][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.145349][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 140.154980][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 140.163958][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 140.173554][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 140.181501][T14081] loop7: unable to read partition table [ 140.187681][T14081] loop_reread_partitions: partition scan of loop7 (úů塙‰üŤľCęjĚ–ă˘P=Ă˝?ă}X‹şĐ śëÜ%ő«`ÉćÖ€ů…{í©Öȵ4FLQkÝŠ) failed (rc=-5) [ 140.202584][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 140.212220][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 140.225632][T14077] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 140.269696][T14082] support for cryptoloop has been removed. Use dm-crypt instead. [ 140.280848][ C1] sd 0:0:1:0: [sda] tag#8475 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 140.291243][ C1] sd 0:0:1:0: [sda] tag#8475 CDB: Read(6) 08 00 00 00 03 44 [ 140.311157][ C1] sd 0:0:1:0: [sda] tag#8476 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 140.311209][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 140.321535][ C1] sd 0:0:1:0: [sda] tag#8476 CDB: Read(6) 08 00 00 00 03 44 [ 140.332162][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 140.348008][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 140.379039][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 140.388657][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 140.399571][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 140.409167][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 140.418247][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 140.427861][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 140.534607][T14111] syz_tun: entered allmulticast mode [ 140.690423][T14115] loop7: detected capacity change from 0 to 8192 [ 140.718067][T14122] random: crng reseeded on system resumption [ 140.730001][ T3632] loop7: p1 < > p2 < > p3 p4 < > [ 140.735101][ T3632] loop7: partition table partially beyond EOD, truncated [ 140.750425][ T3632] loop7: p1 start 67108864 is beyond EOD, truncated [ 140.778336][ T3632] loop7: p3 start 100859904 is beyond EOD, truncated [ 140.814348][T14115] loop7: p1 < > p2 < > p3 p4 < > [ 140.819508][T14115] loop7: partition table partially beyond EOD, truncated [ 140.863872][T14137] __nla_validate_parse: 29 callbacks suppressed [ 140.863892][T14137] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.2027'. [ 140.872954][T14115] loop7: p1 start 67108864 is beyond EOD, truncated [ 140.904227][T14115] loop7: p3 start 100859904 is beyond EOD, truncated [ 140.914382][T14140] loop3: detected capacity change from 0 to 512 [ 140.996048][T14140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.064413][T14140] ext4 filesystem being mounted at /148/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.076199][T14154] tipc: Enabling of bearer rejected, failed to enable media [ 141.079971][ T5972] udevd[5972]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 141.099413][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 141.138478][ T5972] udevd[5972]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 141.153497][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 141.171744][T14140] EXT4-fs warning (device loop3): ext4_group_extend:1862: can't shrink FS - resize aborted [ 141.175740][T14152] loop7: detected capacity change from 0 to 8192 [ 141.210976][T14157] loop5: detected capacity change from 0 to 512 [ 141.231458][T14157] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 141.340307][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.373104][T14162] gre1: entered promiscuous mode [ 141.378164][T14162] gre1: entered allmulticast mode [ 141.475923][T14162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14162 comm=syz.7.2037 [ 141.561055][T14174] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2039'. [ 141.602338][T14174] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2039'. [ 141.628820][T14179] EXT4-fs: Ignoring removed oldalloc option [ 141.647467][T14179] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.650354][T14177] pim6reg: entered allmulticast mode [ 141.673060][T14177] team0: entered allmulticast mode [ 141.678261][T14177] C: entered allmulticast mode [ 141.683063][T14177] team_slave_1: entered allmulticast mode [ 141.691568][T14179] EXT4-fs (loop3): 1 truncate cleaned up [ 141.700481][T14177] team0: left allmulticast mode [ 141.704248][T14179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.705446][T14177] C: left allmulticast mode [ 141.705463][T14177] team_slave_1: left allmulticast mode [ 141.705562][T14177] pim6reg: left allmulticast mode [ 141.772540][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.972256][T14197] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2043'. [ 142.033024][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2043'. [ 142.042056][T14197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2043'. [ 142.051059][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2043'. [ 142.060471][T14197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2043'. [ 142.299891][ T3001] loop9: p1 < > p2 p3 < > p4 < p5 > [ 142.305247][ T3001] loop9: partition table partially beyond EOD, truncated [ 142.313272][ T3001] loop9: p1 start 4294967288 is beyond EOD, truncated [ 142.320682][ T3001] loop9: p3 start 4284289 is beyond EOD, truncated [ 142.331065][T14212] loop9: p1 < > p2 p3 < > p4 < p5 > [ 142.336379][T14212] loop9: partition table partially beyond EOD, truncated [ 142.340294][T14215] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 142.343548][T14212] loop9: p1 start 4294967288 is beyond EOD, truncated [ 142.357413][T14212] loop9: p3 start 4284289 is beyond EOD, truncated [ 142.367647][ T3001] loop9: p1 < > p2 p3 < > p4 < p5 > [ 142.373289][ T3001] loop9: partition table partially beyond EOD, truncated [ 142.380933][ T3001] loop9: p1 start 4294967288 is beyond EOD, truncated [ 142.388240][ T3001] loop9: p3 start 4284289 is beyond EOD, truncated [ 142.461649][ T3439] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.462306][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 142.471377][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 142.480401][ T5972] udevd[5972]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 142.503536][ T3439] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.512230][ T3439] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.520609][ T3439] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.592173][T14219] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 142.601848][T14219] EXT4-fs (loop9): 1 truncate cleaned up [ 142.607973][T14219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.622347][T14219] netlink: 'syz.9.2054': attribute type 3 has an invalid length. [ 142.638275][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.657968][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 142.657985][ T29] audit: type=1400 audit(1803774304.659:28671): avc: denied { execute } for pid=14221 comm="syz.9.2055" path="/file1" dev="ramfs" ino=30412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 142.703352][T14224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14224 comm=syz.9.2056 [ 142.734071][T14224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 142.746459][T14224] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.758792][T14224] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm syz.9.2056: lblock 3 mapped to illegal pblock 3 (length 3) [ 142.773173][T14224] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 142.786005][T14224] EXT4-fs (loop9): This should not happen!! Data will be lost [ 142.786005][T14224] [ 142.797540][T14224] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.2056: lblock 3 mapped to illegal pblock 3 (length 1) [ 142.798418][ T29] audit: type=1400 audit(1803774304.799:28672): avc: denied { map } for pid=14223 comm="syz.9.2056" path="/105/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.812899][T14224] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.2056: lblock 3 mapped to illegal pblock 3 (length 1) [ 142.852403][T14224] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.2056: lblock 3 mapped to illegal pblock 3 (length 1) [ 142.866888][T14223] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 4: comm syz.9.2056: lblock 4 mapped to illegal pblock 4 (length 2) [ 142.883049][T14223] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 4: comm syz.9.2056: lblock 4 mapped to illegal pblock 4 (length 2) [ 142.889200][T14224] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.2056: lblock 3 mapped to illegal pblock 3 (length 1) [ 142.897578][T14223] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 4: comm syz.9.2056: lblock 4 mapped to illegal pblock 4 (length 2) [ 142.925714][T14224] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 3: comm syz.9.2056: lblock 3 mapped to illegal pblock 3 (length 1) [ 142.930570][T14229] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #15: block 4: comm syz.9.2056: lblock 4 mapped to illegal pblock 4 (length 2) [ 142.954325][T14231] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 143.153985][ T29] audit: type=1326 audit(1803774305.159:28673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0affaeb9 code=0x7ffc0000 [ 143.177736][ T29] audit: type=1326 audit(1803774305.159:28674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0affaeb9 code=0x7ffc0000 [ 143.201589][ T29] audit: type=1326 audit(1803774305.209:28675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3e0affaeb9 code=0x7ffc0000 [ 143.226089][ T29] audit: type=1326 audit(1803774305.209:28676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0affaeb9 code=0x7ffc0000 [ 143.250435][ T29] audit: type=1326 audit(1803774305.209:28677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0affaeb9 code=0x7ffc0000 [ 143.274007][ T29] audit: type=1326 audit(1803774305.209:28678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3e0affaeb9 code=0x7ffc0000 [ 143.299321][ T29] audit: type=1326 audit(1803774305.259:28679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0affaeb9 code=0x7ffc0000 [ 143.323692][ T29] audit: type=1326 audit(1803774305.259:28680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0affaeb9 code=0x7ffc0000 [ 143.551846][ T3439] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 143.564195][ T3439] EXT4-fs (loop9): This should not happen!! Data will be lost [ 143.564195][ T3439] [ 143.575096][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.620964][T14247] random: crng reseeded on system resumption [ 143.628758][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2063'. [ 143.745274][T14251] set_capacity_and_notify: 5 callbacks suppressed [ 143.745287][T14251] loop3: detected capacity change from 0 to 512 [ 143.761271][T14251] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 143.769271][T14251] EXT4-fs (loop3): orphan cleanup on readonly fs [ 143.776436][T14251] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 143.791438][T14251] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 143.798587][T14251] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2065: corrupted inode contents [ 143.810701][T14251] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.2065: mark_inode_dirty error [ 143.822278][T14251] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2065: corrupted inode contents [ 143.834455][T14251] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2065: mark_inode_dirty error [ 143.845864][T14251] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2065: corrupted inode contents [ 143.858009][T14251] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 143.866807][T14251] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.2065: corrupted inode contents [ 143.878911][T14251] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.2065: mark_inode_dirty error [ 143.890196][T14251] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 143.899466][T14251] EXT4-fs (loop3): 1 truncate cleaned up [ 143.905557][T14251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.920867][T14251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.944765][T14261] loop9: detected capacity change from 0 to 256 [ 144.001523][T14265] FAULT_INJECTION: forcing a failure. [ 144.001523][T14265] name failslab, interval 1, probability 0, space 0, times 0 [ 144.014329][T14265] CPU: 0 UID: 0 PID: 14265 Comm: syz.9.2070 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.014363][T14265] Tainted: [W]=WARN [ 144.014369][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.014381][T14265] Call Trace: [ 144.014388][T14265] [ 144.014445][T14265] __dump_stack+0x1d/0x30 [ 144.014472][T14265] dump_stack_lvl+0x95/0xd0 [ 144.014586][T14265] dump_stack+0x15/0x1b [ 144.014619][T14265] should_fail_ex+0x263/0x280 [ 144.014649][T14265] should_failslab+0x8c/0xb0 [ 144.014670][T14265] kmem_cache_alloc_noprof+0x68/0x490 [ 144.014824][T14265] ? dst_alloc+0xbd/0x100 [ 144.014910][T14265] dst_alloc+0xbd/0x100 [ 144.014943][T14265] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 144.015044][T14265] ip_route_output_flow+0x65/0x110 [ 144.015115][T14265] udp_sendmsg+0x13c3/0x15d0 [ 144.015141][T14265] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 144.015169][T14265] ? __account_obj_stock+0x211/0x350 [ 144.015244][T14265] udpv6_sendmsg+0x621/0x17b0 [ 144.015264][T14265] ? __account_obj_stock+0x2d6/0x350 [ 144.015356][T14265] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 144.015378][T14265] inet6_sendmsg+0xac/0xd0 [ 144.015449][T14265] ____sys_sendmsg+0x3c4/0x600 [ 144.015473][T14265] ___sys_sendmsg+0x195/0x1e0 [ 144.015505][T14265] __sys_sendmmsg+0x185/0x320 [ 144.015530][T14265] __x64_sys_sendmmsg+0x57/0x70 [ 144.015548][T14265] x64_sys_call+0x1e28/0x3000 [ 144.015606][T14265] do_syscall_64+0xc0/0x2a0 [ 144.015636][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.015656][T14265] RIP: 0033:0x7fa56eeaaeb9 [ 144.015784][T14265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.015852][T14265] RSP: 002b:00007fa56d907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 144.015870][T14265] RAX: ffffffffffffffda RBX: 00007fa56f125fa0 RCX: 00007fa56eeaaeb9 [ 144.015883][T14265] RDX: 0000000000000001 RSI: 00002000000009c0 RDI: 0000000000000003 [ 144.015898][T14265] RBP: 00007fa56d907090 R08: 0000000000000000 R09: 0000000000000000 [ 144.015959][T14265] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000001 [ 144.015973][T14265] R13: 00007fa56f126038 R14: 00007fa56f125fa0 R15: 00007fff27575158 [ 144.015992][T14265] [ 144.261436][T14267] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2069'. [ 144.417115][T14287] loop3: detected capacity change from 0 to 256 [ 144.431176][T14292] netlink: 'syz.5.2079': attribute type 39 has an invalid length. [ 144.439153][T14292] macvlan1: left allmulticast mode [ 144.452522][T14287] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.461393][T14287] FAT-fs (loop3): Filesystem has been set read-only [ 144.478087][T14287] FAULT_INJECTION: forcing a failure. [ 144.478087][T14287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.492112][T14287] CPU: 0 UID: 0 PID: 14287 Comm: syz.3.2077 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.492147][T14287] Tainted: [W]=WARN [ 144.492155][T14287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.492168][T14287] Call Trace: [ 144.492176][T14287] [ 144.492260][T14287] __dump_stack+0x1d/0x30 [ 144.492296][T14287] dump_stack_lvl+0x95/0xd0 [ 144.492320][T14287] dump_stack+0x15/0x1b [ 144.492343][T14287] should_fail_ex+0x263/0x280 [ 144.492376][T14287] should_fail+0xb/0x20 [ 144.492485][T14287] should_fail_usercopy+0x1a/0x20 [ 144.492550][T14287] _copy_to_user+0x20/0xa0 [ 144.492571][T14287] simple_read_from_buffer+0xb5/0x130 [ 144.492606][T14287] proc_fail_nth_read+0x10e/0x150 [ 144.492679][T14287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.492707][T14287] vfs_read+0x1ab/0x7f0 [ 144.492727][T14287] ? __rcu_read_unlock+0x4e/0x70 [ 144.492816][T14287] ? __fget_files+0x184/0x1c0 [ 144.492839][T14287] ? mutex_lock+0x57/0x90 [ 144.492864][T14287] ksys_read+0xdc/0x1a0 [ 144.492896][T14287] __x64_sys_read+0x40/0x50 [ 144.492915][T14287] x64_sys_call+0x2889/0x3000 [ 144.492943][T14287] do_syscall_64+0xc0/0x2a0 [ 144.492975][T14287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.493000][T14287] RIP: 0033:0x7f67b0d4b78e [ 144.493074][T14287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.493090][T14287] RSP: 002b:00007f67af7e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.493111][T14287] RAX: ffffffffffffffda RBX: 00007f67af7e76c0 RCX: 00007f67b0d4b78e [ 144.493189][T14287] RDX: 000000000000000f RSI: 00007f67af7e70a0 RDI: 0000000000000005 [ 144.493202][T14287] RBP: 00007f67af7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 144.493214][T14287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.493225][T14287] R13: 00007f67b1006038 R14: 00007f67b1005fa0 R15: 00007ffd58946938 [ 144.493247][T14287] [ 144.696101][ T5679] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.707654][ T5679] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.716207][ T5679] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.726593][ T5679] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.845384][T14317] loop3: detected capacity change from 0 to 1024 [ 144.858066][T14317] EXT4-fs: Ignoring removed bh option [ 144.873910][T14317] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.882424][T14317] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 144.898247][T14320] loop5: detected capacity change from 0 to 1024 [ 144.910286][T14320] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.934492][T14320] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #3: block 1: comm syz.5.2088: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.956335][T14320] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2088: Failed to acquire dquot type 0 [ 144.968382][T14320] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.2088: Freeing blocks not in datazone - block = 0, count = 4096 [ 145.010018][T14320] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2088: Invalid inode bitmap blk 0 in block_group 0 [ 145.029681][ T5679] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 145.044910][T14320] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 145.054075][T14320] EXT4-fs (loop5): 1 orphan inode deleted [ 145.066740][ T5679] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 0 [ 145.080642][T14320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.133963][T14320] dummy0: entered promiscuous mode [ 145.141856][T14320] bond0: entered promiscuous mode [ 145.146995][T14320] bond_slave_0: entered promiscuous mode [ 145.152914][T14320] bond_slave_1: entered promiscuous mode [ 145.154072][T14338] loop7: detected capacity change from 0 to 1024 [ 145.159483][T14320] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 145.175009][T14320] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 145.185978][T14320] hsr1: entered allmulticast mode [ 145.211208][T14341] loop3: detected capacity change from 0 to 764 [ 145.248588][T14344] loop7: detected capacity change from 0 to 512 [ 145.318604][ T5075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.357107][T14353] lo speed is unknown, defaulting to 1000 [ 145.368499][T14356] loop7: detected capacity change from 0 to 512 [ 145.732449][ T3483] IPVS: starting estimator thread 0... [ 145.778227][T14375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14375 comm=syz.7.2106 [ 145.849667][T14373] IPVS: using max 2160 ests per chain, 108000 per kthread [ 145.951957][ T5679] IPVS: stop unused estimator thread 0... [ 145.995262][T14390] syzkaller0: entered promiscuous mode [ 146.000809][T14390] syzkaller0: entered allmulticast mode [ 146.031741][T14390] lo speed is unknown, defaulting to 1000 [ 146.416785][T14426] loop3: detected capacity change from 0 to 512 [ 146.468456][T14426] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.488730][T14426] EXT4-fs (loop3): 1 truncate cleaned up [ 146.506141][T14426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.619502][T14435] bond_slave_0: entered promiscuous mode [ 146.625203][T14435] bond_slave_1: entered promiscuous mode [ 146.648775][T14426] __nla_validate_parse: 21 callbacks suppressed [ 146.648792][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2123'. [ 146.673701][T14439] netlink: 'syz.7.2127': attribute type 21 has an invalid length. [ 146.682381][T14439] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2127'. [ 146.689456][T14435] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 146.712711][T14435] bond_slave_0: left promiscuous mode [ 146.718139][T14435] bond_slave_1: left promiscuous mode [ 146.752348][T14426] C: renamed from team_slave_0 (while UP) [ 146.763972][T14426] netlink: 'syz.3.2123': attribute type 3 has an invalid length. [ 146.771804][T14426] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2123'. [ 146.780903][T14426] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 146.796637][T14439] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2127'. [ 146.810812][T14441] netlink: 'syz.9.2125': attribute type 15 has an invalid length. [ 146.930628][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.941748][T14458] netlink: 176 bytes leftover after parsing attributes in process `syz.9.2129'. [ 146.984471][T14458] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2129'. [ 146.993526][T14458] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2129'. [ 147.003203][T14458] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2129'. [ 147.015459][T14458] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2129'. [ 147.026839][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2132'. [ 147.203953][T14474] sctp: [Deprecated]: syz.1.2137 (pid 14474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.203953][T14474] Use struct sctp_sack_info instead [ 147.714067][T14504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.729683][T14504] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.752344][T14509] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm syz.5.2147: lblock 8 mapped to illegal pblock 8 (length 8) [ 147.800098][T14509] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.2147: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 147.838172][T14514] EXT4-fs (loop9): bad geometry: first data block 0 is beyond end of filesystem (0) [ 147.849284][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 147.849297][ T29] audit: type=1326 audit(1803774309.849:28941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b0d8aeb9 code=0x7ffc0000 [ 147.889104][T14515] FAULT_INJECTION: forcing a failure. [ 147.889104][T14515] name failslab, interval 1, probability 0, space 0, times 0 [ 147.901790][T14515] CPU: 1 UID: 0 PID: 14515 Comm: syz.3.2149 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.901826][T14515] Tainted: [W]=WARN [ 147.901834][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.901848][T14515] Call Trace: [ 147.901857][T14515] [ 147.901866][T14515] __dump_stack+0x1d/0x30 [ 147.901920][T14515] dump_stack_lvl+0x95/0xd0 [ 147.901940][T14515] dump_stack+0x15/0x1b [ 147.901964][T14515] should_fail_ex+0x263/0x280 [ 147.901999][T14515] should_failslab+0x8c/0xb0 [ 147.902033][T14515] __kmalloc_cache_noprof+0x64/0x4a0 [ 147.902063][T14515] ? audit_log_d_path+0x8d/0x150 [ 147.902138][T14515] audit_log_d_path+0x8d/0x150 [ 147.902166][T14515] audit_log_d_path_exe+0x42/0x70 [ 147.902206][T14515] audit_log_task+0x1e8/0x250 [ 147.902307][T14515] ? kstrtouint+0x76/0xc0 [ 147.902337][T14515] audit_seccomp+0x60/0x100 [ 147.902361][T14515] ? __seccomp_filter+0x8db/0x1350 [ 147.902405][T14515] __seccomp_filter+0x8ec/0x1350 [ 147.902429][T14515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 147.902492][T14515] ? vfs_write+0x86e/0x9f0 [ 147.902520][T14515] ? __rcu_read_unlock+0x4e/0x70 [ 147.902568][T14515] ? __fget_files+0x184/0x1c0 [ 147.902596][T14515] __secure_computing+0x81/0x150 [ 147.902649][T14515] syscall_trace_enter+0xce/0x1e0 [ 147.902730][T14515] do_syscall_64+0x9a/0x2a0 [ 147.902764][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.902788][T14515] RIP: 0033:0x7f67b0d8aeb9 [ 147.902806][T14515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.902823][T14515] RSP: 002b:00007f67af7c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 147.902886][T14515] RAX: ffffffffffffffda RBX: 00007f67b1006090 RCX: 00007f67b0d8aeb9 [ 147.902972][T14515] RDX: 0000000000000001 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 147.903025][T14515] RBP: 00007f67af7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.903040][T14515] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 147.903053][T14515] R13: 00007f67b1006128 R14: 00007f67b1006090 R15: 00007ffd58946938 [ 147.903072][T14515] [ 147.903158][ T29] audit: type=1326 audit(1803774309.889:28942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f67b0d8aeb9 code=0x7ffc0000 [ 148.104310][ T5075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 148.105079][ T29] audit: type=1326 audit(1803774309.889:28943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b0d8aeb9 code=0x7ffc0000 [ 148.172204][ T29] audit: type=1326 audit(1803774309.889:28944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f67b0d8aeb9 code=0x7ffc0000 [ 148.195858][ T29] audit: type=1326 audit(1803774309.889:28945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b0d8aeb9 code=0x7ffc0000 [ 148.219452][ T29] audit: type=1326 audit(1803774309.889:28946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67b0d4b78e code=0x7ffc0000 [ 148.243102][ T29] audit: type=1326 audit(1803774309.889:28947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f67b0d4b78e code=0x7ffc0000 [ 148.260651][T14519] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 148.266585][ T29] audit: type=1326 audit(1803774309.889:28948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.3.2149" exe="" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f67b0d8aeb9 code=0x7ffc0000 [ 148.308525][T14519] EXT4-fs (loop9): 1 truncate cleaned up [ 148.319839][ T29] audit: type=1326 audit(1803774309.979:28949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f67b0d4b78e code=0x7ffc0000 [ 148.343310][ T29] audit: type=1326 audit(1803774309.979:28950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14510 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f67b0d4b78e code=0x7ffc0000 [ 148.367267][T14519] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.399693][T14523] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 148.406316][T14523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.413853][T14523] vhci_hcd vhci_hcd.0: Device attached [ 148.421780][T14519] netlink: 'syz.9.2153': attribute type 3 has an invalid length. [ 148.429603][T14519] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 148.444697][T14531] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(16) [ 148.451341][T14531] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.458902][T14531] vhci_hcd vhci_hcd.0: Device attached [ 148.506430][T14523] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(15) [ 148.513061][T14523] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 148.521433][T14523] vhci_hcd vhci_hcd.0: Device attached [ 148.528149][T14523] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(18) [ 148.534813][T14523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.542414][T14523] vhci_hcd vhci_hcd.0: Device attached [ 148.550747][T14523] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(21) [ 148.557459][T14523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.565020][T14523] vhci_hcd vhci_hcd.0: Device attached [ 148.573055][T14523] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(24) [ 148.579664][T14523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.587634][T14523] vhci_hcd vhci_hcd.0: Device attached [ 148.593588][T14523] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.602170][T14523] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.611165][T14523] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.621298][T14548] vhci_hcd: connection closed [ 148.621369][T14542] vhci_hcd: connection closed [ 148.621509][T14544] vhci_hcd: connection closed [ 148.626237][T14546] vhci_hcd: connection closed [ 148.635630][T14533] vhci_hcd: connection closed [ 148.636435][ T4116] vhci_hcd vhci_hcd.7: stop threads [ 148.640334][T14529] vhci_hcd: connection closed [ 148.650270][ T4116] vhci_hcd vhci_hcd.7: release socket [ 148.660339][ T4116] vhci_hcd vhci_hcd.7: disconnect device [ 148.667811][ T4116] vhci_hcd vhci_hcd.7: stop threads [ 148.673905][ T4116] vhci_hcd vhci_hcd.7: release socket [ 148.679332][ T4116] vhci_hcd vhci_hcd.7: disconnect device [ 148.680858][ T9940] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 148.692692][ T4116] vhci_hcd vhci_hcd.7: stop threads [ 148.697929][ T4116] vhci_hcd vhci_hcd.7: release socket [ 148.704054][ T4116] vhci_hcd vhci_hcd.7: disconnect device [ 148.710345][ T4116] vhci_hcd vhci_hcd.7: stop threads [ 148.715435][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.715553][ T4116] vhci_hcd vhci_hcd.7: release socket [ 148.730236][T14532] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 148.736566][ T4116] vhci_hcd vhci_hcd.7: disconnect device [ 148.754277][ T4116] vhci_hcd vhci_hcd.7: stop threads [ 148.759612][ T4116] vhci_hcd vhci_hcd.7: release socket [ 148.764993][ T4116] vhci_hcd vhci_hcd.7: disconnect device [ 148.785409][ T4116] vhci_hcd vhci_hcd.7: stop threads [ 148.790686][ T4116] vhci_hcd vhci_hcd.7: release socket [ 148.796111][ T4116] vhci_hcd vhci_hcd.7: disconnect device [ 148.828638][T14557] syzkaller0: entered promiscuous mode [ 148.834188][T14557] syzkaller0: entered allmulticast mode [ 149.121880][T14569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=14569 comm=syz.3.2165 [ 149.395913][T14586] set_capacity_and_notify: 7 callbacks suppressed [ 149.395932][T14586] loop3: detected capacity change from 0 to 2048 [ 149.410704][T14586] EXT4-fs: Ignoring removed oldalloc option [ 149.447678][T14586] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 149.460584][T14586] System zones: 0-7 [ 149.469460][T14586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.518914][T14586] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.2172: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 149.547162][T14595] uprobe: syz.5.2175:14595 failed to unregister, leaking uprobe [ 149.579827][T14586] EXT4-fs (loop3): Remounting filesystem read-only [ 149.604025][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.684834][T14611] netlink: 'syz.3.2180': attribute type 1 has an invalid length. [ 149.719224][T14611] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 149.729615][T14613] netlink: 'syz.1.2181': attribute type 3 has an invalid length. [ 149.737418][T14613] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 149.754220][T14611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.761011][ T4116] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 149.883440][ T4116] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 149.943542][T14630] loop9: detected capacity change from 0 to 2048 [ 149.957057][T14635] loop7: detected capacity change from 0 to 512 [ 149.964769][T14630] EXT4-fs: Ignoring removed oldalloc option [ 150.080232][T14630] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 150.088496][T14630] System zones: 0-7 [ 150.094170][T14630] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.094681][T14653] loop3: detected capacity change from 0 to 512 [ 150.113473][T14630] EXT4-fs error (device loop9): ext4_ext_precache:632: inode #2: comm syz.9.2187: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 150.131735][T14653] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.142290][T14630] EXT4-fs (loop9): Remounting filesystem read-only [ 150.162954][T14653] EXT4-fs (loop3): 1 truncate cleaned up [ 150.169065][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.178719][T14653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.241002][T14653] netlink: 'syz.3.2196': attribute type 3 has an invalid length. [ 150.248751][T14653] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 150.306489][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.401304][T14672] loop9: detected capacity change from 0 to 128 [ 150.410501][T14672] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 150.424691][T14674] FAULT_INJECTION: forcing a failure. [ 150.424691][T14674] name failslab, interval 1, probability 0, space 0, times 0 [ 150.437396][T14674] CPU: 0 UID: 0 PID: 14674 Comm: syz.7.2202 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.437429][T14674] Tainted: [W]=WARN [ 150.437437][T14674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.437449][T14674] Call Trace: [ 150.437455][T14674] [ 150.437517][T14674] __dump_stack+0x1d/0x30 [ 150.437544][T14674] dump_stack_lvl+0x95/0xd0 [ 150.437620][T14674] dump_stack+0x15/0x1b [ 150.437638][T14674] should_fail_ex+0x263/0x280 [ 150.437670][T14674] should_failslab+0x8c/0xb0 [ 150.437697][T14674] kmem_cache_alloc_noprof+0x68/0x490 [ 150.437758][T14674] ? skb_clone+0x151/0x1f0 [ 150.437780][T14674] skb_clone+0x151/0x1f0 [ 150.437801][T14674] __netlink_deliver_tap+0x2c9/0x500 [ 150.437887][T14674] netlink_unicast+0x66b/0x690 [ 150.437982][T14674] netlink_sendmsg+0x5c8/0x6f0 [ 150.438005][T14674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.438023][T14674] ____sys_sendmsg+0x5af/0x600 [ 150.438079][T14674] ___sys_sendmsg+0x195/0x1e0 [ 150.438108][T14674] __x64_sys_sendmsg+0xd4/0x160 [ 150.438129][T14674] x64_sys_call+0x17ba/0x3000 [ 150.438157][T14674] do_syscall_64+0xc0/0x2a0 [ 150.438185][T14674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.438203][T14674] RIP: 0033:0x7fe049f6aeb9 [ 150.438218][T14674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.438302][T14674] RSP: 002b:00007fe0489c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.438321][T14674] RAX: ffffffffffffffda RBX: 00007fe04a1e5fa0 RCX: 00007fe049f6aeb9 [ 150.438334][T14674] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 150.438346][T14674] RBP: 00007fe0489c7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.438358][T14674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.438387][T14674] R13: 00007fe04a1e6038 R14: 00007fe04a1e5fa0 R15: 00007ffd3e504558 [ 150.438404][T14674] [ 150.710877][T14689] loop9: detected capacity change from 0 to 2048 [ 150.717510][T14689] EXT4-fs: Ignoring removed oldalloc option [ 150.733201][T14689] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 150.741493][T14689] System zones: 0-7 [ 150.745740][T14689] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.758778][T14689] EXT4-fs error (device loop9): ext4_ext_precache:632: inode #2: comm syz.9.2207: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 150.776913][T14689] EXT4-fs (loop9): Remounting filesystem read-only [ 150.791638][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.818285][T14695] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 150.830079][T14695] batman_adv: batadv0: Adding interface: ip6gretap1 [ 150.836708][T14695] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.862906][T14695] batman_adv: batadv0: Interface activated: ip6gretap1 [ 150.908191][T14698] loop9: detected capacity change from 0 to 512 [ 150.927104][T14702] loop5: detected capacity change from 0 to 512 [ 150.937270][T14698] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 150.952624][T14702] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 150.972544][T14702] EXT4-fs (loop5): 1 truncate cleaned up [ 150.978689][T14702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.005537][T14702] C: renamed from team_slave_0 [ 151.012125][T14702] netlink: 'syz.5.2211': attribute type 3 has an invalid length. [ 151.020503][T14702] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 151.072493][ T5075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.591150][T14722] loop3: detected capacity change from 0 to 2048 [ 151.597934][T14722] EXT4-fs: Ignoring removed oldalloc option [ 151.611183][T14722] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 151.619454][T14722] System zones: 0-7 [ 151.625915][T14722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.643869][T14722] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.2218: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 151.665254][T14722] EXT4-fs (loop3): Remounting filesystem read-only [ 151.682883][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.775829][T14731] lo speed is unknown, defaulting to 1000 [ 152.022646][T14731] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14731 comm=syz.7.2221 [ 152.105126][T14757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14757 comm=syz.3.2227 [ 152.119780][T14762] loop9: detected capacity change from 0 to 128 [ 152.134108][T14762] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.151037][T14764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.190017][T14757] netlink: 'syz.3.2227': attribute type 2 has an invalid length. [ 152.197806][T14757] __nla_validate_parse: 31 callbacks suppressed [ 152.197822][T14757] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2227'. [ 152.198556][T14764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.209368][T14757] IPv6: A: Disabled Multicast RS [ 152.221710][T14762] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.287695][T14754] xt_TCPMSS: Only works on TCP SYN packets [ 152.312187][T14769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.324847][T14769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.342949][T14771] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 152.354984][ T9396] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.838240][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2236'. [ 152.906327][T14790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.915501][T14790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.928288][ T3585] kernel write not supported for file bpf-prog (pid: 3585 comm: kworker/1:5) [ 152.962612][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 152.962628][ T29] audit: type=1326 audit(1803774314.969:28987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.1.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ceb9aeb9 code=0x7ffc0000 [ 152.992558][ T29] audit: type=1326 audit(1803774314.969:28988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.1.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ceb9aeb9 code=0x7ffc0000 [ 153.016804][ T29] audit: type=1326 audit(1803774314.969:28989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.1.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f12ceb9aeb9 code=0x7ffc0000 [ 153.040545][ T29] audit: type=1326 audit(1803774314.969:28990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.1.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ceb9aeb9 code=0x7ffc0000 [ 153.064468][ T29] audit: type=1326 audit(1803774314.969:28991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.1.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ceb9aeb9 code=0x7ffc0000 [ 153.089078][ T29] audit: type=1400 audit(1803774315.049:28992): avc: denied { append } for pid=14788 comm="syz.7.2240" name="mISDNtimer" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.118031][T14796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2242'. [ 153.127210][T14796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2242'. [ 153.136183][T14796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2242'. [ 153.145758][T14796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2242'. [ 153.196495][ T29] audit: type=1400 audit(1803774315.199:28993): avc: denied { audit_write } for pid=14797 comm="syz.3.2243" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 153.249597][ T29] audit: type=1400 audit(1803774315.249:28994): avc: denied { unmount } for pid=9396 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.282977][T14806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2244'. [ 153.318738][ T29] audit: type=1326 audit(1803774315.309:28995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.9.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56eeaaeb9 code=0x7ffc0000 [ 153.343045][ T29] audit: type=1326 audit(1803774315.309:28996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14807 comm="syz.9.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56eeaaeb9 code=0x7ffc0000 [ 153.368579][T14811] FAULT_INJECTION: forcing a failure. [ 153.368579][T14811] name failslab, interval 1, probability 0, space 0, times 0 [ 153.381318][T14811] CPU: 1 UID: 0 PID: 14811 Comm: syz.3.2247 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.381410][T14811] Tainted: [W]=WARN [ 153.381417][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.381428][T14811] Call Trace: [ 153.381435][T14811] [ 153.381443][T14811] __dump_stack+0x1d/0x30 [ 153.381496][T14811] dump_stack_lvl+0x95/0xd0 [ 153.381515][T14811] dump_stack+0x15/0x1b [ 153.381533][T14811] should_fail_ex+0x263/0x280 [ 153.381617][T14811] should_failslab+0x8c/0xb0 [ 153.381638][T14811] kmem_cache_alloc_noprof+0x68/0x490 [ 153.381721][T14811] ? audit_log_start+0x34c/0x730 [ 153.381747][T14811] audit_log_start+0x34c/0x730 [ 153.381815][T14811] ? kstrtouint+0x76/0xc0 [ 153.381839][T14811] audit_seccomp+0x47/0x100 [ 153.381912][T14811] ? __seccomp_filter+0x8db/0x1350 [ 153.381936][T14811] __seccomp_filter+0x8ec/0x1350 [ 153.381988][T14811] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 153.382045][T14811] ? vfs_write+0x86e/0x9f0 [ 153.382063][T14811] ? __rcu_read_unlock+0x4e/0x70 [ 153.382227][T14811] ? __fget_files+0x184/0x1c0 [ 153.382250][T14811] __secure_computing+0x81/0x150 [ 153.382268][T14811] syscall_trace_enter+0xce/0x1e0 [ 153.382304][T14811] do_syscall_64+0x9a/0x2a0 [ 153.382403][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.382423][T14811] RIP: 0033:0x7f67b0d8aeb9 [ 153.382438][T14811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.382455][T14811] RSP: 002b:00007f67af7c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 153.382525][T14811] RAX: ffffffffffffffda RBX: 00007f67b1006090 RCX: 00007f67b0d8aeb9 [ 153.382689][T14811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.382701][T14811] RBP: 00007f67af7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.382713][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.382725][T14811] R13: 00007f67b1006128 R14: 00007f67b1006090 R15: 00007ffd58946938 [ 153.382743][T14811] [ 153.670364][T14819] EXT4-fs: Ignoring removed oldalloc option [ 153.750104][ T9940] usb 15-1: enqueue for inactive port 0 [ 153.755698][ T9940] usb 15-1: enqueue for inactive port 0 [ 153.790673][T14819] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 153.798986][T14819] System zones: 0-7 [ 153.808739][T14819] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.829156][T14819] EXT4-fs error (device loop9): ext4_ext_precache:632: inode #2: comm syz.9.2251: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 153.847043][T14819] EXT4-fs (loop9): Remounting filesystem read-only [ 153.859787][ T9940] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 154.574408][T14847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2258'. [ 154.891194][T14854] set_capacity_and_notify: 4 callbacks suppressed [ 154.891211][T14854] loop7: detected capacity change from 0 to 1024 [ 154.952696][T14856] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2262'. [ 154.961839][T14856] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2262'. [ 155.582571][T14866] FAULT_INJECTION: forcing a failure. [ 155.582571][T14866] name failslab, interval 1, probability 0, space 0, times 0 [ 155.595292][T14866] CPU: 0 UID: 0 PID: 14866 Comm: syz.3.2265 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 155.595323][T14866] Tainted: [W]=WARN [ 155.595329][T14866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.595341][T14866] Call Trace: [ 155.595348][T14866] [ 155.595356][T14866] __dump_stack+0x1d/0x30 [ 155.595379][T14866] dump_stack_lvl+0x95/0xd0 [ 155.595438][T14866] dump_stack+0x15/0x1b [ 155.595449][T14866] should_fail_ex+0x263/0x280 [ 155.595493][T14866] should_failslab+0x8c/0xb0 [ 155.595507][T14866] __kmalloc_noprof+0xb8/0x580 [ 155.595522][T14866] ? security_bpf_prog_load+0x60/0x140 [ 155.595543][T14866] ? should_fail_usercopy+0x1a/0x20 [ 155.595562][T14866] ? strncpy_from_user+0x13a/0x250 [ 155.595577][T14866] security_bpf_prog_load+0x60/0x140 [ 155.595668][T14866] bpf_prog_load+0xf00/0x1140 [ 155.595689][T14866] ? security_bpf+0x2b/0x90 [ 155.595775][T14866] __sys_bpf+0x469/0x7b0 [ 155.595794][T14866] __x64_sys_bpf+0x41/0x50 [ 155.595808][T14866] x64_sys_call+0x28e1/0x3000 [ 155.595868][T14866] do_syscall_64+0xc0/0x2a0 [ 155.595887][T14866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.595901][T14866] RIP: 0033:0x7f67b0d8aeb9 [ 155.595911][T14866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.595922][T14866] RSP: 002b:00007f67af7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.595996][T14866] RAX: ffffffffffffffda RBX: 00007f67b1005fa0 RCX: 00007f67b0d8aeb9 [ 155.596004][T14866] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 155.596012][T14866] RBP: 00007f67af7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 155.596020][T14866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.596027][T14866] R13: 00007f67b1006038 R14: 00007f67b1005fa0 R15: 00007ffd58946938 [ 155.596102][T14866] [ 155.940128][T14870] loop3: detected capacity change from 0 to 512 [ 155.946762][T14870] EXT4-fs: inline encryption not supported [ 155.955355][T14870] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2267: bad orphan inode 15 [ 155.966056][T14870] ext4_test_bit(bit=14, block=5) = 0 [ 155.971835][T14870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.985279][T14870] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 156.000233][T14870] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.2267: bit already cleared for inode 13 [ 156.022100][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.637404][T14817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.686671][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.802767][T14898] FAULT_INJECTION: forcing a failure. [ 156.802767][T14898] name failslab, interval 1, probability 0, space 0, times 0 [ 156.816377][T14898] CPU: 0 UID: 0 PID: 14898 Comm: syz.9.2277 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.816414][T14898] Tainted: [W]=WARN [ 156.816422][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.816436][T14898] Call Trace: [ 156.816448][T14898] [ 156.816458][T14898] __dump_stack+0x1d/0x30 [ 156.816485][T14898] dump_stack_lvl+0x95/0xd0 [ 156.816510][T14898] dump_stack+0x15/0x1b [ 156.816532][T14898] should_fail_ex+0x263/0x280 [ 156.816592][T14898] should_failslab+0x8c/0xb0 [ 156.816682][T14898] __kmalloc_cache_noprof+0x64/0x4a0 [ 156.816717][T14898] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 156.816751][T14898] ? sctp_stream_interleave_init+0x47/0x60 [ 156.816781][T14898] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 156.816909][T14898] sctp_association_new+0xde5/0x1190 [ 156.816979][T14898] sctp_connect_new_asoc+0x1a8/0x3a0 [ 156.817036][T14898] sctp_sendmsg+0xfff/0x1d60 [ 156.817062][T14898] ? selinux_socket_sendmsg+0x192/0x1c0 [ 156.817166][T14898] ? __pfx_sctp_sendmsg+0x10/0x10 [ 156.817189][T14898] inet_sendmsg+0xc5/0xd0 [ 156.817290][T14898] __sys_sendto+0x3f4/0x4d0 [ 156.817341][T14898] __x64_sys_sendto+0x76/0x90 [ 156.817376][T14898] x64_sys_call+0x29a7/0x3000 [ 156.817404][T14898] do_syscall_64+0xc0/0x2a0 [ 156.817467][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.817525][T14898] RIP: 0033:0x7fa56eeaaeb9 [ 156.817544][T14898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.817565][T14898] RSP: 002b:00007fa56d907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 156.817597][T14898] RAX: ffffffffffffffda RBX: 00007fa56f125fa0 RCX: 00007fa56eeaaeb9 [ 156.817614][T14898] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000005 [ 156.817636][T14898] RBP: 00007fa56d907090 R08: 0000200000000140 R09: 000000000000001c [ 156.817653][T14898] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 156.817713][T14898] R13: 00007fa56f126038 R14: 00007fa56f125fa0 R15: 00007fff27575158 [ 156.817737][T14898] [ 157.197933][T14917] loop3: detected capacity change from 0 to 2048 [ 157.213502][T14920] loop9: detected capacity change from 0 to 512 [ 157.220789][T14920] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.252369][T14920] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 157.260604][T14917] EXT4-fs: Ignoring removed oldalloc option [ 157.266705][T14920] EXT4-fs (loop9): orphan cleanup on readonly fs [ 157.280095][T14920] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 157.299644][T14920] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 157.307535][T14920] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 157.322378][T14920] EXT4-fs (loop9): Remounting filesystem read-only [ 157.322716][T14917] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 157.328907][T14920] EXT4-fs (loop9): 1 truncate cleaned up [ 157.342721][T14917] System zones: 0-7 [ 157.347078][T14917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.471152][T14920] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.478101][T14917] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.2285: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 157.496552][T14920] __nla_validate_parse: 11 callbacks suppressed [ 157.496642][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2286'. [ 157.602260][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.645489][T14917] EXT4-fs (loop3): Remounting filesystem read-only [ 157.680769][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.696099][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2290'. [ 157.699767][ T3406] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 157.705166][T14936] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2290'. [ 157.721465][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2290'. [ 157.733681][ T3406] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.739645][T14936] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2290'. [ 157.821674][T14943] fido_id[14943]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 157.829803][T14948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.871251][T14949] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2292'. [ 157.897760][T14953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.915464][T14953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.930122][T14949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2292'. [ 157.939184][T14949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2292'. [ 157.948066][T14948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.948164][T14949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2292'. [ 157.977356][T14948] FAULT_INJECTION: forcing a failure. [ 157.977356][T14948] name failslab, interval 1, probability 0, space 0, times 0 [ 157.983432][T14949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2292'. [ 157.990759][T14948] CPU: 0 UID: 0 PID: 14948 Comm: syz.7.2294 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 157.990792][T14948] Tainted: [W]=WARN [ 157.990799][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.990811][T14948] Call Trace: [ 157.990818][T14948] [ 157.990827][T14948] __dump_stack+0x1d/0x30 [ 157.990893][T14948] dump_stack_lvl+0x95/0xd0 [ 157.990965][T14948] dump_stack+0x15/0x1b [ 157.991018][T14948] should_fail_ex+0x263/0x280 [ 157.991112][T14948] should_failslab+0x8c/0xb0 [ 157.991137][T14948] __kmalloc_cache_noprof+0x64/0x4a0 [ 157.991208][T14948] ? alloc_pipe_info+0xad/0x340 [ 157.991241][T14948] alloc_pipe_info+0xad/0x340 [ 157.991334][T14948] splice_direct_to_actor+0x591/0x670 [ 157.991357][T14948] ? __pfx_direct_splice_actor+0x10/0x10 [ 157.991380][T14948] ? selinux_file_permission+0x633/0x690 [ 157.991412][T14948] do_splice_direct+0x119/0x1a0 [ 157.991433][T14948] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 157.991497][T14948] do_sendfile+0x382/0x650 [ 157.991595][T14948] __x64_sys_sendfile64+0x105/0x150 [ 157.991623][T14948] x64_sys_call+0x2db1/0x3000 [ 157.991740][T14948] do_syscall_64+0xc0/0x2a0 [ 157.991773][T14948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.991795][T14948] RIP: 0033:0x7fe049f6aeb9 [ 157.991855][T14948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.991873][T14948] RSP: 002b:00007fe0489c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.991935][T14948] RAX: ffffffffffffffda RBX: 00007fe04a1e5fa0 RCX: 00007fe049f6aeb9 [ 157.991950][T14948] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000e [ 157.991963][T14948] RBP: 00007fe0489c7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.991978][T14948] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.991992][T14948] R13: 00007fe04a1e6038 R14: 00007fe04a1e5fa0 R15: 00007ffd3e504558 [ 157.992068][T14948] [ 158.359252][T14965] loop5: detected capacity change from 0 to 256 [ 158.377045][T14965] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.395956][T14965] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.514466][T14967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.551096][T14967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.570784][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 158.570799][ T29] audit: type=1400 audit(1803774320.579:29140): avc: denied { ioctl } for pid=14966 comm="syz.9.2301" path="socket:[33891]" dev="sockfs" ino=33891 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 158.645933][ T29] audit: type=1326 audit(1803774320.649:29141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.5.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0affaeb9 code=0x7ffc0000 [ 158.777542][T14985] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14985 comm=syz.5.2306 [ 158.966404][ T29] audit: type=1400 audit(1803774320.969:29142): avc: denied { ioctl } for pid=14996 comm="syz.3.2311" path="socket:[33942]" dev="sockfs" ino=33942 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.179043][T15012] netlink: 'syz.9.2318': attribute type 1 has an invalid length. [ 159.198581][T15013] bond2 (unregistering): Released all slaves [ 159.202992][T15016] FAULT_INJECTION: forcing a failure. [ 159.202992][T15016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.217704][T15016] CPU: 1 UID: 0 PID: 15016 Comm: syz.3.2317 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.217799][T15016] Tainted: [W]=WARN [ 159.217848][T15016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.217860][T15016] Call Trace: [ 159.217867][T15016] [ 159.217875][T15016] __dump_stack+0x1d/0x30 [ 159.217926][T15016] dump_stack_lvl+0x95/0xd0 [ 159.217950][T15016] dump_stack+0x15/0x1b [ 159.217973][T15016] should_fail_ex+0x263/0x280 [ 159.218012][T15016] should_fail+0xb/0x20 [ 159.218037][T15016] should_fail_usercopy+0x1a/0x20 [ 159.218074][T15016] _copy_from_user+0x1c/0xb0 [ 159.218131][T15016] ucma_write+0xd8/0x260 [ 159.218163][T15016] ? __pfx_ucma_write+0x10/0x10 [ 159.218225][T15016] vfs_write+0x269/0x9f0 [ 159.218242][T15016] ? __rcu_read_unlock+0x4e/0x70 [ 159.218268][T15016] ? __fget_files+0x184/0x1c0 [ 159.218294][T15016] ksys_write+0xdc/0x1a0 [ 159.218411][T15016] __x64_sys_write+0x40/0x50 [ 159.218434][T15016] x64_sys_call+0x2847/0x3000 [ 159.218458][T15016] do_syscall_64+0xc0/0x2a0 [ 159.218489][T15016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.218553][T15016] RIP: 0033:0x7f67b0d8aeb9 [ 159.218610][T15016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.218668][T15016] RSP: 002b:00007f67af7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.218690][T15016] RAX: ffffffffffffffda RBX: 00007f67b1005fa0 RCX: 00007f67b0d8aeb9 [ 159.218703][T15016] RDX: 0000000000000118 RSI: 0000200000000140 RDI: 0000000000000003 [ 159.218716][T15016] RBP: 00007f67af7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.218766][T15016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.218780][T15016] R13: 00007f67b1006038 R14: 00007f67b1005fa0 R15: 00007ffd58946938 [ 159.218803][T15016] [ 159.605303][ T29] audit: type=1400 audit(1803774321.609:29143): avc: denied { create } for pid=15020 comm="syz.3.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 159.625355][T15028] delete_channel: no stack [ 159.636160][T15031] loop7: detected capacity change from 0 to 1024 [ 159.639812][T15028] delete_channel: no stack [ 159.768292][ T29] audit: type=1400 audit(1803774321.769:29144): avc: denied { write } for pid=15036 comm="syz.9.2326" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 159.791816][T15035] lo speed is unknown, defaulting to 1000 [ 159.814525][T15037] loop9: detected capacity change from 0 to 512 [ 159.829625][ T29] audit: type=1400 audit(1803774321.819:29145): avc: denied { setopt } for pid=15039 comm="syz.7.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.891210][T15037] EXT4-fs (loop9): 1 truncate cleaned up [ 159.899914][T15037] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.003574][T15050] loop5: detected capacity change from 0 to 2048 [ 160.048345][T15050] EXT4-fs: Ignoring removed oldalloc option [ 160.098017][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.120442][T15050] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 160.137499][T15050] System zones: 0-7 [ 160.163877][T15050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.202163][T15056] loop9: detected capacity change from 0 to 512 [ 160.256506][T15050] EXT4-fs error (device loop5): ext4_ext_precache:632: inode #2: comm syz.5.2329: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 160.293828][T15056] ext4: Unknown parameter 'nouser_xattr.journal_async_commit' [ 160.311164][T15050] EXT4-fs (loop5): Remounting filesystem read-only [ 160.350720][T15056] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 160.368147][ T5075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.419709][ T3406] IPVS: starting estimator thread 0... [ 160.446306][ T29] audit: type=1400 audit(1803774322.449:29146): avc: denied { write } for pid=15069 comm="syz.5.2335" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 160.528499][T15067] IPVS: using max 2160 ests per chain, 108000 per kthread [ 160.538453][ T4115] bond0 (unregistering): Released all slaves [ 160.566602][T15074] loop9: detected capacity change from 0 to 128 [ 160.581797][T15076] loop5: detected capacity change from 0 to 512 [ 160.658536][T15074] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.677900][ T4115] IPVS: stop unused estimator thread 0... [ 160.778962][T15074] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.867200][ T29] audit: type=1400 audit(1803774322.869:29147): avc: denied { add_name } for pid=15073 comm="syz.9.2338" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 160.931481][ T9396] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.039588][ T29] audit: type=1400 audit(1803774322.869:29148): avc: denied { create } for pid=15073 comm="syz.9.2338" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 161.082311][ T29] audit: type=1400 audit(1803774322.869:29149): avc: denied { remove_name } for pid=15073 comm="syz.9.2338" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 161.192651][T15077] netlink: 'syz.1.2336': attribute type 3 has an invalid length. [ 161.562699][T15109] loop3: detected capacity change from 0 to 512 [ 161.577989][T15109] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.650862][T15109] EXT4-fs (loop3): 1 truncate cleaned up [ 161.659238][T15109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.687102][T15108] netlink: 'syz.3.2349': attribute type 3 has an invalid length. [ 161.695035][T15108] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 161.790179][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.820434][T15123] pim6reg: entered allmulticast mode [ 161.980533][T15140] loop7: detected capacity change from 0 to 512 [ 161.981916][T15141] netlink: zone id is out of range [ 161.991963][T15141] netlink: zone id is out of range [ 162.003508][T15140] ext4: Unknown parameter '@' [ 162.040176][ T4115] bond0 (unregistering): left promiscuous mode [ 162.046359][ T4115] bond_slave_0: left promiscuous mode [ 162.052016][ T4115] bond_slave_1: left promiscuous mode [ 162.069661][T15141] netlink: zone id is out of range [ 162.074819][T15141] netlink: zone id is out of range [ 162.085109][ T4115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.095861][T15141] netlink: zone id is out of range [ 162.103702][ T4115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.114606][ T4115] bond0 (unregistering): Released all slaves [ 162.127245][ T4115] bond1 (unregistering): Released all slaves [ 162.137324][T15141] netlink: zone id is out of range [ 162.142537][T15141] netlink: zone id is out of range [ 162.147751][T15141] netlink: zone id is out of range [ 162.153162][T15141] netlink: zone id is out of range [ 162.195138][T15112] lo speed is unknown, defaulting to 1000 [ 162.252123][T15160] loop7: detected capacity change from 0 to 128 [ 162.275650][ T4115] dummy0: left promiscuous mode [ 162.283627][ T4115] hsr_slave_0: left promiscuous mode [ 162.302412][ T4115] hsr_slave_1: left promiscuous mode [ 162.308286][ T4115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.330043][ T4115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.368257][ T4115] team0 (unregistering): Port device team_slave_1 removed [ 162.378382][ T4115] team0 (unregistering): Port device C removed [ 162.429995][T15164] netlink: 'syz.1.2363': attribute type 3 has an invalid length. [ 162.502549][T15175] syz_tun: entered allmulticast mode [ 162.519836][T15174] syz_tun: left allmulticast mode [ 162.568016][T15112] chnl_net:caif_netlink_parms(): no params data found [ 162.599428][T15194] __nla_validate_parse: 19 callbacks suppressed [ 162.599444][T15194] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2367'. [ 162.677849][T15192] loop9: detected capacity change from 0 to 2048 [ 162.694293][T15192] EXT4-fs: Ignoring removed oldalloc option [ 162.695009][T15112] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.707304][T15112] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.736117][T15112] bridge_slave_0: entered allmulticast mode [ 162.744833][T15112] bridge_slave_0: entered promiscuous mode [ 162.751971][T15112] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.759134][T15112] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.769151][T15192] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 162.783630][T15112] bridge_slave_1: entered allmulticast mode [ 162.789635][T15192] System zones: 0-7 [ 162.790662][T15112] bridge_slave_1: entered promiscuous mode [ 162.800931][T15192] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.801238][ T4115] IPVS: stop unused estimator thread 0... [ 162.830345][T15112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.850415][T15112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.874866][T15112] team0: Port device team_slave_0 added [ 162.881475][T15112] team0: Port device team_slave_1 added [ 162.889282][T15192] EXT4-fs error (device loop9): ext4_ext_precache:632: inode #2: comm syz.9.2368: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 162.907061][T15112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.907113][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.907217][T15112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.907788][T15112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.957852][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.972952][T15192] EXT4-fs (loop9): Remounting filesystem read-only [ 162.983899][T15112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.026056][T15112] hsr_slave_0: entered promiscuous mode [ 163.038924][T15112] hsr_slave_1: entered promiscuous mode [ 163.047495][T15112] debugfs: 'hsr0' already exists in 'hsr' [ 163.053349][T15112] Cannot create hsr debugfs directory [ 163.060874][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.384130][T15112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.422613][T15112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.442173][T15112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.504837][T15112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.511512][T15276] FAULT_INJECTION: forcing a failure. [ 163.511512][T15276] name failslab, interval 1, probability 0, space 0, times 0 [ 163.524267][T15276] CPU: 0 UID: 0 PID: 15276 Comm: syz.9.2382 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.524310][T15276] Tainted: [W]=WARN [ 163.524318][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.524332][T15276] Call Trace: [ 163.524339][T15276] [ 163.524347][T15276] __dump_stack+0x1d/0x30 [ 163.524381][T15276] dump_stack_lvl+0x95/0xd0 [ 163.524405][T15276] dump_stack+0x15/0x1b [ 163.524427][T15276] should_fail_ex+0x263/0x280 [ 163.524481][T15276] should_failslab+0x8c/0xb0 [ 163.524506][T15276] kmem_cache_alloc_noprof+0x68/0x490 [ 163.524600][T15276] ? security_inode_alloc+0x37/0x100 [ 163.524699][T15276] security_inode_alloc+0x37/0x100 [ 163.524733][T15276] inode_init_always_gfp+0x4b7/0x500 [ 163.524835][T15276] ? __pfx_sock_alloc_inode+0x10/0x10 [ 163.524949][T15276] alloc_inode+0x58/0x170 [ 163.524972][T15276] do_accept+0xa0/0x390 [ 163.525002][T15276] ? _raw_spin_lock+0x52/0xa0 [ 163.525098][T15276] __sys_accept4+0xbe/0x170 [ 163.525131][T15276] __x64_sys_accept+0x42/0x50 [ 163.525162][T15276] x64_sys_call+0x2215/0x3000 [ 163.525198][T15276] do_syscall_64+0xc0/0x2a0 [ 163.525231][T15276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.525252][T15276] RIP: 0033:0x7fa56eeaaeb9 [ 163.525267][T15276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.525287][T15276] RSP: 002b:00007fa56d907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 163.525349][T15276] RAX: ffffffffffffffda RBX: 00007fa56f125fa0 RCX: 00007fa56eeaaeb9 [ 163.525365][T15276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 163.525380][T15276] RBP: 00007fa56d907090 R08: 0000000000000000 R09: 0000000000000000 [ 163.525395][T15276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.525410][T15276] R13: 00007fa56f126038 R14: 00007fa56f125fa0 R15: 00007fff27575158 [ 163.525432][T15276] [ 163.844661][T15294] loop9: detected capacity change from 0 to 1764 [ 163.846850][T15112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.879158][T15112] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.900334][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.907915][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.954507][ T4115] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.961677][ T4115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.065644][T15112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.076196][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 164.076211][ T29] audit: type=1326 audit(1803774326.069:29197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.9.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56eeaaeb9 code=0x7ffc0000 [ 164.105879][ T29] audit: type=1326 audit(1803774326.069:29198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.9.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56eeaaeb9 code=0x7ffc0000 [ 164.199149][ T29] audit: type=1326 audit(1803774326.139:29199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.9.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa56eeaaeb9 code=0x7ffc0000 [ 164.222907][ T29] audit: type=1326 audit(1803774326.139:29200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.9.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56eeaaeb9 code=0x7ffc0000 [ 164.246561][ T29] audit: type=1326 audit(1803774326.139:29201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.9.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56eeaaeb9 code=0x7ffc0000 [ 164.271192][ T29] audit: type=1326 audit(1803774326.189:29202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.9.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa56eeaaeb9 code=0x7ffc0000 [ 164.294913][ T29] audit: type=1326 audit(1803774326.189:29203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.9.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56eeaaeb9 code=0x7ffc0000 [ 164.318522][ T29] audit: type=1326 audit(1803774326.189:29204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.9.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56eeaaeb9 code=0x7ffc0000 [ 164.326683][T15112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.342176][ T29] audit: type=1326 audit(1803774326.189:29205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.9.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa56eea9d97 code=0x7ffc0000 [ 164.372567][ T29] audit: type=1326 audit(1803774326.189:29206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15293 comm="syz.9.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56eeaaeb9 code=0x7ffc0000 [ 164.550882][T15112] veth0_vlan: entered promiscuous mode [ 164.564393][T15112] veth1_vlan: entered promiscuous mode [ 164.592803][T15112] veth0_macvtap: entered promiscuous mode [ 164.601096][T15112] veth1_macvtap: entered promiscuous mode [ 164.622504][T15112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.631702][T15112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.665966][ T3439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.699855][ T3439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.708686][ T3439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.717490][ T3439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.810117][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2390'. [ 164.952119][T15354] IPv6: sit1: Disabled Multicast RS [ 165.304592][T15432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2407'. [ 165.314412][T15432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2407'. [ 165.323736][T15432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2407'. [ 165.336544][T15434] can: request_module (can-proto-0) failed. [ 165.339118][T15432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2407'. [ 165.377250][T15434] wireguard0: entered promiscuous mode [ 165.383228][T15434] wireguard0: entered allmulticast mode [ 165.628392][T15476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15476 comm=syz.1.2410 [ 165.643518][T15476] netlink: 'syz.1.2410': attribute type 2 has an invalid length. [ 165.651489][T15476] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.2410'. [ 165.652123][T15463] loop3: detected capacity change from 0 to 136 [ 165.711296][T15483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2412'. [ 165.731350][T15482] cgroup: Unexpected value for 'nofavordynmods' [ 165.814654][T15501] loop0: detected capacity change from 0 to 128 [ 165.846426][T15501] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.885877][T15515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2419'. [ 165.940273][ T3439] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.983591][T15533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15533 comm=syz.9.2424 [ 166.020453][T15533] netlink: 'syz.9.2424': attribute type 2 has an invalid length. [ 166.028233][T15533] netlink: 199848 bytes leftover after parsing attributes in process `syz.9.2424'. [ 166.165995][T15557] futex_wake_op: syz.1.2430 tries to shift op by 144; fix this program [ 166.220204][T15563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15563 comm=syz.1.2431 [ 166.283278][T15563] netlink: 'syz.1.2431': attribute type 2 has an invalid length. [ 166.317115][T15573] loop3: detected capacity change from 0 to 4096 [ 166.349421][T15573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.475059][T15598] loop0: detected capacity change from 0 to 512 [ 166.487679][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.541266][T15598] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 166.970150][T15663] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.994598][T15663] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 167.266495][T15684] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 167.352187][T15691] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 167.393057][T15694] tipc: Enabling of bearer rejected, failed to enable media [ 167.970815][T15728] FAULT_INJECTION: forcing a failure. [ 167.970815][T15728] name failslab, interval 1, probability 0, space 0, times 0 [ 167.983737][T15728] CPU: 0 UID: 0 PID: 15728 Comm: syz.3.2478 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.983771][T15728] Tainted: [W]=WARN [ 167.983779][T15728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.983871][T15728] Call Trace: [ 167.983933][T15728] [ 167.983941][T15728] __dump_stack+0x1d/0x30 [ 167.983968][T15728] dump_stack_lvl+0x95/0xd0 [ 167.984037][T15728] dump_stack+0x15/0x1b [ 167.984059][T15728] should_fail_ex+0x263/0x280 [ 167.984093][T15728] should_failslab+0x8c/0xb0 [ 167.984119][T15728] kmem_cache_alloc_noprof+0x68/0x490 [ 167.984160][T15728] ? taskstats_exit+0x297/0x6a0 [ 167.984184][T15728] ? seccomp_filter_release+0x1b0/0x220 [ 167.984208][T15728] taskstats_exit+0x297/0x6a0 [ 167.984231][T15728] ? acct_update_integrals+0x183/0x1a0 [ 167.984272][T15728] do_exit+0x3d7/0x1590 [ 167.984300][T15728] do_group_exit+0x138/0x140 [ 167.984351][T15728] __x64_sys_exit_group+0x1f/0x20 [ 167.984372][T15728] x64_sys_call+0x2fff/0x3000 [ 167.984394][T15728] do_syscall_64+0xc0/0x2a0 [ 167.984429][T15728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.984502][T15728] RIP: 0033:0x7f67b0d8aeb9 [ 167.984516][T15728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.984536][T15728] RSP: 002b:00007f67af7e6f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 167.984559][T15728] RAX: ffffffffffffffda RBX: 00007f67b0df8cd0 RCX: 00007f67b0d8aeb9 [ 167.984631][T15728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 167.984643][T15728] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f67b1006038 [ 167.984656][T15728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.984668][T15728] R13: 00007f67b1006038 R14: 00007f67b1005fa0 R15: 00007ffd58946938 [ 167.984688][T15728] [ 168.388336][T15771] __nla_validate_parse: 24 callbacks suppressed [ 168.388354][T15771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2484'. [ 168.445880][T15779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.455910][T15779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.468910][T15781] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2486'. [ 168.501322][T15779] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2487'. [ 168.518958][T15775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2486'. [ 168.528146][T15775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2486'. [ 168.537147][T15775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2486'. [ 168.562808][T15775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2486'. [ 168.610555][T15791] loop3: detected capacity change from 0 to 512 [ 168.618488][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2494'. [ 168.627907][T15796] netlink: 'syz.7.2494': attribute type 3 has an invalid length. [ 168.627925][T15791] EXT4-fs (loop3): bad s_min_extra_isize: 2304 [ 168.635728][T15796] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2494'. [ 168.651106][T15796] net_ratelimit: 34 callbacks suppressed [ 168.651119][T15796] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 168.694460][T15799] netlink: 'syz.1.2495': attribute type 39 has an invalid length. [ 168.702628][T15799] syz_tun (unregistering): left allmulticast mode [ 168.749970][T15806] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2498'. [ 168.766972][T15808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15808 comm=syz.7.2499 [ 168.909691][T15827] netlink: 'syz.1.2507': attribute type 3 has an invalid length. [ 168.917582][T15827] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 169.106235][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 169.106251][ T29] audit: type=1400 audit(1803774331.109:29414): avc: denied { accept } for pid=15839 comm="syz.1.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.138601][T15854] tipc: Started in network mode [ 169.144310][T15854] tipc: Node identity ac14140f, cluster identity 4711 [ 169.160441][T15857] netlink: 'syz.1.2519': attribute type 4 has an invalid length. [ 169.175769][T15854] tipc: New replicast peer: 255.255.255.255 [ 169.181977][T15854] tipc: Enabled bearer , priority 10 [ 169.188491][T15857] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 169.276554][T15865] chnl_net:caif_netlink_parms(): no params data found [ 169.279820][T15869] loop9: detected capacity change from 0 to 512 [ 169.300296][T15869] EXT4-fs: Ignoring removed nobh option [ 169.310487][T15869] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 169.348182][T15873] loop3: detected capacity change from 0 to 764 [ 169.357875][ T29] audit: type=1400 audit(1803774331.359:29415): avc: denied { setattr } for pid=15874 comm="syz.0.2527" name="secretmem" dev="secretmem" ino=37221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 169.389886][T15869] EXT4-fs (loop9): 1 truncate cleaned up [ 169.396267][T15869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.411549][ T29] audit: type=1400 audit(1803774331.419:29416): avc: denied { rename } for pid=15867 comm="syz.9.2525" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.465683][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.581764][T15902] sctp: [Deprecated]: syz.1.2534 (pid 15902) Use of int in max_burst socket option. [ 169.581764][T15902] Use struct sctp_assoc_value instead [ 169.633097][ T29] audit: type=1400 audit(1803774331.639:29417): avc: denied { unmount } for pid=15899 comm="syz.0.2537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 169.639708][T15907] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.661090][T15907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.668284][T15907] IPv6: NLM_F_CREATE should be set when creating new route [ 169.746474][ T29] audit: type=1400 audit(1803774331.749:29418): avc: denied { cmd } for pid=15910 comm="syz.9.2539" path="socket:[37259]" dev="sockfs" ino=37259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 169.802269][ T29] audit: type=1400 audit(1803774331.809:29419): avc: denied { getopt } for pid=15919 comm="syz.9.2543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 169.804529][T15920] pimreg0: tun_chr_ioctl cmd 1074025672 [ 169.827792][T15920] pimreg0: ignored: set checksum disabled [ 169.873143][T15929] netlink: 'syz.7.2546': attribute type 1 has an invalid length. [ 169.894577][T15929] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.928308][ T29] audit: type=1326 audit(1803774331.929:29420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15933 comm="syz.3.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b0d8aeb9 code=0x7ffc0000 [ 169.952691][ T29] audit: type=1326 audit(1803774331.929:29421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15933 comm="syz.3.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b0d8aeb9 code=0x7ffc0000 [ 169.976474][ T29] audit: type=1326 audit(1803774331.929:29422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15933 comm="syz.3.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f67b0d8aeb9 code=0x7ffc0000 [ 170.000564][ T29] audit: type=1326 audit(1803774331.929:29423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15933 comm="syz.3.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67b0d8aeb9 code=0x7ffc0000 [ 170.159010][T15958] loop3: detected capacity change from 0 to 2048 [ 170.180818][T15958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.200001][T15958] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.212169][T15958] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 16: comm syz.3.2556: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 170.300150][ T9] tipc: Node number set to 2886997007 [ 170.337285][T15961] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 16: comm syz.3.2556: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 170.991231][T16015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.998462][T16015] IPv6: NLM_F_CREATE should be set when creating new route [ 171.005692][T16015] IPv6: NLM_F_CREATE should be set when creating new route [ 171.012967][T16015] IPv6: NLM_F_CREATE should be set when creating new route [ 171.029411][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.118249][T16028] loop9: detected capacity change from 0 to 256 [ 171.433797][T16036] netem: incorrect ge model size [ 171.438789][T16036] netem: change failed [ 171.480256][T16043] loop9: detected capacity change from 0 to 128 [ 171.504490][T16043] FAT-fs (loop9): invalid media value (0x00) [ 171.510605][T16043] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 171.519942][T16043] FAT-fs (loop9): Can't find a valid FAT filesystem [ 171.593510][T16047] loop3: detected capacity change from 0 to 128 [ 171.632680][T16047] debugfs: 'ttyS3' already exists in 'caif_serial' [ 171.851755][T16082] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=16082 comm=syz.7.2592 [ 171.931881][T16092] x_tables: duplicate underflow at hook 2 [ 171.980256][ T5679] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.020931][T16102] FAULT_INJECTION: forcing a failure. [ 172.020931][T16102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.034136][T16102] CPU: 1 UID: 0 PID: 16102 Comm: syz.9.2594 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.034175][T16102] Tainted: [W]=WARN [ 172.034183][T16102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.034197][T16102] Call Trace: [ 172.034205][T16102] [ 172.034214][T16102] __dump_stack+0x1d/0x30 [ 172.034242][T16102] dump_stack_lvl+0x95/0xd0 [ 172.034315][T16102] dump_stack+0x15/0x1b [ 172.034337][T16102] should_fail_ex+0x263/0x280 [ 172.034368][T16102] should_fail+0xb/0x20 [ 172.034415][T16102] should_fail_usercopy+0x1a/0x20 [ 172.034524][T16102] _copy_from_iter+0xcf/0xea0 [ 172.034542][T16102] ? __alloc_skb+0x397/0x4b0 [ 172.034598][T16102] ? __alloc_skb+0x219/0x4b0 [ 172.034629][T16102] netlink_sendmsg+0x4ae/0x6f0 [ 172.034649][T16102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.034680][T16102] ____sys_sendmsg+0x5af/0x600 [ 172.034705][T16102] ___sys_sendmsg+0x195/0x1e0 [ 172.034780][T16102] __x64_sys_sendmsg+0xd4/0x160 [ 172.034806][T16102] x64_sys_call+0x17ba/0x3000 [ 172.034834][T16102] do_syscall_64+0xc0/0x2a0 [ 172.034866][T16102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.034942][T16102] RIP: 0033:0x7fa56eeaaeb9 [ 172.034957][T16102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.034995][T16102] RSP: 002b:00007fa56d907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.035015][T16102] RAX: ffffffffffffffda RBX: 00007fa56f125fa0 RCX: 00007fa56eeaaeb9 [ 172.035028][T16102] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 172.035040][T16102] RBP: 00007fa56d907090 R08: 0000000000000000 R09: 0000000000000000 [ 172.035053][T16102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.035067][T16102] R13: 00007fa56f126038 R14: 00007fa56f125fa0 R15: 00007fff27575158 [ 172.035087][T16102] [ 172.243513][ T5679] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.266972][T16045] chnl_net:caif_netlink_parms(): no params data found [ 172.353166][ T5679] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.417201][ T5679] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.466581][T16045] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.473708][T16045] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.502130][T16045] bridge_slave_0: entered allmulticast mode [ 172.509100][T16045] bridge_slave_0: entered promiscuous mode [ 172.553261][T16045] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.560471][T16045] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.569763][T16137] loop3: detected capacity change from 0 to 512 [ 172.576730][T16045] bridge_slave_1: entered allmulticast mode [ 172.584347][T16045] bridge_slave_1: entered promiscuous mode [ 172.604214][T16137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.618693][T16045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.628196][ T5679] bridge_slave_1: left allmulticast mode [ 172.633885][ T5679] bridge_slave_1: left promiscuous mode [ 172.640070][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.647465][T16137] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.661333][ T5679] bridge_slave_0: left allmulticast mode [ 172.667010][ T5679] bridge_slave_0: left promiscuous mode [ 172.672809][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.714913][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.791757][ T5679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.802008][ T5679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.812676][ T5679] bond0 (unregistering): Released all slaves [ 172.820068][ T5679] bond1 (unregistering): Released all slaves [ 172.829662][T16045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.844069][T16142] SELinux: ebitmap: truncated map [ 172.851418][T16142] SELinux: failed to load policy [ 172.869894][T16142] loop3: detected capacity change from 0 to 512 [ 172.878547][T16045] team0: Port device team_slave_0 added [ 172.887350][ T5679] hsr_slave_0: left promiscuous mode [ 172.897328][T16142] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 172.916493][ T5679] hsr_slave_1: left promiscuous mode [ 172.936511][T16142] EXT4-fs (loop3): 1 truncate cleaned up [ 172.952275][T16142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.972951][T16142] 9p: Bad value for 'rfdno' [ 173.005612][T16045] team0: Port device team_slave_1 added [ 173.032799][ T9516] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.042408][T16045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.049440][T16045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.076019][T16045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.110073][T16045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.117040][T16045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.143710][T16045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.179903][T16045] hsr_slave_0: entered promiscuous mode [ 173.186273][T16045] hsr_slave_1: entered promiscuous mode [ 173.245240][T16183] FAULT_INJECTION: forcing a failure. [ 173.245240][T16183] name failslab, interval 1, probability 0, space 0, times 0 [ 173.258012][T16183] CPU: 0 UID: 0 PID: 16183 Comm: syz.9.2610 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 173.258055][T16183] Tainted: [W]=WARN [ 173.258120][T16183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.258134][T16183] Call Trace: [ 173.258141][T16183] [ 173.258150][T16183] __dump_stack+0x1d/0x30 [ 173.258179][T16183] dump_stack_lvl+0x95/0xd0 [ 173.258203][T16183] dump_stack+0x15/0x1b [ 173.258280][T16183] should_fail_ex+0x263/0x280 [ 173.258310][T16183] should_failslab+0x8c/0xb0 [ 173.258354][T16183] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 173.258379][T16183] ? __alloc_skb+0x2f0/0x4b0 [ 173.258406][T16183] __alloc_skb+0x2f0/0x4b0 [ 173.258436][T16183] ? __alloc_skb+0x219/0x4b0 [ 173.258516][T16183] netlink_alloc_large_skb+0xbf/0xf0 [ 173.258563][T16183] netlink_sendmsg+0x40c/0x6f0 [ 173.258633][T16183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.258655][T16183] ____sys_sendmsg+0x5af/0x600 [ 173.258680][T16183] ___sys_sendmsg+0x195/0x1e0 [ 173.258710][T16183] __x64_sys_sendmsg+0xd4/0x160 [ 173.258748][T16183] x64_sys_call+0x17ba/0x3000 [ 173.258774][T16183] do_syscall_64+0xc0/0x2a0 [ 173.258881][T16183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.258963][T16183] RIP: 0033:0x7fa56eeaaeb9 [ 173.258988][T16183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.259007][T16183] RSP: 002b:00007fa56d907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.259030][T16183] RAX: ffffffffffffffda RBX: 00007fa56f125fa0 RCX: 00007fa56eeaaeb9 [ 173.259046][T16183] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 173.259061][T16183] RBP: 00007fa56d907090 R08: 0000000000000000 R09: 0000000000000000 [ 173.259151][T16183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.259163][T16183] R13: 00007fa56f126038 R14: 00007fa56f125fa0 R15: 00007fff27575158 [ 173.259182][T16183] [ 173.506624][T16178] __nla_validate_parse: 22 callbacks suppressed [ 173.506640][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2609'. [ 173.588885][T16195] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2613'. [ 173.644205][T16200] loop3: detected capacity change from 0 to 1024 [ 173.746168][T16215] loop9: detected capacity change from 0 to 128 [ 173.755217][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2618'. [ 173.786716][T16218] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.843787][T16215] bio_check_eod: 6 callbacks suppressed [ 173.843820][T16215] syz.9.2616: attempt to access beyond end of device [ 173.843820][T16215] loop9: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 173.856819][T16045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.871269][T16215] syz.9.2616: attempt to access beyond end of device [ 173.871269][T16215] loop9: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 173.885038][T16215] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 173.914426][T16218] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.925850][T16215] syz.9.2616: attempt to access beyond end of device [ 173.925850][T16215] loop9: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 173.939508][T16045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.959063][T16045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.992112][T16045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.999428][T16215] syz.9.2616: attempt to access beyond end of device [ 173.999428][T16215] loop9: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 174.013180][T16215] Buffer I/O error on dev loop9, logical block 77, lost async page write [ 174.016740][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2620'. [ 174.031229][T16241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2620'. [ 174.037019][T16215] syz.9.2616: attempt to access beyond end of device [ 174.037019][T16215] loop9: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 174.053885][T16215] Buffer I/O error on dev loop9, logical block 78, lost async page write [ 174.065788][T16215] syz.9.2616: attempt to access beyond end of device [ 174.065788][T16215] loop9: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 174.079606][T16215] Buffer I/O error on dev loop9, logical block 79, lost async page write [ 174.093407][T16215] syz.9.2616: attempt to access beyond end of device [ 174.093407][T16215] loop9: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 174.104010][T16249] loop3: detected capacity change from 0 to 512 [ 174.107224][T16215] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 174.123370][T16215] syz.9.2616: attempt to access beyond end of device [ 174.123370][T16215] loop9: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 174.137227][T16215] Buffer I/O error on dev loop9, logical block 84, lost async page write [ 174.145020][T16249] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 174.146607][T16203] syz.9.2616: attempt to access beyond end of device [ 174.146607][T16203] loop9: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 174.168568][T16203] Buffer I/O error on dev loop9, logical block 77, lost async page write [ 174.178042][T16218] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.227621][T16045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.241459][T16218] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.269593][T16045] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.281170][ T5434] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.288272][ T5434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.314227][ T5434] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.321318][ T5434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.345875][ T4116] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.367731][ T5434] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.408688][ T4115] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.441202][ T4115] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.461103][T16281] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2622'. [ 174.473693][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 174.473708][ T29] audit: type=1400 audit(1803774336.479:29472): avc: denied { listen } for pid=16287 comm="syz.0.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.509937][T16045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.566981][T16295] loop9: detected capacity change from 0 to 2048 [ 174.574413][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2624'. [ 174.585537][T16295] EXT4-fs: quotafile must be on filesystem root [ 174.601380][T16045] veth0_vlan: entered promiscuous mode [ 174.613710][T16045] veth1_vlan: entered promiscuous mode [ 174.642245][T16045] veth0_macvtap: entered promiscuous mode [ 174.662443][T16045] veth1_macvtap: entered promiscuous mode [ 174.674373][T16045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.687914][T16045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.701249][ T5434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.717136][ T5434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.726453][ T5434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.737878][T16311] geneve2: entered promiscuous mode [ 174.743144][T16311] geneve2: entered allmulticast mode [ 174.757181][ T5434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.768749][ T29] audit: type=1400 audit(1803774336.769:29473): avc: denied { mount } for pid=16309 comm="syz.9.2629" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 174.798221][ T29] audit: type=1400 audit(1803774336.779:29474): avc: denied { map } for pid=16309 comm="syz.9.2629" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 174.808230][T16310] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2629'. [ 174.863999][T16318] sctp: [Deprecated]: syz.1.2584 (pid 16318) Use of int in maxseg socket option. [ 174.863999][T16318] Use struct sctp_assoc_value instead [ 174.932868][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2630'. [ 174.943259][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2630'. [ 174.967226][ T29] audit: type=1400 audit(1803774336.969:29475): avc: denied { mount } for pid=16327 comm="syz.9.2630" name="/" dev="hugetlbfs" ino=39307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 175.058195][ T29] audit: type=1400 audit(1803774337.059:29476): avc: denied { mount } for pid=16346 comm="syz.9.2636" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 175.186883][T16357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.204096][T16360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.211549][T16360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.227699][T16360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.235258][T16360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.428228][T16382] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 175.473471][T16384] loop3: detected capacity change from 0 to 2048 [ 175.529484][T16384] loop3: p3 < > p4 < > [ 175.533697][T16384] loop3: partition table partially beyond EOD, truncated [ 175.617539][T16384] loop3: p3 start 4284289 is beyond EOD, truncated [ 176.055507][T16404] FAULT_INJECTION: forcing a failure. [ 176.055507][T16404] name failslab, interval 1, probability 0, space 0, times 0 [ 176.068934][T16404] CPU: 0 UID: 0 PID: 16404 Comm: syz.3.2654 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.069049][T16404] Tainted: [W]=WARN [ 176.069057][T16404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.069070][T16404] Call Trace: [ 176.069076][T16404] [ 176.069084][T16404] __dump_stack+0x1d/0x30 [ 176.069107][T16404] dump_stack_lvl+0x95/0xd0 [ 176.069130][T16404] dump_stack+0x15/0x1b [ 176.069222][T16404] should_fail_ex+0x263/0x280 [ 176.069252][T16404] should_failslab+0x8c/0xb0 [ 176.069273][T16404] __kmalloc_noprof+0xb8/0x580 [ 176.069296][T16404] ? security_prepare_creds+0x52/0x120 [ 176.069377][T16404] security_prepare_creds+0x52/0x120 [ 176.069401][T16404] prepare_creds+0x37e/0x550 [ 176.069485][T16404] copy_creds+0x8f/0x340 [ 176.069565][T16404] ? dup_task_struct+0x60b/0x940 [ 176.069596][T16404] copy_process+0x639/0x1f10 [ 176.069648][T16404] kernel_clone+0x16b/0x5b0 [ 176.069665][T16404] ? vfs_write+0x86e/0x9f0 [ 176.069684][T16404] __x64_sys_clone+0x143/0x180 [ 176.069708][T16404] x64_sys_call+0x12d0/0x3000 [ 176.069766][T16404] do_syscall_64+0xc0/0x2a0 [ 176.069802][T16404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.069826][T16404] RIP: 0033:0x7f67b0d8aeb9 [ 176.069844][T16404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.069862][T16404] RSP: 002b:00007f67af7a4fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 176.069911][T16404] RAX: ffffffffffffffda RBX: 00007f67b1006180 RCX: 00007f67b0d8aeb9 [ 176.069925][T16404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.069940][T16404] RBP: 00007f67af7a5090 R08: 0000000000000000 R09: 0000000000000000 [ 176.069956][T16404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.069968][T16404] R13: 00007f67b1006218 R14: 00007f67b1006180 R15: 00007ffd58946938 [ 176.070065][T16404] [ 176.340310][ T29] audit: type=1400 audit(1803774338.049:29477): avc: denied { ioctl } for pid=16400 comm="syz.0.2655" path="socket:[38370]" dev="sockfs" ino=38370 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.366043][ T29] audit: type=1400 audit(1803774338.049:29478): avc: denied { getopt } for pid=16400 comm="syz.0.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.504721][T16420] loop9: detected capacity change from 0 to 512 [ 176.515239][T16420] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 176.547378][T16420] EXT4-fs (loop9): 1 truncate cleaned up [ 176.559468][T16420] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.586081][T16420] netlink: 'syz.9.2662': attribute type 3 has an invalid length. [ 176.593885][T16420] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 176.621830][ T29] audit: type=1400 audit(1803774338.629:29479): avc: denied { write } for pid=16428 comm="syz.1.2664" path="socket:[39415]" dev="sockfs" ino=39415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 176.722260][ T29] audit: type=1400 audit(1803774338.699:29480): avc: denied { setopt } for pid=16428 comm="syz.1.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 176.749416][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.877058][T16462] loop3: detected capacity change from 0 to 512 [ 176.884291][T16462] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 176.962421][T16463] loop9: detected capacity change from 0 to 8192 [ 176.987294][T16463] vfat: Unknown parameter '¬nJ׍#ÂITf' [ 177.012648][ T29] audit: type=1326 audit(1803774339.019:29481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.9.2667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa56eeaaeb9 code=0x0 [ 177.062002][T16453] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 177.200243][T16485] C: renamed from team_slave_0 (while UP) [ 177.225546][T16485] netlink: 'syz.1.2679': attribute type 3 has an invalid length. [ 177.233451][T16485] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 177.250356][T16497] netlink: 'syz.0.2684': attribute type 4 has an invalid length. [ 177.262968][T16497] netlink: 'syz.0.2684': attribute type 4 has an invalid length. [ 178.390191][T16559] loop3: detected capacity change from 0 to 8192 [ 178.593520][T16620] tipc: Started in network mode [ 178.598496][T16620] tipc: Node identity 8a3ac27fe1d5, cluster identity 4711 [ 178.606456][T16620] tipc: Enabled bearer , priority 0 [ 178.669723][T16620] syzkaller0: entered promiscuous mode [ 178.675251][T16620] syzkaller0: entered allmulticast mode [ 178.699944][T16620] syzkaller0: mtu less than device minimum [ 178.716381][T16619] tipc: Resetting bearer [ 178.741576][T16619] tipc: Disabling bearer [ 178.773240][T16628] __nla_validate_parse: 24 callbacks suppressed [ 178.773257][T16628] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2719'. [ 178.789001][T16628] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2719'. [ 178.797937][T16628] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2719'. [ 178.807309][T16628] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2719'. [ 178.920641][T16640] loop3: detected capacity change from 0 to 128 [ 179.064467][T16650] FAULT_INJECTION: forcing a failure. [ 179.064467][T16650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.077580][T16650] CPU: 1 UID: 0 PID: 16650 Comm: syz.3.2728 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.077681][T16650] Tainted: [W]=WARN [ 179.077687][T16650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.077776][T16650] Call Trace: [ 179.077784][T16650] [ 179.077794][T16650] __dump_stack+0x1d/0x30 [ 179.077819][T16650] dump_stack_lvl+0x95/0xd0 [ 179.077838][T16650] dump_stack+0x15/0x1b [ 179.077856][T16650] should_fail_ex+0x263/0x280 [ 179.077915][T16650] should_fail+0xb/0x20 [ 179.077944][T16650] should_fail_usercopy+0x1a/0x20 [ 179.077977][T16650] _copy_from_user+0x1c/0xb0 [ 179.078023][T16650] ppp_write+0x122/0x320 [ 179.078044][T16650] vfs_writev+0x42b/0x900 [ 179.078094][T16650] ? __pfx_ppp_write+0x10/0x10 [ 179.078123][T16650] __x64_sys_pwritev+0xfd/0x1c0 [ 179.078144][T16650] x64_sys_call+0x161b/0x3000 [ 179.078189][T16650] do_syscall_64+0xc0/0x2a0 [ 179.078253][T16650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.078284][T16650] RIP: 0033:0x7f67b0d8aeb9 [ 179.078302][T16650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.078321][T16650] RSP: 002b:00007f67af7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 179.078375][T16650] RAX: ffffffffffffffda RBX: 00007f67b1005fa0 RCX: 00007f67b0d8aeb9 [ 179.078391][T16650] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000004 [ 179.078405][T16650] RBP: 00007f67af7e7090 R08: 0000000000000004 R09: 0000000000000000 [ 179.078420][T16650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.078434][T16650] R13: 00007f67b1006038 R14: 00007f67b1005fa0 R15: 00007ffd58946938 [ 179.078456][T16650] [ 179.330763][T16664] loop9: detected capacity change from 0 to 512 [ 179.350815][T16664] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 179.361978][T16664] EXT4-fs (loop9): 1 truncate cleaned up [ 179.368084][T16664] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.422398][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2733'. [ 179.469921][T16664] netlink: 'syz.9.2733': attribute type 3 has an invalid length. [ 179.477745][T16664] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2733'. [ 179.486875][T16664] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 179.612933][T16690] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2737'. [ 179.681152][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.755229][T16680] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2737'. [ 179.764288][T16680] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2737'. [ 179.773327][T16680] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2737'. [ 179.787578][T16704] tmpfs: Unknown parameter 'grpquota' [ 180.055961][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 180.055977][ T29] audit: type=1400 audit(1803774342.060:29706): avc: denied { override_creds } for pid=16711 comm="syz.7.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 180.342817][T16734] loop3: detected capacity change from 0 to 128 [ 180.382865][ T3632] ================================================================== [ 180.384332][T16736] loop9: detected capacity change from 0 to 512 [ 180.390978][ T3632] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 180.391008][ T3632] [ 180.391014][ T3632] write to 0xffffea00056c0418 of 8 bytes by task 16734 on cpu 0: [ 180.415552][ T3632] delete_from_page_cache_batch+0x32c/0x740 [ 180.421452][ T3632] truncate_inode_pages_range+0x1fe/0x7e0 [ 180.427444][ T3632] truncate_inode_pages+0x24/0x30 [ 180.432473][ T3632] set_blocksize+0x254/0x310 [ 180.437058][ T3632] sb_set_blocksize+0x93/0x170 [ 180.441815][ T3632] fat_fill_super+0xa4c/0x1ce0 [ 180.446567][ T3632] msdos_fill_super+0x24/0x30 [ 180.451238][ T3632] get_tree_bdev_flags+0x291/0x300 [ 180.456336][ T3632] get_tree_bdev+0x1f/0x30 [ 180.460739][ T3632] msdos_get_tree+0x1c/0x30 [ 180.465237][ T3632] vfs_get_tree+0x57/0x1d0 [ 180.469639][ T3632] do_new_mount+0x288/0x700 [ 180.474135][ T3632] path_mount+0x4d0/0xbc0 [ 180.478448][ T3632] __se_sys_mount+0x28c/0x2e0 [ 180.483127][ T3632] __x64_sys_mount+0x67/0x80 [ 180.487704][ T3632] x64_sys_call+0x2cca/0x3000 [ 180.492375][ T3632] do_syscall_64+0xc0/0x2a0 [ 180.496875][ T3632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.502757][ T3632] [ 180.505066][ T3632] read to 0xffffea00056c0418 of 8 bytes by task 3632 on cpu 1: [ 180.512593][ T3632] folio_mapping+0xa1/0xe0 [ 180.516997][ T3632] lru_add+0x8d/0x480 [ 180.520968][ T3632] folio_batch_move_lru+0x1c5/0x270 [ 180.526159][ T3632] lru_add_drain_cpu+0x66/0x210 [ 180.531000][ T3632] __folio_batch_release+0x44/0xb0 [ 180.536108][ T3632] shmem_undo_range+0x32f/0xad0 [ 180.540949][ T3632] shmem_evict_inode+0x12e/0x510 [ 180.545882][ T3632] evict+0x2af/0x510 [ 180.549769][ T3632] iput+0x4b9/0x650 [ 180.553597][ T3632] dentry_unlink_inode+0x24f/0x260 [ 180.558701][ T3632] __dentry_kill+0x13f/0x460 [ 180.563287][ T3632] finish_dput+0x2b/0x200 [ 180.567607][ T3632] dput+0x52/0x60 [ 180.571315][ T3632] do_renameat2+0x475/0x850 [ 180.575810][ T3632] __x64_sys_rename+0x58/0x70 [ 180.580476][ T3632] x64_sys_call+0x24e/0x3000 [ 180.585074][ T3632] do_syscall_64+0xc0/0x2a0 [ 180.589570][ T3632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.595450][ T3632] [ 180.597752][ T3632] value changed: 0xffff8881005f0520 -> 0x0000000000000000 [ 180.604846][ T3632] [ 180.607152][ T3632] Reported by Kernel Concurrency Sanitizer on: [ 180.613309][ T3632] CPU: 1 UID: 0 PID: 3632 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.624148][ T3632] Tainted: [W]=WARN [ 180.627931][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.637978][ T3632] ================================================================== [ 180.676291][T16736] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 180.779098][T16736] EXT4-fs (loop9): 1 truncate cleaned up [ 180.785332][T16736] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.801880][T16736] netlink: 'syz.9.2751': attribute type 3 has an invalid length. [ 180.809958][T16736] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 180.971457][ T9396] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.