last executing test programs: 2m0.690827213s ago: executing program 32 (id=82): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={0x0, &(0x7f0000000a00)=""/89, &(0x7f0000000a80), &(0x7f0000000b40), 0x3, r0, 0x5000000}, 0x38) 1m20.526606771s ago: executing program 2 (id=894): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x4, 0x8, 0x4, 0x4}, 0x10) sendmmsg(r0, &(0x7f0000000680), 0x0, 0x2004c000) 1m20.526439751s ago: executing program 2 (id=895): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6184b216}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xcc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1m20.501107793s ago: executing program 2 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000020000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m20.452225476s ago: executing program 2 (id=898): open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m20.450738446s ago: executing program 2 (id=900): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002d0001002abd70000000000008000000", @ANYRES32, @ANYBLOB="0b00001cc6c0f94d38ebf70005a201808800f9ff"], 0x2c}], 0x1}, 0x0) 1m20.363104931s ago: executing program 2 (id=902): socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x49a, &(0x7f0000000680)={0x0, 0x79ae, 0x3380, 0x3, 0x40024e}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x69) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x8, 0x1f, 0x5, @vifc_lcl_ifindex=r3, @loopback}, 0x10) 1m12.261094447s ago: executing program 1 (id=1061): r0 = socket(0xa, 0x1, 0x0) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) 1m12.177820851s ago: executing program 1 (id=1062): socket$kcm(0x2, 0xa, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="016f08000100270000002700000001aba77e8bc70952faa1542b18efd6dbeafc4c10734604000000e90051d90000000000005727ede0f5"], 0x37) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0xfc6, &(0x7f0000000000)=ANY=[], 0x0) 1m12.144134563s ago: executing program 1 (id=1063): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) timer_create(0x2, 0x0, &(0x7f0000000600)=0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x1a}, &(0x7f0000000340)) socket$unix(0x1, 0x5, 0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000100)) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x8, 0x1000}, 0x301, 0x10000, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4010, r1}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0xa3c0dda19233b004, 0x0, 0x9}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000001c0)={0x6, 0x27, 0x3ff, 0xffff, 0x14, "e756000000000d00"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) write(r2, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r2) set_mempolicy(0x0, &(0x7f0000000000)=0x8, 0x5) 1m11.982309553s ago: executing program 1 (id=1068): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0x5, 0x80002) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x120c000, 0x1000, 0x0, 0x7}, 0x20) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x115) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000580), 0x109000, 0x0) sendfile(r4, r5, 0x0, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@none, 0x80000001}) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf2502000000060001004e24000006000a00"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1m11.834042032s ago: executing program 1 (id=1071): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@local, @dev, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x3c, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x6, 0x1}, @md5sig={0x13, 0x12, "c90d1232c5b66bd8cbb2770c88ba74be"}, @eol, @mss={0x2, 0x4, 0x1}, @md5sig={0x13, 0x12, "8c37ffe0f22d28e90641a6dcaa527ccd"}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) timer_create(0x7, 0x0, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf25000000000c0003000100000000000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="0600f80e02000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000280), 0x1, 0x5a9, &(0x7f00000002c0)="$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") r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6, 0xffffffffffffffff}, 0x4) pipe2$watch_queue(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1e, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='syzkaller\x00', 0xc44, 0x42, &(0x7f00000009c0)=""/66, 0x41000, 0x0, '\x00', r8, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r4, r4, r7, r9, r10, r7, r6, r7, r6, r7], &(0x7f0000000b00), 0x10, 0x3}, 0x94) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) r11 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000001c0)=0x10) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200043, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r12}}) capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, 0x0) r13 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x121000) read$qrtrtun(r13, &(0x7f00000001c0)=""/107, 0x6b) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) 1m10.993659781s ago: executing program 1 (id=1089): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1012, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xfffffffffffffddc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24048051) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x4841, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000000b06010200000000740000000a0000030900020073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000040}, 0x40014) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001ed000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x42000, 0x0, 0x12, 0x100000c01, 0x74, 0x41, 0x24}) setreuid(0x0, 0xee00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_regs={0x7, 0x0, 0x8, "281b7466ea8efdfe"}}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000640)=0xffffffff80000000) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r3 = socket$netlink(0x10, 0x3, 0x13) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006116000000000000bf67000000000000350605000fff0720670600000b000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000607070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe320fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6ad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1878a04bbff4bbefc18f77700372471609e2c443e84ee5e9a5178f90512df04f3a0909c96632ae20c05073779fc3fa0e268c62b06e9fdc2977dfef1ced98270263fc81c30f1354b319fe9d59d3101c4ee7375ff8673de5caff9e6ee73ccae77d1bf8f22330e8840af1ded6d5be627f7f87d5b12a2d6317825d77bef85313f541dcc4ff13f413db34d5da05648590a1685031e6955d4352bf0b7efd0b0a1e636b8aa4963d9f67de5ba91d501418bbeaac09bdd1059f3c3159e5900"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="21526ed6b91614177a835d4c430086eb", @ANYRES16=r4, @ANYBLOB="08002dbd7000fcdbdf250d0000002000038014000600fe8000000000000000000000000000aa05000800070000000800050001000100080005007f0000000800060006000000"], 0x4c}}, 0x40080a0) 1m5.38119811s ago: executing program 33 (id=902): socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x49a, &(0x7f0000000680)={0x0, 0x79ae, 0x3380, 0x3, 0x40024e}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x69) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x8, 0x1f, 0x5, @vifc_lcl_ifindex=r3, @loopback}, 0x10) 55.934482705s ago: executing program 34 (id=1089): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1012, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xfffffffffffffddc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24048051) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x4841, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000000b06010200000000740000000a0000030900020073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000040}, 0x40014) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001ed000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x42000, 0x0, 0x12, 0x100000c01, 0x74, 0x41, 0x24}) setreuid(0x0, 0xee00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_regs={0x7, 0x0, 0x8, "281b7466ea8efdfe"}}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000640)=0xffffffff80000000) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r3 = socket$netlink(0x10, 0x3, 0x13) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2295], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="21526ed6b91614177a835d4c430086eb", @ANYRES16=r4, @ANYBLOB="08002dbd7000fcdbdf250d0000002000038014000600fe8000000000000000000000000000aa05000800070000000800050001000100080005007f0000000800060006000000"], 0x4c}}, 0x40080a0) 37.28089502s ago: executing program 5 (id=1539): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r2 = syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40812000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) 37.139253509s ago: executing program 5 (id=1540): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000002c0)='logon\x00', 0xffffffffffffffff) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, '{', 0x3a, '\x00'}, 0x22) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/timers\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) read$hiddev(r3, &(0x7f0000000000)=""/4118, 0x1016) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) 36.044545923s ago: executing program 5 (id=1555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) 35.962846548s ago: executing program 5 (id=1558): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x6025, 0x4005, 0xb, 0x6, 0x1, 0xfffffffd, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4800}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x9, 0x6d05, 0x6}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000"], 0x0, 0x35, 0x0, 0x1}, 0x28) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) fsync(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x1d8c0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt(r3, 0x8001, 0x2, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e000000000000000c000000070000000800000099ceaad3457c49b7dbba63aa5313270cf59f7fa74f1c0036a2c17057d0a339c83a53eb9f694dcf6f42908a989ec3ecf9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, 0x0, 0x4}, 0xfffffd20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) 35.520167294s ago: executing program 5 (id=1569): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000100)={@local, @dev, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x3c, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x6, 0x1}, @md5sig={0x13, 0x12, "c90d1232c5b66bd8cbb2770c88ba74be"}, @eol, @mss={0x2, 0x4, 0x1}, @md5sig={0x13, 0x12, "8c37ffe0f22d28e90641a6dcaa527ccd"}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) timer_create(0x7, 0x0, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf25000000000c0003000100000000000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB="0600f80e02000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000280), 0x1, 0x5a9, &(0x7f00000002c0)="$eJzs3U9oHGUbAPBnZrNN/+T70g8+QaWHokKF0k3SP1o9tVexUOhB8KJhsw0lm2zJJtqEgOm9iD2ISi/1pgePigcP4sWjVy+KZ6HYoND0oCubnU23MYmbmM3G7O8Hk33fmck+7zszz+zOywwbQM86Xv+TRjwVEZeTiMGWZX2RLTzeWG95aaH4cGmhmEStduWXJJKIeLC0UGyun2SvRyJiMSKejIhv8hEn09W3PNAsVOfmJ0bL5dJ0Vh+ambw+VJ2bP3VtcnS8NF6aOvPiS+fOnz03cnqktbkPa621/Nb6euvH2+/e+u6Vu7c//ezYYvH90SQuxEC2rLUfO6mxTfJxYc38s50I1kVJtxvAtuSyPK+n0hMxGLks69dTaz059O9K84AOqvVH1IAelch/6FHN7wH169/mtJvfP+5dbFyA1OMuLy0U34lm/L7G2EQcXLk2Ofxr8tiVSf168+huNpR9afFmRAz39f31+E+y42/7hneigXTU1xcbO+rR/m8ObKSr559Y5/wz0Bw7/Yea57/l7Py3vHr8PYqf2+D8d7nNGL+//tNHG8a/2R9Prxs/WY2frBM/jYg324x/57Uvz2+0LPk44kSsH391nc3Hh4euXiuXhht/143x1YljL2/c/4jDG8RvjNkeXPmYae3/gaxNaZv9/+Lbz59Z3CT+889uvv/X2/6HIuK9NuP/78Enr2607N7N5H79W8BW938S+bi7WdCWAeEXLhz/ISsaNQQAAAAAAAAAgB2UrtzLlqSF1XKaFgqNZ3j/H4fTcqU6c/JqZXZqrHHP29HIp807rQYb9aReH8nux23WT6+pn8llAXOHVuqFYqU81uW+AwAAAAAAAAAAAAAAAAAAwF5xZM3z/7/lVp7/X/tz1cB+tfFPfgP7nfyH3vV4/iddawew+3z+Q8+qyX/oXfIfepf8h94l/6F3yX/oXfIfepf8BwAAAAAAAAAAAAAAAAAAAAAAAACAjrh86VJ9qj1cWijW62N9c7MTlbdOjZWqE4XJ2WKhWJm+XhivVMbLpUKxMvl375dUKteHY2r2xtBMqTozVJ2bf2OyMjvV/E3RUr7jPQIAAAAAAAAAAAAAAAAAAIB/n4GVKUkLEflGPU0LhYj/RMTRJJKr18ql4Yj4b0R8n8v31+sj3W40AAAAAAAAAAAAAAAAAAAA7DOHstfp6tz8xGi5XNr5Ql/nQ7Rf6NvKyhGxuLPNqL/jlv8rn23ALm+6xwqx2GjTXmlP24Xc3jgO936hG2cjAAAAAAAAAAAAAAAAAADobS1PdLfpj842CAAAAAAAAAAAAAAAAAAAAHpS+nMSEfXpxOBzA2uXHkiWcyuvEfH2nSsf3BidmZkeqc+/vzp/5sNs/ulutB9oVzNP04io5zEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwSHVufmK0XC5Nb7PQ38Y63e4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHb8GQAA//++Gsc2") r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r6, 0xffffffffffffffff}, 0x4) pipe2$watch_queue(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1e, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='syzkaller\x00', 0xc44, 0x42, &(0x7f00000009c0)=""/66, 0x41000, 0x0, '\x00', r8, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r4, r4, r7, r9, r10, r7, r6, r7, r6, r7], &(0x7f0000000b00), 0x10, 0x3}, 0x94) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) r11 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000001c0)=0x10) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200043, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r12}}) capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, 0x0) r13 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x121000) read$qrtrtun(r13, &(0x7f00000001c0)=""/107, 0x6b) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) 34.549081581s ago: executing program 5 (id=1580): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001200010a0000000004000000070000007a"], 0x20}}, 0x40000) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x253f, 0x10000, 0x0, 0x28e}) syz_emit_ethernet(0x8e, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd31800580600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000c90780000fe0bf9893138eed99a136513126171cffc510ce8dbc95505120000000100000000ffffff41f72541c6efc910000000000000000000"], 0x0) 32.339309511s ago: executing program 6 (id=1613): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0xb00, 0x2000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x100000000000003, 0x3}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 31.50672308s ago: executing program 6 (id=1627): socket(0xa, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') setns(0xffffffffffffffff, 0x24020000) syz_read_part_table(0x1053, &(0x7f0000000000)="$eJzsz0ENwkAQBdC/20KKGNCACS6YodhBBSLQgQKSJaVNJQCH9y6z2cz/yYSfqmldWmspST999DX3UpIck+yTkjJmuD5qa5+9fpdkWNLbteeSw/J6ZgplrhvLOZt1qZtHedV55nT71p0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8M/eAQAA//93eRC1") r1 = syz_io_uring_setup(0x7e9d, &(0x7f0000000000)={0x0, 0xf628, 0x800, 0x3, 0x379, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000001080)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) recvmmsg(r5, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000001180)={[{@delalloc}, {@jqfmt_vfsold}, {@dioread_lock}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001b00)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) open_by_handle_at(r11, &(0x7f0000000980)=ANY=[@ANYBLOB="0c00000001"], 0x36e5476d) preadv(r10, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x20, 0x0, 0x0) 29.62903497s ago: executing program 6 (id=1641): openat$vcsu(0xffffffffffffff9c, 0x0, 0x183822, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000040)) socket$tipc(0x1e, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x133d, 0x0, 0x8, 0x0, 0x0) 29.543553595s ago: executing program 6 (id=1642): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) 29.479910238s ago: executing program 6 (id=1644): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000280), 0x1, 0x5a9, &(0x7f00000002c0)="$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") r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r2, 0xffffffffffffffff}, 0x4) pipe2$watch_queue(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1e, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='syzkaller\x00', 0xc44, 0x42, &(0x7f00000009c0)=""/66, 0x41000, 0x0, '\x00', r4, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r0, r0, r3, r5, r6, r3, r2, r3, r2, r3], &(0x7f0000000b00), 0x10, 0x3}, 0x94) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200043, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}}) 29.141996488s ago: executing program 6 (id=1647): r0 = syz_io_uring_complete(0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xe, 0x3b071, r0, 0x21be2000) timer_create(0x3, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000200080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 28.911152772s ago: executing program 4 (id=1649): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x6}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x9, 0x58f, [{0x0, 0x20008000, 0x4, 0x20001}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000055}, 0x24040084) 28.825672467s ago: executing program 4 (id=1650): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x6}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x9, 0x58f, [{0x0, 0x20008000, 0x4, 0x20001}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000055}, 0x24040084) (fail_nth: 1) 28.569280052s ago: executing program 4 (id=1651): r0 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "4135ae1e0fe721441705322225930e6c1e3e2a51747cb4d42e2b253a6e0236805b4377f7ab1a9b01c103a4c6a7ef54e60000d7264c39ea00c508ba6062696118", 0x3f}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r0) keyctl$describe(0x6, r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) listxattr(&(0x7f0000005580)='./file0\x00', 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf) r2 = syz_io_uring_setup(0x37dd, &(0x7f00000002c0)={0x0, 0xcfca, 0x1441, 0x2, 0x1000001, 0x0, 0x0}, &(0x7f0000000240), &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x2000c000}}], 0x1, 0x40015) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000280), 0x12) fsmount(0xffffffffffffffff, 0x0, 0x100) socket$nl_route(0x10, 0x3, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') getsockopt$inet_mreqsrc(r1, 0x0, 0xe, &(0x7f0000000040)={@dev, @initdev, @remote}, &(0x7f00000000c0)=0xc) keyctl$setperm(0x5, r0, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf4dac4b1bfe", @ANYRES32=0x0, @ANYBLOB="000000020000000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) 27.645971447s ago: executing program 4 (id=1656): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) 27.522880464s ago: executing program 4 (id=1658): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000280), 0x1, 0x5a9, &(0x7f00000002c0)="$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") r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r2, 0xffffffffffffffff}, 0x4) pipe2$watch_queue(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1e, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='syzkaller\x00', 0xc44, 0x42, &(0x7f00000009c0)=""/66, 0x41000, 0x0, '\x00', r4, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r0, r0, r3, r5, r6, r3, r2, r3, r2, r3], &(0x7f0000000b00), 0x10, 0x3}, 0x94) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200043, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}}) 26.495272774s ago: executing program 4 (id=1663): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) setfsgid(0xee00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) r2 = dup(r1) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) io_setup(0x8, &(0x7f0000000600)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000000c0)="01", 0x24}]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000000", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES16, @ANYRES16, @ANYRES8, @ANYRES32=r0, @ANYRESDEC=r2], 0xc0}}, 0x0) 24.439899435s ago: executing program 3 (id=1675): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") bpf$OBJ_GET_PROG(0x7, &(0x7f0000004400)=@generic={&(0x7f00000043c0)='./file0\x00', 0x0, 0x10}, 0x18) 23.912461046s ago: executing program 3 (id=1677): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@data_err_ignore}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$eJzs3M9vFdUeAPDv3PbSAo9HH49HAg+1gMbGxBYKCgs3mJi40MSIC1k2bSGVCxjahZBGLonBNYl7w9K408StLo0r/wBcuDAxJETZAG68Zu6dub29P3p7S2nT3s8nGThn5sycc2bmzD0zpzMB9K3R9J8k4l8RcS8i9taiyxOM1v57/HBx+snDxekoVyrn/kiq6R6l8Uy+3u4sMlaIKHyWNG7wbh6Yv37j0lSpNHstytX4xMLljyfmr994de7y1MXZi7NXJs+cOXXyxOnXJ19rLvJw10olrbPSej069OnVwwffPn/n3enB5o011qOjfK0/y12TRr5vO3ipcXvbwJ6GcNJar5sbWhhWbTg7DYtp+18sHT1fm520a0PA9lKpVCpDnReXK81utcwBtqwkNrsEwObIf+jT+998qs0pbkT3Y9M9OFu7AXr0cLFyM2L6cb3+g1HI0hSb7m9TK/SZejIaER+W//oynWKl5xC/rlOGAEDf++Fs1g1Moqn/V4gDDen+nY2hjETEfyJiX0T8NyL2R8T/IpalXSaJqKyQ//7mGfX8v81GEQr311q31Uj7f29kY1v5lOWbJxkZyGJ7IvIO8+zxbJ+MRXHowlxp9kSH7e/okn9j/y+d0vzzvmBWjvuDTZ3NmamFqbXVttWDWxGHBpvrnwymBy4fxkki4mBEHOphuyMN4blXvjpcjzTdVnSvf1Wl7XDEOoyfVe5GvFw7/uVYdvyXckwaxycLLeOTE8NRmj0+kZ4Fx9vm8dPPt9/rlH/X+n/3W/Mqb53+/tzTVrsuPf67Gs7/yMdvl+o/kkQk9fHa+YjKQG953P7l8+p2R4+1Llvr+b8j+aAaztvXJ1MLC9dOROxI3mmdP7m0bh7P06f1HzvWvv3vy9ZJ98T/IyI9iZ+LiOcjBvKyH4mIoxHRpmp1P7754kedlq3y/H9m0vrPtL3+LTv+S+P1qwzkK6dzBi4dufekw8Ujq//elY//qWpoLOLv6Hj9S5ZdIlZb0qfegQAAALAFFKL6t/+F8Xq4UBgfrz0D2h+7CqWr8wsvRMSVmdo7AiNRLFyYK83mD+RGopjkzz9HGuKTTfGT2XPjLwZ2VuPj01dLM5tdeehzu6ttPmlp/6nfe3zOC2xB2+g9NKBH3dr/gTsbVBBgw/n9h/7V0P47fdmi7C9lYHvy+w/9q137vxlfr/jugmsGbH0VbRn62srtv/v3NoGtazDer4errz37+Cf0Df1/6Eu9vtffW6Ay1H7RcLT5YsDwsynGzjZ5bUog7Vmt4waLEbG6xDvXkkXeBez8hYdCbxscitZFA7HSWkn77zhERLnjWule6VqeiwfW/eTPv4my3qfNN0vttLjKw/20Aff7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAtvJPAAAA//8tL8+m") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x4) 23.518980679s ago: executing program 3 (id=1680): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40812000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0xc0) 18.664141464s ago: executing program 35 (id=1580): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001200010a0000000004000000070000007a"], 0x20}}, 0x40000) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x253f, 0x10000, 0x0, 0x28e}) syz_emit_ethernet(0x8e, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd31800580600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000c90780000fe0bf9893138eed99a136513126171cffc510ce8dbc95505120000000100000000ffffff41f72541c6efc910000000000000000000"], 0x0) 18.662279534s ago: executing program 3 (id=1683): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x75, 0x7, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1183, 0x2, @perf_bp={&(0x7f0000000cc0), 0x9}, 0x2084, 0x800, 0x8, 0x4, 0x6, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x8, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x14a900, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3018002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@resuid}, {@bh}, {@dioread_nolock}, {@nojournal_checksum}, {@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000500)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x52, 0x1}, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1, @ANYBLOB="680ccfa1"], 0x40c}, 0x1, 0x0, 0x0, 0x8af495490a3e5055}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x23e7, &(0x7f0000000400)={0x0, 0xf00e, 0x800, 0x2, 0x30c}, &(0x7f0000000000), &(0x7f0000000140)) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000340)={0x0, 0x0, 0x1}, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={r6, 0x0, &(0x7f00000002c0)}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x82, &(0x7f0000000000)={r7, 0xb}, 0x8) 18.39111353s ago: executing program 3 (id=1685): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000280), 0x1, 0x5a9, &(0x7f00000002c0)="$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") r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r2, 0xffffffffffffffff}, 0x4) pipe2$watch_queue(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1e, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='syzkaller\x00', 0xc44, 0x42, &(0x7f00000009c0)=""/66, 0x41000, 0x0, '\x00', r4, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r0, r0, r3, r5, r6, r3, r2, r3, r2, r3], &(0x7f0000000b00), 0x10, 0x3}, 0x94) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200043, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}}) 17.651378863s ago: executing program 3 (id=1687): socket(0xa, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') setns(0xffffffffffffffff, 0x24020000) r1 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x379, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x20, 0x0, 0x0) (fail_nth: 8) 13.759811582s ago: executing program 36 (id=1647): r0 = syz_io_uring_complete(0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xe, 0x3b071, r0, 0x21be2000) timer_create(0x3, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000200080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 11.386890181s ago: executing program 37 (id=1663): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) setfsgid(0xee00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) r2 = dup(r1) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) io_setup(0x8, &(0x7f0000000600)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000000c0)="01", 0x24}]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000000", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES16, @ANYRES16, @ANYRES8, @ANYRES32=r0, @ANYRESDEC=r2], 0xc0}}, 0x0) 2.501394072s ago: executing program 38 (id=1687): socket(0xa, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') setns(0xffffffffffffffff, 0x24020000) r1 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x379, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x20, 0x0, 0x0) (fail_nth: 8) 1.654644053s ago: executing program 8 (id=1911): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x6025, 0x4005, 0xb, 0x6, 0x1, 0xfffffffd, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4800}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x9, 0x6d05, 0x6}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) fsync(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x1d8c0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt(r3, 0x8001, 0x2, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e000000000000000c000000070000000800000099ceaad3457c49b7dbba63aa5313270cf59f7fa74f1c0036a2c17057d0a339c83a53eb9f694dcf6f42908a989ec3ecf9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, 0x0, 0x4}, 0xfffffd20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) 1.51872055s ago: executing program 8 (id=1912): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) keyctl$set_timeout(0xf, 0x0, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) 1.288502814s ago: executing program 9 (id=1919): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={0x0}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) 1.271605545s ago: executing program 8 (id=1920): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x7692330c}], 0x1, 0x4102, 0x0) 1.203314229s ago: executing program 9 (id=1921): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0xc) r3 = syz_io_uring_setup(0x4b7, &(0x7f0000010400)={0x0, 0x6fb9, 0x40, 0x3}, &(0x7f0000010080), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x24, 0xfffffffffffffffe, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x20) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000280), &(0x7f0000000040)) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='./file1\x00', 0x2000775) splice(r0, 0x0, r4, 0x0, 0x8000, 0x0) 1.203106679s ago: executing program 0 (id=1922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x21, 0x1, 0x81) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.165348831s ago: executing program 0 (id=1923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x7, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x80, 0x7, 0x2, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xea, 0x6f}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) 941.235334ms ago: executing program 0 (id=1926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 912.208736ms ago: executing program 0 (id=1927): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 895.890107ms ago: executing program 0 (id=1928): memfd_create(0x0, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x8) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000180)=""/208, 0xd0}], 0x1) mbind(&(0x7f0000d44000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x1000000000000c, 0x2) 637.541072ms ago: executing program 7 (id=1932): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x24, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b2c25fe80070000000000000000000009ffffffe000"/40, 0x28}], 0x1}, 0x20000810) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x21, 0x1, 0x81) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname(r5, &(0x7f0000000540)=@generic, &(0x7f00000005c0)=0x80) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r4, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 387.549037ms ago: executing program 8 (id=1933): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@data_err_ignore}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c65) creat(&(0x7f00000000c0)='./file1\x00', 0x4) 382.202017ms ago: executing program 7 (id=1934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 319.198011ms ago: executing program 9 (id=1935): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) 318.804691ms ago: executing program 7 (id=1936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x15, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x6}, {0x0, 0x3, 0x78, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4040) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="18", 0x1}], 0x1}, 0x4) 307.006822ms ago: executing program 9 (id=1937): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000009fc0)={&(0x7f0000009f80)={0x3c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004045}, 0x4010) 266.092644ms ago: executing program 8 (id=1938): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x1, 0x31}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="c2e512c476edbffe2d1000", 0xb}, {&(0x7f00000000c0)}], 0x2}, 0x4000080) 223.859897ms ago: executing program 9 (id=1939): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x6025, 0x4005, 0xb, 0x6, 0x1, 0xfffffffd, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4800}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x9, 0x6d05, 0x6}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) fsync(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x1d8c0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt(r3, 0x8001, 0x2, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e000000000000000c000000070000000800000099ceaad3457c49b7dbba63aa5313270cf59f7fa74f1c0036a2c17057d0a339c83a53eb9f694dcf6f42908a989ec3ecf9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, 0x0, 0x4}, 0xfffffd20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) 163.07932ms ago: executing program 7 (id=1940): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x24, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b2c25fe80070000000000000000000009ffffffe000"/40, 0x28}], 0x1}, 0x20000810) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x21, 0x1, 0x81) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname(r4, &(0x7f0000000540)=@generic, &(0x7f00000005c0)=0x80) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) pread64(r5, &(0x7f0000000100)=""/165, 0xa5, 0x9) 162.73703ms ago: executing program 7 (id=1941): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) keyctl$set_timeout(0xf, 0x0, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000"/19], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) 148.778701ms ago: executing program 8 (id=1942): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x7692330c}], 0x1, 0x4102, 0x0) 126.161622ms ago: executing program 7 (id=1943): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f3b3168090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e80400000c5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f912ff01000021ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7bd50978b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefdc01000094d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af5617ea94c9493260fad0000f96f06817fb903729a7db6ff957697c9ede7885d94ffb00600e0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000280), 0x1, 0x5a9, &(0x7f00000002c0)="$eJzs3U9oHGUbAPBnZrNN/+T70g8+QaWHokKF0k3SP1o9tVexUOhB8KJhsw0lm2zJJtqEgOm9iD2ISi/1pgePigcP4sWjVy+KZ6HYoND0oCubnU23MYmbmM3G7O8Hk33fmck+7zszz+zOywwbQM86Xv+TRjwVEZeTiMGWZX2RLTzeWG95aaH4cGmhmEStduWXJJKIeLC0UGyun2SvRyJiMSKejIhv8hEn09W3PNAsVOfmJ0bL5dJ0Vh+ambw+VJ2bP3VtcnS8NF6aOvPiS+fOnz03cnqktbkPa621/Nb6euvH2+/e+u6Vu7c//ezYYvH90SQuxEC2rLUfO6mxTfJxYc38s50I1kVJtxvAtuSyPK+n0hMxGLks69dTaz059O9K84AOqvVH1IAelch/6FHN7wH169/mtJvfP+5dbFyA1OMuLy0U34lm/L7G2EQcXLk2Ofxr8tiVSf168+huNpR9afFmRAz39f31+E+y42/7hneigXTU1xcbO+rR/m8ObKSr559Y5/wz0Bw7/Yea57/l7Py3vHr8PYqf2+D8d7nNGL+//tNHG8a/2R9Prxs/WY2frBM/jYg324x/57Uvz2+0LPk44kSsH391nc3Hh4euXiuXhht/143x1YljL2/c/4jDG8RvjNkeXPmYae3/gaxNaZv9/+Lbz59Z3CT+889uvv/X2/6HIuK9NuP/78Enr2607N7N5H79W8BW938S+bi7WdCWAeEXLhz/ISsaNQQAAAAAAAAAgB2UrtzLlqSF1XKaFgqNZ3j/H4fTcqU6c/JqZXZqrHHP29HIp807rQYb9aReH8nux23WT6+pn8llAXOHVuqFYqU81uW+AwAAAAAAAAAAAAAAAAAAwF5xZM3z/7/lVp7/X/tz1cB+tfFPfgP7nfyH3vV4/iddawew+3z+Q8+qyX/oXfIfepf8h94l/6F3yX/oXfIfepf8BwAAAAAAAAAAAAAAAAAAAAAAAACAjrh86VJ9qj1cWijW62N9c7MTlbdOjZWqE4XJ2WKhWJm+XhivVMbLpUKxMvl375dUKteHY2r2xtBMqTozVJ2bf2OyMjvV/E3RUr7jPQIAAAAAAAAAAAAAAAAAAIB/n4GVKUkLEflGPU0LhYj/RMTRJJKr18ql4Yj4b0R8n8v31+sj3W40AAAAAAAAAAAAAAAAAAAA7DOHstfp6tz8xGi5XNr5Ql/nQ7Rf6NvKyhGxuLPNqL/jlv8rn23ALm+6xwqx2GjTXmlP24Xc3jgO936hG2cjAAAAAAAAAAAAAAAAAADobS1PdLfpj842CAAAAAAAAAAAAAAAAAAAAHpS+nMSEfXpxOBzA2uXHkiWcyuvEfH2nSsf3BidmZkeqc+/vzp/5sNs/ulutB9oVzNP04io5zEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwSHVufmK0XC5Nb7PQ38Y63e4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHb8GQAA//++Gsc2") open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200043, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 46.003017ms ago: executing program 9 (id=1944): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0xc) r3 = syz_io_uring_setup(0x4b7, &(0x7f0000010400)={0x0, 0x6fb9, 0x40, 0x3}, &(0x7f0000010080), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x24, 0xfffffffffffffffe, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x20) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000280), &(0x7f0000000040)) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='./file1\x00', 0x2000775) splice(r0, 0x0, r4, 0x0, 0x8000, 0x0) 0s ago: executing program 0 (id=1945): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) timer_create(0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x1a}, &(0x7f0000000340)) socket$unix(0x1, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000100)) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) r1 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x8, 0x1000}, 0x301, 0x10000, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0xa3c0dda19233b004, 0x0, 0x9}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000002000200000000ffffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7022f7250e1679f285a0baa070000010000008500000085000000b700000000d17b0906a23beceeec4fd978d27c1df30b411c146adbead6b9c690a685ef41fd2b7802d190f9f74c6039864d4b72b930c08417320586176830ddf12ac9a39d4c32c0509cbd56feb7803bbbd9a10edc866baba6045ce35f7626c899a5575eb54e55e19ef704da227e71ff8290fd3e5aaa72d3561f00430a4fd52ddee2b923df7b24e90063167811651d66fbe414108923f70021dca9a1f38002f85dc20b8b8e2726b250dcce8c7a1e57bdb5996db30bfac550f9535dd80b615f21e302143814eefbb1206e3836bd04a9be409516bdd699974e06a7dbb25d73d8f0692844ca171f5bc60651c7b12713f11a0d218c28fb94746266a4d08b7a50e0f598d6e6bbf16497dd8ee8f9041fce365e1594b6d756d2331ff3fe40fba3151cf9266f103294655bbd51"], &(0x7f0000000280)='syzkaller\x00', 0xffffffff, 0xdb, &(0x7f0000000640)=""/219, 0x40f00, 0x11, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000440)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0xffffffffffffffff, r2, r2, r2, r2], &(0x7f0000000540)=[{0x5, 0x5, 0x10, 0x7}, {0x5, 0x5, 0x4, 0x6}, {0x2, 0x5, 0x1, 0x9}, {0x4, 0x3, 0xb, 0x3}], 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000001c0)={0x6, 0x27, 0x3ff, 0xffff, 0x14, "e756000000000d00"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) write(r1, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r1) set_mempolicy(0x0, &(0x7f0000000000)=0x8, 0x5) kernel console output (not intermixed with test programs): wn parameter 'pcr' [ 100.592555][ T7884] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1285: bg 0: block 248: padding at end of block bitmap is not set [ 100.641344][ T7884] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1285: Failed to acquire dquot type 1 [ 100.670029][ T7884] EXT4-fs (loop5): 1 truncate cleaned up [ 100.686757][ T7884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.710699][ T7888] netlink: 'syz.4.1286': attribute type 11 has an invalid length. [ 100.752678][ T7884] EXT4-fs: Ignoring removed orlov option [ 100.755967][ T7740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.758408][ T7884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.768806][ T7740] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.785319][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.792439][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.799363][ T7912] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 100.810337][ T7884] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 100.824543][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.831628][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.852920][ T7884] EXT4-fs error (device loop5): __ext4_remount:6789: comm syz.5.1285: Abort forced by user [ 100.866241][ T7884] EXT4-fs (loop5): Remounting filesystem read-only [ 100.872885][ T7884] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 100.883568][ T7884] ext4 filesystem being remounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.932521][ T7927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.939853][ T7927] IPv6: NLM_F_CREATE should be set when creating new route [ 100.985204][ T7740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.066130][ T3718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.083737][ T7937] FAULT_INJECTION: forcing a failure. [ 101.083737][ T7937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.096891][ T7937] CPU: 1 UID: 0 PID: 7937 Comm: syz.6.1296 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.096969][ T7937] Tainted: [W]=WARN [ 101.096975][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.097050][ T7937] Call Trace: [ 101.097057][ T7937] [ 101.097064][ T7937] __dump_stack+0x1d/0x30 [ 101.097089][ T7937] dump_stack_lvl+0x95/0xd0 [ 101.097110][ T7937] dump_stack+0x15/0x1b [ 101.097136][ T7937] should_fail_ex+0x263/0x280 [ 101.097165][ T7937] should_fail+0xb/0x20 [ 101.097190][ T7937] should_fail_usercopy+0x1a/0x20 [ 101.097231][ T7937] _copy_to_iter+0xd2/0xea0 [ 101.097263][ T7937] ? _raw_spin_unlock+0x9/0x30 [ 101.097362][ T7937] ? __free_frozen_pages+0x278/0x4f0 [ 101.097389][ T7937] ? __mem_cgroup_uncharge+0x50/0x80 [ 101.097494][ T7937] ? __folio_put+0x11e/0x150 [ 101.097523][ T7937] copy_page_to_iter+0x18f/0x2d0 [ 101.097543][ T7937] anon_pipe_read+0x236/0x750 [ 101.097568][ T7937] ? __pfx_autoremove_wake_function+0x10/0x10 [ 101.097608][ T7937] do_iter_readv_writev+0x4fd/0x5a0 [ 101.097698][ T7937] vfs_readv+0x1f4/0x6e0 [ 101.097733][ T7937] do_readv+0xe9/0x210 [ 101.097761][ T7937] __x64_sys_readv+0x45/0x50 [ 101.097784][ T7937] x64_sys_call+0x2831/0x3000 [ 101.097824][ T7937] do_syscall_64+0xc0/0x2a0 [ 101.097852][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.097937][ T7937] RIP: 0033:0x7fdea2c2aeb9 [ 101.097955][ T7937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.097973][ T7937] RSP: 002b:00007fdea1687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 101.098025][ T7937] RAX: ffffffffffffffda RBX: 00007fdea2ea5fa0 RCX: 00007fdea2c2aeb9 [ 101.098104][ T7937] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 101.098117][ T7937] RBP: 00007fdea1687090 R08: 0000000000000000 R09: 0000000000000000 [ 101.098131][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.098145][ T7937] R13: 00007fdea2ea6038 R14: 00007fdea2ea5fa0 R15: 00007ffdbe067538 [ 101.098218][ T7937] [ 101.328595][ T7740] veth0_vlan: entered promiscuous mode [ 101.346775][ T7952] FAULT_INJECTION: forcing a failure. [ 101.346775][ T7952] name failslab, interval 1, probability 0, space 0, times 0 [ 101.347025][ T7740] veth1_vlan: entered promiscuous mode [ 101.359495][ T7952] CPU: 0 UID: 0 PID: 7952 Comm: syz.4.1298 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 101.359553][ T7952] Tainted: [W]=WARN [ 101.359564][ T7952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.359577][ T7952] Call Trace: [ 101.359585][ T7952] [ 101.359593][ T7952] __dump_stack+0x1d/0x30 [ 101.359619][ T7952] dump_stack_lvl+0x95/0xd0 [ 101.359640][ T7952] dump_stack+0x15/0x1b [ 101.359714][ T7952] should_fail_ex+0x263/0x280 [ 101.359817][ T7952] should_failslab+0x8c/0xb0 [ 101.359842][ T7952] kmem_cache_alloc_noprof+0x68/0x490 [ 101.359904][ T7952] ? sctp_get_port_local+0x438/0xae0 [ 101.359930][ T7952] sctp_get_port_local+0x438/0xae0 [ 101.359962][ T7952] sctp_do_bind+0x398/0x4b0 [ 101.360020][ T7952] sctp_setsockopt_bindx+0x1c9/0x2c0 [ 101.360045][ T7952] sctp_setsockopt+0x7de/0xea0 [ 101.360082][ T7952] sock_common_setsockopt+0x69/0x80 [ 101.360110][ T7952] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 101.360134][ T7952] __sys_setsockopt+0x184/0x200 [ 101.360178][ T7952] __x64_sys_setsockopt+0x64/0x80 [ 101.360239][ T7952] x64_sys_call+0x21d5/0x3000 [ 101.360266][ T7952] do_syscall_64+0xc0/0x2a0 [ 101.360298][ T7952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.360320][ T7952] RIP: 0033:0x7fb14238aeb9 [ 101.360337][ T7952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.360399][ T7952] RSP: 002b:00007fb140de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.360420][ T7952] RAX: ffffffffffffffda RBX: 00007fb142605fa0 RCX: 00007fb14238aeb9 [ 101.360514][ T7952] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 101.360527][ T7952] RBP: 00007fb140de7090 R08: 0000000000000048 R09: 0000000000000000 [ 101.360541][ T7952] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 101.360556][ T7952] R13: 00007fb142606038 R14: 00007fb142605fa0 R15: 00007ffd77761198 [ 101.360575][ T7952] [ 101.575691][ T7740] veth0_macvtap: entered promiscuous mode [ 101.583368][ T7740] veth1_macvtap: entered promiscuous mode [ 101.598406][ T7740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.612354][ T7740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.623527][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.647400][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.666440][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.685849][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.818438][ T7978] set_capacity_and_notify: 6 callbacks suppressed [ 101.818478][ T7978] loop5: detected capacity change from 0 to 736 [ 101.858783][ T7983] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 101.902312][ T7986] loop6: detected capacity change from 0 to 1024 [ 101.911422][ T7986] EXT4-fs: Ignoring removed bh option [ 101.918070][ T7990] loop4: detected capacity change from 0 to 128 [ 101.932113][ T7986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.969931][ T7994] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.1310'. [ 101.981609][ T7986] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1307'. [ 101.990708][ T7986] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 102.006348][ T7994] dummy0: entered promiscuous mode [ 102.012283][ T7994] dummy0: left promiscuous mode [ 102.033573][ T7996] loop4: detected capacity change from 0 to 1024 [ 102.042426][ T7996] EXT4-fs: inline encryption not supported [ 102.082566][ T7996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.096812][ T7233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.128702][ T8005] syzkaller0: entered promiscuous mode [ 102.134258][ T8005] syzkaller0: entered allmulticast mode [ 102.141295][ T8005] FAULT_INJECTION: forcing a failure. [ 102.141295][ T8005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.154464][ T8005] CPU: 0 UID: 0 PID: 8005 Comm: syz.6.1314 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 102.154651][ T8005] Tainted: [W]=WARN [ 102.154657][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.154670][ T8005] Call Trace: [ 102.154676][ T8005] [ 102.154684][ T8005] __dump_stack+0x1d/0x30 [ 102.154751][ T8005] dump_stack_lvl+0x95/0xd0 [ 102.154780][ T8005] dump_stack+0x15/0x1b [ 102.154873][ T8005] should_fail_ex+0x263/0x280 [ 102.154902][ T8005] should_fail+0xb/0x20 [ 102.154929][ T8005] should_fail_usercopy+0x1a/0x20 [ 102.154986][ T8005] _copy_from_user+0x1c/0xb0 [ 102.155005][ T8005] __copy_msghdr+0x244/0x300 [ 102.155092][ T8005] ___sys_sendmsg+0x10c/0x1e0 [ 102.155120][ T8005] __x64_sys_sendmsg+0xd4/0x160 [ 102.155143][ T8005] x64_sys_call+0x17ba/0x3000 [ 102.155170][ T8005] do_syscall_64+0xc0/0x2a0 [ 102.155203][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.155243][ T8005] RIP: 0033:0x7fdea2c2aeb9 [ 102.155258][ T8005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.155357][ T8005] RSP: 002b:00007fdea1687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.155377][ T8005] RAX: ffffffffffffffda RBX: 00007fdea2ea5fa0 RCX: 00007fdea2c2aeb9 [ 102.155390][ T8005] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000007 [ 102.155403][ T8005] RBP: 00007fdea1687090 R08: 0000000000000000 R09: 0000000000000000 [ 102.155415][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.155429][ T8005] R13: 00007fdea2ea6038 R14: 00007fdea2ea5fa0 R15: 00007ffdbe067538 [ 102.155497][ T8005] [ 102.169197][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.210632][ T8009] loop4: detected capacity change from 0 to 512 [ 102.306931][ T8011] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1317'. [ 102.361125][ T8009] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.374886][ T8015] loop6: detected capacity change from 0 to 1024 [ 102.382213][ T8009] EXT4-fs (loop4): orphan cleanup on readonly fs [ 102.389023][ T8009] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1315: Allocating blocks 41-42 which overlap fs metadata [ 102.410214][ T8009] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1315: Allocating blocks 41-42 which overlap fs metadata [ 102.423424][ T8015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.471205][ T7233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.492098][ T8009] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1315: Failed to acquire dquot type 1 [ 102.509658][ T8009] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 102.525425][ T8009] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1315: corrupted inode contents [ 102.562697][ T8009] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.1315: mark_inode_dirty error [ 102.575677][ T8009] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1315: corrupted inode contents [ 102.596056][ T8009] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1315: mark_inode_dirty error [ 102.610677][ T8009] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1315: corrupted inode contents [ 102.623053][ T8009] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 102.631795][ T8009] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1315: corrupted inode contents [ 102.645938][ T8009] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.1315: mark_inode_dirty error [ 102.658522][ T8009] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 102.667887][ T8009] EXT4-fs (loop4): 1 truncate cleaned up [ 102.674683][ T8009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.703558][ T8048] loop7: detected capacity change from 0 to 1024 [ 102.722189][ T8048] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.750337][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.761069][ T8048] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.805943][ T8048] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.1330: inode has both inline data and extents flags [ 102.825058][ T8052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1333'. [ 102.827620][ T8048] EXT4-fs (loop7): Remounting filesystem read-only [ 102.878166][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1330'. [ 102.921246][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1335'. [ 102.961027][ T7740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.029421][ T8066] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8066 comm=syz.7.1338 [ 103.070497][ T8069] __nla_validate_parse: 1 callbacks suppressed [ 103.070513][ T8069] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1339'. [ 103.085736][ T8069] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1339'. [ 103.085758][ T8069] netlink: 'syz.3.1339': attribute type 6 has an invalid length. [ 103.085791][ T8069] netlink: 'syz.3.1339': attribute type 5 has an invalid length. [ 103.085805][ T8069] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1339'. [ 103.273184][ T8103] 9p: Bad value for 'rfdno' [ 103.387883][ T8113] ip6gre1: entered promiscuous mode [ 103.393158][ T8113] ip6gre1: entered allmulticast mode [ 103.472632][ T8126] loop6: detected capacity change from 0 to 1024 [ 103.479468][ T8126] EXT4-fs: Ignoring removed bh option [ 103.504408][ T8126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.542726][ T8126] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1347'. [ 103.551854][ T8126] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 103.629050][ T7233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.832719][ T8160] debugfs: 'ttyS3' already exists in 'caif_serial' [ 103.864921][ T8160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8160 comm=syz.5.1353 [ 104.186942][ T8215] loop6: detected capacity change from 0 to 1024 [ 104.244965][ T8215] EXT4-fs: Ignoring removed bh option [ 104.313202][ T8215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.338193][ T8230] loop7: detected capacity change from 0 to 1024 [ 104.344973][ T8230] EXT4-fs: Ignoring removed bh option [ 104.354687][ T8230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.410874][ T7740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.420730][ T8244] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1364'. [ 104.528805][ T8255] netlink: 'syz.4.1366': attribute type 2 has an invalid length. [ 104.536661][ T8255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1366'. [ 104.577881][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 104.577894][ T29] audit: type=1326 audit(1769747458.678:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 104.607976][ T29] audit: type=1326 audit(1769747458.678:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 104.631535][ T29] audit: type=1326 audit(1769747458.678:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 104.655091][ T29] audit: type=1326 audit(1769747458.678:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 104.655123][ T29] audit: type=1326 audit(1769747458.678:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 104.655147][ T29] audit: type=1326 audit(1769747458.688:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 104.655209][ T29] audit: type=1326 audit(1769747458.688:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 104.655236][ T29] audit: type=1326 audit(1769747458.688:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 104.772255][ T29] audit: type=1326 audit(1769747458.688:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 104.800174][ T29] audit: type=1326 audit(1769747458.688:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8258 comm="syz.7.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab920eb78e code=0x7ffc0000 [ 104.841876][ T8260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8260 comm=syz.4.1368 [ 104.884855][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1370'. [ 104.905321][ T8270] EXT4-fs: Ignoring removed orlov option [ 104.920540][ T8215] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 104.963224][ T8270] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.007321][ T8270] EXT4-fs (loop5): orphan cleanup on readonly fs [ 105.050671][ T7233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.064383][ T8270] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1369: bg 0: block 248: padding at end of block bitmap is not set [ 105.118033][ T8270] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1369: Failed to acquire dquot type 1 [ 105.130583][ T8270] EXT4-fs (loop5): 1 truncate cleaned up [ 105.145515][ T8270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.182859][ T8293] netlink: 'syz.7.1376': attribute type 29 has an invalid length. [ 105.209541][ T8270] EXT4-fs: Ignoring removed orlov option [ 105.215791][ T8293] netlink: 'syz.7.1376': attribute type 29 has an invalid length. [ 105.224110][ T8270] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.242912][ T8293] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1376'. [ 105.269714][ T8270] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 105.305274][ T8270] EXT4-fs error (device loop5): __ext4_remount:6789: comm syz.5.1369: Abort forced by user [ 105.328558][ T8270] EXT4-fs (loop5): Remounting filesystem read-only [ 105.335164][ T8270] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 105.352427][ T8270] ext4 filesystem being remounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.365104][ T8313] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1378'. [ 105.387346][ T8313] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1378'. [ 105.422040][ T3718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.455715][ T8326] netlink: 'syz.5.1380': attribute type 10 has an invalid length. [ 105.463860][ T8326] dummy0: entered promiscuous mode [ 105.468996][ T8326] dummy0: entered allmulticast mode [ 105.480353][ T8326] bridge0: port 3(dummy0) entered blocking state [ 105.486848][ T8326] bridge0: port 3(dummy0) entered disabled state [ 105.676470][ T8329] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8329 comm=syz.3.1382 [ 105.895237][ T8339] SELinux: Context system_u:object_r:public_content_rw_t:s0 is not valid (left unmapped). [ 106.203012][ T8351] EXT4-fs: Ignoring removed orlov option [ 106.243568][ T8351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.291050][ T8351] EXT4-fs (loop7): orphan cleanup on readonly fs [ 106.303877][ T8359] macvlan2: entered promiscuous mode [ 106.309223][ T8359] macvlan2: entered allmulticast mode [ 106.314546][ T8351] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1390: bg 0: block 248: padding at end of block bitmap is not set [ 106.314892][ T8351] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1390: Failed to acquire dquot type 1 [ 106.328857][ T8359] veth0_virt_wifi: entered allmulticast mode [ 106.371941][ T8351] EXT4-fs (loop7): 1 truncate cleaned up [ 106.378140][ T8351] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.396585][ T8351] EXT4-fs: Ignoring removed orlov option [ 106.402826][ T8351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.411452][ T8351] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 106.450006][ T8364] bridge_slave_0: default FDB implementation only supports local addresses [ 106.471161][ T8351] EXT4-fs error (device loop7): __ext4_remount:6789: comm syz.7.1390: Abort forced by user [ 106.505606][ T8351] EXT4-fs (loop7): Remounting filesystem read-only [ 106.512177][ T8351] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 106.529790][ T8351] ext4 filesystem being remounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.573297][ T8372] FAULT_INJECTION: forcing a failure. [ 106.573297][ T8372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.586495][ T8372] CPU: 1 UID: 0 PID: 8372 Comm: syz.5.1396 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 106.586539][ T8372] Tainted: [W]=WARN [ 106.586546][ T8372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.586576][ T8372] Call Trace: [ 106.586583][ T8372] [ 106.586591][ T8372] __dump_stack+0x1d/0x30 [ 106.586616][ T8372] dump_stack_lvl+0x95/0xd0 [ 106.586635][ T8372] dump_stack+0x15/0x1b [ 106.586655][ T8372] should_fail_ex+0x263/0x280 [ 106.586735][ T8372] should_fail+0xb/0x20 [ 106.586763][ T8372] should_fail_usercopy+0x1a/0x20 [ 106.586798][ T8372] _copy_to_user+0x20/0xa0 [ 106.586832][ T8372] simple_read_from_buffer+0xb5/0x130 [ 106.586970][ T8372] proc_fail_nth_read+0x10e/0x150 [ 106.587000][ T8372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.587025][ T8372] vfs_read+0x1ab/0x7f0 [ 106.587067][ T8372] ? __rcu_read_unlock+0x4e/0x70 [ 106.587099][ T8372] ? __fget_files+0x184/0x1c0 [ 106.587120][ T8372] ? mutex_lock+0x57/0x90 [ 106.587193][ T8372] ksys_read+0xdc/0x1a0 [ 106.587213][ T8372] __x64_sys_read+0x40/0x50 [ 106.587234][ T8372] x64_sys_call+0x2889/0x3000 [ 106.587288][ T8372] do_syscall_64+0xc0/0x2a0 [ 106.587316][ T8372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.587373][ T8372] RIP: 0033:0x7fcd3b1cb78e [ 106.587391][ T8372] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.587473][ T8372] RSP: 002b:00007fcd39c66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.587492][ T8372] RAX: ffffffffffffffda RBX: 00007fcd39c676c0 RCX: 00007fcd3b1cb78e [ 106.587506][ T8372] RDX: 000000000000000f RSI: 00007fcd39c670a0 RDI: 0000000000000004 [ 106.587524][ T8372] RBP: 00007fcd39c67090 R08: 0000000000000000 R09: 0000000000000000 [ 106.587539][ T8372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.587553][ T8372] R13: 00007fcd3b486038 R14: 00007fcd3b485fa0 R15: 00007ffc8b161a28 [ 106.587574][ T8372] [ 106.850080][ T7740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.855157][ T8379] set_capacity_and_notify: 3 callbacks suppressed [ 106.855228][ T8379] loop6: detected capacity change from 0 to 1024 [ 106.873988][ T8379] EXT4-fs: inline encryption not supported [ 106.922943][ T8379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.926677][ T8384] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8384 comm=syz.5.1401 [ 106.936040][ T8390] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 106.950257][ T8379] EXT4-fs error (device loop6): ext4_add_entry:2415: inode #2: comm syz.6.1397: Directory hole found for htree leaf block 0 [ 107.042301][ T8393] @0Ù: renamed from bond_slave_1 [ 107.062835][ T8379] EXT4-fs (loop6): Remounting filesystem read-only [ 107.080086][ T7233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.110030][ T8402] loop5: detected capacity change from 0 to 1024 [ 107.116788][ T8402] EXT4-fs: Ignoring removed bh option [ 107.126072][ T8402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.142668][ T8402] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 107.191205][ T3718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.245292][ T8420] loop4: detected capacity change from 0 to 1024 [ 107.256209][ T8420] EXT4-fs: Ignoring removed bh option [ 107.270661][ T8420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.310540][ T8425] vhci_hcd vhci_hcd.0: invalid port number 255 [ 107.316748][ T8425] vhci_hcd vhci_hcd.0: invalid port number 255 [ 107.445672][ T8420] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 107.505290][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.615642][ T8433] loop4: detected capacity change from 0 to 512 [ 107.622429][ T8433] EXT4-fs: Ignoring removed orlov option [ 107.628594][ T8433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.637734][ T8433] EXT4-fs (loop4): orphan cleanup on readonly fs [ 107.644769][ T8433] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1412: bg 0: block 248: padding at end of block bitmap is not set [ 107.659426][ T8433] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1412: Failed to acquire dquot type 1 [ 107.671515][ T8433] EXT4-fs (loop4): 1 truncate cleaned up [ 107.677739][ T8433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.691663][ T8433] EXT4-fs: Ignoring removed orlov option [ 107.697362][ T8433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.706015][ T8433] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 107.720053][ T8433] EXT4-fs error (device loop4): __ext4_remount:6789: comm syz.4.1412: Abort forced by user [ 107.730794][ T8433] EXT4-fs (loop4): Remounting filesystem read-only [ 107.737311][ T8433] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 107.745742][ T8433] ext4 filesystem being remounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.786247][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.799586][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.983714][ T8440] loop4: detected capacity change from 0 to 256 [ 108.817991][ T8449] FAULT_INJECTION: forcing a failure. [ 108.817991][ T8449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.831096][ T8449] CPU: 1 UID: 0 PID: 8449 Comm: syz.4.1416 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 108.831130][ T8449] Tainted: [W]=WARN [ 108.831134][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.831177][ T8449] Call Trace: [ 108.831191][ T8449] [ 108.831197][ T8449] __dump_stack+0x1d/0x30 [ 108.831212][ T8449] dump_stack_lvl+0x95/0xd0 [ 108.831225][ T8449] dump_stack+0x15/0x1b [ 108.831284][ T8449] should_fail_ex+0x263/0x280 [ 108.831302][ T8449] should_fail+0xb/0x20 [ 108.831354][ T8449] should_fail_usercopy+0x1a/0x20 [ 108.831373][ T8449] _copy_from_user+0x1c/0xb0 [ 108.831385][ T8449] ___sys_sendmsg+0xc1/0x1e0 [ 108.831403][ T8449] __x64_sys_sendmsg+0xd4/0x160 [ 108.831475][ T8449] x64_sys_call+0x17ba/0x3000 [ 108.831489][ T8449] do_syscall_64+0xc0/0x2a0 [ 108.831507][ T8449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.831585][ T8449] RIP: 0033:0x7fb14238aeb9 [ 108.831596][ T8449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.831607][ T8449] RSP: 002b:00007fb140dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.831619][ T8449] RAX: ffffffffffffffda RBX: 00007fb142606090 RCX: 00007fb14238aeb9 [ 108.831628][ T8449] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 108.831636][ T8449] RBP: 00007fb140dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.831651][ T8449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.831659][ T8449] R13: 00007fb142606128 R14: 00007fb142606090 R15: 00007ffd77761198 [ 108.831670][ T8449] [ 109.719561][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.888820][ T8382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.945772][ T8454] loop6: detected capacity change from 0 to 1024 [ 109.952676][ T8454] EXT4-fs: Ignoring removed bh option [ 109.960919][ T8454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.986830][ T8454] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 110.016818][ T8461] loop3: detected capacity change from 0 to 1024 [ 110.033462][ T8461] EXT4-fs: Ignoring removed bh option [ 110.060585][ T8461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.101792][ T7233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.150417][ T8469] loop6: detected capacity change from 0 to 1024 [ 110.155014][ T8470] loop7: detected capacity change from 0 to 512 [ 110.170148][ T8470] EXT4-fs: Ignoring removed orlov option [ 110.179649][ T8470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.220174][ T8469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.246738][ T8473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8473 comm=syz.4.1425 [ 110.297832][ T8470] EXT4-fs (loop7): orphan cleanup on readonly fs [ 110.323412][ T8469] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 110.350474][ T8486] loop5: detected capacity change from 0 to 164 [ 110.353449][ T8470] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1424: bg 0: block 248: padding at end of block bitmap is not set [ 110.366919][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 110.366936][ T29] audit: type=1400 audit(1769747464.460:2158): avc: denied { unlink } for pid=3718 comm="syz-executor" name="bus" dev="tmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.400826][ T8486] Unable to read rock-ridge attributes [ 110.401732][ T8488] __nla_validate_parse: 7 callbacks suppressed [ 110.401746][ T8488] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1426'. [ 110.420058][ T8470] Quota error (device loop7): write_blk: dquota write failed [ 110.421701][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1426'. [ 110.428896][ T8470] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 110.447714][ T8470] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1424: Failed to acquire dquot type 1 [ 110.484312][ T7233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.502299][ T8470] EXT4-fs (loop7): 1 truncate cleaned up [ 110.523421][ T8503] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, [ 110.523473][ T8470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.531077][ T8503] inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 110.595554][ T8470] EXT4-fs: Ignoring removed orlov option [ 110.623098][ T8470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.677814][ T8470] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 110.757357][ T29] audit: type=1326 audit(1769747464.870:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea2c2aeb9 code=0x7ffc0000 [ 110.780918][ T29] audit: type=1326 audit(1769747464.870:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdea2c2aeb9 code=0x7ffc0000 [ 110.804301][ T29] audit: type=1326 audit(1769747464.870:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea2c2aeb9 code=0x7ffc0000 [ 110.827716][ T29] audit: type=1326 audit(1769747464.870:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fdea2c2aeb9 code=0x7ffc0000 [ 110.851298][ T29] audit: type=1326 audit(1769747464.870:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea2c2aeb9 code=0x7ffc0000 [ 110.874732][ T29] audit: type=1326 audit(1769747464.870:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea2c2aeb9 code=0x7ffc0000 [ 110.898246][ T29] audit: type=1326 audit(1769747464.870:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8535 comm="syz.6.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fdea2c2aeb9 code=0x7ffc0000 [ 110.930401][ T8470] EXT4-fs error (device loop7): __ext4_remount:6789: comm syz.7.1424: Abort forced by user [ 110.965772][ T8470] EXT4-fs (loop7): Remounting filesystem read-only [ 110.972348][ T8470] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 110.982609][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1432'. [ 111.008632][ T8470] ext4 filesystem being remounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.031185][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.060847][ T8579] EXT4-fs: Ignoring removed bh option [ 111.076933][ T8579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.096303][ T8579] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 111.159392][ T7740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.195543][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.277762][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1436'. [ 111.295517][ T8604] batadv0: entered promiscuous mode [ 111.315154][ T8618] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8618 comm=syz.4.1439 [ 111.387197][ T8621] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8621 comm=syz.5.1440 [ 111.460092][ T8632] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8632 comm=syz.6.1438 [ 111.611007][ T8648] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=8648 comm=syz.7.1444 [ 111.775894][ T8663] random: crng reseeded on system resumption [ 112.186571][ T8690] netlink: 556 bytes leftover after parsing attributes in process `syz.3.1455'. [ 112.651489][ T8706] random: crng reseeded on system resumption [ 112.694745][ T8714] set_capacity_and_notify: 1 callbacks suppressed [ 112.694759][ T8714] loop6: detected capacity change from 0 to 512 [ 112.708322][ T8714] EXT4-fs: Ignoring removed orlov option [ 112.719681][ T8714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.728676][ T8714] EXT4-fs (loop6): orphan cleanup on readonly fs [ 112.735467][ T8714] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1460: bg 0: block 248: padding at end of block bitmap is not set [ 112.750152][ T8714] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1460: Failed to acquire dquot type 1 [ 112.762488][ T8714] EXT4-fs (loop6): 1 truncate cleaned up [ 112.768660][ T8714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.785753][ T8714] EXT4-fs: Ignoring removed orlov option [ 112.794930][ T8714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.807452][ T8714] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 112.819925][ T8714] EXT4-fs error (device loop6): __ext4_remount:6789: comm syz.6.1460: Abort forced by user [ 112.830216][ T8714] EXT4-fs (loop6): Remounting filesystem read-only [ 112.836768][ T8714] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 112.845216][ T8714] ext4 filesystem being remounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.866626][ T7233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.944408][ T8722] loop6: detected capacity change from 0 to 1024 [ 112.951107][ T8722] EXT4-fs: Ignoring removed bh option [ 112.954603][ T8724] batadv1: entered promiscuous mode [ 112.963743][ T8722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.981245][ T8722] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 113.028072][ T7233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.070192][ T8729] loop6: detected capacity change from 0 to 2048 [ 113.078786][ T8729] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.086027][ T8729] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.101911][ T8729] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.114074][ T5485] IPVS: starting estimator thread 0... [ 113.119793][ T8731] loop7: detected capacity change from 0 to 1024 [ 113.126641][ T8731] EXT4-fs: Ignoring removed bh option [ 113.210242][ T8734] IPVS: using max 2400 ests per chain, 120000 per kthread [ 113.224572][ T8739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8739 comm=syz.6.1468 [ 113.286915][ T8755] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8755 comm=syz.7.1469 [ 113.301297][ T8759] random: crng reseeded on system resumption [ 113.360947][ T8771] loop6: detected capacity change from 0 to 1024 [ 113.382866][ T8771] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.421244][ T8780] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8780 comm=syz.3.1470 [ 113.808645][ T8835] loop4: detected capacity change from 0 to 512 [ 113.826212][ T8835] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.923611][ T8841] loop5: detected capacity change from 0 to 512 [ 113.930256][ T8841] EXT4-fs: Ignoring removed orlov option [ 113.938154][ T8841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.959115][ T8841] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.966438][ T8841] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1493: bg 0: block 248: padding at end of block bitmap is not set [ 113.983128][ T8841] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1493: Failed to acquire dquot type 1 [ 113.994970][ T8841] EXT4-fs (loop5): 1 truncate cleaned up [ 114.003082][ T8841] EXT4-fs: Ignoring removed orlov option [ 114.008878][ T8841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.017664][ T8841] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 114.030433][ T8841] EXT4-fs error (device loop5): __ext4_remount:6789: comm syz.5.1493: Abort forced by user [ 114.057108][ T8841] EXT4-fs (loop5): Remounting filesystem read-only [ 114.063701][ T8841] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 114.067509][ T8849] futex_wake_op: syz.3.1495 tries to shift op by 32; fix this program [ 114.081449][ T8841] ext4 filesystem being remounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.283105][ T8863] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1500'. [ 114.293666][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 114.303410][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1500'. [ 114.369965][ T8860] SELinux: failed to load policy [ 114.552246][ T8875] debugfs: 'ttyS3' already exists in 'caif_serial' [ 114.588889][ T8875] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8875 comm=syz.3.1503 [ 114.656447][ T8886] loop7: detected capacity change from 0 to 1024 [ 114.663360][ T8886] EXT4-fs: Ignoring removed bh option [ 114.676364][ T8886] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1507'. [ 114.685493][ T8886] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 114.740873][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1509'. [ 115.288259][ T8947] loop7: detected capacity change from 0 to 512 [ 115.352427][ T8947] EXT4-fs: Ignoring removed orlov option [ 115.358187][ T8947] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.432716][ T8947] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.1516: corrupted in-inode xattr: e_value size too large [ 115.462929][ T8947] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1516: couldn't read orphan inode 15 (err -117) [ 115.572511][ T8947] netlink: 'syz.7.1516': attribute type 13 has an invalid length. [ 115.580407][ T8947] __nla_validate_parse: 1 callbacks suppressed [ 115.580422][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1516'. [ 115.639073][ T8969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8969 comm=syz.4.1522 [ 115.793001][ T8983] loop6: detected capacity change from 0 to 512 [ 115.869425][ T8988] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8988 comm=syz.7.1525 [ 115.884414][ T8983] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 115.914845][ T8983] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 115.953258][ T8983] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #11: comm syz.6.1528: corrupted inode contents [ 115.966705][ T8983] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #11: comm syz.6.1528: mark_inode_dirty error [ 116.087612][ T8983] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1528: invalid indirect mapped block 1 (level 1) [ 116.120222][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 116.155530][ T8983] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #11: comm syz.6.1528: corrupted inode contents [ 116.191647][ T8983] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 116.249688][ T8983] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #11: comm syz.6.1528: corrupted inode contents [ 116.262909][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1532'. [ 116.272062][ T8983] EXT4-fs error (device loop6): ext4_truncate:4635: inode #11: comm syz.6.1528: mark_inode_dirty error [ 116.310540][ T8983] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 116.333390][ T8983] EXT4-fs (loop6): 1 truncate cleaned up [ 116.342615][ T8983] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.1528: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 116.695989][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 116.696005][ T29] audit: type=1326 audit(1769747470.810:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.7.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 116.725542][ T29] audit: type=1326 audit(1769747470.810:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.7.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 116.749013][ T29] audit: type=1326 audit(1769747470.810:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.7.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 116.772560][ T29] audit: type=1326 audit(1769747470.810:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.7.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 116.796217][ T29] audit: type=1326 audit(1769747470.810:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.7.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 116.829920][ T29] audit: type=1326 audit(1769747470.940:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.7.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 116.853506][ T29] audit: type=1326 audit(1769747470.940:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.7.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 116.877008][ T29] audit: type=1326 audit(1769747470.940:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.7.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 116.900483][ T29] audit: type=1326 audit(1769747470.940:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.7.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 116.924104][ T29] audit: type=1326 audit(1769747470.940:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9035 comm="syz.7.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 117.054528][ T9052] ext4: Unknown parameter 'nojournal' [ 117.250480][ T9060] FAULT_INJECTION: forcing a failure. [ 117.250480][ T9060] name failslab, interval 1, probability 0, space 0, times 0 [ 117.263233][ T9060] CPU: 0 UID: 0 PID: 9060 Comm: syz.4.1545 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.263264][ T9060] Tainted: [W]=WARN [ 117.263270][ T9060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.263281][ T9060] Call Trace: [ 117.263287][ T9060] [ 117.263294][ T9060] __dump_stack+0x1d/0x30 [ 117.263379][ T9060] dump_stack_lvl+0x95/0xd0 [ 117.263398][ T9060] dump_stack+0x15/0x1b [ 117.263417][ T9060] should_fail_ex+0x263/0x280 [ 117.263520][ T9060] should_failslab+0x8c/0xb0 [ 117.263616][ T9060] kmem_cache_alloc_noprof+0x68/0x490 [ 117.263639][ T9060] ? skb_clone+0x151/0x1f0 [ 117.263657][ T9060] skb_clone+0x151/0x1f0 [ 117.263673][ T9060] __netlink_deliver_tap+0x2c9/0x500 [ 117.263768][ T9060] netlink_unicast+0x66b/0x690 [ 117.263799][ T9060] netlink_sendmsg+0x5c8/0x6f0 [ 117.263818][ T9060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.263836][ T9060] ____sys_sendmsg+0x5af/0x600 [ 117.263855][ T9060] ___sys_sendmsg+0x195/0x1e0 [ 117.263980][ T9060] __x64_sys_sendmsg+0xd4/0x160 [ 117.264000][ T9060] x64_sys_call+0x17ba/0x3000 [ 117.264036][ T9060] do_syscall_64+0xc0/0x2a0 [ 117.264063][ T9060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.264083][ T9060] RIP: 0033:0x7fb14238aeb9 [ 117.264097][ T9060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.264114][ T9060] RSP: 002b:00007fb140de7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.264162][ T9060] RAX: ffffffffffffffda RBX: 00007fb142605fa0 RCX: 00007fb14238aeb9 [ 117.264217][ T9060] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 117.264229][ T9060] RBP: 00007fb140de7090 R08: 0000000000000000 R09: 0000000000000000 [ 117.264240][ T9060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.264252][ T9060] R13: 00007fb142606038 R14: 00007fb142605fa0 R15: 00007ffd77761198 [ 117.264268][ T9060] [ 117.484380][ T9067] EXT4-fs: Ignoring removed orlov option [ 117.490187][ T9067] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.504608][ T9067] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.1547: corrupted in-inode xattr: e_value size too large [ 117.519139][ T9067] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1547: couldn't read orphan inode 15 (err -117) [ 117.537653][ T9065] EXT4-fs: Ignoring removed bh option [ 117.548386][ T9067] netlink: 'syz.4.1547': attribute type 13 has an invalid length. [ 117.556275][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1547'. [ 117.578354][ T9063] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1546'. [ 117.587447][ T9063] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.632835][ T9073] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1550: iget: bad i_size value: 38620345925642 [ 117.658161][ T9073] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1550: couldn't read orphan inode 15 (err -117) [ 117.706133][ T9073] Direct I/O collision with buffered writes! File: /file1 Comm: syz.7.1550 [ 117.783183][ T9084] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1549'. [ 117.865057][ T9080] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9080 comm=syz.6.1552 [ 117.949890][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 117.974299][ T9102] batadv2: entered promiscuous mode [ 118.046346][ T9111] FAULT_INJECTION: forcing a failure. [ 118.046346][ T9111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.059684][ T9111] CPU: 1 UID: 0 PID: 9111 Comm: syz.6.1565 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 118.059775][ T9111] Tainted: [W]=WARN [ 118.059783][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.059797][ T9111] Call Trace: [ 118.059803][ T9111] [ 118.059809][ T9111] __dump_stack+0x1d/0x30 [ 118.059833][ T9111] dump_stack_lvl+0x95/0xd0 [ 118.059853][ T9111] dump_stack+0x15/0x1b [ 118.059935][ T9111] should_fail_ex+0x263/0x280 [ 118.059963][ T9111] should_fail+0xb/0x20 [ 118.059994][ T9111] should_fail_usercopy+0x1a/0x20 [ 118.060079][ T9111] _copy_from_iter+0xcf/0xea0 [ 118.060098][ T9111] ? __alloc_skb+0x397/0x4b0 [ 118.060124][ T9111] ? __alloc_skb+0x219/0x4b0 [ 118.060227][ T9111] netlink_sendmsg+0x4ae/0x6f0 [ 118.060248][ T9111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.060334][ T9111] ____sys_sendmsg+0x5af/0x600 [ 118.060359][ T9111] ___sys_sendmsg+0x195/0x1e0 [ 118.060448][ T9111] __x64_sys_sendmsg+0xd4/0x160 [ 118.060471][ T9111] x64_sys_call+0x17ba/0x3000 [ 118.060496][ T9111] do_syscall_64+0xc0/0x2a0 [ 118.060555][ T9111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.060577][ T9111] RIP: 0033:0x7fdea2c2aeb9 [ 118.060645][ T9111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.060664][ T9111] RSP: 002b:00007fdea1687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.060687][ T9111] RAX: ffffffffffffffda RBX: 00007fdea2ea5fa0 RCX: 00007fdea2c2aeb9 [ 118.060748][ T9111] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 118.060760][ T9111] RBP: 00007fdea1687090 R08: 0000000000000000 R09: 0000000000000000 [ 118.060804][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.060887][ T9111] R13: 00007fdea2ea6038 R14: 00007fdea2ea5fa0 R15: 00007ffdbe067538 [ 118.060908][ T9111] [ 118.350815][ T9121] set_capacity_and_notify: 4 callbacks suppressed [ 118.350874][ T9121] loop5: detected capacity change from 0 to 1024 [ 118.393917][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1572'. [ 118.404287][ T9121] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.460957][ T9128] wireguard: wg1: Could not create IPv4 socket [ 118.590694][ T9137] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9137 comm=syz.3.1574 [ 118.667241][ T9144] loop7: detected capacity change from 0 to 1024 [ 118.691170][ T9144] EXT4-fs: Ignoring removed bh option [ 118.701842][ T9149] loop3: detected capacity change from 0 to 512 [ 118.728889][ T9149] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.751224][ T9144] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1576'. [ 118.760329][ T9144] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 118.805952][ T9149] EXT4-fs (loop3): orphan cleanup on readonly fs [ 118.815118][ T9149] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1577: Allocating blocks 41-42 which overlap fs metadata [ 118.844666][ T9149] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1577: Allocating blocks 41-42 which overlap fs metadata [ 118.873131][ T9149] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1577: Failed to acquire dquot type 1 [ 118.893770][ T9149] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 118.908788][ T9149] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1577: corrupted inode contents [ 118.921327][ T9149] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.1577: mark_inode_dirty error [ 118.934097][ T9149] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1577: corrupted inode contents [ 118.946591][ T9149] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.1577: mark_inode_dirty error [ 118.958502][ T9149] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1577: corrupted inode contents [ 118.970622][ T9149] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 118.981594][ T9149] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1577: corrupted inode contents [ 118.993629][ T9149] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.1577: mark_inode_dirty error [ 119.005179][ T9149] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 119.014314][ T9149] EXT4-fs (loop3): 1 truncate cleaned up [ 119.023046][ T9149] FAULT_INJECTION: forcing a failure. [ 119.023046][ T9149] name failslab, interval 1, probability 0, space 0, times 0 [ 119.035792][ T9149] CPU: 0 UID: 0 PID: 9149 Comm: syz.3.1577 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 119.035827][ T9149] Tainted: [W]=WARN [ 119.035835][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.035848][ T9149] Call Trace: [ 119.035854][ T9149] [ 119.035860][ T9149] __dump_stack+0x1d/0x30 [ 119.035929][ T9149] dump_stack_lvl+0x95/0xd0 [ 119.035953][ T9149] dump_stack+0x15/0x1b [ 119.035975][ T9149] should_fail_ex+0x263/0x280 [ 119.036008][ T9149] should_failslab+0x8c/0xb0 [ 119.036034][ T9149] kmem_cache_alloc_noprof+0x68/0x490 [ 119.036094][ T9149] ? getname_flags+0x7f/0x3b0 [ 119.036163][ T9149] getname_flags+0x7f/0x3b0 [ 119.036211][ T9149] user_path_at+0x28/0x130 [ 119.036243][ T9149] bpf_obj_get_user+0x66/0x310 [ 119.036389][ T9149] bpf_obj_get+0xed/0x100 [ 119.036414][ T9149] __sys_bpf+0x5dc/0x7b0 [ 119.036442][ T9149] __x64_sys_bpf+0x41/0x50 [ 119.036466][ T9149] x64_sys_call+0x28e1/0x3000 [ 119.036571][ T9149] do_syscall_64+0xc0/0x2a0 [ 119.036604][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.036719][ T9149] RIP: 0033:0x7ff0f04caeb9 [ 119.036737][ T9149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.036869][ T9149] RSP: 002b:00007ff0eef27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.036888][ T9149] RAX: ffffffffffffffda RBX: 00007ff0f0745fa0 RCX: 00007ff0f04caeb9 [ 119.036904][ T9149] RDX: 0000000000000018 RSI: 0000200000004400 RDI: 0000000000000007 [ 119.036917][ T9149] RBP: 00007ff0eef27090 R08: 0000000000000000 R09: 0000000000000000 [ 119.036928][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.037063][ T9149] R13: 00007ff0f0746038 R14: 00007ff0f0745fa0 R15: 00007ffe5bbcc928 [ 119.037083][ T9149] [ 119.278863][ T9175] loop7: detected capacity change from 0 to 512 [ 119.296189][ T9175] EXT4-fs (loop7): 1 truncate cleaned up [ 119.354905][ T9175] 9p: Bad value for 'rfdno' [ 119.424508][ T9188] loop7: detected capacity change from 0 to 512 [ 119.432530][ T9188] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1584: iget: bad i_size value: 38620345925642 [ 119.463513][ T9188] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1584: couldn't read orphan inode 15 (err -117) [ 119.489325][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1583'. [ 119.510818][ T9194] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1585'. [ 119.548318][ T9188] Direct I/O collision with buffered writes! File: /file1 Comm: syz.7.1584 [ 119.564860][ T9193] batadv2: entered promiscuous mode [ 119.611242][ T9203] loop4: detected capacity change from 0 to 512 [ 119.626878][ T9203] EXT4-fs: Ignoring removed orlov option [ 119.655792][ T9203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.738795][ T9203] EXT4-fs (loop4): orphan cleanup on readonly fs [ 119.766594][ T9203] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1586: bg 0: block 248: padding at end of block bitmap is not set [ 119.784413][ T9203] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1586: Failed to acquire dquot type 1 [ 119.796998][ T9203] EXT4-fs (loop4): 1 truncate cleaned up [ 119.807699][ T9203] EXT4-fs: Ignoring removed orlov option [ 119.813676][ T9203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.822288][ T9203] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 119.840955][ T9203] EXT4-fs error (device loop4): __ext4_remount:6789: comm syz.4.1586: Abort forced by user [ 119.863948][ T9203] EXT4-fs (loop4): Remounting filesystem read-only [ 119.870515][ T9203] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 119.885551][ T9203] ext4 filesystem being remounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.953928][ T9229] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9229 comm=syz.7.1587 [ 120.117280][ T9273] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9273 comm=syz.4.1590 [ 120.424513][ T9346] loop6: detected capacity change from 0 to 512 [ 120.435785][ T9346] EXT4-fs: Ignoring removed orlov option [ 120.441718][ T9346] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.458508][ T9346] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.1594: corrupted in-inode xattr: e_value size too large [ 120.480426][ T9346] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1594: couldn't read orphan inode 15 (err -117) [ 120.534427][ T9357] loop6: detected capacity change from 0 to 1024 [ 120.541171][ T9357] EXT4-fs: Ignoring removed bh option [ 120.563592][ T9357] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 120.716339][ T9378] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9378 comm=syz.6.1597 [ 120.785295][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 120.861447][ T9381] batadv0: entered promiscuous mode [ 120.949737][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1602'. [ 121.045268][ T9424] loop3: detected capacity change from 0 to 128 [ 121.062670][ T9424] ext4 filesystem being mounted at /392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.122138][ T9428] loop6: detected capacity change from 0 to 128 [ 121.128813][ T9428] vfat: Unknown parameter '@' [ 121.292136][ T9433] bridge0: left promiscuous mode [ 121.297117][ T9433] bridge0: left allmulticast mode [ 121.302682][ T9433] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 121.347493][ T9441] EXT4-fs: Ignoring removed orlov option [ 121.353333][ T9441] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.380089][ T9441] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.1610: corrupted in-inode xattr: e_value size too large [ 121.394674][ T9444] EXT4-fs: Ignoring removed bh option [ 121.400428][ T9441] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1610: couldn't read orphan inode 15 (err -117) [ 121.426004][ T9444] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 121.746502][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1616'. [ 121.786993][ T9456] batadv0: entered promiscuous mode [ 121.822669][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 121.822685][ T29] audit: type=1326 audit(1769747475.940:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 121.859563][ T29] audit: type=1326 audit(1769747475.970:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 121.883117][ T29] audit: type=1326 audit(1769747475.970:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab9212ac22 code=0x7ffc0000 [ 121.906484][ T29] audit: type=1326 audit(1769747475.970:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab9212ac22 code=0x7ffc0000 [ 121.929780][ T29] audit: type=1326 audit(1769747475.970:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 121.953394][ T29] audit: type=1326 audit(1769747475.970:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 121.976876][ T29] audit: type=1326 audit(1769747475.970:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 122.000325][ T29] audit: type=1326 audit(1769747475.970:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 122.023814][ T29] audit: type=1326 audit(1769747475.970:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 122.047316][ T29] audit: type=1326 audit(1769747475.970:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9212aeb9 code=0x7ffc0000 [ 122.171615][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 122.222942][ T9476] EXT4-fs: Ignoring removed orlov option [ 122.228632][ T9476] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.235671][ T9477] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1622: iget: bad i_size value: 38620345925642 [ 122.251048][ T9477] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1622: couldn't read orphan inode 15 (err -117) [ 122.289143][ T9476] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.1624: corrupted in-inode xattr: e_value size too large [ 122.326303][ T9476] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1624: couldn't read orphan inode 15 (err -117) [ 122.561373][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1627'. [ 122.601591][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1632'. [ 122.654484][ T9493] batadv0: entered promiscuous mode [ 122.862461][ T9501] EXT4-fs: Ignoring removed orlov option [ 122.879847][ T9501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.930630][ T9501] EXT4-fs (loop4): orphan cleanup on readonly fs [ 122.937588][ T9501] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1634: bg 0: block 248: padding at end of block bitmap is not set [ 122.952312][ T9501] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1634: Failed to acquire dquot type 1 [ 122.985135][ T9501] EXT4-fs (loop4): 1 truncate cleaned up [ 123.004657][ T9501] EXT4-fs: Ignoring removed orlov option [ 123.010563][ T9501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.029609][ T9501] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 123.089614][ T9501] EXT4-fs error (device loop4): __ext4_remount:6789: comm syz.4.1634: Abort forced by user [ 123.109733][ T9501] EXT4-fs (loop4): Remounting filesystem read-only [ 123.116283][ T9501] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 123.130597][ T9501] ext4 filesystem being remounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.262460][ T9511] EXT4-fs: Ignoring removed bh option [ 123.283071][ T9511] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1637'. [ 123.292221][ T9511] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 123.672731][ T9524] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1640'. [ 123.681842][ T9524] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 124.429047][ T9532] set_capacity_and_notify: 7 callbacks suppressed [ 124.429068][ T9532] loop6: detected capacity change from 0 to 1024 [ 124.457006][ T9538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9538 comm=syz.3.1645 [ 124.550255][ T9532] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.552074][ T9543] loop3: detected capacity change from 0 to 512 [ 124.616675][ T9532] 9p: Bad value for 'wfdno' [ 124.659300][ T9543] EXT4-fs: Ignoring removed orlov option [ 124.692668][ T9543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.707890][ T9559] loop4: detected capacity change from 0 to 1024 [ 124.714689][ T9559] EXT4-fs: Ignoring removed bh option [ 124.732461][ T9543] EXT4-fs (loop3): orphan cleanup on readonly fs [ 124.757316][ T9559] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1648'. [ 124.760080][ T9543] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1646: bg 0: block 248: padding at end of block bitmap is not set [ 124.766422][ T9559] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 124.821618][ T9543] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1646: Failed to acquire dquot type 1 [ 124.853548][ T9543] EXT4-fs (loop3): 1 truncate cleaned up [ 124.868617][ T9543] EXT4-fs: Ignoring removed orlov option [ 124.879865][ T9543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.898884][ T9543] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 124.931818][ T9543] EXT4-fs error (device loop3): __ext4_remount:6789: comm syz.3.1646: Abort forced by user [ 124.947048][ T9543] EXT4-fs (loop3): Remounting filesystem read-only [ 124.953633][ T9543] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 124.972193][ T9543] ext4 filesystem being remounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.013061][ T9579] FAULT_INJECTION: forcing a failure. [ 125.013061][ T9579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.026218][ T9579] CPU: 0 UID: 0 PID: 9579 Comm: syz.4.1650 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.026255][ T9579] Tainted: [W]=WARN [ 125.026261][ T9579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.026273][ T9579] Call Trace: [ 125.026299][ T9579] [ 125.026307][ T9579] __dump_stack+0x1d/0x30 [ 125.026406][ T9579] dump_stack_lvl+0x95/0xd0 [ 125.026492][ T9579] dump_stack+0x15/0x1b [ 125.026514][ T9579] should_fail_ex+0x263/0x280 [ 125.026548][ T9579] should_fail+0xb/0x20 [ 125.026578][ T9579] should_fail_usercopy+0x1a/0x20 [ 125.026614][ T9579] _copy_from_user+0x1c/0xb0 [ 125.026711][ T9579] ___sys_sendmsg+0xc1/0x1e0 [ 125.026741][ T9579] __x64_sys_sendmsg+0xd4/0x160 [ 125.026762][ T9579] x64_sys_call+0x17ba/0x3000 [ 125.026835][ T9579] do_syscall_64+0xc0/0x2a0 [ 125.026867][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.026889][ T9579] RIP: 0033:0x7fb14238aeb9 [ 125.026914][ T9579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.027007][ T9579] RSP: 002b:00007fb140de7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.027034][ T9579] RAX: ffffffffffffffda RBX: 00007fb142605fa0 RCX: 00007fb14238aeb9 [ 125.027127][ T9579] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000003 [ 125.027140][ T9579] RBP: 00007fb140de7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.027153][ T9579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.027167][ T9579] R13: 00007fb142606038 R14: 00007fb142605fa0 R15: 00007ffd77761198 [ 125.027188][ T9579] [ 125.300713][ T9585] loop4: detected capacity change from 0 to 128 [ 125.320035][ T9585] ext4 filesystem being mounted at /379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.549996][ T9594] bond1: (slave dummy0): Releasing active interface [ 125.556619][ T9594] dummy0: left allmulticast mode [ 125.573373][ T9594] bridge_slave_0: left allmulticast mode [ 125.579041][ T9594] bridge_slave_0: left promiscuous mode [ 125.584686][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.595684][ T9594] bridge_slave_1: left allmulticast mode [ 125.601765][ T9594] bridge_slave_1: left promiscuous mode [ 125.607387][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.617838][ T9594] bond0: (slave bond_slave_0): Releasing backup interface [ 125.628527][ T9594] bond0: (slave bond_slave_1): Releasing backup interface [ 125.639428][ T9594] team0: Port device team_slave_0 removed [ 125.648880][ T9594] team0: Port device team_slave_1 removed [ 125.656345][ T9594] batadv_slave_0: left promiscuous mode [ 125.661933][ T9594] batadv_slave_0: left allmulticast mode [ 125.673877][ T9594] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 126.357021][ T9606] loop3: detected capacity change from 0 to 1024 [ 126.357362][ T9606] EXT4-fs: Ignoring removed bh option [ 126.363333][ T9606] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1659'. [ 126.363353][ T9606] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 126.370252][ T9608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9608 comm=syz.7.1657 [ 126.449620][ T9609] loop4: detected capacity change from 0 to 1024 [ 126.490742][ T9609] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.532085][ T9604] 9p: Bad value for 'wfdno' [ 127.331231][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 127.331245][ T29] audit: type=1326 audit(1769747481.450:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f04caeb9 code=0x7ffc0000 [ 127.419532][ T29] audit: type=1326 audit(1769747481.480:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff0f04caeb9 code=0x7ffc0000 [ 127.443081][ T29] audit: type=1326 audit(1769747481.480:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f04caeb9 code=0x7ffc0000 [ 127.466456][ T29] audit: type=1326 audit(1769747481.480:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f04caeb9 code=0x7ffc0000 [ 127.489839][ T29] audit: type=1326 audit(1769747481.480:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0f04caeb9 code=0x7ffc0000 [ 127.513301][ T29] audit: type=1326 audit(1769747481.480:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f04caeb9 code=0x7ffc0000 [ 127.536686][ T29] audit: type=1326 audit(1769747481.480:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff0f04caeb9 code=0x7ffc0000 [ 127.560046][ T29] audit: type=1326 audit(1769747481.480:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f04caeb9 code=0x7ffc0000 [ 127.583419][ T29] audit: type=1326 audit(1769747481.490:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0f04caeb9 code=0x7ffc0000 [ 127.606807][ T29] audit: type=1326 audit(1769747481.490:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9615 comm="syz.3.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f04caeb9 code=0x7ffc0000 [ 128.636392][ T9638] loop7: detected capacity change from 0 to 1024 [ 128.643146][ T9638] EXT4-fs: Ignoring removed bh option [ 128.665510][ T9638] EXT4-fs mount: 62 callbacks suppressed [ 128.665529][ T9638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.704713][ T9638] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1671'. [ 128.713841][ T9638] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 128.939893][ T7740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.386814][ T9652] loop3: detected capacity change from 0 to 512 [ 129.402582][ T9652] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.441877][ T9652] EXT4-fs (loop3): orphan cleanup on readonly fs [ 129.450888][ T9652] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1675: Allocating blocks 41-42 which overlap fs metadata [ 129.488646][ T9652] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1675: Allocating blocks 41-42 which overlap fs metadata [ 129.531666][ T9652] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1675: Failed to acquire dquot type 1 [ 129.571302][ T9652] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 129.615823][ T9652] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1675: corrupted inode contents [ 129.629714][ T9652] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.1675: mark_inode_dirty error [ 129.649738][ T9652] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1675: corrupted inode contents [ 129.689688][ T9652] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.1675: mark_inode_dirty error [ 129.719666][ T9652] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1675: corrupted inode contents [ 129.739758][ T9652] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 129.759697][ T9652] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.1675: corrupted inode contents [ 129.789735][ T9652] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.1675: mark_inode_dirty error [ 129.819945][ T9652] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 129.839754][ T9652] EXT4-fs (loop3): 1 truncate cleaned up [ 129.845955][ T9652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.895540][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.934746][ T9655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9655 comm=syz.7.1676 [ 129.991865][ T9658] loop3: detected capacity change from 0 to 512 [ 130.089856][ T9658] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1677: iget: bad i_size value: 38620345925642 [ 130.163157][ T9658] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1677: couldn't read orphan inode 15 (err -117) [ 130.216983][ T9658] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.300781][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 135.226664][ T9704] loop3: detected capacity change from 0 to 1024 [ 135.233716][ T9704] EXT4-fs: Ignoring removed bh option [ 135.252330][ T9704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.272189][ T9704] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1683'. [ 135.281277][ T9704] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 135.447543][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.581456][ T9712] chnl_net:caif_netlink_parms(): no params data found [ 135.625890][ T31] bridge0: port 3(dummy0) entered disabled state [ 135.626497][ T31] bridge_slave_1: left allmulticast mode [ 135.626515][ T31] bridge_slave_1: left promiscuous mode [ 135.626641][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.627439][ T31] bridge_slave_0: left allmulticast mode [ 135.627456][ T31] bridge_slave_0: left promiscuous mode [ 135.627566][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.694577][ T9731] loop3: detected capacity change from 0 to 1024 [ 135.798084][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.799216][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.800669][ T31] bond0 (unregistering): Released all slaves [ 135.801669][ T31] bond1 (unregistering): left allmulticast mode [ 135.802205][ T31] bond1 (unregistering): Released all slaves [ 135.805465][ T9731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.805577][ T9731] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.806189][ T9731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 135.866852][ T9712] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.866885][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.867041][ T9712] bridge_slave_0: entered allmulticast mode [ 135.867489][ T9712] bridge_slave_0: entered promiscuous mode [ 135.868261][ T9712] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.868292][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.868371][ T9712] bridge_slave_1: entered allmulticast mode [ 135.868936][ T9712] bridge_slave_1: entered promiscuous mode [ 135.928950][ T31] hsr_slave_0: left promiscuous mode [ 135.939335][ T31] hsr_slave_1: left promiscuous mode [ 136.000991][ T9731] 9p: Bad value for 'wfdno' [ 136.045980][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.100862][ T31] team0 (unregistering): Port device team_slave_1 removed [ 136.118906][ T31] team0 (unregistering): Port device team_slave_0 removed [ 136.231276][ T9712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.264260][ T9712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.310915][ T9712] team0: Port device team_slave_0 added [ 136.325666][ T9712] team0: Port device team_slave_1 added [ 136.370565][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.377610][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.403630][ T9712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.465442][ T9712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.472474][ T9712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.498409][ T9712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.606215][ T9712] hsr_slave_0: entered promiscuous mode [ 136.621687][ T9712] hsr_slave_1: entered promiscuous mode [ 136.781677][ T9712] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 136.808870][ T9712] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 136.837455][ T9712] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 136.858199][ T9712] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 136.934208][ T9712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.961869][ T9712] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.990737][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.997877][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.048117][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.055276][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.090544][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 137.090561][ T29] audit: type=1400 audit(1769747491.200:2439): avc: denied { create } for pid=9792 comm="syz.7.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 137.131434][ T9712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.264913][ T9712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.523322][ T9712] veth0_vlan: entered promiscuous mode [ 137.551709][ T9712] veth1_vlan: entered promiscuous mode [ 137.585547][ T9712] veth0_macvtap: entered promiscuous mode [ 137.610284][ T9833] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 137.616715][ T9833] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 137.630229][ T9712] veth1_macvtap: entered promiscuous mode [ 137.661529][ T9712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.699134][ T9712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.723453][ T9836] syzkaller1: entered promiscuous mode [ 137.728955][ T9836] syzkaller1: entered allmulticast mode [ 137.757924][ T9322] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.766871][ T9322] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.790471][ T9322] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.810056][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.930228][ T9844] syzkaller0: entered promiscuous mode [ 137.935726][ T9844] syzkaller0: entered allmulticast mode [ 138.133729][ T9851] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1697'. [ 138.142792][ T9851] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1697'. [ 138.170265][ T9851] syzkaller0: entered promiscuous mode [ 138.175780][ T9851] syzkaller0: entered allmulticast mode [ 138.201916][ T9851] TC_ACT_REPEAT abuse ? [ 138.318877][ T9855] netlink: 'syz.7.1699': attribute type 1 has an invalid length. [ 138.401431][ T9855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.470774][ T9857] bond1: (slave ip6gretap1): making interface the new active one [ 138.500784][ T9857] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 138.554487][ T9855] veth3: entered promiscuous mode [ 138.571584][ T9855] bond1: (slave veth3): Enslaving as an active interface with a down link [ 138.633219][ T9859] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 138.767035][ T9863] syzkaller0: entered promiscuous mode [ 138.772577][ T9863] syzkaller0: entered allmulticast mode [ 139.112010][ T29] audit: type=1400 audit(1769747493.230:2440): avc: denied { ioctl } for pid=9882 comm="syz.8.1708" path="socket:[28777]" dev="sockfs" ino=28777 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 140.283999][ T9322] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.322790][ T9322] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.347862][ T9889] chnl_net:caif_netlink_parms(): no params data found [ 140.388603][ T9322] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.463395][ T9889] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.470505][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.487762][ T9889] bridge_slave_0: entered allmulticast mode [ 140.494277][ T9889] bridge_slave_0: entered promiscuous mode [ 140.512439][ T9322] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.532176][ T9889] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.539301][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.566736][ T9889] bridge_slave_1: entered allmulticast mode [ 140.577266][ T9889] bridge_slave_1: entered promiscuous mode [ 140.631474][ T9889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.650651][ T9322] bridge_slave_1: left allmulticast mode [ 140.656317][ T9322] bridge_slave_1: left promiscuous mode [ 140.661947][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.684560][ T9322] bridge_slave_0: left allmulticast mode [ 140.690287][ T9322] bridge_slave_0: left promiscuous mode [ 140.696077][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.871428][ T9322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.891044][ T9322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.910708][ T9322] bond0 (unregistering): Released all slaves [ 140.921974][ T9889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.970303][ T9889] team0: Port device team_slave_0 added [ 140.976894][ T9889] team0: Port device team_slave_1 added [ 140.990763][ T9322] hsr_slave_0: left promiscuous mode [ 140.996778][ T9322] hsr_slave_1: left promiscuous mode [ 141.002392][ T9322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.009828][ T9322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.027727][ T9322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.035177][ T9322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.052582][ T9322] veth1_macvtap: left promiscuous mode [ 141.058104][ T9322] veth0_macvtap: left promiscuous mode [ 141.063806][ T9322] veth1_vlan: left promiscuous mode [ 141.069162][ T9322] veth0_vlan: left promiscuous mode [ 141.144025][ T9322] team0 (unregistering): Port device team_slave_1 removed [ 141.154959][ T9322] team0 (unregistering): Port device team_slave_0 removed [ 141.214120][ T9889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.221116][ T9889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.247065][ T9889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.294433][ T9889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.301438][ T9889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.327455][ T9889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.396431][ T9889] hsr_slave_0: entered promiscuous mode [ 141.420025][ T9889] hsr_slave_1: entered promiscuous mode [ 141.425842][ T9889] debugfs: 'hsr0' already exists in 'hsr' [ 141.431618][ T9889] Cannot create hsr debugfs directory [ 141.602174][ T9322] IPVS: stop unused estimator thread 0... [ 141.884635][ T9873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.895606][ T9889] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 141.934228][ T9889] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 141.960201][ T9889] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 141.981482][ T9889] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 142.062092][ T9930] netlink: 'syz.8.1712': attribute type 1 has an invalid length. [ 142.091747][ T9889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.115270][ T9889] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.145461][ T9936] veth3: entered promiscuous mode [ 142.157580][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.164669][ T9322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.189901][ T9930] 8021q: VLANs not supported on vxcan0 [ 142.217653][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.224858][ T9322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.249386][ T9942] netlink: 'syz.8.1716': attribute type 3 has an invalid length. [ 142.257181][ T9942] netlink: 766 bytes leftover after parsing attributes in process `syz.8.1716'. [ 142.275419][ T9889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.285955][ T9889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.428723][ T9889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.557121][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1715'. [ 142.599851][ T9939] netlink: 'syz.7.1715': attribute type 4 has an invalid length. [ 142.692630][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.721840][ T29] audit: type=1400 audit(1769747496.830:2441): avc: denied { bind } for pid=9988 comm="syz.8.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.774147][ T9889] veth0_vlan: entered promiscuous mode [ 142.789588][ T29] audit: type=1400 audit(1769747496.900:2442): avc: denied { read } for pid=9995 comm="syz.8.1721" lport=43182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.816719][ T9889] veth1_vlan: entered promiscuous mode [ 142.841839][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.915244][ T9889] veth0_macvtap: entered promiscuous mode [ 142.930596][ T9889] veth1_macvtap: entered promiscuous mode [ 142.970438][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.996380][ T9889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.007697][ T9889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.044917][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.066792][ T9319] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.075837][ T9319] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.095931][ T9319] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.109890][ T9319] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.193675][ T9970] chnl_net:caif_netlink_parms(): no params data found [ 143.401420][ T52] bond0 (unregistering): Released all slaves [ 143.410675][ T52] bond1 (unregistering): left allmulticast mode [ 143.418197][ T52] bond1 (unregistering): Released all slaves [ 143.502788][T10034] syzkaller0: entered promiscuous mode [ 143.508303][T10034] syzkaller0: entered allmulticast mode [ 143.529371][ T52] hsr_slave_0: left promiscuous mode [ 143.542472][ T52] hsr_slave_1: left promiscuous mode [ 143.550863][ T52] veth0_macvtap: left promiscuous mode [ 143.556375][ T52] veth1_vlan: left promiscuous mode [ 143.562249][ T52] veth0_vlan: left promiscuous mode [ 143.639573][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.651956][ T9970] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.659009][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.671026][ T9970] bridge_slave_0: entered allmulticast mode [ 143.677574][ T9970] bridge_slave_0: entered promiscuous mode [ 143.694689][ T9970] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.701823][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.710263][ T9970] bridge_slave_1: entered allmulticast mode [ 143.716779][ T9970] bridge_slave_1: entered promiscuous mode [ 143.736450][ T9970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.757456][ T9970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.769090][T10068] netlink: 'syz.9.1726': attribute type 1 has an invalid length. [ 143.807349][ T9970] team0: Port device team_slave_0 added [ 143.827141][ T9970] team0: Port device team_slave_1 added [ 143.850110][T10078] veth3: entered promiscuous mode [ 143.893091][T10068] 8021q: VLANs not supported on ip_vti0 [ 143.933309][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.940370][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.966389][ T9970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.985778][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.992790][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.018753][ T9970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.098298][T10098] vlan2: entered promiscuous mode [ 144.103410][T10098] bridge0: entered promiscuous mode [ 144.116457][ T9970] hsr_slave_0: entered promiscuous mode [ 144.135975][ T9970] hsr_slave_1: entered promiscuous mode [ 144.142741][ T9970] debugfs: 'hsr0' already exists in 'hsr' [ 144.148477][ T9970] Cannot create hsr debugfs directory [ 144.215012][T10106] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1738'. [ 144.224156][T10106] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1738'. [ 144.262283][T10106] syzkaller0: entered promiscuous mode [ 144.267788][T10106] syzkaller0: entered allmulticast mode [ 144.278908][T10106] TC_ACT_REPEAT abuse ? [ 144.551743][ T9970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.569973][ T9970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.578987][ T9970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.589546][ T9970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.648445][ T9970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.661645][ T9970] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.672890][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.679990][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.700817][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.708026][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.728976][ T9970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.739606][ T9970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.848168][ T9970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.960871][ T9970] veth0_vlan: entered promiscuous mode [ 144.982430][ T9970] veth1_vlan: entered promiscuous mode [ 145.004625][ T9970] veth0_macvtap: entered promiscuous mode [ 145.024854][ T9970] veth1_macvtap: entered promiscuous mode [ 145.045119][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.071508][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.086078][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.105585][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.129078][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.145299][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.178625][ T29] audit: type=1400 audit(1769747499.290:2443): avc: denied { create } for pid=10223 comm="syz.9.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 145.256337][T10234] netlink: 'syz.0.1746': attribute type 1 has an invalid length. [ 145.372494][T10249] veth3: entered promiscuous mode [ 145.576532][T10283] syzkaller0: entered promiscuous mode [ 145.582195][T10283] syzkaller0: entered allmulticast mode [ 145.765805][T10310] syzkaller0: entered promiscuous mode [ 145.771331][T10310] syzkaller0: entered allmulticast mode [ 145.884896][T10327] syzkaller0: entered promiscuous mode [ 145.890602][T10327] syzkaller0: entered allmulticast mode [ 145.934885][T10331] syzkaller0: entered promiscuous mode [ 145.940425][T10331] syzkaller0: entered allmulticast mode [ 146.076191][T10356] netlink: 27 bytes leftover after parsing attributes in process `syz.8.1786'. [ 146.204840][T10380] syzkaller0: entered promiscuous mode [ 146.209585][T10372] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1792'. [ 146.210440][T10380] syzkaller0: entered allmulticast mode [ 146.345180][ T29] audit: type=1400 audit(1769747500.450:2444): avc: denied { ioctl } for pid=10398 comm="syz.8.1799" path="socket:[29646]" dev="sockfs" ino=29646 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 146.437156][T10411] netlink: 'syz.0.1803': attribute type 13 has an invalid length. [ 146.512668][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1806'. [ 146.633402][T10440] syzkaller0: entered promiscuous mode [ 146.639121][T10440] syzkaller0: entered allmulticast mode [ 146.820902][T10460] syzkaller0: entered promiscuous mode [ 146.826472][T10460] syzkaller0: entered allmulticast mode [ 146.889267][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.896552][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.988518][T10464] bridge_slave_0: left allmulticast mode [ 146.994238][T10464] bridge_slave_0: left promiscuous mode [ 147.000030][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.031595][T10464] bridge_slave_1: left allmulticast mode [ 147.037344][T10464] bridge_slave_1: left promiscuous mode [ 147.043269][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.068579][T10464] bond0: (slave bond_slave_0): Releasing backup interface [ 147.101940][T10464] bond0: (slave bond_slave_1): Releasing backup interface [ 147.155946][T10464] team0: Port device team_slave_0 removed [ 147.174613][T10464] team0: Port device team_slave_1 removed [ 147.200351][T10464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.210247][T10464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.219235][T10464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.228521][T10464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.240521][T10464] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.325498][T10505] syzkaller0: entered promiscuous mode [ 147.331058][T10505] syzkaller0: entered allmulticast mode [ 147.570511][T10541] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10541 comm=syz.8.1825 [ 148.165613][T10577] loop7: detected capacity change from 0 to 1024 [ 148.172375][T10577] EXT4-fs: Ignoring removed bh option [ 148.183965][T10577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.199657][T10577] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 148.251395][ T7740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.716172][T10629] loop8: detected capacity change from 0 to 1024 [ 148.723088][T10629] EXT4-fs: Ignoring removed bh option [ 148.730773][T10629] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.746766][T10629] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 148.812798][ T9712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.888142][T10644] syzkaller0: entered promiscuous mode [ 148.893727][T10644] syzkaller0: entered allmulticast mode [ 148.992886][T10656] syzkaller0: entered promiscuous mode [ 148.998401][T10656] syzkaller0: entered allmulticast mode [ 149.038394][T10658] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.045703][T10658] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.096354][T10658] bridge_slave_0: left allmulticast mode [ 149.102062][T10658] bridge_slave_0: left promiscuous mode [ 149.107722][T10658] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.119183][T10658] bridge_slave_1: left allmulticast mode [ 149.124949][T10658] bridge_slave_1: left promiscuous mode [ 149.131122][T10658] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.146364][T10658] bond0: (slave bond_slave_0): Releasing backup interface [ 149.158252][T10658] bond0: (slave bond_slave_1): Releasing backup interface [ 149.169695][T10658] team0: Port device team_slave_0 removed [ 149.178446][T10658] team0: Port device team_slave_1 removed [ 149.185944][T10658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.195005][T10658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.204604][T10658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.213696][T10658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.224546][T10658] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 149.464086][T10699] loop9: detected capacity change from 0 to 512 [ 149.522291][T10699] EXT4-fs: Ignoring removed orlov option [ 149.528065][T10699] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.658658][T10699] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.1855: corrupted in-inode xattr: e_value size too large [ 149.794482][T10699] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1855: couldn't read orphan inode 15 (err -117) [ 149.930060][T10699] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.979902][ T9889] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.272467][T10735] loop9: detected capacity change from 0 to 1024 [ 150.279299][T10735] EXT4-fs: Ignoring removed bh option [ 150.285249][T10738] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1869'. [ 150.296044][T10735] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.297099][T10738] ip6gre1: entered promiscuous mode [ 150.313880][T10738] ip6gre1: entered allmulticast mode [ 150.320575][T10735] netlink: 136 bytes leftover after parsing attributes in process `syz.9.1867'. [ 150.329651][T10735] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 150.419341][ T9889] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.450180][T10749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.471452][T10751] loop8: detected capacity change from 0 to 512 [ 150.482257][T10751] EXT4-fs: Ignoring removed orlov option [ 150.487993][T10751] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.506762][T10751] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.1874: corrupted in-inode xattr: e_value size too large [ 150.552898][T10751] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1874: couldn't read orphan inode 15 (err -117) [ 150.565471][T10751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.595648][ T9712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.636483][T10758] netlink: 'syz.9.1878': attribute type 13 has an invalid length. [ 150.751525][T10766] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1880'. [ 150.760693][T10766] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1880'. [ 150.784101][T10767] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10767 comm=syz.8.1877 [ 150.839466][T10771] syzkaller0: entered promiscuous mode [ 150.845020][T10771] syzkaller0: entered allmulticast mode [ 150.986439][T10789] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.993663][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.044193][T10797] loop9: detected capacity change from 0 to 512 [ 151.050983][T10797] EXT4-fs: Ignoring removed orlov option [ 151.056653][T10797] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.076493][T10789] bridge_slave_0: left allmulticast mode [ 151.082610][T10789] bridge_slave_0: left promiscuous mode [ 151.088723][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.106824][T10789] bridge_slave_1: left allmulticast mode [ 151.112648][T10789] bridge_slave_1: left promiscuous mode [ 151.118520][T10789] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.126633][T10797] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.1888: corrupted in-inode xattr: e_value size too large [ 151.146371][T10789] bond0: (slave bond_slave_0): Releasing backup interface [ 151.160275][T10789] bond0: (slave bond_slave_1): Releasing backup interface [ 151.167633][T10797] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1888: couldn't read orphan inode 15 (err -117) [ 151.183363][T10789] team0: Port device team_slave_0 removed [ 151.192269][T10789] team0: Port device team_slave_1 removed [ 151.199584][T10789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.208725][T10789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.216154][T10801] netlink: 'syz.7.1889': attribute type 13 has an invalid length. [ 151.216545][T10797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.245782][T10789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.269960][T10789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.282082][T10789] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 151.380379][ T9889] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.465741][T10818] syzkaller0: entered promiscuous mode [ 151.471329][T10818] syzkaller0: entered allmulticast mode [ 151.584787][ T3455] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 151.629779][T10843] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10843 comm=syz.7.1899 [ 151.669331][ T3455] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 151.717242][ T3455] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 151.784257][T10858] loop0: detected capacity change from 0 to 1024 [ 151.790980][T10858] EXT4-fs: Ignoring removed bh option [ 151.800535][T10858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.815045][ T3455] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 151.850533][T10858] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1902'. [ 151.859636][T10858] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 151.886783][T10819] chnl_net:caif_netlink_parms(): no params data found [ 151.910762][ T9970] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.011458][T10819] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.018579][T10819] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.029709][T10819] bridge_slave_0: entered allmulticast mode [ 152.036364][T10819] bridge_slave_0: entered promiscuous mode [ 152.069937][ T3455] bond5 (unregistering): (slave gretap1): Releasing active interface [ 152.180669][ T3455] bond0 (unregistering): left promiscuous mode [ 152.187458][ T3455] bond0 (unregistering): Released all slaves [ 152.195065][ T3455] bond1 (unregistering): left allmulticast mode [ 152.202022][ T3455] bond1 (unregistering): Released all slaves [ 152.209757][ T3455] bond2 (unregistering): Released all slaves [ 152.217933][ T3455] bond3 (unregistering): Released all slaves [ 152.226128][ T3455] bond4 (unregistering): Released all slaves [ 152.234425][ T3455] bond5 (unregistering): Released all slaves [ 152.244710][T10819] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.251858][T10819] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.258948][T10819] bridge_slave_1: entered allmulticast mode [ 152.265651][T10819] bridge_slave_1: entered promiscuous mode [ 152.275628][T10911] syzkaller0: entered promiscuous mode [ 152.281141][T10911] syzkaller0: entered allmulticast mode [ 152.301156][ T3455] veth0_to_hsr: left promiscuous mode [ 152.308542][ T3455] hsr_slave_0: left promiscuous mode [ 152.311235][T10921] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1912'. [ 152.322971][ T3455] team0: left promiscuous mode [ 152.396783][T10928] loop0: detected capacity change from 0 to 512 [ 152.404646][T10930] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1916'. [ 152.404786][T10928] EXT4-fs: Ignoring removed orlov option [ 152.419352][T10928] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.442515][T10928] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1915: corrupted in-inode xattr: e_value size too large [ 152.445237][T10819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.467018][T10819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.478335][T10928] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1915: couldn't read orphan inode 15 (err -117) [ 152.492146][T10928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.539336][T10819] team0: Port device team_slave_0 added [ 152.550954][T10935] netlink: 'syz.7.1918': attribute type 13 has an invalid length. [ 152.582766][ T9970] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.616088][T10819] team0: Port device team_slave_1 added [ 152.622003][T10943] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.661092][T10819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.668065][T10819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.694185][T10819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.706472][T10819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.713488][T10819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.739508][T10819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.783089][T10819] hsr_slave_0: entered promiscuous mode [ 152.789151][T10819] hsr_slave_1: entered promiscuous mode [ 152.795210][T10819] debugfs: 'hsr0' already exists in 'hsr' [ 152.801009][T10819] Cannot create hsr debugfs directory [ 152.848026][T10969] syzkaller0: entered promiscuous mode [ 152.853610][T10969] syzkaller0: entered allmulticast mode [ 152.881367][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'. [ 153.012878][T10994] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1929'. [ 153.025191][T10994] ip6gre1: entered promiscuous mode [ 153.030468][T10994] ip6gre1: entered allmulticast mode [ 153.093078][T11010] loop7: detected capacity change from 0 to 1024 [ 153.099858][T11010] EXT4-fs: Ignoring removed bh option [ 153.107837][T11010] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.130263][T11010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 153.181862][ T7740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.228201][T11025] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.235453][T11025] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.265103][T11025] bridge_slave_0: left allmulticast mode [ 153.270849][T11025] bridge_slave_0: left promiscuous mode [ 153.276589][T11025] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.286822][T11025] bridge_slave_1: left allmulticast mode [ 153.292529][T11025] bridge_slave_1: left promiscuous mode [ 153.298164][T11025] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.308190][T11025] bond0: (slave bond_slave_0): Releasing backup interface [ 153.317374][T11025] bond0: (slave bond_slave_1): Releasing backup interface [ 153.327904][T11025] team0: Port device team_slave_0 removed [ 153.335887][T11025] team0: Port device team_slave_1 removed [ 153.342970][T11025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.351455][T11025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.360183][T11025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.368522][T11025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.378833][T11025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.441810][T11033] loop8: detected capacity change from 0 to 512 [ 153.448413][T10819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 153.465196][T11033] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1933: iget: bad i_size value: 38620345925642 [ 153.478261][T10819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.497835][T11033] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1933: couldn't read orphan inode 15 (err -117) [ 153.513226][T10819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.516183][T11033] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.536885][T10819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.552409][ T9712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 153.648987][T11068] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1941'. [ 153.656256][T10819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.684045][T10819] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.703413][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.710527][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.725269][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.725300][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.795175][T11081] loop7: detected capacity change from 0 to 1024 [ 153.835815][T11081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.864519][ C0] ================================================================== [ 153.872591][ C0] BUG: KCSAN: data-race in serial8250_do_startup / serial8250_modem_status [ 153.881164][ C0] [ 153.883464][ C0] write to 0xffffffff8917bdf6 of 1 bytes by task 11096 on cpu 1: [ 153.891151][ C0] serial8250_do_startup+0x169b/0x1dd0 [ 153.896588][ C0] serial8250_startup+0x41/0x50 [ 153.901419][ C0] uart_startup+0x464/0xae0 [ 153.905899][ C0] uart_port_activate+0x67/0xc0 [ 153.910725][ C0] tty_port_open+0x196/0x270 [ 153.915294][ C0] uart_open+0x30/0x40 [ 153.919339][ C0] tty_open+0x3d4/0xaf0 [ 153.923472][ C0] chrdev_open+0x2eb/0x3a0 [ 153.927861][ C0] do_dentry_open+0x54b/0xa60 [ 153.932513][ C0] vfs_open+0x37/0x1e0 [ 153.936559][ C0] path_openat+0x1de9/0x23c0 [ 153.941130][ C0] do_filp_open+0x15d/0x280 [ 153.945610][ C0] do_sys_openat2+0xa6/0x150 [ 153.950177][ C0] __x64_sys_openat+0xf2/0x120 [ 153.954918][ C0] x64_sys_call+0x2b07/0x3000 [ 153.959572][ C0] do_syscall_64+0xc0/0x2a0 [ 153.964052][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.969918][ C0] [ 153.972218][ C0] read to 0xffffffff8917bdf6 of 1 bytes by interrupt on cpu 0: [ 153.979823][ C0] serial8250_modem_status+0x6a/0x1e0 [ 153.985173][ C0] serial8250_handle_irq+0x3d6/0x660 [ 153.990435][ C0] serial8250_default_handle_irq+0x8e/0x170 [ 153.996310][ C0] serial8250_interrupt+0x63/0x130 [ 154.001397][ C0] __handle_irq_event_percpu+0x8b/0x4c0 [ 154.006921][ C0] handle_irq_event+0x64/0xf0 [ 154.011576][ C0] handle_edge_irq+0x154/0x470 [ 154.016315][ C0] __common_interrupt+0x60/0xb0 [ 154.021144][ C0] common_interrupt+0x3e/0x90 [ 154.025798][ C0] asm_common_interrupt+0x26/0x40 [ 154.030820][ C0] [ 154.033116][ C0] value changed: 0x00 -> 0x05 [ 154.037759][ C0] [ 154.040059][ C0] Reported by Kernel Concurrency Sanitizer on: [ 154.046185][ C0] CPU: 0 UID: 0 PID: 11100 Comm: rm Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.056842][ C0] Tainted: [W]=WARN [ 154.060627][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.070665][ C0] ================================================================== [ 154.084733][T10819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.092772][T11081] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.105860][T11096] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11096 comm=syz.0.1945 [ 154.130104][T11081] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 154.199681][T10819] veth0_vlan: entered promiscuous mode [ 154.208957][T10819] veth1_vlan: entered promiscuous mode [ 154.226702][T10819] veth0_macvtap: entered promiscuous mode [ 154.234972][T10819] veth1_macvtap: entered promiscuous mode [ 154.247190][T10819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.259313][T10819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.272002][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.281544][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.290745][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.303486][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0