last executing test programs: 4m37.466850173s ago: executing program 32 (id=354): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x7, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (rerun: 64) 2m8.923106174s ago: executing program 33 (id=1641): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000ffff27bd7100fddbdf2504a1ffff", @ANYRES32=0x0, @ANYBLOB="880d0000231201003c0012800b00010062726964676500002c00028005002600010000000500290000000000060009000500000005002d"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) 1m50.736653874s ago: executing program 5 (id=1995): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) creat(&(0x7f0000000200)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=interleave:1-0B']) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 1m50.708564475s ago: executing program 5 (id=1997): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x48) 1m50.686189367s ago: executing program 5 (id=1999): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1m50.625064581s ago: executing program 5 (id=2000): io_setup(0x7, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) io_setup(0x1005, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) io_setup(0xb, &(0x7f0000000080)) unshare(0x28000600) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mount_setattr(r2, 0x0, 0x9800, &(0x7f0000000040)={0x100002, 0xf4, 0x0, {r2}}, 0x20) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) io_setup(0x9, &(0x7f0000000540)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x10, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x6, &(0x7f0000000f40)) 1m50.554686745s ago: executing program 5 (id=2009): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8943, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) tee(r1, r4, 0x8f5, 0x0) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) setns(r7, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m50.147260159s ago: executing program 34 (id=2022): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xd81c}, 0x14208, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffff9, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) getpid() socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f00000040c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x6000, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) tee(r1, r4, 0x8f5, 0x0) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) setns(r7, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m40.338748246s ago: executing program 7 (id=2260): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4d68f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xffff}]]}}}]}, 0x48}}, 0x4) 1m40.240802121s ago: executing program 7 (id=2262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312014000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1m40.237351692s ago: executing program 7 (id=2264): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = getpid() capget(&(0x7f0000000040)={0x0, r0}, &(0x7f0000000080)={0x4, 0x2, 0x9, 0x0, 0x3, 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x48) 1m40.224365473s ago: executing program 7 (id=2267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x4, 0xf}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53a, &(0x7f0000000e00)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f0000000080)='./file2\x00', &(0x7f0000000280)=""/71, 0x47) setxattr$incfs_metadata(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) 1m39.878407963s ago: executing program 7 (id=2276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312016000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1m37.607924376s ago: executing program 7 (id=2326): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}}, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r4 = socket$inet(0x2, 0x80001, 0x84) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x40, {"aa85fe3c57fc8893d18c978778ded281"}, 0x1, 0x200, 0x2}}}, 0xa0) (async) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3000896, &(0x7f0000000300)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c63727566742c696f636861727365743d63703836322c686964652c7362736563746f723d3078303030303030303030303030303030302c696f636861727365743d6d616363797269deb269632c636865636b3d7374726963742c6e6f726f636b2c63727566742c63727566742c63727566742c73657373696f6e3d3078303030303030303030303030303034622c00"], 0x1, 0xa2b, &(0x7f0000001280)="$eJzs3U9snOWdB/DvO7YTx6AkQJZlEZBJ2AQDXsd2lmQjDmxiTxKzdryyHYloD4Qlziob79KSVgJUiSBVPZW2Uqse2hvqqb0gcSmXilt7a089VKo49Y56Sk+u3pmxPf4zGds4dgifTzSe98/vfZ7f877vvE9m/Hqe8NWycGDF3MJC/bHF+cu/3IGMuY+dG/v8o48/LB8f3M6edOWl4tdJb5Jq0p3kiaRndGx6arJDQTeTq0k+S4oke9N4LlU65XA1xQ/z8PL8Zyl+Xtbb1p4NNo6OFvha2+3zDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7kfF6NjQ0HCxJ+OXLr9WbUiqa4yOTU8VWVhYu2Zxm4ZP66N+F592rDcpykd6exeH+n7i0PLqx5NUj+apxtxT9QHJ05v3Hnr84MuPdVcWt2+XzZeyd+PF3nr3vZtvzM/Pvd0+ZOH9Rhu2J7f7zIXapfGZqfHJsxdq1fGZqeqZU6eGTlw8P1M9Pz5Rm7kyM1ubrI5O187OTk1X+0efrw6fOXOyWhu8MnX50oWxwYna4sLT/zIyNHSq+urgf9bOTs9MXTrx6uDM6MXxiYnxSxfqMeXqMuZ0eSL+x/hsdbZ2drJavX5jfu5kuZOL5Zy6yp39gyzv9TJouFNLyqCRTkEjQyMjw8MjI8MfNEfPXlpw6qUzL50eGuoeWiVrIu7RScv9ZV/7w7yNV2/4ciqN/j//O5HxXMrlvJbquv9GM5bpTGWyzfqmxf7/2InaXett7f+bvXx3y+onyx9H80xztrdN/98ml537dyvv5r3czBuZz3zm8vauZ7Sz/y6klksZz0ymMp7JnK0vqTaXVHMmp3IqQ3k9F3M4M6nmfMYzkVpmciUzmU2tfkaNZjq1nM1spjKdavozmudTzXDO5ExOpppaBnMlU/Wz5ELGcrZeyvXcqO/3k0sZ5fbqHJeChu/SkKWgkbsEre7My3N9c/1/7UH9nyAbtv0XcdiihWb/v6dzaP/oTiQEAAAAbLt/+l32H3r0t39Oijxd/1z+/PhE7ZXdTgsAAADYRvXb9Z4qn3rKqad76+//h3Y7LQAAAGAbFfW/sSuS9OVwY2rxL6F8CAAAAAAPiPrv/59JcXh5gff/AAAA8IDp/B37HSOKgcWv/61eazxfa0Y05oq+8+MTtcHRqYmXh3O8/i0DSZ5eW1pXUvTU//zghRxpRB3pazz3LZdY1tlbRg0PvjycF3K02ZD+Z8unZ/vXiRxpRD7XiHyuNbIrKyJPlpEA8KA72tIfV7bY/7+QgUbEwJP1Lr/7yXX64CE9KwDcL5bG2Plbc0izdfr/ZsQz7fr/f73L+/8y4tFcP9y4pWAwb+atzOdaBtK84+DweqUujkbQuA1hoMOnAX3NWxb+cLqSgTWfB/QutbU1di4jGVj3E4GWcovFHE424rruzTEAgJ129K798Mb6/4EO7//73FIIAPeVpRHsNzHx/maC596+tdttBABW0ksDAAAAAAAAAAAAAAAAAAAAAAAAAADA9tvQF/j//niyL3PJFgYL2PJE72YybD/RlaSSHcq5OdGTZOd2VOtE2dodr7Q58Uo2vVXvl9tRv9rX3Pwvu9TkB3lily9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Igi6VpveSXZm2QoyYmdz+reub3bCWyX6p4tbVbcyZ28k/3bng8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNdc8/v/K2k8P9RYlO5KcizJ1ST/tds5bqc7u53AvVF0Dvm/RuDy9/9Xkp4sFOluHPYUPaNj01OTZVHF3nL95x99/GH56Fz22lEVygLKGlYMLtGsoWVJz8qtHqlv1Tc2d+vmt976RnXsXP3EPDd7fmJs8sL0vy8HPl58klTTeCxazPc7x37zo5bFzYESik/Klq5vdb3n6/WOra33H9dsWmlb7wbcmJ8bKWuarb02++3/v/FOy6pHcyR5tj/pX9nC/ykfbWo6snp/rlR8UXyv2J+f5mr9+Jd7o1goykN0oN6SfddvzM8NvvnW/LWlnN5fkdPBHE5yLendeE6H25+b9bOu0lPWOlQPKn8c6lDeXbWUOFypH/jbycr9+kj9lOnbVBuqHV5fHfZ7M6OT6x7pH3/zsRxvHumuDWd0vEON6yq+KP5UXMwf892W8T8q5fE/lnVfnesUUY9sOVNa1614eVWOLbd8pHXF66vLbPuq5B74fv47/7Z0/Cst1//msdqZ61FLjeu/LpLl18VGa/zFgTU9yrJ6j3RoVY/UvPq026aZ56FGVJs8/yEvNsrcxBXlxU499j16/f+s6M9fc9v4PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP2vSLrWW15JjiU5mORAOV9NFlbH3N5CfZW+Yitpbput5PzVU7RtaHEnd/JO9u90RgAAAAAAAADcG+fGPv/o4w/LR/338V3550pzTTXpTnKw+EnP6Nj01GSHgnqSq4u/0u/dXA5Xyx8PL89/Vs490WGj3b19AAC+0v4eAAD//5flaQE=") (async, rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) (async) r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) (async) sendto$packet(r0, &(0x7f0000000180)="ee7f743d77f1b55541bec27ec29838392008", 0x12, 0x50, &(0x7f0000000100)={0x11, 0xf8, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) 1m37.606827996s ago: executing program 35 (id=2326): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}}, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r4 = socket$inet(0x2, 0x80001, 0x84) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x0, 0x40, {"aa85fe3c57fc8893d18c978778ded281"}, 0x1, 0x200, 0x2}}}, 0xa0) (async) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3000896, &(0x7f0000000300)=ANY=[@ANYBLOB="6d61703d6e6f726d616c2c63727566742c696f636861727365743d63703836322c686964652c7362736563746f723d3078303030303030303030303030303030302c696f636861727365743d6d616363797269deb269632c636865636b3d7374726963742c6e6f726f636b2c63727566742c63727566742c63727566742c73657373696f6e3d3078303030303030303030303030303034622c00"], 0x1, 0xa2b, &(0x7f0000001280)="$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") (async, rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) (async) r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) (async) sendto$packet(r0, &(0x7f0000000180)="ee7f743d77f1b55541bec27ec29838392008", 0x12, 0x50, &(0x7f0000000100)={0x11, 0xf8, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) 59.880843616s ago: executing program 4 (id=3049): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f00000001c0)=0xe) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) bind$tipc(r1, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "df79fe91046731104942145125e6d066"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4000811) 59.350146798s ago: executing program 4 (id=3054): r0 = socket$kcm(0xa, 0x5, 0x106) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}}, 0x400c044) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x18, 0x0, 0x4) 59.192212137s ago: executing program 4 (id=3057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000100018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000110000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) 59.13955464s ago: executing program 4 (id=3059): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0, 0x2}, 0xd4, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3818744, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@sysvgroups}, {@jqfmt_vfsold}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0xc2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ffffffffffffbbbbbbbbbbbb88a800008100000008004500004000006000002f9078ac1e0001ac1414aa000086dd"], 0xb9) r4 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x100f8, 0x0, 0x601, 0x0, 0xdae}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) pwrite64(r5, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) 58.907876244s ago: executing program 4 (id=3062): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000df000000bfa30000000018000703000000feffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000002004000001ed000062030000000000f53e440000000000007a0a00fe00ffffffc3130000a1000000b500feff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c500000057bd81cb2af0b176275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e5b5b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb9134658fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9a958f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f94fefe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e924d6b1594af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e70300000000000000fee18a22da19fcdb4c2890cda1f96b952511e34cb14ea4a10a6f1dbaa69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde20300accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933f638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000003542591d17b5e8d9be772914cf4e3129e7929aa238bd99c3ddd895e33d8cf6c3d6cc883f0319aec94fb4cffde7a6d1fa1bcc03ead3912c2a68ca172adf3f9417207ea83d03a108d2ae15ee38c06dc98a0d1696b7c7fe142440776889154a93888972462439ae33b24c90e13c8f80d4e32716e96825d7bbdd97e4bae368d009b4611619a778f547fa1c92cc656a89728a6a1758b98fd27e1f5e1b446506d8947ca82bac7c2f00"/2663], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x48) 58.6317652s ago: executing program 4 (id=3067): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000004000048020000180070001007274000014000280080002400000000308000140000000111c0001800b00010065787468647200000c0002800800064000000001"], 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140), 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000001080)={{0x1d, @multicast2, 0x2, 0x0, 'fo\x00', 0x0, 0x5, 0x2000000}, {@broadcast, 0x2, 0x2000, 0x7ffffff, 0x0, 0x20100}}, 0x44) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) timer_create(0x2, 0x0, &(0x7f0000000600)=0x0) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c6572726f72733d636f6e74696e75652c63f4a1558cc185e3a76963742c646f733178666c6f7070792c646f74732c646d61736b3d30303030303030303030303030303030303030303030352c747a3d5554432c6e6f646f74732c6e6f646f74732c6e6f646f74732c00"], 0x0, 0x237, &(0x7f0000000480)="$eJzs3EFrM0UcB+CJaZs2paUnQU+DXvQStFc9KFKhGFCsKepB2NKthsSkZHNIPOXsyc/g0YNevAl+g34J9VaE0ouCYKTdtElaLfVt9y28fZ5L/zu/nd2Z7mYJE9jjN7/5snWQ1Q6S/u5ypRSeeyuM/vhrnAu5UXj1h49Pv95ZCnNijOvjSl6v7v64/lMlHG18dnyy+dvR80cvHP/90RfNLDaz2On2YxL3ut1+stdO434za9Vi/KCdJlkam50s7c3lB+3u4eEwJp39tephL82ymHSGsZUOY78b+71hTD5Pmp1Yq9XiWjVwF43v/hyPw8nZta6MwvSK81i4/o/bziefvvd2vb71YYzLIfw+GjQGjfxvnr+7Xd96LZ7bmPY6HQwa5cv89TyPM4cdDBqLoTrJN6/lZ/2Xwisv5/lZ9s779Sv5StgvfPYAAAAAAPBsqsVL19f3S5PN+fzX6vn6fr4x8/tAvn7/7c+T/gvhxYWnPBkAAADgX2XDr1pJu532ZotftkOYaSmHEKb7rIT5ne+/WAzttLcQ5qOLARd10kKKUsgXUaYtb4Q7HnlcCaH4wZcn/+2r0dJFy8pN908Rt8TceMrXBna3YvWyJWzcrlf5vmf6feEfq/9Z3PDQeKm45xEAAFCc6Zf+hx4JAAAAAAAAAAAAAAAAAAAAPF63eB/Yxavenvh1YtOzlR5qmgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/+mfAAAA///s9FOv") r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t||') timer_settime(r5, 0x0, &(0x7f000006b000)={{}, {0x77359400}}, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x6, 0x40041) timer_settime(r5, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000002c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x80fe, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 58.590650542s ago: executing program 36 (id=3067): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000004000048020000180070001007274000014000280080002400000000308000140000000111c0001800b00010065787468647200000c0002800800064000000001"], 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140), 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000001080)={{0x1d, @multicast2, 0x2, 0x0, 'fo\x00', 0x0, 0x5, 0x2000000}, {@broadcast, 0x2, 0x2000, 0x7ffffff, 0x0, 0x20100}}, 0x44) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) timer_create(0x2, 0x0, &(0x7f0000000600)=0x0) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c6572726f72733d636f6e74696e75652c63f4a1558cc185e3a76963742c646f733178666c6f7070792c646f74732c646d61736b3d30303030303030303030303030303030303030303030352c747a3d5554432c6e6f646f74732c6e6f646f74732c6e6f646f74732c00"], 0x0, 0x237, &(0x7f0000000480)="$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") r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t||') timer_settime(r5, 0x0, &(0x7f000006b000)={{}, {0x77359400}}, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x6, 0x40041) timer_settime(r5, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000002c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x80fe, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 27.249544806s ago: executing program 6 (id=3793): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018002e0000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x2e, &(0x7f0000002080)=""/4102}, 0x94) 27.211193539s ago: executing program 6 (id=3794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000380)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_PROTOINFO={0x0, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x0, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x0, 0x2, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x0, 0x2, 0x1, 0x0, 0x4}]}}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TUPLE_REPLY={0x0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x1}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @rand_addr=' \x01\x00'}, {0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x0, 0x1, 0x4e20}]}]}]}, 0xa4}}, 0x80) 27.165478402s ago: executing program 6 (id=3795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x4a}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 27.072257806s ago: executing program 6 (id=3796): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) setresuid(0xee00, 0xee00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) socket$inet_udp(0x2, 0x2, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x3a, &(0x7f0000000240)={0x3f, 0x1, 0x2}) setgid(0xee00) keyctl$session_to_parent(0x12) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0xc0) r3 = syz_open_procfs$namespace(0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000100)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000c00000005000000040000000000009300000000005f5f5f00"], 0x0, 0x29, 0x0, 0x1}, 0x28) fstat(r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) shmget(0x3, 0x1000, 0x54000000, &(0x7f0000170000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400007310000104fcfffffffbdbcce8b9dd3477fbf95fd332744b12df25000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028005001000400000000500110000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x14) 26.907224546s ago: executing program 6 (id=3799): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x48) 26.547899327s ago: executing program 6 (id=3807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000007cc38af8ff50000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xb, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9}, {0x6, 0x2}, {0x6}, {0x7, 0x1}]}, @volatile={0xf, 0x0, 0x0, 0x9, 0x5}, @ptr={0x10, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x2e, 0x0, 0x5f, 0x0, 0x30, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000a40)=""/4096, 0x67, 0x1000, 0x1, 0x8, 0x10000, @value=r2}, 0x28) 26.528534279s ago: executing program 37 (id=3807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000007cc38af8ff50000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xb, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9}, {0x6, 0x2}, {0x6}, {0x7, 0x1}]}, @volatile={0xf, 0x0, 0x0, 0x9, 0x5}, @ptr={0x10, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x2e, 0x0, 0x5f, 0x0, 0x30, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000a40)=""/4096, 0x67, 0x1000, 0x1, 0x8, 0x10000, @value=r2}, 0x28) 25.913720775s ago: executing program 0 (id=3822): getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, &(0x7f0000000180)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x9, 0x4) lseek(r0, 0x80000001, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xf, 0x200, &(0x7f0000003c40)="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"}) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r8, r8, 0x0, 0x1000000201005) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x60}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000440)={r10, 0x9, 0x5}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_enter(r3, 0x4e14, 0x913a, 0x41, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2b02, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) 25.038892456s ago: executing program 0 (id=3833): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) syslog(0x2, &(0x7f00000002c0)=""/123, 0x7b) 24.924661923s ago: executing program 0 (id=3834): r0 = socket(0x10, 0x80003, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xc8, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x0, 0x0, 0x10}, @hopopts={0x0, 0x11, '\x00', [@ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x75, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4793ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62091716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e"}, @ra, @generic, @padn]}]}}}}}}}, 0x0) socket$inet6(0xa, 0x3, 0x5) (async) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x1, 0x9, 0xfffe}, 0x20) epoll_create1(0x0) (async) r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x20040, 0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x30000008}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x103, 0xa, 0x0, 0xd6fc}, 0x20) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000100)="83c2b82ddfd36797fca3583a") syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodots}, {@fat=@sys_immutable}, {@nodots}, {@dots}, {@dots}, {@fat=@sys_immutable}, {}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x2cf, &(0x7f00000006c0)="$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") (async) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodots}, {@fat=@sys_immutable}, {@nodots}, {@dots}, {@dots}, {@fat=@sys_immutable}, {}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x1, 0x2cf, &(0x7f00000006c0)="$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") 24.724628245s ago: executing program 0 (id=3839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000ff0900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c000100626974776973650020000280080003400000000208000140000000140800024002000012040004800900010073797a30"], 0x104}}, 0x0) 24.720596375s ago: executing program 0 (id=3841): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) read$ptp(r1, &(0x7f0000000240)=""/133, 0x85) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x2, 0x7, 0x8, 0x4, 0x10, 0x4], 0x1, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0xf, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0xba48, 0xd, 0x100], [0xfff1, 0x5, 0x101, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x56}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x2, 0x7, 0x8, 0x4, 0x10, 0x4], 0x1, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0xf, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0xba48, 0xd, 0x100], [0xfff1, 0x5, 0x101, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x56}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) socket$inet(0x2, 0x2, 0x9) r5 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x5) (async) r6 = fsmount(r5, 0x1, 0x5) openat(r6, &(0x7f0000000040)='.\x00', 0x0, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x3, 0x98e0, 0x3ff, 0x40220, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff0}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0xcf, &(0x7f0000000240)=""/207, 0x40f00, 0x0, '\x00', r4, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0x6, 0xfffffffe}, 0x10, 0xffffffffffffffff, r0, 0x6, &(0x7f0000000440)=[r6, r7], &(0x7f0000000480)=[{0x3, 0x3, 0x0, 0x9}, {0x2, 0x3, 0x10, 0x9}, {0x1, 0x5, 0xa, 0x4}, {0x4, 0x1, 0x9, 0xb}, {0x1, 0x1, 0x1, 0x5}, {0x4, 0x5, 0x3, 0xc}]}, 0x94) 24.533038536s ago: executing program 0 (id=3845): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000180)="d2ff03076003008cb89e08f086dd0b725b8f2944d82cb9ee4bf78db827617af9034107d819aa0951190303e83efda101e20f0acd2637", 0x0, 0xd1b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$KDDELIO(r0, 0x4b35, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r5, 0x200204) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800004, 0x4) bind$inet6(r7, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r7, 0x7) listen(r6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x60, 0x30, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2000000, 0x0, 0x80}}}]}, {0x1}, {0xc, 0x7, {0x2000000}}, {0xc}}}]}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, r10}, 0xc) 9.462000143s ago: executing program 38 (id=3845): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000180)="d2ff03076003008cb89e08f086dd0b725b8f2944d82cb9ee4bf78db827617af9034107d819aa0951190303e83efda101e20f0acd2637", 0x0, 0xd1b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$KDDELIO(r0, 0x4b35, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r5, 0x200204) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800004, 0x4) bind$inet6(r7, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r7, 0x7) listen(r6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x60, 0x30, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2000000, 0x0, 0x80}}}]}, {0x1}, {0xc, 0x7, {0x2000000}}, {0xc}}}]}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, r10}, 0xc) 5.164722016s ago: executing program 3 (id=4218): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x48) 5.060661042s ago: executing program 3 (id=4219): r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x20000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="aa07000000000000631162000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 4.479024416s ago: executing program 3 (id=4228): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x6c9, &(0x7f0000000840)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc_tr={0x11, {@llc={0x4e, 0x2, "cd", "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"}}}}}, 0x0) 4.422952609s ago: executing program 3 (id=4230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000003000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 4.2486958s ago: executing program 3 (id=4234): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800fffffffffffffff300000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) 4.110488788s ago: executing program 3 (id=4237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5264}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000884}, 0x20008004) r1 = gettid() sched_getattr(r1, &(0x7f0000000140)={0x38}, 0x38, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0xe000200c}) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r4, &(0x7f0000000300)="8c24", 0x2, 0x5, &(0x7f0000000100)={0x2, 0x4e02, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) readv(r5, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0xa774) 1.3641443s ago: executing program 1 (id=4310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa10000000a000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 1.296012094s ago: executing program 1 (id=4312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800f3ffffffffffffff00000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) 1.264698206s ago: executing program 1 (id=4314): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) (async) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) (async) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$VT_RELDISP(r2, 0x5605) (async) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) (async) fchmod(r2, 0x40) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x800, 0x206, 0xc, 0xfffffff9, 0x4, 0x1, 0xffffff6a, r4}, &(0x7f00000001c0)=0x20) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000200)={'veth0_virt_wifi\x00', 0x2}) (async) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000240)) (async) ioctl$KDADDIO(r2, 0x4b34, 0x5) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x1ff) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000300)={0x3, 0x3, 0x2, 0x4}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000340)=0x1400000, 0x4) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000380)={0xa127, 0x6, 0x1}) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f00000003c0)) r7 = io_uring_setup(0x3be4, &(0x7f0000000400)={0x0, 0x9c5c, 0x400, 0x1, 0x2bc}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r7, 0x10000000) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000480)) (async) getsockopt$inet_buf(r3, 0x0, 0x9, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0)=0x1000) (async) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001500), 0xc4083, 0x0) getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000001540), &(0x7f0000001580)=0x4) (async) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000c, 0x8010, r8, 0x8000000) syz_io_uring_submit(r9, 0x0, &(0x7f00000016c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2b, 0x0, r8, 0x0, r6, 0x2, 0x0, 0x1}) 1.168696641s ago: executing program 1 (id=4317): setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x1, @broadcast, 0x4e24, 0xfffffffe, 'ovf\x00', 0x0, 0xc82, 0x2d}, {@loopback, 0x5, 0x1, 0x11fe, 0x0, 0xa3}}, 0x44) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x20, &(0x7f0000000300)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty, {[@end]}}, {0x0, 0x2, 0x10, 0x0, @opaque="e28897016839725ad0015f4c1aebad15abe63119e017441c684e5d8d95bd675566d2406e10a65d7ad9358034e47a66f67272f9a350d182cec88e810a43c69a49431801255dda1c86d549e513de24fb27481cfed539809e4c67a5eae21ceaf5eb5187643217651efbdec0fde59fa04ece66bffa36f200e0578be3a22f57823c64698fb1c0acac162e42d7de16a114c01f91a88f77b9e499fe95c562dd8e8f3cc6b5797a90af44e845c2ff4ab46330f78e"}}}}}, 0x0) 1.156629452s ago: executing program 1 (id=4319): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x100003fff8001}, 0x1820, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @void}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x61}}, &(0x7f0000000480)='GPL\x00'}, 0x80) syz_emit_ethernet(0xd81, &(0x7f0000000840)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc_tr={0x11, {@llc={0x4e, 0x2, "cd", "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"}}}}}, 0x0) 1.082089706s ago: executing program 2 (id=4321): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000840)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc_tr={0x11, {@llc={0x4e, 0x2, "cd"}}}}}, 0x0) (fail_nth: 2) 848.88983ms ago: executing program 2 (id=4323): syz_read_part_table(0x104f, &(0x7f0000000000)="$eJzsz72NwmAQhsH38/lPOp3kEo6YJjA9uB/ohAQCisRINm4BOZgJVqt9og07Mnfbdl1mec0fSX639pOckq5NLv+H2zRWSZ+UPsk45H4+ps5yWo1tytB0qfOXpHmUVGuoMz2//CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7NI7AAD//7aiEHk=") (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) (async) gettimeofday(&(0x7f0000000000), &(0x7f0000000040)) 788.721703ms ago: executing program 9 (id=4325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800001800000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) 788.334053ms ago: executing program 8 (id=4326): r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000001c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(r2, 0x2df5, 0x9566, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="290000001800190f00003fffffffda060200000000e80001dd0000040d000600ea1100200005000000", 0x29}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 786.896573ms ago: executing program 1 (id=4327): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000c80)={0x5, 0x80, 0x5, 0x5, 0x1, 0x5, 0x0, 0x1, 0x1524, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x8, 0x4}, 0x6020, 0xc, 0x2, 0x4, 0x5da3, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, 0x0, 0x842cc0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 783.992824ms ago: executing program 9 (id=4328): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000750fd382000000000000000000000029000000feffffff0000000000000000fffff9000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff"]}, 0x108) 725.868397ms ago: executing program 9 (id=4329): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x3c, r1, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008890}, 0xc084) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd25, 0x4, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xfffffdfc}]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000840)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc_tr={0x11, {@llc={0x4e, 0x2, "cd"}}}}}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000400)) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = fcntl$dupfd(r8, 0x0, r9) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, 0x0, &(0x7f0000000100)) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r11, 0x20, 0x0, 0x8000) ioctl$HIDIOCGRDESC(r11, 0x90044802, &(0x7f0000000180)={0x25a, "b21f755346580451faa6fcfd0e0ec062e0e158f81184c899de2aed1960a5c613ce821ec20368d3c4d94297a38d57edd53f06d3bf071f738a5f712aaa52b5a32fe80a7000b4bbc991c537725332832101f3509268510c8de75a991527f0b9b660e6877866143fc46263711fd37c229b989d8282fcff847212484e0419014c502cc90dc27fcf98c687f7832925fc5eaa13952c86ffb7893a9c523332af86da39c4540aacbd4c1d5ecfd10c052d7794944476cf53e893e8191d3848835aafcd15ab7003a0e6fba825e2430247fbd95a66d3c1bff82021d11630a0eece2e8864945dabf567de40d5951ee8eb47bb3d97614530b7a3b9d767e41b85d6f9a4ebdc8eeb40aac7a605723172420f21526f1a6d0d8a0a439438f494f119db251020b6ae7cd98af3e3dfc83a916bc87188e105c6e799645771289928b276d4e1b1137fdb19079197a33b46f2b9f950ee5d52e558c3c0668cdebaa8b7688f270c5e2873f47bb859ea123a5a9f96d1c9d5c976f61e03c02884ebf9c40fa5f1f664588424bc72229bddd6d061c23ff062129aac1b4689effb39acd73655a23b0be604d00a6712a5f7539861b43d4a2cc9d45a5eefbb5cefa635d06b7e280e37d7ecc7c449aedf3dcb5986f50d9bc0594df7f36fa06af05520e6f75657da1421269cd752f7dbdf017eaba217868b765d40014c1c56d3a715e953d5299792b0788ca9a8c3f77701cf26a9f4638c164f99febdc5087f8082d98de26d14e555b4c7037d6a92877948c42ddb343d0640d6c4dbafb9ca2cfc41d524119eb03e4a53a7affdedd3fb36c0e17f3ea4716cd8926345da320a8b1da25deb618ddb3d4f1e8397"}) 583.187535ms ago: executing program 8 (id=4330): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xffffffffffffffa3, 0x2}, 0x80, 0x7, 0x0, 0x1, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0904000000000000000002000001140000001100010000000000000000000000000a7cc200d957965a1855"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x20000851) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file2\x00', 0x148800, &(0x7f0000000180)={[], [{@fowner_lt={'fowner<', 0xee00}}]}, 0x1, 0x578, &(0x7f0000001080)="$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") 520.244849ms ago: executing program 8 (id=4331): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x6025, 0x4005, 0x4, 0x0, 0x1, 0x6, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0, 0xff81}}], 0x11, 0x10002, 0x0) 496.536361ms ago: executing program 2 (id=4332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 436.717274ms ago: executing program 8 (id=4333): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x48) 436.447004ms ago: executing program 2 (id=4334): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000840)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc_tr={0x11, {@llc={0x4e, 0x2, "cd"}}}}}, 0x0) (fail_nth: 3) 435.939674ms ago: executing program 9 (id=4335): mlockall(0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002300)={0x7, {"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", 0x10af}}, 0x1006) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 195.146369ms ago: executing program 8 (id=4336): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000840)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc_tr={0x11, {@llc={0x4e, 0x2, "cd"}}}}}, 0x0) 177.721019ms ago: executing program 9 (id=4337): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa10000003f000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 128.010622ms ago: executing program 8 (id=4338): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x4, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x6c140, 0x10) finit_module(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}]}, 0x64}, 0x1, 0x0, 0x0, 0x200000c1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x14c1e, &(0x7f0000000200)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') uname(&(0x7f0000000340)=""/191) listxattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000d80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xe8, 0x0, 0x400, 0x1ab0, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24004000}, 0x4044000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) uname(&(0x7f0000000400)=""/94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000140)={0xa, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x65, 0x10000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x2000000000, 0x33ffffe, 0x4, 0x2, 0x0, 0x0, 0x0, 0xc12, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0xa4) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x511082, 0x100) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) 127.862832ms ago: executing program 2 (id=4339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800002000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) 547.97µs ago: executing program 9 (id=4340): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x100003fff8001}, 0x1820, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x1, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net\x00') lseek(r4, 0x1, 0x2) getdents64(r4, 0xffffffffffffffff, 0x43) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x38, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008064) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x40800) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x38, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8844}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r10 = inotify_init() inotify_add_watch(r10, &(0x7f0000000200)='./file0\x00', 0x90) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r0, 0x25, 0x0, @void}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000040)={'ip6tnl0\x00', 0x600}) syz_emit_ethernet(0xd81, &(0x7f0000000840)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc_tr={0x11, {@llc={0x4e, 0x2, "cd", "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"}}}}}, 0x0) 0s ago: executing program 2 (id=4341): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1ff, 0x80000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = io_uring_setup(0x3344, &(0x7f0000000080)={0x0, 0xa147, 0x20000, 0x0, 0x5c}) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f00000014c0)={0x5, 0x1, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000140)=""/222, 0xde}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/24, 0x18}], &(0x7f0000001480)=[0xd7, 0x9, 0xfffffffffffffffc]}, 0x20) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) kernel console output (not intermixed with test programs): cache_node_noprof+0x69/0x4a0 [ 294.819019][T15060] ? __get_vm_area_node+0x106/0x1d0 [ 294.819052][T15060] __get_vm_area_node+0x106/0x1d0 [ 294.819085][T15060] __vmalloc_node_range_noprof+0x291/0x12b0 [ 294.819133][T15060] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 294.819190][T15060] ? selinux_file_open+0x2e6/0x330 [ 294.819226][T15060] ? __rcu_read_unlock+0x4e/0x70 [ 294.819261][T15060] ? avc_has_perm_noaudit+0xab/0x130 [ 294.819304][T15060] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 294.819408][T15060] __vmalloc_noprof+0xa4/0xf0 [ 294.819466][T15060] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 294.819547][T15060] bpf_prog_alloc_no_stats+0x47/0x380 [ 294.819575][T15060] ? bpf_prog_alloc+0x2a/0x150 [ 294.819683][T15060] bpf_prog_alloc+0x3c/0x150 [ 294.819713][T15060] bpf_prog_load+0x506/0x1140 [ 294.819757][T15060] ? security_bpf+0x2b/0x90 [ 294.819784][T15060] __sys_bpf+0x469/0x7b0 [ 294.819877][T15060] __x64_sys_bpf+0x41/0x50 [ 294.819904][T15060] x64_sys_call+0x28e1/0x3000 [ 294.820010][T15060] do_syscall_64+0xc0/0x2a0 [ 294.820118][T15060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.820145][T15060] RIP: 0033:0x7f23a4deaf79 [ 294.820163][T15060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.820182][T15060] RSP: 002b:00007f23a3847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.820280][T15060] RAX: ffffffffffffffda RBX: 00007f23a5065fa0 RCX: 00007f23a4deaf79 [ 294.820299][T15060] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 294.820312][T15060] RBP: 00007f23a3847090 R08: 0000000000000000 R09: 0000000000000000 [ 294.820325][T15060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.820338][T15060] R13: 00007f23a5066038 R14: 00007f23a5065fa0 R15: 00007fff6a01a808 [ 294.820404][T15060] [ 295.153056][T15068] loop9: detected capacity change from 0 to 128 [ 295.204995][T15068] EXT4-fs: Ignoring removed nobh option [ 295.242113][T15065] syz_tun: entered promiscuous mode [ 295.243624][T15068] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.310413][T15068] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 295.347026][T15076] netlink: 'syz.0.3447': attribute type 12 has an invalid length. [ 295.394111][T13742] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.516692][ T28] audit: type=1400 audit(2000000134.430:10814): avc: denied { read append } for pid=15088 comm="syz.6.3455" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 295.540567][ T28] audit: type=1400 audit(2000000134.430:10815): avc: denied { open } for pid=15088 comm="syz.6.3455" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 295.570052][T15093] loop9: detected capacity change from 0 to 1024 [ 295.579455][ T28] audit: type=1400 audit(2000000134.500:10816): avc: denied { ioctl } for pid=15088 comm="syz.6.3455" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 295.605846][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3455'. [ 295.615854][T15089] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 295.641872][T15093] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.681090][T15089] loop6: detected capacity change from 0 to 512 [ 295.721659][T15089] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 295.737042][T13742] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.744798][T15089] System zones: 1-12 [ 295.765233][T15089] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.3455: Directory hole found for htree index block 0 [ 295.777774][T15089] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 295.817895][T15089] EXT4-fs (loop6): Remounting filesystem read-only [ 295.859331][ T28] audit: type=1400 audit(2000000134.770:10817): avc: denied { map } for pid=15099 comm="syz.9.3459" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 295.893717][T15089] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 295.902276][T15101] loop0: detected capacity change from 0 to 1024 [ 295.904799][T15089] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 295.946938][T15089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.964207][T15101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.027905][T15110] FAULT_INJECTION: forcing a failure. [ 296.027905][T15110] name failslab, interval 1, probability 0, space 0, times 0 [ 296.040673][T15110] CPU: 1 UID: 0 PID: 15110 Comm: syz.9.3463 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 296.040711][T15110] Tainted: [W]=WARN [ 296.040719][T15110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 296.040735][T15110] Call Trace: [ 296.040743][T15110] [ 296.040830][T15110] __dump_stack+0x1d/0x30 [ 296.040897][T15110] dump_stack_lvl+0x95/0xd0 [ 296.040925][T15110] dump_stack+0x15/0x1b [ 296.040991][T15110] should_fail_ex+0x263/0x280 [ 296.041078][T15110] should_failslab+0x8c/0xb0 [ 296.041101][T15110] __kmalloc_node_noprof+0xbd/0x590 [ 296.041151][T15110] ? __vmalloc_node_range_noprof+0x428/0x12b0 [ 296.041189][T15110] __vmalloc_node_range_noprof+0x428/0x12b0 [ 296.041265][T15110] ? selinux_file_open+0x2e6/0x330 [ 296.041302][T15110] ? __rcu_read_unlock+0x4e/0x70 [ 296.041344][T15110] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 296.041376][T15110] __vmalloc_noprof+0xa4/0xf0 [ 296.041454][T15110] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 296.041487][T15110] bpf_prog_alloc_no_stats+0x47/0x380 [ 296.041572][T15110] ? bpf_prog_alloc+0x2a/0x150 [ 296.041666][T15110] bpf_prog_alloc+0x3c/0x150 [ 296.041692][T15110] bpf_prog_load+0x506/0x1140 [ 296.041798][T15110] ? security_bpf+0x2b/0x90 [ 296.041899][T15110] __sys_bpf+0x469/0x7b0 [ 296.042012][T15110] __x64_sys_bpf+0x41/0x50 [ 296.042033][T15110] x64_sys_call+0x28e1/0x3000 [ 296.042066][T15110] do_syscall_64+0xc0/0x2a0 [ 296.042112][T15110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.042204][T15110] RIP: 0033:0x7f23a4deaf79 [ 296.042220][T15110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.042240][T15110] RSP: 002b:00007f23a3847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.042296][T15110] RAX: ffffffffffffffda RBX: 00007f23a5065fa0 RCX: 00007f23a4deaf79 [ 296.042355][T15110] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 296.042369][T15110] RBP: 00007f23a3847090 R08: 0000000000000000 R09: 0000000000000000 [ 296.042382][T15110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.042398][T15110] R13: 00007f23a5066038 R14: 00007f23a5065fa0 R15: 00007fff6a01a808 [ 296.042424][T15110] [ 296.294237][ T8854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.327297][T13508] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.398755][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3468'. [ 296.415320][T15122] FAULT_INJECTION: forcing a failure. [ 296.415320][T15122] name failslab, interval 1, probability 0, space 0, times 0 [ 296.428044][T15122] CPU: 0 UID: 0 PID: 15122 Comm: syz.0.3464 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 296.428079][T15122] Tainted: [W]=WARN [ 296.428088][T15122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 296.428105][T15122] Call Trace: [ 296.428113][T15122] [ 296.428123][T15122] __dump_stack+0x1d/0x30 [ 296.428232][T15122] dump_stack_lvl+0x95/0xd0 [ 296.428259][T15122] dump_stack+0x15/0x1b [ 296.428283][T15122] should_fail_ex+0x263/0x280 [ 296.428389][T15122] should_failslab+0x8c/0xb0 [ 296.428415][T15122] ? xt_request_find_match+0x80/0xd0 [ 296.428475][T15122] __kmalloc_cache_noprof+0x64/0x4a0 [ 296.428504][T15122] ? __request_module+0x1c4/0x3d0 [ 296.428541][T15122] ? xt_request_find_match+0x80/0xd0 [ 296.428568][T15122] __request_module+0x1c4/0x3d0 [ 296.428618][T15122] ? mutex_unlock+0x4e/0x90 [ 296.428723][T15122] xt_request_find_match+0x80/0xd0 [ 296.428758][T15122] translate_table+0xa3a/0x10d0 [ 296.428800][T15122] do_ipt_set_ctl+0x6d0/0x8e0 [ 296.428835][T15122] nf_setsockopt+0x199/0x1b0 [ 296.428913][T15122] ip_setsockopt+0x102/0x110 [ 296.428939][T15122] udp_setsockopt+0x99/0xb0 [ 296.428963][T15122] sock_common_setsockopt+0x69/0x80 [ 296.428990][T15122] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 296.429059][T15122] __sys_setsockopt+0x184/0x200 [ 296.429093][T15122] __x64_sys_setsockopt+0x64/0x80 [ 296.429142][T15122] x64_sys_call+0x21d5/0x3000 [ 296.429170][T15122] do_syscall_64+0xc0/0x2a0 [ 296.429254][T15122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.429371][T15122] RIP: 0033:0x7f3ce435af79 [ 296.429416][T15122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.429441][T15122] RSP: 002b:00007f3ce2daf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 296.429468][T15122] RAX: ffffffffffffffda RBX: 00007f3ce45d5fa0 RCX: 00007f3ce435af79 [ 296.429530][T15122] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 296.429547][T15122] RBP: 00007f3ce2daf090 R08: 0000000000000338 R09: 0000000000000000 [ 296.429564][T15122] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.429581][T15122] R13: 00007f3ce45d6038 R14: 00007f3ce45d5fa0 R15: 00007ffd53153918 [ 296.429608][T15122] [ 296.793848][ T28] audit: type=1400 audit(2000000135.700:10818): avc: denied { map } for pid=15123 comm="syz.0.3471" path="socket:[49317]" dev="sockfs" ino=49317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.817436][ T28] audit: type=1400 audit(2000000135.700:10819): avc: denied { accept } for pid=15123 comm="syz.0.3471" path="socket:[49317]" dev="sockfs" ino=49317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.866099][T15137] netlink: get zone limit has 4 unknown bytes [ 296.871579][T15139] 9p: p9: multiple sources not supported [ 296.890073][T15139] loop6: detected capacity change from 0 to 512 [ 296.904109][ T28] audit: type=1400 audit(2000000135.820:10820): avc: denied { write } for pid=15136 comm="syz.8.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 296.955471][T15143] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3478'. [ 296.972146][T15139] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 297.007488][T15139] EXT4-fs warning (device loop6): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 297.074195][T15139] EXT4-fs (loop6): mount failed [ 297.320669][ T28] audit: type=1400 audit(2000000136.230:10821): avc: denied { ioctl } for pid=15166 comm="syz.9.3487" path="socket:[49440]" dev="sockfs" ino=49440 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 297.416615][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3488'. [ 297.577043][T15179] 9p: Bad value for 'wfdno' [ 297.598768][T15181] loop9: detected capacity change from 0 to 128 [ 297.614979][T15181] EXT4-fs: Ignoring removed nobh option [ 297.655089][T15181] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.677607][T15181] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.723038][T13742] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.940371][T15198] loop1: detected capacity change from 0 to 512 [ 297.968500][T15198] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.3501: iget: bad i_size value: 38620345925642 [ 297.981216][T15198] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 298.052259][T15198] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3501: couldn't read orphan inode 15 (err -117) [ 298.073412][T15198] loop1: lost filesystem error report for type 5 error -117 [ 298.092678][T15214] FAULT_INJECTION: forcing a failure. [ 298.092678][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 298.112986][T15214] CPU: 1 UID: 0 PID: 15214 Comm: syz.0.3506 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.113028][T15214] Tainted: [W]=WARN [ 298.113038][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 298.113054][T15214] Call Trace: [ 298.113063][T15214] [ 298.113072][T15214] __dump_stack+0x1d/0x30 [ 298.113144][T15214] dump_stack_lvl+0x95/0xd0 [ 298.113172][T15214] dump_stack+0x15/0x1b [ 298.113198][T15214] should_fail_ex+0x263/0x280 [ 298.113263][T15214] should_failslab+0x8c/0xb0 [ 298.113284][T15214] ? __pfx_free_modprobe_argv+0x10/0x10 [ 298.113319][T15214] __kmalloc_cache_noprof+0x64/0x4a0 [ 298.113350][T15214] ? call_usermodehelper_setup+0x72/0x190 [ 298.113386][T15214] ? __pfx_free_modprobe_argv+0x10/0x10 [ 298.113508][T15214] call_usermodehelper_setup+0x72/0x190 [ 298.113556][T15214] __request_module+0x264/0x3d0 [ 298.113593][T15214] ? mutex_unlock+0x4e/0x90 [ 298.113623][T15214] xt_request_find_match+0x80/0xd0 [ 298.113653][T15214] translate_table+0xa3a/0x10d0 [ 298.113747][T15214] do_ipt_set_ctl+0x6d0/0x8e0 [ 298.113813][T15210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3504'. [ 298.113789][T15214] nf_setsockopt+0x199/0x1b0 [ 298.113857][T15214] ip_setsockopt+0x102/0x110 [ 298.113947][T15214] udp_setsockopt+0x99/0xb0 [ 298.114063][T15214] sock_common_setsockopt+0x69/0x80 [ 298.114168][T15214] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 298.114238][T15214] __sys_setsockopt+0x184/0x200 [ 298.114392][T15214] __x64_sys_setsockopt+0x64/0x80 [ 298.114597][T15214] x64_sys_call+0x21d5/0x3000 [ 298.114678][T15214] do_syscall_64+0xc0/0x2a0 [ 298.114770][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.114843][T15214] RIP: 0033:0x7f3ce435af79 [ 298.114976][T15214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.115036][T15214] RSP: 002b:00007f3ce2daf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.115098][T15214] RAX: ffffffffffffffda RBX: 00007f3ce45d5fa0 RCX: 00007f3ce435af79 [ 298.115140][T15214] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 298.115201][T15214] RBP: 00007f3ce2daf090 R08: 0000000000000338 R09: 0000000000000000 [ 298.115264][T15214] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.115372][T15214] R13: 00007f3ce45d6038 R14: 00007f3ce45d5fa0 R15: 00007ffd53153918 [ 298.115455][T15214] [ 298.373162][T15198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.398258][T15220] netlink: 4268 bytes leftover after parsing attributes in process `syz.8.3509'. [ 298.446469][T15221] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3501: bg 0: block 5: invalid block bitmap [ 298.459290][T15221] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1416 with error 28 [ 298.471886][T15221] EXT4-fs (loop1): This should not happen!! Data will be lost [ 298.471886][T15221] [ 298.481584][T15221] EXT4-fs (loop1): Total free blocks count 0 [ 298.487811][T15221] EXT4-fs (loop1): Free/Dirty block details [ 298.493734][T15221] EXT4-fs (loop1): free_blocks=0 [ 298.498745][T15221] EXT4-fs (loop1): dirty_blocks=1416 [ 298.504048][T15221] EXT4-fs (loop1): Block reservation details [ 298.510252][T15221] EXT4-fs (loop1): i_reserved_data_blocks=1416 [ 298.516779][T15222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3501'. [ 298.566588][T15225] loop8: detected capacity change from 0 to 512 [ 298.580907][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.593724][T15225] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 298.611970][T15225] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3510: bg 0: block 104: invalid block bitmap [ 298.624648][T15225] loop8: lost filesystem error report for type 5 error -117 [ 298.635521][T15227] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3511'. [ 298.661892][T15225] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 298.670751][T15225] loop8: lost filesystem error report for type 5 error -117 [ 298.701870][T15225] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3510: invalid indirect mapped block 1 (level 1) [ 298.722585][T15225] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 298.722711][T15190] SELinux: security_context_str_to_sid () failed with errno=-22 [ 298.751910][ T28] audit: type=1326 audit(2000000137.660:10822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15226 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082dbdaf79 code=0x7ffc0000 [ 298.751929][T15225] EXT4-fs (loop8): 1 truncate cleaned up [ 298.802244][T15227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15227 comm=syz.1.3511 [ 298.841049][ T28] audit: type=1326 audit(2000000137.690:10823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15226 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f082dbdaf79 code=0x7ffc0000 [ 298.864837][ T28] audit: type=1326 audit(2000000137.690:10824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15226 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082dbdaf79 code=0x7ffc0000 [ 298.886907][T15225] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.888566][ T28] audit: type=1326 audit(2000000137.690:10825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15226 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082dbdaf79 code=0x7ffc0000 [ 298.924147][ T28] audit: type=1326 audit(2000000137.690:10826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15226 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f082dbdaf79 code=0x7ffc0000 [ 299.075158][T12005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.094180][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3522'. [ 299.169523][T15258] FAULT_INJECTION: forcing a failure. [ 299.169523][T15258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.182756][T15258] CPU: 0 UID: 0 PID: 15258 Comm: syz.6.3523 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 299.182796][T15258] Tainted: [W]=WARN [ 299.182806][T15258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 299.182888][T15258] Call Trace: [ 299.182899][T15258] [ 299.182909][T15258] __dump_stack+0x1d/0x30 [ 299.182942][T15258] dump_stack_lvl+0x95/0xd0 [ 299.182972][T15258] dump_stack+0x15/0x1b [ 299.183071][T15258] should_fail_ex+0x263/0x280 [ 299.183156][T15258] should_fail+0xb/0x20 [ 299.183195][T15258] should_fail_usercopy+0x1a/0x20 [ 299.183285][T15258] _copy_from_user+0x1c/0xb0 [ 299.183368][T15258] kstrtouint_from_user+0x69/0xf0 [ 299.183410][T15258] proc_fail_nth_write+0x50/0x160 [ 299.183442][T15258] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 299.183553][T15258] vfs_write+0x269/0x9f0 [ 299.183691][T15258] ? __rcu_read_unlock+0x4e/0x70 [ 299.183726][T15258] ? __fget_files+0x184/0x1c0 [ 299.183824][T15258] ? mutex_lock+0x57/0x90 [ 299.183853][T15258] ksys_write+0xdc/0x1a0 [ 299.183896][T15258] __x64_sys_write+0x40/0x50 [ 299.183932][T15258] x64_sys_call+0x2847/0x3000 [ 299.184109][T15258] do_syscall_64+0xc0/0x2a0 [ 299.184175][T15258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.184236][T15258] RIP: 0033:0x7f0d18bbb84e [ 299.184252][T15258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 299.184276][T15258] RSP: 002b:00007f0d1764efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.184308][T15258] RAX: ffffffffffffffda RBX: 00007f0d1764f6c0 RCX: 00007f0d18bbb84e [ 299.184402][T15258] RDX: 0000000000000001 RSI: 00007f0d1764f0a0 RDI: 0000000000000004 [ 299.184419][T15258] RBP: 00007f0d1764f090 R08: 0000000000000000 R09: 0000000000000000 [ 299.184487][T15258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.184501][T15258] R13: 00007f0d18e76038 R14: 00007f0d18e75fa0 R15: 00007fffa4d1b418 [ 299.184526][T15258] [ 299.430053][T15250] set_capacity_and_notify: 1 callbacks suppressed [ 299.430448][T15250] loop9: detected capacity change from 0 to 1024 [ 299.468627][T15271] FAULT_INJECTION: forcing a failure. [ 299.468627][T15271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.481824][T15271] CPU: 1 UID: 0 PID: 15271 Comm: syz.1.3526 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 299.481915][T15271] Tainted: [W]=WARN [ 299.481924][T15271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 299.481992][T15271] Call Trace: [ 299.482000][T15271] [ 299.482033][T15271] __dump_stack+0x1d/0x30 [ 299.482070][T15271] dump_stack_lvl+0x95/0xd0 [ 299.482146][T15271] dump_stack+0x15/0x1b [ 299.482169][T15271] should_fail_ex+0x263/0x280 [ 299.482206][T15271] should_fail+0xb/0x20 [ 299.482231][T15271] should_fail_usercopy+0x1a/0x20 [ 299.482316][T15271] _copy_from_user+0x1c/0xb0 [ 299.482339][T15271] copy_from_bpfptr+0x5c/0x90 [ 299.482372][T15271] bpf_prog_load+0x73a/0x1140 [ 299.482497][T15271] ? security_bpf+0x2b/0x90 [ 299.482531][T15271] __sys_bpf+0x469/0x7b0 [ 299.482571][T15271] __x64_sys_bpf+0x41/0x50 [ 299.482599][T15271] x64_sys_call+0x28e1/0x3000 [ 299.482727][T15271] do_syscall_64+0xc0/0x2a0 [ 299.482810][T15271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.482840][T15271] RIP: 0033:0x7f082dbdaf79 [ 299.482861][T15271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.482932][T15271] RSP: 002b:00007f082c637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.482953][T15271] RAX: ffffffffffffffda RBX: 00007f082de55fa0 RCX: 00007f082dbdaf79 [ 299.482986][T15271] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 299.483003][T15271] RBP: 00007f082c637090 R08: 0000000000000000 R09: 0000000000000000 [ 299.483020][T15271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.483037][T15271] R13: 00007f082de56038 R14: 00007f082de55fa0 R15: 00007fffecf49e68 [ 299.483121][T15271] [ 299.682818][T15250] ext4: Bad value for 'journal' [ 299.755310][T15280] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3529'. [ 299.764349][T15280] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3529'. [ 299.780750][T15282] loop0: detected capacity change from 0 to 1024 [ 299.790757][T15283] loop6: detected capacity change from 0 to 512 [ 299.825685][T15283] EXT4-fs: Ignoring removed i_version option [ 299.828801][T15282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.859811][T15280] loop9: detected capacity change from 0 to 512 [ 299.896241][T15283] ext4: Unknown parameter 'noacl' [ 299.912155][T13508] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.933506][T15280] EXT4-fs: inline encryption not supported [ 299.961824][T15280] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 300.006649][T15280] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3529'. [ 300.032870][T15280] team0: Device gtp0 is of different type [ 300.076888][T15284] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3529'. [ 300.251501][T15294] raw_sendmsg: syz.1.3533 forgot to set AF_INET. Fix it! [ 300.349948][T15317] FAULT_INJECTION: forcing a failure. [ 300.349948][T15317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.363148][T15317] CPU: 0 UID: 0 PID: 15317 Comm: syz.6.3541 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.363183][T15317] Tainted: [W]=WARN [ 300.363190][T15317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 300.363203][T15317] Call Trace: [ 300.363209][T15317] [ 300.363253][T15317] __dump_stack+0x1d/0x30 [ 300.363288][T15317] dump_stack_lvl+0x95/0xd0 [ 300.363315][T15317] dump_stack+0x15/0x1b [ 300.363338][T15317] should_fail_ex+0x263/0x280 [ 300.363375][T15317] should_fail+0xb/0x20 [ 300.363439][T15317] should_fail_usercopy+0x1a/0x20 [ 300.363475][T15317] _copy_from_user+0x1c/0xb0 [ 300.363494][T15317] copy_from_bpfptr+0x5c/0x90 [ 300.363582][T15317] bpf_prog_load+0x73a/0x1140 [ 300.363617][T15317] ? security_bpf+0x2b/0x90 [ 300.363648][T15317] __sys_bpf+0x469/0x7b0 [ 300.363681][T15317] __x64_sys_bpf+0x41/0x50 [ 300.363702][T15317] x64_sys_call+0x28e1/0x3000 [ 300.363787][T15317] do_syscall_64+0xc0/0x2a0 [ 300.363874][T15317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.363903][T15317] RIP: 0033:0x7f0d18bfaf79 [ 300.363928][T15317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.363953][T15317] RSP: 002b:00007f0d1764f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.363983][T15317] RAX: ffffffffffffffda RBX: 00007f0d18e75fa0 RCX: 00007f0d18bfaf79 [ 300.363997][T15317] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 300.364010][T15317] RBP: 00007f0d1764f090 R08: 0000000000000000 R09: 0000000000000000 [ 300.364075][T15317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.364092][T15317] R13: 00007f0d18e76038 R14: 00007f0d18e75fa0 R15: 00007fffa4d1b418 [ 300.364119][T15317] [ 300.577626][T15320] loop6: detected capacity change from 0 to 1024 [ 300.612062][T15320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.629352][T15323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3543'. [ 300.638462][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3543'. [ 300.663594][ T8854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.952818][T15354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.963428][T15354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.010611][T15354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.020978][T15354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.056369][T15360] loop6: detected capacity change from 0 to 1024 [ 301.068585][T15354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.078970][T15354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.103351][T15360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.144784][T15366] netlink: 4268 bytes leftover after parsing attributes in process `syz.9.3557'. [ 301.187452][ T8854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.232243][T15354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.242717][T15354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.283134][T15378] loop8: detected capacity change from 0 to 128 [ 301.291939][T15378] EXT4-fs: Ignoring removed nobh option [ 301.300051][T15378] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.321902][T15378] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 301.343112][T14141] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.351471][T14141] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.376698][T14141] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.385154][T14141] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.396458][T12005] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.415363][T14141] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.423685][T14141] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.458455][T14141] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.466769][T14141] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.578038][T15399] loop0: detected capacity change from 0 to 1024 [ 301.597351][T15399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.669193][T13508] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.733818][T15409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3573'. [ 301.882496][T15421] loop1: detected capacity change from 0 to 512 [ 301.995451][T15427] loop0: detected capacity change from 0 to 128 [ 302.012905][T15426] syz.0.3581: attempt to access beyond end of device [ 302.012905][T15426] loop0: rw=8390659, sector=104, nr_sectors = 25 limit=128 [ 302.048182][T15420] lo speed is unknown, defaulting to 1000 [ 302.087359][T15430] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.3582'. [ 302.332821][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 302.332854][ T28] audit: type=1400 audit(2000000141.240:10871): avc: denied { remount } for pid=15447 comm="syz.6.3589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 302.366059][T15446] EXT4-fs (loop1): too many log groups per flexible block group [ 302.386696][T15446] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 302.397669][T15446] EXT4-fs (loop1): mount failed [ 302.513269][ T28] audit: type=1400 audit(2000000141.420:10872): avc: denied { lock } for pid=15464 comm="syz.8.3596" path="socket:[49951]" dev="sockfs" ino=49951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 302.531176][T15467] EXT4-fs: Ignoring removed nobh option [ 302.554022][T15467] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.568446][T15467] ext4 filesystem being mounted at /384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 302.586673][ T28] audit: type=1400 audit(2000000141.490:10873): avc: denied { map } for pid=15464 comm="syz.8.3596" path="socket:[49950]" dev="sockfs" ino=49950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 302.656033][ T8854] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.850838][T15498] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32768, delta: 1 [ 302.859721][T15498] ref_ctr increment failed for inode: 0x281 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810ae02f40 [ 302.872934][T15497] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32768, delta: -1 [ 302.881882][T15497] ref_ctr decrement failed for inode: 0x281 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810ae02f40 [ 302.903666][T15497] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32768, delta: -1 [ 302.912595][T15497] ref_ctr decrement failed for inode: 0x281 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810ae02f40 [ 302.928166][T15497] uprobe: syz.9.3609:15497 failed to unregister, leaking uprobe [ 302.976696][T15504] netlink: 4268 bytes leftover after parsing attributes in process `syz.9.3611'. [ 303.110058][T15515] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 303.225063][T15526] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 303.251139][T15526] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 303.277893][ T28] audit: type=1400 audit(2000000142.190:10874): avc: denied { connect } for pid=15524 comm="syz.0.3621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 303.442189][T15533] team0 (unregistering): Port device team_slave_0 removed [ 303.505267][T15533] team0 (unregistering): Port device team_slave_1 removed [ 303.568366][T15541] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15541 comm=syz.0.3627 [ 303.614096][ T28] audit: type=1400 audit(2000000142.520:10875): avc: denied { create } for pid=15542 comm="syz.0.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 303.649984][ T28] audit: type=1400 audit(2000000142.560:10876): avc: denied { mounton } for pid=15542 comm="syz.0.3629" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 303.707298][ T28] audit: type=1400 audit(2000000142.620:10877): avc: denied { create } for pid=15551 comm="syz.0.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 303.731571][T15549] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 303.758021][T15549] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.3632: lblock 2 mapped to illegal pblock 2 (length 1) [ 303.772188][T15549] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 303.793078][T15549] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 303.810535][T15549] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.3632: lblock 0 mapped to illegal pblock 48 (length 1) [ 303.824726][T15549] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 303.826092][T15549] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 303.844177][T15549] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.3632: Failed to acquire dquot type 0 [ 303.855479][T15549] loop8: lost filesystem error report for type 5 error -117 [ 303.866597][T15549] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 303.883585][T15549] loop8: lost filesystem error report for type 5 error -117 [ 303.888908][T15549] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.3632: mark_inode_dirty error [ 303.907654][T15549] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 303.908156][T15549] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 303.927871][T15549] EXT4-fs (loop8): 1 orphan inode deleted [ 303.934860][T15563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.948975][T14143] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 303.953115][T15549] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.963425][T14143] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 303.984856][ T28] audit: type=1400 audit(2000000142.890:10878): avc: denied { create } for pid=15562 comm="syz.0.3638" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 304.018860][T14143] EXT4-fs error (device loop8): ext4_release_dquot:7027: comm kworker/u8:20: Failed to release dquot type 0 [ 304.030457][T14143] loop8: lost filesystem error report for type 5 error -117 [ 304.036708][T15549] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz.8.3632: Invalid inode table block 1 in block_group 0 [ 304.057302][T15549] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 304.067362][T15549] EXT4-fs error (device loop8): ext4_setattr:5877: inode #2: comm syz.8.3632: mark_inode_dirty error [ 304.079732][T13508] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.116128][T12005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.126231][T14143] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 304.140505][T14143] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 304.140695][T14143] EXT4-fs error (device loop8): ext4_release_dquot:7027: comm kworker/u8:20: Failed to release dquot type 0 [ 304.161532][T14143] loop8: lost filesystem error report for type 5 error -117 [ 304.163032][T12005] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 304.183256][T12005] loop8: lost filesystem error report for type 5 error -117 [ 304.184573][T12005] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 304.201395][T12005] loop8: lost filesystem error report for type 5 error -117 [ 304.209244][T12005] EXT4-fs error (device loop8): ext4_quota_off:7275: inode #3: comm syz-executor: mark_inode_dirty error [ 304.228020][T12005] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 304.396337][T15599] FAT-fs (loop6): bogus logical sector size 13 [ 304.411745][T15599] FAT-fs (loop6): Can't find a valid FAT filesystem [ 304.423969][T15599] 9p: Invalid uid '0x00000000ffffffff' [ 304.507657][T15608] 9p: Bad value for 'rfdno' [ 304.711273][T15617] lo speed is unknown, defaulting to 1000 [ 304.978975][T15644] set_capacity_and_notify: 7 callbacks suppressed [ 304.978997][T15644] loop9: detected capacity change from 0 to 128 [ 304.992514][T15644] EXT4-fs: Ignoring removed nobh option [ 305.002506][T15644] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.015720][T15644] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.041617][T13742] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.082059][T15649] loop0: detected capacity change from 0 to 512 [ 305.090586][T15649] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 305.101164][T15649] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3673: bg 0: block 104: invalid block bitmap [ 305.113743][T15649] loop0: lost filesystem error report for type 5 error -117 [ 305.121046][T15649] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 305.137230][T15649] loop0: lost filesystem error report for type 5 error -117 [ 305.153276][T15649] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3673: invalid indirect mapped block 1 (level 1) [ 305.173901][T15649] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 305.179607][T15649] EXT4-fs (loop0): 1 truncate cleaned up [ 305.195203][T15649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.214529][T15649] bond1: entered promiscuous mode [ 305.305089][T13508] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.406641][T15673] __nla_validate_parse: 3 callbacks suppressed [ 305.406672][T15673] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3681'. [ 305.442593][T15679] loop9: detected capacity change from 0 to 128 [ 305.470506][T15679] EXT4-fs: Ignoring removed nobh option [ 305.486466][T15679] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.521609][T15679] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.568491][T15690] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32768, delta: 1 [ 305.577317][T15690] ref_ctr increment failed for inode: 0x2d6 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810ae057c0 [ 305.594942][T13742] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.603978][T15689] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32768, delta: -1 [ 305.612874][T15689] ref_ctr decrement failed for inode: 0x2d6 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810ae057c0 [ 305.655561][T15689] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32768, delta: -1 [ 305.664403][T15689] ref_ctr decrement failed for inode: 0x2d6 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810ae057c0 [ 305.678938][T15689] uprobe: syz.1.3687:15689 failed to unregister, leaking uprobe [ 305.690068][T15694] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3690'. [ 305.746067][T15694] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3690'. [ 305.755277][T15699] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.762395][T15701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3692'. [ 305.762506][T15699] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.785556][T15703] loop9: detected capacity change from 0 to 1024 [ 305.802622][T15701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3692'. [ 305.825442][T15694] loop6: detected capacity change from 0 to 512 [ 305.826348][T15703] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.874658][T15709] netlink: 'syz.0.3694': attribute type 1 has an invalid length. [ 305.882943][T13742] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.912988][T15694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.947735][T15694] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.007261][T15724] loop0: detected capacity change from 0 to 128 [ 306.027046][T15724] EXT4-fs: Ignoring removed nobh option [ 306.053447][ T8854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.073533][T15724] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 306.102293][T15724] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 306.166474][T15736] netlink: 'syz.6.3702': attribute type 1 has an invalid length. [ 306.166832][T15736] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.167092][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3702'. [ 306.167112][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3702'. [ 306.167201][T15736] netlink: 'syz.6.3702': attribute type 12 has an invalid length. [ 306.171717][T15740] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3704'. [ 306.186743][T15728] lo speed is unknown, defaulting to 1000 [ 306.190840][T13508] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.249484][T15747] loop6: detected capacity change from 0 to 1024 [ 306.384421][T15747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.415067][T15763] loop1: detected capacity change from 0 to 1024 [ 306.428132][T15763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.436041][T15763] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 306.451948][T15763] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 306.471487][T15763] System zones: 0-1, 3-36 [ 306.479656][T15763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.596886][T15772] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32768, delta: 1 [ 306.605695][T15772] ref_ctr increment failed for inode: 0x2ad offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff888191af3600 [ 306.663086][T15771] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32768, delta: -1 [ 306.672017][T15771] ref_ctr decrement failed for inode: 0x2ad offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff888191af3600 [ 306.688858][T15771] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32768, delta: -1 [ 306.697751][T15771] ref_ctr decrement failed for inode: 0x2ad offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff888191af3600 [ 306.714816][T15771] uprobe: syz.0.3716:15771 failed to unregister, leaking uprobe [ 307.048622][T15818] netlink: 'syz.0.3733': attribute type 1 has an invalid length. [ 307.081536][T15818] netlink: 344 bytes leftover after parsing attributes in process `syz.0.3733'. [ 307.166320][T15825] loop6: detected capacity change from 0 to 512 [ 307.190219][T15825] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3736: inode has both inline data and extents flags [ 307.203514][T15825] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 307.208697][T15838] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3739'. [ 307.213784][T15825] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3736: couldn't read orphan inode 15 (err -117) [ 307.238796][T15825] loop6: lost filesystem error report for type 5 error -117 [ 307.347721][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 307.347737][ T28] audit: type=1400 audit(2000000146.260:10929): avc: denied { bind } for pid=15851 comm="syz.0.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 307.516246][T15873] loop1: detected capacity change from 0 to 1024 [ 307.540347][ T28] audit: type=1326 audit(2000000146.450:10930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.6.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d18bfaf79 code=0x7ffc0000 [ 307.628069][ T28] audit: type=1326 audit(2000000146.470:10931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.6.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f0d18bfaf79 code=0x7ffc0000 [ 307.651958][ T28] audit: type=1326 audit(2000000146.470:10932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.6.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d18bfaf79 code=0x7ffc0000 [ 307.675654][ T28] audit: type=1326 audit(2000000146.470:10933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.6.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d18bfaf79 code=0x7ffc0000 [ 307.699382][ T28] audit: type=1326 audit(2000000146.470:10934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.6.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0d18bfaf79 code=0x7ffc0000 [ 307.723160][ T28] audit: type=1326 audit(2000000146.480:10935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.6.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d18bfaf79 code=0x7ffc0000 [ 307.746789][ T28] audit: type=1326 audit(2000000146.480:10936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.6.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d18bfaf79 code=0x7ffc0000 [ 307.770596][ T28] audit: type=1326 audit(2000000146.480:10937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.6.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f0d18bfaf79 code=0x7ffc0000 [ 307.795315][ T28] audit: type=1326 audit(2000000146.480:10938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.6.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d18bfaf79 code=0x7ffc0000 [ 308.209201][T15927] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.3771: Failed to acquire dquot type 1 [ 308.220597][T15927] loop8: lost filesystem error report for type 5 error -117 [ 308.263001][T15927] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.3771: Failed to acquire dquot type 1 [ 308.385288][T15927] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3771: bg 0: block 248: padding at end of block bitmap is not set [ 308.426142][T15927] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 308.443093][T15927] EXT4-fs error (device loop8): ext4_acquire_dquot:6991: comm syz.8.3771: Failed to acquire dquot type 1 [ 308.465327][T15927] EXT4-fs (loop8): 1 orphan inode deleted [ 308.471590][T15927] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.537325][T15942] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 308.550242][T15942] bond0: (slave lo): Error: Device can not be enslaved while up [ 308.957787][T15982] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3792: corrupted inode contents [ 308.970769][T15982] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.3792: mark_inode_dirty error [ 308.985102][T15982] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3792: corrupted inode contents [ 309.012096][T15982] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #15: comm syz.8.3792: mark_inode_dirty error [ 309.040552][T15982] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3792: corrupted inode contents [ 309.053223][T15982] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #15: comm syz.8.3792: mark_inode_dirty error [ 309.067441][T15982] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3792: corrupted inode contents [ 309.079725][T15982] EXT4-fs error (device loop8): ext4_truncate:4635: inode #15: comm syz.8.3792: mark_inode_dirty error [ 309.093169][T15982] EXT4-fs error (device loop8) in ext4_setattr:6035: Corrupt filesystem [ 309.103875][T15984] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3792: corrupted inode contents [ 309.202351][T12005] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 309.202509][T12005] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 309.213493][T12005] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 309.256038][T15992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 309.319042][T15992] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.396210][ T8854] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 309.436360][ T8854] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 309.617521][T16009] netlink: 'syz.0.3803': attribute type 3 has an invalid length. [ 309.676302][T12645] bond0: (slave syz_tun): Releasing backup interface [ 309.713285][T16019] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32768, delta: 1 [ 309.722183][T16019] ref_ctr increment failed for inode: 0x331 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff888191af72c0 [ 309.734376][T16018] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32768, delta: -1 [ 309.743232][T16018] ref_ctr decrement failed for inode: 0x331 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff888191af72c0 [ 309.784336][T16018] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32768, delta: -1 [ 309.793193][T16018] ref_ctr decrement failed for inode: 0x331 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff888191af72c0 [ 309.860645][T16018] uprobe: syz.0.3806:16018 failed to unregister, leaking uprobe [ 310.020545][T16050] netlink: 'syz.0.3816': attribute type 3 has an invalid length. [ 310.189577][T16043] set_capacity_and_notify: 6 callbacks suppressed [ 310.189664][T16043] loop9: detected capacity change from 0 to 736 [ 310.248831][T16043] iso9660: Unknown parameter 's' [ 310.333539][T16032] lo speed is unknown, defaulting to 1000 [ 310.615656][T16032] chnl_net:caif_netlink_parms(): no params data found [ 310.662861][T16032] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.670104][T16032] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.677470][T16032] bridge_slave_0: entered allmulticast mode [ 310.684142][T16032] bridge_slave_0: entered promiscuous mode [ 310.691165][T16032] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.698291][T16032] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.705617][T16032] bridge_slave_1: entered allmulticast mode [ 310.712271][T16032] bridge_slave_1: entered promiscuous mode [ 310.731924][T16032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.742763][T16032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.815901][T16032] team0: Port device team_slave_0 added [ 310.822782][T16032] team0: Port device team_slave_1 added [ 310.870807][T16032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.877841][T16032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.903956][T16032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.917809][T16032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.925129][T16032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.951343][T16032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.029042][T16032] hsr_slave_0: entered promiscuous mode [ 311.035399][T16032] hsr_slave_1: entered promiscuous mode [ 311.041542][T16032] debugfs: 'hsr0' already exists in 'hsr' [ 311.047386][T16032] Cannot create hsr debugfs directory [ 311.073259][T16098] netlink: 'syz.9.3828': attribute type 3 has an invalid length. [ 311.184275][T16109] __nla_validate_parse: 8 callbacks suppressed [ 311.184301][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3831'. [ 311.207499][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3832'. [ 311.208776][T16032] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.282085][T16095] SELinux: syz.1.3827 (16095) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 311.316762][T16032] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.407533][T16032] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.418835][T16118] loop0: detected capacity change from 0 to 512 [ 311.439269][T16118] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 311.497416][T16032] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.650443][T16032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.686804][T16032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.725540][T16032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.756644][T16032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.771305][T16152] loop9: detected capacity change from 0 to 512 [ 311.808496][T16152] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 311.842476][T16152] EXT4-fs (loop9): orphan cleanup on readonly fs [ 311.869418][T16152] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.3844: bad orphan inode 15 [ 311.879512][T16152] fserror_report: 4 callbacks suppressed [ 311.879562][T16152] loop9: lost filesystem error report for type 5 error -117 [ 311.906702][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3845'. [ 311.923251][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3845'. [ 311.943397][T16152] ext4_test_bit(bit=14, block=18) = 1 [ 311.948984][T16152] is_bad_inode(inode)=0 [ 311.953231][T16152] NEXT_ORPHAN(inode)=1023 [ 311.957718][T16152] max_ino=32 [ 311.960979][T16152] i_nlink=0 [ 311.984922][T16152] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3844: bg 0: block 161: padding at end of block bitmap is not set [ 311.999443][T16152] loop9: lost filesystem error report for type 5 error -117 [ 312.011898][T16032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.041239][T16152] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 312.050088][T16152] loop9: lost filesystem error report for type 5 error -117 [ 312.062498][T16032] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.095883][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.103035][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.123954][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3846'. [ 312.135047][T14147] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.142180][T14147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.251658][T16173] loop9: detected capacity change from 0 to 128 [ 312.271723][T16173] EXT4-fs: Ignoring removed nobh option [ 312.298192][T16032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.308210][T16173] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.394775][T16180] loop9: detected capacity change from 0 to 1024 [ 312.410219][T16180] EXT4-fs: inline encryption not supported [ 312.430940][T16180] EXT4-fs: test_dummy_encryption option not supported [ 312.467128][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 312.467195][ T28] audit: type=1400 audit(2000000151.380:10987): avc: denied { kexec_image_load } for pid=16183 comm="syz.8.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 312.522191][T16032] veth0_vlan: entered promiscuous mode [ 312.533125][T16032] veth1_vlan: entered promiscuous mode [ 312.553290][T16032] veth0_macvtap: entered promiscuous mode [ 312.563517][T16032] veth1_macvtap: entered promiscuous mode [ 312.578322][ T28] audit: type=1326 audit(2000000151.490:10988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16179 comm="syz.9.3848" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23a4deaf79 code=0x0 [ 312.586549][T16032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.615308][T16032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.638139][T14141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.647666][T14141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.657538][T14141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.667897][T14141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.823793][T16209] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.3857'. [ 312.835392][T16209] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.3857'. [ 312.838362][T16203] loop8: detected capacity change from 0 to 512 [ 312.855780][T16203] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 312.876122][T16203] EXT4-fs (loop8): 1 truncate cleaned up [ 312.946652][T11025] IPVS: starting estimator thread 0... [ 313.034715][T16216] IPVS: using max 2160 ests per chain, 108000 per kthread [ 313.307010][T16232] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3863'. [ 313.398833][T16241] netlink: 'syz.8.3866': attribute type 2 has an invalid length. [ 313.407080][T16241] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=16241 comm=syz.8.3866 [ 313.451119][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3867'. [ 313.467720][T16248] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3868'. [ 313.705799][T16260] tmpfs: Bad value for 'mpol' [ 313.861716][T16270] loop2: detected capacity change from 0 to 512 [ 313.871332][T16270] EXT4-fs: Invalid want_extra_isize 257 [ 313.878313][T16270] SELinux: policydb version -97096780 does not match my version range 15-35 [ 313.887249][T16270] SELinux: failed to load policy [ 313.892832][T16272] netlink: 'syz.8.3878': attribute type 10 has an invalid length. [ 313.909208][T16272] team0: Failed to send options change via netlink (err -105) [ 313.916808][T16272] team0: Port device dummy0 added [ 313.960276][T16278] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 314.338143][T16284] .70·: renamed from hsr0 (while UP) [ 314.345474][T16284] .70·: entered allmulticast mode [ 314.350551][T16284] hsr_slave_0: entered allmulticast mode [ 314.356266][T16284] hsr_slave_1: entered allmulticast mode [ 314.363035][T16284] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 314.381740][ T28] audit: type=1326 audit(2000000153.300:10989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.2.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 314.405520][ T28] audit: type=1326 audit(2000000153.300:10990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.2.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 314.429272][ T28] audit: type=1326 audit(2000000153.300:10991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.2.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 314.452933][ T28] audit: type=1326 audit(2000000153.300:10992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.2.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 314.476556][ T28] audit: type=1326 audit(2000000153.300:10993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.2.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 314.493607][T16284] loop2: detected capacity change from 0 to 8192 [ 314.500571][ T28] audit: type=1326 audit(2000000153.300:10994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.2.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 314.530747][ T28] audit: type=1326 audit(2000000153.300:10995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.2.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 314.554422][ T28] audit: type=1326 audit(2000000153.300:10996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.2.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 314.681670][T16296] loop2: detected capacity change from 0 to 128 [ 314.706966][T16296] EXT4-fs: Ignoring removed nobh option [ 314.732851][T16296] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 314.956761][T16310] netlink: 'syz.2.3891': attribute type 4 has an invalid length. [ 314.968790][T16310] netlink: 'syz.2.3891': attribute type 4 has an invalid length. [ 315.096914][T16322] loop2: detected capacity change from 0 to 256 [ 315.104020][T16322] vfat: Unknown parameter 'nnonumtail' [ 315.232630][T16340] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 315.492142][T16354] loop9: detected capacity change from 0 to 128 [ 315.499026][T16354] EXT4-fs: Ignoring removed nobh option [ 315.508304][T16354] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.671854][T16368] bond1: option lacp_rate: invalid value (2) [ 315.679191][T16368] bond1 (unregistering): Released all slaves [ 315.946068][T16379] loop2: detected capacity change from 0 to 128 [ 316.012239][T16373] loop9: detected capacity change from 0 to 2048 [ 316.026409][T16387] loop2: detected capacity change from 0 to 128 [ 316.033112][T16387] EXT4-fs: Ignoring removed nobh option [ 316.042440][T16387] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 316.046239][T12025] loop9: p3 p4 < > [ 316.064339][T12025] loop9: p3 start 11362048 is beyond EOD, truncated [ 316.087469][T16373] loop9: p3 p4 < > [ 316.094375][T16373] loop9: p3 start 11362048 is beyond EOD, truncated [ 316.131339][ T3002] loop9: p3 p4 < > [ 316.142177][ T3002] loop9: p3 start 11362048 is beyond EOD, truncated [ 316.216462][T12025] udevd[12025]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 316.266282][T12025] udevd[12025]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 316.293665][T12025] udevd[12025]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 316.304926][T16408] __nla_validate_parse: 14 callbacks suppressed [ 316.304943][T16408] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3930'. [ 316.662853][T16427] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.3938'. [ 316.808634][T16438] loop1: detected capacity change from 0 to 256 [ 316.914225][T16452] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 316.957553][T16452] vhci_hcd vhci_hcd.1: default hub control req: d10d v0006 i0007 l2 [ 316.987642][T16464] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3945'. [ 317.056537][T16475] netlink: 4268 bytes leftover after parsing attributes in process `syz.9.3949'. [ 317.084639][T16475] netlink: 4268 bytes leftover after parsing attributes in process `syz.9.3949'. [ 317.148066][T16483] loop8: detected capacity change from 0 to 128 [ 317.169886][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3952'. [ 317.232850][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3954'. [ 317.245730][T16495] loop1: detected capacity change from 0 to 164 [ 317.260409][T16495] Unsupported NM flag settings (240) [ 317.365079][T16506] netlink: 'syz.8.3957': attribute type 4 has an invalid length. [ 317.382871][T16506] netlink: 'syz.8.3957': attribute type 4 has an invalid length. [ 317.481125][T16518] loop9: detected capacity change from 0 to 128 [ 317.497344][T16518] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 317.520507][T16518] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 317.532958][T16523] FAULT_INJECTION: forcing a failure. [ 317.532958][T16523] name failslab, interval 1, probability 0, space 0, times 0 [ 317.545705][T16523] CPU: 0 UID: 0 PID: 16523 Comm: syz.1.3961 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 317.545824][T16523] Tainted: [W]=WARN [ 317.545833][T16523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 317.545850][T16523] Call Trace: [ 317.545857][T16523] [ 317.545865][T16523] __dump_stack+0x1d/0x30 [ 317.545928][T16523] dump_stack_lvl+0x95/0xd0 [ 317.545956][T16523] dump_stack+0x15/0x1b [ 317.545976][T16523] should_fail_ex+0x263/0x280 [ 317.546189][T16523] should_failslab+0x8c/0xb0 [ 317.546211][T16523] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 317.546235][T16523] ? __alloc_skb+0x2f0/0x4b0 [ 317.546344][T16523] ? avc_has_perm_noaudit+0xab/0x130 [ 317.546455][T16523] __alloc_skb+0x2f0/0x4b0 [ 317.546489][T16523] ? __alloc_skb+0x219/0x4b0 [ 317.546594][T16523] alloc_skb_with_frags+0x7d/0x470 [ 317.546640][T16523] ? file_ra_state_init+0x3b/0x60 [ 317.546669][T16523] sock_alloc_send_pskb+0x44d/0x500 [ 317.546763][T16523] ? terminate_walk+0x1e6/0x210 [ 317.546791][T16523] ? path_openat+0x1ab2/0x2050 [ 317.546895][T16523] tun_get_user+0x62b/0x27c0 [ 317.546991][T16523] ? ref_tracker_alloc+0x1f2/0x2f0 [ 317.547032][T16523] tun_chr_write_iter+0x15e/0x210 [ 317.547063][T16523] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 317.547082][T16523] vfs_write+0x5a6/0x9f0 [ 317.547160][T16523] ksys_write+0xdc/0x1a0 [ 317.547243][T16523] __x64_sys_write+0x40/0x50 [ 317.547288][T16523] x64_sys_call+0x2847/0x3000 [ 317.547325][T16523] do_syscall_64+0xc0/0x2a0 [ 317.547390][T16523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.547419][T16523] RIP: 0033:0x7f082db9b84e [ 317.547439][T16523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 317.547465][T16523] RSP: 002b:00007f082c615fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.547561][T16523] RAX: ffffffffffffffda RBX: 00007f082c6166c0 RCX: 00007f082db9b84e [ 317.547580][T16523] RDX: 0000000000000d81 RSI: 0000200000000840 RDI: 00000000000000c8 [ 317.547597][T16523] RBP: 00007f082c616090 R08: 0000000000000000 R09: 0000000000000000 [ 317.547614][T16523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.547630][T16523] R13: 00007f082de56128 R14: 00007f082de56090 R15: 00007fffecf49e68 [ 317.547657][T16523] [ 317.782764][T16522] loop8: detected capacity change from 0 to 4096 [ 317.806050][T16526] loop2: detected capacity change from 0 to 128 [ 317.812654][T16526] EXT4-fs: Ignoring removed nobh option [ 317.826493][T16526] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 317.837876][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 317.837895][ T28] audit: type=1400 audit(2000000156.750:11072): avc: denied { write } for pid=16517 comm="syz.9.3962" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 317.860631][T16522] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3957: corrupted inode contents [ 317.891858][T16506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.905025][T16522] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.3957: mark_inode_dirty error [ 317.917550][T16506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.925473][T16522] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3957: corrupted inode contents [ 317.944688][T16522] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #15: comm syz.8.3957: mark_inode_dirty error [ 317.968151][T16522] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3957: corrupted inode contents [ 317.994990][T16522] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #15: comm syz.8.3957: mark_inode_dirty error [ 318.008660][T16522] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.3957: corrupted inode contents [ 318.021271][T16522] EXT4-fs error (device loop8): ext4_truncate:4635: inode #15: comm syz.8.3957: mark_inode_dirty error [ 318.043636][T16522] EXT4-fs error (device loop8) in ext4_setattr:6035: Corrupt filesystem [ 318.052906][T14141] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.068696][T14141] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.078068][T14141] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.089780][T14141] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.131464][T16542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3968'. [ 318.155536][T12005] EXT4-fs unmount: 29 callbacks suppressed [ 318.155556][T12005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.199682][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3970'. [ 318.267324][T14149] Bluetooth: hci0: Frame reassembly failed (-84) [ 318.362548][T16567] EXT4-fs: Ignoring removed nobh option [ 318.381101][T16567] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.397053][T11023] hid (null): unknown global tag 0xd [ 318.402537][T16567] ext4 filesystem being mounted at /298/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 318.413832][T11023] hid-generic 0008:0006:0101.0002: unexpected long global item [ 318.423275][T11023] hid-generic 0008:0006:0101.0002: probe with driver hid-generic failed with error -22 [ 318.439705][T16572] FAULT_INJECTION: forcing a failure. [ 318.439705][T16572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.452970][T16572] CPU: 1 UID: 0 PID: 16572 Comm: syz.9.3979 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 318.453066][T16572] Tainted: [W]=WARN [ 318.453076][T16572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 318.453091][T16572] Call Trace: [ 318.453097][T16572] [ 318.453161][T16572] __dump_stack+0x1d/0x30 [ 318.453187][T16572] dump_stack_lvl+0x95/0xd0 [ 318.453209][T16572] dump_stack+0x15/0x1b [ 318.453229][T16572] should_fail_ex+0x263/0x280 [ 318.453267][T16572] should_fail+0xb/0x20 [ 318.453353][T16572] should_fail_usercopy+0x1a/0x20 [ 318.453384][T16572] _copy_from_iter+0xcf/0xea0 [ 318.453418][T16572] ? skb_set_owner_w+0x19b/0x200 [ 318.453463][T16572] ? sock_alloc_send_pskb+0x469/0x500 [ 318.453594][T16572] skb_copy_datagram_from_iter+0xb2/0x480 [ 318.453654][T16572] ? terminate_walk+0x1e6/0x210 [ 318.453683][T16572] ? path_openat+0x1ab2/0x2050 [ 318.453778][T16572] ? skb_put+0xa9/0xf0 [ 318.453813][T16572] tun_get_user+0x90b/0x27c0 [ 318.453907][T16572] ? ref_tracker_alloc+0x1f2/0x2f0 [ 318.453953][T16572] tun_chr_write_iter+0x15e/0x210 [ 318.453981][T16572] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 318.454005][T16572] vfs_write+0x5a6/0x9f0 [ 318.454095][T16572] ksys_write+0xdc/0x1a0 [ 318.454138][T16572] __x64_sys_write+0x40/0x50 [ 318.454206][T16572] x64_sys_call+0x2847/0x3000 [ 318.454240][T16572] do_syscall_64+0xc0/0x2a0 [ 318.454278][T16572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.454373][T16572] RIP: 0033:0x7f23a4dab84e [ 318.454394][T16572] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 318.454419][T16572] RSP: 002b:00007f23a3846fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 318.454445][T16572] RAX: ffffffffffffffda RBX: 00007f23a38476c0 RCX: 00007f23a4dab84e [ 318.454480][T16572] RDX: 0000000000000d81 RSI: 0000200000000840 RDI: 00000000000000c8 [ 318.454496][T16572] RBP: 00007f23a3847090 R08: 0000000000000000 R09: 0000000000000000 [ 318.454512][T16572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.454574][T16572] R13: 00007f23a5066038 R14: 00007f23a5065fa0 R15: 00007fff6a01a808 [ 318.454607][T16572] [ 318.675604][T12005] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.731567][T16579] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3982'. [ 318.773940][T16588] netlink: 'syz.8.3986': attribute type 39 has an invalid length. [ 318.823946][T16596] netlink: 'syz.8.3989': attribute type 1 has an invalid length. [ 318.942192][T16605] EXT4-fs: Ignoring removed nobh option [ 318.942179][ T28] audit: type=1326 audit(2000000157.850:11073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 318.942340][ T28] audit: type=1326 audit(2000000157.850:11074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 318.976935][T16605] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.995759][ T28] audit: type=1326 audit(2000000157.850:11075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 319.031409][ T28] audit: type=1326 audit(2000000157.850:11076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 319.038115][T16605] ext4 filesystem being mounted at /307/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 319.055071][ T28] audit: type=1326 audit(2000000157.850:11077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 319.089539][ T28] audit: type=1326 audit(2000000157.930:11078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 319.113190][ T28] audit: type=1326 audit(2000000157.930:11079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 319.137169][ T28] audit: type=1326 audit(2000000157.930:11080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 319.161136][ T28] audit: type=1326 audit(2000000157.930:11081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.2.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0b2af79 code=0x7ffc0000 [ 319.187140][T12005] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.212963][T16609] netlink: 'syz.8.3995': attribute type 1 has an invalid length. [ 319.258287][T16616] FAULT_INJECTION: forcing a failure. [ 319.258287][T16616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.271638][T16616] CPU: 0 UID: 0 PID: 16616 Comm: syz.8.3998 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 319.271679][T16616] Tainted: [W]=WARN [ 319.271689][T16616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 319.271705][T16616] Call Trace: [ 319.271714][T16616] [ 319.271800][T16616] __dump_stack+0x1d/0x30 [ 319.271828][T16616] dump_stack_lvl+0x95/0xd0 [ 319.271887][T16616] dump_stack+0x15/0x1b [ 319.271953][T16616] should_fail_ex+0x263/0x280 [ 319.271983][T16616] should_fail+0xb/0x20 [ 319.272072][T16616] should_fail_usercopy+0x1a/0x20 [ 319.272108][T16616] _copy_from_iter+0xcf/0xea0 [ 319.272142][T16616] ? skb_set_owner_w+0x19b/0x200 [ 319.272254][T16616] ? sock_alloc_send_pskb+0x469/0x500 [ 319.272299][T16616] skb_copy_datagram_from_iter+0xb2/0x480 [ 319.272335][T16616] ? terminate_walk+0x1e6/0x210 [ 319.272367][T16616] ? path_openat+0x1ab2/0x2050 [ 319.272446][T16616] ? skb_put+0xa9/0xf0 [ 319.272528][T16616] tun_get_user+0x90b/0x27c0 [ 319.272570][T16616] ? ref_tracker_alloc+0x1f2/0x2f0 [ 319.272614][T16616] tun_chr_write_iter+0x15e/0x210 [ 319.272717][T16616] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 319.272742][T16616] vfs_write+0x5a6/0x9f0 [ 319.272790][T16616] ksys_write+0xdc/0x1a0 [ 319.272829][T16616] __x64_sys_write+0x40/0x50 [ 319.272939][T16616] x64_sys_call+0x2847/0x3000 [ 319.272972][T16616] do_syscall_64+0xc0/0x2a0 [ 319.273076][T16616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.273100][T16616] RIP: 0033:0x7f9e0a93b84e [ 319.273184][T16616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 319.273269][T16616] RSP: 002b:00007f9e093cefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.273372][T16616] RAX: ffffffffffffffda RBX: 00007f9e093cf6c0 RCX: 00007f9e0a93b84e [ 319.273392][T16616] RDX: 0000000000000d81 RSI: 0000200000000840 RDI: 00000000000000c8 [ 319.273474][T16616] RBP: 00007f9e093cf090 R08: 0000000000000000 R09: 0000000000000000 [ 319.273492][T16616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.273509][T16616] R13: 00007f9e0abf6038 R14: 00007f9e0abf5fa0 R15: 00007fff707f2ca8 [ 319.273537][T16616] [ 319.507578][T16618] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 319.525354][T16618] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 319.664295][T16640] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 319.682004][T16640] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 319.692198][T16640] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 319.700480][T16640] System zones: 0-2, 18-18, 34-34 [ 319.706264][T16640] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.4005: bad orphan inode 15 [ 319.716434][T16640] loop9: lost filesystem error report for type 5 error -117 [ 319.718339][T16640] ext4_test_bit(bit=14, block=18) = 1 [ 319.731116][T16640] is_bad_inode(inode)=0 [ 319.735353][T16640] NEXT_ORPHAN(inode)=2264924160 [ 319.740223][T16640] max_ino=32 [ 319.743439][T16640] i_nlink=0 [ 319.751159][T16640] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4005: corrupted inode contents [ 319.763162][T16640] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.773492][T16640] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.4005: mark_inode_dirty error [ 319.794037][T16640] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.794822][T16640] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4005: corrupted inode contents [ 319.815920][T16640] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.824925][T16640] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #15: comm syz.9.4005: mark_inode_dirty error [ 319.846107][T16640] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.866821][T16640] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3004: inode #15: comm syz.9.4005: mark inode dirty (error -117) [ 319.888693][T16640] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.899579][T16651] bond0: option lp_interval: invalid value (0) [ 319.915195][T16651] bond0: option lp_interval: allowed values 1 - 2147483647 [ 319.928014][T16640] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 319.955391][T16640] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.999771][T16640] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4005: bg 0: block 80: padding at end of block bitmap is not set [ 320.015074][T16659] EXT4-fs: Ignoring removed nobh option [ 320.031015][T16659] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.059218][T16659] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 320.100041][T16032] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.324655][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 320.330773][ T3549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 320.618279][T13742] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.720114][T16697] bridge0: port 3(vlan2) entered blocking state [ 320.726644][T16697] bridge0: port 3(vlan2) entered disabled state [ 320.736766][T16697] vlan2: entered allmulticast mode [ 320.741950][T16697] bridge0: entered allmulticast mode [ 320.752513][T16697] vlan2: left allmulticast mode [ 320.757500][T16697] bridge0: left allmulticast mode [ 320.802593][T16704] set_capacity_and_notify: 5 callbacks suppressed [ 320.802684][T16704] loop8: detected capacity change from 0 to 128 [ 320.818711][T16704] EXT4-fs: Ignoring removed nobh option [ 320.830752][T16704] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.843550][T16704] ext4 filesystem being mounted at /322/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 320.871872][T12005] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 320.905605][T16708] loop1: detected capacity change from 0 to 256 [ 321.146680][T16733] loop8: detected capacity change from 0 to 128 [ 321.155236][T16728] netlink: 'syz.1.4038': attribute type 39 has an invalid length. [ 321.164007][T16733] EXT4-fs: Ignoring removed nobh option [ 321.186722][T16733] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 321.202602][T16733] ext4 filesystem being mounted at /325/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 321.242980][T16736] netlink: 'syz.2.4041': attribute type 10 has an invalid length. [ 321.256213][T16736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.267593][T16736] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 321.286725][T12005] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 321.339815][T16743] netlink: 'syz.9.4045': attribute type 12 has an invalid length. [ 321.362967][T16743] __nla_validate_parse: 16 callbacks suppressed [ 321.362987][T16743] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4045'. [ 321.378732][T16743] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4045'. [ 322.298695][T16765] loop2: detected capacity change from 0 to 128 [ 322.346955][T16765] EXT4-fs: Ignoring removed nobh option [ 322.377314][T16765] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.399726][T16765] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 322.452249][T16032] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.529822][T16774] loop2: detected capacity change from 0 to 128 [ 322.551722][T16774] FAT-fs (loop2): bogus sectors per cluster 0 [ 322.558019][T16774] FAT-fs (loop2): Can't find a valid FAT filesystem [ 322.649597][T16785] ip6t_srh: unknown srh match flags 41C4 [ 322.893248][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 322.893267][ T28] audit: type=1326 audit(2000000161.800:11215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.8.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0a97af79 code=0x7ffc0000 [ 322.923107][ T28] audit: type=1326 audit(2000000161.800:11216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.8.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0a97af79 code=0x7ffc0000 [ 322.966874][ T28] audit: type=1326 audit(2000000161.800:11217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.8.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f9e0a97af79 code=0x7ffc0000 [ 322.990595][ T28] audit: type=1326 audit(2000000161.880:11218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.8.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0a97af79 code=0x7ffc0000 [ 323.014208][ T28] audit: type=1326 audit(2000000161.880:11219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.8.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9e0a97ace2 code=0x7ffc0000 [ 323.144341][ T28] audit: type=1326 audit(2000000162.030:11220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.8.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9e0a97ad77 code=0x7ffc0000 [ 323.168110][ T28] audit: type=1326 audit(2000000162.030:11221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.8.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9e0a937d11 code=0x7ffc0000 [ 323.191693][ T28] audit: type=1326 audit(2000000162.030:11222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.8.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9e0a97bd89 code=0x7ffc0000 [ 323.215395][ T28] audit: type=1326 audit(2000000162.030:11223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.8.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9e0a937d7b code=0x7ffc0000 [ 323.239042][ T28] audit: type=1326 audit(2000000162.030:11224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16780 comm="syz.8.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0a97af79 code=0x7ffc0000 [ 323.327794][T16796] loop9: detected capacity change from 0 to 512 [ 323.341399][T16796] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 323.351195][T16796] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 323.360520][T16796] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 323.368928][T16796] System zones: 0-2, 18-18, 34-34 [ 323.374374][T16796] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.4066: bad orphan inode 15 [ 323.384473][T16796] loop9: lost filesystem error report for type 5 error -117 [ 323.384990][T16796] ext4_test_bit(bit=14, block=18) = 1 [ 323.397877][T16796] is_bad_inode(inode)=0 [ 323.402057][T16796] NEXT_ORPHAN(inode)=2264924160 [ 323.407069][T16796] max_ino=32 [ 323.410398][T16796] i_nlink=0 [ 323.414115][T16796] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4066: corrupted inode contents [ 323.426240][T16796] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 323.426805][T16796] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.4066: mark_inode_dirty error [ 323.447692][T16796] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 323.452635][T16796] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.4066: corrupted inode contents [ 323.473745][T16796] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 323.485568][T16796] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #15: comm syz.9.4066: mark_inode_dirty error [ 323.506748][T16796] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 323.519481][T16799] loop1: detected capacity change from 0 to 128 [ 323.554461][T16799] EXT4-fs: Ignoring removed nobh option [ 323.563659][T16796] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3004: inode #15: comm syz.9.4066: mark inode dirty (error -117) [ 323.576298][T16796] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 323.576945][T16796] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 323.579367][T16796] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.596866][T16799] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 323.597113][T16799] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 323.606499][T13742] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.635217][T12741] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.638021][T16805] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4069'. [ 323.783335][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4074'. [ 323.833974][T16821] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4077'. [ 323.843802][T16821] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4077'. [ 323.938427][T16827] loop1: detected capacity change from 0 to 128 [ 323.967828][T16827] EXT4-fs: Ignoring removed nobh option [ 324.018610][T16827] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.107315][T16827] ext4 filesystem being mounted at /189/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.166105][T16830] lo speed is unknown, defaulting to 1000 [ 324.221465][T12741] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.290096][T16839] nfs: Unexpected value for 'acl' [ 324.346526][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4084'. [ 324.452844][T16845] dummy0: entered promiscuous mode [ 324.475023][T16845] dummy0: left promiscuous mode [ 324.578929][T16855] SELinux: policydb version -1627584313 does not match my version range 15-35 [ 324.609042][T16855] SELinux: failed to load policy [ 324.661526][T16857] netlink: 'syz.2.4090': attribute type 21 has an invalid length. [ 324.763525][T16862] bond1: option lacp_rate: invalid value (37) [ 324.781105][T16862] bond1 (unregistering): Released all slaves [ 324.841195][T16868] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4092'. [ 324.873243][T16868] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4092'. [ 324.930332][T16870] bond2: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 324.955537][T16870] bond2 (unregistering): Released all slaves [ 325.000205][T16857] lo speed is unknown, defaulting to 1000 [ 325.062262][T16877] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4097'. [ 325.204913][T16898] loop1: detected capacity change from 0 to 128 [ 325.218375][T16898] EXT4-fs: Ignoring removed nobh option [ 325.236573][T16890] FAULT_INJECTION: forcing a failure. [ 325.236573][T16890] name failslab, interval 1, probability 0, space 0, times 0 [ 325.249368][T16890] CPU: 1 UID: 0 PID: 16890 Comm: syz.9.4101 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 325.249408][T16890] Tainted: [W]=WARN [ 325.249418][T16890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 325.249436][T16890] Call Trace: [ 325.249445][T16890] [ 325.249455][T16890] __dump_stack+0x1d/0x30 [ 325.249528][T16890] dump_stack_lvl+0x95/0xd0 [ 325.249591][T16890] dump_stack+0x15/0x1b [ 325.249618][T16890] should_fail_ex+0x263/0x280 [ 325.249657][T16890] should_failslab+0x8c/0xb0 [ 325.249685][T16890] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 325.249716][T16890] ? __alloc_skb+0x2f0/0x4b0 [ 325.249768][T16890] __alloc_skb+0x2f0/0x4b0 [ 325.249800][T16890] ? __alloc_skb+0x219/0x4b0 [ 325.249836][T16890] netlink_dump+0x10d/0x8a0 [ 325.249949][T16890] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 325.250044][T16890] ? __skb_datagram_iter+0x46a/0x680 [ 325.250090][T16890] netlink_recvmsg+0x420/0x550 [ 325.250184][T16890] ? __pfx_netlink_recvmsg+0x10/0x10 [ 325.250221][T16890] sock_recvmsg_nosec+0x107/0x130 [ 325.250361][T16890] ____sys_recvmsg+0x26f/0x280 [ 325.250432][T16890] ___sys_recvmsg+0x11f/0x3b0 [ 325.250484][T16890] do_recvmmsg+0x1ef/0x560 [ 325.250586][T16890] ? fput+0x8f/0xc0 [ 325.250687][T16890] __x64_sys_recvmmsg+0xe5/0x170 [ 325.250722][T16890] x64_sys_call+0x2b75/0x3000 [ 325.250748][T16890] do_syscall_64+0xc0/0x2a0 [ 325.250785][T16890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.250883][T16890] RIP: 0033:0x7f23a4deaf79 [ 325.250899][T16890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.250989][T16890] RSP: 002b:00007f23a3847028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 325.251017][T16890] RAX: ffffffffffffffda RBX: 00007f23a5065fa0 RCX: 00007f23a4deaf79 [ 325.251036][T16890] RDX: 0000000000000011 RSI: 0000200000006440 RDI: 0000000000000005 [ 325.251054][T16890] RBP: 00007f23a3847090 R08: 0000000000000000 R09: 0000000000000000 [ 325.251072][T16890] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 325.251089][T16890] R13: 00007f23a5066038 R14: 00007f23a5065fa0 R15: 00007fff6a01a808 [ 325.251129][T16890] [ 325.482684][T16898] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 325.519504][T16898] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 325.599437][T12741] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 325.731543][T16922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.931521][T16919] lo speed is unknown, defaulting to 1000 [ 326.021093][T16940] FAULT_INJECTION: forcing a failure. [ 326.021093][T16940] name failslab, interval 1, probability 0, space 0, times 0 [ 326.033932][T16940] CPU: 0 UID: 0 PID: 16940 Comm: syz.9.4119 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 326.033970][T16940] Tainted: [W]=WARN [ 326.033979][T16940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 326.034072][T16940] Call Trace: [ 326.034079][T16940] [ 326.034087][T16940] __dump_stack+0x1d/0x30 [ 326.034118][T16940] dump_stack_lvl+0x95/0xd0 [ 326.034205][T16940] dump_stack+0x15/0x1b [ 326.034271][T16940] should_fail_ex+0x263/0x280 [ 326.034311][T16940] should_failslab+0x8c/0xb0 [ 326.034392][T16940] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 326.034427][T16940] ? __alloc_skb+0x2f0/0x4b0 [ 326.034465][T16940] __alloc_skb+0x2f0/0x4b0 [ 326.034571][T16940] ? __alloc_skb+0x219/0x4b0 [ 326.034607][T16940] netlink_dump+0x10d/0x8a0 [ 326.034645][T16940] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 326.034689][T16940] ? __skb_datagram_iter+0x46a/0x680 [ 326.034761][T16940] netlink_recvmsg+0x420/0x550 [ 326.034806][T16940] ? __pfx_netlink_recvmsg+0x10/0x10 [ 326.034924][T16940] sock_recvmsg_nosec+0x107/0x130 [ 326.034958][T16940] ____sys_recvmsg+0x26f/0x280 [ 326.035012][T16940] ___sys_recvmsg+0x11f/0x3b0 [ 326.035116][T16940] do_recvmmsg+0x1ef/0x560 [ 326.035162][T16940] ? fput+0x8f/0xc0 [ 326.035227][T16940] __x64_sys_recvmmsg+0xe5/0x170 [ 326.035309][T16940] x64_sys_call+0x2b75/0x3000 [ 326.035339][T16940] do_syscall_64+0xc0/0x2a0 [ 326.035387][T16940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.035415][T16940] RIP: 0033:0x7f23a4deaf79 [ 326.035432][T16940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.035522][T16940] RSP: 002b:00007f23a3847028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 326.035609][T16940] RAX: ffffffffffffffda RBX: 00007f23a5065fa0 RCX: 00007f23a4deaf79 [ 326.035623][T16940] RDX: 0000000000000011 RSI: 0000200000006440 RDI: 0000000000000005 [ 326.035638][T16940] RBP: 00007f23a3847090 R08: 0000000000000000 R09: 0000000000000000 [ 326.035653][T16940] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 326.035731][T16940] R13: 00007f23a5066038 R14: 00007f23a5065fa0 R15: 00007fff6a01a808 [ 326.035757][T16940] [ 326.255205][T16946] loop1: detected capacity change from 0 to 128 [ 326.261923][T16946] EXT4-fs: Ignoring removed nobh option [ 326.294828][T16946] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.334794][T16946] ext4 filesystem being mounted at /203/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.408894][T12741] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.484537][T16963] __nla_validate_parse: 5 callbacks suppressed [ 326.490826][T16963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4126'. [ 326.610846][T16968] loop9: detected capacity change from 0 to 4096 [ 326.673576][T16968] EXT4-fs warning (device loop9): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 326.781649][T16983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4136'. [ 326.816610][T16968] EXT4-fs (loop9): mount failed [ 326.886707][T16986] loop2: detected capacity change from 0 to 128 [ 326.917019][T16986] EXT4-fs: Ignoring removed nobh option [ 326.931112][T16986] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.966411][T16986] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 327.058982][T16032] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.067787][T16999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4142'. [ 327.078180][T16996] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 327.087887][T16996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.316016][T17025] vlan0: entered promiscuous mode [ 327.358694][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 327.458836][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4155'. [ 327.478116][T17037] loop2: detected capacity change from 0 to 512 [ 327.486991][T16993] lo speed is unknown, defaulting to 1000 [ 327.533189][T17037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.593003][T17037] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.745930][T17067] loop1: detected capacity change from 0 to 128 [ 327.749948][T16993] chnl_net:caif_netlink_parms(): no params data found [ 327.753071][T17067] EXT4-fs: Ignoring removed nobh option [ 327.779207][T17067] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.805719][T17067] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 327.830087][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4165'. [ 327.868799][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.875927][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.900915][T16032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.910551][T16993] bridge_slave_0: entered allmulticast mode [ 327.926487][T12741] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.926739][T16993] bridge_slave_0: entered promiscuous mode [ 327.942969][T16993] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.950889][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.958977][T16993] bridge_slave_1: entered allmulticast mode [ 327.965772][T16993] bridge_slave_1: entered promiscuous mode [ 328.008294][T17082] Invalid ELF header magic: != ELF [ 328.008383][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 328.008460][ T28] audit: type=1400 audit(2000000166.920:11253): avc: denied { module_load } for pid=17081 comm="syz.1.4168" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 328.052875][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4167'. [ 328.067866][T17082] loop1: detected capacity change from 0 to 512 [ 328.123890][T17082] EXT4-fs: Ignoring removed oldalloc option [ 328.134860][T17082] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4168: Parent and EA inode have the same ino 15 [ 328.147292][T17082] loop1: lost filesystem error report for type 5 error -117 [ 328.176590][T16993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.195136][T17082] EXT4-fs (loop1): 1 orphan inode deleted [ 328.201941][T17082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.219863][T17082] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4168: invalid indirect mapped block 234881024 (level 0) [ 328.234655][T17082] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 328.241436][T16993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.275024][T17082] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4168' sets config #0 [ 328.323982][T16993] team0: Port device team_slave_0 added [ 328.334030][T16993] team0: Port device team_slave_1 added [ 328.373903][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.416555][T16993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.423587][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.450300][T16993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.475573][T17098] loop2: detected capacity change from 0 to 4096 [ 328.487195][T17098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 328.507640][T16993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.514740][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.541504][T16993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.620266][T16993] hsr_slave_0: entered promiscuous mode [ 328.635654][T16993] hsr_slave_1: entered promiscuous mode [ 328.661527][T16993] debugfs: 'hsr0' already exists in 'hsr' [ 328.667369][T16993] Cannot create hsr debugfs directory [ 328.747763][T17111] loop9: detected capacity change from 0 to 8192 [ 329.048959][T17132] program syz.1.4180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.118942][T16993] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.131356][T16993] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.143578][T16993] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.177380][T16993] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.307281][T16993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.320337][T16993] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.335566][T14143] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.342707][T14143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.363286][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.370479][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.379464][T16032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.561512][T16993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.772803][T16993] veth0_vlan: entered promiscuous mode [ 329.783084][T16993] veth1_vlan: entered promiscuous mode [ 329.818947][T17213] netlink: 'syz.2.4191': attribute type 21 has an invalid length. [ 329.826927][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4191'. [ 329.854363][T16993] veth0_macvtap: entered promiscuous mode [ 329.877659][T16993] veth1_macvtap: entered promiscuous mode [ 329.953729][T16993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.022701][T17225] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 330.023176][ T28] audit: type=1400 audit(2000000168.930:11254): avc: denied { accept } for pid=17224 comm="syz.2.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 330.043310][T16993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.157625][ T29] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.158424][T17237] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4196'. [ 330.169434][ T29] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.225129][ T29] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.249581][ T29] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.286663][T17145] loop9: detected capacity change from 0 to 512 [ 330.358617][T17255] netlink: 'syz.3.4137': attribute type 2 has an invalid length. [ 330.427750][T17263] loop1: detected capacity change from 0 to 512 [ 330.462275][T17263] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 330.528326][T17263] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 330.601625][T17263] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.4202: inode #15: comm syz.1.4202: iget: illegal inode # [ 330.614395][T17263] loop1: lost filesystem error report for type 5 error -117 [ 330.621714][T17145] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 330.649918][T17263] EXT4-fs (loop1): Remounting filesystem read-only [ 330.657220][T17263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.677416][T17145] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4184: invalid indirect mapped block 8 (level 2) [ 330.692039][T17145] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 330.711332][T17145] EXT4-fs (loop9): Remounting filesystem read-only [ 330.755926][T17145] EXT4-fs (loop9): 1 truncate cleaned up [ 330.774871][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.783450][T17145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.020416][T17310] EXT4-fs (loop1): 1 orphan inode deleted [ 331.022237][T17145] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17145 comm=syz.9.4184 [ 331.056859][T14143] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 331.066829][T14143] EXT4-fs error (device loop1): ext4_release_dquot:7027: comm kworker/u8:20: Failed to release dquot type 1 [ 331.068186][T17310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.080175][T14143] loop1: lost filesystem error report for type 5 error -117 [ 331.174987][T17310] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.203746][T17315] lo speed is unknown, defaulting to 1000 [ 331.325080][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.472686][T17335] lo speed is unknown, defaulting to 1000 [ 331.515726][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4223'. [ 331.611417][T17359] tipc: Started in network mode [ 331.616539][T17359] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 331.626193][T17359] tipc: Enabling of bearer rejected, failed to enable media [ 331.665139][T17364] netlink: 'syz.1.4224': attribute type 1 has an invalid length. [ 331.829923][T17382] set_capacity_and_notify: 1 callbacks suppressed [ 331.829941][T17382] loop1: detected capacity change from 0 to 512 [ 331.909419][T17396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17396 comm=syz.8.4229 [ 331.925288][T17398] loop2: detected capacity change from 0 to 128 [ 331.938233][T17382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.960977][T17382] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.973472][T13742] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.981107][T17382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4226'. [ 331.997571][T17398] EXT4-fs: Ignoring removed nobh option [ 332.033429][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.070814][T17398] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.136951][T17398] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 332.179889][ T28] audit: type=1400 audit(2000000171.090:11255): avc: denied { ioctl } for pid=17417 comm="syz.3.4237" path="socket:[56617]" dev="sockfs" ino=56617 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 332.236231][T17429] loop1: detected capacity change from 0 to 512 [ 332.272957][T17429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.276710][T16032] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.314762][ T28] audit: type=1400 audit(2000000171.220:11256): avc: denied { write } for pid=17428 comm="syz.1.4238" path=2F3233312F66696C65302F66696C65302F233138202864656C6574656429 dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 332.390255][T17438] loop9: detected capacity change from 0 to 2048 [ 332.452950][T17438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=17438 comm=syz.9.4241 [ 332.677644][T17459] loop2: detected capacity change from 0 to 4096 [ 332.732896][T17459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.794807][T17459] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.4248: invalid fast symlink length 131109 [ 332.830078][T16032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.915773][T17487] loop9: detected capacity change from 0 to 128 [ 332.942487][T17487] EXT4-fs: Ignoring removed nobh option [ 332.968827][T17487] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.008652][T17487] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.071645][T12741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.111251][T13742] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.248366][T17522] loop9: detected capacity change from 0 to 128 [ 333.274799][T17522] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 333.335602][T17530] netlink: 'syz.2.4267': attribute type 10 has an invalid length. [ 333.351479][T17522] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.378493][T17530] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 333.392616][ T28] audit: type=1400 audit(2000000172.310:11257): avc: denied { unmount } for pid=12741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 333.410078][T17537] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 333.454917][ T29] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.515224][T17544] loop1: detected capacity change from 0 to 128 [ 333.524201][T17547] loop9: detected capacity change from 0 to 512 [ 333.552042][T17547] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 333.563043][T17547] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 333.568203][T17544] EXT4-fs: Ignoring removed nobh option [ 333.573120][T17547] EXT4-fs (loop9): group descriptors corrupted! [ 333.666068][T17544] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.729755][T17544] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.850599][T12741] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.941269][T17592] loop1: detected capacity change from 0 to 164 [ 333.973700][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4286'. [ 333.996010][T17592] Unsupported NM flag settings (240) [ 334.047554][T17599] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4287'. [ 334.160446][T17607] netlink: 'syz.1.4290': attribute type 4 has an invalid length. [ 334.382469][T17630] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4296'. [ 334.447824][T17630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.474779][T17630] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 334.525176][T16032] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.692456][T17646] EXT4-fs (loop2): #clusters per group too big: 16384 [ 335.094165][T17681] netlink: 'syz.8.4315': attribute type 3 has an invalid length. [ 335.167959][T17692] FAULT_INJECTION: forcing a failure. [ 335.167959][T17692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.181111][T17692] CPU: 1 UID: 0 PID: 17692 Comm: syz.2.4321 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 335.181208][T17692] Tainted: [W]=WARN [ 335.181283][T17692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 335.181308][T17692] Call Trace: [ 335.181316][T17692] [ 335.181324][T17692] __dump_stack+0x1d/0x30 [ 335.181361][T17692] dump_stack_lvl+0x95/0xd0 [ 335.181392][T17692] dump_stack+0x15/0x1b [ 335.181419][T17692] should_fail_ex+0x263/0x280 [ 335.181457][T17692] should_fail+0xb/0x20 [ 335.181557][T17692] should_fail_usercopy+0x1a/0x20 [ 335.181655][T17692] _copy_from_iter+0xcf/0xea0 [ 335.181695][T17692] ? alloc_pages_mpol+0x217/0x260 [ 335.181739][T17692] copy_page_from_iter+0x178/0x2a0 [ 335.181803][T17692] tun_get_user+0xbbd/0x27c0 [ 335.181833][T17692] ? ref_tracker_alloc+0x1f2/0x2f0 [ 335.181927][T17692] tun_chr_write_iter+0x15e/0x210 [ 335.181956][T17692] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 335.181977][T17692] vfs_write+0x5a6/0x9f0 [ 335.182031][T17692] ksys_write+0xdc/0x1a0 [ 335.182100][T17692] __x64_sys_write+0x40/0x50 [ 335.182145][T17692] x64_sys_call+0x2847/0x3000 [ 335.182178][T17692] do_syscall_64+0xc0/0x2a0 [ 335.182293][T17692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.182412][T17692] RIP: 0033:0x7f18d0aeb84e [ 335.182433][T17692] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 335.182504][T17692] RSP: 002b:00007f18cf586fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 335.182528][T17692] RAX: ffffffffffffffda RBX: 00007f18cf5876c0 RCX: 00007f18d0aeb84e [ 335.182542][T17692] RDX: 0000000000000011 RSI: 0000200000000840 RDI: 00000000000000c8 [ 335.182557][T17692] RBP: 00007f18cf587090 R08: 0000000000000000 R09: 0000000000000000 [ 335.182624][T17692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.182642][T17692] R13: 00007f18d0da6038 R14: 00007f18d0da5fa0 R15: 00007ffd53a87b78 [ 335.182668][T17692] [ 335.213002][T17691] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4320'. [ 335.536939][T17709] netlink: 'syz.8.4326': attribute type 6 has an invalid length. [ 335.553790][T17709] netlink: 'syz.8.4326': attribute type 10 has an invalid length. [ 335.561751][T17709] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4326'. [ 335.586544][T17709] dummy0: entered promiscuous mode [ 335.591785][T17709] dummy0: entered allmulticast mode [ 335.605496][T17709] team0: Port device dummy0 removed [ 335.617027][T17709] bridge0: port 3(dummy0) entered blocking state [ 335.623492][T17709] bridge0: port 3(dummy0) entered disabled state [ 335.634700][ T7700] loop2: p1[EZD] p2 p3 p4 [ 335.646641][ T7700] loop2: p3 start 117772289 is beyond EOD, truncated [ 335.653469][ T7700] loop2: p4 size 262144 extends beyond EOD, truncated [ 335.696699][T17700] loop2: p1[EZD] p2 p3 p4 [ 335.702607][T17700] loop2: p3 start 117772289 is beyond EOD, truncated [ 335.709407][T17700] loop2: p4 size 262144 extends beyond EOD, truncated [ 335.881985][T17729] FAULT_INJECTION: forcing a failure. [ 335.881985][T17729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.895220][T17729] CPU: 1 UID: 0 PID: 17729 Comm: syz.2.4334 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 335.895285][T17729] Tainted: [W]=WARN [ 335.895295][T17729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 335.895328][T17729] Call Trace: [ 335.895405][T17729] [ 335.895415][T17729] __dump_stack+0x1d/0x30 [ 335.895447][T17729] dump_stack_lvl+0x95/0xd0 [ 335.895473][T17729] dump_stack+0x15/0x1b [ 335.895572][T17729] should_fail_ex+0x263/0x280 [ 335.895609][T17729] should_fail+0xb/0x20 [ 335.895702][T17729] should_fail_usercopy+0x1a/0x20 [ 335.895742][T17729] _copy_to_user+0x20/0xa0 [ 335.895766][T17729] simple_read_from_buffer+0xb5/0x130 [ 335.895863][T17729] proc_fail_nth_read+0x10e/0x150 [ 335.895937][T17729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.895962][T17729] vfs_read+0x1ab/0x7f0 [ 335.896060][T17729] ? __rcu_read_unlock+0x4e/0x70 [ 335.896092][T17729] ? __fget_files+0x184/0x1c0 [ 335.896119][T17729] ? mutex_lock+0x57/0x90 [ 335.896200][T17729] ksys_read+0xdc/0x1a0 [ 335.896236][T17729] __x64_sys_read+0x40/0x50 [ 335.896277][T17729] x64_sys_call+0x2889/0x3000 [ 335.896305][T17729] do_syscall_64+0xc0/0x2a0 [ 335.896396][T17729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.896426][T17729] RIP: 0033:0x7f18d0aeb84e [ 335.896447][T17729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 335.896503][T17729] RSP: 002b:00007f18cf586fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.896525][T17729] RAX: ffffffffffffffda RBX: 00007f18cf5876c0 RCX: 00007f18d0aeb84e [ 335.896585][T17729] RDX: 000000000000000f RSI: 00007f18cf5870a0 RDI: 0000000000000006 [ 335.896599][T17729] RBP: 00007f18cf587090 R08: 0000000000000000 R09: 0000000000000000 [ 335.896616][T17729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.896632][T17729] R13: 00007f18d0da6038 R14: 00007f18d0da5fa0 R15: 00007ffd53a87b78 [ 335.896659][T17729] [ 336.123430][ T7700] udevd[7700]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 336.143846][T12025] udevd[12025]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 336.155534][ T7701] udevd[7701]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 336.207105][ T7701] udevd[7701]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 336.210051][ T7700] udevd[7700]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 336.220037][T12025] udevd[12025]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 336.243665][T17743] netlink: 'syz.8.4338': attribute type 1 has an invalid length. [ 336.251693][T17743] netlink: 'syz.8.4338': attribute type 2 has an invalid length. [ 336.302877][T17741] netlink: 'syz.8.4338': attribute type 1 has an invalid length. [ 336.310786][T17741] netlink: 'syz.8.4338': attribute type 3 has an invalid length. [ 336.329647][T17712] ================================================================== [ 336.337893][T17712] BUG: KCSAN: data-race in atime_needs_update / inode_update_time [ 336.345764][T17712] [ 336.348127][T17712] write to 0xffff888119a12c8c of 4 bytes by task 17708 on cpu 1: [ 336.355960][T17712] inode_update_time+0x2cc/0x360 [ 336.360947][T17712] file_update_time_flags+0x277/0x2e0 [ 336.366375][T17712] file_update_time+0x17/0x20 [ 336.371103][T17712] shmem_file_write_iter+0x9c/0xf0 [ 336.376266][T17712] iter_file_splice_write+0x6bc/0xa80 [ 336.381696][T17712] direct_splice_actor+0x156/0x2a0 [ 336.386953][T17712] splice_direct_to_actor+0x311/0x670 [ 336.392387][T17712] do_splice_direct+0x119/0x1a0 [ 336.397283][T17712] do_sendfile+0x382/0x650 [ 336.401736][T17712] __x64_sys_sendfile64+0x105/0x150 [ 336.406973][T17712] x64_sys_call+0x2db1/0x3000 [ 336.411792][T17712] do_syscall_64+0xc0/0x2a0 [ 336.416339][T17712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.422459][T17712] [ 336.424844][T17712] read to 0xffff888119a12c8c of 4 bytes by task 17712 on cpu 0: [ 336.432510][T17712] atime_needs_update+0x2a8/0x3e0 [ 336.437597][T17712] touch_atime+0x4a/0x330 [ 336.441974][T17712] shmem_file_read_iter+0x477/0x540 [ 336.447231][T17712] copy_splice_read+0x471/0x6c0 [ 336.452222][T17712] splice_direct_to_actor+0x28f/0x670 [ 336.457663][T17712] do_splice_direct+0x119/0x1a0 [ 336.462580][T17712] do_sendfile+0x382/0x650 [ 336.467052][T17712] __x64_sys_sendfile64+0x105/0x150 [ 336.472311][T17712] x64_sys_call+0x2db1/0x3000 [ 336.477032][T17712] do_syscall_64+0xc0/0x2a0 [ 336.481596][T17712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.487524][T17712] [ 336.489876][T17712] value changed: 0x0e4e28d8 -> 0x0f07fcd5 [ 336.495709][T17712] [ 336.498059][T17712] Reported by Kernel Concurrency Sanitizer on: [ 336.504247][T17712] CPU: 0 UID: 0 PID: 17712 Comm: syz.1.4327 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 336.515665][T17712] Tainted: [W]=WARN [ 336.519507][T17712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 336.529603][T17712] ==================================================================