last executing test programs: 4m7.195641302s ago: executing program 32 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0xe, 0x81, 0x6, 0xff}, {0x4, 0xf8, 0x3, 0x401}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0xfffffff8, 0x7fffffff, 0x7, {0x8, 0x0, 0x6, 0x1, 0x8}, {0xad, 0x0, 0x4, 0x40, 0x9, 0x8}, 0x5, 0x6, 0x10}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 4m1.500860525s ago: executing program 33 (id=191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 3m20.87275497s ago: executing program 34 (id=806): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/168}, 0x20) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x3, 0x0, 0xfc, 0x0, 0x104, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2141, 0x9, 0x2, 0x5, 0xfffffffffff7bbfe, 0x3, 0x0, 0x0, 0x602}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000540)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x1ffffff) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) recvfrom(r7, &(0x7f00000001c0)=""/89, 0x59, 0x2000, &(0x7f0000000280)=@nfc_llcp={0x27, r3, 0x1, 0x7, 0xb, 0x4, "6e33043a09cf99316258f8bd3b7f7a7e8be057b032cca7d666dfb6ceb7e01df84a8afcef1bcc83dfd33430db929f9739ce60cc40757d29f97a5ff45d64a8a5", 0x10}, 0x80) write$nci(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) 2m6.148619317s ago: executing program 1 (id=1900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 2m6.073393041s ago: executing program 1 (id=1903): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0xe4, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='task\x00') exit(0x81) read$ptp(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x9, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x100, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @random="d39ab7a1ea86"}, @NDA_LINK_NETNSID={0x8, 0xa, 0x3e}]}, 0x30}}, 0x40000) fchdir(r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(r3, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r8, &(0x7f00000002c0)={0x2, 0xce23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x8}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2m5.219441261s ago: executing program 1 (id=1924): memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x200, 0xd, 0xfffffffb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xe, 0x81, 0x6, 0xff}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 2m4.437579287s ago: executing program 6 (id=1946): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRES8=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000004a00010027bd7000ffdbdf2d0a008000", @ANYRES32=0x0, @ANYBLOB="8000000014000100fe8000000002040000000000000000aa"], 0x30}, 0x1, 0x0, 0x0, 0x4044800}, 0x800) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000cc0, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d660551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000230048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c50500721fc7aa2a583726c64c0fb6ca996d278fb00bba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee93f9959e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f54d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8989d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501ae03002af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909eb08cca312c557bff04cf1fbb0dcfe8ac00"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0x4d, 0x0, &(0x7f0000000500)="88000000000000000000000000002a0cecf2d2289cdcd5130e6fdd9b0250010000006af1bb33c09bab1f6d23818a9b9538fff92a235081a87ef1ede8988536a40d0d12d4856e01e1d827335145", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) symlinkat(&(0x7f0000002740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00') r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r6, 0x3518, 0xaddf, 0x2, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1000}]}}]}, 0x3c}}, 0x20004055) 2m4.312683774s ago: executing program 1 (id=1948): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m4.20880346s ago: executing program 35 (id=1948): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m4.080944518s ago: executing program 6 (id=1951): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r0}, 0x18) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1000, 0x40000) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000180)={0x1, "6823233198152e75a0e927a34861b23fb11f943c4cb94e0e41d94ed07e2b46d18bdcbe4c7ab4f9cf30f9fc1c15031178979f08ac9242629f2aa771b1107f8a55"}) getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_tcp_int(r5, 0x6, 0x1, &(0x7f00000000c0)=0x7fff, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x6d}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r8 = gettid() r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) read(r9, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r9, 0xc0605345, 0x0) tkill(r8, 0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r9, 0xc08c5335, &(0x7f0000000240)={0x101, 0x8, 0x0, 'queue0\x00', 0x5}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cb97002fbdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c0002000000"], 0x38}}, 0x30) 2m2.529334309s ago: executing program 6 (id=1967): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x710, 0x43a1bd76, 0x7, 0x20000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5db, &(0x7f0000000600)="$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") r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000300)=0x100001, 0x4) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x2a020400) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x582, 0x9, 0x5, 0x30, 0x13, "74b971903ff07fadfaa48ca20934b132c83711"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r2, 0x2}], 0x1, 0xfa) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4001}, 0x1c) r3 = inotify_init() r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x5, @remote, 0xfffffffd}}}, 0xd5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000004080)={'syztnl2\x00', &(0x7f0000004000)={'erspan0\x00', 0x0, 0x700, 0x20, 0x2, 0x1381, {{0x16, 0x4, 0x0, 0x7, 0x58, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x24, 0x78, 0x3, 0x2, [{@loopback, 0x3ff}, {@multicast2, 0x6}, {@broadcast, 0xd43d}, {@local, 0x401}]}, @ssrr={0x89, 0x1f, 0xa9, [@private=0xa010101, @rand_addr=0x64010100, @private=0xa010101, @multicast2, @multicast2, @loopback, @empty]}]}}}}}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x9) r6 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, &(0x7f0000000340)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8) 2m2.035847237s ago: executing program 6 (id=1971): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000400)="24000000da001f001007f4f900237a3c2dacc90ca509815f88bf75f940c9ecda02bcb5503904000a04f511", 0x2b) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) pipe2$9p(&(0x7f0000000240), 0x88000) io_setup(0x3, &(0x7f0000003080)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000280)=[{}], 0x0) io_submit(r3, 0x0, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="0507000000e2"], 0xa) timer_gettime(0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82}) 1m46.967003618s ago: executing program 36 (id=1971): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000400)="24000000da001f001007f4f900237a3c2dacc90ca509815f88bf75f940c9ecda02bcb5503904000a04f511", 0x2b) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) pipe2$9p(&(0x7f0000000240), 0x88000) io_setup(0x3, &(0x7f0000003080)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000280)=[{}], 0x0) io_submit(r3, 0x0, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="0507000000e2"], 0xa) timer_gettime(0x0, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82}) 1m22.603754842s ago: executing program 0 (id=2685): socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x300000000000000) 1m19.544374541s ago: executing program 0 (id=2689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000200000010000000900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1m19.502860163s ago: executing program 0 (id=2736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000ffffff80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000"], 0xfc}}, 0x0) 1m19.420489348s ago: executing program 0 (id=2737): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)) keyctl$describe(0x6, r0, &(0x7f0000000040)=""/40, 0x28) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1818714, &(0x7f0000000180)={[{@usrjquota}, {@init_itable_val}, {@nobh}, {@mblk_io_submit}, {@prjquota}, {@i_version}, {@prjquota}, {@errors_remount}, {@auto_da_alloc}, {@noinit_itable}, {@nodioread_nolock}]}, 0xe3, 0x47c, &(0x7f0000000280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x5000, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000000840)=""/65, 0x41) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = syz_clone(0x8001200, 0x0, 0x0, &(0x7f0000001400), 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee00}}}], 0x40, 0x8840}, 0x4000000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001180)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c050023eb3d259266ec9c37865c6c1b4640ce2400bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf770379ff6dcfd54f11ed2c41d078b9cf1fc8f72566153c97ffdc11f30ea6b16b694bb4a6e4606c3fb19d1d2bc3c8c4e97da2213f9d5c3c4891f9150d6850d00c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8fffb58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0484084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835acdabd60da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98f02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23dfd8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc575341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374f000000000000000725e75c257834572026c511f57dce67153a4008f9e75e07edfd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="9c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a68001280110001006272696467655f736c617665000000005000058005001900030000000500050000000000080025000000000006001f00d500000005000a0000000000040018000500060001000000060002000100000005001e000000000006001f0006000000140003006272696467655f736c6176655f3000007cc7c28f3f08aaf6fb02cb2a4049e595d5650467e3750ca9ff"], 0x9c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1m19.187759091s ago: executing program 0 (id=2743): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0xc0004, 0x0) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x5) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) shutdown(r2, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280080001400000000005000200fc000000240001800b000100736f636b6574000014"], 0xfc}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000340), 0x0}, 0x20) r7 = fsmount(r1, 0x1, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x1000007fd) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 1m17.340678819s ago: executing program 0 (id=2789): r0 = socket$inet6(0xa, 0x3, 0x8) gettid() mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xe}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) 1m17.272673483s ago: executing program 37 (id=2789): r0 = socket$inet6(0xa, 0x3, 0x8) gettid() mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xe}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) 1m13.101986547s ago: executing program 9 (id=2841): r0 = socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) tee(r0, r0, 0x6, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f00000003c0)=""/10, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x49) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x8004}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000240)='syzkaller\x00', 0xb, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x28}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc1ffb}]}) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) r4 = socket(0x1, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x4000010) (async) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r5 = creat(&(0x7f0000000880)='./file0\x00', 0x0) (rerun: 32) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) (async) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) (async) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) (async, rerun: 32) r7 = epoll_create1(0x80000) (async, rerun: 32) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)={0x0, 0x0}) syz_open_procfs(r8, &(0x7f00000004c0)='net/ip_vs_stats\x00') epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x180, 0x12, 0x60a, 0x180, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [0x0, 0x0, 0xff], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffffffff, 0x8b, 0xd2, 0x4, 0x4, 0x4, 0xa216}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x8, 0x6, 0x59b25666, 'netbios-ns\x00', 'syz1\x00', {0x251}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0x138, 0x168, 0x0, {}, [@common=@srh1={{0x90}, {0x3c, 0x1, 0xd1, 0x1, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, [0xff, 0xffffff00, 0x0, 0xffff00], [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xffffffff, 0xff, 0xff000000], 0x900, 0x804}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xffffffff, 0x1, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 1m12.966766455s ago: executing program 9 (id=2843): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e28, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0xa4, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 1m12.917587598s ago: executing program 9 (id=2845): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000001000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) 1m12.820461994s ago: executing program 9 (id=2848): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0xfeda) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3ffe, @private2, 0x6}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000009c0)={[{@jqfmt_vfsv0}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@auto_da_alloc}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$eJzs3U1rXFUfAPD/nUzSNu3zNIVS1IUUurBSO2kSXyoI1pWIFgu6r0MyDSWTTslMShMLtgu7cSNFELEgfgD3LotfwE9R0EKREnQhQuRO7qTTZCavE2fS+f3gtufMuTfn/nPuOTln7gw3gL51Mv0nF/FiRHydRBxtKstHVnhyZb+lJ7cm0y2J5eVP/kgiyV5r7J9k/x/OMi9ExC9fRpzJra+3urA4UyyXS3NZfrQ2e320urB49upscbo0Xbo2PjFx/o2J8bfferNjsb566a/vPn7wwfmvTi19+9OjY/eSuBBHsrLmOHbhdnPmZPGfLDUYF9bsONaBynpJ0u0TYEcGsn4+GOkYcDQGsl4PPP++iIhloE8l+j/0qcY8oLG279A6eN94/N7KAqge+1Bz/PmV90biYH1tNLyUPLMySte7Ix2oP63j59/v30u32Ph9iEOb5AG25fadiDiXz68f/5Ns/Nu5c/U3jze2to5++/sD3fQgnf+81mr+l1ud/0SL+c/hFn13Jzbv/7lHHaimrXT+907L+e/q0DUykOX+V5/zDSZXrpZL5yLi/xFxOgYPpPmN7uecX3q43K6sef6Xbmn9jblgdh6P8geePWaqWCtGxNBu4m54fCfipXyr+JPV9k9atH/6+7i0xTpOlO6/3K5s8/j31vKPEa+0bP+nd7SSje9Pjtavh9HGVbHen3dP/Nqu/m7Hn7b/8MbxjyTN92ur26/jh4N/l9qVpfEP7+D6H0o+racbneBmsVabG4sYSj5a//r402Mb+cb+afynT63E/+xkJbfh9Z8uvj7bYvx3j99tu2svtP/Uttp/+4mHH37+fbv6tzb+vV5Pnc5eyca/1rJrZasnuNvfHwAAAAAAAPSSXEQciSRXWE3ncoXCyuc7jsdwrlyp1s5cqcxfm4r6d2VHYjDXuNN9tOnzEGPZ52Eb+fE1+YmIOBYR3wwcqucLk5XyVLeDBwAAAAAAAAAAAAAAAAAAgB5xuM33/1O/DXT77IA9V3+wwYFunwXQDZs+8r8TT3oCetKm/R94bun/0L/0f+hfa/t/R54sDOwL/v5D/9L/oX/p/9C/9H8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqEsXL6bb8tKTW5NpfurGwvxM5cbZqVJ1pjA7P1mYrMxdL0xXKtPlUmGyMrvZzytXKtfHxmP+5mitVK2NVhcWL89W5q/VLl+dLU6XLpcG/5OoAAAAAAAAAAAAAAAAAAAAYH+pLizOFMvl0txqIp+VzK0v6tPEu9ETp7GXAa7Y0eH5XolibxLvD/TEaewmcSdr3u0d1aUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa+DcAAP//Rm0oPg==") r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf5c6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="146ab8400000", @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20044080) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000002080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x9, 0x40, 0x7, 0x7ffd1ffb}]}) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = fsopen(&(0x7f0000000380)='ocfs2_dlmfs\x00', 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x2, 0x12) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x4042, 0x0) write$binfmt_format(r8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000240)=[{0x2, 0x0, {0x2, 0x1, 0x3}, {0x2, 0x0, 0x1}, 0x0, 0x2}, {0x3, 0x0, {0x0, 0x1, 0x2}, {0x1, 0x1, 0x1}, 0x2}, {0x2, 0x0, {0x0, 0x0, 0xa}, {0x1, 0xf0, 0x2}, 0x0, 0xfe}], 0x60) io_uring_setup(0x6b5d, &(0x7f0000000080)={0x0, 0xcfd8, 0x2, 0x1, 0x4c}) syz_open_pts(r8, 0x7c3080) 1m11.954039034s ago: executing program 9 (id=2853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x0) 1m11.563780177s ago: executing program 9 (id=2860): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x2, 0x7fff0000}]}) inotify_init() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000240)="ffffe60780bff6554905925105e7", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f400d1ccab780d99b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r6}, 0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c580"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x0, 0x1, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="5435f423282000000000000084fb70747cf5c769fc989154e933b436fed7ee20b4a905ad066054fba07ac734ca6214ddb6f6391209f8ffffffffffffff12ad6cb6e86969f8a13db710da31104e2018b532333a6a8e3b19903884de6155d19bb100252b92894a2c", @ANYRES32, @ANYBLOB, @ANYRES64=r9], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x4, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="1c00000022000000", @ANYRES32=r4, @ANYBLOB="38a62583a46ee0d0089fd7f80b1eb1cb5a934b81f5671cd9fafb9d926948acc8b4e977a58694974bd9119f55e1c6f23f074a2b7135f7a47f0b9634fa152a869c156dd90688fff4962f32eb584438676e87b4f545cfe857ae767a4398504a5948e43b2bc4f7fa567a633cefbc620b1e9836122a78c177715a4b48cb7f314926648bf5531c10dd5f85d52015202ea1dd75b0191577245f9251", @ANYRES32=r10, @ANYRES64=r9], 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x7ff, 0x0, r1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r11, @ANYRES32=r0, @ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="509293a1f5dc534503ae5fb11e56c842b6b642db2464ab4cb1091337a8f343491182e25254c362de6e679e9b196a2314922f982a8c3c2fd6a5694b5bd001ef11fb25de02f576169b2d7a02daf45d72b56317929dbcfabb15cdfbda5ba48770ecdc3c8caad82ee0d078961abe530144f0dbb8337310a0a1bb05cc981fc094948c551fb1d6c954b05b85c405d1865848a9d5759ae85e4226efe81ff7885b6785bd", @ANYRES32=r0, @ANYBLOB, @ANYRES64=r9], 0x20) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x19) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r2, 0x25, 0x10, @void}, 0x10) 1m11.469419453s ago: executing program 38 (id=2860): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x2, 0x7fff0000}]}) inotify_init() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000240)="ffffe60780bff6554905925105e7", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f400d1ccab780d99b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r6}, 0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c580"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x0, 0x1, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="5435f423282000000000000084fb70747cf5c769fc989154e933b436fed7ee20b4a905ad066054fba07ac734ca6214ddb6f6391209f8ffffffffffffff12ad6cb6e86969f8a13db710da31104e2018b532333a6a8e3b19903884de6155d19bb100252b92894a2c", @ANYRES32, @ANYBLOB, @ANYRES64=r9], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x4, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="1c00000022000000", @ANYRES32=r4, @ANYBLOB="38a62583a46ee0d0089fd7f80b1eb1cb5a934b81f5671cd9fafb9d926948acc8b4e977a58694974bd9119f55e1c6f23f074a2b7135f7a47f0b9634fa152a869c156dd90688fff4962f32eb584438676e87b4f545cfe857ae767a4398504a5948e43b2bc4f7fa567a633cefbc620b1e9836122a78c177715a4b48cb7f314926648bf5531c10dd5f85d52015202ea1dd75b0191577245f9251", @ANYRES32=r10, @ANYRES64=r9], 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x7ff, 0x0, r1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r11, @ANYRES32=r0, @ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="509293a1f5dc534503ae5fb11e56c842b6b642db2464ab4cb1091337a8f343491182e25254c362de6e679e9b196a2314922f982a8c3c2fd6a5694b5bd001ef11fb25de02f576169b2d7a02daf45d72b56317929dbcfabb15cdfbda5ba48770ecdc3c8caad82ee0d078961abe530144f0dbb8337310a0a1bb05cc981fc094948c551fb1d6c954b05b85c405d1865848a9d5759ae85e4226efe81ff7885b6785bd", @ANYRES32=r0, @ANYBLOB, @ANYRES64=r9], 0x20) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x19) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r2, 0x25, 0x10, @void}, 0x10) 7.992535402s ago: executing program 4 (id=3302): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x9927000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) 7.879495569s ago: executing program 4 (id=3306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd00051100040000"], 0xfdef) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x6}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket(0xa, 0x1, 0x100ff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x20005}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7d}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x541001, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/36, 0x24}, 0x401}], 0x1, 0x102, 0x0) accept$inet6(r2, 0x0, &(0x7f0000000300)) 7.707920099s ago: executing program 4 (id=3309): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, 0x0, &(0x7f0000000100)) r4 = dup(r3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8919, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x20, 0x7, 0x2, 0x2, {{0x1f, 0x4, 0x3, 0x3a, 0x7c, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast1, @broadcast, {[@end, @timestamp_prespec={0x44, 0x24, 0xde, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x506d}, {@remote, 0x9}, {@private=0xa010102, 0x9}, {@loopback, 0x7}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x31, 0x1, [{0x6, 0xb, "551eaaa5418176b31e"}, {0x7, 0xe, "dbce8d58fa81a82c3ce905e8"}, {0x7, 0xd, "dc34a575d042f29ab6cd28"}, {0x1, 0x3, "7f"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x5, [{@remote, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x3, 0xff, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x66, 0x0, 0x7, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x30}, {[@lsrr={0x83, 0xf, 0x89, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'macsec0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) ioctl$SNAPSHOT_FREE(r5, 0x3305) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9], 0x1c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, 0x0, 0x20000800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r10) 7.452366844s ago: executing program 4 (id=3312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1818714, &(0x7f0000000180)={[{@usrjquota}, {@init_itable_val}, {@nobh}, {@mblk_io_submit}, {@prjquota}, {@i_version}, {@prjquota}, {@errors_remount}, {@auto_da_alloc}, {@noinit_itable}, {@nodioread_nolock}]}, 0xe3, 0x47c, &(0x7f0000000280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc496cf5de499ae74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+60000000}}, &(0x7f0000000140)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c9002002900000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000002b800000000000000ffffffff0000000009000000000000000a0000000000000000000000000089193316a55b4b56000000000600"/192]) 7.202682768s ago: executing program 4 (id=3320): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1b4, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @empty, 0x7fffffff}}}}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5a153af8fe534846c1ee215ce85797ce09b5911e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x204}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0xc050}, 0x20004004) 6.652432901s ago: executing program 4 (id=3325): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x669, @empty, 0xfffffffa}, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e23, @remote}], 0x3c) 6.579347405s ago: executing program 39 (id=3325): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x669, @empty, 0xfffffffa}, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e23, @remote}], 0x3c) 1.727296748s ago: executing program 5 (id=3395): r0 = getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0x3}, 0x12000}, r0, 0x0, 0xffffffffffffffff, 0x1) 1.674781602s ago: executing program 3 (id=3396): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x81}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e22, 0x83c, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}}, 0x5, 0x6, 0xfff, 0x916, 0x128, 0x9, 0xa6}, 0x9c) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000200), 0xaa9f, 0x4000) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000280)={&(0x7f0000000240)=""/56, 0x38, 0x3c, 0x900}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x80, 0xebe, 0x50, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x80, 0x10000, 0x4b3}}) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0xf, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@exit, @exit, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1a, '\x00', r4, 0x25, r1, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xa, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0xffffffffffffffff, r0, r5], &(0x7f0000000500)=[{0x3, 0x1, 0x7, 0x7}, {0x5, 0x1, 0x1, 0x4}, {0x4, 0x5, 0x2, 0xb}, {0x2, 0x4, 0x0, 0x8}], 0x10, 0x3e}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x731140) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000640)={{0xffffffffffffffff, 0x1, 0x400, 0x0, 0x8}, 0x2, 0xb, 'id1\x00', 'timer1\x00', 0x0, 0x6, 0x5a2c, 0x4, 0x200}) (async) write$cgroup_subtree(r1, &(0x7f0000000740)={[{0x2d, 'rlimit'}, {0x2b, 'net_prio'}, {0x2b, 'io'}, {0x2b, 'cpuacct'}, {0x2b, 'io'}, {0x2d, 'net_cls'}, {0x2b, 'perf_event'}, {0x2d, 'pids'}]}, 0x3e) (async) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r8 = openat(r3, &(0x7f00000007c0)='./file0\x00', 0x22aa82, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000002a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a40)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWTABLE={0xd4, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x9f, 0x6, "f23db07b4f6354f886c5e500a2354128095c3ab69d56427e18dd5db0cc43ce33ae37ae70ed7f62c8f15e3bf44eb0415b9c48bbf4e9b0ccf48d91b78cfe1d337133f58ba6949b1bfb3a7231f07475d2f1b640859c185004382ffb471f6675c2591058ed10dda7c787d056047f599e27a88fdeccb5361b7e94e96213e36bca575c6601d5d867f96612f2241b6d80f83f57422eb7751bd0a69d0559d2"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2070, 0xe, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2048, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0x80, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7c, 0x1, "89712cc98cf43c70b1ad25bb9ba65f6fce8ba280f53c071541b8cd81b32215d4b136ff82befc85b0f107d74c66ddf231937ad4a76a1b1b2aa2034574b55558833b5fc04bfcbc78c52682ffd7eca2b0093f96040899ecc80bf5c285c22312c48188db74450b6568b4b38a25affff1c8bd2b0b610aea77b2ad"}]}]}, {0x168, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x164, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x54, 0x1, "e48b0490ef443d34e33747b4b32513669ef1ac313199f6a7ae7800eb7f751810aa207c495f2f4399986443a13fc8ab7a3ed16d384e8f12cfcd1db6164da003495216d9e570e742410b1ad7bbeff41e68"}, @NFTA_DATA_VALUE={0x52, 0x1, "08f5a2845cd44232c4ea90152b44ac5314129ee9906cb31093a094ebe21caedf0ce056bf89edce635d78c243737d9de4fcc02fee19668b0f8d3680f88e5ad82be04177106c62bcdd70f751140c51"}, @NFTA_DATA_VALUE={0xb5, 0x1, "68117e6965cba902cb010662413d598edeb460f90dab1f151375bf108c504b590d9e7c18ae362e5634a8423fb27fadcf27f05b2454e0bbae9095815acd7986f184fefa60a1b9314c7b7d635f7b412c12249226f0ea1ae8ee83b464e981dc644316f026a474da93b3bfb2c79eb42ab345ff3813ee196217df4c4979ed8ee0587a6c8d7c3701172dde91af3fead6d734b45f7e1370b820f011c22378d42c2a20d156e61195bf69bf1570ea3d5df71fe9d2a1"}]}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, {0x102c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x101c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x59c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x420, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x414, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x258, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "7c610870ab4b884ed82525ca9a044996e037207a908b54dddcc1f4a52b1253ac79a094c4c9702698c1996a55e7aaea5f0f0745caa8153567939891c65c61e948ae0442acdfe79badbced96abda40f056ded23750955b353581ed35491dd29bf372fe3eb1b9d6eaed8992ea4bff423839fe69390b091ecd9321a53cdb570cf54570d6e4f7d1cf6822ff00372fc2b02f9e155824c3dab2a120b9db754f17b61de9f77bc57e166f7523d54553ec254d74ae"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd3, 0x1, "de1efaed0b5be6c0e713e87cf701f00866e9513a38ae4086380079a7699a4b7dc2bd66501cc9a770b4b9481d5020550d6fb50ab2997b83c1af8794b294abdea6bc0b7f7fb41ba525f2b36381eddc01c9082ce5d76bfe69c92f2dc7970a13038b646ca64fe725e18cd08771dd4b09754fdfea3efbb14c702b3d32ef86d0215e4a52b08c2e8fc620bf9584cf929dfd67c9f2bdc2238f39c96cd8e951341970973d00012ac5e0d80d90f7c45ac9b8e31c54cb3bf1e0c9af5cfdf9830d44935e404fc56ddf38826a66e9cb7a5a00024cf1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "7f570e699467ec9e23d17f9c4b157871a613f1beffa1d421767b79b6d7eda0cd2cee5d26c167b7cbdeb94779fae329634e29d4adb1d52a6a27b03231add24b8de890f37755ac3ac0ebc709910e2688a5642bf3e210f758906f60c682c8073ac359d4bf6f7284ac3632e2c0"}]}, @NFTA_CMP_DATA={0x1b8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x95, 0x1, "327b70438eb031dc43386b1dea3b4151d6540c454c028e2a2c7f31e7337a008992840b19fb2f5c351d38249afae16c768f85613ef2f2773c111dfbe6cdb0c633d9ec4486270e229d4006e459e6020e98f454e29e019dbe1bc2de19502070076c05a3dbe35b51ed65752242319feaeb1315829cd483cbf3ea07d0b7b9f706d266713c81b0e8ba58833d661ffdc418abc0aa"}, @NFTA_DATA_VALUE={0x79, 0x1, "434aedd01b533e505773aeffbf082accc0bd11a9ab33ecbc6ae239eab28a3b483cb7a232ea796703262324c5feb8fdf27d75f072bbdaf903874d9ecc898e0ba3f0bd774b053d997d29f9bbd80b16e94fb07e0ed9300557017e2d9a038cf6fe0236ed2cfeed91524c9030b090fefaebe202f7e9a5be"}, @NFTA_DATA_VALUE={0x26, 0x1, "024164edfb838cd067fae40afbd7d5a6e7aa42b3cc81e8eea3c120fde7d872e3b925"}]}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x144, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "70741c45cc9c903efb8dc8da8dcd8abf06ce8215791c681166edd2ce0c9ce8e92a5df5ebe4e095946601498fa53ccabaca0e4b9ca08c351929e67f78617611a603e4dd1c1315d9641ce969775c54a0183658d1f6108ca0"}, @NFTA_DATA_VALUE={0xb1, 0x1, "7cc5c10d195bc4552ff33797d3ce6ea395adfa43acc2c213ce6fbe0e1ff1928666373ac2c0758af35670f83e17bbdcbd8103bd2739dd4738e408aac8c319481c004d679262b8052e3e999ef24fdef25a531b51532ef3e0d030ea05f582adf591fa6ffcba44f4c6b49b5c15f40b3cb46fc533afb017eddbc4ab441af1ec862c2e22a1bce13b272bc0871744a220763d29a3059ec22e2093a2e7781ebcc014573805336601efdffcbfe28fd047ed"}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "4437bf6de92ef7f2799a8f4b29b0174c6225bb8680"}]}]}, {0x50c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe7}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffff4d74}, @NFTA_SET_ELEM_EXPRESSIONS={0x178, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, {0x48, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x396f}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x23}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xac87}]}}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x9d}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xd9}]}}}, {0x48, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x36}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x2fc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "2a22ae45ef363f4c3909"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf, 0x1, "f6fecfa0a81d83acfff385"}, @NFTA_DATA_VALUE={0xf5, 0x1, "63631c26808fb3b9e989c86e31040a62fe6e1ddae3706b84b7ba21e916c5dbdc4e2eb9e4c9cf2f0fcb8dd122f5bdeb4cf9c0515365c35e6ac45b1efde8863e879be71041abb07775fcd4ad07adb99e46b3ffa9363dc80922fcc62f5b3422da4dc48f098eb2b7a9786e43f473dca85b16bff2fe01139b1f5fe25c089d8f9c596997f4ae83115b5667d540b958c6f66b76da5cbdf46452ec30726085fb99a816a765790f41ff45c449c4eb707c7b9da68ab2a7de869295d79683d201136640a07a5bdfabd9929bddcbd45cfd9a4f690f3f756a65006f891db32fb5ba5f3982b8280873d0d50f21141dd00fd1cd053b92f5a2"}, @NFTA_DATA_VALUE={0xf, 0x1, "7cd01526c87f97cdbff005"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0ccd6a46ef2444d0de6af20803b9b55b5847590d5cad4a0fb842c13327284358d92c3b45d3056ac20260a0651eb9d02a9360b9a547739dfe2c8c869bfa3250e319d0fd4f9a4a195ab6e9a180be2a751a4795ac7953fceabc4a053471642ec22a50d2d3b7afd26bb698d62e23ae170159c951a5c4dc88f1c522f7bd124a3a28bb0ff61597ea9d9cb12daeef46ae24326f8e5c3bd21703e5ff31"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "82fbded62796bb1b202962c81ad29ded2b7362400961127e139ef38455104a5c1d49da39ae65de6a8d6a61b1bf10926edb7d70ae7b5828676db91bf84e7bec415d9c16a39107ac15d5af3563a6258bb40f940516f76dab05fb0d4078980ed22568c8e72b460c534b49e9503cfbad71e846157a1d526a9ccecd34a31fa6324468b7ba9c401a3c7cbdd3"}]}, @NFTA_SET_ELEM_USERDATA={0x5a, 0x6, 0x1, 0x0, "7d5e5ee82b68df17e2d0b279e572bbe97d8aafbae451bbf7f2dd27cde79a749b81c8d5ea86734b23d5a8a5ed172df4fd1d282537983def9af625992e443c63e88cb54998ffdba6b3dea48144f01b5047ebe54f0d6a6d"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x304, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x98, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "22b4126e6f879d3f0cb799659c123ea34143dbc1d4429d7118d8158db5b44b45fd73270d0b56b0c68c8d549d38499ed436cd99c578df3918864913fcf6895694646fefe4b14ff5b30813464bb6d61a50483ff7eb7f"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xe2, 0x6, 0x1, 0x0, "ea125aa148d1b238d8403e11d3fdaac184eb1ae7afdb14dcc6cd3da6fc1d608bc86e172bec9c074025288ba620b88fefe74cb11a85b7d9b1c307ba2da140bb0f1fc601770c0e4655268cbebd147d8e483683db2139beaec46c3fe1c4f0b5b7e57772949d334c0ae2a0cfd217c4d3ff1a579ce8e398911c2e1d2892ed84130260002324ddc6155b207ba07a4b384bfd0b0b38cbeefbfe4889cf82cd007c15f2c5ba42cfe18eeeb0ecfdde373a103c320f543115a6f0f279ed65e5f88732339bb19ef63d285801d808694e020943421d195967ffca5c55032284d7a3d2431d"}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8001}]}}}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "94cfabb02dec876af47678b1bda984b340af315ccf20a8cae3f1c8ce321543609dfc7d4b2fdb951ab444d2ad508ac91181399f9084fa55eb0f2d622095ca35eaa99729e9eb04c568b7a83f3668263043d009de96f56e22fec6096365a2a80e5241aa8842cd546e42cf538a5728185f619b8315060e47b601c547ac0a42f9b4840040393e53bd72bf71b61cb2b1a5b69873b763c1f216612818e7ad05f210b08787c4b3ce935384d71cbba7c1dc0588af6d2bdd5a039e10470ddf95"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf1de}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x21c8}, 0x1, 0x0, 0x0, 0x1}, 0x20024000) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000002ac0)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000002b00)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b80), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002bc0)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r9, &(0x7f0000002d00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x840000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x48, r10, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x31}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x45}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd, 0x35}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80040}, 0x4040005) (async) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002d40)='/sys/power/reserved_size', 0x2000, 0xc8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f0000002d80)={r2, 0x1}, &(0x7f0000002dc0)=0x8) (async) openat$cgroup_ro(r9, &(0x7f0000002e00)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async) fcntl$setstatus(r8, 0x4, 0x40000) (async) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000002e40)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x1, 0x8, 0x1, 0x380000, 0x7fffffffffffffff, 0x2}, {0x3ef, 0x0, 0x1, 0x401, 0x6, 0x1}], ['\x00', '\x00', '\x00']}) 1.568545957s ago: executing program 5 (id=3397): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e28, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty, 0x1f}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 1.568115637s ago: executing program 3 (id=3398): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r1, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x2, 0x11, 0x7, 0x9}, {0xc, 0x6, 0x8, 0x384}, {0x6, 0x0, 0x0, 0x66a}]}) 1.513677361s ago: executing program 5 (id=3399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xe94, 0x0, &(0x7f0000000740), &(0x7f00000011c0)) syz_io_uring_setup(0x6a9d, &(0x7f0000000800)={0x0, 0x49ea, 0x20, 0x0, 0x31a, 0x0, r1}, &(0x7f0000000880), &(0x7f00000008c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, 0x0}, 0x48040) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08ad3b47d5dc87cb42c1c6aa2b75fb457abf6ca4db8da5f11c12972a636d2658fe7325a2fac1496338a69df201da5b7346de26fd1a3cbe846c770401233c3a31a7677a"], 0x5c}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r10 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0x3e, &(0x7f0000000040)=0x10f78, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x83, &(0x7f0000000140)={r12}, 0x8) 1.472345643s ago: executing program 3 (id=3400): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, "00820000"}}}}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd29, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x2c}}, 0x18) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd29, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x2c}}, 0x18) 1.35793693s ago: executing program 3 (id=3402): unshare(0x2c020400) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) (async) setns(0xffffffffffffffff, 0x8000000) (async) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) clock_gettime(0x0, 0x0) (async) umount2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) 1.303764113s ago: executing program 3 (id=3404): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f00000000c0)) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) getsockopt(r0, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) (async) socket(0x40000000015, 0x805, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140)={0x0, 0xea60}, 0x10) (async) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f00000000c0)) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0), &(0x7f0000000480)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x800}) (async) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) (async) getsockopt(r0, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) (async) 1.18240484s ago: executing program 2 (id=3406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}, @sadb_address={0x3, 0x6, 0x2b, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}}]}, 0x50}}, 0x0) r5 = dup3(r3, r2, 0x0) read$watch_queue(r5, &(0x7f0000000240)=""/173, 0xad) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4cc04}, 0x4040140) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8}, 0x94) 1.042162299s ago: executing program 8 (id=3409): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) close(0x3) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x6) (async) syz_emit_ethernet(0x122, &(0x7f0000000c00)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6579305d00ec060100000000000000000000000000000000ff020000000000000000000000000001080007306800000018007f3065000000"], 0x0) (async) r2 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x100, 0x10003, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c"], 0x92fc}}, 0x0) 1.036424609s ago: executing program 7 (id=3410): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000ffffff800000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) 968.285472ms ago: executing program 3 (id=3411): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/29, 0x1d}], 0x1}}], 0x1, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 'vxcan1\x00'}}, 0x1e) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r4 = getpgid(0xffffffffffffffff) r5 = getpid() r6 = eventfd2(0x4, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) kcmp(r4, r5, 0x6, r6, r7) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000000)='/proc/sys\x00\x00\x00\x00\x00\x00(O\x00\x00\x10\x04\xba?BVEm\xe39\xf7\xe3\x9es\xa8\xab%nN\xd4\xa2=\x11\xc8\xdd\x15\xcc\x00\x00\x00\x00'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000000c0)=0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="8000000002060104ff0f000000000000070000040500040001000000050005000a00000015000366eb6173683a69702c706f72742c6e6574000000000d0003006c6973743a736574000000000900020073797a30000000000900020073797a300008000005000400010000000c00078005001400080000000500050007000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x288501) 937.229245ms ago: executing program 5 (id=3412): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @dev}}}], 0x20}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x408a3}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x4}}]}}}]}, 0x5c}}, 0x0) 930.577245ms ago: executing program 7 (id=3413): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80c00) fchown(r0, 0xee01, 0xffffffffffffffff) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0x40) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000100)) syncfs(r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace(0x4208, r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendto$inet6(r0, &(0x7f0000000240)="e7f0a6e664183c29be85fb180b2703079796efe52996b5f7b9b20bc10a4a9d933341cc3f1747c6bb41b2f8e8a3a13498b1498b9856f5daaa6a240097d79bd34949020982dfeffb14f14ce208339b0f8ef81f9df940b88c066ad135a6cfc382113b75be02173f1b1ca2c4ad1a4cd4ed7de7d7805ad16861e026cc3975fff3bf9e30d8ba36804df34f68bd0a", 0x8b, 0x48, &(0x7f0000000300)={0xa, 0x4e23, 0x7fffffff, @empty, 0x7ff8}, 0x1c) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) close_range(r5, r6, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) readahead(r2, 0x3a, 0xb81d) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000440)=0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0xc, 0x0, 0x1, 0xff, 0x0, 0x7f, 0x3110, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x1d}, 0x1100, 0x5, 0x101, 0x1, 0x2, 0x80000000, 0x3, 0x0, 0x1ef0, 0x0, 0x7a}, r8, 0x0, r7, 0x9) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480), 0x2002, 0x0) sendmsg$tipc(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)="ea8ae64a1079fa583b2dfd7fe16e7da39b4dd6dadcc91ad3bece7eaf5a5f0838a7e74b54e3bb7a77b8800a980dd56050", 0x30}, {&(0x7f0000000500)="a65b8dbe59af62676039b93721b32f1af42de39f7396fb105c4ab13d9a197ff38d061c3251cb0444353ed54235727086ee9741a82e09aa432c7c097704f6e08cb5a40f154a", 0x45}, {&(0x7f0000000580)="d0d1107607dd9ffad1250e0fbee1cd69c282e05b7b25f0eab1275a61fc7c5d8e59f80d1b899c0156b0a5e968bf4d9112cbd7a7890598f2030dcfe189fc2dacf5f661534161adee33867ca13e62d0711934f955da9dd54a17b53a3dbf9e75f421200644ee6688265443a6695aa985161ace541301854e0618dc7fb6835f500069f110e65cf279dffe5477db4a5a648c90f6a9b04c95b35517fe53926fd8df6f1942534d81e0bb55110076f418da1fcb6460fc3f9b4f5474520157ccbe29f011201dd7ca388002f4dd1275b09518d9a78b5c54298d7a4141fee2f79e7c2b3d7d2b354d55", 0xe3}, {&(0x7f0000000680)="49f198a6430365fc3116a135f49d3a85b362f48506c68d2913bffaefd3a066be96d1473e57efb42e830f264af0ac6506b52b18c37e5836e0c130427fc128720dd3d13aa903267281136b8ae2f6003e1c3b2fda4e27669b0dfa97f11e828fe7816dd15703c018ea5b92fa934b4dbb41d019ac2d0772c98fe89e988cd0c7737685d984bd02d723b5082f665c81d2baf784b7f2f367a3", 0x95}, {&(0x7f0000000740)}], 0x5, 0x0, 0x0, 0x48060}, 0x804) perf_event_open(&(0x7f0000000880)={0x5, 0x80, 0x1, 0x4, 0x8, 0x5, 0x0, 0x6, 0x80800, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000840), 0x2}, 0x100000, 0x5d0, 0x5, 0x1, 0x401, 0x4, 0x6, 0x0, 0xc10, 0x0, 0x601}, r8, 0x1, r9, 0x9) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r11, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4665749a61860c04}]}, 0x34}}, 0x8800) write$P9_RWRITE(r9, &(0x7f0000000a80)={0xb, 0x77, 0x2, 0xe8}, 0xb) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000ac0)={@loopback, @loopback}, 0xc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) 840.494731ms ago: executing program 8 (id=3414): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@local, 0x7a, r2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088}, 0x94) 822.014732ms ago: executing program 8 (id=3415): unshare(0x2c020400) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) 801.022192ms ago: executing program 7 (id=3416): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0280ffffff00190000000000000001000004d632000000fc0200000000000000000000000000000500000000ffffff80000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd7000053500000a000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 668.33467ms ago: executing program 2 (id=3417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x9, 0x80002) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180600fc568170e442000200000000000000000000008500"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x24}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0x40, 0xb8, 0x10, 0xe}, {0x400, 0xc, 0x3, 0x3}, {0x3, 0xf, 0x0, 0x3960}, {0x0, 0xfc, 0x2, 0xffff}, {0x7, 0xa0, 0x80, 0x6}, {0xc3, 0x2, 0x7, 0xea}, {0x4, 0x2, 0x0, 0x2}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r2, 0x4, 0x42800) r3 = dup(r2) r4 = socket(0xa, 0x3, 0xff) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000003c0)={0x1, 0x5}, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "22682f26a0d8473a3c1ac7505e5252d42a23ad7a"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x88d0}, 0x40480d4) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 627.832473ms ago: executing program 7 (id=3418): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) 588.123515ms ago: executing program 5 (id=3419): memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08ad3b47d5dc87cb42c1c6aa2b75fb457abf6ca4db8da5f11c12972a636d2658fe7325a2fac1496338a69df201da5b7346de26fd1a3cbe846c770401233c3a31a7677a"], 0x5c}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r10 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0x3e, &(0x7f0000000040)=0x10f78, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x83, &(0x7f0000000140)={r12}, 0x8) 418.676385ms ago: executing program 2 (id=3424): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) (fail_nth: 1) 256.926594ms ago: executing program 8 (id=3425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000840)=[{0x1, 0x2, {0x0, 0x1}, {0x1}, 0xfd, 0x2}, {0x2, 0x1, {}, {0x1, 0x0, 0x4}, 0x2, 0xfe}, {0x0, 0x3, {0x2}, {0x2, 0xff, 0x1}, 0xff, 0x1}, {0x1, 0x3, {0x2, 0x0, 0x3}, {0x2, 0xf0, 0x4}, 0x2}], 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0x3, 0x8}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x20000050) 127.019492ms ago: executing program 2 (id=3426): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000200002008000000", @ANYRES32, @ANYRES32, @ANYBLOB="fcffffffffffffff0000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffffdd02040040000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff0000000000000000000000000700000000000000000000000000000000000001000000003c"], 0x23c}}, 0x8000000) 120.718633ms ago: executing program 8 (id=3427): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000003600007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 327.41µs ago: executing program 8 (id=3428): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0xffff, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x4, 0x520, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x85, 0x7d, 0xb7, 0x10, 0x12d1, 0x2d76, 0x3a51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50e, 0x2, 0xa, 0x7, 0x80, 0x2, [{{0x9, 0x4, 0x46, 0xd3, 0x0, 0xff, 0x5, 0x1b, 0x3, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x5f, 0x5, "", '(r'}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2000, 0x4, 0x9, "7ac5216e40327fb8df"}]}, @generic={0x8d, 0x13, "20af41c7f4d13df321697d3b5246d50831e8c1c3b8270c556168f51a5f96a2699023018a1a0037885f365f504ff0b0ab101f75be6697ae437ac1e093502a3fc6bffc19fad84bd7eb870c38b7c9512bd49dd0cec03c177e572214d34f7bba65ba0321c47e1009fe87d13aca967924addd746dd7c4ffd20e80065baba1c7bc8e388eb6eabe90d06d93547007"}]}}, {{0x9, 0x4, 0x8c, 0xf, 0x9, 0xff, 0x9e, 0xf4, 0x21, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xe8, 0x0, 0x46, "e283e39a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x3, 0x1, 0x8, 'A', "7281e5"}]}], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0xfc, 0x0, 0x10, [@generic={0x33, 0x7, "dea5600a88e20c4bb722d80d05ca79a88268fd9bff73c269a89627b9c85983e8089cc94378b057d761a338f6afc0bd11ee"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x3, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x4}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x9, 0x7, 0x1, [@generic={0xc6, 0xf, "e5df25a7dbc876e1b615b636da66f318f2b85440e786d7d95236487b74863df07b406fc8f6d3dd7ab5265072a98e634441ca07a2419e4e7bc823f0a165cdd09c85ed7ec590fd5865dfa76b411be0aeab5dadf42a3bd9c39cebc3b3ba34cac3d111cccf2eb5714ca95a730ced0c35de7ee449f090656ce6eb9b3fc0116ea58924b8c565e1af9f8fbe0049cfc7fa326a889279c3fa38bfe4fe7c921afae2465b1c2f056b46b60a91fa3375608e2ba2b73b83335cbf46a0d08d8c607d1bad29d887f78bdfaa"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x55, 0x46a}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x2, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x7, 0x6, 0x5, [@generic={0x53, 0x2, "bb00853ff79a319d73f4dad32de71766274414d988a99d49f04284b129301cb78f2c555a111a01048c6f660700bcb98d2f497e73fbe8ca794723036825003883d75374b8e9702555bd9f1f5201d4f4b2bc"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xfc, 0xb6, 0x3}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x3, 0xa4, 0x80, [@generic={0xcb, 0x0, "0b2aa77ffa546b77b87db0b3669cece9332e391099702e12eae2a58935256cad98ff4bfd2a4bf0af38f97916ad6640ecfb308f307ee8155fff468e984a742c55343f102b48a28040bf908712b7b6e9cd4a67014c48b51e62b86e9a6c1c889bd7277549834e12764ef8b5bc85508328071066e1a0ee3b024888507062b794b7d5e6ff55e107f491ce613d315a98761ba966ce154597944887df7c269d6f52fd35da90e2baa2269de267b0d17fe79dbe5b81bfa4cc7d6c7edcab3d28ff18c23dafbc4ea00ae3ef92fc90"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x13, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3cf, 0x0, 0xcd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x834}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x6a, 0x3, 0x5, [@generic={0x101, 0x30, "8c2ac3a6df774001b78211cca63472f504cd9d8cc6be2d6a97177e9e976134fb0f494fa24d99368e992157db2e222761bbf7fe4c45811644255a87fcf906a83f6a84277c578b88180fac667bebb148a134b3c9154ba15ae90a52b2e5b7ec9c3a2587dd6d7eaecc59aec309ce26632d1ddbbe8ec2e3b2718d9c64268a1e4a2157dbe6f8d9186ffc71f6f9288457bad7e059c194e4b71c7914f75f7d08603825773359349d3fe908aacc397de7654e0cab391560861046a8ad688965ff109fa7c19362371f91bd90737746eb96220dcf709b396fbf9aabea748eaf7d57d5e90853c25ce679e7023f8e295f60959204ae26c924c7e43364e39968441accbd3877"}, @generic={0x9e, 0x21, "9a06326ad8b1eedc1d3d61c8ec1a868c969aaa2f6f43ac3f9d9d84c8f1f73d76ab1a4b7e1b8a8195633520e3c0d16084193322577d47dcba26acb822493cf4b910bd3c07ed3de602d8cf9b030f91b78bcfa6a8f6daa740e688b25ffc6b968c60ea701d0a69ce8537033b72cf928be1673bf41bdf9269fe8aa3665f0ca03932aa264921b5a9b3255a88397bd433db61f84ce258b1bd3c2ca0d7363bc9"}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x0, 0x7, 0x6, 0xff, 0x80}, 0xfe, &(0x7f0000000100)={0x5, 0xf, 0xfe, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0xb, 0x2, 0x8, 0xf0f, 0x8, [0xc0, 0xffc0]}, @generic={0xe5, 0x10, 0x2, "289c8e37fc3559eddca871029a627f6a18e5cc5e201f32b4e0428358d15ab94d83c34999260a58506f7b4df8f9a5d9846b244f9dec483724744867900fea4d2665581f9a34dd8f039242e286d2b94252b7759d0f1a36ea554fecc229c4f6f802efbba1cb0380474d8b151d2cc26f005c4bf70eb4905f459a65ab51225076d080d11dafb05c65c50c60f72cbe647a07f948d39d6f84ced58aff51152ad06f8809f836b0e0bf44c47b69e66f77b2207748da37cf3312b8045b1db79c38947f49bda5728f4ddfc3fb4d5d38f9139adf5fc8c4fbb669abb224dfa48ad47acbab34822a8a"}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4}}, {0xfb, &(0x7f0000000300)=@string={0xfb, 0x3, "766f3d5378d5a7c81ce9f25d3275e6f568da9d36be45daa81fbfbf9c076cd1935c9c431ded0ef12fe86fbab56673e18e9a5a2985975f8318ae18564d484cd47d1754aeb1dc930d1d9e38e2881508e6190612dfd682aaf17f913e090e77521af0cb7f5c69136954ec8127b84a4fb8d36e1d41e4ffa06f1043800b45226066b568314ce67db1dba323b4c93eea6eb70cfebcaee746dc60340c87be5b95b23434610f6f89e4493320b0ef237bdd550c8135876ae7a18bbbe0a61362053518c380364bfc7250dfed1493286da1cdbdb51f6467bdf0cee3bbc96b734f25b5a868fc762191145a0be7c1b8798237e20a82e85fa82e015af882f1867b"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xf4f7}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 2 (id=3429): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) kernel console output (not intermixed with test programs): miscuous mode [ 219.244587][ T8948] team0 (unregistering): Port device team_slave_1 removed [ 219.257108][ T8948] team0 (unregistering): Port device team_slave_0 removed [ 219.309749][T12825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.326061][T12825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.506588][T12825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.615006][T12971] set_capacity_and_notify: 3 callbacks suppressed [ 219.615029][T12971] loop7: detected capacity change from 0 to 512 [ 219.637775][T12825] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.695354][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.702530][ T8381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.712329][T12976] Cannot find set identified by id 0 to match [ 219.777558][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.785059][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.841063][T12825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.851723][T12825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.033862][T12999] syzkaller0: entered promiscuous mode [ 220.039438][T12999] syzkaller0: entered allmulticast mode [ 220.086765][T12999] sctp: [Deprecated]: syz.9.2834 (pid 12999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.086765][T12999] Use struct sctp_sack_info instead [ 220.124476][T12986] bond2: entered promiscuous mode [ 220.155472][T12999] loop9: detected capacity change from 0 to 1024 [ 220.169440][T12986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.234792][T12986] bridge3: entered promiscuous mode [ 220.304592][T13015] __nla_validate_parse: 11 callbacks suppressed [ 220.304613][T13015] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2837'. [ 220.322773][T12825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.356193][T13012] loop5: detected capacity change from 0 to 1024 [ 220.386450][T13012] EXT4-fs: Ignoring removed nobh option [ 220.392183][T13012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.439736][T13022] sctp: [Deprecated]: syz.9.2838 (pid 13022) Use of int in max_burst socket option. [ 220.439736][T13022] Use struct sctp_assoc_value instead [ 220.496089][T13022] sctp: [Deprecated]: syz.9.2838 (pid 13022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.496089][T13022] Use struct sctp_sack_info instead [ 220.671083][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2840'. [ 220.719254][T13047] netlink: 'syz.7.2840': attribute type 14 has an invalid length. [ 220.727236][T13047] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2840'. [ 220.812957][T12825] veth0_vlan: entered promiscuous mode [ 220.841927][T12825] veth1_vlan: entered promiscuous mode [ 220.900719][T12825] veth0_macvtap: entered promiscuous mode [ 220.925513][T12825] veth1_macvtap: entered promiscuous mode [ 220.951600][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2846'. [ 220.961146][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2846'. [ 220.989592][T13087] random: crng reseeded on system resumption [ 220.995193][T13085] loop9: detected capacity change from 0 to 1024 [ 221.013861][T12825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.029067][T13085] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.035791][T13089] loop7: detected capacity change from 0 to 512 [ 221.045267][T12825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.061223][ T29] kauditd_printk_skb: 1575 callbacks suppressed [ 221.061242][ T29] audit: type=1326 audit(1769264932.392:11720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 221.098452][T13091] loop5: detected capacity change from 0 to 512 [ 221.115199][ T8944] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.132591][T13091] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 221.159137][T13085] EXT4-fs mount: 8 callbacks suppressed [ 221.159174][T13085] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.181553][T13087] Restarting kernel threads ... [ 221.186615][T13087] Done restarting kernel threads. [ 221.195322][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.209512][T13091] EXT4-fs (loop5): orphan cleanup on readonly fs [ 221.220711][ T29] audit: type=1326 audit(1769264932.392:11721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 221.244478][ T29] audit: type=1326 audit(1769264932.392:11722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 221.269018][ T29] audit: type=1326 audit(1769264932.392:11723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 221.278267][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 221.293657][ T29] audit: type=1326 audit(1769264932.482:11724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1223b74ad7 code=0x7ffc0000 [ 221.311854][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2846'. [ 221.324463][ T29] audit: type=1326 audit(1769264932.482:11725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1223b1c0d9 code=0x7ffc0000 [ 221.343537][T13091] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2847: Allocating blocks 41-42 which overlap fs metadata [ 221.357111][ T29] audit: type=1326 audit(1769264932.482:11726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1223b74ad7 code=0x7ffc0000 [ 221.394380][ T29] audit: type=1326 audit(1769264932.482:11727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1223b1c0d9 code=0x7ffc0000 [ 221.418609][ T29] audit: type=1326 audit(1769264932.482:11728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1223b74ad7 code=0x7ffc0000 [ 221.442264][ T29] audit: type=1326 audit(1769264932.482:11729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13088 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1223b1c0d9 code=0x7ffc0000 [ 221.455968][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.498837][T13085] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 221.506276][T13085] vhci_hcd vhci_hcd.2: invalid port number 96 [ 221.509280][T13091] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2847: Allocating blocks 41-42 which overlap fs metadata [ 221.512597][T13085] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 221.537740][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.613048][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2793'. [ 221.623003][T13091] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2847: Failed to acquire dquot type 1 [ 221.644764][T13091] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 221.675844][T13091] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2847: corrupted inode contents [ 221.739658][T13091] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.2847: mark_inode_dirty error [ 221.739849][T13091] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2847: corrupted inode contents [ 221.739970][T13091] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.2847: mark_inode_dirty error [ 221.740170][T13091] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2847: corrupted inode contents [ 221.740401][T13091] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 221.740751][T13091] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2847: corrupted inode contents [ 221.740921][T13091] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.2847: mark_inode_dirty error [ 221.741083][T13091] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 221.741292][T13091] EXT4-fs (loop5): 1 truncate cleaned up [ 221.741869][T13091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.742237][T13121] FAULT_INJECTION: forcing a failure. [ 221.742237][T13121] name failslab, interval 1, probability 0, space 0, times 0 [ 221.742324][T13121] CPU: 1 UID: 0 PID: 13121 Comm: syz.4.2850 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 221.742429][T13121] Tainted: [W]=WARN [ 221.742438][T13121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.742452][T13121] Call Trace: [ 221.742460][T13121] [ 221.742478][T13121] __dump_stack+0x1d/0x30 [ 221.742572][T13121] dump_stack_lvl+0x95/0xd0 [ 221.742657][T13121] dump_stack+0x15/0x1b [ 221.742680][T13121] should_fail_ex+0x263/0x280 [ 221.742807][T13121] should_failslab+0x8c/0xb0 [ 221.742873][T13121] __kmalloc_cache_noprof+0x64/0x4a0 [ 221.742904][T13121] ? sctp_add_bind_addr+0x71/0x1e0 [ 221.742935][T13121] sctp_add_bind_addr+0x71/0x1e0 [ 221.743031][T13121] sctp_do_bind+0x427/0x4b0 [ 221.743068][T13121] sctp_connect_new_asoc+0x153/0x3a0 [ 221.743143][T13121] __sctp_connect+0x424/0x7a0 [ 221.743259][T13121] sctp_inet_connect+0xe8/0x110 [ 221.743285][T13121] ? __pfx_sctp_inet_connect+0x10/0x10 [ 221.743312][T13121] __sys_connect+0x1f1/0x2a0 [ 221.743341][T13121] __x64_sys_connect+0x3f/0x50 [ 221.743378][T13121] x64_sys_call+0x2e09/0x3000 [ 221.743412][T13121] do_syscall_64+0xc0/0x2a0 [ 221.743450][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.743486][T13121] RIP: 0033:0x7fb0e5bbacb9 [ 221.743573][T13121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.743596][T13121] RSP: 002b:00007fb0e4617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 221.743619][T13121] RAX: ffffffffffffffda RBX: 00007fb0e5e35fa0 RCX: 00007fb0e5bbacb9 [ 221.743636][T13121] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000003 [ 221.743651][T13121] RBP: 00007fb0e4617090 R08: 0000000000000000 R09: 0000000000000000 [ 221.743666][T13121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.743680][T13121] R13: 00007fb0e5e36038 R14: 00007fb0e5e35fa0 R15: 00007ffcd17045b8 [ 221.743779][T13121] [ 221.819391][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.938466][T13128] netlink: 'syz.5.2852': attribute type 39 has an invalid length. [ 222.009347][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'. [ 222.009414][T13132] netlink: 'syz.4.2855': attribute type 26 has an invalid length. [ 222.009430][T13132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2855'. [ 222.009664][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'. [ 222.009768][T13132] netlink: 'syz.4.2855': attribute type 26 has an invalid length. [ 222.121813][T13139] random: crng reseeded on system resumption [ 222.135520][T13139] Restarting kernel threads ... [ 222.135805][T13139] Done restarting kernel threads. [ 222.219595][T13115] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.233248][ T52] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.263337][ T52] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.303803][ T52] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.341978][ T52] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.602593][T13178] tipc: Failed to remove unknown binding: 66,0,0/0:826291583/826291584 [ 222.623667][T13178] tipc: Failed to remove unknown binding: 66,0,0/0:826291583/826291584 [ 222.755865][ T52] bond0 (unregistering): Released all slaves [ 222.794139][ T52] hsr_slave_0: left promiscuous mode [ 222.794519][ T52] hsr_slave_1: left promiscuous mode [ 222.800695][ T52] veth1_vlan: left promiscuous mode [ 222.800878][ T52] veth0_vlan: left promiscuous mode [ 222.964701][T13204] random: crng reseeded on system resumption [ 223.042132][ T52] team0 (unregistering): Port device team_slave_0 removed [ 223.059444][T13211] loop8: detected capacity change from 0 to 512 [ 223.067453][T13211] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 223.080748][T13213] Restarting kernel threads ... [ 223.086353][T13213] Done restarting kernel threads. [ 223.096444][T13211] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.2872: corrupted in-inode xattr: overlapping e_value [ 223.116079][T13211] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2872: couldn't read orphan inode 15 (err -117) [ 223.131441][T13211] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.250045][T13225] loop5: detected capacity change from 0 to 512 [ 223.378173][ T9861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.424848][ T52] IPVS: stop unused estimator thread 0... [ 223.492310][T13248] loop7: detected capacity change from 0 to 512 [ 223.521776][T13166] chnl_net:caif_netlink_parms(): no params data found [ 223.538635][T13248] EXT4-fs: Ignoring removed nobh option [ 223.544481][T13248] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.551152][T13248] EXT4-fs: Ignoring removed i_version option [ 223.551259][T13256] loop8: detected capacity change from 0 to 128 [ 223.591966][T13256] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 223.593725][T13248] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.682880][ T7005] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 223.727442][T13267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.737640][T13267] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 223.746570][T13267] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 223.756383][T13267] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 223.766223][T13267] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 223.776517][T13267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 223.791514][T13267] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.2881: dx entry: limit 65535 != root limit 120 [ 223.803825][T13267] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2881: Corrupt directory, running e2fsck is recommended [ 223.816852][T13267] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.2881: path /365/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 223.840495][T13267] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 3: comm syz.7.2881: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 223.847974][T13166] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.867896][T13166] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.880208][ T7005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.987286][T13166] bridge_slave_0: entered allmulticast mode [ 224.007718][T13166] bridge_slave_0: entered promiscuous mode [ 224.039110][T13166] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.046854][T13166] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.107733][T13166] bridge_slave_1: entered allmulticast mode [ 224.132159][T13166] bridge_slave_1: entered promiscuous mode [ 224.188767][T13287] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.215596][T13287] ext4 filesystem being mounted at /368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.252740][T13166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.279472][T13166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.293240][T13287] netlink: 'syz.7.2884': attribute type 11 has an invalid length. [ 224.306260][T13166] team0: Port device team_slave_0 added [ 224.313278][T13166] team0: Port device team_slave_1 added [ 224.342556][T13166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.349601][T13166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.375590][T13166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.389165][ T7005] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.421465][T13295] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 224.432049][T13166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.439218][T13166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.465735][T13166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.584994][T13166] hsr_slave_0: entered promiscuous mode [ 224.607303][T13166] hsr_slave_1: entered promiscuous mode [ 224.623043][T13310] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2888: invalid indirect mapped block 4294967295 (level 1) [ 224.649554][T13166] debugfs: 'hsr0' already exists in 'hsr' [ 224.655377][T13166] Cannot create hsr debugfs directory [ 224.666070][T13310] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2888: invalid indirect mapped block 4294967295 (level 1) [ 224.688821][T13310] EXT4-fs (loop5): 2 truncates cleaned up [ 224.695318][T13310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.740577][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.024251][T13333] set_capacity_and_notify: 3 callbacks suppressed [ 225.024287][T13333] loop5: detected capacity change from 0 to 736 [ 225.053199][T13347] loop7: detected capacity change from 0 to 512 [ 225.120645][T13351] FAULT_INJECTION: forcing a failure. [ 225.120645][T13351] name failslab, interval 1, probability 0, space 0, times 0 [ 225.133433][T13351] CPU: 1 UID: 0 PID: 13351 Comm: syz.5.2896 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.133471][T13351] Tainted: [W]=WARN [ 225.133477][T13351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.133491][T13351] Call Trace: [ 225.133497][T13351] [ 225.133577][T13351] __dump_stack+0x1d/0x30 [ 225.133604][T13351] dump_stack_lvl+0x95/0xd0 [ 225.133634][T13351] dump_stack+0x15/0x1b [ 225.133717][T13351] should_fail_ex+0x263/0x280 [ 225.133746][T13351] should_failslab+0x8c/0xb0 [ 225.133776][T13351] __kmalloc_cache_noprof+0x64/0x4a0 [ 225.133803][T13351] ? sctp_add_bind_addr+0x71/0x1e0 [ 225.133826][T13351] sctp_add_bind_addr+0x71/0x1e0 [ 225.133893][T13351] sctp_copy_local_addr_list+0x1b3/0x250 [ 225.133927][T13351] sctp_copy_one_addr+0x7f/0x280 [ 225.134023][T13351] sctp_bind_addr_copy+0x79/0x290 [ 225.134045][T13351] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 225.134081][T13351] sctp_connect_new_asoc+0x1c3/0x3a0 [ 225.134121][T13351] __sctp_connect+0x424/0x7a0 [ 225.134239][T13351] sctp_inet_connect+0xe8/0x110 [ 225.134273][T13351] ? __pfx_sctp_inet_connect+0x10/0x10 [ 225.134298][T13351] __sys_connect+0x1f1/0x2a0 [ 225.134343][T13351] __x64_sys_connect+0x3f/0x50 [ 225.134364][T13351] x64_sys_call+0x2e09/0x3000 [ 225.134389][T13351] do_syscall_64+0xc0/0x2a0 [ 225.134502][T13351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.134589][T13351] RIP: 0033:0x7f35d5c2acb9 [ 225.134609][T13351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.134638][T13351] RSP: 002b:00007f35d4687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 225.134661][T13351] RAX: ffffffffffffffda RBX: 00007f35d5ea5fa0 RCX: 00007f35d5c2acb9 [ 225.134680][T13351] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000003 [ 225.134698][T13351] RBP: 00007f35d4687090 R08: 0000000000000000 R09: 0000000000000000 [ 225.134787][T13351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.134804][T13351] R13: 00007f35d5ea6038 R14: 00007f35d5ea5fa0 R15: 00007ffe9ce31398 [ 225.134832][T13351] [ 225.434700][T13355] FAULT_INJECTION: forcing a failure. [ 225.434700][T13355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.448105][T13355] CPU: 1 UID: 0 PID: 13355 Comm: syz.5.2898 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.448145][T13355] Tainted: [W]=WARN [ 225.448154][T13355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.448191][T13355] Call Trace: [ 225.448199][T13355] [ 225.448209][T13355] __dump_stack+0x1d/0x30 [ 225.448251][T13355] dump_stack_lvl+0x95/0xd0 [ 225.448280][T13355] dump_stack+0x15/0x1b [ 225.448306][T13355] should_fail_ex+0x263/0x280 [ 225.448407][T13355] should_fail+0xb/0x20 [ 225.448481][T13355] should_fail_usercopy+0x1a/0x20 [ 225.448510][T13355] _copy_from_iter+0xcf/0xea0 [ 225.448538][T13355] ? __alloc_skb+0x397/0x4b0 [ 225.448556][T13355] ? __alloc_skb+0x219/0x4b0 [ 225.448638][T13355] netlink_sendmsg+0x4ae/0x6f0 [ 225.448678][T13355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.448716][T13355] __sock_sendmsg+0x145/0x170 [ 225.448768][T13355] ____sys_sendmsg+0x31e/0x4a0 [ 225.448809][T13355] ___sys_sendmsg+0x195/0x1e0 [ 225.448863][T13355] __x64_sys_sendmsg+0xd4/0x160 [ 225.448899][T13355] x64_sys_call+0x17ba/0x3000 [ 225.448984][T13355] do_syscall_64+0xc0/0x2a0 [ 225.449046][T13355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.449075][T13355] RIP: 0033:0x7f35d5c2acb9 [ 225.449095][T13355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.449121][T13355] RSP: 002b:00007f35d4687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.449163][T13355] RAX: ffffffffffffffda RBX: 00007f35d5ea5fa0 RCX: 00007f35d5c2acb9 [ 225.449182][T13355] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 225.449200][T13355] RBP: 00007f35d4687090 R08: 0000000000000000 R09: 0000000000000000 [ 225.449239][T13355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.449262][T13355] R13: 00007f35d5ea6038 R14: 00007f35d5ea5fa0 R15: 00007ffe9ce31398 [ 225.449285][T13355] [ 225.690329][T13166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 225.722975][T13166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.762231][T13166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 225.779853][T13166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 225.998905][T13383] openvswitch: netlink: Missing key (keys=40, expected=80) [ 226.068084][ T29] kauditd_printk_skb: 4916 callbacks suppressed [ 226.068129][ T29] audit: type=1326 audit(1769264937.382:16642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13346 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1223b74ad7 code=0x7ffc0000 [ 226.098094][ T29] audit: type=1326 audit(1769264937.382:16643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13346 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1223b1c0d9 code=0x7ffc0000 [ 226.121787][ T29] audit: type=1326 audit(1769264937.382:16644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13346 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1223b74ad7 code=0x7ffc0000 [ 226.145450][ T29] audit: type=1326 audit(1769264937.382:16645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13346 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1223b1c0d9 code=0x7ffc0000 [ 226.169598][ T29] audit: type=1326 audit(1769264937.382:16646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13346 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1223b74ad7 code=0x7ffc0000 [ 226.172119][T13387] loop4: detected capacity change from 0 to 512 [ 226.194111][ T29] audit: type=1326 audit(1769264937.382:16647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13346 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1223b1c0d9 code=0x7ffc0000 [ 226.223851][ T29] audit: type=1326 audit(1769264937.382:16648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13346 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1223b74ad7 code=0x7ffc0000 [ 226.248175][ T29] audit: type=1326 audit(1769264937.382:16649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13346 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1223b1c0d9 code=0x7ffc0000 [ 226.272768][ T29] audit: type=1326 audit(1769264937.382:16650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13346 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1223b74ad7 code=0x7ffc0000 [ 226.296764][ T29] audit: type=1326 audit(1769264937.382:16651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13346 comm="syz.7.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1223b1c0d9 code=0x7ffc0000 [ 226.297509][T13166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.361824][T13387] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 226.420806][T13387] EXT4-fs (loop4): 1 truncate cleaned up [ 226.429210][T13387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.443699][T13166] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.480862][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.488052][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.503154][T13322] loop8: detected capacity change from 0 to 512 [ 226.515986][ T8954] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.523206][ T8954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.574133][T13387] __nla_validate_parse: 13 callbacks suppressed [ 226.574154][T13387] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2897'. [ 226.616177][T13166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.626688][T13166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.715699][T13322] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.747192][T13322] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.843068][ T9861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.949991][T13166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.963133][T13422] loop5: detected capacity change from 0 to 512 [ 226.993106][T13422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.993261][T13422] ext4 filesystem being mounted at /609/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.168772][ T3736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.234165][T13438] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.241479][T13438] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.348545][T13457] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2914'. [ 227.379374][T13458] random: crng reseeded on system resumption [ 227.395434][T13438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.407468][T13438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.458386][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2913'. [ 227.467335][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2913'. [ 227.476560][ T8954] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.503914][T13458] Restarting kernel threads ... [ 227.511161][T13462] loop7: detected capacity change from 0 to 764 [ 227.517931][T13462] iso9660: Unknown parameter 'iochJrset' [ 227.527803][ T8954] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.531262][T13458] Done restarting kernel threads. [ 227.548199][ T8954] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.557184][ T8954] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.569579][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2913'. [ 227.581859][T13462] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2916'. [ 227.612420][T13166] veth0_vlan: entered promiscuous mode [ 227.648971][T13166] veth1_vlan: entered promiscuous mode [ 227.708199][T13166] veth0_macvtap: entered promiscuous mode [ 227.725506][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2918'. [ 227.734511][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2918'. [ 227.758319][T13166] veth1_macvtap: entered promiscuous mode [ 227.786511][T13473] random: crng reseeded on system resumption [ 227.807491][T13482] loop5: detected capacity change from 0 to 512 [ 227.817946][T13166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.860266][T13166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.903220][T13473] Restarting kernel threads ... [ 227.923424][ T8381] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.937774][T13473] Done restarting kernel threads. [ 227.954598][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2918'. [ 227.958419][ T8381] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.036873][ T8381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.061833][ T8381] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.155106][T13499] loop3: detected capacity change from 0 to 1024 [ 228.174149][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2925'. [ 228.188137][T13499] EXT4-fs: Ignoring removed nobh option [ 228.193910][T13499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.247424][T13505] loop8: detected capacity change from 0 to 1024 [ 228.286916][T13505] EXT4-fs: inline encryption not supported [ 228.295180][T13499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.330157][T13505] EXT4-fs: dax option not supported [ 228.377880][T13511] netlink: 'syz.7.2927': attribute type 4 has an invalid length. [ 228.445695][T13511] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 228.480836][T13521] random: crng reseeded on system resumption [ 228.573542][T13527] Restarting kernel threads ... [ 228.613029][T13527] Done restarting kernel threads. [ 228.838669][T13166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.117753][T13561] loop3: detected capacity change from 0 to 256 [ 229.167159][T12825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.512638][T13587] random: crng reseeded on system resumption [ 229.549137][T13587] Restarting kernel threads ... [ 229.576008][T13587] Done restarting kernel threads. [ 229.780115][T13605] FAULT_INJECTION: forcing a failure. [ 229.780115][T13605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.793512][T13605] CPU: 1 UID: 0 PID: 13605 Comm: syz.4.2950 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 229.793554][T13605] Tainted: [W]=WARN [ 229.793575][T13605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.793592][T13605] Call Trace: [ 229.793601][T13605] [ 229.793611][T13605] __dump_stack+0x1d/0x30 [ 229.793643][T13605] dump_stack_lvl+0x95/0xd0 [ 229.793705][T13605] dump_stack+0x15/0x1b [ 229.793740][T13605] should_fail_ex+0x263/0x280 [ 229.793767][T13605] should_fail+0xb/0x20 [ 229.793790][T13605] should_fail_usercopy+0x1a/0x20 [ 229.793819][T13605] _copy_to_iter+0x251/0xea0 [ 229.793915][T13605] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 229.793951][T13605] __skb_datagram_iter+0xc6/0x680 [ 229.794053][T13605] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 229.794087][T13605] skb_copy_datagram_iter+0x3d/0x100 [ 229.794126][T13605] netlink_recvmsg+0x1a8/0x550 [ 229.794175][T13605] ? __pfx_netlink_recvmsg+0x10/0x10 [ 229.794214][T13605] sock_recvmsg+0x139/0x160 [ 229.794304][T13605] ____sys_recvmsg+0xf5/0x280 [ 229.794345][T13605] ___sys_recvmsg+0x11f/0x3b0 [ 229.794389][T13605] __x64_sys_recvmsg+0xd1/0x160 [ 229.794428][T13605] x64_sys_call+0x2cbf/0x3000 [ 229.794545][T13605] do_syscall_64+0xc0/0x2a0 [ 229.794585][T13605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.794782][T13605] RIP: 0033:0x7fb0e5bbacb9 [ 229.794804][T13605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.794865][T13605] RSP: 002b:00007fb0e4617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 229.794916][T13605] RAX: ffffffffffffffda RBX: 00007fb0e5e35fa0 RCX: 00007fb0e5bbacb9 [ 229.794936][T13605] RDX: 00000000000001e0 RSI: 0000200000000640 RDI: 0000000000000003 [ 229.794954][T13605] RBP: 00007fb0e4617090 R08: 0000000000000000 R09: 0000000000000000 [ 229.795015][T13605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.795032][T13605] R13: 00007fb0e5e36038 R14: 00007fb0e5e35fa0 R15: 00007ffcd17045b8 [ 229.795059][T13605] [ 230.126122][T13627] netlink: 'syz.7.2952': attribute type 4 has an invalid length. [ 230.140345][T13622] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 230.158868][ T3429] kernel read not supported for file /39/net/mcfilter (pid: 3429 comm: kworker/1:4) [ 230.202151][T13631] netlink: 'syz.7.2952': attribute type 4 has an invalid length. [ 230.484762][T13658] loop4: detected capacity change from 0 to 2048 [ 230.538438][T13658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.568831][T13674] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 230.577491][T13674] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 230.607526][T13673] random: crng reseeded on system resumption [ 230.715342][T12825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.732368][T13681] Restarting kernel threads ... [ 230.769008][T13681] Done restarting kernel threads. [ 230.951617][T13694] loop8: detected capacity change from 0 to 512 [ 230.967898][T13692] loop4: detected capacity change from 0 to 1024 [ 230.984777][T13694] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.024564][T13637] chnl_net:caif_netlink_parms(): no params data found [ 231.033450][T13692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.047589][T13694] ext4 filesystem being mounted at /182/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.105719][T12825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.122740][T13694] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #4: comm syz.8.2969: corrupted inode contents [ 231.144381][T13694] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #4: comm syz.8.2969: mark_inode_dirty error [ 231.201068][T13694] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #4: comm syz.8.2969: corrupted inode contents [ 231.213851][T13694] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #4: comm syz.8.2969: mark_inode_dirty error [ 231.238632][T13694] __quota_error: 1231 callbacks suppressed [ 231.238652][T13694] Quota error (device loop8): write_blk: dquota write failed [ 231.252352][T13694] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 231.261803][T13694] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 231.271871][T13694] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.2969: Failed to acquire dquot type 1 [ 231.313901][ T8944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.324924][ T8944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.358748][ T29] audit: type=1400 audit(1769264942.692:17883): avc: denied { read } for pid=13723 comm="syz.3.2973" path="socket:[43086]" dev="sockfs" ino=43086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.431536][T13736] FAULT_INJECTION: forcing a failure. [ 231.431536][T13736] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 231.445123][T13736] CPU: 1 UID: 0 PID: 13736 Comm: syz.4.2976 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.445162][T13736] Tainted: [W]=WARN [ 231.445169][T13736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.445184][T13736] Call Trace: [ 231.445253][T13736] [ 231.445263][T13736] __dump_stack+0x1d/0x30 [ 231.445362][T13736] dump_stack_lvl+0x95/0xd0 [ 231.445392][T13736] dump_stack+0x15/0x1b [ 231.445419][T13736] should_fail_ex+0x263/0x280 [ 231.445448][T13736] should_fail_alloc_page+0xf2/0x100 [ 231.445552][T13736] __alloc_frozen_pages_noprof+0x108/0x350 [ 231.445593][T13736] alloc_pages_mpol+0xb3/0x260 [ 231.445633][T13736] vma_alloc_folio_noprof+0x1a9/0x300 [ 231.445737][T13736] handle_mm_fault+0x111f/0x3030 [ 231.445777][T13736] ? mt_find+0x291/0x3b0 [ 231.445887][T13736] do_user_addr_fault+0x3fd/0x1050 [ 231.445931][T13736] exc_page_fault+0x62/0xa0 [ 231.445960][T13736] asm_exc_page_fault+0x26/0x30 [ 231.445987][T13736] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 231.446039][T13736] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f 15 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 231.446073][T13736] RSP: 0018:ffffc900049cb9d8 EFLAGS: 00050202 [ 231.446095][T13736] RAX: ffff888103471b10 RBX: ffffc900049cbe80 RCX: 00000000000007ed [ 231.446114][T13736] RDX: 0000000000000000 RSI: ffff888119af4417 RDI: 0000200000001000 [ 231.446128][T13736] RBP: 0000000000000aed R08: 000000000000062e R09: 0000000000000000 [ 231.446144][T13736] R10: 0001888119af4117 R11: 0001888119af4c03 R12: ffffc900049cbe68 [ 231.446194][T13736] R13: 0000000000000117 R14: 0000000000000aed R15: ffff888119af4117 [ 231.446221][T13736] _copy_to_iter+0x40c/0xea0 [ 231.446254][T13736] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 231.446281][T13736] __skb_datagram_iter+0xc6/0x680 [ 231.446314][T13736] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 231.446462][T13736] skb_copy_datagram_iter+0x3d/0x100 [ 231.446560][T13736] netlink_recvmsg+0x1a8/0x550 [ 231.446599][T13736] ? __pfx_netlink_recvmsg+0x10/0x10 [ 231.446700][T13736] sock_recvmsg+0x139/0x160 [ 231.446738][T13736] ____sys_recvmsg+0xf5/0x280 [ 231.446772][T13736] ___sys_recvmsg+0x11f/0x3b0 [ 231.446885][T13736] __x64_sys_recvmsg+0xd1/0x160 [ 231.446915][T13736] x64_sys_call+0x2cbf/0x3000 [ 231.446969][T13736] do_syscall_64+0xc0/0x2a0 [ 231.447040][T13736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.447111][T13736] RIP: 0033:0x7fb0e5bbacb9 [ 231.447132][T13736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.447156][T13736] RSP: 002b:00007fb0e4617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 231.447176][T13736] RAX: ffffffffffffffda RBX: 00007fb0e5e35fa0 RCX: 00007fb0e5bbacb9 [ 231.447190][T13736] RDX: 00000000000001e0 RSI: 0000200000000640 RDI: 0000000000000003 [ 231.447257][T13736] RBP: 00007fb0e4617090 R08: 0000000000000000 R09: 0000000000000000 [ 231.447273][T13736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.447290][T13736] R13: 00007fb0e5e36038 R14: 00007fb0e5e35fa0 R15: 00007ffcd17045b8 [ 231.447388][T13736] [ 231.784446][ T8944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.795113][ T8944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.809593][ T9861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.828653][T13736] __nla_validate_parse: 25 callbacks suppressed [ 231.828671][T13736] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2976'. [ 231.833282][T13752] random: crng reseeded on system resumption [ 231.846401][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2978'. [ 231.859860][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2978'. [ 231.872800][T13637] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.879967][T13637] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.896987][T13637] bridge_slave_0: entered allmulticast mode [ 231.904077][T13637] bridge_slave_0: entered promiscuous mode [ 231.919240][T13755] loop7: detected capacity change from 0 to 512 [ 231.927548][T13751] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2980'. [ 231.936987][T13755] EXT4-fs: Ignoring removed nobh option [ 231.942737][T13755] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.949325][T13755] EXT4-fs: Ignoring removed i_version option [ 231.957749][ T8944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.968247][ T8944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.980634][T13755] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.996235][T13747] Restarting kernel threads ... [ 232.005386][T13747] Done restarting kernel threads. [ 232.012469][T13637] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.019838][T13637] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.034648][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2978'. [ 232.043913][T13637] bridge_slave_1: entered allmulticast mode [ 232.051499][ T29] audit: type=1400 audit(1769264943.382:17884): avc: denied { create } for pid=13759 comm="syz.4.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 232.073292][T13637] bridge_slave_1: entered promiscuous mode [ 232.088275][ T7005] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 232.110442][ T8944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.121261][ T8944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.139989][T13761] netlink: 'syz.4.2983': attribute type 39 has an invalid length. [ 232.141483][T13637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.170068][T13762] loop8: detected capacity change from 0 to 1024 [ 232.177781][T13637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.220435][T13762] EXT4-fs: Ignoring removed nobh option [ 232.226120][T13762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.259956][T13766] bridge_slave_0: left allmulticast mode [ 232.265676][T13766] bridge_slave_0: left promiscuous mode [ 232.271537][T13766] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.281457][T13762] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.282487][T13766] bridge_slave_1: left allmulticast mode [ 232.299514][T13766] bridge_slave_1: left promiscuous mode [ 232.305306][T13766] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.315936][T13766] bond0: (slave bond_slave_0): Releasing backup interface [ 232.332397][T13766] bond0: (slave bond_slave_1): Releasing backup interface [ 232.351585][T13766] team0: Port device team_slave_0 removed [ 232.370585][T13766] team0: Port device team_slave_1 removed [ 232.385589][T13766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.393321][T13766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.403086][T13766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.410568][T13766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.430370][T13766] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.493304][T13637] team0: Port device team_slave_0 added [ 232.500439][ T8944] bridge_slave_0: left promiscuous mode [ 232.506406][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.560369][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2987'. [ 232.569578][T13792] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2987'. [ 232.700326][ T9861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.742599][T13811] loop8: detected capacity change from 0 to 2048 [ 232.754823][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2993'. [ 232.766866][ T8944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.783491][T13811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.811085][ T8944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.840774][T13811] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.874326][ T8944] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 232.893605][ T8944] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 232.907660][ T8944] bond0 (unregistering): Released all slaves [ 232.916139][ T8944] bond1 (unregistering): Released all slaves [ 232.925793][ T8944] bond2 (unregistering): Released all slaves [ 232.933728][T13811] EXT4-fs (loop8): shut down requested (1) [ 232.940135][T13811] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 232.950641][ T29] audit: type=1400 audit(1769264944.282:17885): avc: denied { read } for pid=2989 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 232.972897][ T29] audit: type=1400 audit(1769264944.282:17886): avc: denied { search } for pid=2989 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.994887][ T29] audit: type=1400 audit(1769264944.282:17887): avc: denied { append } for pid=2989 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.017717][ T29] audit: type=1400 audit(1769264944.282:17888): avc: denied { open } for pid=2989 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.041140][ T29] audit: type=1400 audit(1769264944.282:17889): avc: denied { getattr } for pid=2989 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.065289][T13811] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 233.072123][T13637] team0: Port device team_slave_1 added [ 233.079863][T13805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2991'. [ 233.114718][ T9861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.151785][ T8944] hsr_slave_0: left promiscuous mode [ 233.173773][ T8944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.181281][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.192785][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2999'. [ 233.233790][ T8944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.241354][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.279369][ T8944] veth1_macvtap: left promiscuous mode [ 233.284974][ T8944] veth0_macvtap: left promiscuous mode [ 233.290697][ T8944] veth1_vlan: left promiscuous mode [ 233.296278][ T8944] veth0_vlan: left promiscuous mode [ 233.332339][T13865] loop7: detected capacity change from 0 to 512 [ 233.348256][T13865] EXT4-fs: Ignoring removed nobh option [ 233.354196][T13865] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.360958][T13865] EXT4-fs: Ignoring removed i_version option [ 233.376019][T13865] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.438502][ T7005] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 233.508243][ T8944] team0 (unregistering): Port device team_slave_1 removed [ 233.519738][ T8944] team0 (unregistering): Port device team_slave_0 removed [ 233.569357][T13878] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.581734][T13637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.588870][T13637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.614984][T13637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.626841][T13637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.633918][T13637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.659944][T13637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.691294][T13878] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.722632][T13637] hsr_slave_0: entered promiscuous mode [ 233.736537][T13637] hsr_slave_1: entered promiscuous mode [ 233.750250][T13637] debugfs: 'hsr0' already exists in 'hsr' [ 233.756161][T13637] Cannot create hsr debugfs directory [ 233.786914][T13878] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.851145][T13878] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.991512][ T582] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.019195][ T582] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.054330][ T582] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.082702][ T582] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.092639][T13918] loop3: detected capacity change from 0 to 512 [ 234.101820][T13918] EXT4-fs: Ignoring removed nobh option [ 234.107446][T13918] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.114162][T13918] EXT4-fs: Ignoring removed i_version option [ 234.163294][T13918] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.163586][T13921] loop4: detected capacity change from 0 to 512 [ 234.260651][T13918] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.3016: Directory hole found for htree leaf block 0 [ 234.275403][T13918] EXT4-fs (loop3): Remounting filesystem read-only [ 234.304429][T13166] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 234.493950][T13934] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.509586][T13934] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.540480][T13637] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.573199][T13637] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.598464][T13637] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 234.623945][T13637] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.649641][T13967] loop7: detected capacity change from 0 to 512 [ 234.661778][T13967] EXT4-fs: Ignoring removed nobh option [ 234.667536][T13967] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.674071][T13967] EXT4-fs: Ignoring removed i_version option [ 234.700850][T13967] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.734569][T13637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.757392][T13637] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.765793][ T7005] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 234.778767][ T8948] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.785904][ T8948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.797732][ T582] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.804945][ T582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.948053][T13995] random: crng reseeded on system resumption [ 234.962246][T13995] Restarting kernel threads ... [ 234.978396][T13995] Done restarting kernel threads. [ 235.076829][T13637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.292792][T14044] bond2: option arp_all_targets: invalid value (262144) [ 235.301271][T14044] bond2 (unregistering): Released all slaves [ 235.358394][T14054] veth1_macvtap: left promiscuous mode [ 235.390466][T14054] macsec0: entered promiscuous mode [ 235.427974][T14062] veth1_macvtap: entered promiscuous mode [ 235.448901][T14062] macsec0: left promiscuous mode [ 235.466152][T14059] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.498309][T14059] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.501363][T14054] netlink: 'syz.3.3048': attribute type 1 has an invalid length. [ 235.519088][T14059] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.651628][T14054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.665355][T14077] 9p: Bad value for 'wfdno' [ 235.672711][T14062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14062 comm=syz.3.3048 [ 235.676361][T14066] set_capacity_and_notify: 2 callbacks suppressed [ 235.676405][T14066] loop7: detected capacity change from 0 to 512 [ 235.702881][T14066] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.714955][T14066] ext4: Unknown parameter 'obj_role' [ 235.715259][T14077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=14077 comm=syz.4.3053 [ 235.754309][T14084] bond1: (slave batadv1): Opening slave failed [ 235.776960][T13637] veth0_vlan: entered promiscuous mode [ 235.807304][T13637] veth1_vlan: entered promiscuous mode [ 235.871677][T13637] veth0_macvtap: entered promiscuous mode [ 235.886050][T13637] veth1_macvtap: entered promiscuous mode [ 235.947822][T13637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.986462][T13637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.035226][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.091968][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.092051][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.092086][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.182474][T14132] netlink: 'syz.4.3066': attribute type 4 has an invalid length. [ 236.189482][T14129] loop3: detected capacity change from 0 to 512 [ 236.203958][T14129] EXT4-fs: Ignoring removed nobh option [ 236.209654][T14129] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.212198][T14132] netlink: 'syz.4.3066': attribute type 4 has an invalid length. [ 236.216229][T14129] EXT4-fs: Ignoring removed i_version option [ 236.240077][T14135] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 236.277084][T14129] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.315597][T13166] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 236.374314][T14145] loop7: detected capacity change from 0 to 2048 [ 236.420400][T14150] loop4: detected capacity change from 0 to 1024 [ 236.440186][T14150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.467344][T14152] loop3: detected capacity change from 0 to 1024 [ 236.498195][T12825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.510840][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 236.510858][ T29] audit: type=1400 audit(1769264947.842:17905): avc: denied { write } for pid=14155 comm="syz.5.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 236.551915][T14152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 236.613597][T14152] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.692160][T14177] 9pnet_fd: Insufficient options for proto=fd [ 236.710202][T13166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 236.746994][T14182] vhci_hcd vhci_hcd.3: invalid port number 9 [ 236.766099][ T29] audit: type=1400 audit(1769264948.082:17906): avc: denied { create } for pid=14181 comm="syz.7.3086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 236.811203][T14191] x_tables: duplicate underflow at hook 2 [ 236.877154][T14199] loop8: detected capacity change from 0 to 512 [ 236.931238][T14199] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.940505][T14199] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 236.952677][T14199] EXT4-fs (loop8): orphan cleanup on readonly fs [ 236.959680][T14199] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3089: bad orphan inode 15 [ 236.970137][T14199] ext4_test_bit(bit=14, block=18) = 1 [ 236.975561][T14199] is_bad_inode(inode)=0 [ 236.979887][T14199] NEXT_ORPHAN(inode)=1023 [ 236.984247][T14199] max_ino=32 [ 236.987610][T14199] i_nlink=0 [ 236.991602][T14199] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #15: comm syz.8.3089: corrupted xattr block 19: e_value size too large [ 237.006724][T14199] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 237.017127][T14199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 237.018293][T14208] __nla_validate_parse: 20 callbacks suppressed [ 237.018342][T14208] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3092'. [ 237.063952][T14201] SELinux: ebitmap: truncated map [ 237.070546][T14201] SELinux: failed to load policy [ 237.076973][T14201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3090'. [ 237.086858][T14201] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3090'. [ 237.087600][T14212] loop7: detected capacity change from 0 to 512 [ 237.096271][T14201] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.3090'. [ 237.122917][T14212] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 237.144641][ T9861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.193793][ T29] audit: type=1326 audit(1769264948.522:17907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14215 comm="syz.3.3096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b7dedacb9 code=0x0 [ 237.222417][ T29] audit: type=1400 audit(1769264948.552:17908): avc: denied { connect } for pid=14211 comm="syz.7.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 237.245441][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3097'. [ 237.254719][T14221] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3097'. [ 237.268099][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 237.302875][ T29] audit: type=1400 audit(1769264948.632:17909): avc: denied { read } for pid=14226 comm="syz.5.3099" path="socket:[45351]" dev="sockfs" ino=45351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.354933][T14231] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3099'. [ 237.380176][T14231] netlink: 'syz.5.3099': attribute type 1 has an invalid length. [ 237.417874][T14235] loop7: detected capacity change from 0 to 512 [ 237.427321][T14235] EXT4-fs: Ignoring removed nobh option [ 237.433114][T14235] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.439746][T14235] EXT4-fs: Ignoring removed i_version option [ 237.479774][T14235] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.492655][ T29] audit: type=1400 audit(1769264948.822:17910): avc: denied { mounton } for pid=14215 comm="syz.3.3096" path="pipe:[44342]" dev="pipefs" ino=44342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 237.557379][ T7005] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 237.564848][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 237.589142][ T29] audit: type=1326 audit(1769264948.922:17911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14244 comm="syz.7.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 237.624398][ T29] audit: type=1326 audit(1769264948.922:17912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14244 comm="syz.7.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 237.648145][ T29] audit: type=1326 audit(1769264948.922:17913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14244 comm="syz.7.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 237.671903][ T29] audit: type=1326 audit(1769264948.922:17914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14244 comm="syz.7.3105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 237.736175][T14249] loop4: detected capacity change from 0 to 8192 [ 237.747863][T14249] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.052025][T14271] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3114'. [ 238.187702][T14285] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 238.221290][T14289] loop7: detected capacity change from 0 to 512 [ 238.230734][T14289] ext4: Bad value for 'resgid' [ 238.235650][T14289] ext4: Bad value for 'resgid' [ 238.516209][T14294] EXT4-fs: Ignoring removed nobh option [ 238.521929][T14294] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.549996][T14294] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.702112][ T7005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.759430][T14308] EXT4-fs: Ignoring removed nobh option [ 238.765075][T14308] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.771578][T14308] EXT4-fs: Ignoring removed i_version option [ 238.790415][T14312] netlink: 'syz.4.3129': attribute type 21 has an invalid length. [ 238.798369][T14312] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3129'. [ 238.826464][T14308] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.839942][T14312] netlink: 'syz.4.3129': attribute type 4 has an invalid length. [ 238.847805][T14312] netlink: 'syz.4.3129': attribute type 5 has an invalid length. [ 238.867953][T14312] netlink: 'syz.4.3129': attribute type 13 has an invalid length. [ 238.881401][T14312] gretap0: refused to change device tx_queue_len [ 238.888423][T14312] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 238.910542][T13637] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 239.003072][T14331] EXT4-fs: Ignoring removed nobh option [ 239.008769][T14331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.025423][T14331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.131711][T14341] 9p: Bad value for 'source' [ 239.376341][T13637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.446973][T14357] netlink: 'syz.5.3143': attribute type 1 has an invalid length. [ 239.799076][T14361] ext2: Unexpected value for 'debug' [ 239.914674][T14363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.969652][T14363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.295179][T14384] EXT4-fs: inline encryption not supported [ 240.313741][T14379] EXT4-fs (loop3): 1 truncate cleaned up [ 240.333925][T14384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.353924][T14379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.387429][T14379] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 240.431806][T13166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.501974][T12825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.617779][T14393] netlink: 'syz.3.3154': attribute type 11 has an invalid length. [ 240.969017][T14400] lo speed is unknown, defaulting to 1000 [ 240.983557][T14400] lo speed is unknown, defaulting to 1000 [ 240.998301][T14400] lo speed is unknown, defaulting to 1000 [ 241.017923][T14400] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 241.056347][T14400] lo speed is unknown, defaulting to 1000 [ 241.086466][T14400] lo speed is unknown, defaulting to 1000 [ 241.096477][T14400] lo speed is unknown, defaulting to 1000 [ 241.171707][T14400] lo speed is unknown, defaulting to 1000 [ 241.180713][T14400] lo speed is unknown, defaulting to 1000 [ 241.201017][T14400] lo speed is unknown, defaulting to 1000 [ 241.642934][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 241.642951][ T29] audit: type=1400 audit(1769264952.972:17938): avc: denied { map } for pid=14419 comm="syz.4.3163" path="socket:[44640]" dev="sockfs" ino=44640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 241.673008][ T29] audit: type=1400 audit(1769264952.972:17939): avc: denied { read accept } for pid=14419 comm="syz.4.3163" path="socket:[44640]" dev="sockfs" ino=44640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 241.860803][T14405] delete_channel: no stack [ 241.928283][T14441] set_capacity_and_notify: 7 callbacks suppressed [ 241.928301][T14441] loop4: detected capacity change from 0 to 512 [ 241.965833][T14441] EXT4-fs: Ignoring removed nobh option [ 241.971557][T14441] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.978126][T14441] EXT4-fs: Ignoring removed i_version option [ 242.029978][T14449] __nla_validate_parse: 14 callbacks suppressed [ 242.030028][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3171'. [ 242.045423][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3171'. [ 242.059520][T14449] random: crng reseeded on system resumption [ 242.090999][T14449] Restarting kernel threads ... [ 242.106334][T14449] Done restarting kernel threads. [ 242.247214][T14468] netlink: 'syz.4.3175': attribute type 12 has an invalid length. [ 242.255428][T14468] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3175'. [ 242.334598][T14471] loop5: detected capacity change from 0 to 512 [ 242.364158][T14471] EXT4-fs: Ignoring removed i_version option [ 242.406111][T14347] syz.8.3140 (14347) used greatest stack depth: 5896 bytes left [ 242.425443][T14481] loop4: detected capacity change from 0 to 1024 [ 242.479608][T14481] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.541546][T14491] loop5: detected capacity change from 0 to 512 [ 242.572997][T14495] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3179: bg 0: block 112: padding at end of block bitmap is not set [ 242.587660][T14491] EXT4-fs: Ignoring removed nobh option [ 242.593416][T14491] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.599929][T14491] EXT4-fs: Ignoring removed i_version option [ 242.618548][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3183'. [ 242.627504][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3183'. [ 242.639305][T14497] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.3179: Freeing blocks not in datazone - block = 0, count = 16 [ 242.676975][T14496] random: crng reseeded on system resumption [ 242.699003][T14496] Restarting kernel threads ... [ 242.714746][T14496] Done restarting kernel threads. [ 242.836123][T14511] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3187'. [ 242.853802][T14511] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3187'. [ 242.884193][ T29] audit: type=1400 audit(1769264954.212:17940): avc: denied { getopt } for pid=14510 comm="syz.3.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 242.932445][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 242.944723][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 242.944723][ T52] [ 242.954451][ T52] EXT4-fs (loop4): Total free blocks count 0 [ 242.960669][ T52] EXT4-fs (loop4): Free/Dirty block details [ 242.966662][ T52] EXT4-fs (loop4): free_blocks=16 [ 242.971897][ T52] EXT4-fs (loop4): dirty_blocks=16 [ 242.977085][ T52] EXT4-fs (loop4): Block reservation details [ 242.983223][ T52] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 243.000627][ T29] audit: type=1400 audit(1769264954.332:17941): avc: denied { read write } for pid=14518 comm="syz.3.3191" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 243.025980][ T29] audit: type=1400 audit(1769264954.332:17942): avc: denied { open } for pid=14518 comm="syz.3.3191" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 243.097123][T14522] loop3: detected capacity change from 0 to 8192 [ 269.268402][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 280.804320][ T29] audit: type=1326 audit(280.767:17943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e5bbacb9 code=0x7ffc0000 [ 280.834530][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3196'. [ 280.854387][T14652] loop8: detected capacity change from 0 to 1024 [ 280.862385][ T29] audit: type=1326 audit(280.787:17944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb0e5bbacb9 code=0x7ffc0000 [ 280.885567][ T29] audit: type=1326 audit(280.797:17945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e5bbacb9 code=0x7ffc0000 [ 280.908965][ T29] audit: type=1326 audit(280.797:17946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0e5bbacb9 code=0x7ffc0000 [ 280.932481][ T29] audit: type=1326 audit(280.797:17947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e5bbacb9 code=0x7ffc0000 [ 280.955973][ T29] audit: type=1326 audit(280.797:17948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e5bbacb9 code=0x7ffc0000 [ 280.979051][T14661] netlink: 408 bytes leftover after parsing attributes in process `syz.5.3198'. [ 280.979714][ T29] audit: type=1326 audit(280.797:17949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0e5bbacb9 code=0x7ffc0000 [ 281.012006][ T29] audit: type=1326 audit(280.797:17950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e5bbacb9 code=0x7ffc0000 [ 281.035432][ T29] audit: type=1326 audit(280.797:17951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0e5bbacb9 code=0x7ffc0000 [ 281.058594][ T29] audit: type=1326 audit(280.797:17952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.4.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fb0e5bbacb9 code=0x7ffc0000 [ 281.087529][T14652] EXT4-fs: Ignoring removed nobh option [ 281.093442][T14652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.113055][T14657] loop7: detected capacity change from 0 to 512 [ 281.131345][T14652] EXT4-fs mount: 8 callbacks suppressed [ 281.131363][T14652] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.152204][T14657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 281.179040][T14657] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3194: invalid indirect mapped block 4294967295 (level 1) [ 281.218529][T14657] EXT4-fs (loop7): Remounting filesystem read-only [ 281.229164][T14657] EXT4-fs (loop7): 2 truncates cleaned up [ 281.234637][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3200'. [ 281.235760][T14657] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.243886][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3200'. [ 281.261916][T14676] random: crng reseeded on system resumption [ 281.288634][T14676] Restarting kernel threads ... [ 281.295275][T14676] Done restarting kernel threads. [ 281.506681][ T9861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.593508][T14697] loop8: detected capacity change from 0 to 512 [ 281.605657][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 281.617733][T14697] EXT4-fs: Ignoring removed nobh option [ 281.623451][T14697] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.629981][T14697] EXT4-fs: Ignoring removed i_version option [ 281.667116][T14697] EXT4-fs (loop8): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.689891][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3209'. [ 281.723374][T14706] loop4: detected capacity change from 0 to 512 [ 281.732208][T14706] EXT4-fs: Ignoring removed nobh option [ 281.737873][T14706] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.744411][T14706] EXT4-fs: Ignoring removed i_version option [ 281.762025][T14706] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.803598][T12825] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 281.843156][T14707] bond3 (unregistering): Released all slaves [ 281.886564][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3212'. [ 281.895705][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3212'. [ 281.931935][T14722] loop3: detected capacity change from 0 to 1024 [ 281.939371][T14722] EXT4-fs: Ignoring removed nobh option [ 281.945083][T14722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.952576][T14720] random: crng reseeded on system resumption [ 281.964105][T14720] Restarting kernel threads ... [ 281.974175][T14720] Done restarting kernel threads. [ 281.990965][T14722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.007805][T14726] loop5: detected capacity change from 0 to 2048 [ 282.212055][T14657] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.281270][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3221'. [ 282.333082][T14754] loop4: detected capacity change from 0 to 512 [ 282.344962][T14754] EXT4-fs: Ignoring removed nobh option [ 282.351005][T14754] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.357568][T14754] EXT4-fs: Ignoring removed i_version option [ 282.378729][T14760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3225'. [ 282.419862][T14754] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.441371][ T9861] EXT4-fs (loop8): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 282.484276][T14772] netem: incorrect ge model size [ 282.489388][T14772] netem: change failed [ 282.517136][T13166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.526093][T14774] loop5: detected capacity change from 0 to 512 [ 282.533601][T14774] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.548703][T14774] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3231: invalid block [ 282.574811][T12825] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 282.584284][T14774] EXT4-fs (loop5): Remounting filesystem read-only [ 282.591128][T14774] EXT4-fs (loop5): 2 truncates cleaned up [ 282.597736][T14774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.618683][T14780] random: crng reseeded on system resumption [ 282.723954][T14792] Restarting kernel threads ... [ 282.771233][T14792] Done restarting kernel threads. [ 282.845985][T14799] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 283.017624][T14799] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 283.074106][T14807] loop8: detected capacity change from 0 to 128 [ 283.095146][T14665] udevd[14665]: incorrect ext4 checksum on /dev/loop8 [ 283.102858][T14807] EXT4-fs (loop8): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 283.121411][T14665] udevd[14665]: incorrect ext4 checksum on /dev/loop8 [ 283.150176][T14809] loop7: detected capacity change from 0 to 512 [ 283.159411][T14809] EXT4-fs: Ignoring removed nobh option [ 283.165071][T14809] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.171613][T14809] EXT4-fs: Ignoring removed i_version option [ 283.329236][T14809] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.371336][T14809] tipc: Started in network mode [ 283.376455][T14809] tipc: Node identity 5e000000000000000000000000000001, cluster identity 4711 [ 283.385714][T14809] tipc: Enabling of bearer rejected, failed to enable media [ 283.411605][ T7005] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 283.490174][T14814] EXT4-fs: inline encryption not supported [ 283.509785][T14814] EXT4-fs: Invalid commit interval 1073741824, must be smaller than 21474836 [ 283.617166][T14819] FAULT_INJECTION: forcing a failure. [ 283.617166][T14819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.630334][T14819] CPU: 1 UID: 0 PID: 14819 Comm: syz.3.3245 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 283.630378][T14819] Tainted: [W]=WARN [ 283.630387][T14819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.630408][T14819] Call Trace: [ 283.630422][T14819] [ 283.630433][T14819] __dump_stack+0x1d/0x30 [ 283.630518][T14819] dump_stack_lvl+0x95/0xd0 [ 283.630631][T14819] dump_stack+0x15/0x1b [ 283.630656][T14819] should_fail_ex+0x263/0x280 [ 283.630684][T14819] should_fail+0xb/0x20 [ 283.630771][T14819] should_fail_usercopy+0x1a/0x20 [ 283.630801][T14819] copy_fpstate_to_sigframe+0x636/0x7d0 [ 283.630836][T14819] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 283.630894][T14819] ? x86_task_fpu+0x36/0x60 [ 283.630937][T14819] get_sigframe+0x34c/0x470 [ 283.631042][T14819] ? get_signal+0xdbe/0xf60 [ 283.631084][T14819] x64_setup_rt_frame+0xa7/0x4e0 [ 283.631181][T14819] arch_do_signal_or_restart+0x24b/0x450 [ 283.631293][T14819] exit_to_user_mode_loop+0x6a/0x6f0 [ 283.631326][T14819] do_syscall_64+0x1d3/0x2a0 [ 283.631386][T14819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.631410][T14819] RIP: 0033:0x7f3b7de9b58e [ 283.631433][T14819] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 283.631459][T14819] RSP: 002b:00007f3b7c936fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.631517][T14819] RAX: 0000000000000001 RBX: 00007f3b7c9376c0 RCX: 00007f3b7de9b58e [ 283.631536][T14819] RDX: 0000000000000001 RSI: 00007f3b7c937090 RDI: 0000000000000006 [ 283.631554][T14819] RBP: 00007f3b7c937090 R08: 0000000000000000 R09: 0000000000000000 [ 283.631572][T14819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.631589][T14819] R13: 00007f3b7e156038 R14: 00007f3b7e155fa0 R15: 00007ffebf159f18 [ 283.631616][T14819] [ 283.908819][T14823] random: crng reseeded on system resumption [ 283.943174][T14823] Restarting kernel threads ... [ 283.949536][T14823] Done restarting kernel threads. [ 284.034719][T14833] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 284.042427][T14833] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 284.204830][T14847] FAT-fs (loop8): Directory bread(block 64) failed [ 284.221919][T14847] FAT-fs (loop8): Directory bread(block 65) failed [ 284.248130][T14847] FAT-fs (loop8): Directory bread(block 66) failed [ 284.275107][T14847] FAT-fs (loop8): Directory bread(block 67) failed [ 284.282207][T14774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.298295][T14847] FAT-fs (loop8): Directory bread(block 68) failed [ 284.304872][T14847] FAT-fs (loop8): Directory bread(block 69) failed [ 284.312136][T14847] FAT-fs (loop8): Directory bread(block 70) failed [ 284.318754][T14847] FAT-fs (loop8): Directory bread(block 71) failed [ 284.333814][T14847] FAT-fs (loop8): Directory bread(block 72) failed [ 284.340725][T14847] FAT-fs (loop8): Directory bread(block 73) failed [ 284.368558][T14860] bond_slave_0: entered promiscuous mode [ 284.374311][T14860] bond_slave_1: entered promiscuous mode [ 284.380316][T14860] macsec1: entered allmulticast mode [ 284.385673][T14860] bond0: entered allmulticast mode [ 284.390875][T14860] bond_slave_0: entered allmulticast mode [ 284.396630][T14860] bond_slave_1: entered allmulticast mode [ 284.404244][T14860] bond0: left allmulticast mode [ 284.409214][T14860] bond_slave_0: left allmulticast mode [ 284.414767][T14860] bond_slave_1: left allmulticast mode [ 284.420429][T14860] bond_slave_0: left promiscuous mode [ 284.425844][T14860] bond_slave_1: left promiscuous mode [ 284.441955][T14853] lo speed is unknown, defaulting to 1000 [ 284.450195][T14864] sctp: [Deprecated]: syz.8.3264 (pid 14864) Use of int in maxseg socket option. [ 284.450195][T14864] Use struct sctp_assoc_value instead [ 284.560402][T14871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.605937][T14864] sctp: [Deprecated]: syz.8.3264 (pid 14864) Use of int in max_burst socket option. [ 284.605937][T14864] Use struct sctp_assoc_value instead [ 284.634906][T14883] tipc: Failed to obtain node identity [ 284.640470][T14883] tipc: Enabling of bearer rejected, failed to enable media [ 284.678772][T14888] EXT4-fs: Ignoring removed nobh option [ 284.684439][T14888] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.690958][T14888] EXT4-fs: Ignoring removed i_version option [ 284.700186][T14888] EXT4-fs (loop8): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.729086][ T9861] EXT4-fs (loop8): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 284.772841][ T8954] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 284.794074][ T8954] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 284.806418][ T8954] EXT4-fs (loop7): This should not happen!! Data will be lost [ 284.806418][ T8954] [ 284.816182][ T8954] EXT4-fs (loop7): Total free blocks count 0 [ 284.822326][ T8954] EXT4-fs (loop7): Free/Dirty block details [ 284.828325][ T8954] EXT4-fs (loop7): free_blocks=2415919504 [ 284.834075][ T8954] EXT4-fs (loop7): dirty_blocks=16 [ 284.839502][ T8954] EXT4-fs (loop7): Block reservation details [ 284.845821][ T8954] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 284.854493][ T7005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.942017][T14909] batadv_slave_1: entered promiscuous mode [ 284.952191][T14908] batadv_slave_1: left promiscuous mode [ 284.974896][T14911] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.3278: iget: bad i_size value: -4294967286 [ 285.024882][T14911] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3278: couldn't read orphan inode 15 (err -117) [ 285.037714][T14911] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.053790][T14919] EXT4-fs: Ignoring removed nobh option [ 285.059686][T14919] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.066178][T14919] EXT4-fs: Ignoring removed i_version option [ 285.100514][T14919] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.124807][ T9861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.134787][ T7005] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 285.215183][T14930] lo speed is unknown, defaulting to 1000 [ 285.223956][T14926] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 285.253717][T14934] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.293031][T14937] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 285.338243][T14937] EXT4-fs (loop8): orphan cleanup on readonly fs [ 285.355202][T14934] netlink: 'syz.4.3288': attribute type 29 has an invalid length. [ 285.376783][T14937] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3287: corrupted inode contents [ 285.415729][T14937] EXT4-fs (loop8): Remounting filesystem read-only [ 285.416988][T12825] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.423769][T14937] EXT4-fs (loop8): 1 truncate cleaned up [ 285.437187][ T422] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 285.447831][ T422] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 285.458719][ T422] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 285.470754][T14937] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 285.513660][ T9861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 285.622454][T14963] EXT4-fs: Ignoring removed nobh option [ 285.628130][T14963] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.634732][T14963] EXT4-fs: Ignoring removed i_version option [ 285.653896][T14963] EXT4-fs (loop8): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.681063][T14965] EXT4-fs: Ignoring removed orlov option [ 285.711500][T14965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.725618][ T9861] EXT4-fs (loop8): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 285.816196][T14982] sctp: [Deprecated]: syz.4.3302 (pid 14982) Use of int in maxseg socket option. [ 285.816196][T14982] Use struct sctp_assoc_value instead [ 285.842942][T14984] __nla_validate_parse: 52 callbacks suppressed [ 285.842963][T14984] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3303'. [ 285.858452][T14984] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3303'. [ 285.886253][T14986] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3304'. [ 285.903700][T13166] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.959033][T14989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14989 comm=syz.4.3306 [ 285.972478][T14994] lo speed is unknown, defaulting to 1000 [ 285.973673][T14992] set_capacity_and_notify: 12 callbacks suppressed [ 285.973716][T14992] loop8: detected capacity change from 0 to 1024 [ 286.040636][T14992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.103618][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3307'. [ 286.117765][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3309'. [ 286.126731][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3309'. [ 286.146228][T14992] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.3307: missing EA_INODE flag [ 286.164057][T14999] random: crng reseeded on system resumption [ 286.170523][T14992] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.3307: error while reading EA inode 11 err=-117 [ 286.177944][ T7005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.193685][T14999] Restarting kernel threads ... [ 286.212704][T15001] loop7: detected capacity change from 0 to 512 [ 286.221756][T14999] Done restarting kernel threads. [ 286.225627][T15001] EXT4-fs: Ignoring removed nobh option [ 286.232487][T15001] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.239147][T15001] EXT4-fs: Ignoring removed i_version option [ 286.248904][T15001] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.314009][ T7005] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 286.370004][T15006] loop4: detected capacity change from 0 to 512 [ 286.376681][T15006] EXT4-fs: Ignoring removed nobh option [ 286.382401][T15006] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.388962][T15006] EXT4-fs: Ignoring removed i_version option [ 286.403899][T15010] loop5: detected capacity change from 0 to 512 [ 286.417008][T15006] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.439760][T15010] ext3: Unknown parameter '`' [ 286.473579][T15013] netlink: 444 bytes leftover after parsing attributes in process `syz.3.3314'. [ 286.484555][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'. [ 286.530622][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 286.530637][ T29] audit: type=1326 audit(286.497:18053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15017 comm="syz.3.3316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b7dedacb9 code=0x0 [ 286.563576][ T9861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.578278][T12825] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz-executor: Directory hole found for htree leaf block 0 [ 286.593985][T12825] EXT4-fs (loop4): Remounting filesystem read-only [ 286.608308][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3318'. [ 286.619851][T15021] loop7: detected capacity change from 0 to 1024 [ 286.628489][T15021] EXT4-fs: inline encryption not supported [ 286.634640][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3318'. [ 286.675131][T15022] loop5: detected capacity change from 0 to 512 [ 286.683199][T15021] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.699348][T15028] loop3: detected capacity change from 0 to 128 [ 286.708512][T15028] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 286.722302][T15022] EXT4-fs warning (device loop5): read_mmp_block:111: Error -117 while reading MMP block 12 [ 286.741748][T15021] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 286.787337][T15031] bond3: option ad_select: invalid value (4) [ 286.794786][T15031] bond3 (unregistering): Released all slaves [ 286.819433][ T29] audit: type=1326 audit(286.787:18054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.7.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 286.845110][ T29] audit: type=1326 audit(286.807:18055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.7.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 286.868369][ T29] audit: type=1326 audit(286.807:18056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.7.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 286.891483][ T29] audit: type=1326 audit(286.807:18057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.7.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 286.914533][ T29] audit: type=1326 audit(286.807:18058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.7.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 286.937609][ T29] audit: type=1326 audit(286.807:18059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.7.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 286.960731][ T29] audit: type=1326 audit(286.807:18060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.7.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 286.984051][ T29] audit: type=1326 audit(286.807:18061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.7.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 287.007449][ T29] audit: type=1326 audit(286.807:18062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.7.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f1223b7acb9 code=0x7ffc0000 [ 287.015226][T15033] bond3: option ad_select: invalid value (4) [ 287.045404][T15033] bond3 (unregistering): Released all slaves [ 287.090607][ T7005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.110322][T15016] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 287.131579][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.201441][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.299334][T15044] loop7: detected capacity change from 0 to 8192 [ 287.326347][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.372586][T15044] loop7: p1 p3 p4 [ 287.376647][T15044] loop7: p1 size 477167616 extends beyond EOD, truncated [ 287.385781][T13166] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.418553][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.433900][T15044] loop7: p3 start 4294901760 is beyond EOD, truncated [ 287.441024][T15044] loop7: p4 size 32768 extends beyond EOD, truncated [ 287.463880][T15057] loop8: detected capacity change from 0 to 512 [ 287.482196][ T3007] loop7: p1 p3 p4 [ 287.486139][ T3007] loop7: p1 size 477167616 extends beyond EOD, truncated [ 287.498687][T15057] EXT4-fs: Ignoring removed nobh option [ 287.504342][T15057] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.511083][T15057] EXT4-fs: Ignoring removed i_version option [ 287.535390][ T3007] loop7: p3 start 4294901760 is beyond EOD, truncated [ 287.542380][ T3007] loop7: p4 size 32768 extends beyond EOD, truncated [ 287.563596][T15057] EXT4-fs (loop8): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.627203][T14665] udevd[14665]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 287.631932][T14865] udevd[14865]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 287.658968][T15082] netlink: 'syz.7.3332': attribute type 4 has an invalid length. [ 287.669992][ T9861] EXT4-fs (loop8): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 287.710378][T15087] netlink: 'syz.7.3332': attribute type 4 has an invalid length. [ 287.721724][T14732] udevd[14732]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 287.738366][T14865] udevd[14865]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 287.749615][T15090] random: crng reseeded on system resumption [ 287.751797][ T52] bond0 (unregistering): Released all slaves [ 287.816317][T15051] lo speed is unknown, defaulting to 1000 [ 287.859451][ T52] hsr_slave_0: left promiscuous mode [ 287.873960][ T52] hsr_slave_1: left promiscuous mode [ 287.882693][T15090] Restarting kernel threads ... [ 287.902328][T15090] Done restarting kernel threads. [ 287.918242][ T52] veth1_macvtap: left promiscuous mode [ 287.938179][ T52] veth0_macvtap: left promiscuous mode [ 287.943843][ T52] veth1_vlan: left promiscuous mode [ 287.951708][T15103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.968496][T15103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.986789][ T52] veth0_vlan: left promiscuous mode [ 288.002244][T15098] loop3: detected capacity change from 0 to 8192 [ 288.071858][T15098] loop3: p1 p2 p4 [ 288.076010][T15098] loop3: p1 start 2130708480 is beyond EOD, truncated [ 288.083396][T15098] loop3: p2 size 8388608 extends beyond EOD, truncated [ 288.135208][T15098] loop3: p4 size 262144 extends beyond EOD, truncated [ 288.290948][T14665] udevd[14665]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 288.306284][T15089] udevd[15089]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 288.337253][ T3429] lo speed is unknown, defaulting to 1000 [ 288.343165][ T3429] infiniband syz2: ib_query_port failed (-19) [ 288.449225][T15127] syzkaller0: entered promiscuous mode [ 288.454833][T15127] syzkaller0: entered allmulticast mode [ 288.591351][T15051] chnl_net:caif_netlink_parms(): no params data found [ 288.714631][T15166] EXT4-fs: Ignoring removed nobh option [ 288.720374][T15166] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.726883][T15166] EXT4-fs: Ignoring removed i_version option [ 288.736804][T15051] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.744032][T15051] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.769142][T15051] bridge_slave_0: entered allmulticast mode [ 288.785498][T15051] bridge_slave_0: entered promiscuous mode [ 288.816495][T15166] EXT4-fs (loop8): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.834229][T15051] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.841571][T15051] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.854284][T15051] bridge_slave_1: entered allmulticast mode [ 288.861085][T15051] bridge_slave_1: entered promiscuous mode [ 288.880323][T15051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.891454][T15051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.923482][T15051] team0: Port device team_slave_0 added [ 288.935486][T15051] team0: Port device team_slave_1 added [ 288.974941][T15051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.982058][T15051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.008151][T15051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.031713][T15051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.039158][T15051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.065344][T15051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.109453][T15051] hsr_slave_0: entered promiscuous mode [ 289.115798][T15051] hsr_slave_1: entered promiscuous mode [ 289.122102][T15051] debugfs: 'hsr0' already exists in 'hsr' [ 289.127894][T15051] Cannot create hsr debugfs directory [ 289.223454][ T9861] EXT4-fs (loop8): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 289.448781][T15218] FAULT_INJECTION: forcing a failure. [ 289.448781][T15218] name failslab, interval 1, probability 0, space 0, times 0 [ 289.461515][T15218] CPU: 0 UID: 0 PID: 15218 Comm: syz.3.3360 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.461562][T15218] Tainted: [W]=WARN [ 289.461572][T15218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.461590][T15218] Call Trace: [ 289.461600][T15218] [ 289.461611][T15218] __dump_stack+0x1d/0x30 [ 289.461646][T15218] dump_stack_lvl+0x95/0xd0 [ 289.461750][T15218] dump_stack+0x15/0x1b [ 289.461781][T15218] should_fail_ex+0x263/0x280 [ 289.461812][T15218] should_failslab+0x8c/0xb0 [ 289.461837][T15218] __kmalloc_noprof+0xb8/0x580 [ 289.461867][T15218] ? tracepoint_add_func+0x1f4/0x6b0 [ 289.461961][T15218] ? __pfx_perf_trace_csd_function+0x10/0x10 [ 289.461994][T15218] tracepoint_add_func+0x1f4/0x6b0 [ 289.462061][T15218] ? pcpu_alloc_noprof+0xd18/0x1210 [ 289.462092][T15218] ? __pfx_perf_trace_csd_function+0x10/0x10 [ 289.462198][T15218] tracepoint_probe_register+0x5b/0x90 [ 289.462261][T15218] ? __pfx_perf_trace_csd_function+0x10/0x10 [ 289.462295][T15218] ? __pfx_perf_trace_csd_function+0x10/0x10 [ 289.462327][T15218] trace_event_reg+0x15c/0x190 [ 289.462436][T15218] perf_trace_event_init+0x35c/0x7b0 [ 289.462473][T15218] perf_trace_init+0x15f/0x1d0 [ 289.462499][T15218] perf_tp_event_init+0x68/0xc0 [ 289.462538][T15218] perf_try_init_event+0xd9/0x540 [ 289.462610][T15218] ? perf_event_alloc+0xb2e/0x18d0 [ 289.462651][T15218] perf_event_alloc+0xb39/0x18d0 [ 289.462706][T15218] ? idr_find+0x2d/0x40 [ 289.462755][T15218] __se_sys_perf_event_open+0x656/0x1290 [ 289.462813][T15218] __x64_sys_perf_event_open+0x67/0x80 [ 289.462977][T15218] x64_sys_call+0x78c/0x3000 [ 289.463018][T15218] do_syscall_64+0xc0/0x2a0 [ 289.463052][T15218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.463078][T15218] RIP: 0033:0x7f3b7dedacb9 [ 289.463157][T15218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.463216][T15218] RSP: 002b:00007f3b7c937028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 289.463247][T15218] RAX: ffffffffffffffda RBX: 00007f3b7e155fa0 RCX: 00007f3b7dedacb9 [ 289.463269][T15218] RDX: 0000000000000000 RSI: 0000000000000106 RDI: 0000200000000200 [ 289.463354][T15218] RBP: 00007f3b7c937090 R08: 0000000000000000 R09: 0000000000000000 [ 289.463379][T15218] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 289.463399][T15218] R13: 00007f3b7e156038 R14: 00007f3b7e155fa0 R15: 00007ffebf159f18 [ 289.463428][T15218] [ 289.795500][T15231] EXT4-fs: Ignoring removed nobh option [ 289.801186][T15231] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.807691][T15231] EXT4-fs: Ignoring removed i_version option [ 289.846143][T15051] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.857622][T15231] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.893996][T15051] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.905190][T13166] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 289.920822][T15051] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.941081][T15051] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.943870][T15236] xt_bpf: check failed: parse error [ 290.099724][T15263] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 290.104880][T15051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.119303][T15263] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 290.138265][T15263] EXT4-fs (loop3): 1 truncate cleaned up [ 290.144698][T15263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.161860][T15263] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.3.3366: path /104/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 290.195694][T13166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.205882][T15051] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.220122][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.227554][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.271479][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.278731][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.453970][T15051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.622146][T15051] veth0_vlan: entered promiscuous mode [ 290.649940][T15329] FAULT_INJECTION: forcing a failure. [ 290.649940][T15329] name failslab, interval 1, probability 0, space 0, times 0 [ 290.662740][T15329] CPU: 0 UID: 0 PID: 15329 Comm: syz.3.3372 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 290.662863][T15329] Tainted: [W]=WARN [ 290.662874][T15329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.662949][T15329] Call Trace: [ 290.662956][T15329] [ 290.662964][T15329] __dump_stack+0x1d/0x30 [ 290.662991][T15329] dump_stack_lvl+0x95/0xd0 [ 290.663096][T15329] dump_stack+0x15/0x1b [ 290.663130][T15329] should_fail_ex+0x263/0x280 [ 290.663159][T15329] should_failslab+0x8c/0xb0 [ 290.663189][T15329] __kmalloc_noprof+0xb8/0x580 [ 290.663218][T15329] ? security_perf_event_alloc+0x48/0x120 [ 290.663332][T15329] security_perf_event_alloc+0x48/0x120 [ 290.663375][T15329] perf_event_alloc+0x171c/0x18d0 [ 290.663421][T15329] ? idr_find+0x2d/0x40 [ 290.663552][T15329] __se_sys_perf_event_open+0x656/0x1290 [ 290.663603][T15329] __x64_sys_perf_event_open+0x67/0x80 [ 290.663698][T15329] x64_sys_call+0x78c/0x3000 [ 290.663785][T15329] do_syscall_64+0xc0/0x2a0 [ 290.663817][T15329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.663890][T15329] RIP: 0033:0x7f3b7dedacb9 [ 290.663912][T15329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.664003][T15329] RSP: 002b:00007f3b7c937028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 290.664032][T15329] RAX: ffffffffffffffda RBX: 00007f3b7e155fa0 RCX: 00007f3b7dedacb9 [ 290.664051][T15329] RDX: 0000000000000000 RSI: 000000000000011e RDI: 0000200000000200 [ 290.664070][T15329] RBP: 00007f3b7c937090 R08: 0000000000000000 R09: 0000000000000000 [ 290.664087][T15329] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 290.664106][T15329] R13: 00007f3b7e156038 R14: 00007f3b7e155fa0 R15: 00007ffebf159f18 [ 290.664199][T15329] [ 290.715024][T15051] veth1_vlan: entered promiscuous mode [ 290.894134][T15051] veth0_macvtap: entered promiscuous mode [ 290.902971][T15051] veth1_macvtap: entered promiscuous mode [ 290.911870][T15340] __nla_validate_parse: 13 callbacks suppressed [ 290.911887][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3374'. [ 290.927520][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3374'. [ 290.959186][T15340] random: crng reseeded on system resumption [ 290.976374][T15051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.990239][T15051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.004324][T15340] Restarting kernel threads ... [ 291.005327][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.018330][T15340] Done restarting kernel threads. [ 291.022399][ T55] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.036431][T15346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=15346 comm=syz.5.3376 [ 291.050858][T15343] syzkaller0: entered promiscuous mode [ 291.056430][T15343] syzkaller0: entered allmulticast mode [ 291.076932][ T55] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.127973][ T55] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.238232][T15369] FAULT_INJECTION: forcing a failure. [ 291.238232][T15369] name failslab, interval 1, probability 0, space 0, times 0 [ 291.251097][T15369] CPU: 0 UID: 0 PID: 15369 Comm: syz.3.3383 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 291.251199][T15369] Tainted: [W]=WARN [ 291.251208][T15369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.251246][T15369] Call Trace: [ 291.251254][T15369] [ 291.251263][T15369] __dump_stack+0x1d/0x30 [ 291.251292][T15369] dump_stack_lvl+0x95/0xd0 [ 291.251391][T15369] dump_stack+0x15/0x1b [ 291.251412][T15369] should_fail_ex+0x263/0x280 [ 291.251485][T15369] should_failslab+0x8c/0xb0 [ 291.251560][T15369] __kmalloc_cache_noprof+0x64/0x4a0 [ 291.251590][T15369] ? find_get_context+0x8f/0x530 [ 291.251640][T15369] find_get_context+0x8f/0x530 [ 291.251682][T15369] __se_sys_perf_event_open+0x917/0x1290 [ 291.251743][T15369] __x64_sys_perf_event_open+0x67/0x80 [ 291.251859][T15369] x64_sys_call+0x78c/0x3000 [ 291.251949][T15369] do_syscall_64+0xc0/0x2a0 [ 291.251983][T15369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.252064][T15369] RIP: 0033:0x7f3b7dedacb9 [ 291.252081][T15369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.252157][T15369] RSP: 002b:00007f3b7c937028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 291.252184][T15369] RAX: ffffffffffffffda RBX: 00007f3b7e155fa0 RCX: 00007f3b7dedacb9 [ 291.252201][T15369] RDX: 0000000000000000 RSI: 0000000000000128 RDI: 0000200000000200 [ 291.252219][T15369] RBP: 00007f3b7c937090 R08: 0000000000000000 R09: 0000000000000000 [ 291.252254][T15369] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 291.252280][T15369] R13: 00007f3b7e156038 R14: 00007f3b7e155fa0 R15: 00007ffebf159f18 [ 291.252306][T15369] [ 291.452134][T15377] set_capacity_and_notify: 6 callbacks suppressed [ 291.452152][T15377] loop8: detected capacity change from 0 to 128 [ 291.502188][T15383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3387'. [ 291.544581][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 291.544599][ T29] audit: type=1400 audit(291.507:18085): avc: denied { ioctl } for pid=15385 comm="syz.7.3389" path="socket:[48648]" dev="sockfs" ino=48648 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 291.586150][ T29] audit: type=1400 audit(291.547:18086): avc: denied { bind } for pid=15385 comm="syz.7.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 291.619766][T15391] loop8: detected capacity change from 0 to 512 [ 291.643172][T15395] loop7: detected capacity change from 0 to 512 [ 291.661667][T15391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.702947][T15395] can0: slcan on ttyS3. [ 291.707754][T15391] EXT4-fs error (device loop8): ext4_validate_block_bitmap:423: comm syz.8.3391: bg 0: bad block bitmap checksum [ 291.722495][T15401] loop3: detected capacity change from 0 to 256 [ 291.755472][T15401] FAT-fs (loop3): Directory bread(block 64) failed [ 291.771130][T15391] Quota error (device loop8): write_blk: dquota write failed [ 291.778627][T15391] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 291.788607][T15391] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3391: Failed to acquire dquot type 1 [ 291.800335][T15395] can0 (unregistered): slcan off ttyS3. [ 291.820054][T15401] FAT-fs (loop3): Directory bread(block 65) failed [ 291.826916][T15401] FAT-fs (loop3): Directory bread(block 66) failed [ 291.833686][T15401] FAT-fs (loop3): Directory bread(block 67) failed [ 291.840729][T15401] FAT-fs (loop3): Directory bread(block 68) failed [ 291.848074][T15401] FAT-fs (loop3): Directory bread(block 69) failed [ 291.854805][T15401] FAT-fs (loop3): Directory bread(block 70) failed [ 291.874681][T15401] FAT-fs (loop3): Directory bread(block 71) failed [ 291.874686][ T9861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.890697][T15401] FAT-fs (loop3): Directory bread(block 72) failed [ 291.897417][T15401] FAT-fs (loop3): Directory bread(block 73) failed [ 291.930944][T15401] nfs: Unknown parameter '' [ 291.931556][ T29] audit: type=1400 audit(291.897:18087): avc: denied { mounton } for pid=15400 comm="syz.3.3393" path="/116/file1" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 291.947956][T15401] syz.3.3393: attempt to access beyond end of device [ 291.947956][T15401] loop3: rw=8912896, sector=1736, nr_sectors = 32 limit=256 [ 291.989254][T15388] loop2: detected capacity change from 0 to 512 [ 292.008120][T15401] syz.3.3393: attempt to access beyond end of device [ 292.008120][T15401] loop3: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 292.034201][T15388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.143797][T15388] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.3390: corrupted inode contents [ 292.202652][T15388] EXT4-fs (loop2): Remounting filesystem read-only [ 292.209452][T15388] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 292.246443][ T29] audit: type=1326 audit(292.207:18088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15433 comm="syz.3.3398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b7dedacb9 code=0x0 [ 292.287318][T15409] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3394'. [ 292.310580][T15408] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3394'. [ 292.339634][T15437] loop5: detected capacity change from 0 to 1024 [ 292.351346][T15437] EXT4-fs: Ignoring removed nobh option [ 292.357111][T15437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.374683][T15051] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.419322][T15437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.442332][T15395] delete_channel: no stack [ 292.532081][ T29] audit: type=1400 audit(292.497:18089): avc: denied { accept } for pid=15457 comm="syz.3.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 292.589320][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3405'. [ 292.598450][T15462] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3405'. [ 292.780220][ T29] audit: type=1400 audit(292.747:18090): avc: denied { write } for pid=3429 comm="kworker/1:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=50664 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 292.808991][T15483] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3409'. [ 292.841584][T15490] tipc: Started in network mode [ 292.846654][T15490] tipc: Node identity ac14140f, cluster identity 4711 [ 292.901434][T13637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.913146][T15490] tipc: New replicast peer: 255.255.255.255 [ 292.919476][T15490] tipc: Enabled bearer , priority 16 [ 292.933776][ T29] audit: type=1400 audit(292.897:18091): avc: denied { setcheckreqprot } for pid=15491 comm="syz.7.3413" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 292.995423][T15499] loop8: detected capacity change from 0 to 512 [ 293.006538][T15499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.044468][T15499] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3415: invalid indirect mapped block 4294967295 (level 1) [ 293.064171][T15499] EXT4-fs (loop8): Remounting filesystem read-only [ 293.071881][T15499] EXT4-fs (loop8): 2 truncates cleaned up [ 293.078298][T15499] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.117805][ T8954] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 293.238434][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3419'. [ 293.366530][T15533] netlink: 'syz.5.3422': attribute type 29 has an invalid length. [ 293.379258][T15531] loop7: detected capacity change from 0 to 1024 [ 293.387125][T15499] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.398437][T15533] netlink: 'syz.5.3422': attribute type 29 has an invalid length. [ 293.406931][T15536] FAULT_INJECTION: forcing a failure. [ 293.406931][T15536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.420594][T15536] CPU: 0 UID: 0 PID: 15536 Comm: syz.2.3424 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 293.420688][T15536] Tainted: [W]=WARN [ 293.420698][T15536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.420716][T15536] Call Trace: [ 293.420724][T15536] [ 293.420734][T15536] __dump_stack+0x1d/0x30 [ 293.420814][T15536] dump_stack_lvl+0x95/0xd0 [ 293.420844][T15536] dump_stack+0x15/0x1b [ 293.420868][T15536] should_fail_ex+0x263/0x280 [ 293.420895][T15536] should_fail+0xb/0x20 [ 293.420919][T15536] should_fail_usercopy+0x1a/0x20 [ 293.420954][T15536] _copy_from_user+0x1c/0xb0 [ 293.421101][T15536] do_sock_getsockopt+0xf1/0x210 [ 293.421135][T15536] __x64_sys_getsockopt+0x11d/0x1a0 [ 293.421170][T15536] x64_sys_call+0x2dc7/0x3000 [ 293.421234][T15536] do_syscall_64+0xc0/0x2a0 [ 293.421309][T15536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.421429][T15536] RIP: 0033:0x7f5a0429acb9 [ 293.421504][T15536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.421529][T15536] RSP: 002b:00007f5a02cf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 293.421556][T15536] RAX: ffffffffffffffda RBX: 00007f5a04515fa0 RCX: 00007f5a0429acb9 [ 293.421571][T15536] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000003 [ 293.421584][T15536] RBP: 00007f5a02cf7090 R08: 0000200000000040 R09: 0000000000000000 [ 293.421630][T15536] R10: 0000200000032580 R11: 0000000000000246 R12: 0000000000000001 [ 293.421649][T15536] R13: 00007f5a04516038 R14: 00007f5a04515fa0 R15: 00007ffff99339e8 [ 293.421676][T15536] [ 293.422192][T15531] EXT4-fs: Ignoring removed nobh option [ 293.584083][T15533] loop5: detected capacity change from 0 to 164 [ 293.587384][T15531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.631513][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3425'. [ 293.644638][ T29] audit: type=1400 audit(293.607:18092): avc: denied { write } for pid=15487 comm="syz.3.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 293.684804][T15533] Unable to read rock-ridge attributes [ 293.716685][T15533] Unable to read rock-ridge attributes [ 293.729789][T15531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.758325][T15533] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 293.767036][T15540] Unable to read rock-ridge attributes [ 293.832415][T15531] ================================================================== [ 293.840668][T15531] BUG: KCSAN: data-race in do_sync_mmap_readahead / do_sync_mmap_readahead [ 293.849665][T15531] [ 293.852027][T15531] write to 0xffff88811b1c0c90 of 8 bytes by task 15564 on cpu 1: [ 293.859776][T15531] do_sync_mmap_readahead+0x2d8/0x350 [ 293.865188][T15531] filemap_fault+0x362/0xbb0 [ 293.869813][T15531] __do_fault+0xbc/0x200 [ 293.874232][T15531] handle_mm_fault+0x11d7/0x3030 [ 293.879225][T15531] __get_user_pages+0x1023/0x1ea0 [ 293.884295][T15531] __gup_longterm_locked+0xbad/0xe30 [ 293.889623][T15531] pin_user_pages_remote+0x7e/0xb0 [ 293.894804][T15531] process_vm_rw+0x49b/0x9c0 [ 293.899454][T15531] __x64_sys_process_vm_readv+0x78/0x90 [ 293.905055][T15531] x64_sys_call+0x148a/0x3000 [ 293.909787][T15531] do_syscall_64+0xc0/0x2a0 [ 293.914345][T15531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.920282][T15531] [ 293.922639][T15531] write to 0xffff88811b1c0c90 of 8 bytes by task 15531 on cpu 0: [ 293.930425][T15531] do_sync_mmap_readahead+0x2d8/0x350 [ 293.935857][T15531] filemap_fault+0x362/0xbb0 [ 293.940850][T15531] __do_fault+0xbc/0x200 [ 293.945161][T15531] handle_mm_fault+0x11d7/0x3030 [ 293.950178][T15531] __get_user_pages+0x1023/0x1ea0 [ 293.955357][T15531] __mm_populate+0x242/0x390 [ 293.960003][T15531] vm_mmap_pgoff+0x23b/0x2d0 [ 293.964729][T15531] ksys_mmap_pgoff+0x267/0x310 [ 293.969539][T15531] x64_sys_call+0x16bb/0x3000 [ 293.974271][T15531] do_syscall_64+0xc0/0x2a0 [ 293.978832][T15531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.984785][T15531] [ 293.987136][T15531] value changed: 0x000000000000001d -> 0x0000000000000075 [ 293.994279][T15531] [ 293.996631][T15531] Reported by Kernel Concurrency Sanitizer on: [ 294.002826][T15531] CPU: 0 UID: 0 PID: 15531 Comm: syz.7.3423 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.014508][T15531] Tainted: [W]=WARN [ 294.018523][T15531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.028627][T15531] ================================================================== [ 294.038080][ T3487] tipc: Node number set to 2886997007 [ 294.194741][ T7005] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.188107][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!