last executing test programs: 4m9.479560264s ago: executing program 32 (id=66): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) sendmsg$rds(r4, &(0x7f0000000bc0)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/97, 0x61}, {&(0x7f0000000400)=""/197, 0xc5}], 0x2, &(0x7f0000000900)=[@mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x2b}, &(0x7f00000002c0)=0x8, &(0x7f0000000300)=0x6, 0xe13, 0x6, 0xff, 0x2, 0x40, 0x180}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/14, 0xe}, &(0x7f0000000540), 0x20}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @cswp={0x58, 0x114, 0x7, {{0xea1f}, &(0x7f0000000580)=0x1, &(0x7f00000005c0)=0x8000, 0x8, 0x6, 0x8, 0x7ff, 0x1e, 0x5}}, @cswp={0x58, 0x114, 0x7, {{0x80, 0x100}, &(0x7f0000000600)=0x7, &(0x7f0000000640)=0x2, 0x4, 0xa, 0x0, 0xb69c, 0x50, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000680)=""/124, 0x7c}, &(0x7f0000000740), 0x10}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x100}, &(0x7f0000000780)=0xd4, &(0x7f00000007c0)=0x52, 0x800, 0x80000001, 0x8, 0x2, 0x2b, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0x8, 0x3}, &(0x7f0000000800)=0x3ff, &(0x7f0000000840)=0x7, 0x2, 0x1, 0x8, 0x5, 0x28, 0x4}}, @fadd={0x58, 0x114, 0x6, {{0x8001, 0x9}, &(0x7f0000000880)=0x43d, &(0x7f00000008c0)=0x5, 0x596d, 0x84, 0x7fffffffffffffff, 0xfffffffffffff800, 0x40, 0x7}}], 0x2a0, 0x10}, 0x1) sendto$inet6(r3, &(0x7f0000000080)="2b985c", 0xff06, 0x800c001, 0x0, 0xfffffffffffffdb9) 3m47.415336626s ago: executing program 33 (id=249): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) syz_io_uring_complete(0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x6f5f, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68", 0x1a, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @window={0x3, 0xfffe}], 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 3m41.241950338s ago: executing program 34 (id=319): socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b40)={[{@nodioread_nolock}, {@data_err_abort}, {@usrjquota}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@nombcache}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@discard}, {@nolazytime}, {@noauto_da_alloc}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) request_key(0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x2, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x4, 0x4, 0x440, 0xffffffff, 0xd0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x36}, [0xff, 0x0, 0xff], [0x0, 0x0, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x4, 0x37, 0x2, 0x41}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @local, [0x0, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff, 0xffffff00], 'vcan0\x00', 'pim6reg0\x00', {0xff}, {}, 0x1d, 0x4, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffa, 0x8}}}, {{@ipv6={@private1, @private2, [], [0xffffff00, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x2, 0x3, 0x5}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x46, 'system_u:object_r:inetd_log_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 3m2.801972299s ago: executing program 35 (id=762): r0 = syz_create_resource$binfmt(&(0x7f0000000480)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (fail_nth: 6) 2m20.234452495s ago: executing program 36 (id=1157): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000700000008000000220000000000", @ANYRES32, @ANYBLOB="7e45a96c3ceca491000000000000f0"], 0x50) r2 = io_uring_setup(0x2f8f, &(0x7f00000003c0)={0x0, 0x1, 0x1, 0x43, 0xfffffffd}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b0", 0x1, 0xdc05000000000000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x400, @loopback, 0x3}}}, 0x84) 1m25.760426438s ago: executing program 37 (id=1410): bind$tipc(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r0 = io_uring_setup(0x8, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 1m20.464559234s ago: executing program 2 (id=1452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe80000000000000804e55bce6a89561e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000200"/176], 0xf8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x7}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="2e00000011008188040f80ec59acbc0413a1f848090000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) sendmmsg$inet(r6, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000400)="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", 0x1d8}], 0x2}}], 0x1, 0x40) close(r6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x4, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0xd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x408c000) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) recvmmsg(r11, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x3}, 0xb529}], 0x29, 0x40000022, 0x0) 1m20.165894441s ago: executing program 2 (id=1458): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x700, 0x7800, 0x2000000, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010100, @rand_addr=0x640100ff}}}}) 1m20.104433798s ago: executing program 2 (id=1459): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01713d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4e25, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0xfffe, 0x1, @remote, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e2a, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x40}}}, 0x108) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000011c0)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000001c0)=""/4096, 0x1000}) shutdown(r0, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) r8 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4081, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_bp={&(0x7f0000001240), 0x2}, 0x100997, 0x7ff, 0x7, 0x6, 0x27, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r8, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r1) 1m19.204988306s ago: executing program 2 (id=1467): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x80040) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xd) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000000)=ANY=[], 0x5, 0x25d, &(0x7f0000000f40)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) r2 = socket$kcm(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, 0x0, 0x0, 0x2}, 0x20) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f00000009c0), 0x0, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$cont(0x18, r7, 0x7, 0xf0) r8 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) listen(r5, 0x7) socket$netlink(0x10, 0x3, 0x4) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r11) getsockname$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r12, 0x50661}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @multicast1}}}], 0x20}}], 0x1, 0x4044880) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, 0x0, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x2) 1m18.966634256s ago: executing program 1 (id=1470): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000000)=0x340, 0x4) 1m18.910360234s ago: executing program 1 (id=1471): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="c65e79643ba90d5bb8601d2223181270aaeefd2325", @ANYRES64=0x0], 0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_pidfd_open(0x0, 0x0) pread64(r2, &(0x7f00000021c0)=""/4096, 0x1000, 0x62) syz_genetlink_get_family_id$nl80211(0x0, r1) epoll_create(0x7) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m18.835327478s ago: executing program 1 (id=1473): r0 = socket(0x40000000015, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c20000004bb7e00d2cac08004500001c010000000011907800000000e000000100004e20000890786be8255a02617c9fdf5bc0f2a8c71447fd0f9e2040a5d85c9ed89e6f2ef7c1642adc0239fc56d8eac33b5541f9b5a24c08a1bb3ba81555dde9d75842c91d47"], 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x5, @remote, 0xff}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001d0001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f0000004900)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x2, @mcast1, 0xa3d7}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8c0) socket$nl_route(0x10, 0x3, 0x0) 1m18.813679983s ago: executing program 2 (id=1475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000ffffff007baa7e849c44686ddd8559fede08000000000000008500000028000000950000000000000021a6e8fd1c7ffa1a7bce6b070000001eaff50a417a99bacb58d7e61d55cfee0b64d9573648c888a030a57bb8d61ea56ba00af3334687230000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x101}) fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x7fff800000000}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000020c0)=""/156, &(0x7f0000000040)=0x9c) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x2, 0x1, 0x7fffffffe, 0x10000000000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x800000000, 0x13}) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = mq_open(&(0x7f0000000000)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x33, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x800002, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r5, 0x0, 0x24040084) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x9, 0x5}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd700000000000070000000c0001800500020001"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1m17.450591344s ago: executing program 2 (id=1481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r1, 0x852dd6c070cd7e4d, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x28}, 0x4, 0x700000000000000}, 0x0) 1m17.380332829s ago: executing program 38 (id=1481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r1, 0x852dd6c070cd7e4d, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x28}, 0x4, 0x700000000000000}, 0x0) 1m16.802356476s ago: executing program 1 (id=1486): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x80040) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xd) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000000)=ANY=[], 0x5, 0x25d, &(0x7f0000000f40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) socket$kcm(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, 0x0, 0x0, 0x2}, 0x20) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f00000009c0), 0x0, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x18, r5, 0x7, 0xf0) r6 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) listen(r3, 0x7) socket$netlink(0x10, 0x3, 0x4) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r9) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, 0x50661}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @local, @multicast1}}}], 0x20}}], 0x1, 0x4044880) 1m16.602293344s ago: executing program 1 (id=1492): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close(r1) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08003500001c0000000000029078000000e5df000001110290fcff000001"], 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x101000, 0xe, 0x3d}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = socket(0x1f, 0x800, 0x5) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x101}, 0x1c) syz_emit_ethernet(0xe3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 1m15.114427628s ago: executing program 1 (id=1498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='yeah', 0x61) shutdown(r0, 0x1) 1m14.903459672s ago: executing program 39 (id=1498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='yeah', 0x61) shutdown(r0, 0x1) 1m0.936206775s ago: executing program 7 (id=1539): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x2}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @fwd={0x6}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x10, 0x4}, {0x3, 0x5}, {0x6, 0x5}, {0xc, 0x3}, {0x2, 0x2}, {0x6}, {0xa}]}, @ptr={0xa}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x2, 0x1}, {0x9, 0x3}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0x10, 0x1}, {0xf, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x2}]}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000000)=""/46, 0x127, 0x2e, 0x0, 0x200}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x81, 0x2c9, 0x14, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x6, 0xabd9, 0x9}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0xfffffffc, 0x3, 0x20, 0x1, 0x7ff, '\x00', r1, r0, 0x0, 0x2, 0x4, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) listen(r5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 1m0.037636284s ago: executing program 7 (id=1548): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x5, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000004cc0)={0x2, 0xe}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, 0x0, 0x0) syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) 57.814405572s ago: executing program 7 (id=1558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000400000001000000090000003c0003800800030004000000140002006272696467655f736c6176655f3100"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r2 = syz_io_uring_complete(0x0) recvmmsg(r2, &(0x7f0000005100)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000180)=""/7, 0x7}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/205, 0xcd}], 0x8, &(0x7f00000006c0)=""/89, 0x59}, 0x96}, {{&(0x7f0000000740)=@x25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/135, 0x87}, {&(0x7f0000000980)=""/214, 0xd6}], 0x2, &(0x7f0000000b00)=""/101, 0x65}, 0xef95}, {{&(0x7f0000000b80)=@phonet, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/251, 0xfb}], 0x2, &(0x7f0000000e00)=""/80, 0x50}, 0x9}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/153, 0x99}, {&(0x7f0000001f40)=""/183, 0xb7}, {&(0x7f0000002000)=""/246, 0xf6}, {0x0}, {&(0x7f0000002300)=""/93, 0x5d}], 0x6, &(0x7f0000002400)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004f00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004f80)=""/55, 0x37}, {&(0x7f0000004fc0)=""/120, 0x78}], 0x2, &(0x7f0000005080)=""/124, 0x7c}, 0x7}], 0x6, 0x40000100, &(0x7f00000052c0)={0x0, 0x3938700}) socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x6f5f, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000740)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68ff53e24127f1a538594685", 0x25, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 57.465939468s ago: executing program 7 (id=1560): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x80040) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xd) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000000)=ANY=[], 0x5, 0x25d, &(0x7f0000000f40)="$eJzs2s9rnEUcB+Dvm6a0pqQbf9uCOOhBvbw0OXtokBTEBUEboQrSt+aNLnndDXmXwIrYnBQ89ezJs3j0IAjSo5dc/As86CmXHHsQX0k2adMY0WKzG/R5Ljsw82HmnZkd5jBbr9z6aGV5MpaLfkxkWUxcjo24k8VMTMS+jXj5xWs/PvvWtXden2+3F95M6cr81dm5lNL5535495Nvnr/dP/f2t+e/PxObM+9tbc/9svnU5oWt369+2KlTp07dXj8V6Uav1y9uVGVa6tQreUq3qrKoy9Tp1uXaffXLVW91dZCK7tL01OpaWdep6A7SSjlI/V7qrw1S8UHR6aY8z9P0VPBvLH59p2liuzl9PZqmeeSrOHc7pn+OVmSPpuzxy9mT17OnN7IL203TGvdQORbW///twKF+NqL6fH1xfXH4O6yfX45OVFHGpWjFb7GzTfYMy1deay9cSrtm4rPq5l7+5vriqd38F/v52WjFzNH52WE+3Z8/E1MH+5/77rF44s/5X0+1F+aOzJ+Nl144kM+jFT+9H72oYil2svf6/3Q2pVffaB/KX9xtBwDwX5Onu468v+X5X9UP8w9wPzx0v5qMi5Pj/XYi6sHHK0VVlWsjKezsqX/QuDeC8WR7E/D3jZ+ZGNn8jKfw5ckYxjEVhudY3F3vh9zFQ/0Tnd7bkPsH4zinbgyHESN3b9HHPRIAAAAAAAAAAAAexKFHf63jeHI47m8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtj8CAAD//13bww4=") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, 0x0, 0x0, 0x2}, 0x20) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f00000009c0), 0x0, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$cont(0x18, r6, 0x7, 0xf0) r7 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) listen(r4, 0x7) socket$netlink(0x10, 0x3, 0x4) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r10) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, 0x50661}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @multicast1}}}], 0x20}}], 0x1, 0x4044880) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, 0x0, 0x8) 57.030298476s ago: executing program 7 (id=1568): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x3a}}, 0xd, 0x3, 0xcc3, 0x9, 0x50, 0x5, 0x8}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0x38}], 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r5, &(0x7f0000000880)=[{&(0x7f00000008c0)="64656e79b0f9", 0x6}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81e00, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7}, 0x94) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r9, 0x4b4a, &(0x7f0000000180)=""/153) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, 0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 56.746628645s ago: executing program 4 (id=1571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000400000001000000090000003c0003800800030004000000140002006272696467655f736c6176655f3100"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r2 = syz_io_uring_complete(0x0) recvmmsg(r2, &(0x7f0000005100)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000180)=""/7, 0x7}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/205, 0xcd}], 0x8, &(0x7f00000006c0)=""/89, 0x59}, 0x96}, {{&(0x7f0000000740)=@x25, 0x80, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000008c0)=""/135, 0x87}, {&(0x7f0000000980)=""/214, 0xd6}], 0x3, &(0x7f0000000b00)=""/101, 0x65}, 0xef95}, {{&(0x7f0000000b80)=@phonet, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/251, 0xfb}], 0x2, &(0x7f0000000e00)=""/80, 0x50}, 0x9}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/153, 0x99}, {&(0x7f0000001f40)=""/183, 0xb7}, {&(0x7f0000002000)=""/246, 0xf6}, {0x0}, {&(0x7f0000002300)=""/93, 0x5d}], 0x6, &(0x7f0000002400)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004f00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004f80)=""/55, 0x37}, {&(0x7f0000004fc0)=""/120, 0x78}], 0x2, &(0x7f0000005080)=""/124, 0x7c}, 0x7}], 0x6, 0x40000100, &(0x7f00000052c0)={0x0, 0x3938700}) socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x6f5f, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000740)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68ff53e24127f1a538594685", 0x25, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 56.611332846s ago: executing program 4 (id=1572): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$inet(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x1a0, 0x2e8, 0x98, 0x1a0, 0x250, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @private=0xa010101, 0x0, 0xff, 'macvlan0\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x53}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) r7 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x60009400, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000004000/0x2000)=nil) mlock2(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000100)) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r6, 0x1, 0x1f, &(0x7f00000004c0)=""/89, &(0x7f0000000180)=0x59) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x814, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x7e4, 0x2, [@TCA_BASIC_ACT={0x7e0, 0x3, [@m_vlan={0x98, 0x0, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3cf}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0x49, 0x6, "61185f7dc946cde01ff6c11ef0cb200a9daed9324859a618116f5959733364050475b75af6d6b60675f8dd0686a1e5d98cc50f321fe110cd1e36f58cd21c93698925ea43d0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x184, 0x1f, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xfffffff8, 0x1, 0x3cf, 0x4}, @empty, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0xffffffffffffffff, 0xf60, 0x1}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xffffff00, 0x20000000, 0x9ab, 0x98}, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xffffffff, 0x6, 0x1, 0x2}, @local, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x30d, 0x7611a7d, 0x20000000, 0x8001, 0x5d3e}, @multicast2, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x9, 0xffffffffeffffff1, 0xb1b, 0x2366}, @private=0xa010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x0, 0x9, 0x1}, @broadcast, @remote, 0xffffff00, 0x1}}]}, {0x42, 0x6, "2f4923267ecf3fc30c53476dcb1408b35a5ba1ca91ecf9a41e8a448006443b5b2054e3b0dc398ec8d9200358c2b85f4d8dee694ffb6db4f98012fefddba1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x1c0, 0xe, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa3, 0x5, 0x2, 0x7fff, 0x2}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x5, 0x6, 0x81}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x2, 0x4, 0xffff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x42ea, 0x800, 0x2, 0x5, 0xdb5}, 0xfff7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x8, 0x2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x10000, 0x2, 0x6, 0x8}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x10, 0x10000000, 0x1ff, 0x7}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x10000, 0x10000000, 0xfffffff8, 0x9}, 0x6}}]}, {0xad, 0x6, "88fd17b4ecadbcf213b9430fd798fd631a8ce29e1202cd8926001413581e1e0e3e60bbc0f895280e0cac77912a98b687292cedaa0b00271804d0c18cf544490ad509b953e6bc79daa27c2eb00e9241471dd1982f396fcac80629542ecec011f4e00d069ff6a19a259208cc9c2dff56174d35d201b38d3a0f79a1f4da0280d0cdcaddedb24205a6bdc3f7ddd2d9b6033ae3faa76cf840c33f9cf8b95437339482e8e167b4bd7a5e6563"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x9c, 0x0, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x101}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x3, 0x1, 0x7fff, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x3, 0x4, 0x6, 0xf}}]}, {0x25, 0x6, "643a751680b49a6e501b0532c3c3bb970c9b702810587a029712f1e07e8f7924e2"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x180, 0x4, 0x0, 0x0, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x3, 0x7, 0x7}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x8, 0x2, 0x5, 0xd}, {0x9, 0x5, 0x1, 0x1800}, {0x400, 0x8, 0x7, 0x2}, {0x62, 0x2, 0xf, 0x8}, {0x2, 0x1, 0xc0, 0xffffff81}, {0xa, 0x4, 0xb, 0x2}, {0x771, 0xe0, 0x5, 0xffffffff}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x101, 0x3, 0x2, 0x10000, 0x496b}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0xc0b5, 0x0, 0x10000, 0x400}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x4, 0x5, 0xffffd243, 0xc}}]}, {0xa0, 0x6, "0e6b35790365eaf767f5738865db0b4aa5657a9ff9b29a6694bca79400712001460876714bc0be87f7c7f4fbb1b6f3e749b0374e3d911ff4a7e43aff1db0d96525be62fe19e9f4d57d9f9c0c0b9641f92bee6825a40e0bb5c7a47f9c5ff6fd66e8cbab3bc31db2f54ffbcecc5d8d5cca8fd7f23db9399332e8e3c3541383cc49e4ebf90ee8dc88af29f376c8fd6a28bb37bbd158bc5cc3224ced8bff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x10c, 0xc, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x563d}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xb}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x800}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x0, 0x1, 0x7e0b58fe, 0xd94}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x8d, 0x6, "a0fcee71738eee91ddea940c0e371d48228bec44748348b087f1b67739de0186fd3626dcdec4e0adf1f98c85ce872b12361825cfa7e5458e4249121ac23d6c5a25fc69cab66f61250ce504dce01641bdacda45cb96edbc2e12c9cf92911170a87a64f8c7f5fffccc99bf1cc4def55d7354ac88f75f7c056ae30ef1dfdfca19d016931fad03973c0c35"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0xd8, 0x14, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x57dee8a3, 0x5, 0x0, 0x80000000, 0x3}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x3, 0xffff0000}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="a57230fe5b28"}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x4f, 0x6, "3cab38a7a95f838f39d43bc845d086a81aac0ea965ebf3458d104f011aa52485e29a4de05413ed2bd480c90a747f7d14e1c16bdc0142c8e1edf96ff7f7c1e6e88bfa70562b5c20e863e534"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x814}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r11, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r12, 0x691c15cdb0a13b05, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40004004) 56.023076982s ago: executing program 7 (id=1575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffa}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xfffffffd}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x6}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x81}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 55.96648677s ago: executing program 40 (id=1575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffa}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xfffffffd}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x6}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x81}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 55.960203359s ago: executing program 4 (id=1577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 55.858594877s ago: executing program 4 (id=1579): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x80040) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xd) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000000)=ANY=[], 0x5, 0x25d, &(0x7f0000000f40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, 0x0, 0x0, 0x2}, 0x20) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f00000009c0), 0x0, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$cont(0x18, r6, 0x7, 0xf0) r7 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) listen(r4, 0x7) socket$netlink(0x10, 0x3, 0x4) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r10) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, 0x50661}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @multicast1}}}], 0x20}}], 0x1, 0x4044880) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, 0x0, 0x8) 55.540153809s ago: executing program 4 (id=1581): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2d2a8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x1a5002, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe20, 0x0, @mcast2, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 55.134638123s ago: executing program 4 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000400000001000000090000003c0003800800030004000000140002006272696467655f736c6176655f3100"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r2 = syz_io_uring_complete(0x0) recvmmsg(r2, &(0x7f0000005100)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000180)=""/7, 0x7}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/205, 0xcd}], 0x8, &(0x7f00000006c0)=""/89, 0x59}, 0x96}, {{&(0x7f0000000740)=@x25, 0x80, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000008c0)=""/135, 0x87}, {&(0x7f0000000980)=""/214, 0xd6}], 0x3, &(0x7f0000000b00)=""/101, 0x65}, 0xef95}, {{&(0x7f0000000b80)=@phonet, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/251, 0xfb}], 0x2, &(0x7f0000000e00)=""/80, 0x50}, 0x9}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/153, 0x99}, {&(0x7f0000001f40)=""/183, 0xb7}, {&(0x7f0000002000)=""/246, 0xf6}, {0x0}, {&(0x7f0000002300)=""/93, 0x5d}], 0x6, &(0x7f0000002400)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004f00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004f80)=""/55, 0x37}, {&(0x7f0000004fc0)=""/120, 0x78}], 0x2, &(0x7f0000005080)=""/124, 0x7c}, 0x7}], 0x6, 0x40000100, &(0x7f00000052c0)={0x0, 0x3938700}) socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x6f5f, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000740)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68ff53e24127f1a538594685", 0x25, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 55.134494912s ago: executing program 41 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000400000001000000090000003c0003800800030004000000140002006272696467655f736c6176655f3100"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r2 = syz_io_uring_complete(0x0) recvmmsg(r2, &(0x7f0000005100)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000180)=""/7, 0x7}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/205, 0xcd}], 0x8, &(0x7f00000006c0)=""/89, 0x59}, 0x96}, {{&(0x7f0000000740)=@x25, 0x80, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000008c0)=""/135, 0x87}, {&(0x7f0000000980)=""/214, 0xd6}], 0x3, &(0x7f0000000b00)=""/101, 0x65}, 0xef95}, {{&(0x7f0000000b80)=@phonet, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/251, 0xfb}], 0x2, &(0x7f0000000e00)=""/80, 0x50}, 0x9}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/153, 0x99}, {&(0x7f0000001f40)=""/183, 0xb7}, {&(0x7f0000002000)=""/246, 0xf6}, {0x0}, {&(0x7f0000002300)=""/93, 0x5d}], 0x6, &(0x7f0000002400)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004f00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004f80)=""/55, 0x37}, {&(0x7f0000004fc0)=""/120, 0x78}], 0x2, &(0x7f0000005080)=""/124, 0x7c}, 0x7}], 0x6, 0x40000100, &(0x7f00000052c0)={0x0, 0x3938700}) socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x6f5f, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000740)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68ff53e24127f1a538594685", 0x25, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 14.362069181s ago: executing program 9 (id=1791): syz_emit_ethernet(0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004708001e38b4705ecf05bb780a010102e000000144041e40008303d6"], 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/llc/socket\x00') r0 = getpid() r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x2e8, 0x218, 0xfeffffff, 0x2e8, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x2e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x40000000001fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0xf) fchown(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r0, &(0x7f0000000000)='net/dev\x00') ioprio_set$pid(0x3, r0, 0x2004) 13.390596705s ago: executing program 9 (id=1800): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000b04a1d3d00000000000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000400004803c0001800c0001007061796c6f6164002c00028008000440000000000800024000000002080005400000000f0800034000e4"], 0x94}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x2, 0x27c42ed3, 0x8}) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 13.010130134s ago: executing program 9 (id=1803): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="240000001201010800000000fedbdf250700000008000500040000000800e88004004280"], 0x24}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r6, &(0x7f0000000200)=0x2, 0x5ed) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bc2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x12, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffffffffffffcd}}, @qdisc_kind_options=@q_red={{}, {0x0, 0x2, [@TCA_RED_PARMS={0x0, 0x1, {0x6, 0x8000, 0x9, 0xbf, 0x1c, 0x1a, 0x4}}]}}, @TCA_RATE={0x0, 0x5, {0x10}}]}, 0x34}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0x2, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r12, 0x114, 0x3f, &(0x7f0000000140)=ANY=[], 0x4) 12.393673223s ago: executing program 9 (id=1808): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc8000000}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000140)="a4", 0x1}], 0x1}}], 0x1, 0x5c) r3 = syz_clone(0x800100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r3, 0x80000001, 0x4) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) ptrace$peeksig(0x4209, r3, &(0x7f00000001c0)={0x7, 0x0, 0x3}, &(0x7f00000006c0)=[{}, {}, {}]) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000005400)={0x0, @in6={{0xa, 0x4e23, 0x46, @mcast1, 0x40}}}, 0x84) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000340)={0x0, @ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @l2={0x1f, 0x352, @none, 0x3, 0x2}, @ethernet={0x306, @random="d27dd84ab909"}, 0x5, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)='netdevsim0\x00', 0x10000, 0x5, 0x8001}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r4, @ANYBLOB="070a2cbd7000ffdbdf251500000008002c000300000008002c001000000008000300", @ANYRES32=r5, @ANYBLOB="7c002b80050002000100000008000100030000000c00050002000000000000000500020000000000080001000200000005000200010000004500020001000000284d03800c0004000202aaaaaaaaaaaa0c0004000202aaaa0900aaaa0c0004000203aaaaaaaaaaaa05000200030000000c000380080002000100000008002a000100000008002c000500000020002b8008000100fd"], 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x20008840) syz_emit_ethernet(0x3b6, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES64=r5, @ANYBLOB="39b29544cd99d9e5", @ANYRES8=r6, @ANYRES64=r0, @ANYRES32=r6], 0x0) 12.222485256s ago: executing program 9 (id=1811): socket$kcm(0x29, 0xd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x2}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @fwd={0x6}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x10, 0x4}, {0x3, 0x5}, {0x6, 0x5}, {0xc, 0x3}, {0x2, 0x2}, {0x6}, {0xa}]}, @ptr={0xa}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x2, 0x1}, {0x9, 0x3}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0x10, 0x1}, {0xf, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x2}]}]}, {0x0, [0x30]}}, &(0x7f0000000000)=""/46, 0x117, 0x2e, 0x0, 0x200}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x81, 0x2c9, 0x14, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x6, 0xabd9, 0x9}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0xfffffffc, 0x3, 0x20, 0x1, 0x7ff, '\x00', r1, r0, 0x0, 0x2, 0x4, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) listen(r5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 11.706481317s ago: executing program 9 (id=1818): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000016000000000800007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\a'], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000780)=@allocspi={0x128, 0x16, 0x1, 0x70bd2c, 0x25dfdbfe, {{{@in=@loopback, @in6=@private2, 0x4e24, 0x0, 0x4e24, 0x6, 0xa, 0x0, 0xa0, 0x3b, 0x0, 0xee01}, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4d4, 0x6c}, @in6=@loopback, {0x6, 0x0, 0x1, 0x300000000000, 0x209, 0x0, 0xc48, 0xd24e}, {0xffffffffffffacd0, 0x5, 0x3, 0x200000000000643d}, {0x6, 0x9, 0x6}, 0x70bd2b, 0x3507, 0xa, 0x1, 0x41, 0x49}, 0x4, 0x4}, [@address_filter={0x28, 0x1a, {@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x6}}, @proto={0x5, 0x19, 0x6c}]}, 0x128}, 0x1, 0x0, 0x0, 0x2004c094}, 0x24040000) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x221000, 0x800, 0x7f, 0x1}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000006c0)=@sack_info={r5, 0x40, 0xfffffbff}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x7, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e3b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xde, &(0x7f0000000340)=""/222, 0x41000}, 0x94) r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x181140, 0x44) mknodat$loop(r6, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) 11.697997085s ago: executing program 42 (id=1818): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000016000000000800007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000690a0d130000f5be0e5cb3b3dd322317c2582050e89f052f99574c6b19afb98ad54cab655343362b7f753b29f78e831514e353e832e8805e3472c7eced7c2c136253aded29d9c97eef509bd486c14ba6d823c9db437f950d780bf5de2a537a40e6db58d2687c61d1cbffb1949eee0942dc98452766cac2bc0cc3b337bd7513db915939dba939a163b0d0f10eb4bf7257d579963da219ca18c6a4451da8223d7df5c9600ccad18961db82162f30005cad56fc2ffb120a7c1ff55c607c8574c44ee2dddb57df98883d7bd2070884258a10d9e4cb86ccb0a8bf8d03cec5da45eb07ce8f2222d38e8007a0ad7a8dcd46"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\a'], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000780)=@allocspi={0x128, 0x16, 0x1, 0x70bd2c, 0x25dfdbfe, {{{@in=@loopback, @in6=@private2, 0x4e24, 0x0, 0x4e24, 0x6, 0xa, 0x0, 0xa0, 0x3b, 0x0, 0xee01}, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4d4, 0x6c}, @in6=@loopback, {0x6, 0x0, 0x1, 0x300000000000, 0x209, 0x0, 0xc48, 0xd24e}, {0xffffffffffffacd0, 0x5, 0x3, 0x200000000000643d}, {0x6, 0x9, 0x6}, 0x70bd2b, 0x3507, 0xa, 0x1, 0x41, 0x49}, 0x4, 0x4}, [@address_filter={0x28, 0x1a, {@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x6}}, @proto={0x5, 0x19, 0x6c}]}, 0x128}, 0x1, 0x0, 0x0, 0x2004c094}, 0x24040000) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x221000, 0x800, 0x7f, 0x1}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000006c0)=@sack_info={r5, 0x40, 0xfffffbff}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x7, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e3b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0xde, &(0x7f0000000340)=""/222, 0x41000}, 0x94) r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x181140, 0x44) mknodat$loop(r6, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) 5.334658333s ago: executing program 3 (id=1858): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r1, 0x1, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000002580)="a3", 0x1, 0xe3}]) r2 = io_uring_setup(0x2fac, &(0x7f0000000500)={0x0, 0x9d1d, 0x2, 0x1007, 0x125}) close_range(r2, 0xffffffffffffffff, 0x0) eventfd2(0x2, 0x1) io_submit(r1, 0x0, 0x0) 4.33308512s ago: executing program 3 (id=1864): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0x1000, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @private=0xa010102}, @ib={0x1b, 0x4, 0x5, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000340)={0x17c04, 0xffffffffffffffff, 0x7, 0x1c00, 0x2}) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x90, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x638e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc82}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x44}, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc47b33dfc92e34fd438e80da84d6201aae661966eb49960632a3e81295c1898bf54bfbad5893a86a6a99f9b42726a15e51126a546c9b173860563e9c8d898c8a18e82c70dbdd3d90cff748840daff87052c32a07ecbe6b828bf63dcc74a04be11c0d6a0d2e37266ba14eae0dccfc7a21035614fe0acd058ae7e4685df99a83d515c1d20191d817f33f16ddce9cd9687e217c86bcc3d717ef31b1c5629af0013408044e35fd35caa0871f6b045af534e5d0dadc72c5d0000000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000280001801400028008000300fc29000008000300f70000000d0001007564703a73797a3000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x80) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 4.243682332s ago: executing program 3 (id=1866): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08003500001c0000000000029078000000e5df000001110290fcff000001"], 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x101000, 0xe, 0x3d}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x101}, 0x1c) syz_emit_ethernet(0xe3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 4.079418647s ago: executing program 3 (id=1869): syz_emit_ethernet(0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004708001e38b4705ecf05bb780a010102e000000144041e40008303d6"], 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/llc/socket\x00') getpid() memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x2e8, 0x218, 0xfeffffff, 0x2e8, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x2e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x40000000001fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x2}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x400) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001140)=ANY=[@ANYBLOB="1201000102330409022400010128800b09040000000905810300000000000000000000000000000000730027bc7ed8f08d59212c593be6cd8225dfc164f838aef043cf80e57873a37dc764a243073c56dae50e612c9f0e1b4175744647b1480f902c90379749e927c12004827deead3485248cbb0ead966dd0416ee728b091063275bcf949ab8da2efb7cd43937842dad3dabd1bd33a74c2e74dd3000000000000000000"], &(0x7f00000010c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x3, 0xc, 0x4, 0x10, 0xc}, 0xc, &(0x7f0000000f80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x6, 0x4bdb}]}, 0x4, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x424}}, {0x0, 0x0}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x43) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 2.478105636s ago: executing program 5 (id=1882): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) 2.439401918s ago: executing program 5 (id=1883): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0xfffffffe, 0x25dfdbff, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x0, 0xfa64de99a3061f6a}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000040000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.374968625s ago: executing program 5 (id=1884): r0 = socket(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffefffffff7ffffc]}, 0x8, 0x800) r3 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe150, 0x0, 0x1, 0x4000032f, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r2, 0xa, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}], 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8b19, &(0x7f0000000000)) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, &(0x7f00000000c0)) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f00000005c0)={[{@delalloc}, {@data_err_abort}, {@bsdgroups}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x642f}}, {@minixdf}, {@nouid32}, {@quota}, {@i_version}, {@stripe={'stripe', 0x3d, 0x9}}, {@dioread_nolock}], [{@flag='ro'}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") syz_io_uring_setup(0x7b16, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) sendmmsg$inet_sctp(r0, &(0x7f0000005b00)=[{&(0x7f0000000280)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000fc0)="d0", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="3000000000000000840000000100000027007f000100000003f3000008000000000000000600000007000000", @ANYRES32, @ANYBLOB="1800000000000000840000000000000000000000ff01000018000000000000008400000007"], 0x60, 0x4000000}], 0x1, 0x20040099) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) 1.493870907s ago: executing program 5 (id=1891): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x0, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x1000, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8f, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3ed, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") 1.334767083s ago: executing program 0 (id=1893): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) 1.289748654s ago: executing program 8 (id=1894): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0xfffffffe, 0x25dfdbff, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x0, 0xfa64de99a3061f6a}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000040000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.22318932s ago: executing program 6 (id=1895): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x7f}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) fchown(r0, r1, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x20, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback=r3, 0xffffffffffffffff, 0xa, 0x32}, 0x20) 1.22218496s ago: executing program 0 (id=1896): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x7, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x48810) recvmsg(r1, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4089, 0xff9}, {&(0x7f000000bcc0)=""/63, 0x3f}], 0x2}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x20008000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x804) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x0, 0x1}, {0xe}, 0xffffffff, 0x6, 0x2e}) 1.193405974s ago: executing program 8 (id=1897): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_read_part_table(0x1055, &(0x7f0000001080)="$eJzsz8GNwjAUBNCJd+VkF4kauNMGogP6CReqoTIOiA6CTAIlAIf3Drb/SGPL4cOGJN18XP+19ec/Y005TX2bfnOuJbd9UrNaKptln2prD6+rxl1y6dK3Vl2ykrqt81QewTXH53s59G/5IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8uXsAAAD//5ZxCUM=") syslog(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x2) setxattr(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0xc7) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r1, 0x0, r0}, 0x10) io_uring_enter(r1, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) 1.109208165s ago: executing program 0 (id=1898): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf350700000008000100000000000c0017000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x4080080) 1.059099025s ago: executing program 0 (id=1899): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") creat(&(0x7f00000007c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x16a) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x8000, 0xffffffffffffffff, 0xfffffffffffffffe}) writev(r0, &(0x7f00000000c0), 0x0) 967.126085ms ago: executing program 6 (id=1900): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = semget$private(0x0, 0x6, 0xb1) semtimedop(r2, &(0x7f0000000000)=[{0xf393a510edd9c92d, 0x3}, {0x1, 0x1, 0x800}, {0x3, 0x73, 0x800}, {0x3, 0x1c00, 0x1000}], 0x4, &(0x7f0000000080)={0x77359400}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@dellink={0x34, 0x11, 0x20, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x10220, 0x1180}, [@IFLA_IFNAME={0x14, 0x3, 'netpci0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) 798.59986ms ago: executing program 6 (id=1901): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5, 0x401}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0xa3d8, &(0x7f0000000340)=[{&(0x7f00000000c0)='\x009zL', 0x4}], 0x1, 0x0, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000040)=""/161, 0xa1}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_SECUREBITS(0x1c, 0x14) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000000380)) 783.331607ms ago: executing program 3 (id=1902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb260000800000827600000000000000", 0x26}], 0x1}, 0x5) 586.768554ms ago: executing program 6 (id=1903): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="c65e79643ba90d5bb8601d2223181270aaeefd2325"], 0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_pidfd_open(0x0, 0x0) pread64(r2, &(0x7f00000021c0)=""/4096, 0x1000, 0x62) syz_genetlink_get_family_id$nl80211(0x0, r1) epoll_create(0x7) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 530.608763ms ago: executing program 3 (id=1904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000ffffff007baa7e849c44686ddd8559fede08000000000000008500000028000000950000000000000021a6e8fd1c7ffa1a7bce6b070000001eaff50a417a99bacb58d7e61d55cfee0b64d9573648c888a030a57bb8d61ea56ba00af3334687230000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x101}) fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x7fff800000000}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000020c0)=""/156, &(0x7f0000000040)=0x9c) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x2, 0x1, 0x7fffffffe, 0x10000000000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x800000000, 0x13}) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = mq_open(&(0x7f0000000000)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x33, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x800002, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r5, 0x0, 0x24040084) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x9, 0x5}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd700000000000070000000c0001800500020001"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 522.819781ms ago: executing program 0 (id=1905): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x8808, 0x4007, 0xb, 0x4, 0x1, 0x7, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfff7ffffff7fffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @private, @multicast1}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0xfffffffe}, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x203}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000200000000000000070000000c001600fbffffff"], 0x34}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}, 0x24040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) 227.292578ms ago: executing program 6 (id=1906): futex_waitv(&(0x7f0000000f00)=[{0x0, 0x0, 0x2}, {0x1, &(0x7f0000000140)=0x64f, 0x82, 0x7000000}, {0x90ab, 0x0, 0x2}, {0xb, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x5, 0x0, 0xc3}, {0xffffffffffffffff, 0x0, 0x82}, {0x7fffffff, &(0x7f0000000440), 0x2}, {0x8001, &(0x7f0000000480), 0x82}, {0x6, &(0x7f0000000500)=0x5, 0x82}, {0x7, &(0x7f0000000540), 0x82}, {0x0, 0x0, 0x82}, {0x1, &(0x7f0000000640)=0x3a800, 0x2}, {0x5, 0x0, 0x82}, {0x7, &(0x7f0000000300)=0x6, 0x82}, {0x2, &(0x7f0000000900)=0x5, 0x2}, {0x2, &(0x7f0000000980)=0x4, 0x82}, {0x0, &(0x7f00000009c0)=0x6, 0x82}, {0xbf9, &(0x7f0000000a00)=0x9, 0x82}, {0x1, &(0x7f0000000a40)=0x4, 0xe3180fd48a96849d}, {0xe, &(0x7f0000000a80)=0x4, 0x2}, {0x4, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x60, 0x0, 0x82}, {0x8, &(0x7f0000000c40)=0x2, 0x82}, {0x9, &(0x7f0000000c80)=0x8001, 0x82}, {0x28, &(0x7f0000000cc0)=0x1, 0x82}, {0x9, 0x0, 0x82}, {0xfffffffffeffffff, 0x0, 0x2}, {0x1, 0x0, 0x80}], 0x1f, 0x0, &(0x7f00000013c0)={0x0, 0x3938700}, 0x0) 226.940428ms ago: executing program 8 (id=1907): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0xfffffffe, 0x25dfdbff, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x0, 0xfa64de99a3061f6a}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000040000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 138.30266ms ago: executing program 5 (id=1908): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 125.778117ms ago: executing program 8 (id=1909): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf350700000008000100000000000c0017000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x4080080) 66.544804ms ago: executing program 0 (id=1910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) io_setup(0x5, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x3032, 0xffffffffffffffff, 0xabfd7000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x507, &(0x7f0000000500)="$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") ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r1}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x180000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000880)={0x3ff, {{0x2, 0x4e23, @multicast2}}}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 66.373614ms ago: executing program 8 (id=1911): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000b0000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) 66.124844ms ago: executing program 8 (id=1912): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d7be) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x84000) mount$9p_fd(0x0, 0x0, 0x0, 0xc4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4, 0x14}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 39.009628ms ago: executing program 6 (id=1913): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$inet(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x1a0, 0x2e8, 0x98, 0x1a0, 0x250, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @private=0xa010101, 0x0, 0xff, 'macvlan0\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x53}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) socket$inet_mptcp(0x2, 0x1, 0x106) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x60009400, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000004000/0x2000)=nil) mlock2(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r8, 0x691c15cdb0a13b05, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40004004) 0s ago: executing program 5 (id=1914): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x13) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x10) close(r2) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000300)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r11 = memfd_secret(0x80000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x200084, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r11}}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket(0x1, 0x1, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r10, 0x80105873, &(0x7f0000000240)) ioctl$sock_ifreq(r12, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip6erspan0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1adc41) r13 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r13, 0x0, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0x59b5, 0x40, 0xfffffffb}, &(0x7f0000000040), 0x0) kernel console output (not intermixed with test programs): T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.245223][T11630] Call Trace: [ 226.245295][T11630] [ 226.245304][T11630] __dump_stack+0x1d/0x30 [ 226.245337][T11630] dump_stack_lvl+0x95/0xd0 [ 226.245366][T11630] dump_stack+0x15/0x1b [ 226.245391][T11630] should_fail_ex+0x263/0x280 [ 226.245487][T11630] should_failslab+0x8c/0xb0 [ 226.245556][T11630] kmem_cache_alloc_noprof+0x66/0x400 [ 226.245581][T11630] ? security_file_alloc+0x32/0xf0 [ 226.245615][T11630] security_file_alloc+0x32/0xf0 [ 226.245652][T11630] init_file+0x5b/0x1b0 [ 226.245747][T11630] alloc_empty_file+0x8b/0x200 [ 226.245781][T11630] path_openat+0x65/0x2050 [ 226.245820][T11630] ? _parse_integer_limit+0x170/0x190 [ 226.245870][T11630] ? _parse_integer+0x27/0x40 [ 226.245967][T11630] ? kstrtoull+0x111/0x140 [ 226.246003][T11630] ? kstrtouint+0x76/0xc0 [ 226.246110][T11630] do_file_open+0x16c/0x290 [ 226.246151][T11630] do_sys_openat2+0x94/0x130 [ 226.246227][T11630] __x64_sys_openat+0xf2/0x120 [ 226.246361][T11630] x64_sys_call+0x1e39/0x3020 [ 226.246392][T11630] do_syscall_64+0x12c/0x370 [ 226.246414][T11630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.246439][T11630] RIP: 0033:0x7f0eb57bc799 [ 226.246467][T11630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.246486][T11630] RSP: 002b:00007f0eb420f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 226.246510][T11630] RAX: ffffffffffffffda RBX: 00007f0eb5a35fa0 RCX: 00007f0eb57bc799 [ 226.246562][T11630] RDX: 000000000000275a RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 226.246577][T11630] RBP: 00007f0eb420f090 R08: 0000000000000000 R09: 0000000000000000 [ 226.246592][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.246604][T11630] R13: 00007f0eb5a36038 R14: 00007f0eb5a35fa0 R15: 00007ffc54885d18 [ 226.246626][T11630] [ 226.489619][T11641] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.541301][ T28] audit: type=1400 audit(2000000089.076:3875): avc: denied { read write } for pid=11650 comm="syz.3.1517" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 226.597615][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.612725][ T28] audit: type=1400 audit(2000000089.076:3876): avc: denied { open } for pid=11650 comm="syz.3.1517" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 226.639551][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.666250][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.676598][ T30] bond0 (unregistering): Released all slaves [ 226.727161][T11667] gretap1: entered allmulticast mode [ 226.754271][T11656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.774849][T11656] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.806819][ T30] hsr_slave_0: left promiscuous mode [ 226.814535][ T30] hsr_slave_1: left promiscuous mode [ 226.821676][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.830372][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.849814][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.858620][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.867825][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.883742][ T30] veth1_macvtap: left promiscuous mode [ 226.890619][ T30] veth0_macvtap: left promiscuous mode [ 226.900568][ T30] veth1_vlan: left promiscuous mode [ 226.911998][ T30] veth0_vlan: left promiscuous mode [ 226.925385][ T28] audit: type=1400 audit(2000000089.456:3877): avc: denied { sqpoll } for pid=11678 comm="syz.9.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 228.566571][T11694] set_capacity_and_notify: 1 callbacks suppressed [ 228.566862][T11694] loop3: detected capacity change from 0 to 4096 [ 228.893463][T11696] loop9: detected capacity change from 0 to 4096 [ 229.881352][ T30] team0 (unregistering): Port device team_slave_1 removed [ 230.496974][T11694] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 230.497142][T11694] EXT4-fs: failed to create workqueue [ 230.636234][T11694] EXT4-fs (loop3): mount failed [ 231.179814][T11696] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 231.180036][T11696] EXT4-fs: failed to create workqueue [ 231.203999][T11696] EXT4-fs (loop9): mount failed [ 231.384434][ T30] team0 (unregistering): Port device team_slave_0 removed [ 231.471736][T11731] loop3: detected capacity change from 0 to 512 [ 231.482340][T11730] loop9: detected capacity change from 0 to 1024 [ 231.494509][T11731] EXT4-fs: Ignoring removed i_version option [ 231.526670][T11731] EXT4-fs: Ignoring removed bh option [ 231.550220][T11730] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.585690][T11731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.628617][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.638925][T11731] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.689760][ T28] audit: type=1400 audit(2000000094.226:3878): avc: denied { create } for pid=11755 comm="syz.9.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 231.822192][ T28] audit: type=1400 audit(2000000094.246:3879): avc: denied { connect } for pid=11755 comm="syz.9.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 231.877542][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.023056][T11785] loop9: detected capacity change from 0 to 256 [ 232.053228][T11785] FAT-fs (loop9): Directory bread(block 64) failed [ 232.059836][T11785] FAT-fs (loop9): Directory bread(block 65) failed [ 232.066484][T11785] FAT-fs (loop9): Directory bread(block 66) failed [ 232.073234][T11785] FAT-fs (loop9): Directory bread(block 67) failed [ 232.079869][T11785] FAT-fs (loop9): Directory bread(block 68) failed [ 232.086684][T11785] FAT-fs (loop9): Directory bread(block 69) failed [ 232.093367][T11785] FAT-fs (loop9): Directory bread(block 70) failed [ 232.100259][T11785] FAT-fs (loop9): Directory bread(block 71) failed [ 232.106961][T11785] FAT-fs (loop9): Directory bread(block 72) failed [ 232.113695][T11785] FAT-fs (loop9): Directory bread(block 73) failed [ 233.875021][T11097] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.894152][T11097] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.680837][T11789] loop4: detected capacity change from 0 to 4096 [ 235.731084][T11789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.953867][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1534'. [ 236.063053][T11785] bridge_slave_0: left allmulticast mode [ 236.063513][T10647] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.069303][T11785] bridge_slave_0: left promiscuous mode [ 236.073027][T11785] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.120859][T11785] bridge_slave_1: left allmulticast mode [ 236.127055][T11785] bridge_slave_1: left promiscuous mode [ 236.135215][T11785] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.169938][T11785] bond0: (slave bond_slave_0): Releasing backup interface [ 236.189600][T11785] bond0: (slave bond_slave_1): Releasing backup interface [ 236.214927][T11830] loop7: detected capacity change from 0 to 1024 [ 236.240589][T11785] team0: Port device team_slave_0 removed [ 236.250434][T11830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.288002][T11785] team0: Port device team_slave_1 removed [ 236.307532][T11785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.322494][T11785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.333821][T11785] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 236.357911][T11097] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.385546][ T4948] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.395549][T11097] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.482623][T11097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.504610][T11097] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.514762][ T4017] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.521915][ T4017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.532373][T11825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11825 comm=syz.3.1536 [ 236.549095][ T4017] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.556253][ T4017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.659183][T11097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.804137][T11902] loop9: detected capacity change from 0 to 512 [ 236.815962][T11902] EXT4-fs: Ignoring removed i_version option [ 236.824403][T11902] EXT4-fs: Ignoring removed bh option [ 236.871703][T11902] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.895820][ T28] audit: type=1400 audit(2000000099.436:3880): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=127.0.0.1 src=53828 daddr=127.0.0.1 dest=20002 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 236.900630][T11902] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.920719][ T28] audit: type=1400 audit(2000000099.436:3881): avc: denied { mount } for pid=11900 comm="syz.9.1541" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 236.957266][ T28] audit: type=1400 audit(2000000099.496:3882): avc: denied { search } for pid=11910 comm="sed" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.992491][ T28] audit: type=1400 audit(2000000099.516:3883): avc: denied { read } for pid=11910 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.017501][ T28] audit: type=1400 audit(2000000099.516:3884): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.053885][ T28] audit: type=1400 audit(2000000099.516:3885): avc: denied { open } for pid=11910 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.099425][ T28] audit: type=1400 audit(2000000099.516:3886): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.125888][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.153581][T11933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1546'. [ 237.165489][ T28] audit: type=1400 audit(2000000099.516:3888): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.196855][ T28] audit: type=1400 audit(2000000099.516:3887): avc: denied { getattr } for pid=11910 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.224590][T11097] veth0_vlan: entered promiscuous mode [ 237.244829][T11097] veth1_vlan: entered promiscuous mode [ 237.319431][T11097] veth0_macvtap: entered promiscuous mode [ 237.339790][T11097] veth1_macvtap: entered promiscuous mode [ 237.367750][T11097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.402521][T11097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.423275][ T28] audit: type=1400 audit(2000000099.526:3889): avc: denied { sys_module } for pid=11097 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 237.488791][ T4017] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.500696][ T4017] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.471536][ T4017] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.502970][T11993] loop3: detected capacity change from 0 to 512 [ 238.519716][ T4017] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.566200][T11993] EXT4-fs: Ignoring removed i_version option [ 238.615710][T11993] EXT4-fs: Ignoring removed bh option [ 238.661578][T12006] loop9: detected capacity change from 0 to 512 [ 238.668924][T12006] /dev/loop9: Can't open blockdev [ 238.726907][T11993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.779424][T11993] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.444606][T12029] hub 8-0:1.0: USB hub found [ 239.449501][T12029] hub 8-0:1.0: 8 ports detected [ 239.549848][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.592767][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1558'. [ 239.880826][T12042] loop7: detected capacity change from 0 to 128 [ 239.931305][T12055] loop3: detected capacity change from 0 to 512 [ 239.987188][T12055] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 240.019591][T12055] EXT4-fs (loop3): orphan cleanup on readonly fs [ 240.042396][T12055] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.1559: corrupted inode contents [ 240.056654][T12055] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 240.058190][T12055] EXT4-fs (loop3): Remounting filesystem read-only [ 240.067425][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 240.067441][ C0] EXT4-fs (loop3): initial error at time 2000000102: ext4_do_update_inode:5569: inode 16 [ 240.067465][ C0] EXT4-fs (loop3): last error at time 2000000102: ext4_do_update_inode:5569: inode 16 [ 240.132934][T12055] EXT4-fs (loop3): 1 truncate cleaned up [ 240.148576][ T329] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 240.166813][ T329] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 240.185378][T12042] gretap1: entered allmulticast mode [ 240.232046][ T329] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 240.268851][T12055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.284984][ T4948] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 240.300795][T12091] loop5: detected capacity change from 0 to 8192 [ 240.313899][ T4948] FAT-fs (loop7): Filesystem has been set read-only [ 240.327695][ T4948] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 240.348125][T12055] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 240.369546][T12091] loop5: p1 < > p2 p4 < p5 > [ 240.370833][T12109] loop9: detected capacity change from 0 to 512 [ 240.384385][T12055] team0: Port device batadv1 added [ 240.390918][T12109] EXT4-fs: Ignoring removed i_version option [ 240.414508][T12109] EXT4-fs: Ignoring removed bh option [ 240.432477][T12091] loop5: partition table partially beyond EOD, truncated [ 240.458374][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.460353][T12091] loop5: p1 start 134217728 is beyond EOD, [ 240.491699][T12109] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.527436][T12091] truncated [ 240.530685][T12091] loop5: p2 size 591360 extends beyond EOD, truncated [ 240.539682][T12091] loop5: p5 size 591360 extends beyond EOD, truncated [ 240.584043][T12132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1571'. [ 240.646655][T12109] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.706421][ T2999] loop5: p1 < > p2 p4 < p5 > [ 240.712851][ T2999] loop5: partition table partially beyond EOD, truncated [ 240.725008][T12147] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 240.728067][ T2999] loop5: p1 start 134217728 is beyond EOD, truncated [ 240.759585][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.778221][ T2999] loop5: p2 size 591360 extends beyond EOD, truncated [ 240.798162][T12147] vxcan1 speed is unknown, defaulting to 1000 [ 240.808694][ T2999] loop5: p5 size 591360 extends beyond EOD, truncated [ 240.869751][T12171] loop9: detected capacity change from 0 to 512 [ 240.907822][T12171] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.935689][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 240.946656][ T8526] udevd[8526]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 240.960057][T12171] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.986109][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 241.150918][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.430827][T12242] loop4: detected capacity change from 0 to 128 [ 241.591194][T12269] loop9: detected capacity change from 0 to 512 [ 241.756110][T12259] loop5: detected capacity change from 0 to 8192 [ 241.779206][T10647] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 241.789081][T10647] FAT-fs (loop4): Filesystem has been set read-only [ 241.809540][T10647] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 241.866374][ T8527] loop5: p1 < > p2 p4 < p5 > [ 241.879507][ T8527] loop5: partition table partially beyond EOD, truncated [ 241.902674][ T8527] loop5: p1 start 134217728 is beyond EOD, truncated [ 241.916198][ T8527] loop5: p2 size 591360 extends beyond EOD, truncated [ 241.935378][ T8527] loop5: p5 size 591360 extends beyond EOD, truncated [ 242.009431][T12246] vxcan1 speed is unknown, defaulting to 1000 [ 242.162478][T12259] loop5: p1 < > p2 p4 < p5 > [ 242.193949][T12259] loop5: partition table partially beyond EOD, truncated [ 242.221332][T12259] loop5: p1 start 134217728 is beyond EOD, truncated [ 242.257141][T12259] loop5: p2 size 591360 extends beyond EOD, truncated [ 242.281820][T12259] loop5: p5 size 591360 extends beyond EOD, truncated [ 242.315778][T12246] chnl_net:caif_netlink_parms(): no params data found [ 242.353999][T12375] loop3: detected capacity change from 0 to 512 [ 242.362646][T12375] EXT4-fs: Ignoring removed i_version option [ 242.369047][T12375] EXT4-fs: Ignoring removed bh option [ 242.432077][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 242.437628][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 242.452645][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 242.481174][T12375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.494928][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 242.509173][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 242.521538][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 242.545482][T12375] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.592827][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.600924][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.609327][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.625105][T12246] bridge_slave_0: entered allmulticast mode [ 242.631771][T12246] bridge_slave_0: entered promiscuous mode [ 242.638959][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.646196][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.653518][T12246] bridge_slave_1: entered allmulticast mode [ 242.660288][T12246] bridge_slave_1: entered promiscuous mode [ 242.697665][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 242.697680][ T28] audit: type=1400 audit(2000000105.226:3989): avc: denied { lock } for pid=12449 comm="syz.9.1586" path="socket:[30338]" dev="sockfs" ino=30338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.741154][T12246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.856954][T12246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.866302][ T28] audit: type=1400 audit(2000000105.326:3990): avc: denied { bind } for pid=12481 comm="syz.5.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.896801][T12246] team0: Port device team_slave_0 added [ 242.903362][T12246] team0: Port device team_slave_1 added [ 242.909235][ T28] audit: type=1400 audit(2000000105.326:3991): avc: denied { name_bind } for pid=12481 comm="syz.5.1587" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 242.964261][ T28] audit: type=1400 audit(2000000105.326:3992): avc: denied { node_bind } for pid=12481 comm="syz.5.1587" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 242.987039][T12246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.003218][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.046590][ T28] audit: type=1400 audit(2000000105.336:3993): avc: denied { setopt } for pid=12449 comm="syz.9.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.068332][ T28] audit: type=1400 audit(2000000105.386:3994): avc: denied { read } for pid=12487 comm="syz.5.1588" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 243.094222][ T28] audit: type=1400 audit(2000000105.386:3995): avc: denied { open } for pid=12487 comm="syz.5.1588" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 243.128461][T12246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.142116][T12363] vxcan1 speed is unknown, defaulting to 1000 [ 243.166191][T12246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.521767][T12531] loop3: detected capacity change from 0 to 4096 [ 243.551006][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.650088][T12531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.679187][ T28] audit: type=1400 audit(2000000106.206:3996): avc: denied { setattr } for pid=12461 comm="syz.3.1585" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.718555][T12246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.980889][T12246] hsr_slave_0: entered promiscuous mode [ 244.003127][T12246] hsr_slave_1: entered promiscuous mode [ 244.034713][T12246] debugfs: 'hsr0' already exists in 'hsr' [ 244.049319][T12584] loop5: detected capacity change from 0 to 512 [ 244.065168][T12246] Cannot create hsr debugfs directory [ 244.071016][T12584] EXT4-fs: Ignoring removed i_version option [ 244.105212][T12584] EXT4-fs: Ignoring removed bh option [ 244.132985][T12581] loop9: detected capacity change from 0 to 8192 [ 244.143954][T12584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.237656][T12584] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.185611][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.296227][T11097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.324981][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.424716][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.463432][T12684] loop3: detected capacity change from 0 to 512 [ 245.516490][T12684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.540869][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.562466][T12684] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.613070][ T28] audit: type=1400 audit(2000000108.146:3997): avc: denied { read append } for pid=12683 comm="syz.3.1598" path="/316/file0/cpu.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.667230][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.706499][ T28] audit: type=1400 audit(2000000108.146:3998): avc: denied { ioctl } for pid=12683 comm="syz.3.1598" path="/316/file0/cpu.stat" dev="loop3" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.748923][T12363] chnl_net:caif_netlink_parms(): no params data found [ 245.878987][ T36] bridge_slave_1: left allmulticast mode [ 245.884666][ T36] bridge_slave_1: left promiscuous mode [ 245.901096][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.916964][ T36] bridge_slave_0: left allmulticast mode [ 245.922758][ T36] bridge_slave_0: left promiscuous mode [ 245.934706][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.120125][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.131615][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.152562][ T36] bond0 (unregistering): Released all slaves [ 246.216446][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.232009][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.250850][T12363] bridge_slave_0: entered allmulticast mode [ 246.266871][T12363] bridge_slave_0: entered promiscuous mode [ 246.286411][T12363] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.338658][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.345944][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.358843][T12363] bridge_slave_1: entered allmulticast mode [ 246.371443][T12363] bridge_slave_1: entered promiscuous mode [ 246.422447][T12363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.443927][T12363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.483361][ T36] hsr_slave_0: left promiscuous mode [ 246.489177][ T36] hsr_slave_1: left promiscuous mode [ 246.496720][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.504247][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.518604][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.535209][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.538225][T12896] netlink: 'syz.3.1599': attribute type 10 has an invalid length. [ 246.562419][ T36] veth1_macvtap: left promiscuous mode [ 246.569092][ T36] veth0_macvtap: left promiscuous mode [ 246.574666][ T36] veth1_vlan: left promiscuous mode [ 246.580414][ T36] veth0_vlan: left promiscuous mode [ 246.622614][T12905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.642748][T12905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.658408][T12905] xt_hashlimit: size too large, truncated to 1048576 [ 246.730599][ T36] team0 (unregistering): Port device team_slave_1 removed [ 246.741098][ T36] team0 (unregistering): Port device team_slave_0 removed [ 246.863374][T12896] team0 (unregistering): Port device team_slave_0 removed [ 246.893134][T12896] team0 (unregistering): Port device team_slave_1 removed [ 246.920727][T12896] team0 (unregistering): Port device batadv1 removed [ 246.953370][T12363] team0: Port device team_slave_0 added [ 246.961260][T12363] team0: Port device team_slave_1 added [ 247.001858][T12363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.010691][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.043718][T12363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.062828][T12363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.071018][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.099267][T12363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.128895][T12363] hsr_slave_0: entered promiscuous mode [ 247.135064][T12363] hsr_slave_1: entered promiscuous mode [ 247.141306][T12363] debugfs: 'hsr0' already exists in 'hsr' [ 247.147246][T12363] Cannot create hsr debugfs directory [ 247.413076][T13095] loop9: detected capacity change from 0 to 512 [ 247.429242][T13095] EXT4-fs: Ignoring removed i_version option [ 247.453264][T13095] EXT4-fs: Ignoring removed bh option [ 247.537089][T13095] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.575960][T13095] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.651643][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.753905][T13122] loop5: detected capacity change from 0 to 512 [ 247.795409][T13122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.825833][T13122] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.938210][T11097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.109804][T12246] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 248.144737][T12246] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 248.250536][T12246] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 248.279343][T12246] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 248.334812][T13171] loop5: detected capacity change from 0 to 8192 [ 248.424998][T12246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.454762][ T8527] loop5: p1 < > p2 p4 < p5 > [ 248.463372][T12246] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.474056][ T8527] loop5: partition table partially beyond EOD, truncated [ 248.503507][ T8527] loop5: p1 start 134217728 is beyond EOD, truncated [ 248.539935][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.547089][ T7868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.554653][ T8527] loop5: p2 size 591360 extends beyond EOD, truncated [ 248.571256][ T8527] loop5: p5 size 591360 extends beyond EOD, truncated [ 248.595814][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.602893][ T7868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.680661][T12246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.723112][T12246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.863857][T12246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.992748][T13171] loop5: p1 < > p2 p4 < p5 > [ 249.020897][T13171] loop5: partition table partially beyond EOD, truncated [ 249.029138][T12363] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 249.473026][T13171] loop5: p1 start 134217728 is beyond EOD, truncated [ 249.481026][T13171] loop5: p2 size 591360 extends beyond EOD, truncated [ 249.493305][T12363] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 249.512890][T12363] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 249.521459][T13171] loop5: p5 size 591360 extends beyond EOD, truncated [ 249.562797][T12363] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 249.603915][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 249.603932][ T28] audit: type=1400 audit(2000000112.136:4006): avc: denied { ioctl } for pid=13261 comm="syz.9.1611" path="socket:[32941]" dev="sockfs" ino=32941 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 249.649840][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 249.659624][T13268] random: crng reseeded on system resumption [ 249.669580][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 249.681815][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 249.697548][T13262] tmpfs: Bad value for 'mpol' [ 249.714334][ T28] audit: type=1400 audit(2000000112.186:4007): avc: denied { write } for pid=13261 comm="syz.9.1611" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.732757][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 249.741512][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 249.758579][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 249.768935][T13259] loop3: detected capacity change from 0 to 8192 [ 249.769382][ T28] audit: type=1400 audit(2000000112.186:4008): avc: denied { open } for pid=13261 comm="syz.9.1611" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.851074][T12363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.944579][ T28] audit: type=1400 audit(2000000112.236:4009): avc: denied { mounton } for pid=13261 comm="syz.9.1611" path="/proc/280/cgroup" dev="proc" ino=32945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 249.996069][T12363] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.011459][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.013107][ T28] audit: type=1400 audit(2000000112.236:4010): avc: denied { ioctl } for pid=13261 comm="syz.9.1611" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 250.018685][ T7868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.069489][ T28] audit: type=1400 audit(2000000112.236:4011): avc: denied { mounton } for pid=13261 comm="syz.9.1611" path="/proc/280/cgroup" dev="nsfs" ino=4026532777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 250.319285][ T28] audit: type=1400 audit(2000000112.726:4012): avc: denied { append } for pid=13287 comm="syz.9.1612" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 250.592841][T12246] veth0_vlan: entered promiscuous mode [ 250.610363][T12246] veth1_vlan: entered promiscuous mode [ 250.658339][T12246] veth0_macvtap: entered promiscuous mode [ 250.673071][T12246] veth1_macvtap: entered promiscuous mode [ 250.720974][T12246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.749609][T12246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.024746][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.031892][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.122050][ T4017] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.131880][ T4017] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.154658][T13334] loop5: detected capacity change from 0 to 512 [ 251.162343][ T4017] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.176187][T13334] EXT4-fs: Ignoring removed i_version option [ 251.182360][T13334] EXT4-fs: Ignoring removed bh option [ 251.189907][ T4017] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.257369][T13334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.281406][T13334] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 251.329584][T11097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.356615][T12363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.500385][T12363] veth0_vlan: entered promiscuous mode [ 251.510296][T12363] veth1_vlan: entered promiscuous mode [ 251.532149][T12363] veth0_macvtap: entered promiscuous mode [ 251.543317][T12363] veth1_macvtap: entered promiscuous mode [ 251.561494][T12363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.577311][T12363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.591723][ T30] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.614419][ T30] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.640974][ T30] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.669794][ T30] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.790248][T13374] loop3: detected capacity change from 0 to 512 [ 251.817200][T13374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.871317][T13374] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.929724][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1619'. [ 253.868679][ T28] audit: type=1400 audit(2000000116.396:4013): avc: denied { write } for pid=13391 comm="syz.9.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 254.382923][T13387] loop8: detected capacity change from 0 to 4096 [ 254.615371][T13387] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.701212][T13409] hub 8-0:1.0: USB hub found [ 254.707228][T13409] hub 8-0:1.0: 8 ports detected [ 254.918243][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.790543][T12363] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.825617][T13432] loop5: detected capacity change from 0 to 512 [ 255.873784][T13432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.877309][T13444] xt_hashlimit: size too large, truncated to 1048576 [ 255.933202][ T28] audit: type=1400 audit(2000000118.436:4014): avc: denied { write } for pid=13450 comm="syz.3.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 255.996017][T13457] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1623'. [ 256.012800][T13432] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.037430][ T28] audit: type=1400 audit(2000000118.546:4015): avc: denied { ioctl } for pid=13422 comm="syz.6.1624" path="socket:[32130]" dev="sockfs" ino=32130 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 256.063757][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1623'. [ 256.091456][T13460] loop3: detected capacity change from 0 to 8192 [ 256.100977][T13469] loop9: detected capacity change from 0 to 512 [ 256.143679][T13469] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.171974][T13469] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.187180][T13469] FAULT_INJECTION: forcing a failure. [ 256.187180][T13469] name failslab, interval 1, probability 0, space 0, times 0 [ 256.205461][T13469] CPU: 0 UID: 0 PID: 13469 Comm: syz.9.1627 Tainted: G W syzkaller #0 PREEMPT(full) [ 256.205499][T13469] Tainted: [W]=WARN [ 256.205507][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.205532][T13469] Call Trace: [ 256.205539][T13469] [ 256.205546][T13469] __dump_stack+0x1d/0x30 [ 256.205656][T13469] dump_stack_lvl+0x95/0xd0 [ 256.205681][T13469] dump_stack+0x15/0x1b [ 256.205703][T13469] should_fail_ex+0x263/0x280 [ 256.205756][T13469] should_failslab+0x8c/0xb0 [ 256.205789][T13469] kmem_cache_alloc_noprof+0x66/0x400 [ 256.205877][T13469] ? do_getname+0x2e/0x1c0 [ 256.205900][T13469] ? vfs_write+0x86e/0x9f0 [ 256.205975][T13469] do_getname+0x2e/0x1c0 [ 256.205998][T13469] getname_flags+0x1d/0x30 [ 256.206021][T13469] __se_sys_quotactl+0x157/0x660 [ 256.206050][T13469] __x64_sys_quotactl+0x55/0x70 [ 256.206075][T13469] x64_sys_call+0x1a2a/0x3020 [ 256.206112][T13469] do_syscall_64+0x12c/0x370 [ 256.206134][T13469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.206162][T13469] RIP: 0033:0x7f12ca59c799 [ 256.206181][T13469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.206204][T13469] RSP: 002b:00007f12c8ff7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 256.206265][T13469] RAX: ffffffffffffffda RBX: 00007f12ca815fa0 RCX: 00007f12ca59c799 [ 256.206282][T13469] RDX: 000000000000ee00 RSI: 0000200000000140 RDI: ffffffff80000300 [ 256.206297][T13469] RBP: 00007f12c8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 256.206343][T13469] R10: 8cffffff00000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.206357][T13469] R13: 00007f12ca816038 R14: 00007f12ca815fa0 R15: 00007ffc32f8bb78 [ 256.206379][T13469] [ 256.487866][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.530479][T11097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.600834][T13513] loop9: detected capacity change from 0 to 512 [ 256.652685][T13513] EXT4-fs: Ignoring removed i_version option [ 256.663631][T13513] EXT4-fs: Ignoring removed bh option [ 256.680886][T13513] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.792259][ T28] audit: type=1400 audit(2000000119.326:4016): avc: denied { bind } for pid=13516 comm="syz.6.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.816289][T13513] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.943882][ T28] audit: type=1400 audit(2000000119.326:4017): avc: denied { getopt } for pid=13516 comm="syz.6.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.977694][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.989632][ T28] audit: type=1400 audit(2000000119.356:4018): avc: denied { firmware_load } for pid=13561 comm="syz.8.1631" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 257.020959][ T28] audit: type=1326 audit(2000000119.476:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13588 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203bddc799 code=0x7ffc0000 [ 257.046686][T13589] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1633'. [ 257.058896][T13589] bridge1: entered promiscuous mode [ 257.064205][T13589] bridge1: entered allmulticast mode [ 257.096170][ T28] audit: type=1326 audit(2000000119.476:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13588 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203bddc799 code=0x7ffc0000 [ 257.199054][T13607] dummy0: entered promiscuous mode [ 257.204311][T13607] dummy0: left promiscuous mode [ 257.223458][ T28] audit: type=1326 audit(2000000119.476:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13588 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f203bd9cfce code=0x7ffc0000 [ 257.278384][ T28] audit: type=1326 audit(2000000119.476:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13588 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f203bddda97 code=0x7ffc0000 [ 257.311640][T13598] loop3: detected capacity change from 0 to 8192 [ 257.365544][ T28] audit: type=1326 audit(2000000119.476:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13588 comm="syz.5.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f203bddc799 code=0x7ffc0000 [ 257.422334][ T8527] loop3: p1 < > p2 p4 < p5 > [ 257.428240][ T8527] loop3: partition table partially beyond EOD, truncated [ 257.451756][ T8527] loop3: p1 start 134217728 is beyond EOD, truncated [ 257.460287][ T8527] loop3: p2 size 591360 extends beyond EOD, truncated [ 257.470405][ T8527] loop3: p5 size 591360 extends beyond EOD, truncated [ 257.482016][T13629] loop5: detected capacity change from 0 to 512 [ 257.507230][T13629] EXT4-fs: Ignoring removed i_version option [ 257.513281][T13629] EXT4-fs: Ignoring removed bh option [ 257.558871][T13598] loop3: p1 < > p2 p4 < p5 > [ 257.595153][T13598] loop3: partition table partially beyond EOD, truncated [ 257.615107][T13636] loop6: detected capacity change from 0 to 8192 [ 257.638359][T13629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.655254][T13598] loop3: p1 start 134217728 is beyond EOD, truncated [ 257.666754][T13629] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.690520][T13598] loop3: p2 size 591360 extends beyond EOD, truncated [ 257.729114][T13598] loop3: p5 size 591360 extends beyond EOD, truncated [ 257.846975][T11097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.893401][T13676] loop8: detected capacity change from 0 to 1024 [ 257.898373][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 257.913352][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 257.922662][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 257.966723][T13676] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.008578][ T8512] udevd[8512]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 258.024928][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 258.034061][T13697] udevd[13697]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 258.099453][T12363] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.184448][T13707] loop9: detected capacity change from 0 to 512 [ 258.193875][T13707] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 258.207243][T13707] EXT4-fs (loop9): 1 truncate cleaned up [ 258.234905][T13707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.334039][T13724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1644'. [ 258.344124][T13724] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1644'. [ 258.354235][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 258.369970][ T3422] IPVS: starting estimator thread 0... [ 258.421933][T13723] hub 8-0:1.0: USB hub found [ 258.473713][T13723] hub 8-0:1.0: 8 ports detected [ 258.486253][T13725] IPVS: using max 2688 ests per chain, 134400 per kthread [ 259.487635][T13745] vxcan1 speed is unknown, defaulting to 1000 [ 260.257312][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.154064][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 261.154083][ T28] audit: type=1400 audit(2000000123.686:4098): avc: denied { unmount } for pid=11097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 261.231850][T13786] set_capacity_and_notify: 1 callbacks suppressed [ 261.231868][T13786] loop5: detected capacity change from 0 to 512 [ 261.274549][T13786] EXT4-fs: Ignoring removed bh option [ 261.284170][ T28] audit: type=1400 audit(2000000123.816:4099): avc: denied { create } for pid=13781 comm="syz.9.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.319859][T13786] EXT4-fs: inline encryption not supported [ 261.337272][T13786] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.368749][ T28] audit: type=1400 audit(2000000123.836:4100): avc: denied { setopt } for pid=13781 comm="syz.9.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.400791][T13786] EXT4-fs (loop5): fragment/cluster size (8192) != block size (4096) [ 261.551404][T13805] loop6: detected capacity change from 0 to 1024 [ 261.557878][ T28] audit: type=1400 audit(2000000124.086:4101): avc: denied { create } for pid=13800 comm="syz.5.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 261.666184][T13805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.745034][T13796] loop9: detected capacity change from 0 to 8192 [ 261.757198][ T28] audit: type=1400 audit(2000000124.296:4102): avc: denied { read write } for pid=13804 comm="syz.6.1656" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 261.830544][ T28] audit: type=1400 audit(2000000124.296:4103): avc: denied { open } for pid=13804 comm="syz.6.1656" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 261.856382][ T28] audit: type=1400 audit(2000000124.326:4104): avc: denied { remove_name } for pid=13804 comm="syz.6.1656" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 261.896253][ T28] audit: type=1400 audit(2000000124.326:4105): avc: denied { unlink } for pid=13804 comm="syz.6.1656" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 261.970463][T12246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.990609][ T8527] loop9: p1 < > p2 p4 < p5 > [ 261.996309][ T8527] loop9: partition table partially beyond EOD, truncated [ 262.009894][ T8527] loop9: p1 start 134217728 is beyond EOD, truncated [ 262.043145][ T8527] loop9: p2 size 591360 extends beyond EOD, truncated [ 262.079762][ T8527] loop9: p5 size 591360 extends beyond EOD, truncated [ 262.120514][T13796] loop9: p1 < > p2 p4 < p5 > [ 262.126208][T13796] loop9: partition table partially beyond EOD, truncated [ 262.133521][T13796] loop9: p1 start 134217728 is beyond EOD, truncated [ 262.146753][ T7173] kernel read not supported for file /virtual_nci (pid: 7173 comm: kworker/1:8) [ 262.156700][T13796] loop9: p2 size 591360 extends beyond EOD, truncated [ 262.165999][T13796] loop9: p5 size 591360 extends beyond EOD, truncated [ 262.173367][T13783] loop3: detected capacity change from 0 to 1764 [ 262.226553][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 262.228103][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 262.238566][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 262.309882][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 262.369440][T13877] loop6: detected capacity change from 0 to 512 [ 262.380616][T13877] EXT4-fs: Ignoring removed i_version option [ 262.388293][T13877] EXT4-fs: Ignoring removed bh option [ 262.438804][T13877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.472623][T13877] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.499920][T12246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.541003][T13893] loop3: detected capacity change from 0 to 1024 [ 262.558340][ T28] audit: type=1400 audit(2000000125.096:4106): avc: denied { ioctl } for pid=13894 comm="syz.6.1664" path="socket:[33372]" dev="sockfs" ino=33372 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.612877][T13893] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 262.627826][T13903] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 262.638656][T13893] System zones: 0-1, 3-12 [ 262.643697][T13893] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.677435][T13893] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 262.694276][T13903] vxcan1 speed is unknown, defaulting to 1000 [ 262.721612][T13893] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1665'. [ 262.752058][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1665'. [ 262.828346][ T28] audit: type=1400 audit(2000000125.366:4107): avc: denied { create } for pid=13936 comm="syz.3.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 262.887868][T13941] loop9: detected capacity change from 0 to 1024 [ 262.923523][T13941] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.970963][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.036472][T13955] syzkaller0: entered promiscuous mode [ 263.042187][T13955] syzkaller0: entered allmulticast mode [ 263.073238][T13969] loop9: detected capacity change from 0 to 512 [ 263.088922][T13969] EXT4-fs (loop9): 1 truncate cleaned up [ 263.097606][T13969] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.148454][T13974] sctp: [Deprecated]: syz.3.1674 (pid 13974) Use of int in max_burst socket option deprecated. [ 263.148454][T13974] Use struct sctp_assoc_value instead [ 263.256996][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1677'. [ 263.274813][T13992] netlink: 'syz.6.1679': attribute type 4 has an invalid length. [ 263.322026][T13996] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1680'. [ 263.334332][T13996] bridge1: entered promiscuous mode [ 263.339584][T13996] bridge1: entered allmulticast mode [ 263.399818][T14008] dummy0: entered promiscuous mode [ 263.405272][T14008] dummy0: left promiscuous mode [ 263.539450][T14020] loop8: detected capacity change from 0 to 1024 [ 263.569291][T14020] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.598617][T12363] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.631262][T14029] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1684'. [ 263.655089][T14029] xt_hashlimit: size too large, truncated to 1048576 [ 263.868182][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.947566][T14058] loop9: detected capacity change from 0 to 512 [ 263.959650][T14058] EXT4-fs (loop9): 1 truncate cleaned up [ 263.967287][T14058] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.982543][T14058] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1690: bg 0: block 465: padding at end of block bitmap is not set [ 263.997161][T14058] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 264.007144][T14058] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1690: invalid indirect mapped block 234881024 (level 0) [ 264.038783][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.135317][T14070] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1692'. [ 264.147621][T14070] bridge2: entered promiscuous mode [ 264.152835][T14070] bridge2: entered allmulticast mode [ 264.197652][T14075] dummy0: entered promiscuous mode [ 264.203053][T14075] dummy0: left promiscuous mode [ 264.657442][T14091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.682370][T14096] netlink: 'syz.8.1695': attribute type 3 has an invalid length. [ 264.694156][T12246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.743522][T14103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14103 comm=syz.8.1695 [ 264.980371][T13838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.062307][T14121] netlink: 'syz.6.1701': attribute type 10 has an invalid length. [ 265.070422][T14121] ipvlan0: entered allmulticast mode [ 265.075855][T14121] veth0_vlan: entered allmulticast mode [ 265.083977][T14121] team0: Device ipvlan0 failed to register rx_handler [ 265.088582][T14129] EXT4-fs: Ignoring removed i_version option [ 265.098669][T14129] EXT4-fs: Ignoring removed bh option [ 265.104607][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1700'. [ 265.139463][T14127] hsr_slave_0: left promiscuous mode [ 265.202702][T14129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.236279][T14141] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1703'. [ 265.272419][T14141] bridge1: entered promiscuous mode [ 265.279464][T14129] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.289120][T14141] bridge1: entered allmulticast mode [ 265.317827][T11097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.401207][T14155] hub 8-0:1.0: USB hub found [ 265.407061][T14155] hub 8-0:1.0: 8 ports detected [ 265.546690][T14124] dummy0: entered promiscuous mode [ 266.386350][T14122] dummy0: left promiscuous mode [ 266.521965][T14177] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 266.615732][ T3421] kernel read not supported for file /virtual_nci (pid: 3421 comm: kworker/0:3) [ 266.663680][T14196] vxcan1 speed is unknown, defaulting to 1000 [ 266.773624][T14208] set_capacity_and_notify: 2 callbacks suppressed [ 266.773643][T14208] loop8: detected capacity change from 0 to 8192 [ 266.905410][T14240] loop5: detected capacity change from 0 to 512 [ 266.914139][T14240] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 266.938204][T14240] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1715: invalid indirect mapped block 83886080 (level 1) [ 266.965232][T14240] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 266.975147][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 266.990739][ C0] EXT4-fs (loop5): initial error at time 2000000129: ext4_free_branches:1023: inode 16 [ 267.000410][ C0] EXT4-fs (loop5): last error at time 2000000129: ext4_free_branches:1023: inode 16 [ 267.039178][T14240] EXT4-fs (loop5): Remounting filesystem read-only [ 267.065230][T14240] EXT4-fs (loop5): 1 orphan inode deleted [ 267.107417][T14249] loop6: detected capacity change from 0 to 512 [ 267.114056][T14240] EXT4-fs (loop5): 1 truncate cleaned up [ 267.121363][T14240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.134895][T14249] EXT4-fs: Ignoring removed i_version option [ 267.169980][T14249] EXT4-fs: Ignoring removed bh option [ 267.187530][T14240] FAULT_INJECTION: forcing a failure. [ 267.187530][T14240] name failslab, interval 1, probability 0, space 0, times 0 [ 267.200345][T14240] CPU: 0 UID: 0 PID: 14240 Comm: syz.5.1715 Tainted: G W syzkaller #0 PREEMPT(full) [ 267.200376][T14240] Tainted: [W]=WARN [ 267.200384][T14240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.200417][T14240] Call Trace: [ 267.200424][T14240] [ 267.200476][T14240] __dump_stack+0x1d/0x30 [ 267.200501][T14240] dump_stack_lvl+0x95/0xd0 [ 267.200562][T14240] dump_stack+0x15/0x1b [ 267.200643][T14240] should_fail_ex+0x263/0x280 [ 267.200670][T14240] should_failslab+0x8c/0xb0 [ 267.200724][T14240] kmem_cache_alloc_noprof+0x66/0x400 [ 267.200750][T14240] ? __es_insert_extent+0x508/0xee0 [ 267.200789][T14240] __es_insert_extent+0x508/0xee0 [ 267.200823][T14240] ext4_es_cache_extent+0x37e/0x5d0 [ 267.200897][T14240] ext4_map_query_blocks+0x38c/0x550 [ 267.200934][T14240] ? ext4_es_lookup_extent+0x3ae/0x570 [ 267.200967][T14240] ext4_map_blocks+0x306/0x970 [ 267.201013][T14240] ext4_getblk+0x128/0x530 [ 267.201080][T14240] ext4_bread_batch+0x5c/0x320 [ 267.201117][T14240] __ext4_find_entry+0x852/0xdf0 [ 267.201154][T14240] ? ext4_xattr_security_get+0x32/0x40 [ 267.201191][T14240] ? _raw_spin_unlock+0x9/0x30 [ 267.201265][T14240] ? inode_doinit_with_dentry+0x3a8/0x7a0 [ 267.201295][T14240] ext4_get_parent+0xc8/0x240 [ 267.201321][T14240] reconnect_path+0x114/0x400 [ 267.201345][T14240] ? __pfx_ext4_nfs_get_inode+0x10/0x10 [ 267.201386][T14240] ? generic_fh_to_dentry+0x8b/0xa0 [ 267.201443][T14240] exportfs_decode_fh_raw+0x20f/0x4e0 [ 267.201470][T14240] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 267.201492][T14240] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 267.201530][T14240] do_handle_to_path+0x6c/0xe0 [ 267.201596][T14240] do_handle_open+0x577/0x790 [ 267.201627][T14240] __x64_sys_open_by_handle_at+0x44/0x50 [ 267.201664][T14240] x64_sys_call+0x153d/0x3020 [ 267.201724][T14240] do_syscall_64+0x12c/0x370 [ 267.201743][T14240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.201763][T14240] RIP: 0033:0x7f203bddc799 [ 267.201780][T14240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.201854][T14240] RSP: 002b:00007f203a82f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 267.201879][T14240] RAX: ffffffffffffffda RBX: 00007f203c055fa0 RCX: 00007f203bddc799 [ 267.201897][T14240] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 267.201913][T14240] RBP: 00007f203a82f090 R08: 0000000000000000 R09: 0000000000000000 [ 267.201952][T14240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.201963][T14240] R13: 00007f203c056038 R14: 00007f203c055fa0 R15: 00007fff26fe0b18 [ 267.201982][T14240] [ 267.556654][T11097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.579950][T14249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.608136][T14249] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.664683][T12246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.007105][T14300] loop5: detected capacity change from 0 to 512 [ 268.043176][T14300] EXT4-fs: Ignoring removed i_version option [ 268.075283][T14300] EXT4-fs: Ignoring removed bh option [ 268.106811][T14300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.124305][T14300] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.162201][T11097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.806190][T14372] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1721'. [ 269.459542][T14174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.555438][T14423] loop8: detected capacity change from 0 to 1024 [ 269.633579][T14423] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.757737][ T28] kauditd_printk_skb: 290 callbacks suppressed [ 269.758157][ T28] audit: type=1326 audit(2000000132.246:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ca59c799 code=0x7ffc0000 [ 269.790882][T12363] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.825365][ T28] audit: type=1326 audit(2000000132.246:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ca59c799 code=0x7ffc0000 [ 269.877015][T14432] loop3: detected capacity change from 0 to 8192 [ 269.883598][T14440] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1727'. [ 269.897907][T14440] bridge2: entered promiscuous mode [ 269.903171][T14440] bridge2: entered allmulticast mode [ 269.927164][ T28] audit: type=1326 audit(2000000132.246:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12ca55cfce code=0x7ffc0000 [ 269.952818][ T28] audit: type=1326 audit(2000000132.246:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f12ca59da97 code=0x7ffc0000 [ 269.991658][T14453] dummy0: entered promiscuous mode [ 269.997260][T14453] dummy0: left promiscuous mode [ 269.998533][ T8450] loop3: p1 < > p2 p4 < p5 > [ 270.009786][ T8450] loop3: partition table partially beyond EOD, truncated [ 270.019846][ T28] audit: type=1326 audit(2000000132.246:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12ca59c799 code=0x7ffc0000 [ 270.054082][T14457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.064328][T14457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.078693][ T28] audit: type=1326 audit(2000000132.246:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f12ca59da97 code=0x7ffc0000 [ 270.085423][ T8450] loop3: p1 start 134217728 is beyond EOD, [ 270.104961][ T28] audit: type=1326 audit(2000000132.246:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f12ca55cfce code=0x7ffc0000 [ 270.137726][ T28] audit: type=1326 audit(2000000132.246:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ca59c799 code=0x7ffc0000 [ 270.146836][ T8450] truncated [ 270.166313][ T28] audit: type=1326 audit(2000000132.246:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ca59c799 code=0x7ffc0000 [ 270.192100][ T8450] loop3: p2 size 591360 extends beyond EOD, truncated [ 270.203789][ T28] audit: type=1326 audit(2000000132.246:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14438 comm="syz.9.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12ca55cfce code=0x7ffc0000 [ 270.225474][ T8450] loop3: p5 size 591360 extends beyond EOD, truncated [ 270.271103][T14432] loop3: p1 < > p2 p4 < p5 > [ 270.303974][T14484] loop9: detected capacity change from 0 to 512 [ 270.312618][T14432] loop3: partition table partially beyond EOD, truncated [ 270.327711][T14484] EXT4-fs: Ignoring removed i_version option [ 270.342242][T14484] EXT4-fs: Ignoring removed bh option [ 270.365406][T14432] loop3: p1 start 134217728 is beyond EOD, truncated [ 270.379734][T14432] loop3: p2 size 591360 extends beyond EOD, truncated [ 270.383046][T14484] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.397292][T14432] loop3: p5 size 591360 extends beyond EOD, truncated [ 270.421809][T14484] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.463472][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 270.463516][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 270.502505][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 270.545572][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.573488][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 270.586455][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 270.710883][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 270.848252][T14522] vxcan1 speed is unknown, defaulting to 1000 [ 271.041260][T14522] loop9: detected capacity change from 0 to 4096 [ 271.259429][T14521] loop5: detected capacity change from 0 to 8192 [ 271.438706][T14559] hub 8-0:1.0: USB hub found [ 271.443558][T14559] hub 8-0:1.0: 8 ports detected [ 272.068231][T14594] loop8: detected capacity change from 0 to 128 [ 272.103974][T14578] loop3: detected capacity change from 0 to 8192 [ 272.112519][T14594] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.264320][T14592] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1739'. [ 272.278227][T14594] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.405325][T14605] loop3: p1 < > p2 p4 < p5 > [ 272.410215][T14605] loop3: partition table partially beyond EOD, truncated [ 272.433472][T14605] loop3: p1 start 134217728 is beyond EOD, truncated [ 272.457456][T14605] loop3: p2 size 591360 extends beyond EOD, truncated [ 272.508083][T14605] loop3: p5 size 591360 extends beyond EOD, truncated [ 272.564836][ T2999] loop3: p1 < > p2 p4 < p5 > [ 272.576304][ T2999] loop3: partition table partially beyond EOD, truncated [ 272.599476][ T2999] loop3: p1 start 134217728 is beyond EOD, truncated [ 272.622987][ T2999] loop3: p2 size 591360 extends beyond EOD, truncated [ 272.645804][ T2999] loop3: p5 size 591360 extends beyond EOD, truncated [ 272.679322][T14578] loop3: p1 < > p2 p4 < p5 > [ 272.688695][T14578] loop3: partition table partially beyond EOD, truncated [ 272.714003][T14578] loop3: p1 start 134217728 is beyond EOD, truncated [ 272.756517][T14578] loop3: p2 size 591360 extends beyond EOD, truncated [ 272.791187][T14578] loop3: p5 size 591360 extends beyond EOD, truncated [ 272.887105][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 272.904928][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 272.917126][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 272.973700][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 272.993126][T14587] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.000399][T14587] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.611925][T14587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.668434][T14587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.186985][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1747'. [ 274.526836][T14654] loop3: detected capacity change from 0 to 8192 [ 275.559912][T14655] loop9: detected capacity change from 0 to 4096 [ 275.655515][T14655] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.705205][ T4015] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.822629][ T4015] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.025473][T12363] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.037975][ T4015] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.088437][T14689] netlink: 'syz.6.1751': attribute type 1 has an invalid length. [ 276.098816][ T4015] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.111074][T14700] loop5: detected capacity change from 0 to 512 [ 276.141728][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1751'. [ 276.161240][T14700] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.241596][T14700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.318980][T14690] vxcan1 speed is unknown, defaulting to 1000 [ 276.367912][T14700] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.380906][T14758] loop8: detected capacity change from 0 to 512 [ 276.565091][T14691] EXT4-fs (loop5): shut down requested (0) [ 276.572290][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 276.572306][ T28] audit: type=1400 audit(2000000139.106:4480): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 276.977819][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.052262][T14758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.065561][T14768] hub 8-0:1.0: USB hub found [ 277.070430][T14768] hub 8-0:1.0: 8 ports detected [ 277.219294][T14773] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 277.283178][ T28] audit: type=1400 audit(2000000139.106:4481): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.335733][T14773] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 277.376903][T14773] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 277.401503][ T28] audit: type=1400 audit(2000000139.106:4482): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.440557][T14758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.475943][T14758] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 277.499980][ T28] audit: type=1400 audit(2000000139.106:4483): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.526352][T11097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.549234][ T28] audit: type=1400 audit(2000000139.106:4484): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.572770][ T28] audit: type=1400 audit(2000000139.106:4485): avc: denied { append open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.597958][ T28] audit: type=1400 audit(2000000139.106:4486): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.622616][ T28] audit: type=1400 audit(2000000139.916:4487): avc: denied { append } for pid=14688 comm="syz.5.1754" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 277.640183][T14809] FAULT_INJECTION: forcing a failure. [ 277.640183][T14809] name failslab, interval 1, probability 0, space 0, times 0 [ 277.677849][ T28] audit: type=1400 audit(2000000139.956:4488): avc: denied { open } for pid=14688 comm="syz.5.1754" path="/45/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 277.678177][T14809] CPU: 0 UID: 0 PID: 14809 Comm: syz.9.1756 Tainted: G W syzkaller #0 PREEMPT(full) [ 277.678272][T14809] Tainted: [W]=WARN [ 277.678292][T14809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.678331][T14809] Call Trace: [ 277.678351][T14809] [ 277.678372][T14809] __dump_stack+0x1d/0x30 [ 277.678457][T14809] dump_stack_lvl+0x95/0xd0 [ 277.678528][T14809] dump_stack+0x15/0x1b [ 277.678657][T14809] should_fail_ex+0x263/0x280 [ 277.678725][T14809] should_failslab+0x8c/0xb0 [ 277.678794][T14809] __kmalloc_noprof+0xb8/0x4e0 [ 277.678851][T14809] ? nla_strdup+0x78/0xc0 [ 277.678919][T14809] ? nf_tables_newtable+0x375/0xea0 [ 277.679111][T14809] nla_strdup+0x78/0xc0 [ 277.679191][T14809] nf_tables_newtable+0x3ba/0xea0 [ 277.679285][T14809] nfnetlink_rcv+0xc1e/0x1720 [ 277.679432][T14809] netlink_unicast+0x5c0/0x690 [ 277.679542][T14809] netlink_sendmsg+0x5c8/0x6f0 [ 277.679632][T14809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.679728][T14809] ____sys_sendmsg+0x5af/0x600 [ 277.679818][T14809] ___sys_sendmsg+0x195/0x1e0 [ 277.679983][T14809] __x64_sys_sendmsg+0xd4/0x160 [ 277.680074][T14809] x64_sys_call+0x194c/0x3020 [ 277.680156][T14809] do_syscall_64+0x12c/0x370 [ 277.680204][T14809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.680273][T14809] RIP: 0033:0x7f12ca59c799 [ 277.680321][T14809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.680380][T14809] RSP: 002b:00007f12c8ff7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.680490][T14809] RAX: ffffffffffffffda RBX: 00007f12ca815fa0 RCX: 00007f12ca59c799 [ 277.680539][T14809] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 277.680578][T14809] RBP: 00007f12c8ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 277.680658][T14809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.680697][T14809] R13: 00007f12ca816038 R14: 00007f12ca815fa0 R15: 00007ffc32f8bb78 [ 277.680839][T14809] [ 277.740547][T14786] loop6: detected capacity change from 0 to 8192 [ 277.858028][ T28] audit: type=1400 audit(2000000140.386:4489): avc: denied { ioctl } for pid=14684 comm="syz.3.1752" path="socket:[34974]" dev="sockfs" ino=34974 ioctlcmd=0x5441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 277.956428][T14690] loop3: detected capacity change from 0 to 1024 [ 277.996516][T14690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.094752][T14817] loop5: detected capacity change from 0 to 8192 [ 278.255950][T12363] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.674397][ T8527] loop5: p1 < > p2 p4 < p5 > [ 278.679276][ T8527] loop5: partition table partially beyond EOD, truncated [ 278.746229][T14849] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1760'. [ 278.854942][ T8527] loop5: p1 start 134217728 is beyond EOD, truncated [ 278.946684][ T8527] loop5: p2 size 591360 extends beyond EOD, truncated [ 278.978178][ T8527] loop5: p5 size 591360 extends beyond EOD, truncated [ 279.083891][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.171627][T14850] loop8: detected capacity change from 0 to 8192 [ 279.275250][T14855] loop8: p1 < > p2 p4 < p5 > [ 279.298436][T14855] loop8: partition table partially beyond EOD, truncated [ 279.340087][T14855] loop8: p1 start 134217728 is beyond EOD, truncated [ 279.379245][T14855] loop8: p2 size 591360 extends beyond EOD, truncated [ 279.436312][T14855] loop8: p5 size 591360 extends beyond EOD, truncated [ 279.651345][T14817] loop5: p1 < > p2 p4 < p5 > [ 279.702766][T14850] loop8: p1 < > p2 p4 < p5 > [ 279.707630][T14817] loop5: partition table partially beyond EOD, truncated [ 279.873494][T14850] loop8: partition table partially beyond EOD, truncated [ 280.026334][T14850] loop8: p1 start 134217728 is beyond EOD, truncated [ 280.053655][T14817] loop5: p1 start 134217728 is beyond EOD, truncated [ 280.066258][T14850] loop8: p2 size 591360 extends beyond EOD, truncated [ 280.107821][T14878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1767'. [ 280.223558][T14878] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1767'. [ 280.306239][T14880] xt_CT: No such helper "snmp_trap" [ 280.312239][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1767'. [ 280.359068][T14817] loop5: p2 size 591360 extends beyond EOD, truncated [ 280.369417][T14817] loop5: p5 size 591360 extends beyond EOD, truncated [ 280.382415][ T2999] loop5: p1 < > p2 p4 < p5 > [ 280.383079][T14850] loop8: p5 size 591360 extends beyond EOD, [ 280.398577][ T2999] loop5: partition table partially beyond EOD, truncated [ 280.413191][T14850] truncated [ 280.417185][ T2999] loop5: p1 start 134217728 is beyond EOD, truncated [ 280.417283][ T2999] loop5: p2 size 591360 extends beyond EOD, truncated [ 280.436700][ T2999] loop5: p5 size 591360 extends beyond EOD, truncated [ 280.523736][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 280.570433][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 280.582924][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 280.631489][T14919] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1770'. [ 280.643638][T14919] bridge1: entered promiscuous mode [ 280.648913][T14919] bridge1: entered allmulticast mode [ 280.679592][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 280.697365][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 280.709210][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 280.736522][T11613] udevd[11613]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 280.756983][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 280.773091][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 280.788061][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 281.039613][T14934] loop3: detected capacity change from 0 to 8192 [ 281.057359][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1772'. [ 281.082326][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1772'. [ 281.140589][T14946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14946 comm=syz.5.1774 [ 281.328629][T14961] loop6: detected capacity change from 0 to 512 [ 281.372659][T14961] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 281.414070][T14961] EXT4-fs (loop6): 1 truncate cleaned up [ 281.422076][T14961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.442619][T14961] netlink: 'syz.6.1777': attribute type 29 has an invalid length. [ 281.466585][T14961] netlink: 'syz.6.1777': attribute type 3 has an invalid length. [ 281.481913][T14977] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 281.493082][T14961] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1777'. [ 281.507861][T14977] bond1 (unregistering): Released all slaves [ 281.537849][T12246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.604411][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 281.604425][ T28] audit: type=1400 audit(2000000144.143:4554): avc: denied { ioctl } for pid=15050 comm="syz.6.1781" path="socket:[34231]" dev="sockfs" ino=34231 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 281.690973][T15056] loop6: detected capacity change from 0 to 256 [ 281.771745][ T28] audit: type=1400 audit(2000000144.283:4555): avc: denied { read } for pid=15055 comm="syz.6.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 281.816214][ T28] audit: type=1326 audit(2000000144.353:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.6.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b5a3c799 code=0x7ffc0000 [ 281.841840][T15065] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1784'. [ 281.854228][T15065] bridge1: entered promiscuous mode [ 281.861118][T15065] bridge1: entered allmulticast mode [ 281.873865][ T28] audit: type=1326 audit(2000000144.353:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.6.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b5a3c799 code=0x7ffc0000 [ 281.906734][ T28] audit: type=1326 audit(2000000144.353:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.6.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54b59fcfce code=0x7ffc0000 [ 281.980512][ T28] audit: type=1326 audit(2000000144.353:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.6.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f54b5a3da97 code=0x7ffc0000 [ 282.011891][ T28] audit: type=1326 audit(2000000144.353:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.6.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54b5a3c799 code=0x7ffc0000 [ 282.037931][ T28] audit: type=1326 audit(2000000144.353:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.6.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f54b5a3da97 code=0x7ffc0000 [ 282.063340][ T28] audit: type=1326 audit(2000000144.353:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.6.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f54b59fcfce code=0x7ffc0000 [ 282.139878][ T28] audit: type=1326 audit(2000000144.353:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15064 comm="syz.6.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b5a3c799 code=0x7ffc0000 [ 282.186118][T15082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15082 comm=syz.8.1786 [ 282.708395][T15107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15107 comm=syz.6.1789 [ 282.793226][T15107] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1789'. [ 282.975982][T15117] loop9: detected capacity change from 0 to 512 [ 282.986967][T15117] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 283.001311][T15117] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 283.010332][T15117] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.1791: bad orphan inode 4 [ 283.020620][T15117] loop9: lost filesystem error report for type 5 error -117 [ 283.020874][T15117] EXT4-fs (loop9): 1 orphan inode deleted [ 283.028227][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 283.028247][ C0] EXT4-fs (loop9): initial error at time 2000000145: ext4_orphan_get:1417 [ 283.028293][ C0] EXT4-fs (loop9): last error at time 2000000145: ext4_orphan_get:1417 [ 283.058264][T15117] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.203883][T15132] netlink: 'syz.6.1794': attribute type 46 has an invalid length. [ 283.343863][T15134] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 283.427975][T15147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15147 comm=syz.6.1797 [ 283.524249][T15156] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1799'. [ 283.536970][T15156] bridge1: entered promiscuous mode [ 283.542263][T15156] bridge1: entered allmulticast mode [ 283.881473][ T8121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.928254][T15176] loop9: detected capacity change from 0 to 128 [ 284.035828][T15185] syz.9.1800: attempt to access beyond end of device [ 284.035828][T15185] loop9: rw=8388611, sector=177, nr_sectors = 7 limit=128 [ 284.053947][T15183] loop5: detected capacity change from 0 to 512 [ 284.064662][T15185] syz.9.1800: attempt to access beyond end of device [ 284.064662][T15185] loop9: rw=8390659, sector=184, nr_sectors = 1 limit=128 [ 284.153753][T15183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.178505][T15183] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.252485][ T4015] kworker/u8:8: attempt to access beyond end of device [ 284.252485][ T4015] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 284.287644][ T4015] kworker/u8:8: attempt to access beyond end of device [ 284.287644][ T4015] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 284.337554][ T4015] kworker/u8:8: attempt to access beyond end of device [ 284.337554][ T4015] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 284.355074][ T4015] kworker/u8:8: attempt to access beyond end of device [ 284.355074][ T4015] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 284.369767][ T4015] kworker/u8:8: attempt to access beyond end of device [ 284.369767][ T4015] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 284.383771][ T4015] kworker/u8:8: attempt to access beyond end of device [ 284.383771][ T4015] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 284.399384][ T4015] kworker/u8:8: attempt to access beyond end of device [ 284.399384][ T4015] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 284.418131][ T4015] kworker/u8:8: attempt to access beyond end of device [ 284.418131][ T4015] loop9: rw=1, sector=265, nr_sectors = 16 limit=128 [ 284.461179][T15200] loop6: detected capacity change from 0 to 512 [ 284.497113][T15200] EXT4-fs (loop6): 1 truncate cleaned up [ 284.518908][T15200] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.557895][T15208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=274 sclass=netlink_route_socket pid=15208 comm=syz.9.1803 [ 284.593445][T12246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.768229][T15223] Cannot find add_set index 1 as target [ 284.838194][T15223] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 284.888439][T11097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.928160][T15229] loop9: detected capacity change from 0 to 1024 [ 284.939575][T15229] EXT4-fs: inline encryption not supported [ 284.981247][T15229] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.002812][T15241] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 285.029583][T15241] vxcan1 speed is unknown, defaulting to 1000 [ 285.175727][T15271] __nla_validate_parse: 6 callbacks suppressed [ 285.175744][T15271] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1812'. [ 285.194338][T15271] bridge1: entered promiscuous mode [ 285.199598][T15271] bridge1: entered allmulticast mode [ 285.337257][T15281] loop8: detected capacity change from 0 to 8192 [ 285.491785][T15247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.554607][T15281] loop8: p1 < > p2 p4 < p5 > [ 285.590248][T15281] loop8: partition table partially beyond EOD, truncated [ 285.613361][T15281] loop8: p1 start 134217728 is beyond EOD, truncated [ 285.625724][T15281] loop8: p2 size 591360 extends beyond EOD, truncated [ 285.670120][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1820'. [ 285.679726][T15281] loop8: p5 size 591360 extends beyond EOD, truncated [ 285.681988][T15325] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1817'. [ 285.697457][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1820'. [ 285.761696][T15331] loop3: detected capacity change from 0 to 512 [ 285.790697][T15331] EXT4-fs: Ignoring removed i_version option [ 285.800968][T15331] EXT4-fs: Ignoring removed bh option [ 285.901305][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 285.913666][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 285.924583][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 285.947012][T15331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.960030][T15331] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.023106][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.050162][T15328] vxcan1 speed is unknown, defaulting to 1000 [ 286.338981][T15328] chnl_net:caif_netlink_parms(): no params data found [ 286.695053][ T28] kauditd_printk_skb: 175 callbacks suppressed [ 286.706247][ T28] audit: type=1326 audit(2000000149.233:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15462 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a86ac799 code=0x7ffc0000 [ 286.754756][ T28] audit: type=1326 audit(2000000149.243:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15462 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a86ac799 code=0x7ffc0000 [ 286.778760][ T28] audit: type=1326 audit(2000000149.243:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15462 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20a866cfce code=0x7ffc0000 [ 286.836263][T15468] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 287.503178][T15415] loop3: detected capacity change from 0 to 4096 [ 287.521431][ T28] audit: type=1326 audit(2000000149.243:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15462 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f20a86ada97 code=0x7ffc0000 [ 287.574958][T15475] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1827'. [ 287.619930][T15415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.681273][ T28] audit: type=1326 audit(2000000149.243:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15462 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20a86ac799 code=0x7ffc0000 [ 287.705260][ T28] audit: type=1326 audit(2000000149.243:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15462 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f20a86ada97 code=0x7ffc0000 [ 287.733718][ T28] audit: type=1326 audit(2000000149.243:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15462 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f20a866cfce code=0x7ffc0000 [ 287.891723][ T28] audit: type=1326 audit(2000000149.273:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15462 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20a86ac799 code=0x7ffc0000 [ 287.915469][ T28] audit: type=1326 audit(2000000149.273:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15462 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20a866cfce code=0x7ffc0000 [ 287.939302][ T28] audit: type=1326 audit(2000000149.273:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15462 comm="syz.8.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f20a86ada97 code=0x7ffc0000 [ 288.289163][T13564] bond0 (unregistering): Released all slaves [ 288.374397][T15468] vxcan1 speed is unknown, defaulting to 1000 [ 288.401439][T15328] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.410402][T15328] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.449338][T15328] bridge_slave_0: entered allmulticast mode [ 288.458794][T15328] bridge_slave_0: entered promiscuous mode [ 288.465665][T15328] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.472799][T15328] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.512643][T15328] bridge_slave_1: entered allmulticast mode [ 288.528154][T15525] loop6: detected capacity change from 0 to 764 [ 288.535167][T15328] bridge_slave_1: entered promiscuous mode [ 288.557053][T15525] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 288.719165][T13564] hsr_slave_0: left promiscuous mode [ 288.893185][T13564] hsr_slave_1: left promiscuous mode [ 288.903365][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.038283][T15328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.072167][T15328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.098648][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1833'. [ 289.117798][T15328] team0: Port device team_slave_0 added [ 289.132733][T15328] team0: Port device team_slave_1 added [ 289.186404][T15328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.195401][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.233350][T15641] process 'syz.8.1834' launched '/dev/fd/6' with NULL argv: empty string added [ 289.244954][T15328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.256801][T15328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.266835][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.302703][T15328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.315968][T15641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.325981][T15641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.378515][T15328] hsr_slave_0: entered promiscuous mode [ 289.384768][T15328] hsr_slave_1: entered promiscuous mode [ 289.391476][T15328] debugfs: 'hsr0' already exists in 'hsr' [ 289.397600][T15328] Cannot create hsr debugfs directory [ 289.715001][T15328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 289.727574][T15328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 289.737814][T15328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.751512][T15328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.806542][T15805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1836'. [ 289.815676][T15805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1836'. [ 289.848315][T15328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.879663][T15328] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.893970][T15812] loop3: detected capacity change from 0 to 1024 [ 289.908218][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.915336][ T7868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.951721][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.958827][ T7868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.977435][T15812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.024535][T15328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.036180][T15328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.056769][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.161988][T15829] bridge_slave_0: left allmulticast mode [ 290.172874][T15829] bridge_slave_0: left promiscuous mode [ 290.188615][T15829] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.200736][T15829] bridge_slave_1: left allmulticast mode [ 290.207766][T15829] bridge_slave_1: left promiscuous mode [ 290.213449][T15829] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.244246][T15829] bond0: (slave bond_slave_0): Releasing backup interface [ 290.257372][T15839] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1839'. [ 290.279639][T15829] bond_slave_0: left promiscuous mode [ 290.313322][T15829] bond0: (slave bond_slave_1): Releasing backup interface [ 290.330270][T15829] bond_slave_1: left promiscuous mode [ 290.349070][T15829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.367803][T15829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.377470][T15829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.396173][T15829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.438718][T15829] bond1: (slave bridge2): Releasing backup interface [ 290.493670][T15829] bond1: (slave bridge2): the permanent HWaddr of slave - 9a:93:56:1f:61:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 290.523032][T15829] bridge2: left promiscuous mode [ 290.543617][T15829] bond1: (slave vlan0): Releasing backup interface [ 290.554359][T15829] vlan0: left promiscuous mode [ 290.559636][T15829] bond0: left promiscuous mode [ 290.609936][T15328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.684503][T15862] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 290.740555][T15862] vxcan1 speed is unknown, defaulting to 1000 [ 290.751603][T15866] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1845'. [ 290.844621][T15328] veth0_vlan: entered promiscuous mode [ 290.901334][T15896] loop5: detected capacity change from 0 to 512 [ 290.909813][T15328] veth1_vlan: entered promiscuous mode [ 290.922739][T15896] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1846: corrupted inode contents [ 290.931916][T15328] veth0_macvtap: entered promiscuous mode [ 290.942237][T15328] veth1_macvtap: entered promiscuous mode [ 290.969944][T15896] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 290.970149][T15896] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 290.979378][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 290.979403][ C1] EXT4-fs (loop5): initial error at time 2000000153: ext4_do_update_inode:5569: inode 15 [ 290.979442][ C1] EXT4-fs (loop5): last error at time 2000000153: ext4_do_update_inode:5569: inode 15 [ 290.990611][T15328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.023502][T15328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.033628][T15896] loop5: lost filesystem error report for type 5 error -117 [ 291.033871][T15896] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1846: corrupted inode contents [ 291.054926][T15896] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.055187][T15896] EXT4-fs error (device loop5): ext4_evict_inode:303: inode #15: comm syz.5.1846: mark_inode_dirty error [ 291.086856][T13557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.097164][ T4046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.114487][ T4046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.124922][T15896] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.127397][T15896] EXT4-fs (loop5): 1 orphan inode deleted [ 291.131074][ T4046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.153451][T15896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.169764][T15903] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1847'. [ 291.179678][T15903] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1847'. [ 291.191661][T15896] netlink: 'syz.5.1846': attribute type 2 has an invalid length. [ 291.199658][T15896] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1846'. [ 291.243751][T15913] FAULT_INJECTION: forcing a failure. [ 291.243751][T15913] name failslab, interval 1, probability 0, space 0, times 0 [ 291.274626][T15913] CPU: 1 UID: 0 PID: 15913 Comm: syz.6.1849 Tainted: G W syzkaller #0 PREEMPT(full) [ 291.274657][T15913] Tainted: [W]=WARN [ 291.274664][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.274677][T15913] Call Trace: [ 291.274684][T15913] [ 291.274757][T15913] __dump_stack+0x1d/0x30 [ 291.274789][T15913] dump_stack_lvl+0x95/0xd0 [ 291.274811][T15913] dump_stack+0x15/0x1b [ 291.274832][T15913] should_fail_ex+0x263/0x280 [ 291.274866][T15913] should_failslab+0x8c/0xb0 [ 291.274891][T15913] kmem_cache_alloc_noprof+0x66/0x400 [ 291.274916][T15913] ? skb_clone+0x151/0x1f0 [ 291.274961][T15913] skb_clone+0x151/0x1f0 [ 291.275141][T15913] __netlink_deliver_tap+0x2c9/0x500 [ 291.275176][T15913] netlink_unicast+0x66b/0x690 [ 291.275202][T15913] netlink_sendmsg+0x5c8/0x6f0 [ 291.275234][T15913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.275309][T15913] ____sys_sendmsg+0x5af/0x600 [ 291.275341][T15913] ___sys_sendmsg+0x195/0x1e0 [ 291.275407][T15913] __x64_sys_sendmsg+0xd4/0x160 [ 291.275449][T15913] x64_sys_call+0x194c/0x3020 [ 291.275474][T15913] do_syscall_64+0x12c/0x370 [ 291.275495][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.275546][T15913] RIP: 0033:0x7f54b5a3c799 [ 291.275561][T15913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.275579][T15913] RSP: 002b:00007f54b448f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.275601][T15913] RAX: ffffffffffffffda RBX: 00007f54b5cb5fa0 RCX: 00007f54b5a3c799 [ 291.275620][T15913] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 291.275636][T15913] RBP: 00007f54b448f090 R08: 0000000000000000 R09: 0000000000000000 [ 291.275651][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.275672][T15913] R13: 00007f54b5cb6038 R14: 00007f54b5cb5fa0 R15: 00007fff96244288 [ 291.275751][T15913] [ 291.475316][T15913] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1849'. [ 291.530408][T15930] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1853'. [ 291.539528][T15930] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1853'. [ 291.562299][T11097] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.614188][T15938] FAULT_INJECTION: forcing a failure. [ 291.614188][T15938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.629078][T15938] CPU: 1 UID: 0 PID: 15938 Comm: syz.6.1855 Tainted: G W syzkaller #0 PREEMPT(full) [ 291.629116][T15938] Tainted: [W]=WARN [ 291.629125][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.629141][T15938] Call Trace: [ 291.629149][T15938] [ 291.629178][T15938] __dump_stack+0x1d/0x30 [ 291.629209][T15938] dump_stack_lvl+0x95/0xd0 [ 291.629311][T15938] dump_stack+0x15/0x1b [ 291.629350][T15938] should_fail_ex+0x263/0x280 [ 291.629375][T15938] should_fail+0xb/0x20 [ 291.629398][T15938] should_fail_usercopy+0x1a/0x20 [ 291.629443][T15938] _copy_to_user+0x20/0xa0 [ 291.629477][T15938] simple_read_from_buffer+0xb5/0x130 [ 291.629560][T15938] proc_fail_nth_read+0x10e/0x150 [ 291.629596][T15938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.629674][T15938] vfs_read+0x1ab/0x7f0 [ 291.629708][T15938] ? __rcu_read_unlock+0x4e/0x70 [ 291.629734][T15938] ? __fget_files+0x184/0x1c0 [ 291.629827][T15938] ? mutex_lock+0x57/0x90 [ 291.629860][T15938] ksys_read+0xdc/0x1a0 [ 291.629909][T15938] __x64_sys_read+0x40/0x50 [ 291.630021][T15938] x64_sys_call+0x2886/0x3020 [ 291.630056][T15938] do_syscall_64+0x12c/0x370 [ 291.630082][T15938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.630123][T15938] RIP: 0033:0x7f54b59fcfce [ 291.630139][T15938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 291.630162][T15938] RSP: 002b:00007f54b448efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.630238][T15938] RAX: ffffffffffffffda RBX: 00007f54b448f6c0 RCX: 00007f54b59fcfce [ 291.630310][T15938] RDX: 000000000000000f RSI: 00007f54b448f0a0 RDI: 0000000000000004 [ 291.630322][T15938] RBP: 00007f54b448f090 R08: 0000000000000000 R09: 0000000000000000 [ 291.630383][T15938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.630398][T15938] R13: 00007f54b5cb6038 R14: 00007f54b5cb5fa0 R15: 00007fff96244288 [ 291.630424][T15938] [ 291.944766][T15950] netlink: 'syz.8.1857': attribute type 21 has an invalid length. [ 291.982183][T15950] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1857'. [ 292.427146][T15963] hub 8-0:1.0: USB hub found [ 292.431949][T15963] hub 8-0:1.0: 8 ports detected [ 292.705422][T15980] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1861'. [ 292.844245][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 292.844263][ T28] audit: type=1400 audit(2000000155.383:4778): avc: denied { read } for pid=15974 comm="syz.5.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.876750][T15985] loop5: detected capacity change from 0 to 2048 [ 293.025525][ T28] audit: type=1400 audit(2000000155.563:4779): avc: denied { setopt } for pid=15991 comm="syz.3.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 293.106774][T16005] loop0: detected capacity change from 0 to 512 [ 293.194109][T16005] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 293.278461][T16028] loop5: detected capacity change from 0 to 128 [ 293.298107][T16030] loop3: detected capacity change from 0 to 512 [ 293.331646][ T28] audit: type=1400 audit(2000000155.863:4780): avc: denied { read } for pid=16035 comm="syz.6.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 293.384997][T16030] EXT4-fs: test_dummy_encryption option not supported [ 293.523824][ T28] audit: type=1400 audit(2000000155.903:4781): avc: denied { connect } for pid=16032 comm="syz.0.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.568258][T16058] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 293.612354][T16058] vxcan1 speed is unknown, defaulting to 1000 [ 293.891047][T16056] bond0 (unregistering): Released all slaves [ 293.933449][ T28] audit: type=1400 audit(2000000156.473:4782): avc: denied { create } for pid=16072 comm="syz.5.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 294.047032][T16077] loop6: detected capacity change from 0 to 8 [ 294.091019][ C1] blk_print_req_error: 1 callbacks suppressed [ 294.091038][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.107803][ C1] buffer_io_error: 1 callbacks suppressed [ 294.107816][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.122599][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.133278][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.141158][ T8527] loop6: unable to read partition table [ 294.153989][ T28] audit: type=1400 audit(2000000156.693:4783): avc: denied { getopt } for pid=16072 comm="syz.5.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 294.197035][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.207717][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.239451][ T28] audit: type=1326 audit(2000000156.693:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16072 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203bddc799 code=0x7ffc0000 [ 294.247929][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.273593][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.283445][T16077] loop6: unable to read partition table [ 294.294290][T16077] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 294.302936][ T28] audit: type=1326 audit(2000000156.693:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16072 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203bddc799 code=0x7ffc0000 [ 294.334987][ T28] audit: type=1326 audit(2000000156.693:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16072 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f203bd9cfce code=0x7ffc0000 [ 294.372422][ T28] audit: type=1326 audit(2000000156.693:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16072 comm="syz.5.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f203bddda97 code=0x7ffc0000 [ 294.400743][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.411511][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.420752][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.431419][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.439366][T16079] loop6: unable to read partition table [ 294.445059][T16079] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 294.446239][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.470397][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.479635][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.490296][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.500109][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.510749][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.519899][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.530569][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.600984][T16124] FAULT_INJECTION: forcing a failure. [ 294.600984][T16124] name failslab, interval 1, probability 0, space 0, times 0 [ 294.623886][T16122] loop6: detected capacity change from 0 to 2048 [ 294.631334][T16124] CPU: 1 UID: 0 PID: 16124 Comm: syz.5.1881 Tainted: G W syzkaller #0 PREEMPT(full) [ 294.631417][T16124] Tainted: [W]=WARN [ 294.631424][T16124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.631440][T16124] Call Trace: [ 294.631447][T16124] [ 294.631453][T16124] __dump_stack+0x1d/0x30 [ 294.631544][T16124] dump_stack_lvl+0x95/0xd0 [ 294.631570][T16124] dump_stack+0x15/0x1b [ 294.631596][T16124] should_fail_ex+0x263/0x280 [ 294.631621][T16124] ? snd_seq_port_connect+0x4d/0x270 [ 294.631657][T16124] should_failslab+0x8c/0xb0 [ 294.631743][T16124] __kmalloc_cache_noprof+0x5f/0x410 [ 294.631772][T16124] snd_seq_port_connect+0x4d/0x270 [ 294.631833][T16124] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 294.631855][T16124] ? client_load_and_use_ptr+0xca/0x680 [ 294.631881][T16124] snd_seq_ioctl_subscribe_port+0x2a8/0x460 [ 294.631959][T16124] snd_seq_ioctl+0x177/0x2f0 [ 294.632051][T16124] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 294.632152][T16124] __se_sys_ioctl+0xce/0x140 [ 294.632276][T16124] __x64_sys_ioctl+0x43/0x50 [ 294.632312][T16124] x64_sys_call+0x1563/0x3020 [ 294.632341][T16124] do_syscall_64+0x12c/0x370 [ 294.632363][T16124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.632420][T16124] RIP: 0033:0x7f203bddc799 [ 294.632438][T16124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.632456][T16124] RSP: 002b:00007f203a82f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.632473][T16124] RAX: ffffffffffffffda RBX: 00007f203c055fa0 RCX: 00007f203bddc799 [ 294.632489][T16124] RDX: 0000200000000bc0 RSI: 0000000040505330 RDI: 0000000000000003 [ 294.632569][T16124] RBP: 00007f203a82f090 R08: 0000000000000000 R09: 0000000000000000 [ 294.632584][T16124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.632596][T16124] R13: 00007f203c056038 R14: 00007f203c055fa0 R15: 00007fff26fe0b18 [ 294.632617][T16124] [ 294.675028][T16110] vxcan1 speed is unknown, defaulting to 1000 [ 294.893644][ T8527] Alternate GPT is invalid, using primary GPT. [ 294.910593][ T8527] loop6: p1 p2 p3 [ 294.920675][ T8527] loop6: partition table partially beyond EOD, truncated [ 295.060906][T16122] Alternate GPT is invalid, using primary GPT. [ 295.067264][T16122] loop6: p1 p2 p3 [ 295.071042][T16122] loop6: partition table partially beyond EOD, truncated [ 295.134045][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16152 comm=syz.5.1884 [ 295.317547][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 295.345554][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 295.441761][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 295.864115][T16205] loop0: detected capacity change from 0 to 1024 [ 295.936921][T16205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.975110][T15328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.067176][T16223] __nla_validate_parse: 6 callbacks suppressed [ 296.067191][T16223] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1894'. [ 296.169355][T16208] loop5: detected capacity change from 0 to 8192 [ 296.231295][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1895'. [ 296.271327][T16240] loop0: detected capacity change from 0 to 512 [ 296.292029][T16240] EXT4-fs: Ignoring removed i_version option [ 296.302413][ T8527] loop5: p1 < > p2 p4 < p5 > [ 296.309417][ T8527] loop5: partition table partially beyond EOD, truncated [ 296.319964][ T8527] loop5: p1 start 134217728 is beyond EOD, truncated [ 296.336232][T16240] EXT4-fs: Ignoring removed bh option [ 296.352577][ T8527] loop5: p2 size 591360 extends beyond EOD, truncated [ 296.407080][ T8527] loop5: p5 size 591360 extends beyond EOD, truncated [ 296.446519][T16208] loop5: p1 < > p2 p4 < p5 > [ 296.451317][T16208] loop5: partition table partially beyond EOD, truncated [ 296.490469][T16240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.536409][T16262] syzkaller0: entered promiscuous mode [ 296.539535][T16240] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.541925][T16262] syzkaller0: entered allmulticast mode [ 296.559079][T16208] loop5: p1 start 134217728 is beyond EOD, truncated [ 296.716242][T16208] loop5: p2 size 591360 extends beyond EOD, truncated [ 296.765418][T16208] loop5: p5 size 591360 extends beyond EOD, truncated [ 296.822582][T16281] loop6: detected capacity change from 0 to 1024 [ 296.937304][T15328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.963305][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 296.970777][ T8526] udevd[8526]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 296.985539][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 297.006992][T16281] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.026078][ T8527] udevd[8527]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 297.028461][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 297.069421][T11612] udevd[11612]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 297.096248][T12246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.108552][T16297] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1907'. [ 297.315203][T16320] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 297.430571][T16320] vxcan1 speed is unknown, defaulting to 1000 [ 297.437996][T16323] loop0: detected capacity change from 0 to 512 [ 297.457263][T16317] 9p: Bad value for 'rfdno' [ 297.472867][T14675] kernel read not supported for file /virtual_nci (pid: 14675 comm: kworker/0:12) [ 297.535210][T13568] ================================================================== [ 297.543345][T13568] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 297.553291][T13568] [ 297.555645][T13568] read-write to 0xffffffff86c09a00 of 8 bytes by interrupt on cpu 1: [ 297.563734][T13568] tick_do_update_jiffies64+0x113/0x1c0 [ 297.569319][T13568] tick_nohz_handler+0x8d/0x3d0 [ 297.574242][T13568] __hrtimer_run_queues+0x218/0x4f0 [ 297.579464][T13568] hrtimer_interrupt+0x269/0x810 [ 297.584438][T13568] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 297.586573][T16313] syz.0.1910 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 297.590357][T13568] sysvec_apic_timer_interrupt+0x6f/0x80 [ 297.590390][T13568] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 297.604539][T16313] CPU: 1 UID: 0 PID: 16313 Comm: syz.0.1910 Tainted: G W syzkaller #0 PREEMPT(full) [ 297.604693][T16313] Tainted: [W]=WARN [ 297.604713][T16313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.604797][T16313] Call Trace: [ 297.604815][T16313] [ 297.604842][T16313] __dump_stack+0x1d/0x30 [ 297.604916][T16313] dump_stack_lvl+0x95/0xd0 [ 297.604989][T16313] dump_stack+0x15/0x1b [ 297.605115][T16313] dump_header+0x80/0x240 [ 297.605191][T16313] oom_kill_process+0x295/0x350 [ 297.605250][T16313] out_of_memory+0x97d/0xb80 [ 297.605317][T16313] try_charge_memcg+0x62e/0xa10 [ 297.605439][T16313] obj_cgroup_charge_pages+0x23/0xc0 [ 297.605592][T16313] __memcg_kmem_charge_page+0x9e/0x170 [ 297.605664][T16313] __alloc_frozen_pages_noprof+0x18a/0x360 [ 297.605762][T16313] alloc_pages_mpol+0xb3/0x260 [ 297.605836][T16313] alloc_pages_noprof+0x8f/0x130 [ 297.605990][T16313] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 297.606111][T16313] __kvmalloc_node_noprof+0x3d4/0x650 [ 297.606216][T16313] ? futex_hash_allocate+0x190/0x9d0 [ 297.606301][T16313] ? futex_hash_allocate+0x190/0x9d0 [ 297.606431][T16313] futex_hash_allocate+0x190/0x9d0 [ 297.606517][T16313] ? cap_task_prctl+0x13f/0x6e0 [ 297.606578][T16313] futex_hash_prctl+0xd8/0xf0 [ 297.606722][T16313] __se_sys_prctl+0xa3d/0x13f0 [ 297.606816][T16313] __x64_sys_prctl+0x67/0x80 [ 297.606899][T16313] x64_sys_call+0x2533/0x3020 [ 297.606981][T16313] do_syscall_64+0x12c/0x370 [ 297.607045][T16313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.607124][T16313] RIP: 0033:0x7f0c562ec799 [ 297.607177][T16313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.607235][T16313] RSP: 002b:00007f0c54d47028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 297.607297][T16313] RAX: ffffffffffffffda RBX: 00007f0c56565fa0 RCX: 00007f0c562ec799 [ 297.607358][T16313] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 297.607399][T16313] RBP: 00007f0c56382bd9 R08: 0000000000000000 R09: 0000000000000000 [ 297.607453][T16313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.607533][T16313] R13: 00007f0c56566038 R14: 00007f0c56565fa0 R15: 00007ffd56ad22b8 [ 297.607602][T16313] [ 297.609957][T16313] memory: usage 307200kB, limit 307200kB, failcnt 182 [ 297.610083][T13568] _raw_spin_unlock_irq+0x12/0x30 [ 297.618403][T16313] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 297.627083][T13568] evict_folios+0x299a/0x35c0 [ 297.627104][T13568] try_to_shrink_lruvec+0x81b/0xbf0 [ 297.627124][T13568] shrink_lruvec+0x255/0x1c60 [ 297.627150][T13568] shrink_node+0x67a/0x2130 [ 297.627168][T13568] do_try_to_free_pages+0x408/0xc80 [ 297.627196][T13568] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 297.627226][T13568] try_charge_memcg+0x37e/0xa10 [ 297.627255][T13568] obj_cgroup_charge_pages+0x23/0xc0 [ 297.627281][T13568] __memcg_kmem_charge_page+0x9e/0x170 [ 297.627307][T13568] __alloc_frozen_pages_noprof+0x18a/0x360 [ 297.627328][T13568] alloc_pages_mpol+0xb3/0x260 [ 297.627355][T13568] alloc_pages_noprof+0x8f/0x130 [ 297.627387][T13568] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 297.627412][T13568] __kvmalloc_node_noprof+0x3d4/0x650 [ 297.627431][T13568] futex_hash_allocate+0x190/0x9d0 [ 297.627460][T13568] futex_hash_prctl+0xd8/0xf0 [ 297.627487][T13568] __se_sys_prctl+0xa3d/0x13f0 [ 297.627508][T13568] __x64_sys_prctl+0x67/0x80 [ 297.627534][T13568] x64_sys_call+0x2533/0x3020 [ 297.627561][T13568] do_syscall_64+0x12c/0x370 [ 297.627579][T13568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.627598][T13568] [ 297.627605][T13568] read to 0xffffffff86c09a00 of 8 bytes by task 13568 on cpu 0: [ 297.627622][T13568] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 297.627663][T13568] count_shadow_nodes+0x6a/0x230 [ 297.627692][T13568] do_shrink_slab+0x63/0x6a0 [ 297.627714][T13568] shrink_slab+0x538/0x880 [ 297.627734][T13568] shrink_node+0x6bc/0x2130 [ 297.627764][T13568] do_try_to_free_pages+0x408/0xc80 [ 297.627788][T13568] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 297.627834][T13568] try_charge_memcg+0x37e/0xa10 [ 297.627867][T13568] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 297.627897][T13568] __swap_cache_prepare_and_add+0x386/0x530 [ 297.627924][T13568] swap_cache_alloc_folio+0xa2/0x120 [ 297.627953][T13568] swap_cluster_readahead+0x36b/0x3d0 [ 297.627983][T13568] shmem_swapin_folio+0x951/0x1360 [ 297.628005][T13568] shmem_get_folio_gfp+0x278/0xd60 [ 297.628030][T13568] shmem_file_read_iter+0x10d/0x540 [ 297.628059][T13568] lo_rw_aio+0x67d/0x730 [ 297.628085][T13568] loop_process_work+0x56c/0xac0 [ 297.628109][T13568] loop_rootcg_workfn+0x22/0x30 [ 297.628130][T13568] process_scheduled_works+0x4de/0x9e0 [ 297.628161][T13568] worker_thread+0x581/0x770 [ 297.631968][T16313] kmem: usage 307020kB, limit 9007199254740988kB, failcnt 0 [ 297.643443][T13568] kthread+0x22a/0x280 [ 297.643474][T13568] ret_from_fork+0x150/0x360 [ 297.643512][T13568] ret_from_fork_asm+0x1a/0x30 [ 297.643544][T13568] [ 297.643549][T13568] value changed: 0x00000000fffffedd -> 0x00000000fffffede [ 297.643564][T13568] [ 297.643569][T13568] Reported by Kernel Concurrency Sanitizer on: [ 297.643585][T13568] CPU: 0 UID: 0 PID: 13568 Comm: kworker/u8:14 Tainted: G W syzkaller #0 PREEMPT(full) [ 297.643622][T13568] Tainted: [W]=WARN [ 297.643631][T13568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.643649][T13568] Workqueue: loop0 loop_rootcg_workfn [ 297.643677][T13568] ================================================================== [ 298.263169][T16313] Memory cgroup stats for /syz0: [ 298.263376][T16313] cache 0 [ 298.272403][T16313] rss 8192 [ 298.276530][T16313] shmem 0 [ 298.279507][T16313] mapped_file 0 [ 298.283001][T16313] dirty 0 [ 298.287041][T16313] writeback 0 [ 298.290409][T16313] workingset_refault_anon 29 [ 298.295046][T16313] workingset_refault_file 0 [ 298.300571][T16313] swap 454656 [ 298.303943][T16313] swapcached 13045760 [ 298.309074][T16313] pgpgin 204503 [ 298.312606][T16313] pgpgout 204458 [ 298.317227][T16313] pgfault 193614 [ 298.320811][T16313] pgmajfault 10 [ 298.324305][T16313] inactive_anon 180224 [ 298.329399][T16313] active_anon 0 [ 298.332881][T16313] inactive_file 0 [ 298.337619][T16313] active_file 4096 [ 298.341398][T16313] unevictable 0 [ 298.344878][T16313] hierarchical_memory_limit 314572800 [ 298.351220][T16313] hierarchical_memsw_limit 9223372036854771712 [ 298.358265][T16313] total_cache 0 [ 298.361735][T16313] total_rss 8192 [ 298.366364][T16313] total_shmem 0 [ 298.369865][T16313] total_mapped_file 0 [ 298.373909][T16313] total_dirty 0 [ 298.378498][T16313] total_writeback 0 [ 298.382331][T16313] total_workingset_refault_anon 29 [ 298.388558][T16313] total_workingset_refault_file 0 [ 298.393672][T16313] total_swap 454656 [ 298.398562][T16313] total_swapcached 13045760 [ 298.403150][T16313] total_pgpgin 204503 [ 298.408221][T16313] total_pgpgout 204458 [ 298.412341][T16313] total_pgfault 193614 [ 298.417421][T16313] total_pgmajfault 10 [ 298.421439][T16313] total_inactive_anon 180224 [ 298.426873][T16313] total_active_anon 0 [ 298.430920][T16313] total_inactive_file 0 [ 298.436138][T16313] total_active_file 4096 [ 298.440387][T16313] total_unevictable 0 [ 298.444404][T16313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1910,pid=16311,uid=0 [ 298.460042][T16313] Memory cgroup out of memory: Killed process 16311 (syz.0.1910) total-vm:94292kB, anon-rss:1224kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 300.318896][T16330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512