last executing test programs: 3m21.323501257s ago: executing program 32 (id=328): quotactl$Q_QUOTAON(0x0, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x22020600) fadvise64(0xffffffffffffffff, 0x8, 0x1, 0x5) 3m7.973498452s ago: executing program 5 (id=456): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000008c0)={r0, 0x0, 0x0}, 0x20) r1 = socket(0x10, 0x803, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffe, @private=0xa010101}, 0x7ffffffe}}, 0x2e) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000180)={0x0, 0xffffffffffffff39, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20040084) unshare(0x22020980) r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x1b8c, 0x0, 0x7, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x8}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400), 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x9}]}, &(0x7f00000002c0)=0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080)={0x1ff, 0x2, 0x0, 0x62ba1814, 0xc, 0x0, 0x8001, 0x1, r8}, 0x20) 3m7.042868166s ago: executing program 5 (id=463): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_emit_ethernet(0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x2000000, 0x0) 3m6.789949674s ago: executing program 5 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000000)={'erspan0\x00', @ifru_flags=0x200}) 3m6.596844947s ago: executing program 5 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0x5, 0x4) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @empty}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2fafb9bdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1, 0x9, 0xae, 0x0, 0xffffffffffffffff, 0xfea}, 0x50) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, r2, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 3m5.785090852s ago: executing program 5 (id=471): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) mlock(&(0x7f0000259000/0x4000)=nil, 0x4000) (async, rerun: 32) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000240)=0x3ff, 0xc, 0x0) (async, rerun: 32) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x40}, 0x44) (async) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$FIONCLEX(r0, 0x5450) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) (async, rerun: 32) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) setsockopt(r5, 0x8, 0x7, &(0x7f0000000180)="5db9482905d7d78ba37b2e87db1d2919e1c7610d8899beb39b480a875100f30aa19ef13c79b995aa2d7d092e4aaecce71563760786f33b72e9b40a6c79964866247136bfaf685bd6e0b457cfd7c51fe97c5c6f539440c7cfb5e9809d16590ffbf5ef4c3cb5e59d9584713b5a36888698f048e3318550869cbd2f07db0815cc6def54f73bcf0d76e1", 0x88) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) r7 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x904b, 0x3000}) poll(&(0x7f0000009b00)=[{r7}], 0x20, 0x72) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xa4) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) (async) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) (async) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 3m5.570312647s ago: executing program 5 (id=473): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) splice(0xffffffffffffffff, &(0x7f0000000300)=0x8, 0xffffffffffffffff, &(0x7f0000000340)=0x3e, 0x3, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0xc7c, 0x0, 0xfffffffe, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xb5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000740)={&(0x7f0000000380)="7fda6b16569523a5385461e692e15bbaa872d312f1621d39184535894fff00c755870e4b4e802943e4fb934e96ff4432166b97dd8cd3263247f4f41b", &(0x7f00000003c0)=""/200, &(0x7f0000000580)="b18425cf7e9016c0dafac47e35023d97a93c7b3d52a420ba6a25ad0bd6f6af24ede23e079739e9cbcdec771b7cbe4668fcfcd05bd6039e9a0495ce1a9d9ce373f48fa88b00adb058b07a51f72394184c7588868d6a876aa7229befe07aa55b41b3418ac710abf236ffee9ecdb4c3c662f4f3e0676f4b6e0c1f633c00330be68ff23a673ef86e484cda7d99ae3b37b5", &(0x7f0000000680)="35da4ba9f34ce98bdc5777161e4eac3f062d559abf5f82dc3c5145fbbf4b34e61b8aab9d691dd8ea5acdb26f3c3bd7e1c7ef84c32ea8882e1f5427cc2cae95b1d713218f540d4647a0c6585f90ae6b2e2c913a3a67ef0b43bafb4007732af3bdfe84311e7a2d546fb59ebecb1499fc0c1e1faa0e499d4a70a6682039dbee23374014e9517cf4dee47e66880a6acec622e0c58a52e4e078fb8e93d1fc4043dbaff9e396da382730c835dae3c2be4c5840443e172f6cea1166bdb9134236af9c81", 0xffff9886, r3, 0x4}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x6d82d2b6, r4}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40004) recvfrom(r5, 0x0, 0x0, 0x20, 0x0, 0x0) 3m5.52945585s ago: executing program 33 (id=473): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) splice(0xffffffffffffffff, &(0x7f0000000300)=0x8, 0xffffffffffffffff, &(0x7f0000000340)=0x3e, 0x3, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0xc7c, 0x0, 0xfffffffe, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xb5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000740)={&(0x7f0000000380)="7fda6b16569523a5385461e692e15bbaa872d312f1621d39184535894fff00c755870e4b4e802943e4fb934e96ff4432166b97dd8cd3263247f4f41b", &(0x7f00000003c0)=""/200, &(0x7f0000000580)="b18425cf7e9016c0dafac47e35023d97a93c7b3d52a420ba6a25ad0bd6f6af24ede23e079739e9cbcdec771b7cbe4668fcfcd05bd6039e9a0495ce1a9d9ce373f48fa88b00adb058b07a51f72394184c7588868d6a876aa7229befe07aa55b41b3418ac710abf236ffee9ecdb4c3c662f4f3e0676f4b6e0c1f633c00330be68ff23a673ef86e484cda7d99ae3b37b5", &(0x7f0000000680)="35da4ba9f34ce98bdc5777161e4eac3f062d559abf5f82dc3c5145fbbf4b34e61b8aab9d691dd8ea5acdb26f3c3bd7e1c7ef84c32ea8882e1f5427cc2cae95b1d713218f540d4647a0c6585f90ae6b2e2c913a3a67ef0b43bafb4007732af3bdfe84311e7a2d546fb59ebecb1499fc0c1e1faa0e499d4a70a6682039dbee23374014e9517cf4dee47e66880a6acec622e0c58a52e4e078fb8e93d1fc4043dbaff9e396da382730c835dae3c2be4c5840443e172f6cea1166bdb9134236af9c81", 0xffff9886, r3, 0x4}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x6d82d2b6, r4}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40004) recvfrom(r5, 0x0, 0x0, 0x20, 0x0, 0x0) 2m37.598260655s ago: executing program 1 (id=654): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000ec0)=r1, 0x4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x40, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x3}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x2004c004) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r6], 0x30}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400400, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x6, 0x9}}, './file0\x00'}) r9 = getpid() r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00032abd7000fedbdf254a0000000e0001006e657464657673696d0000000f0002006e65f9ffffff73696d3000000e00a80066697273746e616d65000000"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x850) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)=ANY=[@ANYBLOB="0900000087ab4fdd797619b80ef209ad7007", @ANYRES16=r11, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r10, 0xf505, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x400}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3, 0x7f, 0x7f, 0x10180, r8, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0xb, @void, @value, @value=r8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000011b8523c85000000750000009500000000000000"], 0x0, 0x3}, 0x94) 2m36.742057273s ago: executing program 1 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x309) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x40000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807f8ff000b000000000000001e000ac0b3c60600", 0x24) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x9}]}) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @auto=[0x37, 0x35, 0x63, 0x32, 0x31, 0x64, 0x35, 0x30, 0xc, 0x64, 0x62, 0x34, 0x32, 0x66, 0x38, 0x55]}, &(0x7f0000000480)={0x0, "fd5d2e3b42380bff9b38cd0e527f5c4354488af47eaf52a9e30ce43750d45f10c1d8379ed6d1938d292671959725aa9a05eefaea32090ac47f727d60c6c71112", 0x18}, 0x48, 0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r4, &(0x7f00000002c0)=""/85, 0x55, 0x3) accept4$llc(r3, 0x0, 0x0, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x9, 0x7, 0xd1c}}) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) 2m35.745357622s ago: executing program 1 (id=677): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a, 0x0, 0x3}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x45, 0x0, 0x0, 0x80000000}, {}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000feb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x70f4, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68812300000004000000010000b441bf", @ANYRES32, @ANYBLOB="0001"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) 2m35.709038895s ago: executing program 1 (id=678): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x16) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read(r0, &(0x7f0000000200)=""/264, 0x108) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003085cf976f2f8c8f9d2c3e85262579c1bac41ebbf79231c27c8a0aaf216201ab041d6bc8918cd5940b46ba11701dfb55ffd98c9b16be0fe2c2738d6d1516b300bff6ad8e0a2dca811a495f639af6c195d0c30b050e2aa50f72bc89d6523831db8c8a9f76446996655ac508d24950f7adb8ed32006cd5", @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = dup(r1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_INPUT(r4, &(0x7f0000004500)={0xa, {"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", 0x1000}}, 0x1006) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000007301230000d0c3a6a400000000000000c58da68f6b15d7b024ec19b880c399b7f630b84634bb9a82e55ef906dc8e5ae900f9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000340)={0x3, {{0xa, 0x4e21, 0x5, @mcast1, 0x4}}}, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4af07ec3ad71e14dc00000000c2ab00c60e0000000000000800000901000038fabe8279c2f1d600", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) open(&(0x7f0000000000)='.\x00', 0x181000, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet(r5, 0x0, 0x0, 0x720, 0x0, 0x0) r8 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) timerfd_create(0x0, 0x0) write$cgroup_int(r8, &(0x7f00000000c0)=0xa00, 0x12) 2m32.938405524s ago: executing program 1 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000007c0)={0x7, &(0x7f00000006c0)=[{0xd, 0xe7, &(0x7f0000000140)="8e81f9e9234d28d4c28b7fbefadcaeca41fe08480f44ab861e6581e43272ff704482093d3d0e14bcef87e091c04d24f2de5126ab12e11e65773cdab8005f2a487807904b80952375a407a1b94c3fb2794264784391d241f2e440a2a10fe6211fe61b9114af224ae348e5728cb500e78cbca6fb05ea276eb099dafa563f247116ee2218bb993f39af556563c69d490e5b82e41a2eaf81e1ec2b4b3ea69d8d750763aa437944f661e6c7c58bc0b8140d7b121aa24c78b7d5482d914eb0793839930ff760e4c66bbaec87fc91cbf9ff98051923a0470c04731e84939cb42a47ecdebc0d405ed1017b", 0x66be83b13298b491}, {0x3, 0x97, &(0x7f0000000300)="234c825b03e1e90ae4c11bf2588cb2e3b3df1df44f527f6fae68890530371ddebbd221d179375f3c280326868139406d97d142a98a5f22e141bbc6b7bbb35d33bf60b7fac60f8036b80bf197e2701e1c383ce20d309dd65615fbff07c77db26d5dfe62f5f6fa948e9b6e1a5477c39e4c10782691e4d05db3abbab422479d4147510e35cdfcb99046399b5619a79482da217243bb5ed5b5", 0x0, 0x1}, {0x8, 0x79, &(0x7f00000003c0)="bb14d0e542dcf9b699ee92cfbada72e8cd76cacfc1bfbf9adaedc606fa9a8a5ba35ca74154afe40065ca3ff0f83bce555a450b543334370ff720872d5f7f555b1fdd954ec9874159d88215c469499ad48816ef4ec4149803b41952723b4e3e4c650336cf21131c494b27c3aa9e654a7ef7ec0edb0ea303056d"}, {0x5, 0xac, &(0x7f0000000440)="de8ba2e4adb2c77b700f1526dfeda4b54820a3c40901d82710d568e1a12b750033b01f291b86b98edd66a2a700048d7690044e8af7c69f0d27b7f0fc898001b0a0ff9531c0ed75b4f4703d66b0185cc0d3e2f896978c12c803cfb31bff372b85da505c0efebdae8e79de6b2b79a74052a663f887ea7f9517d51480722a74f1c80d87138b884f75f5c6fbc74a28a6543d486c3085b3fb7c14f8b397e9b6dd51d349fc37aa4edf0d1610a44433", 0x1, 0x1}, {0x9, 0xb6, &(0x7f0000000500)="2143564df3a936593683c4e31cf968ecf0d1aea17008596402f0b5884072158cf6b26e581147ab7a383a01daff057a11b1e23cb668c102fc0cd730b3fbf72f26a1ea0504e8cbd9c5c0206fd6dfd4c282189b13cecab8e3fec068404f7ba5b8fcf3e2ec2e03864a9ca075ab59e421245cf88c03c2a79757fda2841e67a298c128bd9a59913f5a43e46c7e46181e7cd61f7a01b9b81e8e5cd1b7033a25d5f11d7363ed31519c2e6bb33a3f22eb34a9448b79d3baeb89b9"}, {0x0, 0x5e, &(0x7f00000005c0)="6edfa0db941a1c6c6eeb0f7f7af1f1a3356b8576807e4a09846269e19e9f6af38958e4561697ccd9c7a36d4c0cfd7a921b9b0b6c784b999e5d4a3f9a4da58f2dc40cff7babe9a7ea7cbf312382bfe33fe3be1aa10abf3e9e30c94e2ecdca", 0x1}, {0x8000, 0x47, &(0x7f0000000640)="a6850e4102845ad62115fb085307254075caf5bd69104ba0dd6ca74dcea8680a0215d7919407c0087bf0e31cd8bcd7eeb4f8bfe857f47e0ba84d0dce5b019c08cf9c5f8fa79c36"}]}) (async) r4 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) (async) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000080)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2, 0x9, 0x10000, 0x2, 0xb9d2, 0x4}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m25.71476851s ago: executing program 1 (id=737): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x80, 0x0, 0x8, 0x80552, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x10a220, 0x10000, 0xfffffffc, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000540)={0x0, 0xc89a, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000500)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000140)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) memfd_secret(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_usbip_server_init(0x3) r3 = socket(0x1e, 0x6, 0xffff0000) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x1000, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10616, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x8, 0x5, 0x20005, 0x0, 0x0, 0x712, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000640)=[{&(0x7f00000004c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000070a010208000000000000000a00000008000a40000000000c0003400000000000000002"], 0x28}}, 0x8040) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240fffffffa16000300686173683a6e65742c706f72742c6e6574000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x40100, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m25.587812728s ago: executing program 34 (id=737): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x80, 0x0, 0x8, 0x80552, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x10a220, 0x10000, 0xfffffffc, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000540)={0x0, 0xc89a, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000500)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000140)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) memfd_secret(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_usbip_server_init(0x3) r3 = socket(0x1e, 0x6, 0xffff0000) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x1000, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10616, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x8, 0x5, 0x20005, 0x0, 0x0, 0x712, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000640)=[{&(0x7f00000004c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000070a010208000000000000000a00000008000a40000000000c0003400000000000000002"], 0x28}}, 0x8040) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240fffffffa16000300686173683a6e65742c706f72742c6e6574000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x40100, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m2.106861828s ago: executing program 0 (id=889): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m0.690944105s ago: executing program 0 (id=897): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000002580)=ANY=[], 0x0) 2m0.402850555s ago: executing program 0 (id=900): syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x3c, 0x44, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x7}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x2, 0x4e21, 0x4e22}, 0x1}, 0x3, 0x1}, 0x1}}}}}}}, 0x0) 2m0.32064767s ago: executing program 0 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000001c0)='\x00', 0x0, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000041000000000000000000000000ffffff9e000000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x89901) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0/file0\x00') mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 2m0.210904378s ago: executing program 0 (id=903): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x8f, &(0x7f00000015c0)=""/143, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24044850) close(r3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8024) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040c95}, 0x81) 1m59.716404762s ago: executing program 0 (id=904): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) (async) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) (async) 1m59.615404099s ago: executing program 35 (id=904): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) (async) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) (async) 1m12.838851786s ago: executing program 6 (id=1225): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0xd0, 0x268, 0x33a, 0x0, 0x268, 0x2a0, 0x460, 0x460, 0x2a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0xd8000000, {0x9402}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, [0xffffffff, 0xff, 0xffffff00, 0xffffff00], [0xffffffff, 0xff, 0xff000000], 'pim6reg1\x00', 'wlan0\x00', {0xff}, {}, 0x3b, 0x1, 0x1, 0x72}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:su_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x800, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0xa00, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x400a00, 0xa000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x2000000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r2, 0x1c, "3da8a85b71b103968c6ba1436ed30f0116ffeae6b72b12f06d194e59"}, &(0x7f0000000180)=0x24) 1m11.458853071s ago: executing program 6 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x20004000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000ff"], 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000400000000006301c0ff000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0xffffffffffffffff) socket$kcm(0x23, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x4005, &(0x7f0000000180)=0x1004, 0x4) socket$igmp6(0xa, 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r2 = getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x8f, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x11, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x10, 0xa0, 0x1, 0x6, [{@remote, 0xc47}, {@broadcast, 0x33a3}]}, @ra={0x94, 0x4}]}}, {{0x4e21, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, {[@sack_perm, @exp_smc={0xfe, 0x6}]}}, {"e18230444255f91d20a59b010d5889938d9e0b6c1a85f34c3ec72ddd753c721f6a4310ab98d46948befa5904c81d5457a1"}}}}}}, 0x0) kcmp(r2, r2, 0x0, r0, r0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 1m11.17135183s ago: executing program 6 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@dellinkprop={0x34, 0x6d, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x4120, 0x880}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f00000000c0)='\x00', 0x10a01, &(0x7f0000000100)={@_ha_fsid={[0x9]}, {0x6, 0x1, 0x1, 0xa0000000000}}, 0xfa2, &(0x7f0000000180), &(0x7f00000001c0)=0x356}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x7e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x40080) 1m10.980694663s ago: executing program 6 (id=1242): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000017c0)}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040080}, 0x20001844) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760009"], 0x24}, 0x1, 0x5502000000000000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x40}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x40004) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x40c, &(0x7f0000000280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x74, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xfffffffffffffd78, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x74}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf250000ab000000fe80000800", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffff"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x74}}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r9, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r9, 0x2, &(0x7f0000000740)={0x0}) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc0385869, &(0x7f0000000700)={r2, &(0x7f0000000180)='ext4\x00', 0x400, &(0x7f00000001c0)={@align=0x800, {0x800, 0x7, 0x8, 0x1}}, 0x7fffffff, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000006c0)=0x1}) ioctl$sock_bt_hci(r10, 0x400448e7, &(0x7f0000000740)="5f2f2fc9cc6b89194a545c05d3ed510b112a1015d83fb695ff82fd7f99de1d1db42d59aee8d9ab0dcc1fa6d99eb52706b19320dcd8819f15ce1144608929c193761e2577d807c18d32dbd26b8cc24db6a7b8d51b69830d8cbb0abb7556b070fe55063064ccae303131e69c") sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) 1m8.301436407s ago: executing program 6 (id=1248): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xfc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 1m7.702972528s ago: executing program 6 (id=1256): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="60000000020605000000000000000000070000001400079608001140000000000800124000000c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000b3", @ANYRES8=r0], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) (fail_nth: 3) 1m7.702846438s ago: executing program 36 (id=1256): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="60000000020605000000000000000000070000001400079608001140000000000800124000000c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000b3", @ANYRES8=r0], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) (fail_nth: 3) 28.631635717s ago: executing program 4 (id=1625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) r1 = socket$inet(0x2, 0x3, 0x9) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850002000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x80000}, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 28.528463924s ago: executing program 4 (id=1627): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xfff0000000000000, 0x7}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x2, 0x80000) 28.44289688s ago: executing program 4 (id=1628): r0 = socket(0x10, 0xa, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x2}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0xea, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0x5, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "00000100", "8da0630cb37381ee2b00010000802000", '\x00', "19a4216dfdbf6602"}, 0x28) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x41) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x80, 0x8000, 0x5, 0x4, 0x7, 0x1, 0x367, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0xf7, @empty, 0x1}}, 0x3, 0x1, 0x8001, 0x3, 0x10, 0x7}, &(0x7f0000000200)=0x9c) 28.42774074s ago: executing program 4 (id=1629): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x89f2, &(0x7f0000000080)=0x59b) umount2(&(0x7f00000001c0)='./file0/file0/../file0\x00', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000100), 0x10) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e6576650000400002"], 0x70}}, 0x0) 28.018594689s ago: executing program 4 (id=1631): unshare(0x40400) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x70271, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') 27.684562782s ago: executing program 4 (id=1638): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x4, {{0xa, 0x5, 0x0, @mcast1, 0xb}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2200000ffffffffffff86dd60010700009c110000000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 27.56542851s ago: executing program 37 (id=1638): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x4, {{0xa, 0x5, 0x0, @mcast1, 0xb}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2200000ffffffffffff86dd60010700009c110000000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 4.678439769s ago: executing program 2 (id=1906): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x34000, 0x0, 0x0, 0xc}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 4.622983933s ago: executing program 2 (id=1907): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES64], 0x48}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) creat(&(0x7f0000000040)='./bus\x00', 0x0) 3.169325043s ago: executing program 3 (id=1917): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x1) fchdir(r4) r5 = open(&(0x7f0000000080)='.\x00', 0x480, 0x0) fremovexattr(r5, &(0x7f0000000000)=@known='user.syz\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2503fffff9ff0000000016000000140001800d703a"], 0x28}, 0x1, 0x0, 0x0, 0x44880}, 0x0) 2.950581708s ago: executing program 3 (id=1918): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x4, @perf_config_ext={0x0, 0x9}, 0x18000, 0x2e, 0x80000001, 0x0, 0x7, 0x6, 0x9, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r4 = creat(&(0x7f0000000200)='./file1\x00', 0x1) write$cgroup_devices(r4, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000002480)=0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$phonet(r4, &(0x7f00000000c0)=""/229, 0xe5, 0x122, &(0x7f00000001c0)={0x23, 0x6, 0x8, 0x3}, 0x10) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x24040896) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) personality(0xfe47fef9f5ff7379) 2.684044416s ago: executing program 2 (id=1921): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$inet(0x2, 0x802, 0x10000000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0xf7, 0x4, 0x56}]}) r1 = syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r1, &(0x7f0000000240)=0x0, &(0x7f0000000280)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) lsm_list_modules(0x0, 0x0, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0xffffffff, 0x6}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x10, 0x89, 0xffffffff}) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r6, 0x0, r7, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031682d3fc142e00334788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) 2.570939944s ago: executing program 3 (id=1923): unshare(0x40400) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x70271, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') 2.446425812s ago: executing program 2 (id=1924): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0xc, 0x7, 0x8000000000000000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x1d, @val=@iter={&(0x7f00000016c0)=@cgroup={0x1, 0xffffffffffffffff, 0x6}, 0x10}}, 0x20) io_setup(0x4, &(0x7f00000014c0)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48887) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x8000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@fallback=r3, 0x6, 0x0, 0xe, &(0x7f0000001300)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0], &(0x7f00000013c0)=[0x0, 0x0], 0x0}, 0x40) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = dup(r9) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001440)=ANY=[@ANYRES32=r10, @ANYRES32=r5, @ANYBLOB="0400000000000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r5, @ANYBLOB, @ANYRES64=r8], 0x20) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x8020000) io_getevents(r4, 0xffff, 0x1, &(0x7f0000001480)=[{}], &(0x7f00000011c0)) mount_setattr(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, &(0x7f0000000880)={0xf, 0x8e, 0x20000}, 0x20) r13 = msgget(0x2, 0x288) msgctl$IPC_INFO(r13, 0x3, &(0x7f0000001200)=""/222) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r3, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) socket$key(0xf, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ppoll(&(0x7f0000000200)=[{r0, 0x400}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000001580)=0x0) perf_event_open(&(0x7f0000001500)={0x3, 0x80, 0x0, 0x8, 0x2, 0x9, 0x0, 0x5, 0x14080, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x3, 0x10}, 0x1480, 0xbd, 0x80000001, 0x6, 0x9, 0x3, 0xac, 0x0, 0x3, 0x0, 0x6}, r14, 0x2, r1, 0x1) 2.319810081s ago: executing program 3 (id=1926): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x61, 0x0, 0x8}) 2.280521634s ago: executing program 8 (id=1928): r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x14, 0xc6, 0x3, 0x9, [{@private=0xa010101, 0x5}, {@empty, 0x4}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0xfffffffd, 0x0, 0x0, 0x1, 0x6, "000309000000000000000000f73809630400"}) r4 = syz_open_pts(r3, 0x80) r5 = dup3(r4, r3, 0x80000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x3, @loopback}, 0x80004, 0x0, 0xffffffff}}, 0x2e) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) r10 = syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace(0x8, r10) r11 = syz_pidfd_open(r10, 0x0) process_mrelease(r11, 0x700000000000000) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r9, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) open(&(0x7f0000000280)='./file0\x00', 0x56001, 0x5) syz_open_pts(r4, 0x0) lseek(0xffffffffffffffff, 0x3, 0x3) 2.03265295s ago: executing program 3 (id=1931): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0x5000, 0x36e2, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x66, 0x0, 0x3, 0x4, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x2b, 0xec, [@remote, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x56, r1}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x474, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1c4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xf0, 0x3, "2b5bc5b4f33135b0e3bde163abb6c50268d57b0979447227eea4cfa8e2a4fad6dfb12ec3cf033dd1dacec5bad4b8b104d6d3087d021be7504b3c802b4965104cd11246f9ac081a4a9400c2edad4c951af8a6cf1148e16a684fa09ba74d1a5c55ec86dacec4adabddeb9a49699f5654a51bc101ad6e7dd8cea7279c1a6f57354055374b97d3f0b6eb4d7a2c98c9ee6744b4d374e31fb3f4edf46a0bb228ca6c6b69dd19ef6bfac369186b602ee8b94c8b5800202a2a9476c7e0483e509c18cf7b151105f4d69ffe99b3c9e4d8b942e9cb8dd48f3e674c708be3332643bacec1d2795842ec16164072551959dc"}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "6fc015a07ae91d5fd6567e7493ec133ba92deb13a5321d5772ab9955a3e6cc922cfa8c4143419cb3082965159abf3c3c3d482d9176615bbbd027ea4a53b01005ddee1f83ddb017a8202b49d79c743e814937d08197a1b7167ae7361c5e4c5971b90ffb06abf51c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "12166cbdbfa40f9a9232b1d98d9c85934787c3ce71997ba2b51bd5b5857e38bde5"}}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8487}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc2f}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x74d}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff2747}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd6b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x83}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x37a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffb7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}]}]}, 0x474}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000680)=""/92, &(0x7f0000000700)=0x5c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa0, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xd}, @CTA_EXPECT_ZONE={0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000810}, 0x20040801) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000008c0)={0x3, {{0xa, 0x4e23, 0xe, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7ff}}, {{0xa, 0x4e21, 0x3, @private0, 0x5}}}, 0x108) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000a40), r0) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x110, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x29cf}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x844}, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r6, &(0x7f0000000c40)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x10, 0x2, "b1d0f24f4d4b2b4fa96971343450bd0a916501fd5ffe7694d9367bb4cec9461cd2d1b377e0fc078cc699e46a15c202c34faa3fbfebcb6236eb4450144cd338", 0x18}, 0x60) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000cc0)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r4) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000e40)={&(0x7f0000000d00), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, r7, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x43}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$XFS_IOC_AG_GEOMETRY(r4, 0xc080583d, &(0x7f0000000e80)={0x9, 0x1, 0x2, 0xba13, 0x9, 0x5, 0x6, 0x67}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000f00)={@private1, @dev={0xfe, 0x80, '\x00', 0xa}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x3, 0xb, 0x400, 0x0, 0x0, r1}) ioctl(r6, 0x8, &(0x7f0000000f80)="7d8eeb3ff8cc90d34b9608edba00fe939b87a4a09b4bb71b5ffcd1027781bbbadbb53321d797ab9a75f9412ac648f00ba4549fc7b413d741dca1d3d69edbc9e1e72182ad63622fcfa2df5049311509f4115e85ff4d1b46dd25ccb16089a2744a9691adcc3f8be1e74e687e8f06efe11b8bea6b071485363d12") setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000001000)=0x5, 0x4) 2.012249612s ago: executing program 3 (id=1932): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000380)={'HL\x00'}, &(0x7f00000003c0)=0x1e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) splice(0xffffffffffffffff, &(0x7f0000000300)=0x8, 0xffffffffffffffff, &(0x7f0000000340)=0x3e, 0x3, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000400), 0x6}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xb5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x6d82d2b6, r5}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, r1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 1.648798077s ago: executing program 7 (id=1936): unshare(0x40400) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x70271, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 1.638119747s ago: executing program 7 (id=1937): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x11000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 1.30345526s ago: executing program 8 (id=1938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x404c855}, 0x0) 1.286127692s ago: executing program 8 (id=1939): r0 = socket$packet(0x11, 0xa, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) (async, rerun: 32) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40054) r1 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x3}, 0x0) (async, rerun: 32) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, 0x0, 0x0) (rerun: 32) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xf, 0x0, 0xfd, 0x0, 0x200, 0x20030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xe4}, 0x1, 0x0, 0x0, 0x8400}, 0x4008048) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async, rerun: 64) r5 = socket$inet(0xa, 0x801, 0x84) (async, rerun: 64) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x7, 0x0, &(0x7f0000000000)) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r5, 0xfffffffd) (async) r7 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001000), 0x581, 0x40000000, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x52, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) (rerun: 32) 1.234718705s ago: executing program 8 (id=1941): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000500)) 1.224923026s ago: executing program 2 (id=1942): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000000c40)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x10, 0x2, "b1d0f24f4d4b2b4fa96971343450bd0a916501fd5ffe7694d9367bb4cec9461cd2d1b377e0fc078cc699e46a15c202c34faa3fbfebcb6236eb4450144cd338", 0x18}, 0x60) ioctl(r0, 0x8, &(0x7f0000000f80)="7d8eeb3ff8cc90d34b9608edba00fe939b87a4a09b4bb71b5ffcd1027781bbbadbb53321d797ab9a75f9412ac648f00ba4549fc7b413d741dca1d3d69edbc9e1e72182ad63622fcfa2df5049311509f4115e85ff4d1b46dd25ccb16089a2744a9691adcc3f8be1e74e687e8f06efe11b8bea6b071485363d12") setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000001000)=0x5, 0x4) 1.221396496s ago: executing program 8 (id=1943): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x8890, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="87", 0x1, 0x4800, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)='`', 0x1, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) 1.212163617s ago: executing program 9 (id=1944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x68, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f00050fd25a80648c63940d0324fc60041200002037153e360c04018006041000"/46, 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x0) unshare(0x60480) epoll_create1(0x0) 1.042851008s ago: executing program 2 (id=1945): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$inet(0x2, 0x802, 0x10000000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0xf7, 0x4, 0x56}]}) r1 = syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r1, &(0x7f0000000240)=0x0, &(0x7f0000000280)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) lsm_list_modules(0x0, 0x0, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0xffffffff, 0x6}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x10, 0x89, 0xffffffff}) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r6, 0x0, r7, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031682d3fc142e00334788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) 1.042493988s ago: executing program 9 (id=1946): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) syz_usb_connect(0x0, 0x56, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x24020400) pselect6(0x40, &(0x7f0000000100)={0xca9a3b00000000, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x80000001}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0xfffffffffffffffc, 0x7, 0x8, 0x0, 0xfefffffffffffffc}, &(0x7f0000000280), 0x0) 755.446398ms ago: executing program 7 (id=1947): unshare(0x40400) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x70271, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 737.433889ms ago: executing program 7 (id=1948): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000200)=""/208, &(0x7f0000000300)=0xd0) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000580)=""/100, 0x64}, {&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/2, 0x2}], 0x5, 0x0, 0xffffff80) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2002, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10) bind$tipc(r0, 0x0, 0x0) 672.030324ms ago: executing program 7 (id=1949): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={&(0x7f0000000680), 0xa}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x102, 0x4, 0x118, 0x220, 0x110, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@multicast1, @private=0xa010102, 0xffffff00, 0xffffffff, 0x9, 0xa, {@empty, {[0x0, 0x0, 0x7f, 0x0, 0xff]}}, {@mac, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x1, 0x273, 0x5, 0x7fff, 0x3, 'ip_vti0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0xffffffffffffff0c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @loopback, @empty}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @private=0xa010101, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0xfffd, 0xfffe, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x263) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0xa4b4, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x404c855}, 0x0) 641.153955ms ago: executing program 7 (id=1950): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) 505.770835ms ago: executing program 9 (id=1951): r0 = socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9a}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80c09}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x4004841) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003680)}, 0x40012022) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x6, 0x0, 0x82, 0x4, 0x0, 0x0, 0x20062, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, @perf_config_ext={0x4, 0x263b93ab}, 0x800, 0x7ff, 0x20, 0x1, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 398.853852ms ago: executing program 9 (id=1952): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x183081, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0x3) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8004, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 382.657003ms ago: executing program 9 (id=1953): syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x2, [0xffffffffffffffa3, 0x3, 0x9, 0xeb6, 0x3, 0x4]}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000140)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcff", @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r1, 0x0, 0x40) ioprio_set$pid(0x2, 0x0, 0x0) 331.095257ms ago: executing program 8 (id=1954): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40200, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xb) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc010000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200201084000000b4efe6a4a1b24ccf84fef75d3669b13baf107b3383bd3ad017e6aa59c1a831b342816cf581e541235bc877da80fd73a7a74eb8fe0d698e2404e0bf72f888f734632aaeca783278e9a97ada2713089ee28e8ee87e28dbe68117e609889fb3188f916fe66195fb88d62ef5ff94ffd87b4b370f9a3e1831cdc7a641831b9b5575e9b886fcab1926d1f7b75459ac49fc81e9f237895110c122aa8dcc170084", @ANYRES16=r1, @ANYRESDEC=r1, @ANYRESDEC=r0], 0xb8}}, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80201, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 0s ago: executing program 9 (id=1955): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000400)=0xffffffff, 0x4) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) io_setup(0xb, &(0x7f00000003c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000040)={{0xfffffffffffffffd, 0x4}, {0xffffffff, 0x20000201}, 0x1, 0x2}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000000a00)="c7", 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0xfffff000) sendfile(r5, r4, 0x0, 0x3ffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0xe72c5f922f23cad9, 0x70bd28, 0x25dfdbf7}, 0x14}, 0x1, 0x0, 0x0, 0xc1920335b598980a}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="250a000000000000000000000000000000010000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) kernel console output (not intermixed with test programs): R15: 00007fff30c1cad8 [ 216.466641][ T8614] [ 216.815131][ T8610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.837052][ T8610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.857560][ T8610] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.414397][ T28] kauditd_printk_skb: 5615 callbacks suppressed [ 217.414411][ T28] audit: type=1326 audit(1775626239.071:13720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8584 comm="syz.7.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32846c819 code=0x50000 [ 217.514275][ T8635] set_capacity_and_notify: 6 callbacks suppressed [ 217.514294][ T8635] loop4: detected capacity change from 0 to 512 [ 217.532813][ T8635] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 217.675638][ T8642] audit: audit_backlog=65 > audit_backlog_limit=64 [ 217.683902][ T8641] audit: audit_backlog=65 > audit_backlog_limit=64 [ 217.707796][ T8641] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 217.716721][ T8642] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 217.735161][ T28] audit: type=1326 audit(1775626239.101:13721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8584 comm="syz.7.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32846c819 code=0x50000 [ 217.760810][ T8641] audit: backlog limit exceeded [ 217.766302][ T8642] audit: backlog limit exceeded [ 217.777144][ T8641] audit: audit_backlog=65 > audit_backlog_limit=64 [ 217.802114][ T8643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.022430][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.032405][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.244514][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1397'. [ 218.441565][ T8676] loop4: detected capacity change from 0 to 512 [ 218.453143][ T8676] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.493153][ T8676] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a843c018, mo2=0002] [ 218.505499][ T8676] System zones: 0-2, 18-18, 34-35 [ 218.540980][ T8676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.580975][ T8676] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.612907][ T8691] loop7: detected capacity change from 0 to 8192 [ 218.907513][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1403'. [ 218.923091][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.930643][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.373358][ T8676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.655701][ T8701] team0: left allmulticast mode [ 219.663602][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.694132][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.720828][ T8701] team_slave_0: left allmulticast mode [ 219.739074][ T8701] team_slave_1: left allmulticast mode [ 219.873790][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.912319][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.987366][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1408'. [ 220.023123][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 220.055626][ T4749] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.092921][ T4749] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.151718][ T4749] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.176903][ T8732] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 220.199873][ T4749] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.213977][ T8732] netlink: 'syz.4.1409': attribute type 4 has an invalid length. [ 220.295379][ T8732] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1409'. [ 220.609076][ T8765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8765 comm=syz.9.1418 [ 220.612109][ T8765] program syz.9.1418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.639043][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1420'. [ 220.639065][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1420'. [ 220.955246][ T8789] FAULT_INJECTION: forcing a failure. [ 220.955246][ T8789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.009072][ T8789] CPU: 1 UID: 0 PID: 8789 Comm: syz.7.1425 Not tainted syzkaller #0 PREEMPT(full) [ 221.009119][ T8789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 221.009129][ T8789] Call Trace: [ 221.009137][ T8789] [ 221.009146][ T8789] __dump_stack+0x1d/0x30 [ 221.009230][ T8789] dump_stack_lvl+0x95/0xd0 [ 221.009255][ T8789] dump_stack+0x15/0x1b [ 221.009274][ T8789] should_fail_ex+0x263/0x280 [ 221.009328][ T8789] should_fail+0xb/0x20 [ 221.009349][ T8789] should_fail_usercopy+0x1a/0x20 [ 221.009393][ T8789] _copy_from_iter+0xcf/0xea0 [ 221.009437][ T8789] ? __alloc_skb+0x4f6/0x690 [ 221.009466][ T8789] ? __alloc_skb+0x200/0x690 [ 221.009498][ T8789] netlink_sendmsg+0x4ae/0x6f0 [ 221.009552][ T8789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.009571][ T8789] ____sys_sendmsg+0x563/0x5b0 [ 221.009595][ T8789] ___sys_sendmsg+0x195/0x1e0 [ 221.009631][ T8789] __x64_sys_sendmsg+0xd4/0x160 [ 221.009650][ T8789] x64_sys_call+0x194c/0x3020 [ 221.009746][ T8789] do_syscall_64+0x12c/0x370 [ 221.009771][ T8789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.009794][ T8789] RIP: 0033:0x7fd32846c819 [ 221.009815][ T8789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.009844][ T8789] RSP: 002b:00007fd326ec7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.009865][ T8789] RAX: ffffffffffffffda RBX: 00007fd3286e5fa0 RCX: 00007fd32846c819 [ 221.009877][ T8789] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 221.009888][ T8789] RBP: 00007fd326ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.010018][ T8789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.010035][ T8789] R13: 00007fd3286e6038 R14: 00007fd3286e5fa0 R15: 00007ffd7ced3a58 [ 221.010079][ T8789] [ 221.479544][ T8802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8802 comm=syz.3.1428 [ 221.498450][ T8795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8795 comm=syz.7.1427 [ 221.525274][ T8795] program syz.7.1427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.588043][ T8802] program syz.3.1428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.636919][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1431'. [ 221.657709][ T8812] netlink: 'syz.9.1433': attribute type 29 has an invalid length. [ 221.671240][ T8812] netlink: 'syz.9.1433': attribute type 29 has an invalid length. [ 221.683673][ T8812] netlink: 'syz.9.1433': attribute type 29 has an invalid length. [ 221.736179][ T8817] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1432'. [ 221.748951][ T8818] netlink: 'syz.9.1433': attribute type 29 has an invalid length. [ 221.869883][ T8834] loop7: detected capacity change from 0 to 1024 [ 221.909273][ T8834] EXT4-fs: Ignoring removed bh option [ 221.937644][ T8834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.974405][ T6210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.992766][ T8845] loop3: detected capacity change from 0 to 1024 [ 222.003591][ T8845] EXT4-fs: Ignoring removed bh option [ 222.020399][ T8845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.072140][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1445'. [ 222.100990][ T8845] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.1445: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 222.126571][ T8845] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.1445: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 222.157965][ T8845] IPv6: addrconf: prefix option has invalid lifetime [ 222.181721][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1446'. [ 222.221466][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.242863][ T8855] loop7: detected capacity change from 0 to 164 [ 222.252655][ T8855] ISOFS: Bad logical zone size 2816 [ 222.288030][ T8855] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 222.347234][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.357147][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.427640][ T28] kauditd_printk_skb: 1385 callbacks suppressed [ 222.427657][ T28] audit: type=1400 audit(1775626244.122:15082): avc: denied { ioctl } for pid=8856 comm="syz.3.1448" path="socket:[24220]" dev="sockfs" ino=24220 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.726307][ T28] audit: type=1400 audit(1775626244.422:15083): avc: denied { ioctl } for pid=8904 comm="syz.9.1450" path="socket:[24749]" dev="sockfs" ino=24749 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.761046][ T28] audit: type=1400 audit(1775626244.452:15084): avc: denied { bind } for pid=8904 comm="syz.9.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.804583][ T28] audit: type=1400 audit(1775626244.472:15085): avc: denied { connect } for pid=8904 comm="syz.9.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.830112][ T28] audit: type=1400 audit(1775626244.472:15086): avc: denied { getopt } for pid=8904 comm="syz.9.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.900478][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1453'. [ 223.009795][ T8934] geneve1: entered promiscuous mode [ 223.016234][ T8934] macsec1: entered promiscuous mode [ 223.025131][ T8934] macsec1: entered allmulticast mode [ 223.038267][ T8934] geneve1: entered allmulticast mode [ 223.114752][ T28] audit: type=1400 audit(1775626244.802:15087): avc: denied { create } for pid=8933 comm="syz.9.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.168167][ T28] audit: type=1400 audit(1775626244.862:15088): avc: denied { write } for pid=8933 comm="syz.9.1454" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 223.168234][ T8947] random: crng reseeded on system resumption [ 223.201332][ T28] audit: type=1400 audit(1775626244.862:15089): avc: denied { open } for pid=8933 comm="syz.9.1454" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 223.267709][ T8946] loop7: detected capacity change from 0 to 512 [ 223.285826][ T28] audit: type=1400 audit(1775626244.952:15090): avc: denied { create } for pid=8933 comm="syz.9.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.329690][ T8946] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.345452][ T8946] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.456418][ T6210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.248502][ T28] audit: type=1400 audit(1775626245.942:15091): avc: denied { create } for pid=9022 comm="syz.4.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 224.385723][ T9025] random: crng reseeded on system resumption [ 225.631409][ T9047] __nla_validate_parse: 2 callbacks suppressed [ 225.631427][ T9047] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1473'. [ 225.667012][ T9045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9045 comm=syz.3.1471 [ 225.693466][ T9045] program syz.3.1471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.766991][ T9056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1475'. [ 225.928812][ T9068] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1474'. [ 225.992149][ T9073] random: crng reseeded on system resumption [ 226.048049][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1477'. [ 226.958562][ T9089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9089 comm=syz.3.1485 [ 227.016088][ T9089] program syz.3.1485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.108048][ T9092] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1486'. [ 227.422644][ T9098] loop4: detected capacity change from 0 to 512 [ 227.435218][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 227.435233][ T28] audit: type=1400 audit(1775626249.132:15111): avc: denied { create } for pid=9096 comm="syz.3.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 227.523799][ T28] audit: type=1400 audit(1775626249.162:15112): avc: denied { write } for pid=9096 comm="syz.3.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 227.549351][ T9098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.572065][ T28] audit: type=1400 audit(1775626249.162:15113): avc: denied { create } for pid=9096 comm="syz.3.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 227.609702][ T9098] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.655434][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 227.685411][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 227.749923][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.877339][ T9115] FAULT_INJECTION: forcing a failure. [ 227.877339][ T9115] name failslab, interval 1, probability 0, space 0, times 0 [ 227.929351][ T9115] CPU: 1 UID: 0 PID: 9115 Comm: syz.4.1493 Not tainted syzkaller #0 PREEMPT(full) [ 227.929377][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 227.929387][ T9115] Call Trace: [ 227.929393][ T9115] [ 227.929400][ T9115] __dump_stack+0x1d/0x30 [ 227.929477][ T9115] dump_stack_lvl+0x95/0xd0 [ 227.929497][ T9115] dump_stack+0x15/0x1b [ 227.929515][ T9115] should_fail_ex+0x263/0x280 [ 227.929538][ T9115] should_failslab+0x8c/0xb0 [ 227.929632][ T9115] __kmalloc_noprof+0xb8/0x4e0 [ 227.929678][ T9115] ? security_sb_alloc+0x48/0x100 [ 227.929706][ T9115] security_sb_alloc+0x48/0x100 [ 227.929729][ T9115] alloc_super+0x10d/0x580 [ 227.929769][ T9115] sget_fc+0x24e/0x6e0 [ 227.929794][ T9115] ? __pfx_set_anon_super_fc+0x10/0x10 [ 227.929870][ T9115] ? __pfx_mqueue_fill_super+0x10/0x10 [ 227.929920][ T9115] get_tree_nodev+0x2a/0x100 [ 227.929947][ T9115] mqueue_get_tree+0x63/0x90 [ 227.929987][ T9115] vfs_get_tree+0x57/0x1d0 [ 227.930006][ T9115] fc_mount_longterm+0x18/0xb0 [ 227.930036][ T9115] mq_init_ns+0x2db/0x370 [ 227.930099][ T9115] copy_ipcs+0x26e/0x460 [ 227.930166][ T9115] create_new_namespaces+0x12a/0x440 [ 227.930228][ T9115] unshare_nsproxy_namespaces+0xe6/0x120 [ 227.930339][ T9115] ksys_unshare+0x3f2/0x6f0 [ 227.930360][ T9115] ? ksys_write+0x161/0x1a0 [ 227.930381][ T9115] __x64_sys_unshare+0x1f/0x30 [ 227.930438][ T9115] x64_sys_call+0x1cef/0x3020 [ 227.930464][ T9115] do_syscall_64+0x12c/0x370 [ 227.930490][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.930509][ T9115] RIP: 0033:0x7fc5fafec819 [ 227.930523][ T9115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.930568][ T9115] RSP: 002b:00007fc5f9a3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 227.930714][ T9115] RAX: ffffffffffffffda RBX: 00007fc5fb265fa0 RCX: 00007fc5fafec819 [ 227.930726][ T9115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040480 [ 227.930737][ T9115] RBP: 00007fc5f9a3f090 R08: 0000000000000000 R09: 0000000000000000 [ 227.930836][ T9115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.930849][ T9115] R13: 00007fc5fb266038 R14: 00007fc5fb265fa0 R15: 00007ffe120aaf08 [ 227.930866][ T9115] [ 228.600761][ T9123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9123 comm=syz.3.1496 [ 228.683722][ T9126] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1497'. [ 228.706850][ T9123] program syz.3.1496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.438151][ T9147] loop3: detected capacity change from 0 to 512 [ 229.449769][ T9148] FAULT_INJECTION: forcing a failure. [ 229.449769][ T9148] name fail_futex, interval 1, probability 0, space 0, times 1 [ 229.465046][ T9148] CPU: 0 UID: 0 PID: 9148 Comm: syz.7.1503 Not tainted syzkaller #0 PREEMPT(full) [ 229.465076][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 229.465088][ T9148] Call Trace: [ 229.465096][ T9148] [ 229.465105][ T9148] __dump_stack+0x1d/0x30 [ 229.465158][ T9148] dump_stack_lvl+0x95/0xd0 [ 229.465187][ T9148] dump_stack+0x15/0x1b [ 229.465210][ T9148] should_fail_ex+0x263/0x280 [ 229.465238][ T9148] should_fail+0xb/0x20 [ 229.465263][ T9148] should_fail_futex+0x49/0x50 [ 229.465357][ T9148] futex_lock_pi_atomic+0x22c/0x850 [ 229.465390][ T9148] ? futex_top_waiter+0x13c/0x150 [ 229.465456][ T9148] futex_requeue+0x73f/0x13f0 [ 229.465478][ T9148] ? kstrtouint_from_user+0xa8/0xf0 [ 229.465503][ T9148] do_futex+0x2ec/0x380 [ 229.465533][ T9148] __se_sys_futex+0x2f6/0x370 [ 229.465558][ T9148] ? mutex_unlock+0x4e/0x90 [ 229.465582][ T9148] __x64_sys_futex+0x78/0x90 [ 229.465691][ T9148] x64_sys_call+0x24ab/0x3020 [ 229.465718][ T9148] do_syscall_64+0x12c/0x370 [ 229.465764][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.465783][ T9148] RIP: 0033:0x7fd32846c819 [ 229.465797][ T9148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.465893][ T9148] RSP: 002b:00007fd326ea6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 229.465913][ T9148] RAX: ffffffffffffffda RBX: 00007fd3286e6090 RCX: 00007fd32846c819 [ 229.465925][ T9148] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 229.465936][ T9148] RBP: 00007fd326ea6090 R08: 0000200000048000 R09: 0000000000000000 [ 229.465948][ T9148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.465960][ T9148] R13: 00007fd3286e6128 R14: 00007fd3286e6090 R15: 00007ffd7ced3a58 [ 229.465980][ T9148] [ 229.471862][ T9147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.891001][ T9147] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1504: iget: bad i_size value: 38620345925642 [ 229.923034][ T9147] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.924523][ T9147] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1504: couldn't read orphan inode 15 (err -117) [ 229.934101][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 229.934121][ C0] EXT4-fs (loop3): initial error at time 1775626251: ext4_orphan_get:1397: inode 15 [ 229.934160][ C0] EXT4-fs (loop3): last error at time 1775626251: ext4_orphan_get:1397: inode 15 [ 229.973766][ T9147] loop3: lost filesystem error report for type 5 error -117 [ 229.974669][ T9147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.002593][ T28] audit: type=1400 audit(1775626251.693:15114): avc: denied { create } for pid=9146 comm="syz.3.1504" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 230.047710][ T9161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9161 comm=syz.8.1509 [ 230.063401][ T9161] program syz.8.1509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.074900][ T28] audit: type=1400 audit(1775626251.743:15115): avc: denied { append } for pid=9162 comm="syz.4.1510" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 230.110065][ T28] audit: type=1400 audit(1775626251.743:15116): avc: denied { bind } for pid=9162 comm="syz.4.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 230.146879][ T28] audit: type=1400 audit(1775626251.843:15117): avc: denied { create } for pid=9170 comm="syz.7.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 230.149757][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.216915][ T9166] loop4: detected capacity change from 0 to 8192 [ 230.261445][ T9176] random: crng reseeded on system resumption [ 230.279243][ T9166] loop4: p2 p3 p4 [ 230.283907][ T9166] loop4: p2 size 582656 extends beyond EOD, truncated [ 230.304692][ T9166] loop4: p3 start 134217728 is beyond EOD, truncated [ 230.312305][ T9166] loop4: p4 size 262144 extends beyond EOD, truncated [ 230.379173][ T9181] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1517'. [ 230.397469][ T28] audit: type=1400 audit(1775626252.093:15118): avc: denied { read } for pid=9180 comm="syz.4.1517" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.460325][ T28] audit: type=1400 audit(1775626252.103:15119): avc: denied { open } for pid=9180 comm="syz.4.1517" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.499044][ T28] audit: type=1400 audit(1775626252.113:15120): avc: denied { ioctl } for pid=9180 comm="syz.4.1517" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.579658][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 230.768805][ T9190] x_tables: duplicate underflow at hook 3 [ 230.789703][ T7879] udevd[7879]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 230.865707][ T9192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.986542][ T9200] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 231.132217][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1523'. [ 231.150713][ T9206] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 231.163023][ T9206] macvtap1: entered promiscuous mode [ 231.185458][ T9209] loop8: detected capacity change from 0 to 256 [ 231.204282][ T9200] xt_CT: No such helper "snmp_trap" [ 231.243214][ T9206] macvtap1: entered allmulticast mode [ 231.267933][ T9206] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 231.336612][ T9216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9216 comm=syz.9.1525 [ 231.397162][ T9216] program syz.9.1525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.410838][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1528'. [ 231.601879][ T9230] loop9: detected capacity change from 0 to 512 [ 231.672546][ T9230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.687818][ T9230] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.713949][ T9241] random: crng reseeded on system resumption [ 231.760428][ T8074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.987728][ T9247] loop3: detected capacity change from 0 to 4096 [ 231.995952][ T9247] EXT4-fs: Ignoring removed bh option [ 232.006566][ T9247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.325710][ T9258] loop8: detected capacity change from 0 to 2048 [ 232.433224][ T9258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.499385][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1542'. [ 232.771702][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 232.771719][ T28] audit: type=1326 audit(1775626254.463:15131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.7.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 232.813693][ T28] audit: type=1326 audit(1775626254.463:15132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.7.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 232.842630][ T28] audit: type=1326 audit(1775626254.463:15133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.7.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 232.898906][ T28] audit: type=1326 audit(1775626254.463:15134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.7.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 232.899140][ T9277] xt_hashlimit: size too large, truncated to 1048576 [ 232.960720][ T28] audit: type=1326 audit(1775626254.463:15135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.7.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 233.047785][ T28] audit: type=1326 audit(1775626254.463:15136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.7.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 233.077841][ T28] audit: type=1326 audit(1775626254.463:15137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.7.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 233.111925][ T28] audit: type=1326 audit(1775626254.463:15138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.7.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 233.142661][ T28] audit: type=1326 audit(1775626254.463:15139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.7.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 233.212880][ T28] audit: type=1326 audit(1775626254.463:15140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9271 comm="syz.7.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 234.058706][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.122961][ T6930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.170433][ T9295] loop7: detected capacity change from 0 to 2048 [ 234.226982][ T9295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.249403][ T9299] loop9: detected capacity change from 0 to 512 [ 234.258430][ T9295] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.285068][ T9299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 234.306906][ T9299] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.724804][ T8327] kernel write not supported for file bpf-map (pid: 8327 comm: kworker/1:7) [ 234.756607][ T9315] loop8: detected capacity change from 0 to 512 [ 234.766060][ T9315] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.777103][ T9318] 9pnet_virtio: no channels available for device 127.0.0.1 [ 234.791668][ T9315] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.807167][ T9320] loop3: detected capacity change from 0 to 256 [ 234.839188][ T9295] loop5: detected capacity change from 0 to 7 [ 234.840847][ T9315] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.867580][ T9295] Buffer I/O error on dev loop5, logical block 0, async page read [ 234.886103][ T9320] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.903437][ T9315] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.920705][ T9295] Buffer I/O error on dev loop5, logical block 0, async page read [ 234.921295][ T9315] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 234.961643][ T9295] loop5: unable to read partition table [ 234.968730][ T9295] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 234.969711][ T7879] Buffer I/O error on dev loop5, logical block 0, async page read [ 235.065573][ T7879] Buffer I/O error on dev loop5, logical block 0, async page read [ 235.095627][ T7879] Buffer I/O error on dev loop5, logical block 0, async page read [ 235.123573][ T7879] Buffer I/O error on dev loop5, logical block 0, async page read [ 235.156976][ T7879] Buffer I/O error on dev loop5, logical block 0, async page read [ 235.174663][ T6930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.217436][ T9330] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1560'. [ 235.235199][ T9330] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1560'. [ 235.247611][ T8074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 235.443437][ T9320] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 235.453041][ T9320] FAT-fs (loop3): Filesystem has been set read-only [ 235.460894][ T9320] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 235.574034][ T9371] random: crng reseeded on system resumption [ 235.756445][ T9383] loop3: detected capacity change from 0 to 1024 [ 235.778074][ T9383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.793692][ T9383] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 235.832449][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.864076][ T9393] netlink: 'syz.7.1585': attribute type 5 has an invalid length. [ 236.146602][ T9409] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1587'. [ 236.494387][ T9420] loop8: detected capacity change from 0 to 512 [ 236.529047][ T9425] loop7: detected capacity change from 0 to 128 [ 236.562557][ T9427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9427 comm=syz.8.1600 [ 236.578155][ T9425] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.592848][ T9425] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.619974][ T9427] program syz.8.1600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.639479][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1599'. [ 236.716963][ T6210] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.736487][ T9436] loop8: detected capacity change from 0 to 512 [ 236.768034][ T9436] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 236.797183][ T9436] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #13: comm syz.8.1603: inode has both inline data and extents flags [ 236.857914][ T9436] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 236.863105][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 236.879907][ C0] EXT4-fs (loop8): initial error at time 1775626258: ext4_orphan_get:1397: inode 13 [ 236.890907][ C0] EXT4-fs (loop8): last error at time 1775626258: ext4_orphan_get:1397: inode 13 [ 236.926230][ T9436] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1603: couldn't read orphan inode 13 (err -117) [ 236.953346][ T9436] loop8: lost filesystem error report for type 5 error -117 [ 236.954034][ T9436] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.997667][ T9451] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1609'. [ 237.007920][ T9451] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1609'. [ 237.055131][ T6930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.076738][ T9455] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 237.095458][ T9457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9457 comm=syz.3.1613 [ 237.112962][ T9457] program syz.3.1613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.241636][ T9466] netlink: 'syz.3.1615': attribute type 2 has an invalid length. [ 237.292233][ T9466] netlink: 'syz.3.1615': attribute type 1 has an invalid length. [ 237.292685][ T9469] bridge_slave_0: default FDB implementation only supports local addresses [ 237.350214][ T9471] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 237.601277][ T9478] __vm_enough_memory: pid: 9478, comm: syz.3.1621, bytes: 21199643357184 not enough memory for the allocation [ 237.717376][ T9487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9487 comm=syz.3.1624 [ 237.733649][ T9491] netlink: 'syz.7.1622': attribute type 39 has an invalid length. [ 237.757531][ T9487] program syz.3.1624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.785718][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1622'. [ 237.798197][ T9494] bond_slave_0: entered promiscuous mode [ 237.804925][ T9494] bond_slave_1: entered promiscuous mode [ 237.811828][ T9494] macvlan2: entered promiscuous mode [ 237.828253][ T9494] bond0: entered promiscuous mode [ 237.837437][ T9494] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 238.107699][ T28] kauditd_printk_skb: 339 callbacks suppressed [ 238.107761][ T28] audit: type=1400 audit(1775626259.804:15480): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 238.142436][ T28] audit: type=1400 audit(1775626259.834:15481): avc: denied { unmount } for pid=9501 comm="syz.4.1629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.188532][ T9502] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1629'. [ 238.450743][ T9526] loop9: detected capacity change from 0 to 2048 [ 238.502459][ T9526] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.508500][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1635'. [ 238.533177][ T9526] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 238.553512][ T9526] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 238.560877][ T9536] loop8: detected capacity change from 0 to 1024 [ 238.567736][ T28] audit: type=1400 audit(1775626260.254:15482): avc: denied { name_bind } for pid=9535 comm="syz.8.1636" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 238.577024][ T9536] EXT4-fs: Ignoring removed bh option [ 238.607147][ T9526] EXT4-fs (loop9): This should not happen!! Data will be lost [ 238.607147][ T9526] [ 238.618141][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1635'. [ 238.666262][ T9526] EXT4-fs (loop9): Total free blocks count 0 [ 238.672754][ T9526] EXT4-fs (loop9): Free/Dirty block details [ 238.683541][ T9526] EXT4-fs (loop9): free_blocks=66060288 [ 238.689456][ T9526] EXT4-fs (loop9): dirty_blocks=16 [ 238.689914][ T9536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.695355][ T28] audit: type=1400 audit(1775626260.304:15483): avc: denied { map } for pid=9524 comm="syz.9.1633" path="/76/file0/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 238.718735][ T9526] EXT4-fs (loop9): Block reservation details [ 238.734789][ T28] audit: type=1400 audit(1775626260.374:15484): avc: denied { read } for pid=9533 comm="syz.7.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.805846][ T28] audit: type=1400 audit(1775626260.484:15485): avc: denied { link } for pid=9535 comm="syz.8.1636" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 238.826786][ T9526] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 238.847935][ T6930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.866092][ T28] audit: type=1400 audit(1775626260.484:15486): avc: denied { write } for pid=9535 comm="syz.8.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 238.904067][ T28] audit: type=1400 audit(1775626260.484:15487): avc: denied { map } for pid=9535 comm="syz.8.1636" path="socket:[26288]" dev="sockfs" ino=26288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.933253][ T5841] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 238.946776][ T8074] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 238.961106][ T28] audit: type=1400 audit(1775626260.504:15488): avc: denied { mounton } for pid=9559 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 239.001925][ T9569] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1643'. [ 239.054051][ T9576] netlink: 'syz.7.1645': attribute type 39 has an invalid length. [ 239.108891][ T9582] loop9: detected capacity change from 0 to 2048 [ 239.184319][ T9592] random: crng reseeded on system resumption [ 239.269504][ T9594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.284801][ T9582] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.300868][ T9594] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.312905][ T9582] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 239.332401][ T9582] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 239.358605][ T9582] EXT4-fs (loop9): This should not happen!! Data will be lost [ 239.358605][ T9582] [ 239.375435][ T9559] chnl_net:caif_netlink_parms(): no params data found [ 239.383987][ T9600] FAULT_INJECTION: forcing a failure. [ 239.383987][ T9600] name failslab, interval 1, probability 0, space 0, times 0 [ 239.414007][ T9582] EXT4-fs (loop9): Total free blocks count 0 [ 239.428620][ T9582] EXT4-fs (loop9): Free/Dirty block details [ 239.445563][ T9582] EXT4-fs (loop9): free_blocks=66060288 [ 239.457344][ T9600] CPU: 0 UID: 0 PID: 9600 Comm: syz.9.1646 Not tainted syzkaller #0 PREEMPT(full) [ 239.457370][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 239.457382][ T9600] Call Trace: [ 239.457388][ T9600] [ 239.457394][ T9600] __dump_stack+0x1d/0x30 [ 239.457419][ T9600] dump_stack_lvl+0x95/0xd0 [ 239.457448][ T9600] dump_stack+0x15/0x1b [ 239.457466][ T9600] should_fail_ex+0x263/0x280 [ 239.457487][ T9600] should_failslab+0x8c/0xb0 [ 239.457506][ T9600] kmem_cache_alloc_noprof+0x66/0x400 [ 239.457529][ T9600] ? mas_alloc_nodes+0x1a2/0x210 [ 239.457551][ T9600] mas_alloc_nodes+0x1a2/0x210 [ 239.457574][ T9600] mas_preallocate+0x2ca/0x510 [ 239.457601][ T9600] __split_vma+0x240/0x640 [ 239.457622][ T9600] ? mas_find+0x5d5/0x700 [ 239.457643][ T9600] vms_gather_munmap_vmas+0x2bc/0x850 [ 239.457671][ T9600] mmap_region+0x724/0x20c0 [ 239.457691][ T9600] ? selinux_file_open+0x2e6/0x330 [ 239.457733][ T9600] do_mmap+0x9b2/0xbd0 [ 239.457761][ T9600] vm_mmap_pgoff+0x183/0x2d0 [ 239.457785][ T9600] ksys_mmap_pgoff+0x267/0x310 [ 239.457808][ T9600] x64_sys_call+0x14df/0x3020 [ 239.457831][ T9600] do_syscall_64+0x12c/0x370 [ 239.457853][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.457874][ T9600] RIP: 0033:0x7f77db13c819 [ 239.457889][ T9600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.457906][ T9600] RSP: 002b:00007f77d9b6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 239.457926][ T9600] RAX: ffffffffffffffda RBX: 00007f77db3b6090 RCX: 00007f77db13c819 [ 239.457938][ T9600] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 239.457948][ T9600] RBP: 00007f77d9b6e090 R08: 0000000000000004 R09: 0000000000000000 [ 239.457958][ T9600] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 239.457970][ T9600] R13: 00007f77db3b6128 R14: 00007f77db3b6090 R15: 00007fffa9de56b8 [ 239.457987][ T9600] [ 239.459712][ T9582] EXT4-fs (loop9): dirty_blocks=16 [ 239.480233][ T9559] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.547676][ T9582] EXT4-fs (loop9): Block reservation details [ 239.592847][ T8327] IPVS: starting estimator thread 0... [ 239.594906][ T9582] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 239.642587][ T9559] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.712040][ T8074] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 239.719079][ T9559] bridge_slave_0: entered allmulticast mode [ 239.724695][ T8074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.731195][ T9559] bridge_slave_0: entered promiscuous mode [ 239.740458][ T9594] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.747720][ T9559] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.755152][ T9594] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.764106][ T9559] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.775333][ T9594] loop5: unable to read partition table [ 239.779653][ T9605] IPVS: using max 2448 ests per chain, 122400 per kthread [ 239.788248][ T7879] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.794689][ T9559] bridge_slave_1: entered allmulticast mode [ 239.803293][ T9594] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 239.810249][ T9559] bridge_slave_1: entered promiscuous mode [ 239.856375][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1650'. [ 239.860568][ T9559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.870663][ T28] audit: type=1400 audit(1775626261.544:15489): avc: denied { create } for pid=9607 comm="syz.9.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.936116][ T9609] set_capacity_and_notify: 2 callbacks suppressed [ 239.936134][ T9609] loop9: detected capacity change from 0 to 512 [ 239.953276][ T9559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.980903][ T9559] team0: Port device team_slave_0 added [ 239.983027][ T9611] loop8: detected capacity change from 0 to 4096 [ 239.989823][ T9559] team0: Port device team_slave_1 added [ 240.047930][ T9609] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.053138][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.075036][ T9611] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.160279][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.189950][ T9559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.213670][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.221608][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.260371][ T9559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.324540][ T6930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.386514][ T9559] hsr_slave_0: entered promiscuous mode [ 240.397340][ T9559] hsr_slave_1: entered promiscuous mode [ 240.405940][ T9559] debugfs: 'hsr0' already exists in 'hsr' [ 240.411940][ T9559] Cannot create hsr debugfs directory [ 240.526645][ T8074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.824306][ T9559] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.862983][ T9559] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.878381][ T9559] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.898183][ T9559] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 241.038378][ T9559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.063151][ T9559] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.080592][ T9640] loop8: detected capacity change from 0 to 512 [ 241.086908][ T4749] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.100300][ T4749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.118532][ T9640] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.164025][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.174163][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.234561][ T9640] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 241.269080][ T9683] loop3: detected capacity change from 0 to 512 [ 241.290134][ T9683] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 241.299650][ T9683] EXT4-fs (loop3): orphan cleanup on readonly fs [ 241.314010][ T9683] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 241.329015][ T9640] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 241.367377][ T9683] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 241.391615][ T9683] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.1664: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 241.425677][ T9683] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 241.427283][ T9683] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1664: couldn't read orphan inode 13 (err -117) [ 241.430129][ T9559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.437513][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 241.437530][ C1] EXT4-fs (loop3): last error at time 1775626263: ext4_ext_check_inode:521: inode 13 [ 241.448646][ T9683] loop3: lost filesystem error report for type 5 error -117 [ 241.484857][ T9683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.509658][ T6930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.520153][ T9683] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.1664: deleted inode referenced: 12 [ 241.540916][ T9714] loop7: detected capacity change from 0 to 512 [ 241.548087][ T9714] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 241.574502][ T9718] loop8: detected capacity change from 0 to 512 [ 241.587910][ T9714] EXT4-fs (loop7): orphan file too big: 4294967295 [ 241.603910][ T9714] EXT4-fs (loop7): mount failed [ 241.615141][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.654132][ T9718] EXT4-fs error (device loop8): __ext4_fill_super:5588: inode #2: comm syz.8.1665: inode has both inline data and extents flags [ 241.676150][ T9718] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 241.676329][ T9718] EXT4-fs (loop8): get root inode failed [ 241.686522][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 241.686547][ C0] EXT4-fs (loop8): last error at time 1775626263: __ext4_fill_super:5588: inode 2 [ 241.727178][ T9718] EXT4-fs (loop8): mount failed [ 241.735816][ T9559] veth0_vlan: entered promiscuous mode [ 241.767519][ T9559] veth1_vlan: entered promiscuous mode [ 241.835318][ T9743] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.1671'. [ 241.841180][ T9745] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20002 [ 241.850203][ T9743] netlink: zone id is out of range [ 241.864591][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'. [ 241.869710][ T9743] netlink: zone id is out of range [ 241.898307][ T9747] loop8: detected capacity change from 0 to 512 [ 241.927231][ T9743] netlink: set zone limit has 8 unknown bytes [ 242.047437][ T9746] loop3: detected capacity change from 0 to 1024 [ 242.112803][ T9772] loop8: detected capacity change from 0 to 1024 [ 242.124891][ T9737] bond2: Unable to set down delay as MII monitoring is disabled [ 242.137613][ T9746] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 242.171843][ T9772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.215570][ T9772] SELinux: policydb magic number 0x68 does not match expected magic number 0xf97cff8c [ 242.236107][ T9737] bond2 (unregistering): Released all slaves [ 242.253507][ T9772] SELinux: failed to load policy [ 242.301865][ T9559] veth0_macvtap: entered promiscuous mode [ 242.317845][ T9559] veth1_macvtap: entered promiscuous mode [ 242.333184][ T9559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.346461][ T9559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.367474][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.412910][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.445113][ T6930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.446145][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.492497][ T82] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.575898][ T9817] loop8: detected capacity change from 0 to 128 [ 242.709795][ T9835] tipc: Can't bind to reserved service type 2 [ 242.925704][ T9841] infiniband !yz2: set active [ 242.942433][ T9841] infiniband !yz2: added veth0_to_batadv [ 242.969839][ T9841] RDS/IB: !yz2: added [ 242.982486][ T9841] smc: adding ib device !yz2 with port count 1 [ 243.021039][ T9841] smc: ib device !yz2 port 1 has no pnetid [ 243.733447][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 243.733464][ T28] audit: type=1326 audit(1775626265.434:15559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.9.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f77db13c819 code=0x7ffc0000 [ 243.902288][ T28] audit: type=1400 audit(1775626265.594:15560): avc: denied { read } for pid=9934 comm="syz.7.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 243.947725][ T9935] tipc: Started in network mode [ 243.955137][ T9935] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 243.972739][ T9935] tipc: Enabled bearer , priority 0 [ 244.053179][ T9943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1703'. [ 244.317434][ T28] audit: type=1400 audit(1775626266.014:15561): avc: denied { getopt } for pid=9965 comm="syz.3.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.383306][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1706'. [ 244.415337][ T28] audit: type=1326 audit(1775626266.114:15562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4351c819 code=0x7ffc0000 [ 244.444128][ T28] audit: type=1326 audit(1775626266.114:15563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4351c819 code=0x7ffc0000 [ 244.469934][ T28] audit: type=1326 audit(1775626266.114:15564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4351c819 code=0x7ffc0000 [ 244.497939][ T28] audit: type=1326 audit(1775626266.114:15565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4351c819 code=0x7ffc0000 [ 244.541715][ T28] audit: type=1326 audit(1775626266.144:15566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c434dd04e code=0x7ffc0000 [ 244.592205][ T28] audit: type=1326 audit(1775626266.144:15567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4351c819 code=0x7ffc0000 [ 244.621708][ T9974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9974 comm=syz.8.1711 [ 244.650193][ T28] audit: type=1326 audit(1775626266.144:15568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9971 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4351c819 code=0x7ffc0000 [ 244.689883][ T9976] EXT4-fs: Ignoring removed nobh option [ 244.699994][ T9976] EXT4-fs: Ignoring removed bh option [ 244.709959][ T9976] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.726430][ T9976] ext2: Unknown parameter 'uid<00000000000000060928' [ 244.880719][ T9982] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.925742][ T9982] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.092147][ T10] tipc: Node number set to 9611946 [ 245.208520][ T9559] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.229990][ T9985] netlink: 'syz.9.1714': attribute type 3 has an invalid length. [ 245.659771][T10001] set_capacity_and_notify: 4 callbacks suppressed [ 245.659789][T10001] loop8: detected capacity change from 0 to 512 [ 245.782137][T10001] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 245.793133][ T9998] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1719'. [ 245.861358][T10001] EXT4-fs (loop8): 1 truncate cleaned up [ 245.871782][T10001] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.897425][ T9999] dvmrp2: entered allmulticast mode [ 245.982528][T10011] netlink: 'syz.2.1723': attribute type 17 has an invalid length. [ 246.002295][T10011] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1723'. [ 246.044951][ T269] dvmrp2 (unregistering): left allmulticast mode [ 246.065908][T10011] netlink: 'syz.2.1723': attribute type 17 has an invalid length. [ 246.078785][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 246.091272][T10011] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1723'. [ 246.092997][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1724'. [ 246.121880][T10011] netlink: 'syz.2.1723': attribute type 17 has an invalid length. [ 246.135884][ T6930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.152341][T10011] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1723'. [ 246.190281][T10011] netlink: 'syz.2.1723': attribute type 17 has an invalid length. [ 246.200073][T10011] netlink: 'syz.2.1723': attribute type 17 has an invalid length. [ 246.209286][T10011] netlink: 'syz.2.1723': attribute type 17 has an invalid length. [ 246.217850][T10011] netlink: 'syz.2.1723': attribute type 17 has an invalid length. [ 246.230014][T10011] netlink: 'syz.2.1723': attribute type 17 has an invalid length. [ 246.249764][T10011] netlink: 'syz.2.1723': attribute type 17 has an invalid length. [ 246.500341][T10042] xt_hashlimit: size too large, truncated to 1048576 [ 246.547092][T10044] FAULT_INJECTION: forcing a failure. [ 246.547092][T10044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.561061][T10044] CPU: 1 UID: 0 PID: 10044 Comm: syz.3.1735 Not tainted syzkaller #0 PREEMPT(full) [ 246.561137][T10044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 246.561150][T10044] Call Trace: [ 246.561157][T10044] [ 246.561171][T10044] __dump_stack+0x1d/0x30 [ 246.561248][T10044] dump_stack_lvl+0x95/0xd0 [ 246.561268][T10044] dump_stack+0x15/0x1b [ 246.561290][T10044] should_fail_ex+0x263/0x280 [ 246.561330][T10044] should_fail+0xb/0x20 [ 246.561353][T10044] should_fail_usercopy+0x1a/0x20 [ 246.561382][T10044] _copy_to_user+0x20/0xa0 [ 246.561415][T10044] rng_dev_read+0x375/0x670 [ 246.561449][T10044] ? __pfx_rng_dev_read+0x10/0x10 [ 246.561498][T10044] vfs_readv+0x432/0x6e0 [ 246.561541][T10044] __x64_sys_preadv+0xfd/0x1c0 [ 246.561559][T10044] x64_sys_call+0x2915/0x3020 [ 246.561621][T10044] do_syscall_64+0x12c/0x370 [ 246.561645][T10044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.561676][T10044] RIP: 0033:0x7f27ebccc819 [ 246.561692][T10044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.561734][T10044] RSP: 002b:00007f27ea71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 246.561756][T10044] RAX: ffffffffffffffda RBX: 00007f27ebf45fa0 RCX: 00007f27ebccc819 [ 246.561770][T10044] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 246.561846][T10044] RBP: 00007f27ea71f090 R08: 0000000000000000 R09: 0000000000000000 [ 246.561860][T10044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.561872][T10044] R13: 00007f27ebf46038 R14: 00007f27ebf45fa0 R15: 00007fff30c1cad8 [ 246.562005][T10044] [ 246.821862][T10046] loop2: detected capacity change from 0 to 512 [ 246.940896][T10046] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 246.953170][T10033] __nla_validate_parse: 31 callbacks suppressed [ 246.953188][T10033] netlink: 144 bytes leftover after parsing attributes in process `syz.8.1730'. [ 246.974110][T10049] loop3: detected capacity change from 0 to 1024 [ 246.991726][T10046] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #13: comm syz.2.1734: inode has both inline data and extents flags [ 247.030172][T10049] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 247.030201][T10046] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 247.039849][T10046] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1734: couldn't read orphan inode 13 (err -117) [ 247.039877][T10046] loop2: lost filesystem error report for type 5 error -117 [ 247.040406][T10046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.072410][T10049] System zones: 0-1, 3-36 [ 247.145051][T10042] sctp: [Deprecated]: syz.2.1734 (pid 10042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.145051][T10042] Use struct sctp_sack_info instead [ 247.180585][T10049] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1736: bad orphan inode 134217728 [ 247.197882][T10042] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.1734: corrupted in-inode xattr: overlapping e_value [ 247.227610][T10049] loop3: lost filesystem error report for type 5 error -117 [ 247.231887][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 247.246973][ C1] EXT4-fs (loop3): initial error at time 1775626268: ext4_orphan_get:1423 [ 247.255866][ C1] EXT4-fs (loop3): last error at time 1775626268: ext4_orphan_get:1423 [ 247.256308][T10049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.280149][ T9559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.436525][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.572385][T10073] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1745'. [ 247.614548][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'. [ 247.640810][T10092] FAULT_INJECTION: forcing a failure. [ 247.640810][T10092] name failslab, interval 1, probability 0, space 0, times 0 [ 247.665797][T10098] loop9: detected capacity change from 0 to 1024 [ 247.678885][T10092] CPU: 0 UID: 0 PID: 10092 Comm: syz.3.1753 Not tainted syzkaller #0 PREEMPT(full) [ 247.678919][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 247.678932][T10092] Call Trace: [ 247.678954][T10092] [ 247.678962][T10092] __dump_stack+0x1d/0x30 [ 247.678990][T10092] dump_stack_lvl+0x95/0xd0 [ 247.679011][T10092] dump_stack+0x15/0x1b [ 247.679074][T10092] should_fail_ex+0x263/0x280 [ 247.679102][T10092] should_failslab+0x8c/0xb0 [ 247.679135][T10092] __kmalloc_noprof+0xb8/0x4e0 [ 247.679157][T10092] ? nla_strdup+0x78/0xc0 [ 247.679183][T10092] nla_strdup+0x78/0xc0 [ 247.679294][T10092] nf_tables_newobj+0x899/0x1170 [ 247.679330][T10092] nfnetlink_rcv+0xc1e/0x1720 [ 247.679415][T10092] netlink_unicast+0x5c0/0x690 [ 247.679449][T10092] netlink_sendmsg+0x5c8/0x6f0 [ 247.679467][T10092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.679550][T10092] ____sys_sendmsg+0x563/0x5b0 [ 247.679573][T10092] ___sys_sendmsg+0x195/0x1e0 [ 247.679599][T10092] __x64_sys_sendmsg+0xd4/0x160 [ 247.679617][T10092] x64_sys_call+0x194c/0x3020 [ 247.679672][T10092] do_syscall_64+0x12c/0x370 [ 247.679707][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.679730][T10092] RIP: 0033:0x7f27ebccc819 [ 247.679746][T10092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.679763][T10092] RSP: 002b:00007f27ea71f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.679798][T10092] RAX: ffffffffffffffda RBX: 00007f27ebf45fa0 RCX: 00007f27ebccc819 [ 247.679812][T10092] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 247.679826][T10092] RBP: 00007f27ea71f090 R08: 0000000000000000 R09: 0000000000000000 [ 247.679896][T10092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.679909][T10092] R13: 00007f27ebf46038 R14: 00007f27ebf45fa0 R15: 00007fff30c1cad8 [ 247.679926][T10092] [ 247.680700][T10096] loop2: detected capacity change from 0 to 1024 [ 247.820154][T10101] loop7: detected capacity change from 0 to 512 [ 247.868597][T10096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.885784][T10098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 247.942311][T10098] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.962098][T10101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.975685][T10007] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 247.991487][T10098] EXT4-fs error (device loop9): ext4_map_blocks:828: inode #15: comm syz.9.1754: lblock 0 mapped to illegal pblock 0 (length 1) [ 247.991923][T10101] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.017064][T10106] loop3: detected capacity change from 0 to 512 [ 248.030570][T10106] EXT4-fs error (device loop3): __ext4_fill_super:5588: inode #2: comm syz.3.1756: iget: checksum invalid [ 248.045085][T10096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.058352][T10106] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 248.061794][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 248.065483][T10106] EXT4-fs (loop3): get root inode failed [ 248.071842][ C1] EXT4-fs (loop3): initial error at time 1775626269: __ext4_fill_super:5588 [ 248.079288][T10106] EXT4-fs (loop3): mount failed [ 248.085127][ C1] : inode 2 [ 248.085144][ C1] EXT4-fs (loop3): last error at time 1775626269: __ext4_fill_super:5588: inode 2 [ 248.141508][ T8074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 248.143398][T10112] loop8: detected capacity change from 0 to 128 [ 248.159129][ T9559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.229359][ T6210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.251620][T10112] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.252064][T10106] syzkaller0: entered promiscuous mode [ 248.276513][T10112] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.432657][ T6930] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 248.563693][T10132] loop2: detected capacity change from 0 to 1764 [ 248.570904][T10132] iso9660: Unknown parameter 'utF8' [ 248.957410][T10138] lo: left promiscuous mode [ 249.047211][T10138] lo: left allmulticast mode [ 249.319073][T10138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.660248][T10156] loop7: detected capacity change from 0 to 512 [ 249.779904][T10156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.879638][T10156] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.081364][T10172] tipc: Enabled bearer , priority 0 [ 250.101394][T10172] tipc: Disabling bearer [ 250.153812][ T6210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.189298][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 250.189312][ T28] audit: type=1400 audit(1775626271.885:15626): avc: denied { create } for pid=10180 comm="syz.7.1779" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.252785][ T23] IPVS: starting estimator thread 0... [ 250.265682][ T28] audit: type=1400 audit(1775626271.885:15627): avc: denied { mounton } for pid=10180 comm="syz.7.1779" path="/202/file0" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.290150][ T28] audit: type=1400 audit(1775626271.955:15628): avc: denied { unlink } for pid=6210 comm="syz-executor" name="file0" dev="tmpfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.291791][T10187] syzkaller0: entered promiscuous mode [ 250.333461][ T28] audit: type=1326 audit(1775626272.035:15629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.7.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 250.352093][T10187] syzkaller0: entered allmulticast mode [ 250.399576][ T28] audit: type=1326 audit(1775626272.035:15630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.7.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 250.401616][T10185] IPVS: using max 2256 ests per chain, 112800 per kthread [ 250.445181][T10194] EXT4-fs: inline encryption not supported [ 250.451289][T10194] EXT4-fs: Ignoring removed nobh option [ 250.476504][ T28] audit: type=1326 audit(1775626272.035:15631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.7.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 250.551904][ T28] audit: type=1326 audit(1775626272.035:15632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.7.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 250.590843][ T28] audit: type=1326 audit(1775626272.035:15633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.7.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 250.651284][ T28] audit: type=1326 audit(1775626272.035:15634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.7.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 250.701007][T10179] set_capacity_and_notify: 2 callbacks suppressed [ 250.701025][T10179] loop5: detected capacity change from 0 to 7 [ 250.721905][T10179] buffer_io_error: 4 callbacks suppressed [ 250.721921][T10179] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.730374][ T28] audit: type=1326 audit(1775626272.035:15635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.7.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd32846c819 code=0x7ffc0000 [ 250.750608][T10179] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.781649][T10194] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 250.792084][T10179] loop5: unable to read partition table [ 250.799396][T10179] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 250.802448][ T3302] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.841646][T10194] System zones: 0-1, 3-12 [ 250.870859][ T3302] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.891186][ T3302] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.911961][ T3302] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.922181][ T3302] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.922876][T10194] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1784'. [ 251.028142][T10212] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1788'. [ 251.049945][T10212] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1788'. [ 251.136649][T10219] FAULT_INJECTION: forcing a failure. [ 251.136649][T10219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.190392][T10220] loop2: detected capacity change from 0 to 512 [ 251.204999][T10215] loop7: detected capacity change from 0 to 512 [ 251.219539][T10220] EXT4-fs: Ignoring removed bh option [ 251.221429][T10219] CPU: 1 UID: 0 PID: 10219 Comm: syz.9.1791 Not tainted syzkaller #0 PREEMPT(full) [ 251.221475][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 251.221492][T10219] Call Trace: [ 251.221499][T10219] [ 251.221508][T10219] __dump_stack+0x1d/0x30 [ 251.221533][T10219] dump_stack_lvl+0x95/0xd0 [ 251.221556][T10219] dump_stack+0x15/0x1b [ 251.221585][T10219] should_fail_ex+0x263/0x280 [ 251.221612][T10219] should_fail+0xb/0x20 [ 251.221682][T10219] should_fail_usercopy+0x1a/0x20 [ 251.221708][T10219] _copy_from_user+0x1c/0xb0 [ 251.221737][T10219] ___sys_sendmsg+0xc1/0x1e0 [ 251.221805][T10219] __x64_sys_sendmsg+0xd4/0x160 [ 251.221828][T10219] x64_sys_call+0x194c/0x3020 [ 251.221929][T10219] do_syscall_64+0x12c/0x370 [ 251.221955][T10219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.221976][T10219] RIP: 0033:0x7f77db13c819 [ 251.221991][T10219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.222010][T10219] RSP: 002b:00007f77d9b8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.222030][T10219] RAX: ffffffffffffffda RBX: 00007f77db3b5fa0 RCX: 00007f77db13c819 [ 251.222045][T10219] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 251.222097][T10219] RBP: 00007f77d9b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 251.222110][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.222123][T10219] R13: 00007f77db3b6038 R14: 00007f77db3b5fa0 R15: 00007fffa9de56b8 [ 251.222142][T10219] [ 251.435095][T10220] EXT4-fs: inline encryption not supported [ 251.472012][T10220] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 251.475824][T10215] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.518726][T10220] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 251.552972][T10220] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1790: bg 0: block 248: padding at end of block bitmap is not set [ 251.617011][T10220] loop2: lost filesystem error report for type 5 error -117 [ 251.617205][T10220] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.1790: Failed to acquire dquot type 1 [ 251.625096][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 251.625118][ C0] EXT4-fs (loop2): last error at time 1775626273: ext4_validate_block_bitmap:441 [ 251.684140][T10220] loop2: lost filesystem error report for type 5 error -28 [ 251.684852][T10220] EXT4-fs (loop2): 1 truncate cleaned up [ 251.692651][T10249] loop7: detected capacity change from 0 to 512 [ 251.867871][T10253] loop2: detected capacity change from 0 to 1024 [ 251.883330][T10246] loop3: detected capacity change from 0 to 256 [ 251.942763][T10246] FAT-fs (loop3): Directory bread(block 64) failed [ 251.949989][T10246] FAT-fs (loop3): Directory bread(block 65) failed [ 251.957437][T10246] FAT-fs (loop3): Directory bread(block 66) failed [ 251.965184][T10246] FAT-fs (loop3): Directory bread(block 67) failed [ 251.972092][T10246] FAT-fs (loop3): Directory bread(block 68) failed [ 251.978858][T10246] FAT-fs (loop3): Directory bread(block 69) failed [ 251.987362][T10246] FAT-fs (loop3): Directory bread(block 70) failed [ 251.994786][T10246] FAT-fs (loop3): Directory bread(block 71) failed [ 252.003188][T10246] FAT-fs (loop3): Directory bread(block 72) failed [ 252.010360][T10246] FAT-fs (loop3): Directory bread(block 73) failed [ 252.112203][T10249] EXT4-fs mount: 8 callbacks suppressed [ 252.112218][T10249] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 252.153085][T10253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.173140][T10249] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.1797: Unimplemented hash flags: 0x0001 [ 252.186607][T10249] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1797: Corrupt directory, running e2fsck is recommended [ 252.228007][T10253] EXT4-fs error (device loop2): __ext4_new_inode:1079: comm syz.2.1799: reserved inode found cleared - inode=2 [ 252.311348][T10253] EXT4-fs (loop2): Remounting filesystem read-only [ 252.514028][T10249] validate_nla: 25 callbacks suppressed [ 252.514045][T10249] netlink: 'syz.7.1797': attribute type 4 has an invalid length. [ 252.558178][T10264] FAULT_INJECTION: forcing a failure. [ 252.558178][T10264] name failslab, interval 1, probability 0, space 0, times 0 [ 252.619464][T10249] netlink: 'syz.7.1797': attribute type 28 has an invalid length. [ 252.619902][T10268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1801'. [ 252.627889][T10249] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1797'. [ 252.649412][T10268] netlink: 'syz.3.1801': attribute type 5 has an invalid length. [ 252.658183][T10264] CPU: 1 UID: 0 PID: 10264 Comm: syz.8.1803 Not tainted syzkaller #0 PREEMPT(full) [ 252.658241][T10264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 252.658250][T10264] Call Trace: [ 252.658256][T10264] [ 252.658308][T10264] __dump_stack+0x1d/0x30 [ 252.658333][T10264] dump_stack_lvl+0x95/0xd0 [ 252.658353][T10264] dump_stack+0x15/0x1b [ 252.658434][T10264] should_fail_ex+0x263/0x280 [ 252.658464][T10264] should_failslab+0x8c/0xb0 [ 252.658546][T10264] __kmalloc_cache_node_noprof+0x6b/0x480 [ 252.658626][T10264] ? alloc_workqueue_noprof+0x62b/0x15c0 [ 252.658654][T10264] alloc_workqueue_noprof+0x62b/0x15c0 [ 252.658705][T10264] nci_register_device+0x11e/0x510 [ 252.658730][T10264] virtual_ncidev_open+0xca/0x130 [ 252.658759][T10264] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 252.658786][T10264] misc_open+0x1df/0x220 [ 252.658828][T10264] chrdev_open+0x2eb/0x3a0 [ 252.658851][T10264] do_dentry_open+0x4ca/0xa90 [ 252.658879][T10264] ? __pfx_chrdev_open+0x10/0x10 [ 252.658903][T10264] vfs_open+0x37/0x1e0 [ 252.658961][T10264] path_openat+0x1b70/0x2050 [ 252.658982][T10264] ? _parse_integer_limit+0x170/0x190 [ 252.659013][T10264] ? kstrtouint+0x76/0xc0 [ 252.659038][T10264] do_file_open+0x16c/0x290 [ 252.659142][T10264] do_sys_openat2+0x94/0x130 [ 252.659172][T10264] __x64_sys_openat+0xf2/0x120 [ 252.659199][T10264] x64_sys_call+0x1e39/0x3020 [ 252.659268][T10264] do_syscall_64+0x12c/0x370 [ 252.659297][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.659330][T10264] RIP: 0033:0x7f2c4351c819 [ 252.659347][T10264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.659421][T10264] RSP: 002b:00007f2c41f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.659443][T10264] RAX: ffffffffffffffda RBX: 00007f2c43795fa0 RCX: 00007f2c4351c819 [ 252.659458][T10264] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 252.659473][T10264] RBP: 00007f2c41f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.659557][T10264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.659607][T10264] R13: 00007f2c43796038 R14: 00007f2c43795fa0 R15: 00007ffc43b47138 [ 252.659669][T10264] [ 252.660348][ T9559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.743757][T10271] FAULT_INJECTION: forcing a failure. [ 252.743757][T10271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 252.942529][T10271] CPU: 0 UID: 0 PID: 10271 Comm: syz.3.1805 Not tainted syzkaller #0 PREEMPT(full) [ 252.942628][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 252.942641][T10271] Call Trace: [ 252.942649][T10271] [ 252.942684][T10271] __dump_stack+0x1d/0x30 [ 252.942757][T10271] dump_stack_lvl+0x95/0xd0 [ 252.942781][T10271] dump_stack+0x15/0x1b [ 252.942803][T10271] should_fail_ex+0x263/0x280 [ 252.942825][T10271] should_fail_alloc_page+0xf2/0x100 [ 252.942887][T10271] __alloc_frozen_pages_noprof+0x108/0x360 [ 252.942913][T10271] alloc_pages_mpol+0xb3/0x260 [ 252.942935][T10271] ? obj_cgroup_charge_account+0x122/0x1a0 [ 252.942974][T10271] alloc_pages_noprof+0x8f/0x140 [ 252.942997][T10271] get_free_pages_noprof+0xc/0x40 [ 252.943019][T10271] selinux_genfs_get_sid+0x33/0x180 [ 252.943066][T10271] inode_doinit_with_dentry+0x5fd/0x7a0 [ 252.943100][T10271] selinux_d_instantiate+0x27/0x40 [ 252.943166][T10271] security_d_instantiate+0x76/0x90 [ 252.943261][T10271] d_make_persistent+0x4f/0x110 [ 252.943281][T10271] __debugfs_create_file+0x14e/0x2b0 [ 252.943365][T10271] debugfs_create_file_full+0x3f/0x60 [ 252.943387][T10271] ? __pfx_vxlan_setup+0x10/0x10 [ 252.943408][T10271] ref_tracker_dir_debugfs+0x10e/0x220 [ 252.943451][T10271] alloc_netdev_mqs+0x1a7/0xa40 [ 252.943479][T10271] rtnl_create_link+0x239/0x720 [ 252.943505][T10271] rtnl_newlink_create+0x174/0x650 [ 252.943554][T10271] ? security_capable+0x7b/0x90 [ 252.943582][T10271] ? netlink_ns_capable+0x86/0xa0 [ 252.943719][T10271] rtnl_newlink+0x10a0/0x1330 [ 252.943762][T10271] ? __memcg_slab_free_hook+0x14b/0x240 [ 252.943794][T10271] ? __rcu_read_unlock+0x4e/0x70 [ 252.943863][T10271] ? avc_has_perm_noaudit+0xab/0x130 [ 252.943893][T10271] ? cred_has_capability+0x224/0x2a0 [ 252.943940][T10271] ? selinux_capable+0x31/0x40 [ 252.943967][T10271] ? security_capable+0x7b/0x90 [ 252.943988][T10271] ? ns_capable+0x7c/0xb0 [ 252.944017][T10271] ? __pfx_rtnl_newlink+0x10/0x10 [ 252.944060][T10271] rtnetlink_rcv_msg+0x64b/0x720 [ 252.944084][T10271] netlink_rcv_skb+0x123/0x220 [ 252.944111][T10271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.944142][T10271] rtnetlink_rcv+0x1c/0x30 [ 252.944163][T10271] netlink_unicast+0x5c0/0x690 [ 252.944230][T10271] netlink_sendmsg+0x5c8/0x6f0 [ 252.944254][T10271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.944298][T10271] ____sys_sendmsg+0x563/0x5b0 [ 252.944325][T10271] ___sys_sendmsg+0x195/0x1e0 [ 252.944351][T10271] __x64_sys_sendmsg+0xd4/0x160 [ 252.944420][T10271] x64_sys_call+0x194c/0x3020 [ 252.944448][T10271] do_syscall_64+0x12c/0x370 [ 252.944476][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.944503][T10271] RIP: 0033:0x7f27ebccc819 [ 252.944520][T10271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.944538][T10271] RSP: 002b:00007f27ea71f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.944560][T10271] RAX: ffffffffffffffda RBX: 00007f27ebf45fa0 RCX: 00007f27ebccc819 [ 252.944576][T10271] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 252.944645][T10271] RBP: 00007f27ea71f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.944657][T10271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.944749][T10271] R13: 00007f27ebf46038 R14: 00007f27ebf45fa0 R15: 00007fff30c1cad8 [ 252.944766][T10271] [ 252.951499][ T6210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.456380][ T269] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.479295][ T269] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.495125][T10276] loop3: detected capacity change from 0 to 512 [ 253.510125][ T269] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.540807][ T269] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.646105][T10292] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 253.697143][T10276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.729297][T10291] loop8: detected capacity change from 0 to 512 [ 253.751868][T10276] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.920251][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.023098][T10303] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.063842][T10310] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1816'. [ 254.129218][T10308] loop3: detected capacity change from 0 to 512 [ 254.216008][T10308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.242292][T10308] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.262723][T10325] loop8: detected capacity change from 0 to 512 [ 254.280100][T10325] EXT4-fs: Ignoring removed nobh option [ 254.291073][T10325] ext4: Bad value for 'max_batch_time' [ 254.305671][T10327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.793045][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.915375][T10343] FAULT_INJECTION: forcing a failure. [ 254.915375][T10343] name failslab, interval 1, probability 0, space 0, times 0 [ 254.955383][T10343] CPU: 1 UID: 0 PID: 10343 Comm: syz.3.1828 Not tainted syzkaller #0 PREEMPT(full) [ 254.955413][T10343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 254.955423][T10343] Call Trace: [ 254.955430][T10343] [ 254.955445][T10343] __dump_stack+0x1d/0x30 [ 254.955474][T10343] dump_stack_lvl+0x95/0xd0 [ 254.955550][T10343] dump_stack+0x15/0x1b [ 254.955620][T10343] should_fail_ex+0x263/0x280 [ 254.955648][T10343] should_failslab+0x8c/0xb0 [ 254.955668][T10343] kmem_cache_alloc_noprof+0x66/0x400 [ 254.955688][T10343] ? do_getname+0x2e/0x1c0 [ 254.955731][T10343] do_getname+0x2e/0x1c0 [ 254.955755][T10343] getname_flags+0x1d/0x30 [ 254.955852][T10343] do_sys_openat2+0x60/0x130 [ 254.955878][T10343] __x64_sys_openat+0xf2/0x120 [ 254.955916][T10343] x64_sys_call+0x1e39/0x3020 [ 254.955963][T10343] do_syscall_64+0x12c/0x370 [ 254.955989][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.956023][T10343] RIP: 0033:0x7f27ebccc819 [ 254.956040][T10343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.956060][T10343] RSP: 002b:00007f27ea71f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 254.956081][T10343] RAX: ffffffffffffffda RBX: 00007f27ebf45fa0 RCX: 00007f27ebccc819 [ 254.956093][T10343] RDX: 0000000000000802 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 254.956129][T10343] RBP: 00007f27ea71f090 R08: 0000000000000000 R09: 0000000000000000 [ 254.956142][T10343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.956154][T10343] R13: 00007f27ebf46038 R14: 00007f27ebf45fa0 R15: 00007fff30c1cad8 [ 254.956170][T10343] [ 255.224830][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 255.224845][ T28] audit: type=1400 audit(1775626276.916:15641): avc: denied { read write } for pid=10350 comm="syz.2.1830" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 255.290869][ T28] audit: type=1400 audit(1775626276.916:15642): avc: denied { open } for pid=10350 comm="syz.2.1830" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 255.526754][T10364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.681200][ T28] audit: type=1400 audit(1775626277.206:15643): avc: denied { wake_alarm } for pid=10355 comm="syz.9.1833" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 255.721954][T10364] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.922320][ T9559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.330766][T10411] set_capacity_and_notify: 2 callbacks suppressed [ 256.345259][T10411] loop2: detected capacity change from 0 to 512 [ 256.389778][T10411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.406768][T10411] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.511088][ T9559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.537588][ T28] audit: type=1400 audit(1775626278.236:15644): avc: denied { write } for pid=10416 comm="syz.2.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 256.560598][T10417] netlink: 'syz.2.1850': attribute type 18 has an invalid length. [ 256.569991][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 256.890487][T10429] FAULT_INJECTION: forcing a failure. [ 256.890487][T10429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.890587][T10429] CPU: 0 UID: 0 PID: 10429 Comm: syz.7.1854 Not tainted syzkaller #0 PREEMPT(full) [ 256.890612][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.890625][T10429] Call Trace: [ 256.890633][T10429] [ 256.890640][T10429] __dump_stack+0x1d/0x30 [ 256.890731][T10429] dump_stack_lvl+0x95/0xd0 [ 256.890781][T10429] dump_stack+0x15/0x1b [ 256.890877][T10429] should_fail_ex+0x263/0x280 [ 256.890911][T10429] should_fail+0xb/0x20 [ 256.891002][T10429] should_fail_usercopy+0x1a/0x20 [ 256.891049][T10429] _copy_to_user+0x20/0xa0 [ 256.891082][T10429] simple_read_from_buffer+0xb5/0x130 [ 256.891139][T10429] proc_fail_nth_read+0x10e/0x150 [ 256.891171][T10429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.891201][T10429] vfs_read+0x1ab/0x7f0 [ 256.891221][T10429] ? __rcu_read_unlock+0x4e/0x70 [ 256.891348][T10429] ? __fget_files+0x184/0x1c0 [ 256.891373][T10429] ? __rcu_read_unlock+0x4e/0x70 [ 256.891397][T10429] ? mutex_lock+0x57/0x90 [ 256.891494][T10429] ksys_read+0xdc/0x1a0 [ 256.891530][T10429] __x64_sys_read+0x40/0x50 [ 256.891607][T10429] x64_sys_call+0x2886/0x3020 [ 256.891635][T10429] do_syscall_64+0x12c/0x370 [ 256.891664][T10429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.891683][T10429] RIP: 0033:0x7fd32842d04e [ 256.891699][T10429] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 256.891756][T10429] RSP: 002b:00007fd326ec6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.891777][T10429] RAX: ffffffffffffffda RBX: 00007fd326ec76c0 RCX: 00007fd32842d04e [ 256.891826][T10429] RDX: 000000000000000f RSI: 00007fd326ec70a0 RDI: 0000000000000004 [ 256.891841][T10429] RBP: 00007fd326ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 256.891873][T10429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.891886][T10429] R13: 00007fd3286e6038 R14: 00007fd3286e5fa0 R15: 00007ffd7ced3a58 [ 256.891906][T10429] [ 256.955578][ T28] audit: type=1400 audit(1775626278.656:15645): avc: denied { name_bind } for pid=10433 comm="syz.7.1856" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 257.002289][T10440] loop7: detected capacity change from 0 to 1024 [ 257.244751][T10444] loop9: detected capacity change from 0 to 512 [ 257.309648][T10444] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.327080][T10440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 257.342541][T10444] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.358813][T10440] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.374299][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1858'. [ 257.389645][ T28] audit: type=1400 audit(1775626279.086:15646): avc: denied { ioctl } for pid=10438 comm="syz.7.1858" path="/220/file1/file1" dev="loop7" ino=15 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 257.403525][T10440] EXT4-fs error (device loop7): ext4_free_blocks:6724: comm syz.7.1858: Freeing blocks not in datazone - block = 0, count = 16 [ 257.480305][ T6210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 257.485600][ T8074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.620457][T10467] loop2: detected capacity change from 0 to 128 [ 257.635128][T10467] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.635251][T10467] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.720774][ T28] audit: type=1400 audit(1775626279.416:15647): avc: denied { create } for pid=10469 comm="syz.7.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.724485][ T28] audit: type=1400 audit(1775626279.426:15648): avc: denied { connect } for pid=10469 comm="syz.7.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.833417][ T28] audit: type=1400 audit(1775626279.476:15649): avc: denied { ioctl } for pid=10469 comm="syz.7.1868" path="pid:[4026533516]" dev="nsfs" ino=4026533516 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 257.899409][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1869'. [ 257.916215][ T28] audit: type=1400 audit(1775626279.616:15650): avc: denied { listen } for pid=10478 comm="syz.7.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.047169][T10487] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1869'. [ 258.352992][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1872'. [ 258.384619][T10513] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1872'. [ 258.422372][T10516] loop3: detected capacity change from 0 to 256 [ 258.472659][T10516] FAT-fs (loop3): Directory bread(block 64) failed [ 258.480298][T10516] FAT-fs (loop3): Directory bread(block 65) failed [ 258.504427][T10516] FAT-fs (loop3): Directory bread(block 66) failed [ 258.505759][T10518] loop9: detected capacity change from 0 to 512 [ 258.524624][T10516] FAT-fs (loop3): Directory bread(block 67) failed [ 258.540693][T10516] FAT-fs (loop3): Directory bread(block 68) failed [ 258.550337][T10516] FAT-fs (loop3): Directory bread(block 69) failed [ 258.569235][T10518] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.577909][T10516] FAT-fs (loop3): Directory bread(block 70) failed [ 258.603513][T10516] FAT-fs (loop3): Directory bread(block 71) failed [ 258.612913][T10516] FAT-fs (loop3): Directory bread(block 72) failed [ 258.620340][T10516] FAT-fs (loop3): Directory bread(block 73) failed [ 258.621861][T10518] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.792432][ T8074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.877053][T10535] loop7: detected capacity change from 0 to 1024 [ 258.897566][T10516] netlink: 'syz.3.1873': attribute type 13 has an invalid length. [ 258.927038][T10535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 258.928593][T10516] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 258.964380][T10535] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.983355][T10535] EXT4-fs error (device loop7): ext4_map_blocks:828: inode #15: comm syz.7.1879: lblock 0 mapped to illegal pblock 0 (length 1) [ 259.038963][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1880'. [ 259.062983][T10535] EXT4-fs (loop7): Remounting filesystem read-only [ 259.166577][ T6210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 259.201456][T10547] loop9: detected capacity change from 0 to 512 [ 259.213230][T10549] usb usb7: check_ctrlrecip: process 10549 (syz.8.1884) requesting ep 01 but needs 81 [ 259.224808][T10549] usb usb7: usbfs: process 10549 (syz.8.1884) did not claim interface 0 before use [ 259.248341][T10547] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.325509][T10560] FAULT_INJECTION: forcing a failure. [ 259.325509][T10560] name failslab, interval 1, probability 0, space 0, times 0 [ 259.356504][T10547] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 259.372508][T10560] CPU: 0 UID: 0 PID: 10560 Comm: syz.7.1883 Not tainted syzkaller #0 PREEMPT(full) [ 259.372531][T10560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 259.372567][T10560] Call Trace: [ 259.372575][T10560] [ 259.372584][T10560] __dump_stack+0x1d/0x30 [ 259.372611][T10560] dump_stack_lvl+0x95/0xd0 [ 259.372667][T10560] dump_stack+0x15/0x1b [ 259.372688][T10560] should_fail_ex+0x263/0x280 [ 259.372758][T10560] ? allocate_file_region_entries+0xdd/0x310 [ 259.372862][T10560] should_failslab+0x8c/0xb0 [ 259.372882][T10560] __kmalloc_cache_noprof+0x5f/0x410 [ 259.372903][T10560] ? workingset_update_node+0x11c/0x150 [ 259.373143][T10560] allocate_file_region_entries+0xdd/0x310 [ 259.373168][T10560] __vma_reservation_common+0x40c/0x4e0 [ 259.373191][T10560] alloc_hugetlb_folio+0x24d/0xef0 [ 259.373226][T10560] hugetlb_no_page+0x504/0xf50 [ 259.373289][T10560] ? huge_pte_alloc+0x2cc/0x490 [ 259.373333][T10560] hugetlb_fault+0x555/0xe00 [ 259.373366][T10560] handle_mm_fault+0x1bf6/0x3020 [ 259.373395][T10560] ? __rcu_read_unlock+0x4e/0x70 [ 259.373418][T10560] ? try_grab_folio+0x75/0x170 [ 259.373454][T10560] ? down_read+0x76/0xb0 [ 259.373475][T10560] __get_user_pages+0x1023/0x1ea0 [ 259.373508][T10560] __mm_populate+0x242/0x390 [ 259.373567][T10560] vm_mmap_pgoff+0x23b/0x2d0 [ 259.373592][T10560] ksys_mmap_pgoff+0x2cf/0x310 [ 259.373618][T10560] x64_sys_call+0x14df/0x3020 [ 259.373657][T10560] do_syscall_64+0x12c/0x370 [ 259.373730][T10560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.373750][T10560] RIP: 0033:0x7fd32846c819 [ 259.373765][T10560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.373780][T10560] RSP: 002b:00007fd326ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 259.373800][T10560] RAX: ffffffffffffffda RBX: 00007fd3286e5fa0 RCX: 00007fd32846c819 [ 259.373813][T10560] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 259.373833][T10560] RBP: 00007fd326ec7090 R08: ffffffffffffffff R09: 0000000000200000 [ 259.373909][T10560] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000002 [ 259.373922][T10560] R13: 00007fd3286e6038 R14: 00007fd3286e5fa0 R15: 00007ffd7ced3a58 [ 259.373938][T10560] [ 259.378427][T10547] EXT4-fs error (device loop9): ext4_acquire_dquot:7026: comm syz.9.1882: Failed to acquire dquot type 1 [ 259.390468][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 259.401500][T10547] loop9: lost filesystem error report for type 5 error -28 [ 259.404602][ C1] EXT4-fs (loop9): initial error at time 1775626281: ext4_mb_generate_buddy:1317 [ 259.404631][ C1] EXT4-fs (loop9): last error at time 1775626281: ext4_mb_generate_buddy:1317 [ 259.421529][T10547] EXT4-fs (loop9): 1 truncate cleaned up [ 259.422993][ C1] [ 259.430737][T10547] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.724802][ T8074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.818743][T10573] loop9: detected capacity change from 0 to 512 [ 259.868552][T10573] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.892703][T10573] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.957030][T10580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1891'. [ 259.970993][T10580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=10580 comm=syz.3.1891 [ 259.986950][T10580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1891'. [ 260.053122][T10584] loop3: detected capacity change from 0 to 512 [ 260.063600][ T8074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.086171][T10584] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 260.100122][T10584] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.1893: corrupted in-inode xattr: e_value size too large [ 260.120112][T10584] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 260.120400][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 260.140406][ C1] EXT4-fs (loop3): initial error at time 1775626281: ext4_iget_extra_inode:5040: inode 15 [ 260.151123][ C1] EXT4-fs (loop3): last error at time 1775626281: ext4_iget_extra_inode:5040: inode 15 [ 260.164795][T10584] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1893: couldn't read orphan inode 15 (err -117) [ 260.190503][T10584] loop3: lost filesystem error report for type 5 error -117 [ 260.191169][T10584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.326026][T10584] EXT4-fs error (device loop3): ext4_check_dx_root:2201: inode #2: comm syz.3.1893: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 260.362613][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.568837][T10595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.623613][T10595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.642012][T10595] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.801534][ T9559] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.217802][ T6210] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.246936][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 261.264119][T10612] tipc: Started in network mode [ 261.278315][T10614] FAULT_INJECTION: forcing a failure. [ 261.278315][T10614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.307079][T10612] tipc: Node identity 4, cluster identity 4711 [ 261.332133][T10612] tipc: Node number set to 4 [ 261.335284][T10618] set_capacity_and_notify: 1 callbacks suppressed [ 261.335303][T10618] loop8: detected capacity change from 0 to 512 [ 261.356536][T10619] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 261.367459][T10614] CPU: 1 UID: 0 PID: 10614 Comm: syz.2.1898 Not tainted syzkaller #0 PREEMPT(full) [ 261.367487][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 261.367498][T10614] Call Trace: [ 261.367505][T10614] [ 261.367574][T10614] __dump_stack+0x1d/0x30 [ 261.367598][T10614] dump_stack_lvl+0x95/0xd0 [ 261.367668][T10614] dump_stack+0x15/0x1b [ 261.367757][T10614] should_fail_ex+0x263/0x280 [ 261.367782][T10614] should_fail+0xb/0x20 [ 261.367878][T10614] should_fail_usercopy+0x1a/0x20 [ 261.367955][T10614] _copy_to_iter+0xd2/0xea0 [ 261.368016][T10614] ? chacha_block_generic+0x2dc/0x310 [ 261.368155][T10614] get_random_bytes_user+0x138/0x2b0 [ 261.368175][T10614] ? vfs_write+0x86e/0x9f0 [ 261.368196][T10614] ? import_ubuf+0xe8/0x120 [ 261.368215][T10614] __x64_sys_getrandom+0xcf/0x1a0 [ 261.368263][T10614] x64_sys_call+0x2a28/0x3020 [ 261.368290][T10614] do_syscall_64+0x12c/0x370 [ 261.368319][T10614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.368371][T10614] RIP: 0033:0x7f49bdc6c819 [ 261.368387][T10614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.368412][T10614] RSP: 002b:00007f49bc6c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 261.368460][T10614] RAX: ffffffffffffffda RBX: 00007f49bdee5fa0 RCX: 00007f49bdc6c819 [ 261.368472][T10614] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 261.368484][T10614] RBP: 00007f49bc6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 261.368495][T10614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.368509][T10614] R13: 00007f49bdee6038 R14: 00007f49bdee5fa0 R15: 00007ffe7280a368 [ 261.368565][T10614] [ 261.400119][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 261.400133][ T28] audit: type=1400 audit(1775626283.096:15658): avc: denied { create } for pid=10610 comm="syz.3.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 261.462175][T10619] bond2 (unregistering): Released all slaves [ 261.483782][T10618] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.580252][ T28] audit: type=1400 audit(1775626283.186:15659): avc: denied { block_suspend } for pid=10610 comm="syz.3.1897" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.594027][T10618] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.720789][ T6930] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.737824][ T28] audit: type=1400 audit(1775626283.436:15660): avc: denied { create } for pid=10636 comm="syz.2.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 261.805609][T10639] usb usb7: usbfs: process 10639 (syz.8.1908) did not claim interface 0 before use [ 261.877074][ T28] audit: type=1400 audit(1775626283.466:15661): avc: denied { write } for pid=10636 comm="syz.2.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 261.921950][T10642] loop8: detected capacity change from 0 to 512 [ 261.932584][T10642] ext3: Unknown parameter 'pcr' [ 261.973100][T10642] netlink: 'syz.8.1909': attribute type 1 has an invalid length. [ 261.982471][T10642] netlink: 'syz.8.1909': attribute type 4 has an invalid length. [ 261.991528][T10642] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1909'. [ 262.070860][T10643] loop2: detected capacity change from 0 to 512 [ 262.678031][T10657] loop9: detected capacity change from 0 to 2048 [ 262.699817][T10660] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1915'. [ 262.817073][T10643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.832303][T10643] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.917247][T10657] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.134736][T10657] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.197271][T10670] @0: renamed from bond_slave_1 [ 263.206645][ T8327] IPVS: starting estimator thread 0... [ 263.223456][ T28] audit: type=1400 audit(1775626284.927:15662): avc: denied { mount } for pid=10669 comm="syz.3.1917" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 263.250666][T10670] __nla_validate_parse: 3 callbacks suppressed [ 263.250684][T10670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1917'. [ 263.330925][T10671] IPVS: using max 2352 ests per chain, 117600 per kthread [ 263.389051][T10673] loop3: detected capacity change from 0 to 512 [ 263.432923][T10673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.470404][T10677] loop7: detected capacity change from 0 to 128 [ 263.499573][T10673] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.515029][T10677] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 263.561724][T10677] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.591913][ T28] audit: type=1400 audit(1775626285.287:15663): avc: denied { create } for pid=10678 comm="syz.8.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 263.640417][T10677] ext2 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.661563][ T9559] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.684991][ T28] audit: type=1400 audit(1775626285.327:15664): avc: denied { ioctl } for pid=10678 comm="syz.8.1920" path="socket:[29291]" dev="sockfs" ino=29291 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 263.713195][ T28] audit: type=1400 audit(1775626285.327:15665): avc: denied { bind } for pid=10678 comm="syz.8.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 263.751894][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.754835][T10684] loop8: detected capacity change from 0 to 512 [ 263.783495][T10684] EXT4-fs: inline encryption not supported [ 263.796548][T10684] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 263.809310][ T28] audit: type=1400 audit(1775626285.513:15666): avc: denied { mounton } for pid=10676 comm="syz.7.1919" path="/234/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 263.812955][T10657] loop5: detected capacity change from 0 to 7 [ 263.846178][T10686] program syz.2.1921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.864512][T10688] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 263.894639][T10657] Buffer I/O error on dev loop5, logical block 0, async page read [ 263.903728][T10657] Buffer I/O error on dev loop5, logical block 0, async page read [ 263.915569][T10657] loop5: unable to read partition table [ 263.923107][T10657] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 263.923646][ T6210] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.949857][ T8111] Buffer I/O error on dev loop5, logical block 0, async page read [ 263.962339][ T8111] Buffer I/O error on dev loop5, logical block 0, async page read [ 263.972104][ T8111] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.009602][ T8111] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.018084][ T8111] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.266643][ T28] audit: type=1400 audit(1775626285.943:15667): avc: denied { connect } for pid=10700 comm="syz.8.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 264.319176][T10712] loop7: detected capacity change from 0 to 4096 [ 264.327175][T10712] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.363485][T10712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.379736][T10712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.452852][T10706] netlink: 'syz.7.1930': attribute type 5 has an invalid length. [ 264.487194][T10719] loop3: detected capacity change from 0 to 512 [ 264.529004][T10719] ------------[ cut here ]------------ [ 264.535531][T10719] EA inode 11 i_nlink=2 [ 264.535625][T10719] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.1932/10719 [ 264.551955][T10719] Modules linked in: [ 264.556224][T10719] CPU: 1 UID: 0 PID: 10719 Comm: syz.3.1932 Not tainted syzkaller #0 PREEMPT(full) [ 264.566837][T10719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 264.577806][T10719] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 264.586004][T10719] Code: 54 33 99 ff 4c 8d 2d 9d a5 5d 05 49 8d 7e 40 e8 94 cc b5 ff 49 8b 6e 40 4c 89 e7 e8 c8 c7 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f e8 dd 03 66 66 66 66 66 66 2e [ 264.611767][T10719] RSP: 0018:ffffc90002607778 EFLAGS: 00010246 [ 264.615573][T10725] program syz.7.1934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.619666][T10719] RAX: ffff888112050ac8 RBX: ffff8881069bc1a8 RCX: ffffffff81c02778 [ 264.638518][T10719] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 264.647497][T10719] RBP: 000000000000000b R08: 00018881069bc15b R09: 0000000000000000 [ 264.655923][T10719] R10: ffffc900026076a8 R11: 0001c900026076a8 R12: ffff8881069bc158 [ 264.665147][T10719] R13: ffffffff871dcd00 R14: ffff8881069bc110 R15: 0000000000000001 [ 264.674768][T10719] FS: 00007f27ea6fe6c0(0000) GS:ffff8882ae9d7000(0000) knlGS:0000000000000000 [ 264.692036][T10719] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.701915][T10719] CR2: 0000000034747865 CR3: 00000001060c0000 CR4: 00000000003506f0 [ 264.711045][T10719] DR0: 00000000000003ff DR1: 0000000000000000 DR2: 0000000000000000 [ 264.720117][T10719] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 264.728928][T10719] Call Trace: [ 264.733206][T10719] [ 264.736592][T10719] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 264.749555][T10719] ? errseq_check+0x2c/0x50 [ 264.755592][T10719] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 264.761953][T10719] ? ext4_truncate+0x92b/0xb00 [ 264.768147][T10719] ext4_evict_inode+0xac1/0xe40 [ 264.774321][T10719] ? __pfx_ext4_evict_inode+0x10/0x10 [ 264.781197][T10719] evict+0x2af/0x510 [ 264.785615][T10719] ? __dquot_initialize+0x146/0x7c0 [ 264.791410][T10719] iput+0x41a/0x580 [ 264.795697][T10719] ext4_process_orphan+0x1a9/0x1c0 [ 264.801177][T10719] ext4_orphan_cleanup+0x6a8/0xa00 [ 264.806884][T10719] ext4_fill_super+0x3414/0x37c0 [ 264.812745][T10719] ? __pfx_ext4_fill_super+0x10/0x10 [ 264.818834][T10719] ? __pfx_ext4_fill_super+0x10/0x10 [ 264.825587][T10719] get_tree_bdev_flags+0x291/0x300 [ 264.831807][T10719] ? __pfx_ext4_fill_super+0x10/0x10 [ 264.838287][T10719] get_tree_bdev+0x1f/0x30 [ 264.843907][T10719] ext4_get_tree+0x1c/0x30 [ 264.849104][T10719] vfs_get_tree+0x57/0x1d0 [ 264.854307][T10719] do_new_mount+0x288/0x8d0 [ 264.859436][T10719] path_mount+0x4d0/0xbc0 [ 264.864694][T10719] __se_sys_mount+0x28c/0x2e0 [ 264.870846][T10719] __x64_sys_mount+0x67/0x80 [ 264.878501][T10719] x64_sys_call+0x2d61/0x3020 [ 264.884694][T10719] do_syscall_64+0x12c/0x370 [ 264.889875][T10719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.896806][T10719] RIP: 0033:0x7f27ebccda8a [ 264.902567][T10719] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.925063][T10719] RSP: 002b:00007f27ea6fde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 264.934216][T10719] RAX: ffffffffffffffda RBX: 00007f27ea6fdee0 RCX: 00007f27ebccda8a [ 264.942626][T10719] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f27ea6fdea0 [ 264.951226][T10719] RBP: 00002000000009c0 R08: 00007f27ea6fdee0 R09: 0000000000800718 [ 264.959874][T10719] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 264.969022][T10719] R13: 00007f27ea6fdea0 R14: 000000000000048d R15: 0000200000000200 [ 264.978342][T10719] [ 264.983048][T10719] ---[ end trace 0000000000000000 ]--- [ 264.993340][T10719] EXT4-fs (loop3): 1 orphan inode deleted [ 265.003920][T10719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.141804][T10748] syzkaller1: entered promiscuous mode [ 265.147942][T10748] syzkaller1: entered allmulticast mode [ 265.256357][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.271274][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.326958][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.338557][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.373279][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.384880][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.423267][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.434205][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.510200][ T82] bridge_slave_1: left allmulticast mode [ 265.516108][ T82] bridge_slave_1: left promiscuous mode [ 265.522201][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.530418][ T82] bridge_slave_0: left allmulticast mode [ 265.536183][ T82] bridge_slave_0: left promiscuous mode [ 265.542241][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.632489][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.647593][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.658595][ T82] bond0 (unregistering): Released all slaves [ 265.697450][T10754] chnl_net:caif_netlink_parms(): no params data found [ 265.768154][T10754] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.776140][T10754] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.784952][T10754] bridge_slave_0: entered allmulticast mode [ 265.792761][T10754] bridge_slave_0: entered promiscuous mode [ 265.801666][T10754] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.809458][T10754] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.817654][T10754] bridge_slave_1: entered allmulticast mode [ 265.825810][T10754] bridge_slave_1: entered promiscuous mode [ 265.899394][ T82] hsr_slave_0: left promiscuous mode [ 265.921524][ T82] hsr_slave_1: left promiscuous mode [ 265.928019][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.946233][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.956116][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.956133][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.962630][ T82] veth1_macvtap: left promiscuous mode [ 265.962660][ T82] veth0_macvtap: left promiscuous mode [ 265.962751][ T82] veth1_vlan: left promiscuous mode [ 265.962856][ T82] veth0_vlan: left promiscuous mode [ 266.004614][T10792] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1953'. [ 266.133199][T10802] random: crng reseeded on system resumption [ 266.135838][ T50] smc: removing ib device !yz2 [ 266.138808][ T82] team0 (unregistering): Port device team_slave_1 removed [ 266.145956][ T82] team0 (unregistering): Port device team_slave_0 removed [ 266.210488][T10754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.252716][T10754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.252858][ T1037] !yz2: Port: 1 Link DOWN [ 266.316174][T10754] team0: Port device team_slave_0 added [ 266.328164][T10754] team0: Port device team_slave_1 added [ 266.346259][T10804] loop9: detected capacity change from 0 to 2048 [ 266.380840][T10804] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.490570][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 266.490594][ T28] audit: type=1400 audit(1775626288.183:15673): avc: denied { read write } for pid=10803 comm="syz.9.1955" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 266.495697][ T28] audit: type=1400 audit(1775626288.193:15674): avc: denied { open } for pid=10803 comm="syz.9.1955" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 266.499839][ T28] audit: type=1400 audit(1775626288.193:15675): avc: denied { ioctl } for pid=10803 comm="syz.9.1955" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 266.514584][T10754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.514648][T10754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.514670][T10754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.516111][T10754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.516122][T10754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.516191][T10754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.618382][T10754] hsr_slave_0: entered promiscuous mode [ 266.621513][T10754] hsr_slave_1: entered promiscuous mode [ 266.623215][T10754] debugfs: 'hsr0' already exists in 'hsr' [ 266.623229][T10754] Cannot create hsr debugfs directory [ 266.978164][ T82] IPVS: stop unused estimator thread 0... [ 267.000841][T10804] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1955: bg 0: block 234: padding at end of block bitmap is not set [ 267.055917][ T28] audit: type=1400 audit(1775626288.753:15676): avc: denied { map } for pid=10803 comm="syz.9.1955" path="/141/file0/blkio.bfq.group_wait_time" dev="loop9" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 267.063502][T10804] EXT4-fs (loop9): Delayed block allocation failed for inode 20 at logical offset 0 with max blocks 3 with error 28 [ 267.096518][T10804] EXT4-fs (loop9): This should not happen!! Data will be lost [ 267.096518][T10804] [ 267.108342][T10804] EXT4-fs (loop9): Total free blocks count 0 [ 267.115273][T10804] EXT4-fs (loop9): Free/Dirty block details [ 267.122321][T10804] EXT4-fs (loop9): free_blocks=0 [ 267.128191][T10804] EXT4-fs (loop9): dirty_blocks=16 [ 267.134431][T10804] EXT4-fs (loop9): Block reservation details [ 267.143945][T10825] ================================================================== [ 267.143962][T10804] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 267.153093][T10825] BUG: KCSAN: data-race in copy_mm / percpu_counter_destroy_many [ 267.153125][T10825] [ 267.153131][T10825] write to 0xffff8881034e8be8 of 8 bytes by task 10804 on cpu 0: [ 267.153148][T10825] percpu_counter_destroy_many+0xc7/0x2b0 [ 267.153174][T10825] __mmdrop+0x25d/0x3f0 [ 267.153189][T10825] finish_task_switch+0x184/0x280 [ 267.153208][T10825] __schedule+0x93c/0xd40 [ 267.153236][T10825] preempt_schedule_common+0x11/0x30 [ 267.153264][T10825] preempt_schedule_thunk+0x16/0x30 [ 267.153293][T10825] vprintk_emit+0x5cb/0x600 [ 267.153309][T10825] vprintk_default+0x26/0x30 [ 267.153329][T10825] vprintk+0x1d/0x30 [ 267.153352][T10825] _printk+0x79/0xa0 [ 267.230985][T10825] __ext4_msg+0x1aa/0x1c0 [ 267.231008][T10825] ext4_do_writepages+0x1ed1/0x2840 [ 267.231024][T10825] ext4_writepages+0x18f/0x320 [ 267.231042][T10825] do_writepages+0x1c6/0x310 [ 267.231065][T10825] file_write_and_wait_range+0x178/0x2f0 [ 267.231082][T10825] generic_buffers_fsync_noflush+0x45/0x130 [ 267.231103][T10825] ext4_sync_file+0x1e4/0x710 [ 267.231120][T10825] vfs_fsync_range+0xc5/0xe0 [ 267.231138][T10825] ext4_buffered_write_iter+0x34f/0x3c0 [ 267.231154][T10825] ext4_file_write_iter+0x380/0xfa0 [ 267.231169][T10825] vfs_write+0x5a6/0x9f0 [ 267.231183][T10825] ksys_write+0xdc/0x1a0 [ 267.231196][T10825] __x64_sys_write+0x40/0x50 [ 267.231210][T10825] x64_sys_call+0x27e1/0x3020 [ 267.231231][T10825] do_syscall_64+0x12c/0x370 [ 267.231251][T10825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.231272][T10825] [ 267.231278][T10825] read to 0xffff8881034e86c0 of 1664 bytes by task 10825 on cpu 1: [ 267.231293][T10825] copy_mm+0xe1/0x370 [ 267.231310][T10825] copy_process+0xe22/0x20b0 [ 267.231326][T10825] kernel_clone+0x16b/0x5d0 [ 267.231344][T10825] __x64_sys_clone+0x143/0x180 [ 267.231364][T10825] x64_sys_call+0x1222/0x3020 [ 267.231384][T10825] do_syscall_64+0x12c/0x370 [ 267.231403][T10825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.231419][T10825] [ 267.231422][T10825] Reported by Kernel Concurrency Sanitizer on: [ 267.231434][T10825] CPU: 1 UID: 0 PID: 10825 Comm: dhcpcd-run-hook Tainted: G W syzkaller #0 PREEMPT(full) [ 267.231458][T10825] Tainted: [W]=WARN [ 267.231464][T10825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.231473][T10825] ================================================================== [ 267.320520][T10754] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.328634][T10754] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.479883][T10754] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.494852][T10754] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.514896][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.548159][ T8074] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #20: comm syz-executor: data will be lost [ 267.572005][ T8074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.621046][T10754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.634868][T10754] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.651176][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.658950][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.668644][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.676058][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.755398][T10754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.840394][T10754] veth0_vlan: entered promiscuous mode [ 267.848917][T10754] veth1_vlan: entered promiscuous mode [ 267.869311][T10754] veth0_macvtap: entered promiscuous mode [ 267.878388][T10754] veth1_macvtap: entered promiscuous mode [ 267.891517][T10754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.904670][T10754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.922947][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.933179][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.947243][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.957053][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0